Event ID: 1418 Operations Manager SDK service threw an exception

Hi
Today we have received the below event in application event viewer. I have checked connector service working without any issues.
We are using SCOM R2 with CU2 and we are using universal connector
Event Type:    Error
Event Source:    OpsMgr Universal Connector
Event Category:    None
Event ID:    1418
Date:        6/14/2012
Time:        5:09:58 AM
User:        N/A
Computer:    INDRMS1
Description:
2012-06-14 05:09:58.283 [Microsoft.SystemCenter.Interop.Framework.Modules.OpsMgrModule] ERROR Error 1:\nFailure message: Request to update alert ignored due to invalid TimeModified\n0cc6a0f1-08cc-4a44-9c2f-7461c97c9fbd\nMicrosoft.EnterpriseManagement.Common.ConcurrentUpdateException:
Request to update alert ignored due to invalid TimeModified ---> Request to update alert ignored due to invalid TimeModified
   --- End of inner exception stack trace ---\n\n
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp
Help us to understand/troubleshoot on this issue.
Donald D'souza (http://donald-scom.blogspot.com/)

Hi,
Please check if you have applied the following update:
Systems Center Operations Manager 2007 R2 Connectors Cumulative Update 2
http://support.microsoft.com/kb/2274165
If the issue persists, please also check the Event Log on the server and see if there are any related errors.
I also noticed you were using SCOM 2007 R2 Cu2, please try CU6:
OpsMgr 2007 R2 CU6 rollup hotfix ships – and my experience installing it
http://blogs.technet.com/b/kevinholman/archive/2012/05/18/opsmgr-2007-r2-cu6-rollup-hotfix-ships-and-my-experience-installing-it.aspx
Hope this helps.
Thanks.
Nicholas Li
TechNet Community Support

Similar Messages

  • Cisco Operation Manager and Service Monitor on Separate Machine?

    Hi,
       Can we install Cisco Unified Operation Manager and Server monitor on separate machines?
      What will be the procedure to do so?

    Yes You can install Service Monitor in a stand alone server. For Service Monitor to coreside on a system with other applications in the Cisco Prime Unified Communications Management Suite, see the coresidence requirements in
    Installation Guide for Cisco Prime Unified Operations Manager 9.0.
    Also you can check Coresidence Guidelines and Coexistence Guidelines.
    Here you can see the server requirements for a coexistent installation of Service Monitor:
    http://www.cisco.com/en/US/docs/net_mgmt/prime/unified_service_monitor/9.0/install/guide/prereq.html#wp1080694
    -Thanks

  • Event viewer : The type initializer for 'advancedsetttings' threw an exception

    I am recieving a " The type initializer for 'advancedsetttings' threw an exception" error when i try to view subscriptions in event viewer.  The machine is a windows 2008r2 server.  It was working before but just stoped working. 
    I tried loging in as the local admin account on machine and that did not work.  It also does not work with an account that is a domain admin.  Has anyone else experienced this or know how to fix this issue?

    Hi,
    Based on my research, Event Subscriptions functionality depends on the Windows Remote Management (WinRM) service and the Windows Event Collector (Wecsvc) service, please make sure that
    both of these services are running on computers participating in the forwarding and collecting process.
    More information for you:
    Event Subscriptions
    http://technet.microsoft.com/en-us/library/cc749183.aspx
    Best Regards,
    Amy

  • Unified Operations Manager for Version 9.0 clear the events

    Please let me know the procedure to clear the events of the Operations Manager  9.0.

    Hello Anthony,
    Lets pick up the example of Standard LRG in Pre 10.0.
    As a use case we used "LRG" to route calls using Local gateway, preferebly.
    For Example:
    If administrator wish to create a route to a PSTN/CUCM B from particular site then he could simply have a Route list with Standard Local Route Group.
    If the administrator has to add another emergency route to CUCM C/PSTN then using Standard Local Route Group would not help and he would have to make site specific Route list and Route patterns.
    eg: 8.XXXX pattern would be used by device on site A to reach site E using RG_A_To_E
          7.XXXX Pattern would be used by device on site B to reach site E using RG_B_To_E
    With the Multiple LRG Enhancement in CUCM 10.0
    On the Device Pool page, We can choose to associate the Emergency Route with a route group or leave it blank.
    This will reduce the number of route list and route patters to be created.
    EX.
    Phone 3 calls Phone 5 via Route List “Route List to Site E”
    When Phone 3 (DP_C) calls Phone 5 using route pattern 8.XXXX
    Route list layer check that the first route group in the preference order is “Emergency Route Group (Local Route Group)”.
    It then checks the route group associated with “Emergency Route Group” on Device Pool DP_C.
    There is no Route group associated with “Emergency Route Group”.
    Hence the Route list layer would check of for next member in the route list And try routing the call via “RG_General”.
    **I hope this explains, if any doubts, please, let me know and we can have a quick call to discuss.
    Regards
    Amit Singh

  • OMServer.msi returns error 1603 when trying to upgrade first management server from Operations Manager 2012 SP1 to Operations Manager 2012 R2

    Hi All, looking for some assistance with the following issue.
    We are attempting to upgrade our Operations Manager 2012 SP1 environment to Operations Manager 2012 R2.
    We have completed all the pre-upgrade tasks detailed here
    http://technet.microsoft.com/en-us/library/dn249704.aspx
    We are then following the guidance detailed here regarding upgrading distributed management groups
    http://technet.microsoft.com/en-us/library/dn249721.aspx. The upgrade fails on the first management server with the following screen being displayed.
    OMServer.log file is as follows.
    === Verbose logging started: 22/01/2014 10:21:27 Build type: SHIP UNICODE 5.00.9200.00 Calling process: C:\Users\scomaction\AppData\Local\SCOM\Setup\SetupChainerUI.exe ===
    MSI (c) (78:34) [10:21:27:040]: Resetting cached policy values
    MSI (c) (78:34) [10:21:27:040]: Machine policy value 'Debug' is 0
    MSI (c) (78:34) [10:21:27:040]: ******* RunEngine:
    ******* Product: F:\InstallFiles\SCOMR2\Setup\AMD64\Server\OMServer.msi
    ******* Action:
    ******* CommandLine: **********
    MSI (c) (78:34) [10:21:27:040]: Client-side and UI is none or basic: Running entire install on the server.
    MSI (c) (78:34) [10:21:27:040]: Grabbed execution mutex.
    MSI (c) (78:34) [10:21:27:071]: Cloaking enabled.
    MSI (c) (78:34) [10:21:27:071]: Attempting to enable all disabled privileges before calling Install on Server
    MSI (c) (78:34) [10:21:27:071]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (D4:30) [10:21:27:082]: Running installation inside multi-package transaction F:\InstallFiles\SCOMR2\Setup\AMD64\Server\OMServer.msi
    MSI (s) (D4:30) [10:21:27:082]: Grabbed execution mutex.
    MSI (s) (D4:A0) [10:21:27:086]: Resetting cached policy values
    MSI (s) (D4:A0) [10:21:27:086]: Machine policy value 'Debug' is 0
    MSI (s) (D4:A0) [10:21:27:086]: ******* RunEngine:
    ******* Product: F:\InstallFiles\SCOMR2\Setup\AMD64\Server\OMServer.msi
    ******* Action:
    ******* CommandLine: **********
    MSI (s) (D4:A0) [10:21:27:175]: Machine policy value 'DisableUserInstalls' is 0
    MSI (s) (D4:A0) [10:21:27:181]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
    MSI (s) (D4:A0) [10:21:27:190]: SRSetRestorePoint skipped for this transaction.
    MSI (s) (D4:A0) [10:21:27:192]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
    MSI (s) (D4:A0) [10:21:27:200]: File will have security applied from OpCode.
    MSI (s) (D4:A0) [10:21:27:234]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'F:\InstallFiles\SCOMR2\Setup\AMD64\Server\OMServer.msi' against software restriction policy
    MSI (s) (D4:A0) [10:21:27:234]: SOFTWARE RESTRICTION POLICY: F:\InstallFiles\SCOMR2\Setup\AMD64\Server\OMServer.msi has a digital signature
    MSI (s) (D4:A0) [10:21:27:354]: SOFTWARE RESTRICTION POLICY: F:\InstallFiles\SCOMR2\Setup\AMD64\Server\OMServer.msi is permitted to run at the 'unrestricted' authorization level.
    MSI (s) (D4:A0) [10:21:27:354]: MSCOREE not loaded loading copy from system32
    MSI (s) (D4:A0) [10:21:27:360]: End dialog not enabled
    MSI (s) (D4:A0) [10:21:27:360]: Original package ==> F:\InstallFiles\SCOMR2\Setup\AMD64\Server\OMServer.msi
    MSI (s) (D4:A0) [10:21:27:360]: Package we're running from ==> C:\Windows\Installer\4b8344.msi
    MSI (s) (D4:A0) [10:21:27:371]: APPCOMPAT: Compatibility mode property overrides found.
    MSI (s) (D4:A0) [10:21:27:372]: APPCOMPAT: looking for appcompat database entry with ProductCode '{C92727BE-BD12-4140-96A6-276BA4F60AC1}'.
    MSI (s) (D4:A0) [10:21:27:372]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (D4:A0) [10:21:27:378]: Machine policy value 'TransformsSecure' is 1
    MSI (s) (D4:A0) [10:21:27:379]: Machine policy value 'DisablePatch' is 0
    MSI (s) (D4:A0) [10:21:27:379]: Machine policy value 'AllowLockdownPatch' is 0
    MSI (s) (D4:A0) [10:21:27:379]: Machine policy value 'DisableLUAPatching' is 0
    MSI (s) (D4:A0) [10:21:27:379]: Machine policy value 'DisableFlyWeightPatching' is 0
    MSI (s) (D4:A0) [10:21:27:380]: APPCOMPAT: looking for appcompat database entry with ProductCode '{C92727BE-BD12-4140-96A6-276BA4F60AC1}'.
    MSI (s) (D4:A0) [10:21:27:380]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (D4:A0) [10:21:27:380]: Transforms are not secure.
    MSI (s) (D4:A0) [10:21:27:380]: Note: 1: 2205 2: 3: Control
    MSI (s) (D4:A0) [10:21:27:380]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\scomaction\AppData\Local\SCOM\Logs\OMServer.log'.
    MSI (s) (D4:A0) [10:21:27:380]: Command Line: OM_INSTALLDIR=F:\Program Files\Microsoft System Center 2012 R2\Operations Manager SEND_CEIP_REPORTS=0 MU_SETTING=0 ROOT_MANAGEMENT_SERVER_PORT=5723 SC_DB_SERVER=SCOM-XXX-AG SCDATABASENAME=OperationsManager DW_DB_SERVER=SCOM-XXX-AG DWDATABASENAME=OperationsManagerDW REBOOT=ReallySuppress CURRENTDIRECTORY=C:\Users\scomaction\AppData\Local\SCOM\Setup CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=4472
    MSI (s) (D4:A0) [10:21:27:380]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{58EFE971-58C1-4DBD-A400-A7607A745475}'.
    MSI (s) (D4:A0) [10:21:27:380]: Product Code passed to Engine.Initialize: ''
    MSI (s) (D4:A0) [10:21:27:380]: Product Code from property table before transforms: '{C92727BE-BD12-4140-96A6-276BA4F60AC1}'
    MSI (s) (D4:A0) [10:21:27:380]: Product Code from property table after transforms: '{C92727BE-BD12-4140-96A6-276BA4F60AC1}'
    MSI (s) (D4:A0) [10:21:27:380]: Product not registered: beginning first-time install
    MSI (s) (D4:A0) [10:21:27:380]: Product {C92727BE-BD12-4140-96A6-276BA4F60AC1} is not managed.
    MSI (s) (D4:A0) [10:21:27:380]: MSI_LUA: Credential prompt not required, user is an admin
    MSI (s) (D4:A0) [10:21:27:381]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
    MSI (s) (D4:A0) [10:21:27:381]: Entering CMsiConfigurationManager::SetLastUsedSource.
    MSI (s) (D4:A0) [10:21:27:381]: User policy value 'SearchOrder' is 'nmu'
    MSI (s) (D4:A0) [10:21:27:381]: Adding new sources is allowed.
    MSI (s) (D4:A0) [10:21:27:381]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
    MSI (s) (D4:A0) [10:21:27:381]: Package name extracted from package path: 'OMServer.msi'
    MSI (s) (D4:A0) [10:21:27:381]: Package to be registered: 'OMServer.msi'
    MSI (s) (D4:A0) [10:21:27:383]: Note: 1: 2262 2: AdminProperties 3: -2147287038
    MSI (s) (D4:A0) [10:21:27:383]: Machine policy value 'DisableMsi' is 1
    MSI (s) (D4:A0) [10:21:27:383]: Machine policy value 'AlwaysInstallElevated' is 0
    MSI (s) (D4:A0) [10:21:27:383]: User policy value 'AlwaysInstallElevated' is 0
    MSI (s) (D4:A0) [10:21:27:383]: Product installation will be elevated because user is admin and product is being installed per-machine.
    MSI (s) (D4:A0) [10:21:27:383]: Running product '{C92727BE-BD12-4140-96A6-276BA4F60AC1}' with elevated privileges: Product is assigned.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding OM_INSTALLDIR property. Its value is 'F:\Program Files\Microsoft System Center 2012 R2\Operations Manager'.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding ROOT_MANAGEMENT_SERVER_PORT property. Its value is '5723'.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Modifying SC_DB_SERVER property. Its current value is 'OperationsManager'. Its new value: 'SCOM-XXX-AG'.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding DW_DB_SERVER property. Its value is 'SCOM-XXX-AG'.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding DWDATABASENAME property. Its value is 'OperationsManagerDW'.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Users\scomaction\AppData\Local\SCOM\Setup'.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '4472'.
    MSI (s) (D4:A0) [10:21:27:383]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
    MSI (s) (D4:A0) [10:21:27:383]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'.
    MSI (s) (D4:A0) [10:21:27:383]: TRANSFORMS property is now:
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '300'.
    MSI (s) (D4:A0) [10:21:27:395]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Roaming
    MSI (s) (D4:A0) [10:21:27:396]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\Favorites
    MSI (s) (D4:A0) [10:21:27:398]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Network Shortcuts
    MSI (s) (D4:A0) [10:21:27:399]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\Documents
    MSI (s) (D4:A0) [10:21:27:401]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
    MSI (s) (D4:A0) [10:21:27:402]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Recent
    MSI (s) (D4:A0) [10:21:27:404]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\SendTo
    MSI (s) (D4:A0) [10:21:27:405]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Templates
    MSI (s) (D4:A0) [10:21:27:405]: SHELL32::SHGetFolderPath returned: C:\ProgramData
    MSI (s) (D4:A0) [10:21:27:406]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Local
    MSI (s) (D4:A0) [10:21:27:408]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\Pictures
    MSI (s) (D4:A0) [10:21:27:411]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    MSI (s) (D4:A0) [10:21:27:413]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
    MSI (s) (D4:A0) [10:21:27:414]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
    MSI (s) (D4:A0) [10:21:27:415]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
    MSI (s) (D4:A0) [10:21:27:417]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
    MSI (s) (D4:A0) [10:21:27:420]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    MSI (s) (D4:A0) [10:21:27:421]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
    MSI (s) (D4:A0) [10:21:27:423]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
    MSI (s) (D4:A0) [10:21:27:424]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Start Menu
    MSI (s) (D4:A0) [10:21:27:426]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\Desktop
    MSI (s) (D4:A0) [10:21:27:427]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
    MSI (s) (D4:A0) [10:21:27:428]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
    MSI (s) (D4:A0) [10:21:27:428]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
    MSI (s) (D4:A0) [10:21:27:433]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
    MSI (s) (D4:A0) [10:21:27:434]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
    MSI (s) (D4:A0) [10:21:27:434]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
    MSI (s) (D4:A0) [10:21:27:434]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
    MSI (s) (D4:A0) [10:21:27:434]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Windows User'.
    MSI (s) (D4:A0) [10:21:27:434]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
    MSI (s) (D4:A0) [10:21:27:434]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\4b8344.msi'.
    MSI (s) (D4:A0) [10:21:27:434]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'F:\InstallFiles\SCOMR2\Setup\AMD64\Server\OMServer.msi'.
    MSI (s) (D4:A0) [10:21:27:434]: Machine policy value 'MsiDisableEmbeddedUI' is 0
    MSI (s) (D4:A0) [10:21:27:434]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
    MSI (s) (D4:A0) [10:21:27:434]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
    MSI (s) (D4:A0) [10:21:27:434]: Note: 1: 2205 2: 3: PatchPackage
    MSI (s) (D4:A0) [10:21:27:434]: Machine policy value 'DisableRollback' is 0
    MSI (s) (D4:A0) [10:21:27:434]: User policy value 'DisableRollback' is 0
    MSI (s) (D4:A0) [10:21:27:434]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
    === Logging started: 22/01/2014 10:21:27 ===
    MSI (s) (D4:A0) [10:21:27:435]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
    MSI (s) (D4:A0) [10:21:27:436]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes.
    MSI (s) (D4:A0) [10:21:27:438]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
    MSI (s) (D4:A0) [10:21:27:438]: Doing action: INSTALL
    Action start 10:21:27: INSTALL.
    MSI (s) (D4:A0) [10:21:27:444]: Running ExecuteSequence
    MSI (s) (D4:A0) [10:21:27:444]: Doing action: SystemFolder.A591E3B4_D228_431D_BF89_99D52C8FFB76
    MSI (s) (D4:A0) [10:21:27:447]: PROPERTY CHANGE: Adding SystemFolder.A591E3B4_D228_431D_BF89_99D52C8FFB76 property. Its value is 'C:\Windows\SysWOW64\'.
    Action start 10:21:27: SystemFolder.A591E3B4_D228_431D_BF89_99D52C8FFB76.
    MSI (s) (D4:A0) [10:21:27:448]: Doing action: System64Folder.A591E3B4_D228_431D_BF89_99D52C8FFB76
    Action ended 10:21:27: SystemFolder.A591E3B4_D228_431D_BF89_99D52C8FFB76. Return value 1.
    MSI (s) (D4:A0) [10:21:27:450]: PROPERTY CHANGE: Adding System64Folder.A591E3B4_D228_431D_BF89_99D52C8FFB76 property. Its value is 'C:\Windows\system32\'.
    Action start 10:21:27: System64Folder.A591E3B4_D228_431D_BF89_99D52C8FFB76.
    MSI (s) (D4:A0) [10:21:27:450]: Doing action: WindowsFolder.62894CB9_4320_40DB_B4E4_C0347FAB97B6
    Action ended 10:21:27: System64Folder.A591E3B4_D228_431D_BF89_99D52C8FFB76. Return value 1.
    MSI (s) (D4:A0) [10:21:27:452]: PROPERTY CHANGE: Adding WindowsFolder.62894CB9_4320_40DB_B4E4_C0347FAB97B6 property. Its value is 'C:\Windows\'.
    Action start 10:21:27: WindowsFolder.62894CB9_4320_40DB_B4E4_C0347FAB97B6.
    MSI (s) (D4:A0) [10:21:27:453]: Doing action: System64Folder.A7850EAF_DD6F_4ED6_9581_E958CBD8A522
    Action ended 10:21:27: WindowsFolder.62894CB9_4320_40DB_B4E4_C0347FAB97B6. Return value 1.
    MSI (s) (D4:A0) [10:21:27:455]: PROPERTY CHANGE: Adding System64Folder.A7850EAF_DD6F_4ED6_9581_E958CBD8A522 property. Its value is 'C:\Windows\system32\'.
    Action start 10:21:27: System64Folder.A7850EAF_DD6F_4ED6_9581_E958CBD8A522.
    MSI (s) (D4:A0) [10:21:27:456]: Doing action: WindowsFolder_x86_VC.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C
    Action ended 10:21:27: System64Folder.A7850EAF_DD6F_4ED6_9581_E958CBD8A522. Return value 1.
    MSI (s) (D4:A0) [10:21:27:458]: PROPERTY CHANGE: Adding WindowsFolder_x86_VC.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C property. Its value is 'C:\Windows\'.
    Action start 10:21:27: WindowsFolder_x86_VC.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C.
    MSI (s) (D4:A0) [10:21:27:458]: Doing action: SystemFolder_x86_VC.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C
    Action ended 10:21:27: WindowsFolder_x86_VC.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C. Return value 1.
    MSI (s) (D4:A0) [10:21:27:461]: PROPERTY CHANGE: Adding SystemFolder_x86_VC.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C property. Its value is 'C:\Windows\SysWOW64\'.
    Action start 10:21:27: SystemFolder_x86_VC.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C.
    MSI (s) (D4:A0) [10:21:27:461]: Doing action: WindowsFolder_amd64_VC.1C11561A_11CB_36A7_8A47_D7A042055FA7
    Action ended 10:21:27: SystemFolder_x86_VC.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C. Return value 1.
    MSI (s) (D4:A0) [10:21:27:463]: PROPERTY CHANGE: Adding WindowsFolder_amd64_VC.1C11561A_11CB_36A7_8A47_D7A042055FA7 property. Its value is 'C:\Windows\'.
    Action start 10:21:27: WindowsFolder_amd64_VC.1C11561A_11CB_36A7_8A47_D7A042055FA7.
    MSI (s) (D4:A0) [10:21:27:463]: Doing action: System64Folder_amd64_VC.1C11561A_11CB_36A7_8A47_D7A042055FA7
    Action ended 10:21:27: WindowsFolder_amd64_VC.1C11561A_11CB_36A7_8A47_D7A042055FA7. Return value 1.
    MSI (s) (D4:A0) [10:21:27:466]: PROPERTY CHANGE: Adding System64Folder_amd64_VC.1C11561A_11CB_36A7_8A47_D7A042055FA7 property. Its value is 'C:\Windows\system32\'.
    Action start 10:21:27: System64Folder_amd64_VC.1C11561A_11CB_36A7_8A47_D7A042055FA7.
    MSI (s) (D4:A0) [10:21:27:467]: Doing action: WindowsFolder.399B61E4_41A2_4BE4_889A_A0D0761C88A8
    Action ended 10:21:27: System64Folder_amd64_VC.1C11561A_11CB_36A7_8A47_D7A042055FA7. Return value 1.
    MSI (s) (D4:A0) [10:21:27:468]: PROPERTY CHANGE: Adding WindowsFolder.399B61E4_41A2_4BE4_889A_A0D0761C88A8 property. Its value is 'C:\Windows\'.
    Action start 10:21:27: WindowsFolder.399B61E4_41A2_4BE4_889A_A0D0761C88A8.
    MSI (s) (D4:A0) [10:21:27:469]: Doing action: WindowsFolder.80B659D9_F758_4E7D_B4FA_E53FC737DCC9
    Action ended 10:21:27: WindowsFolder.399B61E4_41A2_4BE4_889A_A0D0761C88A8. Return value 1.
    MSI (s) (D4:A0) [10:21:27:471]: PROPERTY CHANGE: Adding WindowsFolder.80B659D9_F758_4E7D_B4FA_E53FC737DCC9 property. Its value is 'C:\Windows\'.
    Action start 10:21:27: WindowsFolder.80B659D9_F758_4E7D_B4FA_E53FC737DCC9.
    MSI (s) (D4:A0) [10:21:27:472]: Doing action: WindowsFolder.3A3B255D_E19B_4D2E_8687_D6EF0314AFBE
    Action ended 10:21:27: WindowsFolder.80B659D9_F758_4E7D_B4FA_E53FC737DCC9. Return value 1.
    MSI (s) (D4:A0) [10:21:27:474]: PROPERTY CHANGE: Adding WindowsFolder.3A3B255D_E19B_4D2E_8687_D6EF0314AFBE property. Its value is 'C:\Windows\'.
    Action start 10:21:27: WindowsFolder.3A3B255D_E19B_4D2E_8687_D6EF0314AFBE.
    MSI (s) (D4:A0) [10:21:27:475]: Doing action: ProgramMenuFolder.CFE2C791_D05A_4240_90ED_DEB20161DFB0
    Action ended 10:21:27: WindowsFolder.3A3B255D_E19B_4D2E_8687_D6EF0314AFBE. Return value 1.
    MSI (s) (D4:A0) [10:21:27:477]: PROPERTY CHANGE: Adding ProgramMenuFolder.CFE2C791_D05A_4240_90ED_DEB20161DFB0 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\'.
    Action start 10:21:27: ProgramMenuFolder.CFE2C791_D05A_4240_90ED_DEB20161DFB0.
    MSI (s) (D4:A0) [10:21:27:477]: Doing action: FindRelatedProducts
    Action ended 10:21:27: ProgramMenuFolder.CFE2C791_D05A_4240_90ED_DEB20161DFB0. Return value 1.
    Action start 10:21:27: FindRelatedProducts.
    MSI (s) (D4:A0) [10:21:27:481]: PROPERTY CHANGE: Adding CORECOMPONENTPRESENT_AGENT property. Its value is '{8B21425D-02F3-4B80-88CE-8F79B320D330}'.
    MSI (s) (D4:A0) [10:21:27:483]: Skipping action: _StopCoreServices.80B659D9_F758_4E7D_B4FA_E53FC737DCC9 (condition is false)
    MSI (s) (D4:A0) [10:21:27:483]: Skipping action: _KillOMProcesses.80B659D9_F758_4E7D_B4FA_E53FC737DCC9 (condition is false)
    MSI (s) (D4:A0) [10:21:27:483]: Skipping action: _SearchOpsMgrShellPath.CFE2C791_D05A_4240_90ED_DEB20161DFB0 (condition is false)
    MSI (s) (D4:A0) [10:21:27:483]: Doing action: _SetMonadFilePath.CFE2C791_D05A_4240_90ED_DEB20161DFB0
    Action ended 10:21:27: FindRelatedProducts. Return value 1.
    MSI (s) (D4:08) [10:21:27:501]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI847C.tmp, Entrypoint: SetMonadFilePath
    MSI (s) (D4:B0) [10:21:27:502]: Generating random cookie.
    MSI (s) (D4:B0) [10:21:27:505]: Created Custom Action Server with PID 4964 (0x1364).
    MSI (s) (D4:34) [10:21:27:527]: Running as a service.
    MSI (s) (D4:34) [10:21:27:529]: Hello, I'm your 64bit Impersonated custom action server.
    Action start 10:21:27: _SetMonadFilePath.CFE2C791_D05A_4240_90ED_DEB20161DFB0.
    MSI (s) (D4!DC) [10:21:27:638]: PROPERTY CHANGE: Modifying MONAD_SHELL_PATH property. Its current value is 'Error: Value Never Set. Check the CACore:SetMonadFilePath CA'. Its new value: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe'.
    GetRegistyStringValue: Registy key value found.. C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    MSI (s) (D4:A0) [10:21:27:640]: Doing action: _Set_CORECOMPONENTPRESENT
    Action ended 10:21:27: _SetMonadFilePath.CFE2C791_D05A_4240_90ED_DEB20161DFB0. Return value 1.
    MSI (s) (D4:A0) [10:21:27:643]: PROPERTY CHANGE: Adding CORECOMPONENTPRESENT property. Its value is '{8B21425D-02F3-4B80-88CE-8F79B320D330}'.
    Action start 10:21:27: _Set_CORECOMPONENTPRESENT.
    MSI (s) (D4:A0) [10:21:27:644]: Skipping action: _AbortDowngradeProductAttempt (condition is false)
    MSI (s) (D4:A0) [10:21:27:644]: Doing action: _AbortIncompatibleComponents
    Action ended 10:21:27: _Set_CORECOMPONENTPRESENT. Return value 1.
    Action start 10:21:27: _AbortIncompatibleComponents.
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 5044 could not be cancelled. Error: 1168
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 1580 could not be cancelled. Error: 1168
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 5512 could not be cancelled. Error: 1168
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 4268 could not be cancelled. Error: 1168
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 5024 could not be cancelled. Error: 1168
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 6064 could not be cancelled. Error: 1168
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 3396 could not be cancelled. Error: 1168
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 2704 could not be cancelled. Error: 1168
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 5568 could not be cancelled. Error: 1168
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 5940 could not be cancelled. Error: 1168
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 1968 could not be cancelled. Error: 1168
    MSI (s) (D4:A0) [10:21:27:652]: Product: System Center Operations Manager 2012 Server -- The Operations Manager management server cannot be installed on a computer on which the Operations Manager agent, Operations Manager gateway, System Center Essentials, or System Center Service Manager is already installed. These must be uninstalled to proceed.
    The Operations Manager management server cannot be installed on a computer on which the Operations Manager agent, Operations Manager gateway, System Center Essentials, or System Center Service Manager is already installed. These must be uninstalled to proceed.
    Action ended 10:21:27: _AbortIncompatibleComponents. Return value 3.
    Action ended 10:21:27: INSTALL. Return value 3.
    Property(S): DiskPrompt = Please Insert Disk 1
    Property(S): UpgradeCode = {17058653-A628-4C03-8F80-5E2B179ECD55}
    Property(S): SCDATABASENAME = OperationsManager
    Property(S): SC_DB_SERVER = SCOM-XXX-AG
    Property(S): SDK_PASSWORD.540EA3C0_A5E9_41EA_A585_822C09EA2650 = **********
    Property(S): CORECOMPONENTPRESENT = {8B21425D-02F3-4B80-88CE-8F79B320D330}
    Property(S): OM_INSTALLDIR = F:\Program Files\Microsoft System Center 2012 R2\Operations Manager
    Property(S): ProgramFiles64Folder = C:\Program Files\
    Property(S): Privileged = 1
    Property(S): ARPSYSTEMCOMPONENT = 1
    Property(S): DONOTSKIPDELETESERVICES = 0
    Property(S): DONOTSKIPINSTALLSERVICES = 0
    Property(S): OM_COMMON_PRODUCT_REGISTRY_PATH = SOFTWARE\Microsoft\System Center Operations Manager
    Property(S): OM_COMMON_PRODUCT_RELEASE_REGISTRY_KEY = 12
    Property(S): OM_COMMON_PRODUCT_DEFAULT_INSTALL_DIR = System Center Operations Manager
    Property(S): NetFxVersion = v2.0.50727
    Property(S): IS_OM_SERVER = 1
    Property(S): InstallAPMAgent = 1
    Property(S): INSTALLLEVEL = 100
    Property(S): ALLUSERS = 1
    Property(S): ARPNOREPAIR = 0
    Property(S): ARPURLINFOABOUT = http://www.microsoft.com/mom
    Property(S): ARPURLUPDATEINFO = http://www.microsoft.com/mom
    Property(S): ARPHELPLINK = http://support.microsoft.com
    Property(S): MSIRESTARTMANAGERCONTROL = Disable
    Property(S): SQL_PORT = 1433
    Property(S): DbSizeGood = 1
    Property(S): DbFileOptionsGood = 1
    Property(S): DbFilesSpaceGood = 1
    Property(S): DbNameGood = 1
    Property(S): SqlServicesStarted = 1
    Property(S): _SetSDKServiceAccount.540EA3C0_A5E9_41EA_A585_822C09EA2650 = **********
    Property(S): _SetConfigServiceAccount.540EA3C0_A5E9_41EA_A585_822C09EA2650 = **********
    Property(S): DialogWizardTitle = System Center 2012 R2 Operations Manager Setup
    Property(S): MinimumOSMsg = This product must be installed on Windows Server 2008 R2 or higher.
    Property(S): MOMSDKPortDesc = Operations Manager SDK.
    Property(S): MOMConnectorPortDesc = Operations Manager Connector Framework.
    Property(S): MOMAEMPortDesc = Operations Manager Application Error Monitoring.
    Property(S): MOMSQMPortDesc = Operations Manager Customer Experience Improvement Program.
    Property(S): MOMHSPortDesc = System Center Management Health Service
    Property(S): SCOMV3SP1ProgramName = System Center 2012 R2 Operations Manager
    Property(S): FWRulePingRequestName = Operations Manager Ping Request (Echo Request - ICMPv4 OUT)
    Property(S): FWRulePingRequestDesc = Operations Manager network monitoring ping request
    Property(S): FWRulePingResponseName = Operations Manager Ping Response (Echo Response - ICMPv4 IN)
    Property(S): FWRulePingResponseDesc = Operations Manager network monitoring ping response
    Property(S): FWRuleSnmpRequestName = Operations Manager SNMP Request
    Property(S): FWRuleSnmpRequestDesc = Operations Manager network monitoring SNMP request
    Property(S): FWRuleSnmpResponseName = Operations Manager SNMP Response
    Property(S): FWRuleSnmpResponseDesc = Operations Manager network monitoring SNMP response
    Property(S): FWRuleSnmpTrapListenerName = Operations Manager SNMP Trap Listener
    Property(S): FWRuleSnmpTrapListenerDesc = Operations Manager network monitoring SNMP trap listener
    Property(S): Manufacturer = Microsoft Corporation
    Property(S): ProductCode = {C92727BE-BD12-4140-96A6-276BA4F60AC1}
    Property(S): ProductLanguage = 1033
    Property(S): ProductName = System Center Operations Manager 2012 Server
    Property(S): ProductVersion = 7.1.10226.0
    Property(S): SecureCustomProperties = ACTIONSPASSWORD;CORECOMPONENTPRESENT_AGENT;CORECOMPONENTPRESENT_GW;CORECOMPONENTPRESENT_RC;CORECOMPONENTPRESENT_SCE;CORECOMPONENTPRESENT_SMB2;CORECOMPONENTPRESENT_SMRTM;IS_AVICODE_AGENT_INSTALLED;IS_MOMASPAGENT_INSTALLED;MOM_DB_SERVER;MOMDATABASENAME_OLD;OM_NEWER_PRODUCT_FOUND;SDK_PASSWORD.540EA3C0_A5E9_41EA_A585_822C09EA2650;SQL_PORT
    Property(S): MsiHiddenProperties = _SetConfigServiceAccount.540EA3C0_A5E9_41EA_A585_822C09EA2650;_SetSDKServiceAccount.540EA3C0_A5E9_41EA_A585_822C09EA2650;ACTIONSPASSWORD;SDK_PASSWORD.540EA3C0_A5E9_41EA_A585_822C09EA2650
    Property(S): WixPdbPath = d:\btvsts\20867\private\product\setup\wix\msi\server\om\obj\amd64\OMServer.wixpdb
    Property(S): CORECOMPONENTPRESENT_AGENT = {8B21425D-02F3-4B80-88CE-8F79B320D330}
    Property(S): ProgramMenuFolder.CFE2C791_D05A_4240_90ED_DEB20161DFB0 = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
    Property(S): MONAD_SHELL_PATH = C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    Property(S): EnableEV.CFE2C791_D05A_4240_90ED_DEB20161DFB0 = 1
    Property(S): AddInstallPath.CFE2C791_D05A_4240_90ED_DEB20161DFB0 = add
    Property(S): RemoveInstallPath.CFE2C791_D05A_4240_90ED_DEB20161DFB0 = remove
    Property(S): WindowsFolder.3A3B255D_E19B_4D2E_8687_D6EF0314AFBE = C:\Windows\
    Property(S): VersionNT = 602
    Property(S): DW_DB_SERVER = SCOM-XXX-AG
    Property(S): DWDATABASENAME = OperationsManagerDW
    Property(S): OMDATABASENAME = OperationsManger
    Property(S): MaximumDataAgeMinutes = 10080
    Property(S): MaximumQueueSizeKB = 102400
    Property(S): MOMSDKPort.1451A536_2C9B_42F2_A37A_C9C6460E7EEA = 5724
    Property(S): MOMConnectorPort.1451A536_2C9B_42F2_A37A_C9C6460E7EEA = 51905
    Property(S): MOMAEMPort.1451A536_2C9B_42F2_A37A_C9C6460E7EEA = 51906
    Property(S): MOMSQMPort.1451A536_2C9B_42F2_A37A_C9C6460E7EEA = 51907
    Property(S): SDK_SERVICE_TYPE = 4
    Property(S): ROOT_MANAGEMENT_SERVER_PORT = 5723
    Property(S): SERVER_MANAGEMENT_GROUP_TYPE.C6F00077_9737_419B_A8B6_B309BA6F8FC8 = 1
    Property(S): MaximumForwardedVirtualQueuePercentage = 8
    Property(S): QueueSendDataSinglePriority = 0
    Property(S): ADMIN_ROLE_GROUP.C6F00077_9737_419B_A8B6_B309BA6F8FC8 = Administrators
    Property(S): USE_MANUALLY_SPECIFIED_SETTINGS = 1
    Property(S): WindowsFolder.80B659D9_F758_4E7D_B4FA_E53FC737DCC9 = C:\Windows\
    Property(S): CommonFiles64Folder = C:\Program Files\Common Files\
    Property(S): CAN_REGISTER_FOR_MU = 0
    Property(S): MU_SETTING = 0
    Property(S): IS_ROOT_HEALTH_SERVICE = 0
    Property(S): IS_MOM_SERVER = 0
    Property(S): IS_MOM_GATEWAY = 0
    Property(S): WindowsFolder.399B61E4_41A2_4BE4_889A_A0D0761C88A8 = C:\Windows\
    Property(S): WindowsFolder_amd64_VC.1C11561A_11CB_36A7_8A47_D7A042055FA7 = C:\Windows\
    Property(S): System64Folder_amd64_VC.1C11561A_11CB_36A7_8A47_D7A042055FA7 = C:\Windows\system32\
    Property(S): DirectoryTable100_amd64.1C11561A_11CB_36A7_8A47_D7A042055FA7 = DirectoryTable
    Property(S): WindowsFolder_x86_VC.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C = C:\Windows\
    Property(S): SystemFolder_x86_VC.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C = C:\Windows\SysWOW64\
    Property(S): DirectoryTable100_x86.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C = DirectoryTable
    Property(S): SEND_CEIP_REPORTS = 0
    Property(S): System64Folder.A7850EAF_DD6F_4ED6_9581_E958CBD8A522 = C:\Windows\system32\
    Property(S): ACS_AGENT_ACCOUNT.A7850EAF_DD6F_4ED6_9581_E958CBD8A522 =
    Property(S): WindowsFolder.62894CB9_4320_40DB_B4E4_C0347FAB97B6 = C:\Windows\
    Property(S): SC_COMMON_REGISTRY_PATH = SOFTWARE\Microsoft\System Center\2010\Common
    Property(S): DISCOVERY_DATA_AUTHORIZATION_ENABLED = 0
    Property(S): IcmpProtocol.ADADB3CF_4DA7_4040_90AE_3E4E0E0A6FBF = 1
    Property(S): IcmpRequestType.ADADB3CF_4DA7_4040_90AE_3E4E0E0A6FBF = 8:*
    Property(S): IcmpResponseType.ADADB3CF_4DA7_4040_90AE_3E4E0E0A6FBF = 0:*
    Property(S): SnmpProtocol.ADADB3CF_4DA7_4040_90AE_3E4E0E0A6FBF = 17
    Property(S): SnmpPort.ADADB3CF_4DA7_4040_90AE_3E4E0E0A6FBF = 161
    Property(S): SnmpTrapPort.ADADB3CF_4DA7_4040_90AE_3E4E0E0A6FBF = 162
    Property(S): DirectionIn.ADADB3CF_4DA7_4040_90AE_3E4E0E0A6FBF = 0
    Property(S): DirectionOut.ADADB3CF_4DA7_4040_90AE_3E4E0E0A6FBF = 1
    Property(S): SystemFolder.A591E3B4_D228_431D_BF89_99D52C8FFB76 = C:\Windows\SysWOW64\
    Property(S): System64Folder.A591E3B4_D228_431D_BF89_99D52C8FFB76 = C:\Windows\system32\
    Property(S): ADVISOR_UPLOADFREQUENCY_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #1
    Property(S): ADVISOR_UPLOADDAY_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #-1
    Property(S): ADVISOR_UPLOADTIMEHOUR_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #-1
    Property(S): ADVISOR_UPLOADTIMEMIN_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #-1
    Property(S): ADVISOR_MAXCACHESIZE_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #1024
    Property(S): ADVISOR_MAXMAILBOXSIZE_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #1024
    Property(S): ADVISOR_ARCHIVEPERIOD_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #5
    Property(S): ADVISOR_LOGLEVEL_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #3
    Property(S): ADVISOR_NEEDMPINITIALIZE_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #1
    Property(S): ADVISOR_LYNC_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #0
    Property(S): ADVISOR_SHAREPOINT_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #0
    Property(S): MsiLogFileLocation = C:\Users\scomaction\AppData\Local\SCOM\Logs\OMServer.log
    Property(S): PackageCode = {58EFE971-58C1-4DBD-A400-A7607A745475}
    Property(S): ProductState = -1
    Property(S): PackagecodeChanging = 1
    Property(S): REBOOT = ReallySuppress
    Property(S): CURRENTDIRECTORY = C:\Users\scomaction\AppData\Local\SCOM\Setup
    Property(S): CLIENTUILEVEL = 3
    Property(S): MSICLIENTUSESEXTERNALUI = 1
    Property(S): CLIENTPROCESSID = 4472
    Property(S): MsiSystemRebootPending = 1
    Property(S): VersionDatabase = 300
    Property(S): VersionMsi = 5.00
    Property(S): VersionNT64 = 602
    Property(S): WindowsBuild = 9200
    Property(S): ServicePackLevel = 0
    Property(S): ServicePackLevelMinor = 0
    Property(S): MsiNTProductType = 3
    Property(S): WindowsFolder = C:\Windows\
    Property(S): WindowsVolume = C:\
    Property(S): System64Folder = C:\Windows\system32\
    Property(S): SystemFolder = C:\Windows\SysWOW64\
    Property(S): RemoteAdminTS = 1
    Property(S): TempFolder = C:\Users\SCOMAC~1\AppData\Local\Temp\
    Property(S): ProgramFilesFolder = C:\Program Files (x86)\
    Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
    Property(S): AppDataFolder = C:\Users\scomaction\AppData\Roaming\
    Property(S): FavoritesFolder = C:\Users\scomaction\Favorites\
    Property(S): NetHoodFolder = C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
    Property(S): PersonalFolder = C:\Users\scomaction\Documents\
    Property(S): PrintHoodFolder = C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
    Property(S): RecentFolder = C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Recent\
    Property(S): SendToFolder = C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\SendTo\
    Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
    Property(S): CommonAppDataFolder = C:\ProgramData\
    Property(S): LocalAppDataFolder = C:\Users\scomaction\AppData\Local\
    Property(S): MyPicturesFolder = C:\Users\scomaction\Pictures\
    Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
    Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
    Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
    Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
    Property(S): DesktopFolder = C:\Users\Public\Desktop\
    Property(S): FontsFolder = C:\Windows\Fonts\
    Property(S): GPTSupport = 1
    Property(S): OLEAdvtSupport = 1
    Property(S): ShellAdvtSupport = 1
    Property(S): MsiAMD64 = 6
    Property(S): Msix64 = 6
    Property(S): Intel = 6
    Property(S): PhysicalMemory = 8192
    Property(S): VirtualMemory = 7854
    Property(S): AdminUser = 1
    Property(S): MsiTrueAdminUser = 1
    Property(S): LogonUser = scomaction
    Property(S): UserSID = S-1-5-21-607126847-70518424-489426498-210484
    Property(S): UserLanguageID = 2057
    Property(S): ComputerName = SCOMMS1-VM
    Property(S): SystemLanguageID = 2057
    Property(S): ScreenX = 1024
    Property(S): ScreenY = 768
    Property(S): CaptionHeight = 23
    Property(S): BorderTop = 1
    Property(S): BorderSide = 1
    Property(S): TextHeight = 16
    Property(S): TextInternalLeading = 3
    Property(S): ColorBits = 32
    Property(S): TTCSupport = 1
    Property(S): Time = 10:21:27
    Property(S): Date = 22/01/2014
    Property(S): MsiNetAssemblySupport = 4.0.30319.17929
    Property(S): MsiWin32AssemblySupport = 6.2.9200.16384
    Property(S): RedirectedDllSupport = 2
    Property(S): MsiRunningElevated = 1
    Property(S): USERNAME = Windows User
    Property(S): DATABASE = C:\Windows\Installer\4b8344.msi
    Property(S): OriginalDatabase = F:\InstallFiles\SCOMR2\Setup\AMD64\Server\OMServer.msi
    Property(S): UILevel = 2
    Property(S): ACTION = INSTALL
    MSI (s) (D4:A0) [10:21:27:697]: Note: 1: 1708
    MSI (s) (D4:A0) [10:21:27:698]: Product: System Center Operations Manager 2012 Server -- Installation operation failed.
    MSI (s) (D4:A0) [10:21:27:698]: Windows Installer installed the product. Product Name: System Center Operations Manager 2012 Server. Product Version: 7.1.10226.0. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 1603.
    MSI (s) (D4:A0) [10:21:27:744]: Deferring clean up of packages/files, if any exist
    MSI (s) (D4:A0) [10:21:27:744]: MainEngineThread is returning 1603
    MSI (s) (D4:30) [10:21:27:744]: No System Restore sequence number for this installation.
    === Logging stopped: 22/01/2014 10:21:27 ===
    MSI (s) (D4:30) [10:21:27:746]: User policy value 'DisableRollback' is 0
    MSI (s) (D4:30) [10:21:27:746]: Machine policy value 'DisableRollback' is 0
    MSI (s) (D4:30) [10:21:27:746]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (D4:30) [10:21:27:746]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (D4:30) [10:21:27:746]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (D4:30) [10:21:27:746]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
    MSI (s) (D4:30) [10:21:27:747]: Destroying RemoteAPI object.
    MSI (s) (D4:B0) [10:21:27:747]: Custom Action Manager thread ending.
    MSI (c) (78:34) [10:21:27:748]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
    MSI (c) (78:34) [10:21:27:749]: MainEngineThread is returning 1603
    === Verbose logging stopped: 22/01/2014 10:21:27 ===
    Any assistance anyone can provide will be greatly appreciated.

    Verify from permission of user that you use it in upgrade, make sure that scom machine and user that you use it in upgrade in sysadmin group in database of operationsManager and OperationsManagerDW
    Also Verify from Prerequisites of Upgrade SCOM 2012 sp1 as below link
    http://technet.microsoft.com/en-us/library/jj656654.aspx
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"

  • SCOM 2012 Operations Manager Failed to start a process

    We have recently upgraded from SCOM 2007 to SCOM 2012. We are not getting a great deal of “Operations Manager Failed to start a process”. The process varies including:
    DiscoverSQL2008ASDiscovery.vbs
    DiscoverSQL2008DBEngineDiscovery.vbs
    DiscoverSQL2008ASDiscovery.vbs
    Microsoft.Windows.Server.NetwokAdapter.BandwidthUsed.ModuleType.vbs
    I have researched and researched. I know that you can try to run the scripts locally on the machine but it seems the scripts never make it to the machine. I go to the path in the error, no luck. I look in the other folders as I know that SCOM moves the scripts,
    and I even search the entire C drive but the scripts are not getting to the server. The folder is not even making it. For example:
    Command executed: "C:\Windows\system32\cscript.exe" /nologo "Microsoft.Windows.Server.NetwokAdapter.BandwidthUsed.ModuleType.vbs" SERVER true Working Directory: C:\Program Files\System Center Operations Manager\Agent\Health Service State\Monitoring
    Host Temporary Files 11606\1759\
    The script is not there and the folder \1759 is not there either.
    I have removed and reinstalled the client.
    Antivirus is fine, up to date and not blocking on any of the machines.
    I have stopped the “System Center Management service” and renamed the “Health Service State” folder and it recreates fine but not long after I get the warning in SCOM about “Operations Manager Failed to start a process”.
    I look in event viewer for Operations Manager on this particular one and I see a lot of:
    Performance data from the Health Service could not be collected since required registry keys could not be read, the error was 2L (The system cannot find the file specified.). Event ID 6001.
    I tried the fix of
    "lodctr MOMConnectorCounters.ini" and "lodctr HealthServiceCounters.ini" but I get “error
    encountered while updating text in registry. Status: 0”. Again I am using SCOM 2012.
    Do I need to look at each failed script or is there a overall issue because the scripts are not making it to the machines. Any ideas?

    I guess you might need to run "mofcomp sqlmgmproviderxpsp2up.mof".
    Thanks, S K Agrawal

  • SCSM 2012 UR3 - "The Full adapter threw an exception" error when viewing "Deleted Items" view

    Has anyone expereinced the "The Full adapter threw an exception" eror in the SCSM 2012 console? 
    We get the error in both our dev and production environments when trying to view the "Deleted Items" view in the console (even after using powershell to remove all deleted iterms).  As just noted, interestingly enough we can view, delete, and restore
    deleted items using the corresponding Powershell commands.  It should be noted that neither of our two SCSM 2012 environments has a registered data warehouse server.  Below is a screen shot of the error as well as the associated error text and event
    log errors.
    Any help would be greatly apprecaited!
    Regards,
    JJ
    Console Dialog Error Test
    ============================
    Date: 10/17/2012 8:46:50 PM
    Application: Service Manager Console
    Application Version: 7.5.1561.0
    Severity: Error
    Message: An error occurred while loading the items.
    Microsoft.EnterpriseManagement.UI.ViewFramework.AdvancedListSupportException: The Full adapter threw an exception. See the FullUpdate property to see the exception.
       at Microsoft.EnterpriseManagement.UI.ViewFramework.AdvancedListSupportAdapter.DoAction(DataQueryBase query, IList`1 dataSources, IDictionary`2 parameters, IList`1 inputs, String outputCollectionName)
       at Microsoft.EnterpriseManagement.UI.DataModel.QueryQueue.StartExecuteQuery(Object sender, ConsoleJobEventArgs e)
       at Microsoft.EnterpriseManagement.ServiceManager.UI.Console.ConsoleJobExceptionHandler.ExecuteJob(IComponent component, EventHandler`1 job, Object sender, ConsoleJobEventArgs args)
    Associated Event Log Errors
    ============================
    Log Name:      Application
    Source:        MSSQLSERVER
    Date:          10/17/2012 8:46:49 PM
    Event ID:      8623
    Task Category: Server
    Level:         Error
    Keywords:      Classic
    User:          SYSTEM
    Computer:      jhqsrv08.jhq.net
    Description:
    The query processor ran out of internal resources and could not produce a query plan. This is a rare event and only expected for extremely complex queries or queries that reference a very large number of tables or partitions. Please simplify the query. If you
    believe you have received this message in error, contact Customer Support Services for more information.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="MSSQLSERVER" />
        <EventID Qualifiers="49152">8623</EventID>
        <Level>2</Level>
        <Task>2</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2012-10-18T00:46:49.000000000Z" />
        <EventRecordID>339617</EventRecordID>
        <Channel>Application</Channel>
        <Computer>jhqsrv08.jhq.net</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Binary>AF21000010000000090000004A00480051005300520056003000380000000F00000053006500720076006900630065004D0061006E0061006700650072000000</Binary>
      </EventData>
    </Event>
    Log Name:      Operations Manager
    Source:        DataAccessLayer
    Date:          10/17/2012 8:46:49 PM
    Event ID:      33333
    Task Category: None
    Level:         Warning
    Keywords:      Classic
    User:          N/A
    Computer:      jhqsrv08.jhq.net
    Description:
    Data Access Layer rejected retry on SqlError:
     Request: MTV_Select_62f0be9f-ecea-e73c-f00d-3dd78a7422fc_Top -- (NonGenericDistinctFilterForAbstract=4cf77750-6688-8672-9470-036e0f4b48d6,26b2dff7-2ce9-59cf-4eb8-a6fb2d095d45,89992420-1297-0b8b-f3ca-1e53aa36f9e0,ed5ec2bf-6745-086...), (ObjectStatus_4AE3E5FE_BC03_1336_0A45_80BF58DEE57B0=47101e64-237f-12c8-e3f5-ec5a665412fb)
     Class: 16
     Number: 8623
     Message: The query processor ran out of internal resources and could not produce a query plan. This is a rare event and only expected for extremely complex queries or queries that reference a very large number of tables or partitions. Please simplify
    the query. If you believe you have received this message in error, contact Customer Support Services for more information.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="DataAccessLayer" />
        <EventID Qualifiers="32768">33333</EventID>
        <Level>3</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2012-10-18T00:46:49.000000000Z" />
        <EventRecordID>935685</EventRecordID>
        <Channel>Operations Manager</Channel>
        <Computer>jhqsrv08.jhq.net</Computer>
        <Security />
      </System>
      <EventData>
        <Data>MTV_Select_62f0be9f-ecea-e73c-f00d-3dd78a7422fc_Top -- (NonGenericDistinctFilterForAbstract=4cf77750-6688-8672-9470-036e0f4b48d6,26b2dff7-2ce9-59cf-4eb8-a6fb2d095d45,89992420-1297-0b8b-f3ca-1e53aa36f9e0,ed5ec2bf-6745-086...),
    (ObjectStatus_4AE3E5FE_BC03_1336_0A45_80BF58DEE57B0=47101e64-237f-12c8-e3f5-ec5a665412fb)</Data>
        <Data>16</Data>
        <Data>8623</Data>
        <Data>The query processor ran out of internal resources and could not produce a query plan. This is a rare event and only expected for extremely complex queries or queries that reference a very large number of tables or partitions.
    Please simplify the query. If you believe you have received this message in error, contact Customer Support Services for more information.</Data>
      </EventData>
    </Event>
    Log Name:      Operations Manager
    Source:        OpsMgr SDK Service
    Date:          10/17/2012 8:29:26 PM
    Event ID:      26319
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      jhqsrv08.jhq.net
    Description:
    An exception was thrown while processing GetManagedEntitiesByManagedEntityTypesAndCriteriaWithInstanceQueryOptions for session ID uuid:66ba50da-cdce-4d15-823c-92c41b46fe44;id=2425.
     Exception message: The creator of this fault did not specify a Reason.
     Full Exception: System.ServiceModel.FaultException`1[Microsoft.EnterpriseManagement.Common.UnknownDatabaseException]: The creator of this fault did not specify a Reason. (Fault Detail is equal to The query processor ran out of internal resources and could
    not produce a query plan. This is a rare event and only expected for extremely complex queries or queries that reference a very large number of tables or partitions. Please simplify the query. If you believe you have received this message in error, contact
    Customer Support Services for more information.).
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="OpsMgr SDK Service" />
        <EventID Qualifiers="49152">26319</EventID>
        <Level>2</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2012-10-18T00:29:26.000000000Z" />
        <EventRecordID>935679</EventRecordID>
        <Channel>Operations Manager</Channel>
        <Computer>jhqsrv08.jhq.net</Computer>
        <Security />
      </System>
      <EventData>
        <Data>GetManagedEntitiesByManagedEntityTypesAndCriteriaWithInstanceQueryOptions</Data>
        <Data>uuid:66ba50da-cdce-4d15-823c-92c41b46fe44;id=2425</Data>
        <Data>The creator of this fault did not specify a Reason.</Data>
        <Data>System.ServiceModel.FaultException`1[Microsoft.EnterpriseManagement.Common.UnknownDatabaseException]: The creator of this fault did not specify a Reason. (Fault Detail is equal to The query processor ran out of internal resources
    and could not produce a query plan. This is a rare event and only expected for extremely complex queries or queries that reference a very large number of tables or partitions. Please simplify the query. If you believe you have received this message in error,
    contact Customer Support Services for more information.).</Data>
      </EventData>
    </Event>

    I have the same problem and get following error:
    An exception was thrown while processing GetManagedEntitiesByManagedEntityTypesAndCriteriaWithInstanceQueryOptions
    I have contacted MS Support, but hey could not help
    either.
    I really
    need to fix it. Any help?

  • Unified Communications Operations Manager 8.0: How can I get rid of exlamation marks in Service Level View?

    Hi all,
    In Operations Manager I open the Service Level View and there are 3 exclamation marks visible for some devices. I acknowledged all alerts & events and they are already cleared now, but I'd like to know if I can get rid of the exclamation marks in Service Level View too. Is this possible?
    Kind regards,
    Richard
    Message was edited by: Richard Bovens

    Nancy,
    You are God!
    It worked!
    Thanks.
    I have a dumb basic question which is sort of related to your shambles comment, which I don't deny is true.
    I am confused about whether style.css files get affiliated with each separate HTML page or whether there is just one style.css file that is affiliated with all my HTML pages. If they are separate CSS files, how do I separate each style.css file?
    Best, P.

  • Operations Manager - KMS Idle Minutes Monitor Alerts - False Positives As Event ID 12290 Still Being Logged

    Hi all,
    I am using System Center 2012 R2 Operations Manager with the Key Management Service Management Pack at version 6.0.7234.0, and I keep receiving the following alert in Operations Manager:
    "Idle Minutes Monitor Alert:
    Key Management Service (KMS) inactivity exceeded threshold
    Knowledge:
    Summary:
    The purpose of this rule is to alert system administrators to a possible KMS or network outage. This rule monitors the end-to-end operation of KMS activation. A notification event is created by KMS if no activation or renewal requests were logged by KMS
    (activity event 12290) in the specified time interval. In addition to new activations, periodic renewal requests are expected to occur (default is 7 days). Whether or not this alert is serious depends on the number of machines in the KMS environment, how many
    are actually connected, and the configured renewal interval.
    Causes:
    Any failure or incorrect configuration of the KMS service, other Windows components, firewall, hardware, network or routers can trigger the Idle Minutes Alert. This alert can also result from normal behavior, since it is possible that not enough machines
    attempted to activate or renew during the specified time interval.
    Resolutions:
    The first step is to determine whether there really is a problem. Start with a known good KMS client and run (with elevated privileges) the script slmgr.vbs -ato . If the activation/renewal fails, it will report an error code. You can direct the client to
    connect to a specific KMS machine by using the slmgr.vbs -skms option. The request event (12288) and response event (12289) in the Windows Application event log may provide additional information, including the identity of failing KMS machines. If there has
    been a failure, check the following:
    Software Licensing service (slsvc) is running.
    Other KMS machine behavior is normal.
    KMS firewall port is open (default is TCP 1688).
    Attempt to connect to KMS using telnet to the KMS port(you won’t be able to do anything other than connect)
    Use a network monitor (e.g. netmon) to capture and trace network problems.
    There is one Idle Minutes Monitor that is used to monitor for activity. It may be desirable to adjust the time threshold, depending on expected KMS activity."
    Despite what the alert says, there are activity events with ID 12290 being logged, but they are appearing under the 'Key Management Service' log instead of the general 'Application' log.  I know that my clients are activating with the server without
    any problems as I have run slmgr.vbs -ato with success on a number of them, and none are stating that activation is required.  This issue was previously raised here:
    http://social.technet.microsoft.com/Forums/systemcenter/en-US/1391acf8-f0be-4a48-9039-8d24e275f1fd/kms-idle-time-monitor-raise-wrong-alerts?forum=operationsmanagermgmtpacks, but  I am running Windows Server 2008 R2 SP1 and the hotfix KB981314 comes
    up as 'not applicable to this computer' so I assume it is part of SP1 now.  I have also tried installing KB2692929, as that was cited as being a possible fix here:
    http://social.technet.microsoft.com/Forums/systemcenter/en-US/8ec8ae5b-a310-4b0f-9a5f-e0599bceb93a/kms-managementpack?forum=operationsmanagermgmtpacks, however I am still seeing the same alerts.
    Would greatly appreciate any further suggestions!
    Many thanks

    Hi,
    I've checked for all the events that are generated by our servers, and there are periods of time where no requests are received for up to 18 hours, so that is no doubt why the alerts are appearing (we then sometimes see five requests in the same minute,
    but there we go).  I'll need to adjust the thresholds.
    Thank you for your help, Chunky.1, I'll mark your reply as the answer, as it was very helpful in understanding the alert.
    For anyone else who needs to check this, create a PowerShell script using the following content, and place your own details into the relevant sections in bold (without the brackets, of course).  This will generate a csv file which will have the server
    name in one column and the time that the request event was generated - you can then check the gaps between the requests.  The script is quick and dirty, with no checks along the way, so feel free to embellish it as required.
    Out-File "<directory to place file in>\KMS_check_results.csv"
    $results = get-eventlog -ComputerName <KMS server hostname> -logname 'Key Management Service'|where{$_.message -match "<String which identifies servers instead of clients>"}
    $filteredresults = @()
    foreach($event in $results){
        #This splits up the message into sections, separated by commas, and places each section as an element in an array
        $event.Message -split ","|foreach{
            if($_ -match "<server domain suffix - e.g. contoso.com>"){
                $eventserver = $_
        $timegenerated = $event.TimeGenerated
        $filteredresults += New-Object PSObject -Property @{
            Server = $eventserver
            TimeGenerated = $timegenerated
    $filteredresults|select-object server,timegenerated|export-csv "<directory to place file in>\KMS_check_results.csv"  -NoTypeInformation

  • Operations manager failed to run a wmi query for wmi events (0x800706ba)

    Hi everyone,
    I've been working on this issue for a while and I am still no closer to finding out what the problem is.  If anybody can offer any other advice or things to check, I'm all ears.
    I'm running SCOM 2012 R2 with UR2, and the Cluster Management Pack v6.0.7063.0
    My problem is on one particular batch of cluster servers where I am getting the following error.
    Name: Operations Manager failed to run a WMI query for WMI events
    Alert Description:
    Module was unable to enumerate the WMI data
    Error: 0x800706ba
    Details: The RPC server is unavailable
    Workflow name: Microsoft.Windows.Cluster.Node.StateMonitoring
    Instance Name: servername.domain.local
    Instance ID: {instance_id}
    Management group: SCOM_Management_Grp_Name
    I am getting this alert regardless of whether I run the Windows Cluster Action Account as Local System, or as a domain user with full local admin privileges on all the cluster nodes.
    When looking at the management pack and the workflow in particular (Microsoft.Windows.Cluster.Node.StateMonitoring), I can see that it's trying to access
    MSCluster_Node in the root\MSCLUSTER WMI namespace.
    This is the workflow for your information...
    <UnitMonitor> ID="Microsoft.Windows.Cluster.Node.StateMonitoring" Accessibility="Public" Enabled="onEssentialMonitoring" Target="ClusLibrary!Microsoft.Windows.Cluster.Node" ParentMonitorID="Health!System.Health.AvailabilityState" Remotable="true" Priority="Normal" TypeID="ClusLibrary!Microsoft.Windows.Cluster.CheckState" ConfirmDelivery="false">
    <Category>AvailabilityHealth</Category>
    <AlertSettings AlertMessage="Microsoft.Windows.Cluster.Node.StateMonitoring.AlertMessage">
    <AlertOnState>Warning</AlertOnState>
    <AutoResolve>true</AutoResolve>
    <AlertPriority>Normal</AlertPriority>
    <AlertSeverity>MatchMonitorHealth</AlertSeverity>
    <AlertParameters>
    <AlertParameter1>$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</AlertParameter1>
    <AlertParameter2>$Target/Property[Type="ClusLibrary!Microsoft.Windows.Cluster.Node"]/ClusterName$</AlertParameter2>
    </AlertParameters>
    </AlertSettings>
    <OperationalStates>
    <OperationalState ID="Success" MonitorTypeStateID="Online" HealthState="Success" />
    <OperationalState ID="Warning" MonitorTypeStateID="Partial" HealthState="Warning" />
    <OperationalState ID="Error" MonitorTypeStateID="NotOnline" HealthState="Error" />
    </OperationalStates>
    <Configuration>
    <ClusterObjectName>$Target/Property[Type='ClusLibrary!Microsoft.Windows.Cluster.Node']/NodeName$</ClusterObjectName>
    <PollInterval>60</PollInterval>
    <ClusterObjectClass>MSCLUSTER_Node</ClusterObjectClass>
    <OnlineExpression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery>
    </ValueExpression>
    <Operator>Equal</Operator>
    <ValueExpression>
    <Value Type="String">0</Value>
    </ValueExpression>
    </SimpleExpression>
    </OnlineExpression>
    <OnlineExpressionOnDemand>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='State']</XPathQuery>
    </ValueExpression>
    <Operator>Equal</Operator>
    <ValueExpression>
    <Value Type="String">0</Value>
    </ValueExpression>
    </SimpleExpression>
    </OnlineExpressionOnDemand>
    <PartialExpression>
    <Or>
    <Expression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery>
    </ValueExpression>
    <Operator>Equal</Operator>
    <ValueExpression>
    <Value Type="String">2</Value>
    </ValueExpression>
    </SimpleExpression>
    </Expression>
    <Expression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery>
    </ValueExpression>
    <Operator>Equal</Operator>
    <ValueExpression>
    <Value Type="String">3</Value>
    </ValueExpression>
    </SimpleExpression>
    </Expression>
    </Or>
    </PartialExpression>
    <PartialExpressionOnDemand>
    <Or>
    <Expression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='State']</XPathQuery>
    </ValueExpression>
    <Operator>Equal</Operator>
    <ValueExpression>
    <Value Type="String">2</Value>
    </ValueExpression>
    </SimpleExpression>
    </Expression>
    <Expression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='State']</XPathQuery>
    </ValueExpression>
    <Operator>Equal</Operator>
    <ValueExpression>
    <Value Type="String">3</Value>
    </ValueExpression>
    </SimpleExpression>
    </Expression>
    </Or>
    </PartialExpressionOnDemand>
    <NotOnlineExpression>
    <And>
    <Expression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery>
    </ValueExpression>
    <Operator>NotEqual</Operator>
    <ValueExpression>
    <Value Type="String">0</Value>
    </ValueExpression>
    </SimpleExpression>
    </Expression>
    <Expression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery>
    </ValueExpression>
    <Operator>NotEqual</Operator>
    <ValueExpression>
    <Value Type="String">2</Value>
    </ValueExpression>
    </SimpleExpression>
    </Expression>
    <Expression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery>
    </ValueExpression>
    <Operator>NotEqual</Operator>
    <ValueExpression>
    <Value Type="String">3</Value>
    </ValueExpression>
    </SimpleExpression>
    </Expression>
    </And>
    </NotOnlineExpression>
    <NotOnlineExpressionOnDemand>
    <And>
    <Expression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='State']</XPathQuery>
    </ValueExpression>
    <Operator>NotEqual</Operator>
    <ValueExpression>
    <Value Type="String">0</Value>
    </ValueExpression>
    </SimpleExpression>
    </Expression>
    <Expression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='State']</XPathQuery>
    </ValueExpression>
    <Operator>NotEqual</Operator>
    <ValueExpression>
    <Value Type="String">2</Value>
    </ValueExpression>
    </SimpleExpression>
    </Expression>
    <Expression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='State']</XPathQuery>
    </ValueExpression>
    <Operator>NotEqual</Operator>
    <ValueExpression>
    <Value Type="String">3</Value>
    </ValueExpression>
    </SimpleExpression>
    </Expression>
    </And>
    </NotOnlineExpressionOnDemand>
    <WMIFields>Name, State</WMIFields>
    </Configuration>
    </UnitMonitor>
    I can confirm that I am able to browse the MSCluster_Node class locally, as well as remotely using WMIEXPLORER and WBEMTEST,
    however it only works when I set the Authentication Level to
    Packet Privacy.  If I do not select Packet Privacy, a WMI event log error 5605 is logged on the remote servers application log that says...
    The root\mscluster namespace is marked with the RequiresEncryption flag.  Access to this namespace might be denied if the script or application does not have the appropriate authentication level.  Change the authentication level to Pkt_Privacy
    and run the script or application again.
    I can confirm that all firewalls are turned off, and there are no firewalls between the management servers and the agents in question.  AV exclusions have been done and appear to be in place.  The nodes are all Windows 2008 R2 with SP1.  As
    far as I can tell there is plenty of memory available on each of the nodes in question (50%+) of RAM is available. 
    If I manually run the "Discover the Windows Server 2008 R2 Cluster Components" task in the Cluster Service State section of the management pack in the Monitoring Pane in the console, on the nodes in question - the discovery runs successfully.
    Does anybody have any other ideas or suggestions I could try?
    Many thanks in advance,
    Noel.
    http://www.dreamension.net

    Hi,
    Common causes of RPC errors include:
    Errors resolving a DNS or NetBIOS name.
    The RPC service or related services may not be running.
    Problems with network connectivity.
    File and printer sharing is not enabled.
    For more information, please review the link below:
    Windows Server Troubleshooting: "The RPC server is unavailable"
    http://social.technet.microsoft.com/wiki/contents/articles/4494.windows-server-troubleshooting-the-rpc-server-is-unavailable.aspx#Identify
    Troubleshooting RPC Errors
    http://technet.microsoft.com/en-us/magazine/2007.07.howitworks.aspx
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Operations Manager Event ID 31901

    Hi all,
              I am getting error in operations manager agent status column. The error event id is 31901. I have searched a lot on the net for
    it's resolution but did not get any helpful link. So please help me to solve this error.
    Thanks,
    Vishwajeet.

    Hi,
    Would you please share the detail Event with us?
    Regarding the issue, please check the following:
    1. Ensure the Remote Registry service is started on the problematic server
    2. Logon with the Management server action account and see if the following commands one works:
    1) reg query \\<Server FQDN>\HKLM\Software
    2) reg query \\<Server FQDN>\HKLM\Software\Microsoft\Exchange
    3) reg query \\<Server FQDN>\HKLM\System\CurrentControlSet\Services
    3. Clear the HealthService queue on the agent and see if it works:
    1) Stop System Center Management service.
    2) Go to C:\Program Files\System Center Operations Manager 2007\, and rename the “Health Service State” folder.
    3) Restart System Center Management service.
    Hope this helps.
    Thanks.
    Nicholas Li
    TechNet Community Support

  • Operations Manager Event ID 10

    Hello,
    I have on several servers several error Event ID 10:
    SMI-S Script : Inside Discovery Step 1
    SMI-S Script : Inside Discovery Step 2
    SMI-S Script : path
    SMI-S Script : FileConfigFile.xml
    SMI-S Script : Before adding to Ops manager
    SMI-S Script : After adding to Ops manager
    What does this mean? what should I do to prevent these errors?
    Apparently they prevent some Management Packs to be applied .... 
    Or at least delay the process
    Thanks,
    Dom
    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

    Hi,
    Several Management Pack have been imported:
    Exchange Server 2010
    HP Blade
    HP Storage
    HP Work
    Veeam MP For Veeamware
    at least....
    these are the event 10 logged
    Log Name:      Operations Manager
    Source:        Health Service Script
    Date:          11/27/2013 6:28:50 PM
    Event ID:      10
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      OPMGRRMS1.ad
    Description:
    SMI-S Script : Inside Discovery Step 1
    ============================================
    Log Name:      Operations Manager
    Source:        Health Service Script
    Date:          11/27/2013 6:28:50 PM
    Event ID:      10
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      OPMGRRMS1.ad
    Description:
    SMI-S Script : Inside Discovery Step 2
    ============================================
    Log Name:      Operations Manager
    Source:        Health Service Script
    Date:          11/27/2013 6:28:50 PM
    Event ID:      10
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      OPMGRRMS1.ad
    Description:
    SMI-S Script : pathC:\Program Files (x86)\HP\HP Enterprise Storage\
    =================================================
    Log Name:      Operations Manager
    Source:        Health Service Script
    Date:          11/27/2013 6:28:50 PM
    Event ID:      10
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      OPMGRRMS1.ad
    Description:
    SMI-S Script : FileC:\Program Files (x86)\HP\HP Enterprise Storage\ConfigFile.xml
    ==========================================================
    Log Name:      Operations Manager
    Source:        Health Service Script
    Date:          11/27/2013 6:28:50 PM
    Event ID:      10
    Task Category: None
    Level:         Information
    Keywords:      Classic
    User:          N/A
    Computer:      OPMGRRMS1.ad
    Description:
    SMI-S Script : FlagTrue
    ================================================
    Thanks,
    Dom
    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

  • Critical event Id 26319 OpsMgr SDK Service

    Hello,
    Every 15 minutes I see an alert 26319 appear in the event viewer on the Management Server. 
    An exception was thrown while processing GetUserRolesForOperationAndUser for session ID uuid:61430fd3-6107-1bd7-1896-3fe3d2a14a11;id=113.
     Exception message: Value does not fall within the expected range.
     Full Exception: System.ArgumentException: Value does not fall within the expected range.
       at Microsoft.Interop.Security.AzRoles.IAzApplication2.InitializeClientContextFromStringSid(String SidString, Int32 lOptions, Object varReserved)
       at Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AzManHelper.GetScopedRoleAssignmentsForUser(Int32 operationNumericId, String userName)
       at Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AuthorizationService.GetUserRolesForOperationAndUser(Guid operationId, String userName)
       at Microsoft.EnterpriseManagement.ServiceDataLayer.SecurityConfigurationService.GetUserRolesForOperationAndUser(Guid operationId, String userName)
       at Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessBackCompatProxy.GetUserRolesForOperationAndUser(Guid operationId, String userName)
    Soon afterwards appears the event id 26328 with the message: 
    "The client has disconnected. 
    User name: test \ scom 
    Session ID: uuid: 61430fd3-6107-1bd7-1896-3fe3d2a14a11, id = 114 "
    and 26329 with the following message: 
    "A new client has connected. 
    User name: test \ scom 
    Session ID: uuid: 61430fd3-6107-1bd7-1896-3fe3d2a14a11, id = 115 "
    I have the SCOM 2012 R2 in Windows 2012 R2, and the database is in another server, and all windows update installed. 
    This user "test \ scom" is server and scom administrator, and administrator of the server with scom sql.
    Does anyone have an idea what could be the problem? 
    Thank you very much, 
    Rui

    Verify that The SDK and Config services should be running
    To resolve this issue, you must have populated HtmlContent elements or MamlContent elements. Additionally, you must make sure that you do this before you try to import the management pack from one application to the other.
    Also check below links
    http://support.microsoft.com/kb/980862
    http://social.technet.microsoft.com/Forums/systemcenter/en-US/cf341f81-5744-4478-808d-96dda72a37a4/event-id-26319-on-management-server?forum=operationsmanagergeneral
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
    Mai Ali | My blog: Technical | Twitter:
    Mai Ali

  • Event in Cisco Unified Operations Manager makes no sense

    Hi
    The ennvironement is as follows:
    3 CCM 4.x Cluster and lot of h323 Gateways. All is controlled by a gatekeeper.
    For monitoring purposes I'm running a Cisco Unified Operations Manager 2.0.2. From a h323 gateway I recieve an event, that there happend packet loss and that the MOS was below the critical MOS threshold. As destination I see another h323 gateway in the same cluster. What does this mean? For me there is never voice between these 2 gateways. For me this event makes no sense. On the gateways everything looks fine, there are no drops or errors neither on the interface nor on the service-policy.
    Any idea why it's generating this event?
    Regards
    Peter

    Hi Peter,
    I think it would be best if you could get a packet capture (at the point of the 1040 sensor) during the times of one of these low MOS scores and then open a TAC case. The TAC engineer will need to contact the 1040 sensor developers to understand how exactly they are calculating packet loss and the packet capture will help greatly in finding the root cause. There are two components to packet loss for a 1040 sensor.
    1) Actual network packet loss (i.e. based on missing sequence numbers).
    2) Packets lost in the jitter buffer emulation (packet discards). This will
    count as a packet loss for any packet that arrives 20ms past its expected
    arrival time OR any "out of order" packet. Since the packets for a G711 are
    sent at a 20ms rate, a packet which is delayed 20ms may arrive out of order and
    be counted as lost.
    Sri

  • Operations Manager Failed to Access the Windows Event Log and management server is showing warning state

    Hi,
    I am monitoring AD server from SCOM 2012 R2. My management server goes into waning state. When i run Health explorer then it come back in the healthy state but after some time it again goes into warning state. After seeing alert i found that a alert is coming
    again and again i.e.  Operations Manager Failed to Access the Windows Event Log.The description of alert is mention below
    The Windows Event Log Provider is still unable to open the DhcpAdminEvents event log on computer 'nc2vws12ad5.corp.nathcorp.com'.
    The Provider has been unable to open the DhcpAdminEvents event log for 64080 seconds.
    Most recent error details: The RPC server is unavailable.
    Please suggest me how to resolve this so that my management server will again come back in healthy state.
    Thanks
    Abhishek

    Hi Abhishek,
    As i mentioned earlier the Alert resolution says the same points.
    Can you give details on the below ?
    Is there really a log named "Dhcpadminevents" in the MS's Event viewer ?
    Did you recently configure any new alert where you mentioned "Dhcpadminevents"
    as a event log location ?
    If yes then what is the target you selected for the rule / monitor there ?
    Can you post the results for analysis ?
    Gautam.75801

Maybe you are looking for

  • ORA-01578: ORACLE data block corrupted (file # 1, block # 53713)

    When i tried to export data from db (Oracle 11g, 64bit on Linux) Im getting following error About to export specified users ... . exporting pre-schema procedural objects and actions EXP-00008: ORACLE error 604 encountered ORA-00604: error occurred at

  • Survey on Sharepoint that tracks who has participated but anonymises answers.

    Hello, Hoping someone can help. I have a group of individuals that I want to complete a survey. I would like to be able to track which of them have completed said survey but I do not want to be able to see which response belongs to which individual.

  • A strategical problem

    Hi, I want to ask a strategical problem. As educated in college, there is a purpose and there is a tool. In BI, there are two sides that are BW and BO in my opinion. And so, I want to ask which one should be a tool and which one should be a purpose.

  • Read the stack value in a stacked graph upon user action

    Hi, We have a Stacked Column Chart. When the user click on a stack, i want to read that stack value and pass it to a different query to fetch the values for drilldown. Could anyone please advise the solution to do this? Suppose the user click on the

  • One AppleID - two IPAD Syncing?

    Hi there, simple question really, I've one AppleID and one credit card which is associated with it.  But two IPADs, one for me and one for the wife. Do I have to purchase twice as much or can we both share?  I know computers can be authorised upto 5,