Operations Manager Event ID 10

Hello,
I have on several servers several error Event ID 10:
SMI-S Script : Inside Discovery Step 1
SMI-S Script : Inside Discovery Step 2
SMI-S Script : path
SMI-S Script : FileConfigFile.xml
SMI-S Script : Before adding to Ops manager
SMI-S Script : After adding to Ops manager
What does this mean? what should I do to prevent these errors?
Apparently they prevent some Management Packs to be applied ....
Or at least delay the process
Thanks,
Dom
System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Hi,
Several Management Pack have been imported:
Exchange Server 2010
HP Blade
HP Storage
HP Work
Veeam MP For Veeamware
at least....
these are the event 10 logged
Log Name: Operations Manager
Source: Health Service Script
Date: 11/27/2013 6:28:50 PM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: OPMGRRMS1.ad
Description:
SMI-S Script : Inside Discovery Step 1
============================================
Log Name: Operations Manager
Source: Health Service Script
Date: 11/27/2013 6:28:50 PM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: OPMGRRMS1.ad
Description:
SMI-S Script : Inside Discovery Step 2
============================================
Log Name: Operations Manager
Source: Health Service Script
Date: 11/27/2013 6:28:50 PM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: OPMGRRMS1.ad
Description:
SMI-S Script : pathC:\Program Files (x86)\HP\HP Enterprise Storage\
=================================================
Log Name: Operations Manager
Source: Health Service Script
Date: 11/27/2013 6:28:50 PM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: OPMGRRMS1.ad
Description:
SMI-S Script : FileC:\Program Files (x86)\HP\HP Enterprise Storage\ConfigFile.xml
==========================================================
Log Name: Operations Manager
Source: Health Service Script
Date: 11/27/2013 6:28:50 PM
Event ID: 10
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: OPMGRRMS1.ad
Description:
SMI-S Script : FlagTrue
================================================
Thanks,
Dom
System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Similar Messages

Operations Manager Event ID 31901

Hi all,
I am getting error in operations manager agent status column. The error event id is 31901. I have searched a lot on the net for
it's resolution but did not get any helpful link. So please help me to solve this error.
Thanks,
Vishwajeet.

Hi,
Would you please share the detail Event with us?
Regarding the issue, please check the following:
1. Ensure the Remote Registry service is started on the problematic server
2. Logon with the Management server action account and see if the following commands one works:
1) reg query \\<Server FQDN>\HKLM\Software
2) reg query \\<Server FQDN>\HKLM\Software\Microsoft\Exchange
3) reg query \\<Server FQDN>\HKLM\System\CurrentControlSet\Services
3. Clear the HealthService queue on the agent and see if it works:
1) Stop System Center Management service.
2) Go to C:\Program Files\System Center Operations Manager 2007\, and rename the “Health Service State” folder.
3) Restart System Center Management service.
Hope this helps.
Thanks.
Nicholas Li
TechNet Community Support

Operations Manager - KMS Idle Minutes Monitor Alerts - False Positives As Event ID 12290 Still Being Logged

Hi all,
I am using System Center 2012 R2 Operations Manager with the Key Management Service Management Pack at version 6.0.7234.0, and I keep receiving the following alert in Operations Manager:
"Idle Minutes Monitor Alert:
Key Management Service (KMS) inactivity exceeded threshold
Knowledge:
Summary:
The purpose of this rule is to alert system administrators to a possible KMS or network outage. This rule monitors the end-to-end operation of KMS activation. A notification event is created by KMS if no activation or renewal requests were logged by KMS
(activity event 12290) in the specified time interval. In addition to new activations, periodic renewal requests are expected to occur (default is 7 days). Whether or not this alert is serious depends on the number of machines in the KMS environment, how many
are actually connected, and the configured renewal interval.
Causes:
Any failure or incorrect configuration of the KMS service, other Windows components, firewall, hardware, network or routers can trigger the Idle Minutes Alert. This alert can also result from normal behavior, since it is possible that not enough machines
attempted to activate or renew during the specified time interval.
Resolutions:
The first step is to determine whether there really is a problem. Start with a known good KMS client and run (with elevated privileges) the script slmgr.vbs -ato . If the activation/renewal fails, it will report an error code. You can direct the client to
connect to a specific KMS machine by using the slmgr.vbs -skms option. The request event (12288) and response event (12289) in the Windows Application event log may provide additional information, including the identity of failing KMS machines. If there has
been a failure, check the following:
Software Licensing service (slsvc) is running.
Other KMS machine behavior is normal.
KMS firewall port is open (default is TCP 1688).
Attempt to connect to KMS using telnet to the KMS port(you won’t be able to do anything other than connect)
Use a network monitor (e.g. netmon) to capture and trace network problems.
There is one Idle Minutes Monitor that is used to monitor for activity. It may be desirable to adjust the time threshold, depending on expected KMS activity."
Despite what the alert says, there are activity events with ID 12290 being logged, but they are appearing under the 'Key Management Service' log instead of the general 'Application' log. I know that my clients are activating with the server without
any problems as I have run slmgr.vbs -ato with success on a number of them, and none are stating that activation is required. This issue was previously raised here:
http://social.technet.microsoft.com/Forums/systemcenter/en-US/1391acf8-f0be-4a48-9039-8d24e275f1fd/kms-idle-time-monitor-raise-wrong-alerts?forum=operationsmanagermgmtpacks, but I am running Windows Server 2008 R2 SP1 and the hotfix KB981314 comes
up as 'not applicable to this computer' so I assume it is part of SP1 now. I have also tried installing KB2692929, as that was cited as being a possible fix here:
http://social.technet.microsoft.com/Forums/systemcenter/en-US/8ec8ae5b-a310-4b0f-9a5f-e0599bceb93a/kms-managementpack?forum=operationsmanagermgmtpacks, however I am still seeing the same alerts.
Would greatly appreciate any further suggestions!
Many thanks

Hi,
I've checked for all the events that are generated by our servers, and there are periods of time where no requests are received for up to 18 hours, so that is no doubt why the alerts are appearing (we then sometimes see five requests in the same minute,
but there we go). I'll need to adjust the thresholds.
Thank you for your help, Chunky.1, I'll mark your reply as the answer, as it was very helpful in understanding the alert.
For anyone else who needs to check this, create a PowerShell script using the following content, and place your own details into the relevant sections in bold (without the brackets, of course). This will generate a csv file which will have the server
name in one column and the time that the request event was generated - you can then check the gaps between the requests. The script is quick and dirty, with no checks along the way, so feel free to embellish it as required.
Out-File "<directory to place file in>\KMS_check_results.csv"
$results = get-eventlog -ComputerName <KMS server hostname> -logname 'Key Management Service'|where{$_.message -match "<String which identifies servers instead of clients>"}
$filteredresults = @()
foreach($event in $results){
    #This splits up the message into sections, separated by commas, and places each section as an element in an array
    $event.Message -split ","|foreach{
        if($_ -match "<server domain suffix - e.g. contoso.com>"){
            $eventserver = $_
    $timegenerated = $event.TimeGenerated
    $filteredresults += New-Object PSObject -Property @{
        Server = $eventserver
        TimeGenerated = $timegenerated
$filteredresults|select-object server,timegenerated|export-csv "<directory to place file in>\KMS_check_results.csv" -NoTypeInformation

Operations manager failed to run a wmi query for wmi events (0x800706ba)

Hi everyone,
I've been working on this issue for a while and I am still no closer to finding out what the problem is. If anybody can offer any other advice or things to check, I'm all ears.
I'm running SCOM 2012 R2 with UR2, and the Cluster Management Pack v6.0.7063.0
My problem is on one particular batch of cluster servers where I am getting the following error.
Name: Operations Manager failed to run a WMI query for WMI events
Alert Description:
Module was unable to enumerate the WMI data
Error: 0x800706ba
Details: The RPC server is unavailable
Workflow name: Microsoft.Windows.Cluster.Node.StateMonitoring
Instance Name: servername.domain.local
Instance ID: {instance_id}
Management group: SCOM_Management_Grp_Name
I am getting this alert regardless of whether I run the Windows Cluster Action Account as Local System, or as a domain user with full local admin privileges on all the cluster nodes.
When looking at the management pack and the workflow in particular (Microsoft.Windows.Cluster.Node.StateMonitoring), I can see that it's trying to access
MSCluster_Node in the root\MSCLUSTER WMI namespace.
This is the workflow for your information...
<UnitMonitor> ID="Microsoft.Windows.Cluster.Node.StateMonitoring" Accessibility="Public" Enabled="onEssentialMonitoring" Target="ClusLibrary!Microsoft.Windows.Cluster.Node" ParentMonitorID="Health!System.Health.AvailabilityState" Remotable="true" Priority="Normal" TypeID="ClusLibrary!Microsoft.Windows.Cluster.CheckState" ConfirmDelivery="false">
<Category>AvailabilityHealth</Category>
<AlertSettings AlertMessage="Microsoft.Windows.Cluster.Node.StateMonitoring.AlertMessage">
<AlertOnState>Warning</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Normal</AlertPriority>
<AlertSeverity>MatchMonitorHealth</AlertSeverity>
<AlertParameters>
<AlertParameter1>$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</AlertParameter1>
<AlertParameter2>$Target/Property[Type="ClusLibrary!Microsoft.Windows.Cluster.Node"]/ClusterName$</AlertParameter2>
</AlertParameters>
</AlertSettings>
<OperationalStates>
<OperationalState ID="Success" MonitorTypeStateID="Online" HealthState="Success" />
<OperationalState ID="Warning" MonitorTypeStateID="Partial" HealthState="Warning" />
<OperationalState ID="Error" MonitorTypeStateID="NotOnline" HealthState="Error" />
</OperationalStates>
<Configuration>
<ClusterObjectName>$Target/Property[Type='ClusLibrary!Microsoft.Windows.Cluster.Node']/NodeName$</ClusterObjectName>
<PollInterval>60</PollInterval>
<ClusterObjectClass>MSCLUSTER_Node</ClusterObjectClass>
<OnlineExpression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">0</Value>
</ValueExpression>
</SimpleExpression>
</OnlineExpression>
<OnlineExpressionOnDemand>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">Property[@Name='State']</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">0</Value>
</ValueExpression>
</SimpleExpression>
</OnlineExpressionOnDemand>
<PartialExpression>
<Or>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">2</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">3</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</Or>
</PartialExpression>
<PartialExpressionOnDemand>
<Or>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">Property[@Name='State']</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">2</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">Property[@Name='State']</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">3</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</Or>
</PartialExpressionOnDemand>
<NotOnlineExpression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery>
</ValueExpression>
<Operator>NotEqual</Operator>
<ValueExpression>
<Value Type="String">0</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery>
</ValueExpression>
<Operator>NotEqual</Operator>
<ValueExpression>
<Value Type="String">2</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery>
</ValueExpression>
<Operator>NotEqual</Operator>
<ValueExpression>
<Value Type="String">3</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</NotOnlineExpression>
<NotOnlineExpressionOnDemand>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">Property[@Name='State']</XPathQuery>
</ValueExpression>
<Operator>NotEqual</Operator>
<ValueExpression>
<Value Type="String">0</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">Property[@Name='State']</XPathQuery>
</ValueExpression>
<Operator>NotEqual</Operator>
<ValueExpression>
<Value Type="String">2</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">Property[@Name='State']</XPathQuery>
</ValueExpression>
<Operator>NotEqual</Operator>
<ValueExpression>
<Value Type="String">3</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</NotOnlineExpressionOnDemand>
<WMIFields>Name, State</WMIFields>
</Configuration>
</UnitMonitor>
I can confirm that I am able to browse the MSCluster_Node class locally, as well as remotely using WMIEXPLORER and WBEMTEST,
however it only works when I set the Authentication Level to
Packet Privacy. If I do not select Packet Privacy, a WMI event log error 5605 is logged on the remote servers application log that says...
The root\mscluster namespace is marked with the RequiresEncryption flag. Access to this namespace might be denied if the script or application does not have the appropriate authentication level. Change the authentication level to Pkt_Privacy
and run the script or application again.
I can confirm that all firewalls are turned off, and there are no firewalls between the management servers and the agents in question. AV exclusions have been done and appear to be in place. The nodes are all Windows 2008 R2 with SP1. As
far as I can tell there is plenty of memory available on each of the nodes in question (50%+) of RAM is available.
If I manually run the "Discover the Windows Server 2008 R2 Cluster Components" task in the Cluster Service State section of the management pack in the Monitoring Pane in the console, on the nodes in question - the discovery runs successfully.
Does anybody have any other ideas or suggestions I could try?
Many thanks in advance,
Noel.
http://www.dreamension.net

Hi,
Common causes of RPC errors include:
Errors resolving a DNS or NetBIOS name.
The RPC service or related services may not be running.
Problems with network connectivity.
File and printer sharing is not enabled.
For more information, please review the link below:
Windows Server Troubleshooting: "The RPC server is unavailable"
http://social.technet.microsoft.com/wiki/contents/articles/4494.windows-server-troubleshooting-the-rpc-server-is-unavailable.aspx#Identify
Troubleshooting RPC Errors
http://technet.microsoft.com/en-us/magazine/2007.07.howitworks.aspx
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Operations Manager Failed to Access the Windows Event Log and management server is showing warning state

Hi,
I am monitoring AD server from SCOM 2012 R2. My management server goes into waning state. When i run Health explorer then it come back in the healthy state but after some time it again goes into warning state. After seeing alert i found that a alert is coming
again and again i.e. Operations Manager Failed to Access the Windows Event Log.The description of alert is mention below
The Windows Event Log Provider is still unable to open the DhcpAdminEvents event log on computer 'nc2vws12ad5.corp.nathcorp.com'.
The Provider has been unable to open the DhcpAdminEvents event log for 64080 seconds.
Most recent error details: The RPC server is unavailable.
Please suggest me how to resolve this so that my management server will again come back in healthy state.
Thanks
Abhishek

Hi Abhishek,
As i mentioned earlier the Alert resolution says the same points.
Can you give details on the below ?
Is there really a log named "Dhcpadminevents" in the MS's Event viewer ?
Did you recently configure any new alert where you mentioned "Dhcpadminevents"
as a event log location ?
If yes then what is the target you selected for the rule / monitor there ?
Can you post the results for analysis ?
Gautam.75801

Event ID: 1418 Operations Manager SDK service threw an exception

Hi
Today we have received the below event in application event viewer. I have checked connector service working without any issues.
We are using SCOM R2 with CU2 and we are using universal connector
Event Type:   Error
Event Source:   OpsMgr Universal Connector
Event Category:   None
Event ID:   1418
Date:       6/14/2012
Time:       5:09:58 AM
User:       N/A
Computer:   INDRMS1
Description:
2012-06-14 05:09:58.283 [Microsoft.SystemCenter.Interop.Framework.Modules.OpsMgrModule] ERROR Error 1:\nFailure message: Request to update alert ignored due to invalid TimeModified\n0cc6a0f1-08cc-4a44-9c2f-7461c97c9fbd\nMicrosoft.EnterpriseManagement.Common.ConcurrentUpdateException:
Request to update alert ignored due to invalid TimeModified ---> Request to update alert ignored due to invalid TimeModified
   --- End of inner exception stack trace ---\n\n
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp
Help us to understand/troubleshoot on this issue.
Donald D'souza (http://donald-scom.blogspot.com/)

Hi,
Please check if you have applied the following update:
Systems Center Operations Manager 2007 R2 Connectors Cumulative Update 2
http://support.microsoft.com/kb/2274165
If the issue persists, please also check the Event Log on the server and see if there are any related errors.
I also noticed you were using SCOM 2007 R2 Cu2, please try CU6:
OpsMgr 2007 R2 CU6 rollup hotfix ships – and my experience installing it
http://blogs.technet.com/b/kevinholman/archive/2012/05/18/opsmgr-2007-r2-cu6-rollup-hotfix-ships-and-my-experience-installing-it.aspx
Hope this helps.
Thanks.
Nicholas Li
TechNet Community Support

Unified Operations Manager for Version 9.0 clear the events

Please let me know the procedure to clear the events of the Operations Manager 9.0.

Hello Anthony,
Lets pick up the example of Standard LRG in Pre 10.0.
As a use case we used "LRG" to route calls using Local gateway, preferebly.
For Example:
If administrator wish to create a route to a PSTN/CUCM B from particular site then he could simply have a Route list with Standard Local Route Group.
If the administrator has to add another emergency route to CUCM C/PSTN then using Standard Local Route Group would not help and he would have to make site specific Route list and Route patterns.
eg: 8.XXXX pattern would be used by device on site A to reach site E using RG_A_To_E
7.XXXX Pattern would be used by device on site B to reach site E using RG_B_To_E
With the Multiple LRG Enhancement in CUCM 10.0
On the Device Pool page, We can choose to associate the Emergency Route with a route group or leave it blank.
This will reduce the number of route list and route patters to be created.
EX.
Phone 3 calls Phone 5 via Route List “Route List to Site E”
When Phone 3 (DP_C) calls Phone 5 using route pattern 8.XXXX
Route list layer check that the first route group in the preference order is “Emergency Route Group (Local Route Group)”.
It then checks the route group associated with “Emergency Route Group” on Device Pool DP_C.
There is no Route group associated with “Emergency Route Group”.
Hence the Route list layer would check of for next member in the route list And try routing the call via “RG_General”.
**I hope this explains, if any doubts, please, let me know and we can have a quick call to discuss.
Regards
Amit Singh

Event in Cisco Unified Operations Manager makes no sense

Hi
The ennvironement is as follows:
3 CCM 4.x Cluster and lot of h323 Gateways. All is controlled by a gatekeeper.
For monitoring purposes I'm running a Cisco Unified Operations Manager 2.0.2. From a h323 gateway I recieve an event, that there happend packet loss and that the MOS was below the critical MOS threshold. As destination I see another h323 gateway in the same cluster. What does this mean? For me there is never voice between these 2 gateways. For me this event makes no sense. On the gateways everything looks fine, there are no drops or errors neither on the interface nor on the service-policy.
Any idea why it's generating this event?
Regards
Peter

Hi Peter,
I think it would be best if you could get a packet capture (at the point of the 1040 sensor) during the times of one of these low MOS scores and then open a TAC case. The TAC engineer will need to contact the 1040 sensor developers to understand how exactly they are calculating packet loss and the packet capture will help greatly in finding the root cause. There are two components to packet loss for a 1040 sensor.
1) Actual network packet loss (i.e. based on missing sequence numbers).
2) Packets lost in the jitter buffer emulation (packet discards). This will
count as a packet loss for any packet that arrives 20ms past its expected
arrival time OR any "out of order" packet. Since the packets for a G711 are
sent at a 20ms rate, a packet which is delayed 20ms may arrive out of order and
be counted as lost.
Sri

Operations Manager OpsMgr Connector error [event ID21006

Hello,
Our office is currently successfully running SCE 2007 SP1 on one system (NEWSCE) however it had been installed previously on a different server (OLDSCE). It would appear that the previous admin had successfully uninstalled the old server and had it successfully removed from the AD however on all of our servers (and some clients) I am seeing the following OpsMgr Connector error.
Event Type: Error
Event Source: OpsMgr Connector
Event Category: None
Event ID: 21006
Date:  2/17/2009
Time:  1:21:36 PM
User:  N/A
Computer: CRITICAL_SERVER
Description:
The OpsMgr Connector could not connect to OLDSCE.domain.com:5723. The error code is 10061L(No connection could be made because the target machine actively refused it.
). Please verify there is network connectivity, the server is running and has registered it's listening port, and there are no firewalls blocking traffic to the destination.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
This error seems to relate to the fact that I have two copies of MonitoringHost.exe resident in memory and when I look in the registry for OLDSCE I find there are two registry key entires for management groups for OLDSCE_MG and NEWSCE_MG
HKLM\SOFTWARE\Microsoft\Microsoft Operations Manager\3.0\Agent Management Groups\
My question is this:
Can I simply delete the registy key for the OLDSCE_MG managment group and be done with this issue or is there more to it?
Thanks,

Hi , how to delete in registers readily . What is the result ?
the result ?

Managing Events and/or Projects With Disk Images

I came across this method of managing Events and Projects a while ago. I finally got around to giving it a try. Personally, I really like this method.
It's simple.
It keeps things very well organized.
It's easy to open only the project or events that you want.
It's easy to consolidate and back up once you're done.
It takes some workload off FCP X by not having to always open up all your Events and Projects.
So, I thought I would share this for those of you who were not already aware of it.
This is my workflow: (based on the link below)
I create a Disk Image (named for the Event/Project).
(Note: There are two places to create the name, I use both, keep them the same)
I open up FCP X.
I typically put only one Event on this Disk Image.
I then reference whatever Media I need in this Event.
I usually don't bother to copy the media. (except when I'm done and I archive it)
You can create multiple Events, if you feel the need for additional organization.
Then I create however many Projects I need.
(since Projects equates to Sequences from prior FCP versions)
I have a unique Disk Image for each Event/Project that I work on.
To use them ...
First, always make sure FCP X is not running.
Locate the Disk Image in finder.
Double click on the Disk Image and it will Mount on your desktop.
(assuming it's not already mounted on your desktop)
Open up FCP X and it will load the Event(s)/Project(s) in the Disk Image.
If you don't want to work on an Event/Project in FCP X (make sure FCP X is not open), in Finder, simply Eject the Disk Image.
Now when you open FCP X, it won't be there.
Its not gone, but since it's not mounted on the desktop, FCP X simply doesn't see it.
To get it back (obviously quit FCP X first) simply double click the Disk Image in Finder and it remounts.
Open FCP X and you can see it's back.
You can open (double click to mount) as many Event/Project Disk Images as you want.
Just make sure you mount and un-mount disk images when FCP X is not running.
If find this to be a great workflow.
Many thanks to Steve Martin of Riple Training for posting this method.
http://www.kenstone.net/fcp_homepage/fcp_x_managing_disk_image_martin.html

Re the final commercial spot. What I am getting at is if all my media is optimized and therefore in ProRes, and I export in ProRes using the current settings, then shouldn't the media needed to rebuild the project be the same or close to what an exported Quicktime would have been?
Perhaps the notion of "used clips only" is not what it says then. I took that to be the "media managed" feature otherwise why is that wording there. I guess "used" actually refers to all of the media for the project and associated events rather than just for the project. This is misleading because the DUPLICATE operation and menu prompt only appears as a result of requesting an action on the project item.
There are aliases in my original event folder, but before I started this process tried to get FCPX to consolidate media for the project and it already was according the app. Truth is, some of the media is outside of the FCPX required folders. So it's strange that it says it's consolditated, but it's not and yet in duplicating the project it moves the references to the new volume only to point back to the old volume.
So my next question would be: Is there no feature to back up only what's needed to rebuild the final project (edit) reliably. Moving the project moves everything. According to the FCP manual, it seems using the Duplicate feature is the way I should be archiving. However if by "used clips only" FCP X means all media and refrerenced events, then I guess there's nothing for me in here. However then, whey would there be an option (after choosing duplicate project) an option to Duplicate Project and referenced events. If "used clips only" means all media, then there's no difference between the 2nd and 3rd Duplicate Project options.
Thanks Tom.

Unified Communications Operations Manager 8.0: How can I get rid of exlamation marks in Service Level View?

Hi all,
In Operations Manager I open the Service Level View and there are 3 exclamation marks visible for some devices. I acknowledged all alerts & events and they are already cleared now, but I'd like to know if I can get rid of the exclamation marks in Service Level View too. Is this possible?
Kind regards,
Richard
Message was edited by: Richard Bovens

Nancy,
You are God!
It worked!
Thanks.
I have a dumb basic question which is sort of related to your shambles comment, which I don't deny is true.
I am confused about whether style.css files get affiliated with each separate HTML page or whether there is just one style.css file that is affiliated with all my HTML pages. If they are separate CSS files, how do I separate each style.css file?
Best, P.

Team Foundation Server 2010 and System Center 2012 SP1 Operations Manager WorkItem Synchronization fail

Hello,
We are currently implementing a Devops solution with SCOM 2012 SP1 and TFS 2010 SP1 and we would like to synchronize APM alerts with TFS and the Operational Issue WorkItem. However we are not
able to sync anything.
Here is our environments :
Products :
SCOM
System Center Operations Manager 2012 SP1
French
OS: Windows 2012 SP1 Std x64
French
DB: SCOM SQL Server 2012 SP1 x64
Management Pack
MP Operations Manager TFS Work Item Synchronisation 7.0.9538.0
MP Alert Attachement 7.0.9538.0 (We have also try the version in the VM DEVOPSALL : 7.0.9538.1005)
TFS
Team Foundation Server 2010 SP1
French 10.0.40219.1
OS: Windows 2008 R2 SP1 Std x64
French
DB: TFS SQL Server 2008 x64
TFS 2012 Object Model Installer (We have also try the version 2010)
Here is our configuration :
TFS Platform
This a French platform with a project based on the Process Template SCRUM 1.0 alone in a Team Project collection. The Operational Issue import completed successfully. It’s possible to manipulate
Operational Issue for all of its states from TFS.
SCOM Platform
We followed the documentation at :
http://technet.microsoft.com/en-us/library/jj883936.aspx
to configure SCOM Alert Attachment and Operation Manager Tfs Work Item Synchronization. Everything seems to be ok. All configurations succeed. We did not configure Intellitrace collector.
The problem occurs when we are trying to push an APM alert to TFS. When we assigned an alert to the Engineering nothing is synchronized in TFS. There is no error in the event viewer on the TFS
server. But, on the SCOM server we get 2 exceptions raised by Microsoft.EnterpriseManagement.Modules.Apm.TfsWISync.OMModules. We provide you the log of the SCOM Server in this mail.
Detailed exceptions :
Exception message are in French. In English it could be : OEF expected. The followed elements are not closed : Source, Link.
Microsoft.SystemCenter.TfsWISync.SyncAttachments.Rule
TFS Work Item Synchronisation ServerName
{EC924637-2725-7C94-8F37-013B657F4530}
Microsoft.EnterpriseManagement.Modules.Apm.TfsConnector.OMModules.ReadOpenAlertsModule
System.Xml.XmlException: Fin de fichier inattendue. Les éléments suivants ne sont pas fermés : Source, Link. Ligne 1, position 65537.
   à System.Xml.XmlTextReaderImpl.Throw(String res, String arg)
   à System.Xml.XmlTextReaderImpl.ParseElementContent()
   à System.Xml.XmlReader.ReadString()
   à System.Xml.XmlReader.ReadElementString(String name)
   à Microsoft.EnterpriseManagement.Modules.Apm.TfsConnector.Common.DataItems.Links.DeserializeInternal(XmlReader reader)
   à Microsoft.EnterpriseManagement.Modules.Apm.TfsConnector.Common.DataItems.Links.Deserialize(String mappings)
   à Microsoft.EnterpriseManagement.Modules.Apm.TfsConnector.OMModules.ReadOpenAlertsModule.InitializeConfiguration(XmlReader reader)
   à Microsoft.EnterpriseManagement.Modules.Apm.TfsConnector.OMModules.ReadOpenAlertsModule..ctor(ModuleHost`1 moduleHost, XmlReader configurationReader, Byte[] previousState)
Microsoft.SystemCenter.TfsWISync.SyncWorkItems.Rule
TFS Work Item Synchronisation ServerName
{EC924637-2725-7C94-8F37-013B657F4530}
Microsoft.EnterpriseManagement.Modules.Apm.TfsConnector.OMModules.ReadAlertsSyncModule
System.Xml.XmlException: Fin de fichier inattendue. Les éléments suivants ne sont pas fermés : Source, Link. Ligne 1, position 65537.
   à System.Xml.XmlTextReaderImpl.Throw(String res, String arg)
   à System.Xml.XmlTextReaderImpl.ParseElementContent()
   à System.Xml.XmlReader.ReadString()
   à System.Xml.XmlReader.ReadElementString(String name)
   à Microsoft.EnterpriseManagement.Modules.Apm.TfsConnector.Common.DataItems.Links.DeserializeInternal(XmlReader reader)
   à Microsoft.EnterpriseManagement.Modules.Apm.TfsConnector.Common.DataItems.Links.Deserialize(String mappings)
   à Microsoft.EnterpriseManagement.Modules.Apm.TfsConnector.OMModules.ReadAlertsSyncModule.InitializeConfiguration(XmlReader reader)
   à Microsoft.EnterpriseManagement.Modules.Apm.TfsConnector.OMModules.ReadAlertsSyncModule..ctor(ModuleHost`1 moduleHost, XmlReader configurationReader, Byte[] previousState)
According to you, is there a possible incompatibility of the synchronization system with French environments?
Thanks for your help.
Gregory OTT => http://twitter.com/gregory_ott
ALM Engineer at Tekigo => www.tekigo.com

Hi,
To monitor the complete TFS infrastructure, you need additional monitoring packs that alert you about a wide range of problems with TFS components. When you import the TFS Work Item Synchronization management pack, it is a best practice to
also import and configure these monitoring packs, you can double check these:
Monitoring Integration between Operations Manager and TFS in System Center 2012 SP1
http://technet.microsoft.com/en-us/library/jj899893.aspx
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Operations Manager 2007 R2 Failed RMS Promotion

Forum,
I am moving our RMS to a 64-bit computer in preparation to upgrade to Operations Manager 2012. I have followed the directions found in the How to Promote a Root Management Server and it seemed successful. After reviewing the event logs, I have found repeating
21042 and 29106 events. There appears be a problem with my Secure Storage Key. I have tried creating a new key but that doesn't help. I have tried reinstalling my RMS server but I always end up at the same place. The agents are getting the 20070 error and
are unable to communicate with the server. Is there a way to rebuild the secure storage key?
RMS OS - Windows 2012R2
RMS - Ops Manager 2007R2 CU7
21042 Event
Operations Manager has discarded 1 items in management group LCC, which came from $$ROOT$$. These items have been discarded because no valid route exists at this time. This can happen when new devices are added to the topology but the complete
topology has not been distributed yet. The discarded items will be regenerated.
29106 Event
The request to synchronize state for OpsMgr Health Service identified by "00745302-047f-944b-0542-544eb4314c22" failed due to the following exception "System.Security.Cryptography.CryptographicException: Error occurred during a cryptographic
operation.
Server stack trace:
   at Microsoft.EnterpriseManagement.Mom.Internal.AesNativeTransform.DepadBlock(Byte[] block, Int32 offset, Int32 count)
   at Microsoft.EnterpriseManagement.Mom.Internal.AesNativeTransform.TransformFinalBlock(Byte[] inputBuffer, Int32 inputOffset, Int32 inputCount)
   at Microsoft.EnterpriseManagement.Security.SecureStorageManager.Decrypt(Byte[] value)
   at Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.CredentialDocumentHelper.CreateCredentialSectionsForGivenCredentialType(XmlWriter& writer, Result dbRow)
   at Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.CredentialDocumentHelper.InsertCredentialInfo(XmlWriter& writer, ReadOnlyCollection`1 requestedGuids, List`1 dbList, TypeOfCredentialDocumentElement elementType)
   at Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.CredentialDocumentHelper.GenerateCredentialAndCredentialReferenceDocument()
   at Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.RootConnectorMethods.OnRetrieveSecureData(Guid healthServiceId, ReadOnlyCollection`1 addedSecureStorageReferences, ReadOnlyCollection`1 removedSecureStorageReferences, ReadOnlyCollection`1
modifiedSecureStorageReferences, ReadOnlyCollection`1 addedSecureStorageElements, ReadOnlyCollection`1 removedSecureStorageElements, ReadOnlyCollection`1 modifiedSecureStorageElements)
   at Microsoft.EnterpriseManagement.Mom.Sdk.Service.SDKReceiver.OnRetrieveSecureData(Guid healthServiceId, ReadOnlyCollection`1 addedSecureStorageReferences, ReadOnlyCollection`1 removedSecureStorageReferences, ReadOnlyCollection`1 modifiedSecureStorageReferences,
ReadOnlyCollection`1 addedSecureStorageElements, ReadOnlyCollection`1 removedSecureStorageElements, ReadOnlyCollection`1 modifiedSecureStorageElements)
   at System.Runtime.Remoting.Messaging.StackBuilderSink._PrivateProcessMessage(IntPtr md, Object[] args, Object server, Int32 methodPtr, Boolean fExecuteInContext, Object[]& outArgs)
   at System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessage msg, Int32 methodPtr, Boolean fExecuteInContext)
Exception rethrown at [0]:
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at Microsoft.EnterpriseManagement.Mom.Internal.ISdkService.OnRetrieveSecureData(Guid healthServiceId, ReadOnlyCollection`1 addedSecureStorageReferences, ReadOnlyCollection`1 removedSecureStorageReferences, ReadOnlyCollection`1 modifiedSecureStorageReferences,
ReadOnlyCollection`1 addedSecureStorageElements, ReadOnlyCollection`1 removedSecureStorageElements, ReadOnlyCollection`1 modifiedSecureStorageElements)
   at Microsoft.Mom.ConfigService.Networking.ConnectionFactory.Connection.Sender.OnRetrieveSecureData(Guid healthServiceId, ReadOnlyCollection`1 addedSecureStorageReferences, ReadOnlyCollection`1 removedSecureStorageReferences, ReadOnlyCollection`1
modifiedSecureStorageReferences, ReadOnlyCollection`1 addedSecureStorageElements, ReadOnlyCollection`1 removedSecureStorageElements, ReadOnlyCollection`1 modifiedSecureStorageElements)
   at Microsoft.Mom.ConfigService.Networking.ConnectionFactory.Connection.OnRetrieveSecureData(Guid healthServiceId, ReadOnlyCollection`1 addedSecureStorageReferences, ReadOnlyCollection`1 removedSecureStorageReferences, ReadOnlyCollection`1 modifiedSecureStorageReferences,
ReadOnlyCollection`1 addedSecureStorageElements, ReadOnlyCollection`1 removedSecureStorageElements, ReadOnlyCollection`1 modifiedSecureStorageElements)
   at Microsoft.Mom.ConfigService.Engine.ConfigurationEngine.CommunicationHelper.StateSyncRequestTask.ResponseWriter.SecureDataWriter.Write(StateSyncResponseMessage response)
   at Microsoft.Mom.ConfigService.Engine.ConfigurationEngine.CommunicationHelper.StateSyncRequestTask.ResponseWriter.WriteState(StateSyncResponseMessage response)
   at Microsoft.Mom.ConfigService.Engine.ConfigurationEngine.CommunicationHelper.StateSyncRequestTask.ResponseWriter.Write(StateSyncResponseMessage response)
   at Microsoft.Mom.ConfigService.Engine.ConfigurationEngine.CommunicationHelper.StateSyncRequestTask.ResponseWriter.Write(StateContext stateContext, ConfigurationItems configurationItems, StateSyncResponseMessage response, IConnection connection)
   at Microsoft.Mom.ConfigService.Engine.ConfigurationEngine.CommunicationHelper.StateSyncRequestTask.CreateResponse(Managers managers)
   at Microsoft.Mom.ConfigService.Engine.ConfigurationEngine.Managers.Synchronize(OnDoSynchronizedWork onDoSynchronizedWork)
   at Microsoft.Mom.ConfigService.Engine.ConfigurationEngine.CommunicationHelper.StateSyncRequestTask.Execute(Managers managers)
   at Microsoft.Mom.ConfigService.Engine.ConfigurationEngine.CommunicationHelper.StateSyncRequestTask.Run(Guid source, String cookie, Managers managers, IConfigurationDataAccessor dataAccessor, Stream stream, IConnection connection)".
Agent Event Error 20070
The OpsMgr Connector connected to RMS ServerName, but the connection was closed immediately after authentication occurred. The most likely cause of this error is that the agent is not authorized to communicate with the server, or the server
has not received configuration. Check the event log on the server for the presence of 20000 events, indicating that agents which are not approved are attempting to connect.
Thanks,
Warren

Hi Warren,
May be it helps you:
http://blogs.technet.com/b/kevinholman/archive/2009/11/10/29106-event-on-rms-index-was-out-of-range-wait-what.aspx
http://scug.be/christopher/2012/08/31/scom-2007-r2-configuration-not-loaded/
http://anandthearchitect.com/2009/12/02/scom-2007-r2-%E2%80%93-rms-server-not-seeing-the-agents-or-agents-are-not-talking-to-the-server/
Natalya

Dreaded "Operations Manager failed to start a process" error (2012 R2)

I know this error has been covered many times, and on many topics, but this time mine is slightly different.   It's
NOT the
"SCOMpercentageCPUTimeCounter" error covered by Kevin Holman.
Also, I am running SCOM 2012 R2 UR4 (7.1.10226.1046) and everything seems correctly patched (MS and agents), like
suggested by Nicole Welch and Kevin Holman as well.
So my environment is a fresh installation of SCOM 2012 R2, and I am transferring to this new Management Group, the monitored servers from our old SCOM 2012 "R1" (which I did not upgrade but rather made a brand new independent install). So
all servers aren't migrated yet, but I would like to solve this error before. This error did NOT happen in "R1", nor was it overridden (I imported the exact same Management Packs anyway).
On 2012 R2, it happens on almost all new monitored machines, mainly Read-Only Domain Controllers (RODCs).
Here is the kind of alert text I am getting:
Het om 10:10:15 gestarte proces is beëindigd als gevolg van een uitvoerverzamelfout als gevolg van fout 0x80070057 :
The parameter is incorrect.
; mogelijk zijn er gegevens verloren gegaan.
Opdracht die is uitgevoerd: "C:\Windows\system32\cscript.exe" //nologo "C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 193\24788\AD_Global_Catalog_Search_Response.vbs"
RODC02.mydomain.be (objectCategory=DMD) false 4 {9E253FCB-8AAF-491F-CCA3-E632C6C2800C}
Werkmap: C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 193\24788\
Dit is van invloed op een of meer werkstromen.
Werkstroomnaam: Microsoft.Windows.Server.2008.AD.DomainController.GCSearchTime.Monitor
Exemplaarnaam: RODC02
Our servers have Belgian (Dutch) regional settings, hence the language. But check out the highlighted info in bold.
The related event Number (in Alert Context) is 21404. Most other articles about this, mention 21402 or 21403. I suppose they all must be related but still, it's a new one here.
There you have the failing VBS file. I checked all alerts and there seem to be different files concerned overall. Other examples:
C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 233\22737\AD_Database_and_Log.vbs    (from almost all RODCs)
C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 196\19876\Microsoft.Windows.Server.Legacy.FreeSpace.vbs
(also from an RODC)
C:\Program Files\Microsoft System Center 2012 R2\Operations Manager\Server\Health Service State\Monitoring Host Temporary Files 5891\338282\Microsoft.Windows.Server.CPUUtilization.Monitortype.vbs 95 15
SCOM02.mydomain.be 1.4119384288787842     (this one is from my second Management Server..)
Repeat count of the alert is 1 to 2 a day, so it's not nightmareish, but still, requires to be fixed. I suspect that even if there is a different VBS file concerned, since the eventID and the alert text are the same, the repeat count will just increase,
not showing the last actual VBS concerned.
I connect to each of these servers, and browse to the directory containing the file, and the folder is there, the file is there. The error text mentions incorrect parameters but they still seem OK to me.
I found something which might be worth noting: when browsing to the directory, be it on an RODC or on the SCOM server, I get a permission popup requiring some admin rights to do so - although I am using my domain admin (+SCOM+SQL+local
admin everywhere) account:
SCOM services use the Local System account to run, on every machine. I thought Local System shouldn't be concerned with these permissions popups, but normally the domain/local admins aren't either, yet I am.
The "Health service" folder is the only one from the "C:\Program Files\Microsoft Monitoring Agent\Agent" folder to be concerned with this; I can browse without trouble to any other directory there.
After a SCOM service stop, I renamed the "Health Service state" folder (as you can see on the screenshot, there is a "Health Service State bak" folder) and let the service recreate it after a restart, to ensure it was clean and with
appropriate permissions , but it doesn't help.
Might that be a clue?
Or else what? I'm getting confused and don't find a suitable solution.
dd
Bix

On Thu, 4 Dec 2014 14:20:22 +0000, Bixessss wrote:
I know this error has been covered many times, and on many topics, but this time mine is slightly different.   It's*NOT* the "SCOMpercentageCPUTimeCounter" error covered by Kevin Holman <http://blogs.technet.com/b/kevinholman/archive/2010/02/23/a-new-script-error-scompercentagecputimecounter-vbs-invalid-class.aspx>.
Also, I am running *SCOM 2012 R2 UR4* (7.1.10226.1046) and everything seems correctly patched (MS and agents), likesuggested by Nicole Welch <http://nicolewelchscom.wordpress.com/2013/10/01/operations-manager-failed-to-start-a-process/>
and Kevin Holman as well.
This forum is for security issues related to Windows Server and not for
System Center questions.
Post your question in one of the following forums:
https://social.technet.microsoft.com/Forums/systemcenter/en-US/home?category=systemcenteroperationsmanager
Thanks.
Paul Adare - FIM CM MVP
Never trust a computer you can't lift. - Stan Masor

Manually Installed Agent is not showing up in the Operations Manager Console Under Pending Management.

Hi Community,
I submitted this question because I'm a bit stuck with SCOM 2012 R2, I'll try to explain briefly what is happening right now in my environment, we have a DEV SCOM Deployment in which all the roles are installed in a single server, this servers is a
VMware machine running Windows Server 2008R2.
The Initial installation of the SCOM Operations Manager and all the other components was not performed by me but by a co-worker, unfortunately he doesn't remember much about the initial configuration. So i had to pickup where he left things about a year
ago, neither of us are SCOM experts, and we have almost no previous experience with previous versions of this application.
Now the problem that I'm facing is the following, all the DEV Servers are Domain Controllers and one of the indication within the "Guide for System Center Management Pack for Active Directory for Operations Manager 2012" states the following
Configuration
Supported?
Agent-less monitoring
No
After my first review I notice that our servers were being monitor by agent-less mode and given the above statement from the Operations Guide the only way that we could ever get those domain controllers monitor by SCOM would be by installing the agent on
each server, so I read somewhere (Can't remember where) that in order to install the agents in all the servers I should first remove them from the Agent-less node, which I did. Then I tried to use the discovery wizard to get the agent install in all of them
but it didn't matter how many times I try the servers never show up.
I read in a Tech Net Article that you had to modify the security settings so SCOM would let me decide if I wanted to approve it or not.
--> http://technet.microsoft.com/en-us/library/hh212853.aspx
I performed the suggested steps from the article but still the servers were not showing up, not even if I run the Discovery wizard, so I decided to go and perform the installation manually in a couple of servers I was able to install the agent in one of
the Domain Controllers, I configured the agent to use a service account that has Domain Admin rights. An hour after I installed the agent I went back to the Operations Console Manager and I check under Pending Action but the Server was not showing up. So i
went back to the Internet to try to find out if someone else had experience the same problem, and in one website some mentioned that if the servers were not showing up it was probably because they were still register in the SCOM Database, now I have no idea
of how i can check that or How can i remove them from there to have them available again, but what troubles me the most is that even after i installed the agent manually the server were not being recognize.
I went to the Event Viewer and I found one particular event that caught my attention, see below :
Log Name:      Operations Manager
Source:        Health Service Modules
Date:          6/12/2014 12:48:19 PM
Event ID:      11551
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      MyManagementServer
Description:
Computer verification failure for Machine Name: MyManagementServe is 0x800706BA. The RPC server is unavailable.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Health Service Modules" />
    <EventID Qualifiers="49152">11551</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-06-12T16:48:19.000000000Z" />
    <EventRecordID>1945680</EventRecordID>
    <Channel>Operations Manager</Channel>
    <Computer>MyManagementServer</Computer>
    <Security />
</System>
<EventData>
    <Data>MyManagementServe</Data>
    <Data>0x800706BA</Data>
    <Data>The RPC server is unavailable.</Data>
</EventData>
</Event>
Not sure if this is related to the problem that I'm facing right now, but , I make sure that the RPC Services were running and also the related dependencies too. There's no Firewall enable in any of the servers and DNS seems to be working properly.
Ports 135 / 5723 are open and listening so since I ran out of ideas, I would like to know if some of the experts in this field could perhaps give me some guidelines.
There's one caveat that I haven't mention yet and that is related to SQL, I checked and my user just has read access to SQL i'm not sure if that could affect this but i think is worth mentioning.
My main goal is to have all the servers showing up in the Operations Manager Console.
So thanks all in advance !
Oscar Loria

So you can ping and nslookup from your ms to these agents and vice versa right? I wouldn't do a manual install, I would push the agent from the management server. You can uninstall the agent manually, or use cleanmom to get rid of them. Then
do an install from the console. When you initiate the install from the console (management server), should it run into any issues it will dump out an error which will give you an idea of where the problem may be.
From Holmans post on this:
e MOM Server could not execute WMI Query "Select * from Win32_OperatingSystem" on
computer “servername.domain.com”
Operation: Agent Install
Install account: DOMAIN\account
Error Code: 800706BA
Error Description: The RPC server is unavailable.
The MOM Server could not execute WMI Query "(null)” on
computer “servername.domain.com”
Operation: Agent Install
Install account: DOMAIN\account
Error Code: 800706BA
Error Description: The RPC server is unavailable.
8004100A
800706BA
1. Ensure agent push account has local admin rights
2. Firewall is blocking NetBIOS access. If Windows 2008 firewall is enabled, ensure “Remote Administration (RPC)” rule is enabled/allowed. We need port 135 (RPC) and the DCOM port range opened for console push through a firewall.
3. Inspect WMI service, health, and rebuild repository if necessary
4. Firewall is blocking ICMP (Live OneCare)
5. DNS incorrect
http://blogs.technet.com/b/kevinholman/archive/2009/01/27/console-based-agent-deployment-troubleshooting-table.aspx
Regards, Blake Email: mengotto<at>hotmail.com Blog: http://discussitnow.wordpress.com/ If my response was helpful, please mark it as so, if it answered your question, then please also mark it accordingly. Thank you.

Operations Manager Event ID 10

Similar Messages

Maybe you are looking for