Operations Manager OpsMgr Connector error [event ID21006

Hello,
Our office is currently successfully running SCE 2007 SP1 on one system (NEWSCE) however it had been installed previously on a different server (OLDSCE). It would appear that the previous admin had successfully uninstalled the old server and had it successfully removed from the AD however on all of our servers (and some clients) I am seeing the following OpsMgr Connector error.
Event Type: Error
Event Source: OpsMgr Connector
Event Category: None
Event ID: 21006
Date:  2/17/2009
Time:  1:21:36 PM
User:  N/A
Computer: CRITICAL_SERVER
Description:
The OpsMgr Connector could not connect to OLDSCE.domain.com:5723.  The error code is 10061L(No connection could be made because the target machine actively refused it.
).  Please verify there is network connectivity, the server is running and has registered it's listening port, and there are no firewalls blocking traffic to the destination.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
This error seems to relate to the fact that I have two copies of MonitoringHost.exe resident in memory and when I look in the registry for OLDSCE I find there are two registry key entires for management groups for OLDSCE_MG and NEWSCE_MG
HKLM\SOFTWARE\Microsoft\Microsoft Operations Manager\3.0\Agent Management Groups\
My question is this:
Can I simply delete the registy key for the OLDSCE_MG managment group and be done with this issue or is there more to it?
Thanks,

Hi , how to delete in registers readily . What is the result ?
the result ?

Similar Messages

  • OpsMgr Connector 20066 event on Gateway server

    Hi,
    We have one of our Gateway servers in Grey state. When i had checked the eventviewer of the server could find lots of 20066 events and 21042 OpsMgr connector errors.
    Log Name:      Operations Manager
    Source:        OpsMgr Connector
    Date:          3/30/2014 4:17:40 AM
    Event ID:      20066
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      XXXXXXXXXXXX
    Description:
    A Certificate for use with Mutual Authentication was specified, but that certificate could not be found.  The ability for this Health Service to communicate will likely be impacted.
    Log Name:      Operations Manager
    Source:        OpsMgr Connector
    Date:          3/30/2014 4:17:40 AM
    Event ID:      21042
    Task Category: None
    Level:         Information
    Keywords:      Classic
    User:          N/A
    Computer:      XXXXXXXXXXX
    Description:
    Operations Manager has discarded 4 items in management group 'MG Group Name', which came from YYYYYYYYY.  These items have been discarded because no valid route exists at this time.  This can happen when new devices are added to the topology but the
    complete topology has not been distributed yet.  The discarded items will be regenerated.
    Unable to find any articles to troubleshoot the issue. Any suggestions?
    Jesty

    Hi Saravanan,
    Please see inline my response.
    1. Was the GW server working properly before?
    Yes the GW server was fine till yestrday and all agents were healthy.
    2. Were valid certificates imported on GW and its corresponding MS
    We have not imported any GW or MS certificates in the past few days.
    3. Is there a communication issue between the GW and its MS?
    Could you help me find out how to find out as i dont find any error in the eventviewer.
    4. Do you see a value named 'ChannelCertificateSerialnumber' under "HKLM\Software\Microsoft\Microsoft Operations Manager\3.0\Machine Settings". The value you see there should be in exact reverse order of what you see as the Certificate Serial number
    in MMC Certificates snap-in (Run- MMC- Add Snap In -- Certificates -- Computer Account. Expand the personal store and there should be a certificate that scom uses for the GW server.
    I did see the
    ChannelCertificateSerialnumber in the registry entry and the certificate that scom uses and they seems to be different.
    i have 3 certificates in the personal store in which 2 are internal issuing CA ceritificates created using
    computer authentication V2 and web auth template.
    The other certificate is an invalid cerificate which has been expired exactly an year ago.
    Jesty

  • Service Manager Exchange Connector error

    We have a noticed a few of these errors show up for the exchange connector.
    Exchange Connector: Unable to process mail item. Subject="[SR15902] this is another test", Error Message=The key value of an object cannot be changed.
    We are using the latest version of the exchange connector (7.5.2017.6).   We recently added a second management server on another machine and it also has the exchange connector there.
    Any ideas why we would get this error?    Thanks in advance.
    Thanks Lance

    Hi,
    I would like to confirm did you use Exchange connector 3.0, if that is the case, please try the newest connector published recently.
    Exchange connector 3.1 is published, would you please try it:
    System Center Service Manager Connector 3.1 for Exchange
    http://www.microsoft.com/en-us/download/details.aspx?id=45291
    Regards,
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • Creating a Linked Report in SC 2012 - Operations Manager fails with Error

    Hello everyone,
    I was trying to create a linked report based on an availability report recently. I found Emre Guclu's scom linked report creation guide here:
    http://blogs.technet.com/b/emreguclu/archive/2011/10/13/using-linked-reports-in-scom-to-create-custom-availability-reports-for-specified-monitors.aspx
    I go to SSRS web console and select a report (Which is Microsoft.SystemCenter.DataWarehouse.Availability in Microsoft.SystemCenter.Datawarehouse.Reports), select "Create a Linked Report" from context menu, select another location for storing the
    report just like on this guide but i get an error rsWrongItemType with exact text:
    "The operation you are attempting on item ' Microsoft.SystemCenter.Datawarehouse.Reports/ Microsoft.SystemCenter.Datawarehouse.Availability' is not allowed for this item type. rsWrongItemType"
    Does anyone know why is this error happening and better how to fix this?
    Below is the screenshot of SSRS.

    Hi,
    Please check the report path you have set, the location must specify the full report path, such as
    /custom report folder/MyReport.
    Alex Zhao
    TechNet Community Support

  • Please help: After removed a connector (nagios-connector) there is an error at the operations Manager Console

    Hello,
    after installing the nagios connecor and it doesn'work, i  try to remove it; with the powershell command remove-SCOMConnector. After removing it, Get-SCOMConnector shows me, that it doesn't exist:
    PS D:\> Get-SCOMConnector
    Name        : Network Monitoring Internal Connector
    DisplayName : Connector for populating network devices.
    Description :
    Initialized : False
    Name        :
    DisplayName :
    Description :
    Initialized : True
    Name        : SMASH Discovery Internal Connector
    DisplayName : Connector for populating SMASH devices.
    Description :
    Initialized : False
    Name        : Operations Manager Internal Connector
    DisplayName : A connector used by Operations Manager components to insert discovery data, please create your own connec
                  tor do not use this connector.
    Description :
    Initialized : False
    But when i take a look to the connectors in Operations Manager Console, it hangs, after a while i have this error:
    Date: 27.05.2014 10:04:43
    Application: Operations Manager
    Application Version: 7.1.10226.0
    Severity: Error
    Message: 
    System.NullReferenceException: Object reference not set to an instance of an object.
       at Microsoft.EnterpriseManagement.ConnectorFramework.EnterpriseManagementConnector.Reconnect(EnterpriseManagementGroup managementGroup)
       at Microsoft.EnterpriseManagement.Mom.Internal.UI.Cache.Query`1.GetUpdate(IndexTable indexTable, QueryUpdate`1 update, CacheCursor cursor, Range range, Int32 offset, Int32 groupLevel)
       at Microsoft.EnterpriseManagement.Mom.Internal.UI.Cache.QueryCache`2.GetUpdate(IndexTable indexTable, QueryUpdate`1 update)
       at Microsoft.EnterpriseManagement.Mom.Internal.UI.Cache.QueryCache`2.GetUpdate(CacheSession session, Boolean fullUpdate)
       at Microsoft.EnterpriseManagement.Mom.Internal.UI.Cache.QueryCache`2.FireUpdateEvent(CacheSession session, DateTime updateTime, Boolean dataChanged, Boolean fullUpdate, Boolean updatesOnly, IEnumerable queryResult)
       at Microsoft.EnterpriseManagement.Mom.Internal.UI.Cache.Query`1.FireUpdateEvents(CacheSession session, Boolean dataChanged, Boolean fullUpdate, ICollection`1 queryResult)
       at Microsoft.EnterpriseManagement.Mom.Internal.UI.Cache.Query`1.PostQuery(CacheSession session, IndexTable indexTable, UpdateReason reason, UpdateType updateType, Boolean dataChanged, DateTime queryTime, ICollection`1 queryResult)
       at Microsoft.EnterpriseManagement.Mom.Internal.UI.Cache.Query`1.InternalSyncQuery(CacheSession session, IndexTable indexTable, UpdateReason reason, UpdateType updateType)
       at Microsoft.EnterpriseManagement.Mom.Internal.UI.Cache.Query`1.InternalQuery(CacheSession session, UpdateReason reason)
       at Microsoft.EnterpriseManagement.Mom.Internal.UI.Cache.Query`1.TryDoQuery(UpdateReason reason, CacheSession session)
       at Microsoft.EnterpriseManagement.Mom.Internal.UI.Console.ConsoleJobExceptionHandler.ExecuteJob(IComponent component, EventHandler`1 job, Object sender, ConsoleJobEventArgs args)
    Can somebody help me fixing this error?
    Strange.. the powerShell Command "get-SCOMConnector" works.. but the console hangs (on loading) when i want to show the connectors...
    Kind regards
    Wolfgang

    Hi,
    I agree, we may need to remove the connector from OpsDB. In addition, here is blog regarding to the similar issue, hope it helps:
    Error: “Object reference not set to an Instance of an Object” System Center Operation Manager 2012 Connector.
    http://blogs.technet.com/b/birojitn/archive/2012/07/07/error-object-reference-not-set-to-an-instance-of-an-object-system-center-operation-manager-2012-connector.aspx
    Regards,
    Yan Li
    Regards, Yan Li

  • Error Installing Operations Manager

    System Center Operation Manager installer encountered error during installation and 'Setup cannot be completed' during the 'Data warehouse configuration' stage. I have included the obfuscated log file to hide some details of what the server configuration
    actually is, but the essence should remain. I am unfamiliar with what to interpret in the log file and could use some help figuring how to get the install to succeed.
    (log was too long so I have uploaded it on pastebin http://pastebin.com/c9kFhkaJ )

    Hi,
    Which version of SCOM? Please check requirements. Kevin has Quickstart guides.
    System Requirements for System Center 2012 - Operations Manager
    https://technet.microsoft.com/en-us/library/hh205990.aspx
    OpsMgr 2012 R2 – QuickStart Deployment Guide
    http://blogs.technet.com/b/kevinholman/archive/2013/10/18/opsmgr-2012-r2-quickstart-deployment-guide.aspx
    OpsMgr 2012 SP1 - QuickStart deployment guide
    http://blogs.technet.com/b/kevinholman/archive/2013/01/15/opsmgr-2012-sp1-quickstart-deployment-guide.aspx
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • Event ID: 1418 Operations Manager SDK service threw an exception

    Hi
    Today we have received the below event in application event viewer. I have checked connector service working without any issues.
    We are using SCOM R2 with CU2 and we are using universal connector
    Event Type:    Error
    Event Source:    OpsMgr Universal Connector
    Event Category:    None
    Event ID:    1418
    Date:        6/14/2012
    Time:        5:09:58 AM
    User:        N/A
    Computer:    INDRMS1
    Description:
    2012-06-14 05:09:58.283 [Microsoft.SystemCenter.Interop.Framework.Modules.OpsMgrModule] ERROR Error 1:\nFailure message: Request to update alert ignored due to invalid TimeModified\n0cc6a0f1-08cc-4a44-9c2f-7461c97c9fbd\nMicrosoft.EnterpriseManagement.Common.ConcurrentUpdateException:
    Request to update alert ignored due to invalid TimeModified ---> Request to update alert ignored due to invalid TimeModified
       --- End of inner exception stack trace ---\n\n
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp
    Help us to understand/troubleshoot on this issue.
    Donald D'souza (http://donald-scom.blogspot.com/)

    Hi,
    Please check if you have applied the following update:
    Systems Center Operations Manager 2007 R2 Connectors Cumulative Update 2
    http://support.microsoft.com/kb/2274165
    If the issue persists, please also check the Event Log on the server and see if there are any related errors.
    I also noticed you were using SCOM 2007 R2 Cu2, please try CU6:
    OpsMgr 2007 R2 CU6 rollup hotfix ships – and my experience installing it
    http://blogs.technet.com/b/kevinholman/archive/2012/05/18/opsmgr-2007-r2-cu6-rollup-hotfix-ships-and-my-experience-installing-it.aspx
    Hope this helps.
    Thanks.
    Nicholas Li
    TechNet Community Support

  • Event id: 21010 OpsMgr Connector

    Windows 2003 Server in the Internet DMZ in a workgroup not reporting to SCOM2012 SP1
    Error logged in the Operations Manager Log on the SCOM2012 Server:
    The OpsMgr Connector negotiated the use of mutual authentication with 1P.IP.IP.IP:4092, but Active Directory is not available and no certificate is installed.
    A connection cannot be established.
    Error logged in operation manager log on Windows 2003 Server:
    The OpsMgr Connector connected to RMS.domain.com, but the connection was closed immediately without authentication taking place. 
    The most likely cause of this error is a failure to authenticate either this agent or the server .
     Check the event log on the server and on the agent for events which indicate a failure to authenticate.
    Done the following so far no luck ….
    5723 opened both ways from this Windows 2003 server and our scom2012 SP1 server.
    Created certificates for this Windows 2003 Server numerous times and imported using the momcertimport successfully
    Certs are created using the FQDN of this Windows 2003 Server
    On Windows 2003 Server checked the regkey to make sure the Serial Number of the cert is valid and not screwed up.
    Host file is in place on this Windows 2003 Server pointing to my SCOm2012 SP1 server and pinging is not an issue.
    Stopped the SCOM Agent service on Windows 2003 Server and renamed the folder here C:\Program Files\System Center Operations Manager\Agent\health service state and restarted the service.
    Certificate on the SCOM2012 server is also valid and not screwed up in the registry.
    review new manual agent installation in pending management view is also enabled under security on the scom 2012 server
    I don’t see any thing logged in the Agent Logs on my SCOM 2012 Server related to the above installation attempts.
    I know SCOM2012SP1 supports Windows 2003 SP3.  My windows 2003 Servers are SP3.
    https://techswag.nl/Monitoring/SCOM/2013/06/21/installing-scom2012-sp1-agent-on-not-supported-windows-os
    Pleae let me know if I have missed anything ...merci

    Try import with MOMCertimport.exe on the newly added MS. Once you did that all worked as expected.
    Also you can check below link
    http://social.technet.microsoft.com/Forums/systemcenter/en-US/4a16bb99-586b-4961-9e28-46a74516e5f6/monitoring-workgroup-computers-with-opsmgr-2007-and-certificates?forum=operationsmanagergeneral
    Please remember, if you see a post that helped you please click (Vote As Helpful) and if it answered your question, please click (Mark As Answer).

  • OMServer.msi returns error 1603 when trying to upgrade first management server from Operations Manager 2012 SP1 to Operations Manager 2012 R2

    Hi All, looking for some assistance with the following issue.
    We are attempting to upgrade our Operations Manager 2012 SP1 environment to Operations Manager 2012 R2.
    We have completed all the pre-upgrade tasks detailed here
    http://technet.microsoft.com/en-us/library/dn249704.aspx
    We are then following the guidance detailed here regarding upgrading distributed management groups
    http://technet.microsoft.com/en-us/library/dn249721.aspx. The upgrade fails on the first management server with the following screen being displayed.
    OMServer.log file is as follows.
    === Verbose logging started: 22/01/2014 10:21:27 Build type: SHIP UNICODE 5.00.9200.00 Calling process: C:\Users\scomaction\AppData\Local\SCOM\Setup\SetupChainerUI.exe ===
    MSI (c) (78:34) [10:21:27:040]: Resetting cached policy values
    MSI (c) (78:34) [10:21:27:040]: Machine policy value 'Debug' is 0
    MSI (c) (78:34) [10:21:27:040]: ******* RunEngine:
    ******* Product: F:\InstallFiles\SCOMR2\Setup\AMD64\Server\OMServer.msi
    ******* Action:
    ******* CommandLine: **********
    MSI (c) (78:34) [10:21:27:040]: Client-side and UI is none or basic: Running entire install on the server.
    MSI (c) (78:34) [10:21:27:040]: Grabbed execution mutex.
    MSI (c) (78:34) [10:21:27:071]: Cloaking enabled.
    MSI (c) (78:34) [10:21:27:071]: Attempting to enable all disabled privileges before calling Install on Server
    MSI (c) (78:34) [10:21:27:071]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (D4:30) [10:21:27:082]: Running installation inside multi-package transaction F:\InstallFiles\SCOMR2\Setup\AMD64\Server\OMServer.msi
    MSI (s) (D4:30) [10:21:27:082]: Grabbed execution mutex.
    MSI (s) (D4:A0) [10:21:27:086]: Resetting cached policy values
    MSI (s) (D4:A0) [10:21:27:086]: Machine policy value 'Debug' is 0
    MSI (s) (D4:A0) [10:21:27:086]: ******* RunEngine:
    ******* Product: F:\InstallFiles\SCOMR2\Setup\AMD64\Server\OMServer.msi
    ******* Action:
    ******* CommandLine: **********
    MSI (s) (D4:A0) [10:21:27:175]: Machine policy value 'DisableUserInstalls' is 0
    MSI (s) (D4:A0) [10:21:27:181]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
    MSI (s) (D4:A0) [10:21:27:190]: SRSetRestorePoint skipped for this transaction.
    MSI (s) (D4:A0) [10:21:27:192]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
    MSI (s) (D4:A0) [10:21:27:200]: File will have security applied from OpCode.
    MSI (s) (D4:A0) [10:21:27:234]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'F:\InstallFiles\SCOMR2\Setup\AMD64\Server\OMServer.msi' against software restriction policy
    MSI (s) (D4:A0) [10:21:27:234]: SOFTWARE RESTRICTION POLICY: F:\InstallFiles\SCOMR2\Setup\AMD64\Server\OMServer.msi has a digital signature
    MSI (s) (D4:A0) [10:21:27:354]: SOFTWARE RESTRICTION POLICY: F:\InstallFiles\SCOMR2\Setup\AMD64\Server\OMServer.msi is permitted to run at the 'unrestricted' authorization level.
    MSI (s) (D4:A0) [10:21:27:354]: MSCOREE not loaded loading copy from system32
    MSI (s) (D4:A0) [10:21:27:360]: End dialog not enabled
    MSI (s) (D4:A0) [10:21:27:360]: Original package ==> F:\InstallFiles\SCOMR2\Setup\AMD64\Server\OMServer.msi
    MSI (s) (D4:A0) [10:21:27:360]: Package we're running from ==> C:\Windows\Installer\4b8344.msi
    MSI (s) (D4:A0) [10:21:27:371]: APPCOMPAT: Compatibility mode property overrides found.
    MSI (s) (D4:A0) [10:21:27:372]: APPCOMPAT: looking for appcompat database entry with ProductCode '{C92727BE-BD12-4140-96A6-276BA4F60AC1}'.
    MSI (s) (D4:A0) [10:21:27:372]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (D4:A0) [10:21:27:378]: Machine policy value 'TransformsSecure' is 1
    MSI (s) (D4:A0) [10:21:27:379]: Machine policy value 'DisablePatch' is 0
    MSI (s) (D4:A0) [10:21:27:379]: Machine policy value 'AllowLockdownPatch' is 0
    MSI (s) (D4:A0) [10:21:27:379]: Machine policy value 'DisableLUAPatching' is 0
    MSI (s) (D4:A0) [10:21:27:379]: Machine policy value 'DisableFlyWeightPatching' is 0
    MSI (s) (D4:A0) [10:21:27:380]: APPCOMPAT: looking for appcompat database entry with ProductCode '{C92727BE-BD12-4140-96A6-276BA4F60AC1}'.
    MSI (s) (D4:A0) [10:21:27:380]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (D4:A0) [10:21:27:380]: Transforms are not secure.
    MSI (s) (D4:A0) [10:21:27:380]: Note: 1: 2205 2: 3: Control
    MSI (s) (D4:A0) [10:21:27:380]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\scomaction\AppData\Local\SCOM\Logs\OMServer.log'.
    MSI (s) (D4:A0) [10:21:27:380]: Command Line: OM_INSTALLDIR=F:\Program Files\Microsoft System Center 2012 R2\Operations Manager SEND_CEIP_REPORTS=0 MU_SETTING=0 ROOT_MANAGEMENT_SERVER_PORT=5723 SC_DB_SERVER=SCOM-XXX-AG SCDATABASENAME=OperationsManager DW_DB_SERVER=SCOM-XXX-AG DWDATABASENAME=OperationsManagerDW REBOOT=ReallySuppress CURRENTDIRECTORY=C:\Users\scomaction\AppData\Local\SCOM\Setup CLIENTUILEVEL=3 MSICLIENTUSESEXTERNALUI=1 CLIENTPROCESSID=4472
    MSI (s) (D4:A0) [10:21:27:380]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{58EFE971-58C1-4DBD-A400-A7607A745475}'.
    MSI (s) (D4:A0) [10:21:27:380]: Product Code passed to Engine.Initialize: ''
    MSI (s) (D4:A0) [10:21:27:380]: Product Code from property table before transforms: '{C92727BE-BD12-4140-96A6-276BA4F60AC1}'
    MSI (s) (D4:A0) [10:21:27:380]: Product Code from property table after transforms: '{C92727BE-BD12-4140-96A6-276BA4F60AC1}'
    MSI (s) (D4:A0) [10:21:27:380]: Product not registered: beginning first-time install
    MSI (s) (D4:A0) [10:21:27:380]: Product {C92727BE-BD12-4140-96A6-276BA4F60AC1} is not managed.
    MSI (s) (D4:A0) [10:21:27:380]: MSI_LUA: Credential prompt not required, user is an admin
    MSI (s) (D4:A0) [10:21:27:381]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
    MSI (s) (D4:A0) [10:21:27:381]: Entering CMsiConfigurationManager::SetLastUsedSource.
    MSI (s) (D4:A0) [10:21:27:381]: User policy value 'SearchOrder' is 'nmu'
    MSI (s) (D4:A0) [10:21:27:381]: Adding new sources is allowed.
    MSI (s) (D4:A0) [10:21:27:381]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
    MSI (s) (D4:A0) [10:21:27:381]: Package name extracted from package path: 'OMServer.msi'
    MSI (s) (D4:A0) [10:21:27:381]: Package to be registered: 'OMServer.msi'
    MSI (s) (D4:A0) [10:21:27:383]: Note: 1: 2262 2: AdminProperties 3: -2147287038
    MSI (s) (D4:A0) [10:21:27:383]: Machine policy value 'DisableMsi' is 1
    MSI (s) (D4:A0) [10:21:27:383]: Machine policy value 'AlwaysInstallElevated' is 0
    MSI (s) (D4:A0) [10:21:27:383]: User policy value 'AlwaysInstallElevated' is 0
    MSI (s) (D4:A0) [10:21:27:383]: Product installation will be elevated because user is admin and product is being installed per-machine.
    MSI (s) (D4:A0) [10:21:27:383]: Running product '{C92727BE-BD12-4140-96A6-276BA4F60AC1}' with elevated privileges: Product is assigned.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding OM_INSTALLDIR property. Its value is 'F:\Program Files\Microsoft System Center 2012 R2\Operations Manager'.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding ROOT_MANAGEMENT_SERVER_PORT property. Its value is '5723'.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Modifying SC_DB_SERVER property. Its current value is 'OperationsManager'. Its new value: 'SCOM-XXX-AG'.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding DW_DB_SERVER property. Its value is 'SCOM-XXX-AG'.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding DWDATABASENAME property. Its value is 'OperationsManagerDW'.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Users\scomaction\AppData\Local\SCOM\Setup'.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding MSICLIENTUSESEXTERNALUI property. Its value is '1'.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '4472'.
    MSI (s) (D4:A0) [10:21:27:383]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
    MSI (s) (D4:A0) [10:21:27:383]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality.
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'.
    MSI (s) (D4:A0) [10:21:27:383]: TRANSFORMS property is now:
    MSI (s) (D4:A0) [10:21:27:383]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '300'.
    MSI (s) (D4:A0) [10:21:27:395]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Roaming
    MSI (s) (D4:A0) [10:21:27:396]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\Favorites
    MSI (s) (D4:A0) [10:21:27:398]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Network Shortcuts
    MSI (s) (D4:A0) [10:21:27:399]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\Documents
    MSI (s) (D4:A0) [10:21:27:401]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
    MSI (s) (D4:A0) [10:21:27:402]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Recent
    MSI (s) (D4:A0) [10:21:27:404]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\SendTo
    MSI (s) (D4:A0) [10:21:27:405]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Templates
    MSI (s) (D4:A0) [10:21:27:405]: SHELL32::SHGetFolderPath returned: C:\ProgramData
    MSI (s) (D4:A0) [10:21:27:406]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Local
    MSI (s) (D4:A0) [10:21:27:408]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\Pictures
    MSI (s) (D4:A0) [10:21:27:411]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    MSI (s) (D4:A0) [10:21:27:413]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
    MSI (s) (D4:A0) [10:21:27:414]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
    MSI (s) (D4:A0) [10:21:27:415]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
    MSI (s) (D4:A0) [10:21:27:417]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
    MSI (s) (D4:A0) [10:21:27:420]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    MSI (s) (D4:A0) [10:21:27:421]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
    MSI (s) (D4:A0) [10:21:27:423]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
    MSI (s) (D4:A0) [10:21:27:424]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Start Menu
    MSI (s) (D4:A0) [10:21:27:426]: SHELL32::SHGetFolderPath returned: C:\Users\scomaction\Desktop
    MSI (s) (D4:A0) [10:21:27:427]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
    MSI (s) (D4:A0) [10:21:27:428]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
    MSI (s) (D4:A0) [10:21:27:428]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
    MSI (s) (D4:A0) [10:21:27:433]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
    MSI (s) (D4:A0) [10:21:27:434]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
    MSI (s) (D4:A0) [10:21:27:434]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
    MSI (s) (D4:A0) [10:21:27:434]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
    MSI (s) (D4:A0) [10:21:27:434]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Windows User'.
    MSI (s) (D4:A0) [10:21:27:434]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
    MSI (s) (D4:A0) [10:21:27:434]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\4b8344.msi'.
    MSI (s) (D4:A0) [10:21:27:434]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'F:\InstallFiles\SCOMR2\Setup\AMD64\Server\OMServer.msi'.
    MSI (s) (D4:A0) [10:21:27:434]: Machine policy value 'MsiDisableEmbeddedUI' is 0
    MSI (s) (D4:A0) [10:21:27:434]: EEUI - Disabling MsiEmbeddedUI due to existing external or embedded UI
    MSI (s) (D4:A0) [10:21:27:434]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
    MSI (s) (D4:A0) [10:21:27:434]: Note: 1: 2205 2: 3: PatchPackage
    MSI (s) (D4:A0) [10:21:27:434]: Machine policy value 'DisableRollback' is 0
    MSI (s) (D4:A0) [10:21:27:434]: User policy value 'DisableRollback' is 0
    MSI (s) (D4:A0) [10:21:27:434]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
    === Logging started: 22/01/2014 10:21:27 ===
    MSI (s) (D4:A0) [10:21:27:435]: Note: 1: 2203 2: C:\Windows\Installer\inprogressinstallinfo.ipi 3: -2147287038
    MSI (s) (D4:A0) [10:21:27:436]: APPCOMPAT: [DetectVersionLaunchCondition] Launch condition already passes.
    MSI (s) (D4:A0) [10:21:27:438]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
    MSI (s) (D4:A0) [10:21:27:438]: Doing action: INSTALL
    Action start 10:21:27: INSTALL.
    MSI (s) (D4:A0) [10:21:27:444]: Running ExecuteSequence
    MSI (s) (D4:A0) [10:21:27:444]: Doing action: SystemFolder.A591E3B4_D228_431D_BF89_99D52C8FFB76
    MSI (s) (D4:A0) [10:21:27:447]: PROPERTY CHANGE: Adding SystemFolder.A591E3B4_D228_431D_BF89_99D52C8FFB76 property. Its value is 'C:\Windows\SysWOW64\'.
    Action start 10:21:27: SystemFolder.A591E3B4_D228_431D_BF89_99D52C8FFB76.
    MSI (s) (D4:A0) [10:21:27:448]: Doing action: System64Folder.A591E3B4_D228_431D_BF89_99D52C8FFB76
    Action ended 10:21:27: SystemFolder.A591E3B4_D228_431D_BF89_99D52C8FFB76. Return value 1.
    MSI (s) (D4:A0) [10:21:27:450]: PROPERTY CHANGE: Adding System64Folder.A591E3B4_D228_431D_BF89_99D52C8FFB76 property. Its value is 'C:\Windows\system32\'.
    Action start 10:21:27: System64Folder.A591E3B4_D228_431D_BF89_99D52C8FFB76.
    MSI (s) (D4:A0) [10:21:27:450]: Doing action: WindowsFolder.62894CB9_4320_40DB_B4E4_C0347FAB97B6
    Action ended 10:21:27: System64Folder.A591E3B4_D228_431D_BF89_99D52C8FFB76. Return value 1.
    MSI (s) (D4:A0) [10:21:27:452]: PROPERTY CHANGE: Adding WindowsFolder.62894CB9_4320_40DB_B4E4_C0347FAB97B6 property. Its value is 'C:\Windows\'.
    Action start 10:21:27: WindowsFolder.62894CB9_4320_40DB_B4E4_C0347FAB97B6.
    MSI (s) (D4:A0) [10:21:27:453]: Doing action: System64Folder.A7850EAF_DD6F_4ED6_9581_E958CBD8A522
    Action ended 10:21:27: WindowsFolder.62894CB9_4320_40DB_B4E4_C0347FAB97B6. Return value 1.
    MSI (s) (D4:A0) [10:21:27:455]: PROPERTY CHANGE: Adding System64Folder.A7850EAF_DD6F_4ED6_9581_E958CBD8A522 property. Its value is 'C:\Windows\system32\'.
    Action start 10:21:27: System64Folder.A7850EAF_DD6F_4ED6_9581_E958CBD8A522.
    MSI (s) (D4:A0) [10:21:27:456]: Doing action: WindowsFolder_x86_VC.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C
    Action ended 10:21:27: System64Folder.A7850EAF_DD6F_4ED6_9581_E958CBD8A522. Return value 1.
    MSI (s) (D4:A0) [10:21:27:458]: PROPERTY CHANGE: Adding WindowsFolder_x86_VC.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C property. Its value is 'C:\Windows\'.
    Action start 10:21:27: WindowsFolder_x86_VC.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C.
    MSI (s) (D4:A0) [10:21:27:458]: Doing action: SystemFolder_x86_VC.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C
    Action ended 10:21:27: WindowsFolder_x86_VC.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C. Return value 1.
    MSI (s) (D4:A0) [10:21:27:461]: PROPERTY CHANGE: Adding SystemFolder_x86_VC.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C property. Its value is 'C:\Windows\SysWOW64\'.
    Action start 10:21:27: SystemFolder_x86_VC.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C.
    MSI (s) (D4:A0) [10:21:27:461]: Doing action: WindowsFolder_amd64_VC.1C11561A_11CB_36A7_8A47_D7A042055FA7
    Action ended 10:21:27: SystemFolder_x86_VC.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C. Return value 1.
    MSI (s) (D4:A0) [10:21:27:463]: PROPERTY CHANGE: Adding WindowsFolder_amd64_VC.1C11561A_11CB_36A7_8A47_D7A042055FA7 property. Its value is 'C:\Windows\'.
    Action start 10:21:27: WindowsFolder_amd64_VC.1C11561A_11CB_36A7_8A47_D7A042055FA7.
    MSI (s) (D4:A0) [10:21:27:463]: Doing action: System64Folder_amd64_VC.1C11561A_11CB_36A7_8A47_D7A042055FA7
    Action ended 10:21:27: WindowsFolder_amd64_VC.1C11561A_11CB_36A7_8A47_D7A042055FA7. Return value 1.
    MSI (s) (D4:A0) [10:21:27:466]: PROPERTY CHANGE: Adding System64Folder_amd64_VC.1C11561A_11CB_36A7_8A47_D7A042055FA7 property. Its value is 'C:\Windows\system32\'.
    Action start 10:21:27: System64Folder_amd64_VC.1C11561A_11CB_36A7_8A47_D7A042055FA7.
    MSI (s) (D4:A0) [10:21:27:467]: Doing action: WindowsFolder.399B61E4_41A2_4BE4_889A_A0D0761C88A8
    Action ended 10:21:27: System64Folder_amd64_VC.1C11561A_11CB_36A7_8A47_D7A042055FA7. Return value 1.
    MSI (s) (D4:A0) [10:21:27:468]: PROPERTY CHANGE: Adding WindowsFolder.399B61E4_41A2_4BE4_889A_A0D0761C88A8 property. Its value is 'C:\Windows\'.
    Action start 10:21:27: WindowsFolder.399B61E4_41A2_4BE4_889A_A0D0761C88A8.
    MSI (s) (D4:A0) [10:21:27:469]: Doing action: WindowsFolder.80B659D9_F758_4E7D_B4FA_E53FC737DCC9
    Action ended 10:21:27: WindowsFolder.399B61E4_41A2_4BE4_889A_A0D0761C88A8. Return value 1.
    MSI (s) (D4:A0) [10:21:27:471]: PROPERTY CHANGE: Adding WindowsFolder.80B659D9_F758_4E7D_B4FA_E53FC737DCC9 property. Its value is 'C:\Windows\'.
    Action start 10:21:27: WindowsFolder.80B659D9_F758_4E7D_B4FA_E53FC737DCC9.
    MSI (s) (D4:A0) [10:21:27:472]: Doing action: WindowsFolder.3A3B255D_E19B_4D2E_8687_D6EF0314AFBE
    Action ended 10:21:27: WindowsFolder.80B659D9_F758_4E7D_B4FA_E53FC737DCC9. Return value 1.
    MSI (s) (D4:A0) [10:21:27:474]: PROPERTY CHANGE: Adding WindowsFolder.3A3B255D_E19B_4D2E_8687_D6EF0314AFBE property. Its value is 'C:\Windows\'.
    Action start 10:21:27: WindowsFolder.3A3B255D_E19B_4D2E_8687_D6EF0314AFBE.
    MSI (s) (D4:A0) [10:21:27:475]: Doing action: ProgramMenuFolder.CFE2C791_D05A_4240_90ED_DEB20161DFB0
    Action ended 10:21:27: WindowsFolder.3A3B255D_E19B_4D2E_8687_D6EF0314AFBE. Return value 1.
    MSI (s) (D4:A0) [10:21:27:477]: PROPERTY CHANGE: Adding ProgramMenuFolder.CFE2C791_D05A_4240_90ED_DEB20161DFB0 property. Its value is 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\'.
    Action start 10:21:27: ProgramMenuFolder.CFE2C791_D05A_4240_90ED_DEB20161DFB0.
    MSI (s) (D4:A0) [10:21:27:477]: Doing action: FindRelatedProducts
    Action ended 10:21:27: ProgramMenuFolder.CFE2C791_D05A_4240_90ED_DEB20161DFB0. Return value 1.
    Action start 10:21:27: FindRelatedProducts.
    MSI (s) (D4:A0) [10:21:27:481]: PROPERTY CHANGE: Adding CORECOMPONENTPRESENT_AGENT property. Its value is '{8B21425D-02F3-4B80-88CE-8F79B320D330}'.
    MSI (s) (D4:A0) [10:21:27:483]: Skipping action: _StopCoreServices.80B659D9_F758_4E7D_B4FA_E53FC737DCC9 (condition is false)
    MSI (s) (D4:A0) [10:21:27:483]: Skipping action: _KillOMProcesses.80B659D9_F758_4E7D_B4FA_E53FC737DCC9 (condition is false)
    MSI (s) (D4:A0) [10:21:27:483]: Skipping action: _SearchOpsMgrShellPath.CFE2C791_D05A_4240_90ED_DEB20161DFB0 (condition is false)
    MSI (s) (D4:A0) [10:21:27:483]: Doing action: _SetMonadFilePath.CFE2C791_D05A_4240_90ED_DEB20161DFB0
    Action ended 10:21:27: FindRelatedProducts. Return value 1.
    MSI (s) (D4:08) [10:21:27:501]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI847C.tmp, Entrypoint: SetMonadFilePath
    MSI (s) (D4:B0) [10:21:27:502]: Generating random cookie.
    MSI (s) (D4:B0) [10:21:27:505]: Created Custom Action Server with PID 4964 (0x1364).
    MSI (s) (D4:34) [10:21:27:527]: Running as a service.
    MSI (s) (D4:34) [10:21:27:529]: Hello, I'm your 64bit Impersonated custom action server.
    Action start 10:21:27: _SetMonadFilePath.CFE2C791_D05A_4240_90ED_DEB20161DFB0.
    MSI (s) (D4!DC) [10:21:27:638]: PROPERTY CHANGE: Modifying MONAD_SHELL_PATH property. Its current value is 'Error: Value Never Set. Check the CACore:SetMonadFilePath CA'. Its new value: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe'.
    GetRegistyStringValue: Registy key value found.. C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    MSI (s) (D4:A0) [10:21:27:640]: Doing action: _Set_CORECOMPONENTPRESENT
    Action ended 10:21:27: _SetMonadFilePath.CFE2C791_D05A_4240_90ED_DEB20161DFB0. Return value 1.
    MSI (s) (D4:A0) [10:21:27:643]: PROPERTY CHANGE: Adding CORECOMPONENTPRESENT property. Its value is '{8B21425D-02F3-4B80-88CE-8F79B320D330}'.
    Action start 10:21:27: _Set_CORECOMPONENTPRESENT.
    MSI (s) (D4:A0) [10:21:27:644]: Skipping action: _AbortDowngradeProductAttempt (condition is false)
    MSI (s) (D4:A0) [10:21:27:644]: Doing action: _AbortIncompatibleComponents
    Action ended 10:21:27: _Set_CORECOMPONENTPRESENT. Return value 1.
    Action start 10:21:27: _AbortIncompatibleComponents.
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 5044 could not be cancelled. Error: 1168
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 1580 could not be cancelled. Error: 1168
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 5512 could not be cancelled. Error: 1168
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 4268 could not be cancelled. Error: 1168
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 5024 could not be cancelled. Error: 1168
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 6064 could not be cancelled. Error: 1168
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 3396 could not be cancelled. Error: 1168
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 2704 could not be cancelled. Error: 1168
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 5568 could not be cancelled. Error: 1168
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 5940 could not be cancelled. Error: 1168
    MSI (s) (D4:30) [10:21:27:652]: I/O on thread 1968 could not be cancelled. Error: 1168
    MSI (s) (D4:A0) [10:21:27:652]: Product: System Center Operations Manager 2012 Server -- The Operations Manager management server cannot be installed on a computer on which the Operations Manager agent, Operations Manager gateway, System Center Essentials, or System Center Service Manager is already installed. These must be uninstalled to proceed.
    The Operations Manager management server cannot be installed on a computer on which the Operations Manager agent, Operations Manager gateway, System Center Essentials, or System Center Service Manager is already installed. These must be uninstalled to proceed.
    Action ended 10:21:27: _AbortIncompatibleComponents. Return value 3.
    Action ended 10:21:27: INSTALL. Return value 3.
    Property(S): DiskPrompt = Please Insert Disk 1
    Property(S): UpgradeCode = {17058653-A628-4C03-8F80-5E2B179ECD55}
    Property(S): SCDATABASENAME = OperationsManager
    Property(S): SC_DB_SERVER = SCOM-XXX-AG
    Property(S): SDK_PASSWORD.540EA3C0_A5E9_41EA_A585_822C09EA2650 = **********
    Property(S): CORECOMPONENTPRESENT = {8B21425D-02F3-4B80-88CE-8F79B320D330}
    Property(S): OM_INSTALLDIR = F:\Program Files\Microsoft System Center 2012 R2\Operations Manager
    Property(S): ProgramFiles64Folder = C:\Program Files\
    Property(S): Privileged = 1
    Property(S): ARPSYSTEMCOMPONENT = 1
    Property(S): DONOTSKIPDELETESERVICES = 0
    Property(S): DONOTSKIPINSTALLSERVICES = 0
    Property(S): OM_COMMON_PRODUCT_REGISTRY_PATH = SOFTWARE\Microsoft\System Center Operations Manager
    Property(S): OM_COMMON_PRODUCT_RELEASE_REGISTRY_KEY = 12
    Property(S): OM_COMMON_PRODUCT_DEFAULT_INSTALL_DIR = System Center Operations Manager
    Property(S): NetFxVersion = v2.0.50727
    Property(S): IS_OM_SERVER = 1
    Property(S): InstallAPMAgent = 1
    Property(S): INSTALLLEVEL = 100
    Property(S): ALLUSERS = 1
    Property(S): ARPNOREPAIR = 0
    Property(S): ARPURLINFOABOUT = http://www.microsoft.com/mom
    Property(S): ARPURLUPDATEINFO = http://www.microsoft.com/mom
    Property(S): ARPHELPLINK = http://support.microsoft.com
    Property(S): MSIRESTARTMANAGERCONTROL = Disable
    Property(S): SQL_PORT = 1433
    Property(S): DbSizeGood = 1
    Property(S): DbFileOptionsGood = 1
    Property(S): DbFilesSpaceGood = 1
    Property(S): DbNameGood = 1
    Property(S): SqlServicesStarted = 1
    Property(S): _SetSDKServiceAccount.540EA3C0_A5E9_41EA_A585_822C09EA2650 = **********
    Property(S): _SetConfigServiceAccount.540EA3C0_A5E9_41EA_A585_822C09EA2650 = **********
    Property(S): DialogWizardTitle = System Center 2012 R2 Operations Manager Setup
    Property(S): MinimumOSMsg = This product must be installed on Windows Server 2008 R2 or higher.
    Property(S): MOMSDKPortDesc = Operations Manager SDK.
    Property(S): MOMConnectorPortDesc = Operations Manager Connector Framework.
    Property(S): MOMAEMPortDesc = Operations Manager Application Error Monitoring.
    Property(S): MOMSQMPortDesc = Operations Manager Customer Experience Improvement Program.
    Property(S): MOMHSPortDesc = System Center Management Health Service
    Property(S): SCOMV3SP1ProgramName = System Center 2012 R2 Operations Manager
    Property(S): FWRulePingRequestName = Operations Manager Ping Request (Echo Request - ICMPv4 OUT)
    Property(S): FWRulePingRequestDesc = Operations Manager network monitoring ping request
    Property(S): FWRulePingResponseName = Operations Manager Ping Response (Echo Response - ICMPv4 IN)
    Property(S): FWRulePingResponseDesc = Operations Manager network monitoring ping response
    Property(S): FWRuleSnmpRequestName = Operations Manager SNMP Request
    Property(S): FWRuleSnmpRequestDesc = Operations Manager network monitoring SNMP request
    Property(S): FWRuleSnmpResponseName = Operations Manager SNMP Response
    Property(S): FWRuleSnmpResponseDesc = Operations Manager network monitoring SNMP response
    Property(S): FWRuleSnmpTrapListenerName = Operations Manager SNMP Trap Listener
    Property(S): FWRuleSnmpTrapListenerDesc = Operations Manager network monitoring SNMP trap listener
    Property(S): Manufacturer = Microsoft Corporation
    Property(S): ProductCode = {C92727BE-BD12-4140-96A6-276BA4F60AC1}
    Property(S): ProductLanguage = 1033
    Property(S): ProductName = System Center Operations Manager 2012 Server
    Property(S): ProductVersion = 7.1.10226.0
    Property(S): SecureCustomProperties = ACTIONSPASSWORD;CORECOMPONENTPRESENT_AGENT;CORECOMPONENTPRESENT_GW;CORECOMPONENTPRESENT_RC;CORECOMPONENTPRESENT_SCE;CORECOMPONENTPRESENT_SMB2;CORECOMPONENTPRESENT_SMRTM;IS_AVICODE_AGENT_INSTALLED;IS_MOMASPAGENT_INSTALLED;MOM_DB_SERVER;MOMDATABASENAME_OLD;OM_NEWER_PRODUCT_FOUND;SDK_PASSWORD.540EA3C0_A5E9_41EA_A585_822C09EA2650;SQL_PORT
    Property(S): MsiHiddenProperties = _SetConfigServiceAccount.540EA3C0_A5E9_41EA_A585_822C09EA2650;_SetSDKServiceAccount.540EA3C0_A5E9_41EA_A585_822C09EA2650;ACTIONSPASSWORD;SDK_PASSWORD.540EA3C0_A5E9_41EA_A585_822C09EA2650
    Property(S): WixPdbPath = d:\btvsts\20867\private\product\setup\wix\msi\server\om\obj\amd64\OMServer.wixpdb
    Property(S): CORECOMPONENTPRESENT_AGENT = {8B21425D-02F3-4B80-88CE-8F79B320D330}
    Property(S): ProgramMenuFolder.CFE2C791_D05A_4240_90ED_DEB20161DFB0 = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
    Property(S): MONAD_SHELL_PATH = C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    Property(S): EnableEV.CFE2C791_D05A_4240_90ED_DEB20161DFB0 = 1
    Property(S): AddInstallPath.CFE2C791_D05A_4240_90ED_DEB20161DFB0 = add
    Property(S): RemoveInstallPath.CFE2C791_D05A_4240_90ED_DEB20161DFB0 = remove
    Property(S): WindowsFolder.3A3B255D_E19B_4D2E_8687_D6EF0314AFBE = C:\Windows\
    Property(S): VersionNT = 602
    Property(S): DW_DB_SERVER = SCOM-XXX-AG
    Property(S): DWDATABASENAME = OperationsManagerDW
    Property(S): OMDATABASENAME = OperationsManger
    Property(S): MaximumDataAgeMinutes = 10080
    Property(S): MaximumQueueSizeKB = 102400
    Property(S): MOMSDKPort.1451A536_2C9B_42F2_A37A_C9C6460E7EEA = 5724
    Property(S): MOMConnectorPort.1451A536_2C9B_42F2_A37A_C9C6460E7EEA = 51905
    Property(S): MOMAEMPort.1451A536_2C9B_42F2_A37A_C9C6460E7EEA = 51906
    Property(S): MOMSQMPort.1451A536_2C9B_42F2_A37A_C9C6460E7EEA = 51907
    Property(S): SDK_SERVICE_TYPE = 4
    Property(S): ROOT_MANAGEMENT_SERVER_PORT = 5723
    Property(S): SERVER_MANAGEMENT_GROUP_TYPE.C6F00077_9737_419B_A8B6_B309BA6F8FC8 = 1
    Property(S): MaximumForwardedVirtualQueuePercentage = 8
    Property(S): QueueSendDataSinglePriority = 0
    Property(S): ADMIN_ROLE_GROUP.C6F00077_9737_419B_A8B6_B309BA6F8FC8 = Administrators
    Property(S): USE_MANUALLY_SPECIFIED_SETTINGS = 1
    Property(S): WindowsFolder.80B659D9_F758_4E7D_B4FA_E53FC737DCC9 = C:\Windows\
    Property(S): CommonFiles64Folder = C:\Program Files\Common Files\
    Property(S): CAN_REGISTER_FOR_MU = 0
    Property(S): MU_SETTING = 0
    Property(S): IS_ROOT_HEALTH_SERVICE = 0
    Property(S): IS_MOM_SERVER = 0
    Property(S): IS_MOM_GATEWAY = 0
    Property(S): WindowsFolder.399B61E4_41A2_4BE4_889A_A0D0761C88A8 = C:\Windows\
    Property(S): WindowsFolder_amd64_VC.1C11561A_11CB_36A7_8A47_D7A042055FA7 = C:\Windows\
    Property(S): System64Folder_amd64_VC.1C11561A_11CB_36A7_8A47_D7A042055FA7 = C:\Windows\system32\
    Property(S): DirectoryTable100_amd64.1C11561A_11CB_36A7_8A47_D7A042055FA7 = DirectoryTable
    Property(S): WindowsFolder_x86_VC.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C = C:\Windows\
    Property(S): SystemFolder_x86_VC.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C = C:\Windows\SysWOW64\
    Property(S): DirectoryTable100_x86.DF495DFD_79F6_34DF_BB1E_E58DB5BDCF2C = DirectoryTable
    Property(S): SEND_CEIP_REPORTS = 0
    Property(S): System64Folder.A7850EAF_DD6F_4ED6_9581_E958CBD8A522 = C:\Windows\system32\
    Property(S): ACS_AGENT_ACCOUNT.A7850EAF_DD6F_4ED6_9581_E958CBD8A522 =
    Property(S): WindowsFolder.62894CB9_4320_40DB_B4E4_C0347FAB97B6 = C:\Windows\
    Property(S): SC_COMMON_REGISTRY_PATH = SOFTWARE\Microsoft\System Center\2010\Common
    Property(S): DISCOVERY_DATA_AUTHORIZATION_ENABLED = 0
    Property(S): IcmpProtocol.ADADB3CF_4DA7_4040_90AE_3E4E0E0A6FBF = 1
    Property(S): IcmpRequestType.ADADB3CF_4DA7_4040_90AE_3E4E0E0A6FBF = 8:*
    Property(S): IcmpResponseType.ADADB3CF_4DA7_4040_90AE_3E4E0E0A6FBF = 0:*
    Property(S): SnmpProtocol.ADADB3CF_4DA7_4040_90AE_3E4E0E0A6FBF = 17
    Property(S): SnmpPort.ADADB3CF_4DA7_4040_90AE_3E4E0E0A6FBF = 161
    Property(S): SnmpTrapPort.ADADB3CF_4DA7_4040_90AE_3E4E0E0A6FBF = 162
    Property(S): DirectionIn.ADADB3CF_4DA7_4040_90AE_3E4E0E0A6FBF = 0
    Property(S): DirectionOut.ADADB3CF_4DA7_4040_90AE_3E4E0E0A6FBF = 1
    Property(S): SystemFolder.A591E3B4_D228_431D_BF89_99D52C8FFB76 = C:\Windows\SysWOW64\
    Property(S): System64Folder.A591E3B4_D228_431D_BF89_99D52C8FFB76 = C:\Windows\system32\
    Property(S): ADVISOR_UPLOADFREQUENCY_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #1
    Property(S): ADVISOR_UPLOADDAY_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #-1
    Property(S): ADVISOR_UPLOADTIMEHOUR_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #-1
    Property(S): ADVISOR_UPLOADTIMEMIN_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #-1
    Property(S): ADVISOR_MAXCACHESIZE_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #1024
    Property(S): ADVISOR_MAXMAILBOXSIZE_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #1024
    Property(S): ADVISOR_ARCHIVEPERIOD_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #5
    Property(S): ADVISOR_LOGLEVEL_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #3
    Property(S): ADVISOR_NEEDMPINITIALIZE_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #1
    Property(S): ADVISOR_LYNC_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #0
    Property(S): ADVISOR_SHAREPOINT_PROP.192DDC2A_1CC5_4B2A_9D76_D8D0FC70175A = #0
    Property(S): MsiLogFileLocation = C:\Users\scomaction\AppData\Local\SCOM\Logs\OMServer.log
    Property(S): PackageCode = {58EFE971-58C1-4DBD-A400-A7607A745475}
    Property(S): ProductState = -1
    Property(S): PackagecodeChanging = 1
    Property(S): REBOOT = ReallySuppress
    Property(S): CURRENTDIRECTORY = C:\Users\scomaction\AppData\Local\SCOM\Setup
    Property(S): CLIENTUILEVEL = 3
    Property(S): MSICLIENTUSESEXTERNALUI = 1
    Property(S): CLIENTPROCESSID = 4472
    Property(S): MsiSystemRebootPending = 1
    Property(S): VersionDatabase = 300
    Property(S): VersionMsi = 5.00
    Property(S): VersionNT64 = 602
    Property(S): WindowsBuild = 9200
    Property(S): ServicePackLevel = 0
    Property(S): ServicePackLevelMinor = 0
    Property(S): MsiNTProductType = 3
    Property(S): WindowsFolder = C:\Windows\
    Property(S): WindowsVolume = C:\
    Property(S): System64Folder = C:\Windows\system32\
    Property(S): SystemFolder = C:\Windows\SysWOW64\
    Property(S): RemoteAdminTS = 1
    Property(S): TempFolder = C:\Users\SCOMAC~1\AppData\Local\Temp\
    Property(S): ProgramFilesFolder = C:\Program Files (x86)\
    Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
    Property(S): AppDataFolder = C:\Users\scomaction\AppData\Roaming\
    Property(S): FavoritesFolder = C:\Users\scomaction\Favorites\
    Property(S): NetHoodFolder = C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
    Property(S): PersonalFolder = C:\Users\scomaction\Documents\
    Property(S): PrintHoodFolder = C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
    Property(S): RecentFolder = C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\Recent\
    Property(S): SendToFolder = C:\Users\scomaction\AppData\Roaming\Microsoft\Windows\SendTo\
    Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
    Property(S): CommonAppDataFolder = C:\ProgramData\
    Property(S): LocalAppDataFolder = C:\Users\scomaction\AppData\Local\
    Property(S): MyPicturesFolder = C:\Users\scomaction\Pictures\
    Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
    Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
    Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
    Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
    Property(S): DesktopFolder = C:\Users\Public\Desktop\
    Property(S): FontsFolder = C:\Windows\Fonts\
    Property(S): GPTSupport = 1
    Property(S): OLEAdvtSupport = 1
    Property(S): ShellAdvtSupport = 1
    Property(S): MsiAMD64 = 6
    Property(S): Msix64 = 6
    Property(S): Intel = 6
    Property(S): PhysicalMemory = 8192
    Property(S): VirtualMemory = 7854
    Property(S): AdminUser = 1
    Property(S): MsiTrueAdminUser = 1
    Property(S): LogonUser = scomaction
    Property(S): UserSID = S-1-5-21-607126847-70518424-489426498-210484
    Property(S): UserLanguageID = 2057
    Property(S): ComputerName = SCOMMS1-VM
    Property(S): SystemLanguageID = 2057
    Property(S): ScreenX = 1024
    Property(S): ScreenY = 768
    Property(S): CaptionHeight = 23
    Property(S): BorderTop = 1
    Property(S): BorderSide = 1
    Property(S): TextHeight = 16
    Property(S): TextInternalLeading = 3
    Property(S): ColorBits = 32
    Property(S): TTCSupport = 1
    Property(S): Time = 10:21:27
    Property(S): Date = 22/01/2014
    Property(S): MsiNetAssemblySupport = 4.0.30319.17929
    Property(S): MsiWin32AssemblySupport = 6.2.9200.16384
    Property(S): RedirectedDllSupport = 2
    Property(S): MsiRunningElevated = 1
    Property(S): USERNAME = Windows User
    Property(S): DATABASE = C:\Windows\Installer\4b8344.msi
    Property(S): OriginalDatabase = F:\InstallFiles\SCOMR2\Setup\AMD64\Server\OMServer.msi
    Property(S): UILevel = 2
    Property(S): ACTION = INSTALL
    MSI (s) (D4:A0) [10:21:27:697]: Note: 1: 1708
    MSI (s) (D4:A0) [10:21:27:698]: Product: System Center Operations Manager 2012 Server -- Installation operation failed.
    MSI (s) (D4:A0) [10:21:27:698]: Windows Installer installed the product. Product Name: System Center Operations Manager 2012 Server. Product Version: 7.1.10226.0. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 1603.
    MSI (s) (D4:A0) [10:21:27:744]: Deferring clean up of packages/files, if any exist
    MSI (s) (D4:A0) [10:21:27:744]: MainEngineThread is returning 1603
    MSI (s) (D4:30) [10:21:27:744]: No System Restore sequence number for this installation.
    === Logging stopped: 22/01/2014 10:21:27 ===
    MSI (s) (D4:30) [10:21:27:746]: User policy value 'DisableRollback' is 0
    MSI (s) (D4:30) [10:21:27:746]: Machine policy value 'DisableRollback' is 0
    MSI (s) (D4:30) [10:21:27:746]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (D4:30) [10:21:27:746]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (D4:30) [10:21:27:746]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (D4:30) [10:21:27:746]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
    MSI (s) (D4:30) [10:21:27:747]: Destroying RemoteAPI object.
    MSI (s) (D4:B0) [10:21:27:747]: Custom Action Manager thread ending.
    MSI (c) (78:34) [10:21:27:748]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
    MSI (c) (78:34) [10:21:27:749]: MainEngineThread is returning 1603
    === Verbose logging stopped: 22/01/2014 10:21:27 ===
    Any assistance anyone can provide will be greatly appreciated.

    Verify from permission of user that you use it in upgrade, make sure that scom machine and user that you use it in upgrade in sysadmin group in database of operationsManager and OperationsManagerDW
    Also Verify from Prerequisites of Upgrade SCOM 2012 sp1 as below link
    http://technet.microsoft.com/en-us/library/jj656654.aspx
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"

  • Operations Manager - KMS Idle Minutes Monitor Alerts - False Positives As Event ID 12290 Still Being Logged

    Hi all,
    I am using System Center 2012 R2 Operations Manager with the Key Management Service Management Pack at version 6.0.7234.0, and I keep receiving the following alert in Operations Manager:
    "Idle Minutes Monitor Alert:
    Key Management Service (KMS) inactivity exceeded threshold
    Knowledge:
    Summary:
    The purpose of this rule is to alert system administrators to a possible KMS or network outage. This rule monitors the end-to-end operation of KMS activation. A notification event is created by KMS if no activation or renewal requests were logged by KMS
    (activity event 12290) in the specified time interval. In addition to new activations, periodic renewal requests are expected to occur (default is 7 days). Whether or not this alert is serious depends on the number of machines in the KMS environment, how many
    are actually connected, and the configured renewal interval.
    Causes:
    Any failure or incorrect configuration of the KMS service, other Windows components, firewall, hardware, network or routers can trigger the Idle Minutes Alert. This alert can also result from normal behavior, since it is possible that not enough machines
    attempted to activate or renew during the specified time interval.
    Resolutions:
    The first step is to determine whether there really is a problem. Start with a known good KMS client and run (with elevated privileges) the script slmgr.vbs -ato . If the activation/renewal fails, it will report an error code. You can direct the client to
    connect to a specific KMS machine by using the slmgr.vbs -skms option. The request event (12288) and response event (12289) in the Windows Application event log may provide additional information, including the identity of failing KMS machines. If there has
    been a failure, check the following:
    Software Licensing service (slsvc) is running.
    Other KMS machine behavior is normal.
    KMS firewall port is open (default is TCP 1688).
    Attempt to connect to KMS using telnet to the KMS port(you won’t be able to do anything other than connect)
    Use a network monitor (e.g. netmon) to capture and trace network problems.
    There is one Idle Minutes Monitor that is used to monitor for activity. It may be desirable to adjust the time threshold, depending on expected KMS activity."
    Despite what the alert says, there are activity events with ID 12290 being logged, but they are appearing under the 'Key Management Service' log instead of the general 'Application' log.  I know that my clients are activating with the server without
    any problems as I have run slmgr.vbs -ato with success on a number of them, and none are stating that activation is required.  This issue was previously raised here:
    http://social.technet.microsoft.com/Forums/systemcenter/en-US/1391acf8-f0be-4a48-9039-8d24e275f1fd/kms-idle-time-monitor-raise-wrong-alerts?forum=operationsmanagermgmtpacks, but  I am running Windows Server 2008 R2 SP1 and the hotfix KB981314 comes
    up as 'not applicable to this computer' so I assume it is part of SP1 now.  I have also tried installing KB2692929, as that was cited as being a possible fix here:
    http://social.technet.microsoft.com/Forums/systemcenter/en-US/8ec8ae5b-a310-4b0f-9a5f-e0599bceb93a/kms-managementpack?forum=operationsmanagermgmtpacks, however I am still seeing the same alerts.
    Would greatly appreciate any further suggestions!
    Many thanks

    Hi,
    I've checked for all the events that are generated by our servers, and there are periods of time where no requests are received for up to 18 hours, so that is no doubt why the alerts are appearing (we then sometimes see five requests in the same minute,
    but there we go).  I'll need to adjust the thresholds.
    Thank you for your help, Chunky.1, I'll mark your reply as the answer, as it was very helpful in understanding the alert.
    For anyone else who needs to check this, create a PowerShell script using the following content, and place your own details into the relevant sections in bold (without the brackets, of course).  This will generate a csv file which will have the server
    name in one column and the time that the request event was generated - you can then check the gaps between the requests.  The script is quick and dirty, with no checks along the way, so feel free to embellish it as required.
    Out-File "<directory to place file in>\KMS_check_results.csv"
    $results = get-eventlog -ComputerName <KMS server hostname> -logname 'Key Management Service'|where{$_.message -match "<String which identifies servers instead of clients>"}
    $filteredresults = @()
    foreach($event in $results){
        #This splits up the message into sections, separated by commas, and places each section as an element in an array
        $event.Message -split ","|foreach{
            if($_ -match "<server domain suffix - e.g. contoso.com>"){
                $eventserver = $_
        $timegenerated = $event.TimeGenerated
        $filteredresults += New-Object PSObject -Property @{
            Server = $eventserver
            TimeGenerated = $timegenerated
    $filteredresults|select-object server,timegenerated|export-csv "<directory to place file in>\KMS_check_results.csv"  -NoTypeInformation

  • Operations manager failed to run a wmi query for wmi events (0x800706ba)

    Hi everyone,
    I've been working on this issue for a while and I am still no closer to finding out what the problem is.  If anybody can offer any other advice or things to check, I'm all ears.
    I'm running SCOM 2012 R2 with UR2, and the Cluster Management Pack v6.0.7063.0
    My problem is on one particular batch of cluster servers where I am getting the following error.
    Name: Operations Manager failed to run a WMI query for WMI events
    Alert Description:
    Module was unable to enumerate the WMI data
    Error: 0x800706ba
    Details: The RPC server is unavailable
    Workflow name: Microsoft.Windows.Cluster.Node.StateMonitoring
    Instance Name: servername.domain.local
    Instance ID: {instance_id}
    Management group: SCOM_Management_Grp_Name
    I am getting this alert regardless of whether I run the Windows Cluster Action Account as Local System, or as a domain user with full local admin privileges on all the cluster nodes.
    When looking at the management pack and the workflow in particular (Microsoft.Windows.Cluster.Node.StateMonitoring), I can see that it's trying to access
    MSCluster_Node in the root\MSCLUSTER WMI namespace.
    This is the workflow for your information...
    <UnitMonitor> ID="Microsoft.Windows.Cluster.Node.StateMonitoring" Accessibility="Public" Enabled="onEssentialMonitoring" Target="ClusLibrary!Microsoft.Windows.Cluster.Node" ParentMonitorID="Health!System.Health.AvailabilityState" Remotable="true" Priority="Normal" TypeID="ClusLibrary!Microsoft.Windows.Cluster.CheckState" ConfirmDelivery="false">
    <Category>AvailabilityHealth</Category>
    <AlertSettings AlertMessage="Microsoft.Windows.Cluster.Node.StateMonitoring.AlertMessage">
    <AlertOnState>Warning</AlertOnState>
    <AutoResolve>true</AutoResolve>
    <AlertPriority>Normal</AlertPriority>
    <AlertSeverity>MatchMonitorHealth</AlertSeverity>
    <AlertParameters>
    <AlertParameter1>$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</AlertParameter1>
    <AlertParameter2>$Target/Property[Type="ClusLibrary!Microsoft.Windows.Cluster.Node"]/ClusterName$</AlertParameter2>
    </AlertParameters>
    </AlertSettings>
    <OperationalStates>
    <OperationalState ID="Success" MonitorTypeStateID="Online" HealthState="Success" />
    <OperationalState ID="Warning" MonitorTypeStateID="Partial" HealthState="Warning" />
    <OperationalState ID="Error" MonitorTypeStateID="NotOnline" HealthState="Error" />
    </OperationalStates>
    <Configuration>
    <ClusterObjectName>$Target/Property[Type='ClusLibrary!Microsoft.Windows.Cluster.Node']/NodeName$</ClusterObjectName>
    <PollInterval>60</PollInterval>
    <ClusterObjectClass>MSCLUSTER_Node</ClusterObjectClass>
    <OnlineExpression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery>
    </ValueExpression>
    <Operator>Equal</Operator>
    <ValueExpression>
    <Value Type="String">0</Value>
    </ValueExpression>
    </SimpleExpression>
    </OnlineExpression>
    <OnlineExpressionOnDemand>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='State']</XPathQuery>
    </ValueExpression>
    <Operator>Equal</Operator>
    <ValueExpression>
    <Value Type="String">0</Value>
    </ValueExpression>
    </SimpleExpression>
    </OnlineExpressionOnDemand>
    <PartialExpression>
    <Or>
    <Expression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery>
    </ValueExpression>
    <Operator>Equal</Operator>
    <ValueExpression>
    <Value Type="String">2</Value>
    </ValueExpression>
    </SimpleExpression>
    </Expression>
    <Expression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery>
    </ValueExpression>
    <Operator>Equal</Operator>
    <ValueExpression>
    <Value Type="String">3</Value>
    </ValueExpression>
    </SimpleExpression>
    </Expression>
    </Or>
    </PartialExpression>
    <PartialExpressionOnDemand>
    <Or>
    <Expression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='State']</XPathQuery>
    </ValueExpression>
    <Operator>Equal</Operator>
    <ValueExpression>
    <Value Type="String">2</Value>
    </ValueExpression>
    </SimpleExpression>
    </Expression>
    <Expression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='State']</XPathQuery>
    </ValueExpression>
    <Operator>Equal</Operator>
    <ValueExpression>
    <Value Type="String">3</Value>
    </ValueExpression>
    </SimpleExpression>
    </Expression>
    </Or>
    </PartialExpressionOnDemand>
    <NotOnlineExpression>
    <And>
    <Expression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery>
    </ValueExpression>
    <Operator>NotEqual</Operator>
    <ValueExpression>
    <Value Type="String">0</Value>
    </ValueExpression>
    </SimpleExpression>
    </Expression>
    <Expression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery>
    </ValueExpression>
    <Operator>NotEqual</Operator>
    <ValueExpression>
    <Value Type="String">2</Value>
    </ValueExpression>
    </SimpleExpression>
    </Expression>
    <Expression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery>
    </ValueExpression>
    <Operator>NotEqual</Operator>
    <ValueExpression>
    <Value Type="String">3</Value>
    </ValueExpression>
    </SimpleExpression>
    </Expression>
    </And>
    </NotOnlineExpression>
    <NotOnlineExpressionOnDemand>
    <And>
    <Expression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='State']</XPathQuery>
    </ValueExpression>
    <Operator>NotEqual</Operator>
    <ValueExpression>
    <Value Type="String">0</Value>
    </ValueExpression>
    </SimpleExpression>
    </Expression>
    <Expression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='State']</XPathQuery>
    </ValueExpression>
    <Operator>NotEqual</Operator>
    <ValueExpression>
    <Value Type="String">2</Value>
    </ValueExpression>
    </SimpleExpression>
    </Expression>
    <Expression>
    <SimpleExpression>
    <ValueExpression>
    <XPathQuery Type="String">Property[@Name='State']</XPathQuery>
    </ValueExpression>
    <Operator>NotEqual</Operator>
    <ValueExpression>
    <Value Type="String">3</Value>
    </ValueExpression>
    </SimpleExpression>
    </Expression>
    </And>
    </NotOnlineExpressionOnDemand>
    <WMIFields>Name, State</WMIFields>
    </Configuration>
    </UnitMonitor>
    I can confirm that I am able to browse the MSCluster_Node class locally, as well as remotely using WMIEXPLORER and WBEMTEST,
    however it only works when I set the Authentication Level to
    Packet Privacy.  If I do not select Packet Privacy, a WMI event log error 5605 is logged on the remote servers application log that says...
    The root\mscluster namespace is marked with the RequiresEncryption flag.  Access to this namespace might be denied if the script or application does not have the appropriate authentication level.  Change the authentication level to Pkt_Privacy
    and run the script or application again.
    I can confirm that all firewalls are turned off, and there are no firewalls between the management servers and the agents in question.  AV exclusions have been done and appear to be in place.  The nodes are all Windows 2008 R2 with SP1.  As
    far as I can tell there is plenty of memory available on each of the nodes in question (50%+) of RAM is available. 
    If I manually run the "Discover the Windows Server 2008 R2 Cluster Components" task in the Cluster Service State section of the management pack in the Monitoring Pane in the console, on the nodes in question - the discovery runs successfully.
    Does anybody have any other ideas or suggestions I could try?
    Many thanks in advance,
    Noel.
    http://www.dreamension.net

    Hi,
    Common causes of RPC errors include:
    Errors resolving a DNS or NetBIOS name.
    The RPC service or related services may not be running.
    Problems with network connectivity.
    File and printer sharing is not enabled.
    For more information, please review the link below:
    Windows Server Troubleshooting: "The RPC server is unavailable"
    http://social.technet.microsoft.com/wiki/contents/articles/4494.windows-server-troubleshooting-the-rpc-server-is-unavailable.aspx#Identify
    Troubleshooting RPC Errors
    http://technet.microsoft.com/en-us/magazine/2007.07.howitworks.aspx
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Dreaded "Operations Manager failed to start a process" error (2012 R2)

    I know this error has been covered many times, and on many topics, but this time mine is slightly different.   It's
    NOT the
    "SCOMpercentageCPUTimeCounter" error covered by Kevin Holman.
    Also, I am running SCOM 2012 R2 UR4 (7.1.10226.1046) and everything seems correctly patched (MS and agents), like
    suggested by Nicole Welch and Kevin Holman as well.
    So my environment is a fresh installation of SCOM 2012 R2, and I am transferring to this new Management Group, the monitored servers from our old SCOM 2012 "R1" (which I did not upgrade but rather made a brand new independent install).  So
    all servers aren't migrated yet, but I would like to solve this error before. This error did NOT happen in "R1", nor was it overridden (I imported the exact same Management Packs anyway).
    On 2012 R2, it happens on almost all new monitored machines, mainly Read-Only Domain Controllers (RODCs).
    Here is the kind of alert text I am getting:
    Het om 10:10:15 gestarte proces is beëindigd als gevolg van een uitvoerverzamelfout als gevolg van fout 0x80070057 :
    The parameter is incorrect.
    ; mogelijk zijn er gegevens verloren gegaan.
    Opdracht die is uitgevoerd: "C:\Windows\system32\cscript.exe" //nologo "C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 193\24788\AD_Global_Catalog_Search_Response.vbs"
    RODC02.mydomain.be (objectCategory=DMD) false 4 {9E253FCB-8AAF-491F-CCA3-E632C6C2800C}
    Werkmap: C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 193\24788\
    Dit is van invloed op een of meer werkstromen.
    Werkstroomnaam: Microsoft.Windows.Server.2008.AD.DomainController.GCSearchTime.Monitor
    Exemplaarnaam: RODC02
    Our servers have Belgian (Dutch) regional settings, hence the language. But check out the highlighted info in bold.
    The related event Number (in Alert Context) is 21404. Most other articles about this, mention 21402 or 21403. I suppose they all must be related but still, it's a new one here.
    There you have the failing VBS file. I checked all alerts and there seem to be different files concerned overall. Other examples:
    C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 233\22737\AD_Database_and_Log.vbs    (from almost all RODCs)
    C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 196\19876\Microsoft.Windows.Server.Legacy.FreeSpace.vbs
      (also from an RODC)
    C:\Program Files\Microsoft System Center 2012 R2\Operations Manager\Server\Health Service State\Monitoring Host Temporary Files 5891\338282\Microsoft.Windows.Server.CPUUtilization.Monitortype.vbs 95 15
    SCOM02.mydomain.be 1.4119384288787842     (this one is from my second Management Server..)
    Repeat count of the alert is 1 to 2 a day, so it's not nightmareish, but still, requires to be fixed. I suspect that even if there is a different VBS file concerned, since the eventID and the alert text are the same, the repeat count will just increase,
    not showing the last actual VBS concerned.
    I connect to each of these servers, and browse to the directory containing the file, and the folder is there, the file is there.  The error text mentions incorrect parameters but they still seem OK to me. 
    I found something which might be worth noting:  when browsing to the directory, be it on an RODC or on the SCOM server, I get a permission popup requiring some admin rights to do so - although I am using my domain admin (+SCOM+SQL+local
    admin everywhere) account:
    SCOM services use the Local System account to run, on every machine. I thought Local System shouldn't be concerned with these permissions popups, but normally the domain/local admins aren't either, yet I am.
    The "Health service" folder is the only one from the "C:\Program Files\Microsoft Monitoring Agent\Agent" folder to be concerned with this; I can browse without trouble to any other directory there.
    After a SCOM service stop, I renamed the "Health Service state" folder (as you can see on the screenshot, there is a "Health Service State bak" folder) and let the service recreate it after a restart, to ensure it was clean and with
    appropriate permissions , but it doesn't help.
    Might that be a clue?
    Or else what?  I'm getting confused and don't find a suitable solution.
    dd
    Bix

    On Thu, 4 Dec 2014 14:20:22 +0000, Bixessss wrote:
    I know this error has been covered many times, and on many topics, but this time mine is slightly different.   It's*NOT* the "SCOMpercentageCPUTimeCounter" error covered by Kevin Holman <http://blogs.technet.com/b/kevinholman/archive/2010/02/23/a-new-script-error-scompercentagecputimecounter-vbs-invalid-class.aspx>.
    Also, I am running *SCOM 2012 R2 UR4* (7.1.10226.1046) and everything seems correctly patched (MS and agents), likesuggested by Nicole Welch <http://nicolewelchscom.wordpress.com/2013/10/01/operations-manager-failed-to-start-a-process/>
    and Kevin Holman as well.
    This forum is for security issues related to Windows Server and not for
    System Center questions.
    Post your question in one of the following forums:
    https://social.technet.microsoft.com/Forums/systemcenter/en-US/home?category=systemcenteroperationsmanager
    Thanks.
    Paul Adare - FIM CM MVP
    Never trust a computer you can't lift. - Stan Masor

  • Operations Manager Failed to Access the Windows Event Log and management server is showing warning state

    Hi,
    I am monitoring AD server from SCOM 2012 R2. My management server goes into waning state. When i run Health explorer then it come back in the healthy state but after some time it again goes into warning state. After seeing alert i found that a alert is coming
    again and again i.e.  Operations Manager Failed to Access the Windows Event Log.The description of alert is mention below
    The Windows Event Log Provider is still unable to open the DhcpAdminEvents event log on computer 'nc2vws12ad5.corp.nathcorp.com'.
    The Provider has been unable to open the DhcpAdminEvents event log for 64080 seconds.
    Most recent error details: The RPC server is unavailable.
    Please suggest me how to resolve this so that my management server will again come back in healthy state.
    Thanks
    Abhishek

    Hi Abhishek,
    As i mentioned earlier the Alert resolution says the same points.
    Can you give details on the below ?
    Is there really a log named "Dhcpadminevents" in the MS's Event viewer ?
    Did you recently configure any new alert where you mentioned "Dhcpadminevents"
    as a event log location ?
    If yes then what is the target you selected for the rule / monitor there ?
    Can you post the results for analysis ?
    Gautam.75801

  • Operations Manager log flooded with 11903 errors due to "Virtual Hard Disk free disk space" monitor

    Management Pack: Microsoft Windows Hyper-V 2012 R2 Monitoring (7.1.10104.0)
    Monitor: Virtual Hard Disk free disk space
    There appears to be an issue with this monitor. Every hour, each of my Hyper-V servers is reporting dozens of errors similar to the following. It seems like there is a disconnect between the expected return type (integer) and the actual type (decimal) when
    checking the free space on VHDX files.
    Log Name:      Operations Manager
    Source:        Health Service Modules
    Date:          2/5/2014 7:59:47 AM
    Event ID:      11903
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      BEAST.corp.technologytoolbox.com
    Description:
    The Microsoft Operations Manager Expression Filter Module could not convert the received value to the requested type.
    Property Expression: Property[@Name='Microsoft:9AC8FCAB-800D-424F-ABCB-747063E5FCF1\559D22F4-A565-4AD4-9B71-44FC5D815C0C\0\0\L.FreeSpace']
    Property Value: 488033.99609375
    Conversion Type: DataItemElementTypeInteger(5)
    Original Error: 0x80FF005A
    One or more workflows were affected by this. 
    Workflow name: Microsoft.Windows.HyperV.2012.R2.VirtualDrive.FreeSpaceMonitor
    Instance name: Hard Disk
    Instance ID: {0C0E0759-D846-963C-21E6-3C1A1C096D5F}
    Management group: HQ
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Health Service Modules" />
        <EventID Qualifiers="49152">11903</EventID>
        <Level>2</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2014-02-05T14:59:47.000000000Z" />
        <EventRecordID>32395</EventRecordID>
        <Channel>Operations Manager</Channel>
        <Computer>BEAST.corp.technologytoolbox.com</Computer>
        <Security />
      </System>
      <EventData>
        <Data>HQ</Data>
        <Data>Microsoft.Windows.HyperV.2012.R2.VirtualDrive.FreeSpaceMonitor</Data>
        <Data>Hard Disk</Data>
        <Data>{0C0E0759-D846-963C-21E6-3C1A1C096D5F}</Data>
        <Data>Property[@Name='Microsoft:9AC8FCAB-800D-424F-ABCB-747063E5FCF1\559D22F4-A565-4AD4-9B71-44FC5D815C0C\0\0\L.FreeSpace']</Data>
        <Data>488033.99609375</Data>
        <Data>DataItemElementTypeInteger(5)</Data>
        <Data>0x80FF005A</Data>
      </EventData>
    </Event>

    SCOM agent is running as SYSTEM. (I used to run SCOM agents as a low-privilege domain account but eventually surrendered to "The Dark Side" due to the number of issues encountered with that approach.)
    PS HKU:\.DEFAULT\Control Panel\International> dir
    Hive: HKEY_USERS\.DEFAULT\Control Panel\International
    Name Property
    Geo Nation : 244
    User Profile Languages : {en-US}
    ShowAutoCorrection : 1
    ShowTextPrediction : 1
    ShowCasing : 1
    ShowShiftLock : 1
    User Profile System Backup Languages : {en-US}
    ShowAutoCorrection : 1
    ShowTextPrediction : 1
    ShowCasing : 1
    ShowShiftLock : 1

  • Service Manager 2012 R2 - Workflow Error - Event ID 4513

    Hi,
    We started to suffer a Workflow error in Service Manager 2012 R2 2 weeks ago. We noticed through the failure of some SLOs not being applied on Work Items. The error is the follow:
    Log Name:      Operations Manager
    Source:        HealthService
    Date:          13/03/2014 12:10:00
    Event ID:      4513
    Task Category: Health Service
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      XXX-XXX-XXX
    Description:
    The callback method DeliverDataToModule failed with exception "'­', hexadecimal value 0x1F, is an invalid character." in the module Microsoft.EnterpriseManagement.SystemCenter.Subscription.WindowsWorkflowWriteAction.
    Workflow: WorkItem_SetFirstAssingedTo_RelationhsipAdd_Rule
    Instance: Destino do Fluxo de Trabalho (interno)
    Instance ID: {383E578B-E1C9-2802-0047-815853405778}
    Management Group: CTRPROD
    Full Exception Text:
     System.ArgumentException: '­', hexadecimal value 0x1F, is an invalid character.
       at System.Xml.XmlEncodedRawTextWriter.InvalidXmlChar(Int32 ch, Char* pDst, Boolean entitize)
       at System.Xml.XmlEncodedRawTextWriter.WriteElementTextBlock(Char* pSrc, Char* pSrcEnd)
       at System.Xml.XmlEncodedRawTextWriter.WriteString(String text)
       at System.Xml.XmlWellFormedWriter.WriteValue(String value)
       at System.Runtime.Serialization.XmlObjectSerializerWriteContext.SerializeAndVerifyType(DataContract dataContract, XmlWriterDelegator xmlWriter, Object obj, Boolean verifyKnownType, RuntimeTypeHandle declaredTypeHandle, Type declaredType)
       at System.Runtime.Serialization.XmlObjectSerializerWriteContext.SerializeWithXsiType(XmlWriterDelegator xmlWriter, Object obj, RuntimeTypeHandle objectTypeHandle, Type objectType, Int32 declaredTypeID, RuntimeTypeHandle declaredTypeHandle, Type
    declaredType)
       at System.Runtime.Serialization.XmlObjectSerializerWriteContext.InternalSerialize(XmlWriterDelegator xmlWriter, Object obj, Boolean isDeclaredType, Boolean writeXsiType, Int32 declaredTypeID, RuntimeTypeHandle declaredTypeHandle)
       at System.Runtime.Serialization.XmlObjectSerializerWriteContext.InternalSerializeReference(XmlWriterDelegator xmlWriter, Object obj, Boolean isDeclaredType, Boolean writeXsiType, Int32 declaredTypeID, RuntimeTypeHandle declaredTypeHandle)
       at WriteArrayOfanyTypeToXml(XmlWriterDelegator , Object , XmlObjectSerializerWriteContext , CollectionDataContract )
       at System.Runtime.Serialization.CollectionDataContract.WriteXmlValue(XmlWriterDelegator xmlWriter, Object obj, XmlObjectSerializerWriteContext context)
       at System.Runtime.Serialization.XmlObjectSerializerWriteContext.InternalSerialize(XmlWriterDelegator xmlWriter, Object obj, Boolean isDeclaredType, Boolean writeXsiType, Int32 declaredTypeID, RuntimeTypeHandle declaredTypeHandle)
       at System.Runtime.Serialization.XmlObjectSerializerWriteContext.InternalSerializeReference(XmlWriterDelegator xmlWriter, Object obj, Boolean isDeclaredType, Boolean writeXsiType, Int32 declaredTypeID, RuntimeTypeHandle declaredTypeHandle)
       at WriteResultToXml(XmlWriterDelegator , Object , XmlObjectSerializerWriteContext , ClassDataContract )
       at System.Runtime.Serialization.ClassDataContract.WriteXmlValue(XmlWriterDelegator xmlWriter, Object obj, XmlObjectSerializerWriteContext context)
       at System.Runtime.Serialization.DataContractSerializer.InternalWriteObjectContent(XmlWriterDelegator writer, Object graph, DataContractResolver dataContractResolver)
       at System.Runtime.Serialization.DataContractSerializer.InternalWriteObject(XmlWriterDelegator writer, Object graph, DataContractResolver dataContractResolver)
       at System.Runtime.Serialization.XmlObjectSerializer.WriteObjectHandleExceptions(XmlWriterDelegator writer, Object graph, DataContractResolver dataContractResolver)
       at System.Runtime.Serialization.DataContractSerializer.WriteObject(XmlWriter writer, Object graph)
       at Microsoft.EnterpriseManagement.SystemCenter.Subscription.DataItemSubscription.GenerateItemXml(XmlWriter writer)
       at Microsoft.EnterpriseManagement.HealthService.DataItemBase.GenerateItemXmlInternal()
       at Microsoft.EnterpriseManagement.HealthService.DataItemBase.GetItemXml()
       at Microsoft.EnterpriseManagement.HealthService.DataItemBase.QueryItem(XPathExpression xpathQuery)
       at Microsoft.EnterpriseManagement.SystemCenter.Subscription.TokenReplaceWindowsWorkflowTaskParameterValue.TokenResolver(String tokenValue)
       at Microsoft.EnterpriseManagement.SystemCenter.Subscription.TokenResolver.RegexMatchEvaluator(Match m)
       at System.Text.RegularExpressions.RegexReplacement.Replace(MatchEvaluator evaluator, Regex regex, String input, Int32 count, Int32 startat)
       at System.Text.RegularExpressions.Regex.Replace(String input, MatchEvaluator evaluator)
       at Microsoft.EnterpriseManagement.SystemCenter.Subscription.TokenResolver.Resolve(String str)
       at Microsoft.EnterpriseManagement.SystemCenter.Subscription.TokenReplaceWindowsWorkflowTaskParameterValue.GenerateWindowsWorkflowTaskParameterValue(String elementTemplate)
       at Microsoft.EnterpriseManagement.SystemCenter.Subscription.WindowsWorkflowTaskParameterValue.Resolve(TokenReplaceWindowsWorkflowTaskParameterValue resolver)
       at Microsoft.EnterpriseManagement.SystemCenter.Subscription.WindowsWorkflowTaskArrayParameter.Resolve(TokenReplaceWindowsWorkflowTaskParameterValue resolver)
       at Microsoft.EnterpriseManagement.SystemCenter.Subscription.WindowsWorkflowTask.Resolve(DataItemBase[] dataItems)
       at Microsoft.EnterpriseManagement.SystemCenter.Subscription.WindowsWorkflowWriteAction.ProcessDataItems(DataItemBase[] dataItems)
       at Microsoft.EnterpriseManagement.SystemCenter.Subscription.WindowsWorkflowWriteAction.OnNewDataItems(DataItemBase[] dataItems, Boolean isLogicalSet, DataItemAcknowledgementCallback acknowledgedCallback, Object acknowledgedState, DataItemProcessingCompleteCallback
    completionCallback, Object completionState)
       at Microsoft.EnterpriseManagement.HealthService.Internal.InputPortCallbacks.InputStreamBatchedAcknowledgedCallbackHandler`1.InputPortCallbackImplementation(DataItemBase[] dataItems, Boolean isBatchLogicalSet, DataItemAcknowledgementCallback
    acknowledgementCallback, DataItemProcessingCompleteCallback completionCallback)
       at Microsoft.EnterpriseManagement.HealthService.Internal.ModuleContainer`1.Microsoft.EnterpriseManagement.HealthService.Internal.IModuleContainer.DeliverDataToModule(UInt32 inputPortNumber, DataItemBase[] dataItems, Boolean isBatchLogicalSet,
    DataItemAcknowledgementCallback acknowledgementCallback, DataItemProcessingCompleteCallback completionCallback)
       at Microsoft.EnterpriseManagement.HealthService.Internal.ManagedHostHelper.Microsoft.EnterpriseManagement.HealthService.Internal.IManagedHostHelper.DeliverBatchedDataToModule(UInt32 inputPortNumber, Object moduleInputReference, DataItemBase[]
    dataItems, UInt32 dataItemCount, Boolean isBatchLogicalSet, Object completionReference)
    Event Xml:
    <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='HealthService'/><EventID Qualifiers='49152'>4513</EventID><Level>2</Level><Task>1</Task><Keywords>0x80000000000000</Keywords><TimeCreated
    SystemTime='2014-03-13T15:10:00.000000000Z'/><EventRecordID>4953905</EventRecordID><Channel>Operations Manager</Channel><Computer>CTR-SCSM-MS01.sp.local</Computer><Security/></System><EventData><Data>CTRPROD</Data><Data>WorkItem_SetFirstAssingedTo_RelationhsipAdd_Rule</Data><Data>Destino
    do Fluxo de Trabalho (interno)</Data><Data>{383E578B-E1C9-2802-0047-815853405778}</Data><Data>DeliverDataToModule</Data><Data>'­', hexadecimal value 0x1F, is an invalid character.</Data><Data>Microsoft.EnterpriseManagement.SystemCenter.Subscription.WindowsWorkflowWriteAction</Data><Data>System.ArgumentException:
    '­', hexadecimal value 0x1F, is an invalid character.
       at System.Xml.XmlEncodedRawTextWriter.InvalidXmlChar(Int32 ch, Char* pDst, Boolean entitize)
       at System.Xml.XmlEncodedRawTextWriter.WriteElementTextBlock(Char* pSrc, Char* pSrcEnd)
       at System.Xml.XmlEncodedRawTextWriter.WriteString(String text)
       at System.Xml.XmlWellFormedWriter.WriteValue(String value)
       at System.Runtime.Serialization.XmlObjectSerializerWriteContext.SerializeAndVerifyType(DataContract dataContract, XmlWriterDelegator xmlWriter, Object obj, Boolean verifyKnownType, RuntimeTypeHandle declaredTypeHandle, Type declaredType)
       at System.Runtime.Serialization.XmlObjectSerializerWriteContext.SerializeWithXsiType(XmlWriterDelegator xmlWriter, Object obj, RuntimeTypeHandle objectTypeHandle, Type objectType, Int32 declaredTypeID, RuntimeTypeHandle declaredTypeHandle, Type
    declaredType)
       at System.Runtime.Serialization.XmlObjectSerializerWriteContext.InternalSerialize(XmlWriterDelegator xmlWriter, Object obj, Boolean isDeclaredType, Boolean writeXsiType, Int32 declaredTypeID, RuntimeTypeHandle declaredTypeHandle)
       at System.Runtime.Serialization.XmlObjectSerializerWriteContext.InternalSerializeReference(XmlWriterDelegator xmlWriter, Object obj, Boolean isDeclaredType, Boolean writeXsiType, Int32 declaredTypeID, RuntimeTypeHandle declaredTypeHandle)
       at WriteArrayOfanyTypeToXml(XmlWriterDelegator , Object , XmlObjectSerializerWriteContext , CollectionDataContract )
       at System.Runtime.Serialization.CollectionDataContract.WriteXmlValue(XmlWriterDelegator xmlWriter, Object obj, XmlObjectSerializerWriteContext context)
       at System.Runtime.Serialization.XmlObjectSerializerWriteContext.InternalSerialize(XmlWriterDelegator xmlWriter, Object obj, Boolean isDeclaredType, Boolean writeXsiType, Int32 declaredTypeID, RuntimeTypeHandle declaredTypeHandle)
       at System.Runtime.Serialization.XmlObjectSerializerWriteContext.InternalSerializeReference(XmlWriterDelegator xmlWriter, Object obj, Boolean isDeclaredType, Boolean writeXsiType, Int32 declaredTypeID, RuntimeTypeHandle declaredTypeHandle)
       at WriteResultToXml(XmlWriterDelegator , Object , XmlObjectSerializerWriteContext , ClassDataContract )
       at System.Runtime.Serialization.ClassDataContract.WriteXmlValue(XmlWriterDelegator xmlWriter, Object obj, XmlObjectSerializerWriteContext context)
       at System.Runtime.Serialization.DataContractSerializer.InternalWriteObjectContent(XmlWriterDelegator writer, Object graph, DataContractResolver dataContractResolver)
       at System.Runtime.Serialization.DataContractSerializer.InternalWriteObject(XmlWriterDelegator writer, Object graph, DataContractResolver dataContractResolver)
       at System.Runtime.Serialization.XmlObjectSerializer.WriteObjectHandleExceptions(XmlWriterDelegator writer, Object graph, DataContractResolver dataContractResolver)
       at System.Runtime.Serialization.DataContractSerializer.WriteObject(XmlWriter writer, Object graph)
       at Microsoft.EnterpriseManagement.SystemCenter.Subscription.DataItemSubscription.GenerateItemXml(XmlWriter writer)
       at Microsoft.EnterpriseManagement.HealthService.DataItemBase.GenerateItemXmlInternal()
       at Microsoft.EnterpriseManagement.HealthService.DataItemBase.GetItemXml()
       at Microsoft.EnterpriseManagement.HealthService.DataItemBase.QueryItem(XPathExpression xpathQuery)
       at Microsoft.EnterpriseManagement.SystemCenter.Subscription.TokenReplaceWindowsWorkflowTaskParameterValue.TokenResolver(String tokenValue)
       at Microsoft.EnterpriseManagement.SystemCenter.Subscription.TokenResolver.RegexMatchEvaluator(Match m)
       at System.Text.RegularExpressions.RegexReplacement.Replace(MatchEvaluator evaluator, Regex regex, String input, Int32 count, Int32 startat)
       at System.Text.RegularExpressions.Regex.Replace(String input, MatchEvaluator evaluator)
       at Microsoft.EnterpriseManagement.SystemCenter.Subscription.TokenResolver.Resolve(String str)
       at Microsoft.EnterpriseManagement.SystemCenter.Subscription.TokenReplaceWindowsWorkflowTaskParameterValue.GenerateWindowsWorkflowTaskParameterValue(String elementTemplate)
       at Microsoft.EnterpriseManagement.SystemCenter.Subscription.WindowsWorkflowTaskParameterValue.Resolve(TokenReplaceWindowsWorkflowTaskParameterValue resolver)
       at Microsoft.EnterpriseManagement.SystemCenter.Subscription.WindowsWorkflowTaskArrayParameter.Resolve(TokenReplaceWindowsWorkflowTaskParameterValue resolver)
       at Microsoft.EnterpriseManagement.SystemCenter.Subscription.WindowsWorkflowTask.Resolve(DataItemBase[] dataItems)
       at Microsoft.EnterpriseManagement.SystemCenter.Subscription.WindowsWorkflowWriteAction.ProcessDataItems(DataItemBase[] dataItems)
       at Microsoft.EnterpriseManagement.SystemCenter.Subscription.WindowsWorkflowWriteAction.OnNewDataItems(DataItemBase[] dataItems, Boolean isLogicalSet, DataItemAcknowledgementCallback acknowledgedCallback, Object acknowledgedState, DataItemProcessingCompleteCallback
    completionCallback, Object completionState)
       at Microsoft.EnterpriseManagement.HealthService.Internal.InputPortCallbacks.InputStreamBatchedAcknowledgedCallbackHandler`1.InputPortCallbackImplementation(DataItemBase[] dataItems, Boolean isBatchLogicalSet, DataItemAcknowledgementCallback
    acknowledgementCallback, DataItemProcessingCompleteCallback completionCallback)
       at Microsoft.EnterpriseManagement.HealthService.Internal.ModuleContainer`1.Microsoft.EnterpriseManagement.HealthService.Internal.IModuleContainer.DeliverDataToModule(UInt32 inputPortNumber, DataItemBase[] dataItems, Boolean isBatchLogicalSet,
    DataItemAcknowledgementCallback acknowledgementCallback, DataItemProcessingCompleteCallback completionCallback)
       at Microsoft.EnterpriseManagement.HealthService.Internal.ManagedHostHelper.Microsoft.EnterpriseManagement.HealthService.Internal.IManagedHostHelper.DeliverBatchedDataToModule(UInt32 inputPortNumber, Object moduleInputReference, DataItemBase[]
    dataItems, UInt32 dataItemCount, Boolean isBatchLogicalSet, Object completionReference)</Data></EventData></Event>
    Has anybody faced the same problem?
    Thanks
    Thiago

    Hi Thomas,
    Thanks for your response. I understood your comments but, the system was running fine for about 3 months. No changes have been applied during this time and suddenly this error pops out.
    I opened a case with MS Support, but they applied a WA which does not resolve our problem, because the error appears after a few days later after the WA procedure.
    The WA is just a watermark reset using this SQL query:
    DECLARE @MaxTransactionId Int, @RuleID uniqueidentifier
    SET @RuleID = '' -- <-- SET THIS TO YOUR RULE ID!!!
    SET @MaxTransactionId = (SELECT MAX(EntityTransactionLogId) FROM EntityTransactionLog) 
    UPDATE CmdbInstanceSubscriptionState
    SET State = @MaxTransactionId
    WHERE RuleId = @RuleID
    The problem with this WA is that all Work Items affected by the problem - workflows not being applied - do not get the information we need to identify all the SLA's. The system just "forget" them and moves on.
    Cheers,
    Thiago

Maybe you are looking for

  • Won't scan

    I had a happy new HP Officejet Pro 8500 Plus printer, scanner, fax which worked fine until I updated my software yesterday. Now I can't scan and keep getting the error message "com.apple.ImageCaptureCore error -9931." HP and I have spent hours on the

  • What's the closest thing to a clean reinstall of OS X

    I was thinking... if I want to "reset" OS X Mavericks, how can I do this without actually doing a clean reinstall (i.e. by erasing the disk and then installing a fresh copy)? I'm interested separately in: 1. Resetting all the app preferences and "tra

  • Adding soap header in java

    Can anyone please tell me how to add following security header in Webservices (WS 1.0 ) client using java code? (I m using axis 1.4) <soap:Header> <wsse:Security soap:mustUnderstand="1"> <wsse:UsernameToken> <wsse:Username>[email protected]</wsse:Use

  • External Firewire not mounting

    Since the quicktime 7.5 updater I have been unable to mount ANY firewire devices. A check of the system profiler shows under firewire,(in red) "Unable to list FireWire devices." The same external drive when using USB 2.0 connection does indeed mount

  • Cant accept creatoive cloud invitation

    When i cick on accept invite the the email it takes me to a page to log in. I try to log in with the account specidied but ui get an error Your email address has not been verified. Click hereto send an email with verification instructions. When i cli