Operations Manager - Site Role - Notification Server Windows Firewall Block Monitor

I'm getting this alert popping up in Opsman and was wondering what rule was triggering it. It seems as though the monitor lists rule:
<RuleId>D07ACE61-FB84-4461-9F52-ABBA07C2EE3A</RuleId>
but when I ask powershell:
PS C:\> Get-SCOMRule -Id "D07ACE61-FB84-4461-9F52-ABBA07C2EE3A"
PS C:\>
I get no love.
At any rater I'm wondering if perhaps I'm getting this rule because the firewall is disabled? Currently (working on changing this) windows servers run with firewalls off. We have a large firewall managed by the security group who we submit rules to so traffic
can pass.
I think this is checking for a port but i'm not sure. I read the following article and it mentions make sure that port 10123 is open. When I check the rules I see that we have a rule that allows TCP 10123, and also that we have clients making connections
to the site server over that port.
So, is it merely because the firewall is disabled?
Jeffrey S. Patton Jeffrey S. Patton Systems Specialist, Enterprise Systems University of Kansas 1001 Sunnyside Ave. Lawrence, KS. 66045 (785) 864-0242 | http://patton-tech.com

Hi,
Are you using scom 2007 or scom 2012?
For SCOM 2007, you can use this one for test:
Get-Rule
http://technet.microsoft.com/en-us/library/gg132234.aspx
Alex Zhao
TechNet Community Support

Similar Messages

Operations Manager Failed to Access the Windows Event Log and management server is showing warning state

Hi,
I am monitoring AD server from SCOM 2012 R2. My management server goes into waning state. When i run Health explorer then it come back in the healthy state but after some time it again goes into warning state. After seeing alert i found that a alert is coming
again and again i.e. Operations Manager Failed to Access the Windows Event Log.The description of alert is mention below
The Windows Event Log Provider is still unable to open the DhcpAdminEvents event log on computer 'nc2vws12ad5.corp.nathcorp.com'.
The Provider has been unable to open the DhcpAdminEvents event log for 64080 seconds.
Most recent error details: The RPC server is unavailable.
Please suggest me how to resolve this so that my management server will again come back in healthy state.
Thanks
Abhishek

Hi Abhishek,
As i mentioned earlier the Alert resolution says the same points.
Can you give details on the below ?
Is there really a log named "Dhcpadminevents" in the MS's Event viewer ?
Did you recently configure any new alert where you mentioned "Dhcpadminevents"
as a event log location ?
If yes then what is the target you selected for the rule / monitor there ?
Can you post the results for analysis ?
Gautam.75801

Windows Firewall blocking connections (randomly)

Hello everybody
I'm experiencing a very strange issue with Windows 8.1 x64 (this is a clean install of Windows 8.1)...
Sometimes, my computer suddenly claims to be unable to connect to any external host. For example, I try to visit any website. Funny though I can connect to websites like Google and visit other websites as well, but for example I'm unable to download a file
anywhere (sorry I don't remember the error message).
Another example: Sometimes I try to play a game where you have to start a "patcher" first, then the patcher starts the actual game. I'm able to start the patcher, the patcher downloads the necessary files, then as soon as I start the game itself,
I'm unable to connect to the login server. Really strange.
What I really don't understand: As soon as I restart my computer and retry whatever wasn't working, everything seems to work fine for an unknown time. A reboot fixes the issue I had, but the possibility that another application
If I disable the Windows Firewall COMPLETELY (using wf.msc and turn off every firewall profile) and restart my computer afterwards, I don't experience any of the issues described above. I've been using my computer for more than 3 days with a disabled Windows
Firewall and I never had any networking issue. Then I re-enabled the Windows Firewall, and the issues began to appear again.
I've installed the most recent Windows updates as of today. The device drivers are up-to-date as well and the BIOS too. It's really frustrating as I seriously don't want to disable the firewall..
I used to work with Windows 7 x64 and Windows 8 x64 and I could swear I never had any issue with the Windows Firewall. It all started with Windows 8.1 now... Any ideas what could be wrong here?
Kind regards
Makorus

Hi,
For the issue, I would like to know if you create some rules for Windows Firewall.
Meanwhile, I suggest we perform the following steps to restore default setting,
1.Open Control Panel, and then click Windows Firewall.
2.In the left pane, click Restore defaults. If you're prompted for an administrator password or confirmation, type the password or provide confirmation.
3.In the dialog box that appears, click Restore defaults. At the confirmation prompt, click Yes.
If the issue persists, I suggest you check the follow path to see if there are any errors in the Firewall.
Control Panel>>Windows Firewall>>Windows Firewall with Advanced Security>>Monitoring>>Firewall
Keep post.
Regards,
Kelvin hsu
TechNet Community Support

10.6 Server's Firewall Blocks It's Own Internet Connection

I had this problem about two years ago when I was trying to run 10.6 on my home server (Mac mini) for the first time. Eventually I gave up, reverted the mini back to 10.5, and ram problem-free for years. When 10.7 came out, I tried to upgrade the mini to that. That didn't go well either, but mostly due to Lion missing many many features (suprise!). So I figured that 10.6's problems were fixed by now, and gave it another shot. It went fine and I've been running for about a month problem free (or so I thought). But now it's offline again. I finally found one other person on another forum that had the EXACT same problem as me. And reading this description, I realize that I have been having problems all long, I just assumed they were my ISP's problems, not my own.
So here's what happens. The firewall in 10.6 server will "freak out". It will be running normally, then suddenly it will go haywire and block everything. And I mean everything. My computer won't even be able to get an IP via DHCP. Everything is blocked. But as soon as you stop the firewall, everything works normally. You can even modify the firewall rules, and set it up so there are NO deny rules, and EVERY connection to and from every host is set to allow. And the firewall still blocks everything. This is the same exact thing that happened 2 years ago when I first tried to run 10.6 Server on my mini. The difference is that back then, this would happen either immediatly, or within a day. This time around, with 10.6.8, it took about a month before suddenly, without any provocation, all internet connections stopped.
I've had this happen on multiple computers. I don't do anything special, I just set up a basic firewall scheme where everything in the LAN range is allowed, and everything from "any" is allowed only to service ports I'm running. The basic gateway setup. Now I was running 10.6 Server on my laptop (for netbooting) and it would do the same thing. But because my laptop wasn't acting as a gateway, I could just turn the firewall off (you need the firewall for NAT). My mini server IS acting as a gateway, as was another mini I set up for a client of mine (that eventualy I changed over so they were running off an airport, and the mini server was just a client. But I don't want that setup at home, I want my mini to be the router).
I have verizon Fios internet. 25/25, it's great. The ONT is in my basement, and it's plugged into the same fused outlet as our freezer. From time to time, when the power goes out, it trips that breaker and the outlet goes dead. My itnernet is gone and I have to go reset the outlet. Once I do, my mini won't get an IP from Verizon until I reboot the mini. Not once. Not twice. Usually 5-10 reboots, and suddenly it will get an IP. I always assumed this was a verizon problem. Until I read someone else's post about this same problem. Turns out, that's the firewall blocking DHCP again! If you turn the firewall off, you don't have to keep rebooting, it will grab an IP right away.
At least I'm not crazy! So what is going on here? Does anyone have any idea what is going on with my firewall, or how I can fix it?
Lastly, after 4.5 hours of complete inability to get an internet connection with the firewall on, it just started working again. I now have fully functional, normal internet. I find it hard to believe 10.6 has a firewall that is simply broken. I find it even harder to believe I'm imagining things, or that I've had fluke after fluke. Something is going on with 10.6 Server.

The DNS skapegoat just doesn't make sense.
Why would "improper" DNS cause OS X's firewall to block all network connections? Even the server's ability to make it's own DHCP connection?
As far as a router, I don't want to use a cheap unreliable residential router. I have a home file server that, aside from running 10.6, makes a super reliable router. And port mapping aside, OS X Server's DHCP server is great to use. Rock solid. It makes no sense to run a cheap residential router when I have a home server. Then every 6-18 months, I get to deal with that router slowly failing, as my internet connection gets slower and slower. No thanks.
So back to this firewall issue. I've talked to Apple aobut this before, and they give the same generic "DNS has to be right" answer to basically every problem I've ever had with 10.6 Server (hinting at endless CalDAV problems). But no one has every explained what that specifically means, or how something like wrong DNS (whatever that even means) can cause the firewall to block everything. This just makes no sense to me. And this especially does not explain why, after 10 reboots or so, everything just magically starts running normally.
I just had an incedent today where I woke up to no internet. I rebooted 3 times. Each time, I either got a self-assigned IP address, or the ethernet interface would toggled between "unplugged" and "no-ip". I could turn the firewall off and the server would INSTANTLY start functioning normally. I'd happily run without a firewall, and just turn all services I'm not using off. However NAT needs the firewall, so without the firewall, the Server is the only Mac on the network that has an internet connection. So I kept rebooting and rebooting, and I think about 8 reboots later, like magic, the server came up, grabbed an IP, and everything started working normally.
Also my IP through my ISP is dynamic, and that isn't going to change. So yes, I am trying to use OS X Server as my router on a dynamic internet connection. I've been doing this since the days of Mac OS X Server 10.1. Only 10.6 has had any problems at all.
So really, "10.6 is more picky about DNS" isn't an answer to this problem. Or, at least, it's not a sufficient answer. I need much more information than that.

Windows Firewall blocking connections to devices

Hi
I hope this is the right place. I am having a few problems with the Windows 7 firewall when connecting to embedded devices.
I currently have a Windows application that connects to 4 embedded devices via TCP but Windows firewall only seems to allow a connection with 2 of the devices even with exceptions setup on the firewall.
The devices are connected to their own ethernet adapter in the PC '192.168.1.32'. Each device has it's own IP Address but uses the same port.
The network comes up as a 'public' network and with the firewall for the public profile enabled only connections to the first 2 devices are established.
If I turn the firewall off for the public profile connections are made to all devices.
Also if I give each controller a different port number connection is again made to all devices.
I was hoping that someone could tell me if this is expected firewall behaviour or at least be able to give me a clue as to why the firewall affects the connections.
I know I can get round the problem but I wanted to at least understand why this is happening.

You can check existing rules using this command (using
admin command prompt)..
netsh advfirewall firewall show rule name=all
and try to understand what is blocking your ports and try to create exceptions accordingly....
Expected firewall behaviour is to open necessary ports for a software by making exceptions in the firewall rules by that software while installing.. For some reason if it fails you may have to manually create exceptions.. rules etc..
Hetti Arachchige V Aravinda | Network & System Administrator (B.Sc, Microsoft Small Business Specialist, MCP, MCTS, MCSA, MCSE,MCITP, CCNA, CEH, MBCS)

Team Foundation Server 2010 and System Center 2012 SP1 Operations Manager WorkItem Synchronization fail

Hello,
We are currently implementing a Devops solution with SCOM 2012 SP1 and TFS 2010 SP1 and we would like to synchronize APM alerts with TFS and the Operational Issue WorkItem. However we are not
able to sync anything.
Here is our environments :
Products :
SCOM
System Center Operations Manager 2012 SP1
French
OS: Windows 2012 SP1 Std x64
French
DB: SCOM SQL Server 2012 SP1 x64
Management Pack
MP Operations Manager TFS Work Item Synchronisation 7.0.9538.0
MP Alert Attachement 7.0.9538.0 (We have also try the version in the VM DEVOPSALL : 7.0.9538.1005)
TFS
Team Foundation Server 2010 SP1
French 10.0.40219.1
OS: Windows 2008 R2 SP1 Std x64
French
DB: TFS SQL Server 2008 x64
TFS 2012 Object Model Installer (We have also try the version 2010)
Here is our configuration :
TFS Platform
This a French platform with a project based on the Process Template SCRUM 1.0 alone in a Team Project collection. The Operational Issue import completed successfully. It’s possible to manipulate
Operational Issue for all of its states from TFS.
SCOM Platform
We followed the documentation at :
http://technet.microsoft.com/en-us/library/jj883936.aspx
to configure SCOM Alert Attachment and Operation Manager Tfs Work Item Synchronization. Everything seems to be ok. All configurations succeed. We did not configure Intellitrace collector.
The problem occurs when we are trying to push an APM alert to TFS. When we assigned an alert to the Engineering nothing is synchronized in TFS. There is no error in the event viewer on the TFS
server. But, on the SCOM server we get 2 exceptions raised by Microsoft.EnterpriseManagement.Modules.Apm.TfsWISync.OMModules. We provide you the log of the SCOM Server in this mail.
Detailed exceptions :
Exception message are in French. In English it could be : OEF expected. The followed elements are not closed : Source, Link.
Microsoft.SystemCenter.TfsWISync.SyncAttachments.Rule
TFS Work Item Synchronisation ServerName
{EC924637-2725-7C94-8F37-013B657F4530}
Microsoft.EnterpriseManagement.Modules.Apm.TfsConnector.OMModules.ReadOpenAlertsModule
System.Xml.XmlException: Fin de fichier inattendue. Les éléments suivants ne sont pas fermés : Source, Link. Ligne 1, position 65537.
   à System.Xml.XmlTextReaderImpl.Throw(String res, String arg)
   à System.Xml.XmlTextReaderImpl.ParseElementContent()
   à System.Xml.XmlReader.ReadString()
   à System.Xml.XmlReader.ReadElementString(String name)
   à Microsoft.EnterpriseManagement.Modules.Apm.TfsConnector.Common.DataItems.Links.DeserializeInternal(XmlReader reader)
   à Microsoft.EnterpriseManagement.Modules.Apm.TfsConnector.Common.DataItems.Links.Deserialize(String mappings)
   à Microsoft.EnterpriseManagement.Modules.Apm.TfsConnector.OMModules.ReadOpenAlertsModule.InitializeConfiguration(XmlReader reader)
   à Microsoft.EnterpriseManagement.Modules.Apm.TfsConnector.OMModules.ReadOpenAlertsModule..ctor(ModuleHost`1 moduleHost, XmlReader configurationReader, Byte[] previousState)
Microsoft.SystemCenter.TfsWISync.SyncWorkItems.Rule
TFS Work Item Synchronisation ServerName
{EC924637-2725-7C94-8F37-013B657F4530}
Microsoft.EnterpriseManagement.Modules.Apm.TfsConnector.OMModules.ReadAlertsSyncModule
System.Xml.XmlException: Fin de fichier inattendue. Les éléments suivants ne sont pas fermés : Source, Link. Ligne 1, position 65537.
   à System.Xml.XmlTextReaderImpl.Throw(String res, String arg)
   à System.Xml.XmlTextReaderImpl.ParseElementContent()
   à System.Xml.XmlReader.ReadString()
   à System.Xml.XmlReader.ReadElementString(String name)
   à Microsoft.EnterpriseManagement.Modules.Apm.TfsConnector.Common.DataItems.Links.DeserializeInternal(XmlReader reader)
   à Microsoft.EnterpriseManagement.Modules.Apm.TfsConnector.Common.DataItems.Links.Deserialize(String mappings)
   à Microsoft.EnterpriseManagement.Modules.Apm.TfsConnector.OMModules.ReadAlertsSyncModule.InitializeConfiguration(XmlReader reader)
   à Microsoft.EnterpriseManagement.Modules.Apm.TfsConnector.OMModules.ReadAlertsSyncModule..ctor(ModuleHost`1 moduleHost, XmlReader configurationReader, Byte[] previousState)
According to you, is there a possible incompatibility of the synchronization system with French environments?
Thanks for your help.
Gregory OTT => http://twitter.com/gregory_ott
ALM Engineer at Tekigo => www.tekigo.com

Hi,
To monitor the complete TFS infrastructure, you need additional monitoring packs that alert you about a wide range of problems with TFS components. When you import the TFS Work Item Synchronization management pack, it is a best practice to
also import and configure these monitoring packs, you can double check these:
Monitoring Integration between Operations Manager and TFS in System Center 2012 SP1
http://technet.microsoft.com/en-us/library/jj899893.aspx
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Operations Manager powershell health check on specific items

Hello,
I am trying to write up a Operations Manager PowerShell script that runs automatically and checks the current health status of a group object but only the health status of certain columns listed in the Operations Manager such as "Agent" or "Windows
Server 2008 Logical Disk". I have written up the following after setting the group object whose health I wish to check in Operations Manager to "$gp". Also note I am only looking for systems in that group object that show an unhealthy state
hence I put in the "Where-Object" to look for anything that is not showing a healthy status.
Get-SCOMMonitoringObject -Group $gp | select HealthState,Displayname | Where-Object {$_.HealthState -notlike "Success"}
This brings back the overall health state of each system in the group object but I do not want the overall health. I wish to only see the health status of say the "Windows Server 2003 Operating System" column in Operations Manager for those systems.
I would like to know if there is a simple way to accomplish this using the built in Powershell cmdlets which come with Operations Manager when it installs. If I could also get an example of what the syntax of this would look like that would be a great help.
Thanks!

Thank you for the responses!
I am currently running the 2012 edition of System Center Operations Manager.
The above code posted by
Alexey Zhuravlev runs for me but it does not seem to be passing anything through for the health state. All I get is a list of the system names but no health state. I believe this is because the Get-SCOMClass cmdlet does not have a "HealthState"
field to pass. It does have a "Status" field which I am wondering if that might work for me if I pipe in maybe the name of the system I would like to view.
I will continue on and play around with what I have so far.
Any further help would be greatly appreciated!

Extending System Center Operations Manager Classes & Discovery SCOM 2007 R2

I want to add some additional attributes to SCOM that are populated from information in another database.....for example.
I have a CMDB that contains information about the support level for each server (i.e. gold, silver, bronze), i want to be able to display this information in the SCOM console. This needs to cover both Windows and Unix/linux servers.
I have played around with creating a custom MP and have created a new class, and custom script discovery using a vbscript to query the CMDB SQL database containing the info that i want....I have got to the point where i can see the new column in SCOM console
but cannot get it to populate with any data.
any help would be appreciated.
thanks

Hi,
Here are some good articles about extending SCOM classes, please go through them:
Extending System Center Operations Manager Classes & Discovery
http://blogs.technet.com/b/stufox/archive/2008/07/23/extending-system-center-operations-manager-classes-discovery.aspx
Extending Windows Computer Class using Visual Studio Authoring Extensions (VSAE)
http://blogs.technet.com/b/emreguclu/archive/2012/11/07/extending-windows-computer-class-using-visual-studio-authoring-extensions-vsae.aspx
http://blogs.msdn.com/b/steverac/archive/2011/09/16/extending-a-class-in-the-authoring-console.aspxRegards,
Ya Li
Regards, Yan Li

Operations Manager Installation Error - Return Value 3

Hello, I am having issues installing Operations Manager Reporting 2007 R2. The installation hangs with no status update a little more then midway through. I am receiving the following exception below. I am trying to install this on a named reporting instance.
013-12-16T16:00:00.0547063-08:00 Debug:
*** Trace Started ***
2013-12-16T16:00:00.0859563-08:00 Debug:
ConfigureOverridesForDWRules: Root Management Server is: CORP32-VS
2013-12-16T16:30:01.7422063-08:00 Error:
ConfigureOverridesForDWRules error: System.TimeoutException : The requested operation timed out.
Exception thrown by custom action:
System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> Microsoft.WindowsInstaller.InvalidHandleException: The handle is invalid.
at Microsoft.WindowsInstaller.SessionProperties.set_Item(String name, String value)
at Microsoft.Reporting.Setup.ReportingManagedCAs.ConfigureOverridesForDWRules(Session session)
--- End of inner exception stack trace ---
at System.RuntimeMethodHandle._InvokeMethodFast(Object target, Object arguments, SignatureStruct& sig, MethodAttributes methodAttributes, RuntimeTypeHandle typeOwner)
at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object parameters, CultureInfo culture, Boolean skipVisibilityChecks)
at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object parameters, CultureInfo culture)
at Microsoft.WindowsInstaller.CustomActionProxy.InvokeCustomAction(Int32 sessionHandle, String entryPoint)
CustomAction _ConfigureOverridesForDWRules.9B663534_CD9B_41CC_9D93_4E84D3C5E165 returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (1C:FC) [16:30:01:804]: NOTE: custom action _ConfigureOverridesForDWRules.9B663534_CD9B_41CC_9D93_4E84D3C5E165 unexpectedly closed the hInstall handle (type MSIHANDLE) provided to it. The custom action should be fixed to not close that handle.
Action ended 16:30:01: InstallFinalize. Return value 3.
MSI (s) (1C:80) [16:30:01:804]: User policy value 'DisableRollback' is 0
MSI (s) (1C:80) [16:30:01:804]: Machine policy value 'DisableRollback' is 0
MSI (s) (1C:80) [16:30:01:882]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1133543036,LangId=1033,Platform=589824,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)
MSI (s) (1C:80) [16:30:01:882]: Executing op: DialogInfo(Type=0,Argument=1033)
MSI (s) (1C:80) [16:30:01:882]: Executing op: DialogInfo(Type=1,Argument=System Center Operations Manager 2007 R2 Reporting Server)
MSI (s) (1C:80) [16:30:01:882]: Executing op: RollbackInfo(,RollbackAction=Rollback,RollbackDescription=Rolling back action:,RollbackTemplate=[1],CleanupAction=RollbackCleanup,CleanupDescription=Removing backup files,CleanupTemplate=File: [1])
Action 16:30:01: Rollback. Rolling back action:

Niki,
I verified the data warehouse SQL server authentication account is indeed blank. I just tried running the installation again and received the following errors in the SQL log.
12/18/2013 07:43:28,spid177,Unknown,Error 777970008<c/> severity 16<c/> state 1 was raised<c/> but no message with that error number was found in sys.messages. If error is larger than 50000<c/> make sure the user-defined message is
added using sp_addmessage.
12/18/2013 07:43:28,spid177,Unknown,Error: 18054<c/> Severity: 16<c/> State: 1.
12/18/2013 07:43:28,spid88,Unknown,Error 777970008<c/> severity 16<c/> state 1 was raised<c/> but no message with that error number was found in sys.messages. If error is larger than 50000<c/> make sure the user-defined message is added
using sp_addmessage.
12/18/2013 07:43:28,spid88,Unknown,Error: 18054<c/> Severity: 16<c/> State: 1.
12/18/2013 07:43:28,spid173,Unknown,Error 777970008<c/> severity 16<c/> state 1 was raised<c/> but no message with that error number was found in sys.messages. If error is larger than 50000<c/> make sure the user-defined message is added
using sp_addmessage.
12/18/2013 07:43:28,spid173,Unknown,Error: 18054<c/> Severity: 16<c/> State: 1.
12/18/2013 07:43:18,spid173,Unknown,Error 777970008<c/> severity 16<c/> state 1 was raised<c/> but no message with that error number was found in sys.messages. If error is larger than 50000<c/> make sure the user-defined message is added
using sp_addmessage.
12/18/2013 07:43:18,spid173,Unknown,Error: 18054<c/> Severity: 16<c/> State: 1.
12/18/2013 07:43:15,spid13s,Unknown,AppDomain 9702 (OperationsManager.dbo[ddl].9701) unloaded.
12/18/2013 07:43:14,spid21s,Unknown,AppDomain 9701 (OperationsManager.dbo[ddl].9700) unloaded.
Also, please see error in the MOMReporting log below:
2013-12-18T07:41:54.8239565-08:00 Debug: ConfigureOverridesForDWRules: Root Management Server is: COR32
2013-12-18T08:11:56.1874277-08:00 Error: ConfigureOverridesForDWRules error: System.TimeoutException : The requested operation timed out.
Exception thrown by custom action:
System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> Microsoft.WindowsInstaller.InvalidHandleException: The handle is invalid.
   at Microsoft.WindowsInstaller.SessionProperties.set_Item(String name, String value)
   at Microsoft.Reporting.Setup.ReportingManagedCAs.ConfigureOverridesForDWRules(Session session)
   --- End of inner exception stack trace ---
   at System.RuntimeMethodHandle._InvokeMethodFast(Object target, Object arguments, SignatureStruct& sig, MethodAttributes methodAttributes, RuntimeTypeHandle typeOwner)
   at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object parameters, CultureInfo culture, Boolean skipVisibilityChecks)
   at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object parameters, CultureInfo culture)
   at Microsoft.WindowsInstaller.CustomActionProxy.InvokeCustomAction(Int32 sessionHandle, String entryPoint)
CustomAction _ConfigureOverridesForDWRules.9B663534_CD9B_41CC_9D93_4E84D3C5E165 returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (38:4C) [08:11:56:281]: NOTE: custom action _ConfigureOverridesForDWRules.9B663534_CD9B_41CC_9D93_4E84D3C5E165 unexpectedly closed the hInstall handle (type MSIHANDLE) provided to it. The custom action should be fixed to not close that handle.
Action ended 8:11:56: InstallFinalize. Return value 3.
MSI (s) (38:6C) [08:11:56:359]: User policy value 'DisableRollback' is 0
MSI (s) (38:6C) [08:11:56:359]: Machine policy value 'DisableRollback' is 0
MSI (s) (38:6C) [08:11:56:624]: Executing op: Header(Signature=1397708873,Version=500,Timestamp=1133657144,LangId=1033,Platform=589824,ScriptType=2,ScriptMajorVersion=21,ScriptMinorVersion=4,ScriptAttributes=1)

Questions about Deployment Operations Manager 2012 R2

Hi Folks
Questions: I have one infrastructure with Operations Manager 2012 R2, two Management Server.
Now, I'm trying install feature operations manager reporting in SQL Server.
added the OMDRA and OMDWWA accounts as a local administrator of the SQL server.
I'm using media installation Operations Manager 2012 R2, but I'm received erros, any idea? Or I need using media installation Operations Manager 2012 SP1?
Thanks
Wilsterman Fernandes

Hi There,
I had seen a similar issue here. The error log has a point mentioning " ApplyUpdates: Unable to load QFE file."
I saw this error on this below thread as well.
https://social.technet.microsoft.com/Forums/en-US/a10ce69e-2584-4a4d-86b9-64ee8c5bf85d/reporting-services-installation-failing?forum=operationsmanagerreporting
He said he fully re installed the whole setup and it solved the issue.
But i understand that is quiet difficult and complicated to do.
=================================================
I would suggest you check the permissions again
1.Does your data reader and writer account have SQL permissions i.e sysadmin permissions ?
2.Also is your SQL server in the same AD Domain or is it in a different domain ?
3.Is the SQL Server scale of deployment joined ?
4. Did you look in the ops manager event logs ? Can you check and post them here plz.
5. Is the operationsmanager DB and warehouse DB as well hosted on the same SQL server where you are trying to install reporting.
Gautam.75801

After moving database, error on startup operations manager console

Hello,
may be someone can help me or give me a hint. I have moved the operational databas of SCOM 2012 to an other MSSQL-Server; from a SQL2008 Server to a SQL2012 Server.
I used this document:
http://technet.microsoft.com/en-us/library/hh278848.aspx
After restarting the services i open the operations manager console, but it fails:
Date: 28.08.2014 15:42:03
Application: Operations Manager
Application Version: 7.1.10226.0
Severity: Error
Message: Failed to connect to server 'name.foo.fodomain.de'
Microsoft.EnterpriseManagement.Common.ServiceNotRunningException: The Data Access service is either not running or not yet initialized. Check the event log for more information. ---> System.ServiceModel.EndpointNotFoundException: Could not connect to net.tcp://name.foo.fodomain.de:5724/DispatcherService. The connection attempt lasted for a time span of 00:00:02.0060373. TCP error code 10061: No connection could be made because the target machine actively refused it 192.168.177.9:5724. ---> System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it 192.168.177.9:5724
at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
at System.Net.Sockets.Socket.Connect(EndPoint remoteEP)
at System.ServiceModel.Channels.SocketConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
--- End of inner exception stack trace ---
Server stack trace:
at System.ServiceModel.Channels.SocketConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
at System.ServiceModel.Channels.BufferedConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
at System.ServiceModel.Channels.ConnectionPoolHelper.EstablishConnection(TimeSpan timeout)
at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.CallOnceManager.CallOnce(TimeSpan timeout, CallOnceManager cascade)
at System.ServiceModel.Channels.ServiceChannel.EnsureOpened(TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at Microsoft.EnterpriseManagement.Common.Internal.IDispatcherService.Connect(SdkClientConnectionOptions connectionOptions)
at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.Initialize(EnterpriseManagementConnectionSettings connectionSettings, SdkChannelObject`1 channelObjectDispatcherService)
at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.CreateEndpoint[T](EnterpriseManagementConnectionSettings connectionSettings, SdkChannelObject`1 channelObjectDispatcherService)
--- End of inner exception stack trace ---
at Microsoft.EnterpriseManagement.Common.Internal.ExceptionHandlers.HandleChannelExceptions(Exception ex)
at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.CreateEndpoint[T](EnterpriseManagementConnectionSettings connectionSettings, SdkChannelObject`1 channelObjectDispatcherService)
at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.ConstructEnterpriseManagementGroupInternal[T,P](EnterpriseManagementConnectionSettings connectionSettings, ClientDataAccessCore clientCallback)
at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.RetrieveEnterpriseManagementGroupInternal[T,P](EnterpriseManagementConnectionSettings connectionSettings, ClientDataAccessCore callbackDispatcherService)
at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.Connect[T,P](EnterpriseManagementConnectionSettings connectionSettings, ClientDataAccessCore callbackDispatcherService)
at Microsoft.EnterpriseManagement.ManagementGroup.InternalInitialize(EnterpriseManagementConnectionSettings connectionSettings, ManagementGroupInternal internals)
at Microsoft.EnterpriseManagement.Mom.Internal.UI.Common.ManagementGroupSessionManager.Connect(String server)
at Microsoft.EnterpriseManagement.Monitoring.Console.Internal.ConsoleWindowBase.TryConnectToManagementGroupJob(Object sender, ConsoleJobEventArgs args)
System.ServiceModel.EndpointNotFoundException: Could not connect to net.tcp://name.foo.fodomain.de:5724/DispatcherService. The connection attempt lasted for a time span of 00:00:02.0060373. TCP error code 10061: No connection could be made because the target machine actively refused it 192.168.177.9:5724. ---> System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it 192.168.177.9:5724
at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
at System.Net.Sockets.Socket.Connect(EndPoint remoteEP)
at System.ServiceModel.Channels.SocketConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
--- End of inner exception stack trace ---
Server stack trace:
at System.ServiceModel.Channels.SocketConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
at System.ServiceModel.Channels.BufferedConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
at System.ServiceModel.Channels.ConnectionPoolHelper.EstablishConnection(TimeSpan timeout)
at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.OnOpen(TimeSpan timeout)
at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.CallOnceManager.CallOnce(TimeSpan timeout, CallOnceManager cascade)
at System.ServiceModel.Channels.ServiceChannel.EnsureOpened(TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at Microsoft.EnterpriseManagement.Common.Internal.IDispatcherService.Connect(SdkClientConnectionOptions connectionOptions)
at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.Initialize(EnterpriseManagementConnectionSettings connectionSettings, SdkChannelObject`1 channelObjectDispatcherService)
at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.CreateEndpoint[T](EnterpriseManagementConnectionSettings connectionSettings, SdkChannelObject`1 channelObjectDispatcherService)
System.Net.Sockets.SocketException (0x80004005): No connection could be made because the target machine actively refused it 192.168.177.9:5724
at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
at System.Net.Sockets.Socket.Connect(EndPoint remoteEP)
at System.ServiceModel.Channels.SocketConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
My databaseadmin told me, that all is ok, the operations management server queries the new sql server, then close the connection. So we started again the old database server, there are still queries to this server.
What i've done:
- Changing the database servers name in the registry, Microsoft Operations Manager, 3.0, Setup, DatabaseServerName
- changing the database entry at the file ConfigService.confg
After my databaseadmin told me, that there are queries at the old database server, i searched in the registry and found two entries:
- System Center
Common
  Database
   DatabaseServerName
- System Center Ooperations Manager
12
  Reporting
   DWDBInstance
.. i have still this error, no connection possible.
What testing i can do?
Kind regards
Wolfgang

You have to update the DB server names in the databases as well. Here are the instructions for SCOM07, I suspect it's similar in SCOM12
Update the OperationsManager database with the New Database Server Name, and ensure that the account that you are logged on with has sufficient privileges on the SQL Server instance.
Open SQL Server Management Studio.
Expand
Databases, OperationsManager, and Tables.
Right-click
dbo.MT_ManagementGroup, and then click Open Table if you are using SQL Server 2005 or click
Edit Top 200 Rows if you are using SQL Server 2008.
Change the value in the
SQLServerName_6B1D1BE8_EBB4_B425_08DC_2385C5930B04 column to reflect the name of the new SQL Server-based computer.
Save your change
Configure the Operations Manager database with the name of the new Data Warehouse server as follows:
On the server that hosts the Operations Manager database, open SQL Server
Management Studio and navigate to Databases, OperationsManager, and then to
Tables.
Right-click
dbo.MT_DataWarehouse, and then select Open Table if you are using SQL Server 2005 or select
Edit Top 200 Rows if you are using SQL Server 2008.
Change the value in the
MainDatabaseServerName_16781F33_F72D_033C_1DF4_65A2AFF32CA3 column to the name of the new Data Warehouse server.
Close SQL Server Management Studio to save your changes.
"Fear disturbs your concentration"

[Solved] Windows Firewall rule that allows Windows Update

Can anyone kindly give me a Windows Firewall rule that allows Windows Update? Assume I'm running MMC's "Windows Firewall with Advanced Security" snap-in as Administrator. Note that a "solution" that takes down the outbound firewall is
not acceptable.
Thank You.
===== Solution =====
Suppose that, as the default, you've set the outbound firewall to block (see
To close the outbound firewall, below). In order for Windows Update to check whether an update is available and then to download the update files, you first need an outbound firewall
allow-rule that allows the Windows Update service to pass through the outbound firewall.
Prerequisite: Knowledge of the Microsoft Management Console (MMC) and its "Windows Firewall with Advanced Security" plug-in.
What you will do: You will use the "Windows Firewall with Advanced Security" MMC plug-in to create an outbound firewall rule that
allows '%SystemRoot%\System32\svchost.exe' (the generic service driver) to pass through the outbound firewall on behalf of 'wuauserv' (the name of the specific service that performs the update).
Warning: If you don't know what I'm writing about, get help.
Name: Allow Windows Update (...or any name you prefer - it doesn't matter)
Group:
Profile: Public
Enabled: Yes
Action: Allow
Program: %SystemRoot%\System32\svchost.exe
Local Address: Any
Remote Address: Any
Protocol: Any
Local Port: Any
Remote Port: Any
Allowed Computers: Any
Status: OK
Service: wuauserv
Rule Source: Local Setting
Interface Type: All interface types
Excepted Computers: None
Description:
To open the outbound firewall:
More accurate wording would be
Outbound connections are allowed unless explicitly blocked by a rule.
If you look at the standard rules you will find no block-rules. That means that nothing is blocked, everything is allowed, and the outbound firewall is wide open.
To close the outbound firewall:
More accurate wording would be
Outbound connections are blocked unless explicitly allowed by a rule.
If you look at the standard rules you will find only allow-rules that have been crafted to allow the vital Windows connections to pass through the outbound firewall. To an informed observer it's obvious that the firewall engineers crafted these
allow-rules so that users who closed the outbound firewall wouldn't have to write them. But the firewall engineers left out Windows Update.

Hi mark,
Thanks for sharing, it will help other users who have similar issue.
Regards

Cisco IPT and Microsoft System Centre Operations Manager

Hi All
Does anybody used Cisco IPT with System Centre Operations Manager?
Does System Centre Operations Manager supports Cisco CallManager OS and Hardware for monitoring?
Thanks
VKS

Hi David,
Thanks for your reply. I have gone through the links which you have mentioned. As per the Overview of Operations Manager 2007 R2 section in What's New & Improved in Operations Manager 2007 R2 document it is clearly mentioned the below points:
Delivers monitoring across Windows, Linux and Unix servers–all through a single console.
Extend end to end monitoring of distributed applications to any workload running on Windows, Unix and Linux platforms.
The Cisco Servers are also Windows and Linux Based.
Thanks & Regards,
Vaijanath

Audition and windows firewall

I've scrapped the security I've been using on my machine in favor of Microsoft Security Essentials. I've also enabled Windows Firewall to see how it works. (I've got a router, so I haven't been using a firewall, but I wanted to see what effect it might have.) Okay, so I tried loading a third-party plugin into a CS6 session, and I get a Windows Security Alert telling me 'Windows Firewall has blocked some features of this program', and it describes Audition, not the third-party plugin, as the reason.
Okay, why would it do that?
It gives me this option if I want it: 'Allow Adobe Audition CS6 to communicate on these networks:
* Private networks, such as my home or work network.
* Public networks...'
Okay, communicate? What does Audition communicate with when I'm online? Is it just the online Help? And why would Windows Firewall block that?

Audition is simply communicating with a separate headless app that comes with Audition that does the plug-in scanning. Because there's a lot of bad plug-ins out there that can crash an application simply by scanning them, we created the separate app that does all of our plug-in scanning in the background. They have to be separate to keep Audition from crashing on bad plug-ins during scan. So the network activity that the firewall is complaining about is simply Audition talking to the dvaaudiofilterscan application in the background that is on a localhost port (i.e. same machine, not talking to anything outside your computer).
The same goes for the dynamiclinkmediaserver (aka DLMS) which loads certain files in a separate application because it uses importer code from Premiere Pro (the most recent versions of Photoshop and Lightroom also use DLMS).
Lastly, you may sometimes see a firewall message if you have EUCON control surface devices because they talk to the computer via ethernet. So if you choose the EUCON control surface plug-in, that can spawn firewall messages as well.

Firewall blocks Airplay (even under 'allow all traffic')

Hi every body,
I am somewhat at the end of my knowledge. I have a mac mini server running Lion 10.7.2 server. Interestingly, my the server's firewall blocks
a) all airplay traffic and
b) 'reading Airport confirguration' requests
even when the firewall is set to 'allow all traffic'. However, when I completely switch it off, everything works just fine.
Any help would really be appreciated.
Thanks a lot.
Nonresidentalien
P.S. I have also tried to open ports 80 (t), 443(t), 554 (t/u), 3689(t), 5297(t), 5289(t/u), 5353(u), 49159(u) and 49163(u) with no success

Pointing to the IPv6 thread was a good idea. After reading it, I found out that the firewall preferences in Server Admin only show you IPv4 related firewall rules.
There is a terminal command that allows you to play with IPv6 rules. And by doing so, I was actually able to get AirPlay working again.
First, you want to show you the current IPv6 firewall rules. In my case they looked like this (10.7.2):
reptilehouse:~ sascha$ sudo ip6fw show
01000        285      96163 allow ipv6 from any to any via lo0
01100         66       5750 allow ipv6 from any to ff02::/16
65000          0          0 deny ipv6 from any to any
65535          6        306 allow ipv6 from any to any
As you can see, rule number 01100 only allows traffic to the local subnet, while the next rule (65000) blocks anything else. So you want to get rid of 65000:
reptilehouse:~ sascha$ sudo ip6fw delete 65000
To confirm, show the rule table again and you should see 65000 is gone:
reptilehouse:~ sascha$ sudo ip6fw show
01000        285      96163 allow ipv6 from any to any via lo0
01100         66       5750 allow ipv6 from any to ff02::/16
65535          6        306 allow ipv6 from any to any
Mind you, the rule numbers could be different on your system and you could see more or less rules. But you get the idea.
What I don't know if whether this is sticky, e.g. survives a reboot.

Operations Manager - Site Role - Notification Server Windows Firewall Block Monitor

Similar Messages

Maybe you are looking for