Peculiar thing happened in SCCM in our environment!
Hi ,
In our environment , we are using SCOM 2012 for monitoring and we from Wintel team ,one person xyz has the access to login to SCOM servers .He usually logs in to the SCOM server for adding and removing the servers in the monitoring database.
Last week, our team received an email from the SCOM administrator in the client side for which we are the IT infrastructure service support provider , that this xyz person's id is listed in the eventlog of the server as mentioned below
INFO: ConfigMgr2012 Setup was started by domain\xyz. $$<Configuration Manager Setup><03-25-2015 15:20:32.380+240><thread=5368 (0x14F8)>
INFO: Command line specified was: "F:\SCCM\bin\x64\SetupWpf.exe" /DEINSTALL /ARP $$<Configuration Manager Setup><03-25-2015 15:20:32.380+240><thread=5368 (0x14F8)>
This person really got shocked after seeing this mail from the SCCM administrator saying that xyz id has initiated the setup due to which the entire site got down due to this event happened.He is asking for the reason why xyz has done this.
But we are sure that this person xyz has not initiated this activity as he is only involved in the addition and removal of the servers from the SCOM monitoring for past several months and never indulged in such activity.
Can anybody please help me in understanding how his id got reflected in that particular scom server for this event due to which the entire site went down?
Now we are bound to give the RCA to this incident and the condition becomes severe now for us due to this incident happened without our intervention.
I know that I am providing less information because I don't have the full insight of this SCCM/SCOM due to lack of experience in this area.
Any help is greatly appreciated
Thanks & Regards S.Swaminathan Live & let others live!!!
Hi
Thanks for all your reply and to be precise in the statement, just now checked with the SCOM person in our team , it is understood that the Server in which the SCOM guy(our team mate) installed the SCOM agent is a SCCM child server in that site.What my team
person has done is usual installation of the SCOM agent in that site SCCM server where our team got a mail request to install the SCOM agent in that SCCM server which is recently built from a crash.
The SCCM administrator has given the log in which my team person id is existing but the log not from the windows event viewer , it is from the installation log
We are under the situation to give the justification .Could any one advise us what would have happened from the SCCM/SCOM perspective.Do the installation of the SCOM agent could have triggered the uninstallation of the SCCM from that server where my team
mate installed the SCOM agent
Thanks in advance
Thanks & Regards S.Swaminathan Live & let others live!!!
Similar Messages
-
Satellite Z930-14F - cannot install Win 8.1 from SCCM 2012 R2 environment
Dear all,
Sattelite Z series laptops cannot install OS (win 8.1) from our SCCM 2012 R2 environment.
Either no installation is starting, or pxe boot aborted error is showed.
The environment is used to successfully install OS (win 8.1) on different other vendor computers (dell) and virtual machines (hyper-v and vmware).
I've tried both UEFI and CMS boot options and tried to switch off the secure boot. Please advice.
Also, i've read about the "SCCM installation package for Toshiba". Will it help in my situation or is it just driver packages for SCCM?
Best Regards, Evgeny.I guess you are speaking about this Toshiba package:
http://www.toshiba.eu/services/on-demand/business-computing/sdp120gs-v/
I dont have much experience using such SCCM drive package but it definitely compatible with the Toshiba business notebooks. The Satellite / Portege Z930 belong to the business range and I think the package should be compatible.
This package seems to be for all IT administrators who manage devices on the corporate network with SCCM 2012 R2. Toshiba offers with the new Toshiba SCCM package a solution to integrate other notebook into an existing IT infrastructure quickly and smoothly and all Toshiba Driver and application packages and a demonstration task sequence are integrated.
However, it seems that you could get more details about this package directly from Toshiba [email protected]
By the way: The Win 8.1 installation requires the UEFI mode (in case the UEFI BIOS is available). But booting from another, external source requires the disabled secure boot option.
So maybe you should use the UEFI mode but should disable the secure boot option in order to boot from LAN. -
I am trying to move a pdf file onto my iPad2, and it says that the device is not connected or has stopped working. But Windows 7 recognizes the device and I can see my pictures. Same thing happens when I try to put music onto the iPad.
When in iTunes on the computer,my our ipadmshould show under devices.
Click on your ipadmunder devices then go to music at top center of the iTunes window, check what you want to sync for music. You need to set it to a folder if I remember which would have your music in it you want synced.
Same with PDF files.....there should be an option for data or even PDF files at the top center area of iTunes when the iPad is clicked under devices.
If your iPad does not show or you cannot click on it under devices which is in the leftane of iTunes, the iPad is not being seen by the computer.
Try unplugging the USB cord from the laptop then give it a few and see if the computer picks it up. -
Peculiar Timing Issue With PxE In Nexus Environment
I have seen some peculiar behavior doing PxE builds. I wanted to pick the brain of some experienced network engineers as my research on the internet shows there is a ton of contradictory opinions / philosophies.
Here is the setup:
1. HP SL4540 Servers with a Broadcom Copper/RJ-45 10Gbe Cards with PxE enabled.
2. Connected to Nexus 2232 10G Copper/RJ-45 edge switches going back to a Nexus 5596 aggregation layer.
3. IP helpers services are enabled on the 2232 so that DHCP and PxE requests are forwarded to a specific IP address.
4. Both the Switch Port & NIC Port are set to auto-negotiate.
Problem:
With the solution fully configured, the servers still fail to either find the DHCP / PxE server or make initial contact but never complete the handshake process. The peculiar thing is that we sometimes will see this late at night. We break for sleep and wake up in the morning and the servers are fine and ready to load an OS. There is some type timing phenomenon going on in the background and given enough time they eventually find this timing window and move forward.
I’ve read dozens of articles now and I have found some experts pointing to potential causes but then others refuting the same ones. Here are the preliminary ones I found.
1. With NIC and Switch Port set to auto-negotiate the negotiation process is taking longer than the PxE request process cycle which seems to be pretty short (10 to 15 seconds). I have read tons of conflicting info. Some of it (Citrix, Altiris, VMWare) saying setting to full duplex will circumvent the negotiation process if it is indeed taking longer than the PxE request process. Other docs say Gigabit Ethernet requires auto-negotiate and wont work without it. What are your thoughts on this ? Is Auto-Negotiate absolutely required for 1G/10G and if not can setting to full duplex potentially help the NIC sync with the switch quicker ? We do have tight control of server and switch so can ensure both are set to whatever we need.
2. I found a bunch of articles where PxE fails when certain services are active on the switch. The articles showed that these services can cause a long negotiation process to get link, or even allow link but hold packets for a bit as they bring in the new connections. The ones in particular they mentioned were:
a. Spanning Tree Protocol
b. Ether Channel
c. Port Aggregation Protocol
d. Disabled PortFast Service
What are your thoughts on this ? Are there other services that could have a similar effect ?
3. Outside these theories any other reasons one could see why this would happen ? The fact that it eventually “fixes itself” bugs me so I want to find a definitive answer.
Also from the switch side what troubleshooting steps can we take to prove or disprove these theories ? We can pull the switch logs, is there any other things to look for or monitor ? What would we expect to see in the switch log if one of these theories were correct ? Would loading WireShark and examining packet dumps be of any use here ? Any insight would be greatly appreciated. Thanks Cisco community. :-)I have seen some peculiar behavior doing PxE builds. I wanted to pick the brain of some experienced network engineers as my research on the internet shows there is a ton of contradictory opinions / philosophies.
Here is the setup:
1. HP SL4540 Servers with a Broadcom Copper/RJ-45 10Gbe Cards with PxE enabled.
2. Connected to Nexus 2232 10G Copper/RJ-45 edge switches going back to a Nexus 5596 aggregation layer.
3. IP helpers services are enabled on the 2232 so that DHCP and PxE requests are forwarded to a specific IP address.
4. Both the Switch Port & NIC Port are set to auto-negotiate.
Problem:
With the solution fully configured, the servers still fail to either find the DHCP / PxE server or make initial contact but never complete the handshake process. The peculiar thing is that we sometimes will see this late at night. We break for sleep and wake up in the morning and the servers are fine and ready to load an OS. There is some type timing phenomenon going on in the background and given enough time they eventually find this timing window and move forward.
I’ve read dozens of articles now and I have found some experts pointing to potential causes but then others refuting the same ones. Here are the preliminary ones I found.
1. With NIC and Switch Port set to auto-negotiate the negotiation process is taking longer than the PxE request process cycle which seems to be pretty short (10 to 15 seconds). I have read tons of conflicting info. Some of it (Citrix, Altiris, VMWare) saying setting to full duplex will circumvent the negotiation process if it is indeed taking longer than the PxE request process. Other docs say Gigabit Ethernet requires auto-negotiate and wont work without it. What are your thoughts on this ? Is Auto-Negotiate absolutely required for 1G/10G and if not can setting to full duplex potentially help the NIC sync with the switch quicker ? We do have tight control of server and switch so can ensure both are set to whatever we need.
2. I found a bunch of articles where PxE fails when certain services are active on the switch. The articles showed that these services can cause a long negotiation process to get link, or even allow link but hold packets for a bit as they bring in the new connections. The ones in particular they mentioned were:
a. Spanning Tree Protocol
b. Ether Channel
c. Port Aggregation Protocol
d. Disabled PortFast Service
What are your thoughts on this ? Are there other services that could have a similar effect ?
3. Outside these theories any other reasons one could see why this would happen ? The fact that it eventually “fixes itself” bugs me so I want to find a definitive answer.
Also from the switch side what troubleshooting steps can we take to prove or disprove these theories ? We can pull the switch logs, is there any other things to look for or monitor ? What would we expect to see in the switch log if one of these theories were correct ? Would loading WireShark and examining packet dumps be of any use here ? Any insight would be greatly appreciated. Thanks Cisco community. :-) -
Lost mail, spooky things happening, and more
Some very strange things happening with Mail today. First, here is my set up. I have a Yahoo account. I have two computers, and iMac running 10.3.9 and a MBP core duo running 10.4.8. (No I did not update to 10.4.9 yet.) I have Mail set to check for messages every few minutes. As today went on, I got a dozen or so messges. Though, early in the day, I realized that for some reason I was not getting some messages on my iMac. And strange enough as that was, it seemed to be explained by the fact somehow, after downloading messages to my MBP, they were being deleted off of Yahoo, which my computers are NOT set to do. In fact, all 2000 or so messages I had stored on Yahoo are now gone.
Well, if that wasn't strange enough, I responded to two of the emails I got today using my MBP. Everything went like usual, but there was some evidence that Mail was acting strange. Like, when I opened it up, it took me to some random message in the middle of my 5000 or so saved messages. Like it didn't remember where I was before like it usually does. Not so significant, but certainly strange.
I quit Mail, and then reopened it. (still on my MBP) Well, now all of my messages from today were GONE. The two emails I responded to were gone and though I always have everything saved to my sent folder, there was no evidence that I ever sent these emails.
Something stragne is happening to my mail. Anybody have a clue what is going on here? Do I have a ghost? I know I did NOT delete those messages from today. I know for a fact they were on my MBP. I know that my Mail program is NOT set to delete messages off of Yahoo.
I know, there are a lot of variables, but something is up.
Thoughts?
Thank you,
AdamIn the Finder, go to ~/Library/Mail/ and check whether the missing messages are still there somewhere, just inaccessible for some reason. Also, have you tried searching for those messages in Spotligth?
Not sure what the situation is here, but if some of your messages have been deleted for some reason, they’re not on the server and you don’t have a backup, you may want to try to salvage as many deleted *.emlx files as possible with a data recovery tool such as Data Rescue II, TechTool Pro, or FileSalvage. Of these, the only one I know for sure that can currently recover deleted *.emlx files is FileSalvage. Stop using your computer right now if you want to try that, as anything you do with the computer may cause the deleted files to be overwritten.
That said, if messages are being removed from the server despite you having configured Mail to not do so, either the server is misbehaving or there is some corruption in Mail’s preferences file, which might also explain some of the other strange things you’ve observed.
Verify/repair the startup disk (not just permissions), as described here:
The Repair functions of Disk Utility: what's it all about?
After having fixed all filesystem issues, if any, and making sure that there’s enough space available on the startup disk (a few GB, plus the space needed to make a backup copy of the Mail folder), try this:
1. If you have a .Mac account and .Mac synchronization of Mail data is enabled either in Mail > Preferences > General or in System Preferences > .Mac, disable it before proceeding.
2. Quit Mail if it’s running.
3. Make a backup copy of the ~/Library/Mail folder, just in case something goes wrong while trying to solve the problem. You can do this in the Finder by dragging the folder to the Desktop while holding the Option (Alt) key down, for example. This is where all your mail is locally stored.
4. In the Finder, go to ~/Library/Preferences/. Locate com.apple.mail.plist and move it to the Desktop (to be deleted if this fixes the problem).
5. Open Mail. You’ll have to set up your non-.Mac accounts from scratch all over again. If given the option to import existing mailboxes or something like that, don’t. Just enter the account information and Mail will automagically rediscover the data in ~/Library/Mail/ when done.
6. You’ll have to re-configure most of your settings in Mail > Preferences. For spam-related security reasons, the first thing you should do is go to Preferences > Viewing and disable Display remote images in HTML messages if it’s enabled.
7. You may also need to re-install or re-enable any Mail plug-ins you have installed for Mail to recognize them.
8. As a side effect of re-creating com.apple.mail.plist, Mail might rename Outbox (which is where messages waiting to be sent are stored) to Delivered. The name of that mailbox is actually a misnomer, as it would contain messages (if any) that couldn’t be delivered for some reason. You can delete that mailbox if you wish.
9. If the problem is fixed now and .Mac synchronization of Mail data was enabled at the beginning, enable it again, go to System Preferences > .Mac > Advanced, click Reset Sync Data, and choose the appropriate options to reset the Mail data stored on the .Mac server with the data locally stored on the computer, i.e. sync data must flow from the computer to the .Mac server.
Note: For those not familiarized with the ~/ notation, it refers to the user’s home folder. You can easily locate any of the folders referred to in this post by copying the folder path here, doing Go > Go to Folder in the Finder, and pasting the folder path there. -
I have an MacBook Pro 10.6, using disk utility I tried to verify my disk, but it came up with the message, please use your start up disk, I tried this, starting the computer up and pressing C, but it ejected the disk, the same thing happened while I running the computer. Is the hard drive damaged as laptop doesn't seem to recognize the start up disk ? If so, I presume I will have to put in a new one.
There haven't been any problems with the computer, apart from a sticky curser,I have run a permissions programme from disk utility, there were a lot of different ones, but it seem to be able to fix them.
Any comments or ideas ?
Thank you in anticipation.First backup your users files off the machine to a external storage drive (not TimeMachine!)
Most commonly used backup methods
Next to startup from the disk, have it inserted, hold c or option/alt (wired or built in keyboard) and then boot the computer and or select the disk when it appears and click the arrow.
Disk Utility is under the Utilities menu on the second screen.
Step by Step to fix your Mac
If you used the wrong 10.6 disk, it will spit it out or have issues, use the one that came with that machine or if it's defective, call Apple for a new one. -
When I try and open Microsoft Word 2011 documents on my IMAC they start opening one after another at a rapid speed and I can't stop it. I reboot and same thing happens. The documents open in rapid succession on their own and don't stop until I force close or after maybe 100 or more open I start getting the following message for each document attemting to open "This document could not be registered. It will not be possible to create links from other documents to this document" and then in paretheses the name of the document. After I click okay another trys to open. Any suggestions?
If you had multiple documents open and quit the app without closing all of the docs first, it will open them again when you launch the app. Open Word, and then close all the documents, you may be asked to save the document, if the document was already saved but you made changes to it before you quit the app, you may need to save the changes first, shorcut ( command and s keys). After you close all of the documents then quit the app and restart the computer. See if this works.
-
I'm attempting to sync several albums from itunes to iphoto. When select to sync all albums it copies over the previous recorded album. I tried to sync the Albums individually and the same thing happens. Any ideas on how to sync my albums?
Hi NWL1,
Thanks for the question. If I understand correctly, the iPhone won't update and is stuck. I would recommend that you read this article, it may be able to help you resolve or isolate the issue.
If you can't update or restore your iPhone, iPad, or iPod touch - Apple Support
Thanks for using Apple Support Communities.
Have a great day,
Mario -
Macbook pro keeps cutting out then wont turn on for a while then when it does same thing happens! Happens with charger plugged in or not and green charge light stays on even when it cuts out and cant be turned on! Does any1 have any idea what the problem is?
Try SMC and PRAM resets:
http://support.apple.com/kb/HT3964
http://support.apple.com/kb/ht1379
Ciao. -
I updated Itunes to v 10.5. Mistake!!!! Then updated iOS 5 to my iPhone 4 now my iPhone doesn't work as the applications freezes when trying to restore the phone. Same thing happens with my iPad 2, so now I have two pieces of equipment that are completely non-functional. Can any please tell me what to do? How can I reinstall the previous versions of iTunes, or iOS which were working on my iPhone and on my iPad? I hate iTunes and this has been the last drop that messed up my equipment. Please help me. I do not have another phone to call APPLE. This ***** big time!! PLEASE HELP ME!!!
Connect to a computer to restore.
-
Some of my songs in iPad Mini with RD disappeared all the sudden and I need to redownload it again. Same thing happen to my iPod touch 5 too. What's wrong with it? Is it the iOS problem?
Delete the music in your iTunes library, then go to iTunes store, Quick Link, 'Purchased' to redownload again.
-
I can't use my applications as I have a 'download error' and told to try again, but same thing happens ... any ideas?
Hi There,
Kindly try the below mentioned link:
Re: Creative Cloud - Download error - stubborn error
Creative Cloud "Download Error" message
Error downloading and installing Creative Cloud application
Thanks,
Atul Saini -
itunes store won't open. It tries and then stops. no error messages. I've reinstalled and same thing happens. any ideas?
Hi Guys:-
If this SAME problems is effecting us all then suspect its not IPS problem as we all get problem at 995.6MB.
I would think that there is some kind of software conflict. If we all having this problem just think of how many users have the same but are not on this discussion board, bet you its 100s and 100s.
Not possible for me to visit store now but will monitor your responce's.
Good luck guys, lets make um give us a fix:- I will call them tomorrow and see what they say:- should point support to this Discussion page and they can answer us !
Cheers and good luck also -
I try to redeem an iTunes GC and I get a "Session Has Timed Out" Message. The same thing happens when I try to download a song, after I'm taken to the SLA page. I sent Apple Support an email. They told me its software on my computer restricting access to my Internet Connection, but I haven't installed any new software since my last purchase from the iTunes Store. What can I do to fix this?!?! Thanks
Delete and redownload them if doing so is free in your country.
(106637) -
I updated to iOS 6.1.2 on my iPad gen 3 and is unable to use my Google app! Two things happen, 1.) Can't find URL n 2.) Yahoo developers HTML codes are shown.
THey have bought out an update Ios 8.2 perhaps u could try that it may help u unfortunately u cannot go back to Ios 7.1.2 apple wont allow u to i guess hindsight is a good thing u can learn from this and dont be in too much of a hurry to update in the future sit back and wait too see if there are any problems before u update i work on the principle if aint broke then dont touch it...sorry there much u can do other than vent your suggestions to apple support..
Maybe you are looking for
-
Ejb 2.0 deployment code error with WAS 6.1
Hi we have recently migrated to WAS 6.1 from 5.1. Since then we are facing the below problem.We use ant task to call ejbDeploy.sh to generate deployment code for one of our ejb module.All i did in the ant script was changing the path to ejbdeploy too
-
Clear Down Payments at the time of Invoice Posting
Hi, At the time of invoice posting (customer/vendor) we will a message on exsting down payments. Is it possible to link the down payment with current invoices?? Please let me the possibilities. Thanks Partha
-
I am totally new to this. If you respond, please do step by step instructions. 1) I downloaded an app from iTunes store. It is in my library. When I went to sync, it did not show up on the IPod. 2) In iTunes, under my device, applications tab, I was
-
Sharing to DVD I get the following alert " There was an error burning your disc. Not enough Disk Space in Target Folder" I have 700GB free. Where is this target folder located? How can I fix this problem? This is definitely not a space problem.
-
Pls help out me to create a report for entry tax
hi all, pls help out me to create a report for entry tax. and give some logic how i can do this. thanks and regards vikas