SCOM 2012 R2 error NTFS - Delayed Write Lost. Windows Event ID 11

Hi, we seem to be getting a few alerts in our SCOM console regarding NTFS - Delayed Write Lost alerts. We are running HP ML350e Gen8 servers with Server 2012 R2 OS installed. In System event logs we receive event ID error 11.
The driver detected a controller error on \Device\Harddisk1\DR1.
The controller used is a Smart Array P420
I've installed the latest HP Service Pack, installed the latest drivers for the P420, etc.
No errors are showing in the HP Array diagnostics tools.
Any help would be greatly appreciated.

Hi,
Description of the Event ID 50 Error Message
http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Windows+Operating+System&ProdVer=5.2.3790.1830&EvtID=50&EvtSrc=ntfs&LCID=1033
According to information above, I think event ID 11, disk issues could be the culprit.
I recommend you contact with HP to confirm the information.

Similar Messages

Windows Server 2012 VSS error "The system writer is missing"

Hello All,
I have a HP server that I have just installed Server 2012 standard, SQL Server 2012 and Sharepoint 2013.
When I try to take bare metal backup I get the error: "The system writer is missing", I have tried the backup as the local admin and domain admin.
The backup will only work if I decide to back up C:, once I select "Bare Metal" or "System State" the backup fails.
I have tried this solution: http://technet.microsoft.com/en-us/library/cc734021.aspx but have not had any luck yet.
When I run the command "vssadmin list writers" I can not see "System Writer" listed.
How can I add/turn on the System Writer?

Hi,
The system writer fails due to the fact that the trusted installer & system accounts are missing permissions to files in the directory %windir%\winsxs\filemaps\.
To resolve this issue, please run the following commands from an administrative elevated Command Window:
CD c:\windows\system32
Takeown /f %windir%\winsxs\filemaps\* /a
icacls %windir%\winsxs\filemaps\*.* /grant "NT AUTHORITY\SYSTEM:(RX)"
icacls %windir%\winsxs\filemaps\*.* /grant "NT Service\trustedinstaller:(F)"
icacls %windir%\winsxs\filemaps\*.* /grant "BUILTIN\Users:(RX)"
For more information, please also refer to the following links:
Discussion Forum FAQ: VSS System Writer is missing.
http://social.technet.microsoft.com/Forums/en-US/winserverfiles/thread/0b1eb10a-d666-4f5e-b657-c93b1d754a7f
Failure during Windows Server 2008 System State Backup & System Writer Missing
http://blogs.technet.com/b/chrad/archive/2009/11/18/failure-during-windows-server-2008-system-state-backup-system-writer-missing.aspx
Regards,
Arthur Li
TechNet Community Support

Error: Can't write: C:\windows\system32\Macromed\Flash\Flash10e.ocx

When i install Flash 10, there was a error message showing "Can't write: C:\windows\system32\Macromed\Flash\Flash10e.ocx". I chose to ignore, installation can be completed but i still can't view any Flash file. I tried every steps showing in Adobe Flash Player Support Center to troubleshoot the issues, but i can't go any where. Will anyone know what's the problem and how i can install the Flash player on my laptop? I am using Windows 7 and Internet Explorer. Thanks heaps!

Is your Windows 7 32-bit or 64-bit?
Can you try to download this installer http://fpdownload.adobe.com/get/flashplayer/current/install_flash_player_ax.exe, save it to disk, then close all browser windows and run the downloaded installer - do you get the same message?

How to write to windows event logs from determinations-server under IIS

This is just an FYI technical bit of information I wish someone had shared with me before I started trying to write OPA errors to the windows event log... Most problems writing to the windows event log from log4net occur because of permissions. Some problems are because determinations-server does not have permissions to create some registry entries. Some problems cannot be resolved unless specific registry entry permissions are actually changed. We had very little consistency with the needed changes across our servers, but some combination of the following would always get the logging to the windows event log working.
To see log4net errors as log4net attempts to utilize the windows event log, temporarily add the following to the web.config:
<appSettings>

<add key="log4net.Internal.Debug" value="true"/>
</appSettings>
<system.diagnostics>
<trace autoflush="true">
<listeners>
<add
name="textWriterTraceListener"
type="System.Diagnostics.TextWriterTraceListener"
initializeData="logs/InfoDSLog.txt" />
</listeners>
</trace>
</system.diagnostics>
To add an appender for the windows event viewer, try the following in the log4net.xml:
<appender name="EventLogAppender" type="log4net.Appender.EventLogAppender" >
<param name="ApplicationName" value="OPA" />
<param name="LogName" value="OPA" />
<param name="Threshold" value="all" />
<layout type="log4net.Layout.PatternLayout">
<conversionPattern value="%date [%thread] %-5level %logger [%property{NDC}] - %message%newline" />
</layout>
<filter type="log4net.Filter.LevelRangeFilter">
<levelMin value="WARN" />
<levelMax value="FATAL" />
</filter>
</appender>
<root>
<level value="warn"/>
<appender-ref ref="EventLogAppender"/>
</root>
To put the OPA logs under the Application Event Log group, try this:
Create an event source under the Application event log in Registry Editor. To do this, follow these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application
4.     Right-click the Application subkey, point to New, and then click Key.
5.     Type OPA for the key name.
6.     Close Registry Editor.
To put the OPA logs under a custom OPA Event Log group (as in the demo appender above), try this:
Create an event log in Registry Editor. To do this, follow these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
4.     Right-click the eventlog subkey, point to New, and then click Key.
5.     Type OPA for the key name.
6.     Right-click the new OPA key and add a new DWORD called "MaxSize" and set it to "1400000" which is about 20 Meg in order to keep the log file from getting too large.
7.     The next steps either help or sometimes cause an error, but you can try these next few steps... If you get an error about a source already existing, then you can delete the key.
8.     Right-click the OPA subkey, point to New, and then click Key.
9.     Type OPA for the key name.
10.     Close Registry Editor.
You might need to change permissions so OPA can write to the event log in Registry Editor. If you get permission errors, try following these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
4.     Right-click the EventLog key, select Permissions.
5.     In the dialog that pops up, click Add...
6.     Click Advanced...
7.     Click Locations... and select the current machine by name.
8.     Click Find Now
9.     Select both the Network user and IIS_IUSERS user and click OK and OK again. (We never did figure out which of those two users was the one that fixed our permission problem.)
10.     Change the Network user to have Full Control
11.     Click Apply and OK
To verify OPA Logging to the windows event logs from Determinations-Server:
Go to the IIS determinations-server application within Server Manager.
Under Manage Application -> Browse Application click the http link to pull up the local "Available Services" web page that show the wsdl endpoints.
Select the /determinations-server/server/soap.asmx?wsdl link
Go to the URL and remove the "?wsdl" from the end of the url and refresh. This will throw the following error into the logs:
ERROR Oracle.Determinations.Server.DSServlet [(null)] - Invalid get request: /determinations-server/server/soap.asmx
That error should show up in the windows event log, OR you can get a message explaining why security stopped you in "logs/InfoDSLog.txt" if you used the web.config settings from above.
http://msdn.microsoft.com/en-us/library/windows/desktop/aa363648(v=vs.85).aspx
Edited by: Paul Fowler on Feb 21, 2013 9:45 AM

Thanks for sharing this information Paul.

SCOM 2012 Report error rsprocessingaborted rserrorexecutingcommand

Hello All,
I am able to run some reports from SCCM 2012 console but few of them do not work.
Error in SCOM console when I try to run the report
An error has occurred during report processing. (rsProcessingAborted) Query execution failed for dataset 'Data_Warehouse_Main'. (rsErrorExecutingCommand) For more information about this error navigate to the report server on the local server machine,
or enable remote errors
When i log on to report server and try to run same report using browser, here is the error I get
An error occurred during client rendering. An error has occurred during report processing. Query execution failed for dataset 'Data_Warehouse_Main'. The EXECUTE permission was denied on the object 'Win7MemorySufficiencyReport', database 'OperationsManagerDW',
schema 'dbo'
So where do we need to change the permissions and for what account?
Also why some reports are running with same permissions and not others?
Thanks in Advance!!

Hi,
More info:
The EXECUTE permission was denied on the object 'Win7DiskUtilizationDrilldownReport', database 'OperationsManagerDW' ...
http://nerdymark.com/execute_permission_was_denied_object_win7diskutilizationdrilldownreport_database_operationsmanagerdw
Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Installing SCOM 2012 SP1 Error

Hi.
When we try to install the SP1, the installation fails.
We are using Server 2008 R2 Datacenter 64 bit.
I have started the installation with elevated rights. The windows eventlog says:
Product: System Center Operations Manager 2012 Agent -- The System Center 2012 - Operations Manager agent cannot be installed on a computer on which the Operations Manager management server, gateway server, Operations console, operational database, web console,
System Center Essentials, or System Center Service Manager is already installed. These must be uninstalled in order to proceed.
Event though the agent is not installed (not possible since its the Operations Management server)
This are the programs that are installed on the server:
I have zipped the log files and uploaded them
to skydrive.

Looking at the log files, the pre-reqs are fine. It detects that a previous version of the SCOM MS is installed and tries to upgrade:
[15:06:16]: Debug: :isProductInstalled: product with {7348450D-5558-4CA6-8E71-044720D304F2} product code is installed on this machine
[15:06:16]: Debug: :GetServerInstallState: OpsMgr Server is installed on this machine
[15:06:16]: Debug: :isProductInstalled: product with {95241780-B772-4A42-A1F0-8FA951FAF619} product code is installed on this machine
[15:06:16]: Debug: :GetUserInterfaceInstallState: OpsMgr UI is installed on this machine
[15:06:16]: Debug: :isProductInstalled: product with {20F530CC-FD73-43FE-ABD3-138D140A77A9} product code is installed on this machine
[15:06:16]: Debug: :GetWebConsoleInstallState: OpsMgr Web Console is installed on this machine
What I see a bit further down is:
[15:06:50]: Info: :Info:preparing for MS upgrade
[15:06:50]: Always: :Operations Manager Agent is also installed on the machine. Since we are upgrading Server we will remove Agent from this machine and add back the Agent Management group after server upgrade.
[15:06:50]: Always: :uninstalling product with product code: {5155DCF6-A1B5-4882-A670-60BF9FCFD688}
[15:06:50]: Debug: :GetFullPathBasedOnSetupLocation: Attempted to resolve a file at C:\apps\sc2012sp1\Setup\AMD64\ but it wasn't found there. Will return an empty string.
I don't know if this is causing the issue but it fails just after this point. Perhaps try downloading a new .iso and re-mounting (rather than extracting).
Cheers
Graham
Regards Graham New System Center 2012 Blog! -
http://www.systemcentersolutions.co.uk
View OpsMgr tips and tricks at
http://systemcentersolutions.wordpress.com/

SCOM 2012 R2 Error The connector the module is configured for no longer exists

Hi All,
The Microsoft Operations Manager Connector Framework Alert Forwarding module failed to mark an alert for forwarding because the connector the module is configured for no longer exists.
Connector Id: 57a14deb-a74b-520e-ac32-ba8d340d112d

Hi Mark,
You can try the following steps,
This is because we have deleted a connector that still had a live subscription associated with it. We need to go and delete that subscription to clean this up. The problem is – the connector is gone, so the subscription is no longer available
in the UI.
Therefore – we will have to delete it manually. This subscription (as all subscriptions) is kept in the “Notifications Internal Library” MP. You need to export that MP to XML. FIRST MAKE A BACKUP COPY OF THIS FILE IN CASE YOU MESS UP, then
open it for editing in Notepad, or your XML editor of choice.
All subscriptions in this MP are kept in the <Monitoring> <Rules> section. To identify which connector subscription RULE is causing the problem – you can search for the connector ID, from the event 11502 above. In my example – my connector
ID from this event is: b7a64deb-f7ff-440e-bc30-d08d340dfe8d.
So – I search the XML for that string – and find b7a64deb-f7ff-440e-bc30-d08d340dfe8d in the <WriteActions> section of a specific <Rule>:
<WriteActions>
<WriteAction ID="WA" TypeID="SystemCenter!Microsoft.SystemCenter.ConnectorFrameworkAlertWriteAction">
<ConnectorId>{b7a64deb-f7ff-440e-bc30-d08d340dfe8d}</ConnectorId>
</WriteAction>
</WriteActions>
Good – I have identified the problem. Now – I need to do two things:
Find the rule ID – to identify the display string associated with it… then delete that display string.
Delete the orphaned subscription rule.
So – I move up in the XML section of this rule – and I find my Rule ID. (here is mine:)
<Rule ID="ProductConnectorSubscription2850f8e3_afe7_4c36_84d2_ee258bd086eb"
I then search for the part above which I bolded in blue (yours will be different – search for your string)
What this finds – is the display string section of the XML – which maps this GUID ID to the common name that you gave the subscription. (here is mine:)
<DisplayString ElementID="ProductConnectorSubscription2850f8e3_afe7_4c36_84d2_ee258bd086eb">
<Name>Process All New Alerts</Name>
</DisplayString>
So – I need to DELETE this section from the XML…. just the section above, from my very specific <DisplayString ElementID="ProductConnectorSubscription2850f8e3<GUID> line, to the very next </DisplayString>.
Next – I need to delete the entire <rule> which contains the subscription we want to remove. Mine will be from:
<Rule ID="ProductConnectorSubscription<GUID> line to the very next </Rule>
When you are happy – you can import this XML MP back into the management group. It should import with no errors. If you get an error – you made a mistake when editing the XML. You can look on the RMS event log for the specific problem – there
will be a critical event there if it fails to import.
second part for this link
http://blogs.technet.com/b/kevinholman/archive/2009/09/10/removing-an-old-product-connector.aspx
Regards, Ibrahim Hamdy

SCOM 2012 R2 - Generate an alert when a specific event will not come in specific time range

Hello SCOM people,
I need to figure out what kind of monitor shall I choose for my monitoring of a specific event. I need to generate an alert when no specific event was generated by server.
Our company uses FIM 2010 with scheduled tasks, after each completed task is generated an event to application log. When sync is stuck or something is wrong no event will come to application log and I need to be warned. Tasks run each 30minutes and there
should not be an hour break between the previously created event.
I hope it makes sense :)
Thank you
Liibas

Hi Liibas,
That sounds like a good scenario for using Orchestrator and the SCOM Integration Pack, since you can have time-triggers, etc. to check for Alerts and then trigger a Runbook to email someone if the Alert does/does not appear.
Please remember to click “Mark as Answer” on the post that helps you.
AdinE MCSE, MCSA, MCITP, MCTS; (Specializing in System Center and Private Cloud)
2015 Microsoft MVP in System Center Cloud and Datacenter Management
LinkedIn: http://ca.linkedin.com/in/adinermie
Website: http://micloud.azurewebsites.net

I get this error when i deploy SCOM 2012 in my Lab server

When i install SCOM 2012 i get this error "
The version of SQL Server on this computer is either not supported or could not be validated"
I tried performing as per this article but still i have the same issue.
Below is the screen shot of the error.
I also tried the steps in the below article. The command completes success fully but still i get the below error.
http://social.technet.microsoft.com/wiki/contents/articles/13954.opsmgr-2012-the-version-of-sql-server-on-this-computer-is-either-not-supported-or-could-not-be-validated.aspx
Can some one please help on this.

Hi,
look at this two blog:
http://www.scom2k7.com/fix-scom-2012-install-error-the-version-of-sql-server-on-this-computer-is-either-not-supported-or-could-not-be-validated-because-of-an-issue-connecting-to-the-wmi-provider/
http://kevingreeneitblog.blogspot.com/2013/06/scom-2012-sp1-install-error-with-sql.html
Regards.
Ivan

Re: Delayed Write Failed with Toshiba StoreTV

Hi ,
I bought a Toshiba StoreTv 1,5 To , it works perfectly until some few days ago , when i trie to copy any big file (over 300 Mo) or many files of 50 Mo , it always give me the same error Delayed Write Failed : Windows was unable to save all the data for the file K:\ppp", ppp change but it often Mft,
the copy from my hdd to the computer wok great with no problem , its mean that my hdd is still alive?!!
i tried with chkdsk /F /R with no result !
I'm TOTALY desperate!!! Please, Anyone can help?? I invested a lot of time and money in this drive, i need to
find a solution! Thank you all for the help!
Message was edited by: ucf017

Hi
You mean you cannot copy the files from computer to HDD but you are able to copy the files from HDD to computer?
This means that you are still able to access the HDD and that HDD is working fine
Maybe its a matter of HDD file system?
The maximum possible size for a file on a FAT32 volume is 4 GB.
Larger files needs another formatting type like NTFS.
Please check this

How to configure windows services alerts in SCOM 2012 for all agent servers. For eg, Terminal Services, Netlogon, RPC etc..

Hi,
I need to configure different windows services alerts in SCOM 2012. Below are some of the windows services I need to monitor through SCOM.
Serivce: Windows Management Instrumentation
Service: Netlogon
Service: Remote Procedure Call (RPC)
Service: Server Service
Service: Terminal Services
Service: Windows Time
Service: Workstation
Service : WWW Publishing Service
Could some one please assist or share me the details, how to configure these services for windows agent servers.
Thanks..
Regards, Rajeev Parambil

Hi,
A certain set of services are monitored by default on all agents:
DNS Client
DHCP Client
RPC
Workstation
Server
For all the other services you could create a service monitor.
A nice blog series outlining this process can be found here: http://www.bictt.com/blogs/bictt.php/2011/03/16/scom-monitoring-a-service-part1
It's doing common things uncommonly well that brings succes. Check out my SCOM link blog:
SCOM link blog

SCOM 2012 Monitoring of windows based service

Hi,
Here my requiremt is to monitoring windows based service in scom 2012. The agent server is a windows based machine and I need to monitor these service, once they are in stopped state or in starting state. The server state is ahowing healthy.
Could someone pls guide me or share me the details for configure a wondows based service in scom for monitoring.
Below is the service i want to monitor through scom 2012
Thanks
Regards, Rajeev Parambil

Hi,
Please follow the steps below:
1. Under Authoring console, right click Monitors, then choose create a Monitor, select Unit monitor.
2. With the Create a Unit Monitor Wizard, we select Basic Service Monitor under Windows Services.
3. Choose the destinaton management pack to store the monitor. Click Next.
4. Specify the monitor name, and choose Monitor target class, such as Windows Operation System. Click Next.
5. Then select Service that you want to monitor, we can specify the computer name, and then find the service under the computer. Click Next.
6. Configure Health and Configure Alert.
Regards,
Yan Li
Regards, Yan Li

SCOM 2012 issue with disk space alert generation

we have installed SCOM 2012 newly , after that we have imported Windows Operating system MP's. However customization(Override) of alerts, everything is working fine except not receiving low
disk space alerts.
Is there any particular reason why we are not receiving low disk space alerts?

Hi,
Did you reach the threashold both for free % and free Mb? Both needs to be reached before you will get an alert.
For more information, please review the link below:
Logical Disk Free Space Monitor
http://blogs.technet.com/b/jonathanalmquist/archive/2009/04/04/logical-disk-free-space-monitor.aspx?CommentPosted=true
Operations Manager 2012: Monitoring Logical Disk Free Space
http://tmitegypt.wordpress.com/2012/10/22/operations-manager-2012-monitoring-logical-disk-free-space/
Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

EM 12C Integration with SCOM 2012

Hi
Has anyone integrated EM12C ( running on Solaris Sparc ) with MS SCOM 2012 ? Just looking for any hints / tips /issues ... etc ...
Any thoughts appreciated.
Regards
Rob

If the integration is along the lines of forwarding events from Enterprise Manager 12c to SCOM, then we are currently finalizing an event connector for SCOM 2012. It will enable the sending of events from Enterprise Manager to SCOM.
Regards,
Ana

SCOM 2012 R2 agent with SCOM 2007 R2?

Server: SCOM 2007 R2 (now); eventual upgrade to SCOM 2012 R2
OS to monitor: Windows Server 2012
I understand SCOM 2012 agents can be installed on Windows Server 2012 and report back to SCOM 2007 R2 MGs.
I haven't been able to find documentation for or against whether SCOM 2012 R2 agents can be installed on Windows Server 2012 and can report back to SCOM 2007 R2 MGs... Is this supported?
I can't find anything on any specific CU level that might be required on SCOM 2007 R2 to support this.

Hi,
I have not found any document talking about this. The only thing I can find is SCCM 2012 r2 agent can talk with SCCM 2012 SP1.
Juke Chou
TechNet Community Support

SCOM 2012 R2 error NTFS - Delayed Write Lost. Windows Event ID 11

Similar Messages

Maybe you are looking for