SCOM 2012 R2 Server Hardening Question

Hi All,
With reference to http://blogs.technet.com/b/operationsmgr/archive/2009/06/15/new-security-hardening-guide-for-operations-manager-2007-r2-and-windows-server-2008.aspx
I would like to know is there any update for SCOM 2012 R2 on Windows Server 2012 R2? What would be the process and where can I get the SCW file 2012 R2 platform?
Thanks & Regards, Kedar

I cannot find the update for this SCW definition file for 2012 R2 either. Anyway, you could edit the policy file on you own based on needs.
Juke Chou
TechNet Community Support

Similar Messages

SCOM 2012 DataWarehouse Crash effect to SCOM 2012 Manager Server

If the SCOM 2012 Database Warehouse crash,what is effect to scom 2012 manager server?
thanks

Reporting will not work, data will not synchronize from the operational database, data will not be inserted into the data warehouse (it will be dropped on the management servers), you'll see a bunch of errors and alerts regarding reporting and writing/synchronizing
data to the database, dashboards will not work, just to name a few.
Operationally, SCOM will continue to function, generate alerts, and provide SDK (console) access without the data warehouse.
Jonathan Almquist | SCOMskills, LLC (http://scomskills.com)
Thank you very much!By the way
Do you mean it does not affect the normal monitoring function of the management server?
another question：
At last ，The lost data will be synchronized to the data warehouse from management database?

Where is unix/linux agent located on scom 2012 r2 server

hey there,
my boss tried to install scom unix agent manually, and asked me where the unix agent located on scom 2012 r2 server.
Is it "GetOSVersion.sh" the one he looks for? If it is not, then wherw it is located
I'm a Windows guy and have no idea what that .sh file is. Please help~~

The "GetOSVersion.sh" is a script that is first executed when you try to push an agent out to
a unix/linux server. It then tells SCOM what version of the agent it needs to download and install.
As for the location:
Management Server: \System Center Operations Manager\Server\AgentManagement\UnixAgents\DownloadedKits
Gateway Server: \System Center Operations Manager\Gateway\AgentManagement\UnixAgents\DownloadedKits
I suggest to push the agent out vs manual install as you then don't need to worry about manually signing certificates/installing agent. Its saves considerable amount of
time and your then managing your agents from a central location.
Oh and as Steve mentioned make sure you download the Unix Management pack bundle (MPB) and not from the online catalog. This is due to the MPB is what actually contains the agents where as the catalog is just the management packs.
Cheers,
Martin
Blog:
http://sustaslog.wordpress.com
LinkedIn:
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

Difference between Scom 2007 and Scom 2012 Gateway server setup.

Hi All,
Greetings!!
I would like to know the differences for gateway server setup in Scom 2007 and 2012 versions..
Are there any changes in the data collection or in the configuration? and also the prerequisites for it.
Please let me know these info..
Regards,
Gokul

There is no great different in settng up gateway server in SCOM 2007 R2 and SCOM 2012. As summary, it requires
1.Request certificates.
2. Import those certificates into the target computers by using the MOMCertImport.exe tool.
3. Distribute the Microsoft.EnterpriseManagement.GatewayApprovalTool.exe to the management server.
4. Run the Microsoft.EnterpriseManagement.GatewayApprovalTool.exe tool to initiate communication between the management server and the gateway
5. Install the gateway server.
However, the prerequisites has different between SCOM 2007 R2 and SCOM 2012
SCOM 2007 R2 gateway server support folloiwng OS
Windows Server 2003 Standard Edition with Service Pack 1 (SP1)
Windows Server 2003 Standard Edition with Service Pack 2 (SP2)
Windows Server 2003 Standard x64 Edition with SP1 or SP2
Windows Server 2003 Enterprise Edition with SP1
Windows Server 2003 Enterprise Edition with SP2
Windows Server 2003 Enterprise x64 Edition with SP1 or SP2
Windows Server 2003 R2 Standard Edition with SP1 or SP2
Windows Server 2003 R2 Standard x64 Edition with SP1 or SP2
Windows Server 2003 R2 Enterprise Edition with SP1 or SP2
Windows Server 2003 R2 Enterprise x64 Edition with SP1 or SP2
Windows Server 2008 Standard 32-Bit with SP1 or SP2
The 64-bit edition of Windows Server 2008 Standard with SP1 or SP2
Windows Server 2008 Enterprise 32-Bit with SP1 or SP2
The 64-bit edition of Windows Server 2008 Enterprise with SP1 or SP2
Windows Server 2008 Datacenter 32-Bit with SP1 or SP2
The 64-bit edition of Windows Server 2008 Datacenter with SP1 or SP2
Windows Server 2008 R2
Windows Server 2008 R2 with SP1
SCOM 2007 R2 gateway server
CPU :2.8 GHz or faster
Memory: 2 GB of RAM or more
available Space: 20 GB of available hard disk space
NET Framework 2.0
Microsoft Core XML Services (MSXML) 6.0
SCOM 2012 Gateway server
Disk space: %SYSTEMDRIVE% requires at least 1024 MB free hard disk space.
Server Operating System: must be Windows Server 2008 R2 SP1, Windows Server 2012, Windows Server 2012 Core Installation or Windows Server® 2012 R2.
Processor Architecture: must be x64.
Windows PowerShell version: Windows PowerShell version 2.0, or Windows PowerShell version 3.0.
Microsoft Core XML Services (MSXML) version: Microsoft Core XML Services 6.0 is required for the management server.
.NET Framework 4 is required if the Gateway server manages UNIX/Linux agents or network devices.
Roger

Limitations of SCOM 2012 Singel server environment

Hi All,
We are monitoring Hyper-v(25) and Lync server in SCOM 2012, Lync servers(12) are deployed in different domain and monitoring via GW. Rest of the components like Management server, DB, DW and SSRS are hosted in a single server.
Currently we are monitoring around 38 agents in our environment, I just want to know what is the limitation of agent count?
As per MS recommedation, we can monitor maximum 3000 agents per Management server. But for the below configuration , how many agents we can monitor?
Server Hardware Configuration is below..
Intel Xenon(R) CPU
24 GB RAM & 20 GB Paging file
Note - Currently Server is consuming 80% of physical memory.
Thanks in advance.
Regards
Karthick M

As you have MS, OpsDB, OpsDWH, SSRS - all in one Server, your memory consumption is higher, for monitoring 38 agents you can go with
0-500 agents configuration which can obtained by sizing helper tool for SCOM
(Total: 2) (1) management server managing up to 500 agents, plus (1) management server for HA, managing up to 5 SDK users total
(Total: 2) Operations Database Server, Operations Data Warehouse Server, Web Console Server & SQL Server Reporting Services Server - 1 DB (+1 for HA)
DB Size
Number of Days for Data Retention
7
Number of Server Computers
500
Number of Network Devices
0
Number of APM-enabled Computers
0
Total Size (MB)
8208.97
Total Size (GB)
8.02
Total Size (GB) with 50% Buffer
12.02
DW Size
Number of Days for Data Retention
365
Number of Server Computers
500
Number of Network Devices
0
Number of APM-enabled Computers
0
Total Size (MB)
331598.55
Total Size (GB)
323.83
Total Size (GB) with 10% Buffer
356.21
Please refer SCOM sizing helper tool
http://blogs.technet.com/b/momteam/archive/2012/04/02/operations-manager-2012-sizing-helper-tool.aspx
Hope this helps
Faizan

SCOM 2012 R2 UR4 upgrade question - where exactly is the UNIX/Linux agent?

I am practicing the UR4 on a test |SCOM environment (my first upgrade) and our UNIX Admins have requested the "UNIX/Linux agent" so they can create packages to upgrade the UNIX/Linux agents when the time comes.
I have downloaded all the UR4 updates/software. Where exactly is the agent for UNIX/Linux machines?
I opened the "Update Rollup 4 for Microsoft System Center 2012 R2 - Operations Manager Agent (KB2992020)" folder and I saw the following agents:
amd64-agent.msp
i386-agent.msp
Are one of these the UNIX/Linux agents?
I know I'm overlooking something here since this is my first time. Any assistance is greatly appreciated.
Thanks

Hello,
After deploy UR4: http://support.microsoft.com/kb/2992020
Installation instructions for Operations Manager - UNIX and Linux Monitoring (Management Pack Update)
To install the updated monitoring packs and agents for UNIX and Linux operating systems, follow these steps:
Apply Update Rollup 4 to your System Center 2012 R2 Operations Manager environment.
Download the
updated management packs
(http://www.microsoft.com/downloads/details.aspx?FamilyID=9f947878-6bf6-48a1-adb1-3cc4c2e5d4af)
for System Center 2012 R2.
Install the management pack update package to extract the management pack files.
Import the updated management pack for each version of Linux or UNIX that you are monitoring in your environment.
Upgrade each agent to the latest version by using either the Update-SCXAgent Windows PowerShell cmdlet or the UNIX/Linux Agent Upgrade Wizard in the Administration pane of the Operations Console.
Regards,
Regards, Mazen Ahmed

Unable to install 2nd SCOM 2012 Management Server - Services Fails and fails trying to get data reader writer accounts?

2<sup>nd </sup>Management Server Setup fails at "Data Warehouse Configuration".
error log:
[12:33:20]:           Always:                :Current Action: StartServices
[12:33:20]:           Always:                :Starting OM Services.
[12:33:20]:           Debug: :StartService: attempting to start service OMSDK
[12:33:50]:           Error:     :StartService: Could not get service status.: Threw Exception.Type: System.InvalidOperationException, Exception Error Code: 0x80131509, Exception.Message:
Cannot start service OMSDK on computer '.'.
[12:33:50]:           Error:     :StackTrace:   at System.ServiceProcess.ServiceController.Start(String[] args)
   at Microsoft.SystemCenter.Essentials.SetupFramework.ServiceControlFunctions.StartService(String serviceName)
[12:33:50]:           Error:     :Inner Exception.Type: System.ComponentModel.Win32Exception, Exception Error Code: 0x80131509, Exception.Message: The service did not respond to the start
or control request in a timely fashion
[12:33:50]:           Error:     :InnerException.StackTrace:
[12:34:51]:           Error:     :StartService: Could not get service status.: Threw Exception.Type: System.InvalidOperationException, Exception Error Code: 0x80131509, Exception.Message:
Cannot start service OMSDK on computer '.'.
[12:34:51]:           Error:     :StackTrace:   at System.ServiceProcess.ServiceController.Start(String[] args)
   at Microsoft.SystemCenter.Essentials.SetupFramework.ServiceControlFunctions.StartService(String serviceName)
[12:34:51]:           Error:     :Inner Exception.Type: System.ComponentModel.Win32Exception, Exception Error Code: 0x80131509, Exception.Message: The service did not respond to the start
or control request in a timely fashion
[12:34:51]:           Error:     :InnerException.StackTrace:
[12:35:55]:           Error:     :StartService: Could not get service status.: Threw Exception.Type: System.InvalidOperationException, Exception Error Code: 0x80131509, Exception.Message:
Cannot start service OMSDK on computer '.'.
[12:35:55]:           Error:     :StackTrace:   at System.ServiceProcess.ServiceController.Start(String[] args)
   at Microsoft.SystemCenter.Essentials.SetupFramework.ServiceControlFunctions.StartService(String serviceName)
[12:35:55]:           Error:     :Inner Exception.Type: System.ComponentModel.Win32Exception, Exception Error Code: 0x80131509, Exception.Message: The service did not respond to the start
or control request in a timely fashion
[12:35:55]:           Error:     :InnerException.StackTrace:
[12:36:32]:           Error:     :StartService: Could not get service status.: Threw Exception.Type: System.InvalidOperationException, Exception Error Code: 0x80131509, Exception.Message:
Cannot start service OMSDK on computer '.'.
[12:36:32]:           Error:     :StackTrace:   at System.ServiceProcess.ServiceController.Start(String[] args)
   at Microsoft.SystemCenter.Essentials.SetupFramework.ServiceControlFunctions.StartService(String serviceName)
[12:36:32]:           Error:     :Inner Exception.Type: System.ComponentModel.Win32Exception, Exception Error Code: 0x80131509, Exception.Message: The service did not respond to the start
or control request in a timely fashion
[12:36:32]:           Error:     :InnerException.StackTrace:
[12:37:36]:           Error:     :StartService: Could not get service status.: Threw Exception.Type: System.InvalidOperationException, Exception Error Code: 0x80131509, Exception.Message:
Cannot start service OMSDK on computer '.'.
[12:37:36]:           Error:     :StackTrace:   at System.ServiceProcess.ServiceController.Start(String[] args)
   at Microsoft.SystemCenter.Essentials.SetupFramework.ServiceControlFunctions.StartService(String serviceName)
[12:37:36]:           Error:     :Inner Exception.Type: System.ComponentModel.Win32Exception, Exception Error Code: 0x80131509, Exception.Message: The service did not respond to
the start or control request in a timely fashion
[12:37:36]:           Error:     :InnerException.StackTrace:
[12:38:12]:           Error:     :StartService: Could not get service status.: Threw Exception.Type: System.InvalidOperationException, Exception Error Code: 0x80131509, Exception.Message:
Cannot start service OMSDK on computer '.'.
[12:38:12]:           Error:     :StackTrace:   at System.ServiceProcess.ServiceController.Start(String[] args)
   at Microsoft.SystemCenter.Essentials.SetupFramework.ServiceControlFunctions.StartService(String serviceName)
[12:38:12]:           Error:     :Inner Exception.Type: System.ComponentModel.Win32Exception, Exception Error Code: 0x80131509, Exception.Message: The service did not respond to
the start or control request in a timely fashion
[12:38:12]:           Error:     :InnerException.StackTrace:
[12:41:19]:           Error:     :StartService: Unable to start the service OMSDK after 3 minutes.
[12:41:19]:           Warn:    :Warning:OMSDK service could not be started
[12:41:19]:           Debug: :StartService: attempting to start service healthservice
[12:41:19]:           Debug: :StartService: Able to start the service healthservice after 0 minutes.
[12:41:19]:           Debug: :StartService: attempting to start service cshost
[12:41:19]:           Debug: :StartService: Able to start the service cshost after 0 minutes.
[12:41:19]:           Info:      :StartServices completed.
[12:41:19]:           Always:                :Current Action: GetDataReaderWriterAccounts
[12:41:22]:           Error:     :GetDataReaderWriterAccounts failed with the following exception: : Threw Exception.Type: System.Reflection.TargetInvocationException, Exception
Error Code: 0x80131604, Exception.Message: Exception has been thrown by the target of an invocation.
[12:41:22]:           Error:     :StackTrace:   at System.RuntimeMethodHandle._InvokeMethodFast(IRuntimeMethodInfo method, Object target, Object[] arguments, SignatureStruct&
sig, MethodAttributes methodAttributes, RuntimeType typeOwner)
   at System.RuntimeMethodHandle.InvokeMethodFast(IRuntimeMethodInfo method, Object target, Object[] arguments, Signature sig, MethodAttributes methodAttributes, RuntimeType typeOwner)
   at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture, Boolean skipVisibilityChecks)
   at System.Delegate.DynamicInvokeImpl(Object[] args)
   at Microsoft.EnterpriseManagement.SetupFramework.ActionEngine.Action.Run(String displayStringNamespace, ProgressData progressData, Func`2 progressDelegate)
   at Microsoft.EnterpriseManagement.SetupFramework.ActionEngine.InstallStep.Run(String displayStringNamespace, ProgressData progressData, Func`2 progressDelegate)
[12:41:22]:           Error:     :Inner Exception.Type: Microsoft.EnterpriseManagement.Common.ServiceNotRunningException, Exception Error Code: 0x80131604, Exception.Message: The Data
Access service is either not running or not yet initialized. Check the event log for more information.
[12:41:22]:           Error:     :InnerException.StackTrace:   at Microsoft.EnterpriseManagement.Common.Internal.ExceptionHandlers.HandleChannelExceptions(Exception ex)
   at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.CreateEndpoint[T](EnterpriseManagementConnectionSettings connectionSettings, SdkChannelObject`1 channelObjectDispatcherService)
   at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.ConstructEnterpriseManagementGroupInternal[T,P](EnterpriseManagementConnectionSettings connectionSettings, ClientDataAccessCore clientCallback)
   at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.RetrieveEnterpriseManagementGroupInternal[T,P](EnterpriseManagementConnectionSettings connectionSettings, ClientDataAccessCore callbackDispatcherService)
   at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.Connect[T,P](EnterpriseManagementConnectionSettings connectionSettings, ClientDataAccessCore callbackDispatcherService)
   at Microsoft.EnterpriseManagement.ManagementGroup.InternalInitialize(EnterpriseManagementConnectionSettings connectionSettings, ManagementGroupInternal internals)
   at Microsoft.EnterpriseManagement.OperationsManager.Setup.ReportingComponent.GetDWWriterAccountFromManagementGroup(String managementServerName, String& userName, String& userDomain)
   at Microsoft.SystemCenter.Essentials.SetupFramework.InstallItemsDelegates.OMDataWarehouseProcessor.GetDataReaderWriterAccounts()
[12:41:22]:           Error:     :Inner Exception.Type: System.ServiceModel.EndpointNotFoundException, Exception Error Code: 0x80131604, Exception.Message: Could not connect to net.tcp://localhost:5724/DispatcherService.
The connection attempt lasted for a time span of 00:00:00.9950000. TCP error code 10061: No connection could be made because the target machine actively refused it 127.0.0.1:5724.
[12:41:22]:           Error:     :InnerException.StackTrace:
Server stack trace:
   at System.ServiceModel.Channels.SocketConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
   at System.ServiceModel.Channels.BufferedConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
   at System.ServiceModel.Channels.ConnectionPoolHelper.EstablishConnection(TimeSpan timeout)
   at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.OnOpen(TimeSpan timeout)
   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannel.OnOpen(TimeSpan timeout)
   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannel.CallOnceManager.CallOnce(TimeSpan timeout, CallOnceManager cascade)
   at System.ServiceModel.Channels.ServiceChannel.EnsureOpened(TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
   at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]:
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at Microsoft.EnterpriseManagement.Common.Internal.IDispatcherService.Connect(SdkClientConnectionOptions connectionOptions)
   at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.Initialize(EnterpriseManagementConnectionSettings connectionSettings, SdkChannelObject`1 channelObjectDispatcherService)
   at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.CreateEndpoint[T](EnterpriseManagementConnectionSettings connectionSettings, SdkChannelObject`1 channelObjectDispatcherService)
[12:41:22]:           Error:     :Inner Exception.Type: System.Net.Sockets.SocketException, Exception Error Code: 0x80131604, Exception.Message: No connection could be made because the
target machine actively refused it 127.0.0.1:5724
[12:41:22]:           Error:     :InnerException.StackTrace:   at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
   at System.Net.Sockets.Socket.Connect(EndPoint remoteEP)
   at System.ServiceModel.Channels.SocketConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
[12:41:22]:           Error:     :FATAL ACTION: GetDataReaderWriterAccounts
[12:41:22]:           Error:     :FATAL ACTION: DWInstallActionsPostProcessor
[12:41:22]:           Error:     :ProcessInstalls: Running the PostProcessDelegate returned false.
[12:41:22]:           Always:                :SetErrorType: Setting VitalFailure. currentInstallItem: Data Warehouse Configuration
[12:41:22]:           Error:     :ProcessInstalls: Running the PostProcessDelegate for OMDATAWAREHOUSE failed.... This is a fatal item. Setting rollback.
[12:41:22]:           Info:      :SetProgressScreen: FinishMinorStep.
[12:41:22]:           Always:                :!***** Installing: POSTINSTALL ***
[12:41:22]:           Info:      :ProcessInstalls: Rollback is set and we are not doing an uninstall so we will stop processing installs
[12:41:22]:           Always:                :****************************************************************
[12:41:22]:           Always:                :****Starting*RollBack*******************************************
[12:41:22]:           Always:                :****************************************************************

Hi,
Pls ensure there is no firewall in between DB, DW and MS or required ports are open and you have permission on DW for the account being used for installation.
http://technet.microsoft.com/en-us/library/hh298609.aspx
http://technet.microsoft.com/library/hh205990.aspx   supported configuration
Thanks,
Varun

Event id 31551 in scom 2012 server

Dear Team,
We are getting continuously the following error event id 31551 on our SCOM 2012 SP1 server as below.
Please let me know how to resolve this.
Log Name: Operations Manager
Source: Health Service Modules
Date: 02/01/2015 13:52:42
Event ID: 31551
Task Category: Data Warehouse
Level: Error
Keywords: Classic
User: N/A
Computer: LOXXXXXXX.XXXX
Description:
Failed to store data in the Data Warehouse. The operation will be retried.
Exception 'SqlException': Cannot open database "OperationsManagerDW" requested by the login. The login failed.
Login failed for user 'WREN\SVC-SC-OM12-DW'.
One or more workflows were affected by this.
Workflow name: Microsoft.SystemCenter.DataWarehouse.CollectEntityHealthStateChange
Instance name: LONSCOM001.wren.co.uk
Instance ID: {0F89A4D1-B7D5-8658-29A8-E0CAFAA602CF}
Management group: Brit Insurance
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Health Service Modules" />
<EventID Qualifiers="49152">31551</EventID>
<Level>2</Level>
<Task>3</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-01-02T13:52:42.000000000Z" />
<EventRecordID>933223</EventRecordID>
<Channel>Operations Manager</Channel>
<Computer>LOXXXXXXX.XXXX</Computer>
<Security />
</System>
<EventData>
<Data>Brit Insurance</Data>
<Data>Microsoft.SystemCenter.DataWarehouse.CollectEntityHealthStateChange</Data>
<Data>LONSCOM001.wren.co.uk</Data>
<Data>{0F89A4D1-B7D5-8658-29A8-E0CAFAA602CF}</Data>
<Data>SqlException</Data>
<Data>Cannot open database "OperationsManagerDW" requested by the login. The login failed.
Login failed for user 'WREN\SVC-SC-OM12-DW'.</Data>
</EventData>
</Event>
Saravana Raja

Hi,
Based on the error message, the login failed for user 'WREN\SVC-SC-OM12-DW', have you changed its password? Please make sure the account can access the SQL server where your data warehouse installed.
Or we may reset the account. And the article below should be helpful for changing password for data warehouse account:
Changing Password on SCOM Data Warehouse run as accounts
http://blogs.technet.com/b/randymonteleone/archive/2010/03/12/changing-password-on-scom-data-warehouse-run-as-accounts.aspx
Regards,
Yan Li
Please remember to mark the replies as answers if they help and unmark them if they provide no help.

Error while installing SCOM 2012 reporting component.

Hello Experts,
I had to recently tired installing SCOM 2012 reporting server role on one of the SSRS instances and got the below error.
The SQL team created a dedicated SSRS instance for SCOM(SSRS_SCOM2012) on a SQL instance which hostes other SSRS instances for other applications like SCCM 2007, FEP2010 and FIM2010. I understand the SSRS is are individual components and should not have
dependency with other SSRS instance on the same SQL instance.
A few weeks back i successfully installed the reporting service on another SSRS isntance on a SQL isntance which hosts no other SSRS instances on it for creating a dev SCOM for our enviornment.
The SSRS configuration has been done correctly with service accounts, execution account, database created etc configured for production.
No SSL nor any proxy set for the SQL Report server.
One option i am left with now is running resetSRS.exe to reset the SSRS. But before doing this i would like to take advice from you all as i need to run this on production which hosts other prod SSRS instance on the same SQL instance as well :(
Please Advice.
Regards,
Prajul Nambiar

Thanks Gautam for the quick response.
Answers to your questions are as below.
Q1:Is the SQL version same as of what you are using for the Database engine services as well ?
A1: Yes, its SQL 2008 R2.
Q2: Are the SQL URL's Working as expected ?
A2: Yes, both the Report URL and Report Manager URL are working even though there is no content in it as
SCOM Reporting component is yet to be installed successfully.
Q3: Is
the Scale of deployment joined ?
A3 : No, its Native.
Q4 : Also you can Run resetSRS.exe
So it will just reset the Reporting and will not affect any other component.
A4 : For say my SQL cluster name is ABC which is on a
4 node cluster and we have created SSRS(SSRS_SCOM2012) on one of the node(Server1) of that 4 node cluster. SCOM installer discovers SSRS instance name as Server1\SSRS_SCOM2012. so do it have the run the command as "resetsrs.exe Server1\SSRS_SCOM2012"
or "resetsrs.exe ABC"?

SCOM 2012 Gateway fails to communicate - Certificate Problem?

Hello SCOM Guru's
I wonder if someone out there may be able to help.
I have two (non-trusted) domains - both hosted in
Azure. See graphic below (a picture paints a thousand words!)
Just to put some context around the diagram - I have a two domains, the left-hand side contains the SCOM MS and the right-hand side is a non-trusted domain hosting the SCOM GW. The idea is that I want computers (agents) from the right-hand side domain to
be able to talk back to the SCOM MS vai the SCOM GW.
In a nutshell I have followed some great 'how to' guides - for instance:
http://blogs.technet.com/b/pfesweplat/archive/2012/10/15/step-by-step-walkthrough-installing-an-operations-manager-2012-gateway.aspx
After hours of messing around I still cannot get my Gateway Server to talk successfully back to the SCOM Management Server in the other domain. I have deployed my own Certificate Authority and followed documentation to put the relevant Certs on both
servers. I have checked all Certs and they report 'The certificate is OK'.
Also I can confirm that the MOMCertImport tool was run on both the SCOM MS and SCOM GW server (I did the MS 1st and GW 2nd) - both returned a 'Success' cmd prompt. I have also rebooted both servers - to restart all relevant SCOM Services.
On the Azure VMs I have allowed TCP 5723 on both servers. Additionally, the SCOM MS can resolve the SCOM GW server in the other domain via a HOSTS file entry (and vice-versa). I have tested connectivity using
telnet <FQDN> 5723 (both ends seem to connect). No internal Windows Firewalls are enabled on any servers.
The cluster of errors reported by the
SCOM Gateway server are (first to last):
20057: Failed to initialize security context for target MSOMHSvc/SCOM-01.DOMAIN.local The error returned is 0x80090303(The specified target is unknown or unreachable). This error can apply to either the Kerberos or the SChannel package.
21001: The OpsMgr Connector could not connect to MSOMHSvc/SCOM-01.DOMAIN.local because mutual authentication failed. Verify the SPN is properly registered on the server and that, if the server is in a separate domain, there is a full-trust
relationship between the two domains
20071: The OpsMgr Connector connected to SCOM-01.DOMAIN.local, but the connection was closed immediately without authentication taking place. The most likely cause of this error is a failure to authenticate either this agent or the
server . Check the event log on the server and on the agent for events which indicate a failure to authenticate.
The same events repeat every 15 mins in the Operations Manager event log - and thus the SCOM Gateway remains 'Not Monitored'.
I don't get any relevant Events logged from the SCOM MS side - I guess cos it's not even got that far / authenticated?
I'm sure this is a Certificate type of problem but I'm really not sure where I go from here - any suggestions?
Many thanks
Darren

Hi,
Check this post:
Solving the Gateway 20071 event
http://michelkamp.wordpress.com/2012/01/05/solving-the-gateway-20071-event/
and this: Event ID 21001 and 20057 on SCOM agents - duplicate SPN:
http://blogs.technet.com/b/kevinholman/archive/2011/08/08/opsmgr-2012-what-should-the-spn-s-look-like.aspx
Similar answer has been provided by DKTOA Here:
https://social.technet.microsoft.com/forums/systemcenter/en-US/05019b70-73a3-4a37-993b-66b607f3c222/scom-2012-gateway-server-isses-20057-21001-20071-ids
Did it solve your problem?
Regards
Jure
Jure Labrovic | Blog

SCOM 2012 - SQL Connection strings

Hey SCOM gurus
Wonder if you can help?
I need to change my SCOM 2012 Management Server 'SQL Connection strings' to use a load balancer dns name of 'sql-listener'. Can anyone suggest how this might be done? (basically we now have a SQL 2014 Cluster in the background).
thanks
Karen

Hello,
You must change the database name in the registry, more information : https://technet.microsoft.com/en-us/library/hh278848.aspx?f=255&MSPPError=-2147217396

SCOM 2012 R2 - Implementation Pre-requisites.

Hi All,
I would like to know if we need to keep in mind any pre-requisites when we implement SCOM 2012 R2. So my question is specific is , if I would install SCOM DB in a VLAN A and operations manager in VLAN B than are there any specific pre-requisites that
I need to keep in mind?
Rgs,

No. You need to verify firewall ports and communication between Vlans
http://expertslab.wordpress.com/2014/04/09/scom-2012-firewall-ports/
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical | Twitter:
Mai Ali

SCOM 2012 Integration with Solarwinds

Hi Experts,
Currently we are using SCOM 2012 for Server, Application, Network, etc monitoring. Also, we are using Solarwinds Network Performance Monitor(NPM) for network monitoring and Network Configuration Manager(NCM) to perform configuration backup of network
devices as SCOM 2012 does not have this capability.
We are planning to have single consolidated view in SCOM 2012.
Please let us know, how can we integrate Solarwinds NPM and NCM with SCOM 2012.
Any help will be appreciated.
Kumaresan Lakshmanan

It depends. To be honest I never used it myself. If this MP is NOT based on OpsMgr Network Device class(es) - it should work on OpsMgr 2012. It seems like this MP queries a Solarwind product with a connector - this probably should work for 2012 as well.
http://OpsMgr.ru/

MonitoringHost.exe high CPU utilization SCOM 2012 R2

Hi
im currently having issues with one of my servers that the monitoringhost.exe is using alot of CPU resources and I havn't really found anything on SCOM 2012 R2 "Server 2012 R2, alot of the issues were related to SCOM 2007 "Server 2008
R2", are they the same?
any advice would be greatly appreciated.
Thanks

Hi,
Please install the latest update for your SCOM enviroment.
In addition, if only one of your server encounter this issue, please try to flush health service state and caches for that agent.
Regards,
Yan Li
Regards, Yan Li

Confirm SCOM 2012 R2 get updated to RU3

we need to confirm our SCOM 2012 R2 Server Components got updated with the latest ver. of RU3 or not
we ran some cmdlets and got these results:
is these files enough or not????
PS C:\Windows\system32> Get-ItemProperty -Path "c:\Program Files\Microsoft System Center 2012 R2\Operations Manager\Server\*.dll" | select -ExpandProperty VersionInfo | where {$_.FileVersion -eq "7.1.10226.1037"} | Format-List FileName,
FileVersion
FileName : C:\Program Files\Microsoft System Center 2012 R2\Operations Manager\Server\csdal.dll
FileVersion : 7.1.10226.1037
FileName : C:\Program Files\Microsoft System Center 2012 R2\Operations Manager\Server\Microsoft.EnterpriseManagement.DataWarehouse.DataAccess.dll
FileVersion : 7.1.10226.1037
FileName : C:\Program Files\Microsoft System Center 2012 R2\Operations Manager\Server\Microsoft.EnterpriseManagement.RuntimeService.dll
FileVersion : 7.1.10226.1037
FileName : C:\Program Files\Microsoft System Center 2012 R2\Operations Manager\Server\NetworkDiscoveryModules.dll
FileVersion : 7.1.10226.1037
PS C:\Windows\system32> Get-ItemProperty -Path "c:\Program Files\Microsoft System Center 2012 R2\Operations Manager\WebConsole\WebHost\bin\*.dll" | select -ExpandProperty VersionInfo | where {$_.FileVersion -eq "7.1.10226.1037"} |
Format-List FileName, FileVersion
FileName : C:\Program Files\Microsoft System Center 2012 R2\Operations Manager\WebConsole\WebHost\bin\Microsoft.EnterpriseManagement.Management.DataProviders.dll
FileVersion : 7.1.10226.1037
PS C:\Windows\system32> Get-ItemProperty -Path "c:\Program Files\Microsoft System Center 2012 R2\Operations Manager\Console\*.dll" | select -ExpandProperty VersionInfo | where {$_.FileVersion -eq "7.1.10226.1037"} | Format-List FileName,
FileVersion
FileName : C:\Program Files\Microsoft System Center 2012 R2\Operations Manager\Console\Microsoft.EnterpriseManagement.Management.DataProviders.dll
FileVersion : 7.1.10226.1037
FileName : C:\Program Files\Microsoft System Center 2012 R2\Operations Manager\Console\Microsoft.EnterpriseManagement.Monitoring.Components.dll
FileVersion : 7.1.10226.1037
FileName : C:\Program Files\Microsoft System Center 2012 R2\Operations Manager\Console\Microsoft.EnterpriseManagement.Presentation.Controls.dll
FileVersion : 7.1.10226.1037
FileName : C:\Program Files\Microsoft System Center 2012 R2\Operations Manager\Console\Microsoft.EnterpriseManagement.UI.ConsoleFramework.dll
FileVersion : 7.1.10226.1037
FileName : C:\Program Files\Microsoft System Center 2012 R2\Operations Manager\Console\Microsoft.Mom.Common.dll
FileVersion : 7.1.10226.1037
FileName : C:\Program Files\Microsoft System Center 2012 R2\Operations Manager\Console\Microsoft.MOM.UI.Components.dll
FileVersion : 7.1.10226.1037
Ahmed

You should check the following files
Microsoft.SystemCenter.2007.mp 423KB 7.1.10226.1037
AgentConfigManager.dll 131KB 7.1.10204.0
HealthService.dll 3.16MB 7.1.10204.0
HealthServiceMessages.dll 1.34MB 7.1.10204.0
MOMModules.dll 2.49MB 7.1.10204.0
Microsoft.EnterpriseManagement.Modules.PowerShell.dll 94.6MB 7.1.10204.0
Microsoft.Mom.DatabaseQueryModules.dll 218KB 7.5.3079.126
Microsoft.SystemCenter.Visualization.Library.mpb 124KB 7.1.10226.1037
update_rollup_mom_db.sql Not applicable Not applicable
MOMConnector.dll 686KB 7.1.10204.0
Microsoft.SystemCenter.Advisor.mpb 344KB 7.1.10226.1037
Microsoft.SystemCenter.CrossPlatform.ClientActions.dll 32.6KB 7.5.1024.0
Microsoft.SystemCenter.CrossPlatform.ClientLibrary.ClientTasks.dll 50.6KB 7.5.1024.0
Microsoft.SystemCenter.CrossPlatform.ClientLibrary.Common.dll 54.1KB 7.5.1024.0
Microsoft.SystemCenter.CrossPlatform.ClientLibrary.CredentialManagement.dll 51.6KB 7.5.1024.0
Microsoft.SystemCenter.CrossPlatform.ClientLibrary.MPAbstractions.dll 83.1KB 7.5.1024.0
Microsoft.SystemCenter.CrossPlatform.ClientLibrary.WorkflowActivities.dll 44.6KB 7.5.1024.0
Microsoft.SystemCenter.CrossPlatform.ClientLibrary.Workflows.dll 66.6KB 7.5.1024.0
Microsoft.SystemCenter.CrossPlatform.UI.CL.Administration.dll 1.19MB 7.5.1024.0
Microsoft.SystemCenter.CrossPlatform.UI.CL.Common.dll 130KB 7.5.1024.0
Microsoft.SystemCenter.CrossPlatform.UI.OM.Core.dll 23.6KB 7.5.1024.0
Microsoft.SystemCenter.CrossPlatform.UI.OM.Integration.dll 184KB 7.5.1024.0
MOMAgentInstaller.exe 360KB 7.1.10226.1037
Microsoft.EnterpriseManagement.Presentation.Controls.dll (Silverlight) 170MB 7.1.10226.1037
Microsoft.SystemCenter.Visualization.Component.Library.mpb 284KB 7.1.10226.1037
Microsoft.Mom.DatabaseQueryModules.dll 218KB 7.5.3079.126
Roger

SCOM 2012 R2 Server Hardening Question

Similar Messages

Maybe you are looking for