Skip to main content

Posts

Showing posts from September, 2005

clearing the mom agent cache

i'm frequently asked how this is done. i thought i'd post it here for anyone that needs it. basically, you have to stop the mom service to do this properly. that's step one. delete the contents of the cache folder, then spin up the mom service. here's the contents of the batch file i use for this (watch for word wrap): net stop mom del "c:\documents and settings\ all users\application d ata \microsoft\microsoft operations manager\%1\"*.* /s /q /f net start mom that's it.

mom agents and mcafee 8.0i

if you've been getting alerts in mom like this one: The response processor failed to execute a response. The response returned the error message: The remote procedure call failed. then you may be experiencing what other administrators have experienced when using mom agents w/ mcafee 8.0i. apparently the scriptscan module is causing this behavior to occur. there are two workarounds so far to handle this problem. the first one requires unregistering the scriptproxy.dll component of mcafee 8.0i. this probably isn't a very savory workaround. it gets the job done though. you can find references to this stuff at microsoft or at mcafee . the second one is to apply the patch 11 from mcafee. if you look through the readme, you'll see this item referenced in issue #2 A third-party application working with scripts can encounter an access violation error if it passes a NULL pointer to the Script Scan module (SCRIPTPROXY.DLL). The Script Scan module does not refer a NULL pointer. BZ2

looking for john hann's articles?

don't worry. i'll be posting his article contents here. of course, since i didn't write them, i'm not going to support them in any way, shape, or form. :) the only service i'm going to do for ol' john is correcting his grammar and spelling (less uppercase, of course). keep checking back.

sms security - script

okay... as a follow up to my previous post, this script will set the permissions of a defined group to have read/modify/delete rights over the subcollections of a parent collection. i used this to set the subcollections of the master collection i talked about in my previous post. anyway, watch out for potential word wrap. oh, btw, this blogger likes to strip spaces. going to have to make your own formatting. here it is. (watch for word wrap!)   ' Author: Marcus C. Oh ' Date: 9/16/2005 ' Purpose: Grants a group Read/Modify/Delete instance level ' permissions to the child collections of a specified ' parent collection. ' Credit: I shamelessly ripped the connection string from Michael ' Schultz and other variable/string logic from him. :) ' Permissions logic from the SMS Scripting Guide ' ' Added subroutine logic sent up by a blog reader. Now the ' script parses subcol

managing sms collection security

back in february, i posted about how useless sms security was for the enterprise. well, i have to repeal that comment now. yesterday, i received some information on how to setup sms to narrow down focus to a specific collection. this means you can separate administration for workstations to your client staff, servers to your server staff, domain controllers for your domain admins, etc. with this method, now you can setup secondary site servers and have that layer of useful granularity so that your site admins could have control of their own clients. enough prattling. on to the good stuff... in this example, we're going to setup security for client administrators. setup a collection of clients that are all workstations. grant the following rights only to the group or user (suggest using groups) on the class level to collections: advertise create delegate if the group/user has any other permissions to the class level, make sure that

useless mom trivia

question: in the Microsoft Windows Storage State Monitoring Script, there is a value called "MegaByteFreeSpaceThreshold". what is this value for? answer: absolutely nothing. in the script, the value for the parameter above gets set here: THRESHOLD_MB = GetParam("MegaByteFreeSpaceThreshold") here's the only section of the script that actually uses this value. notice that it's commented out: 'Commenting out Megabyte comparison alone 'If nMBFree < problemstate =" PROBLEMSTATE_RED" alertlevel =" ALERT_CRITICAL_ERROR"> by the way, i should mention that the mp guide actually states the MegaByteFreeSpaceThreshold as a valid parameter but don't discuss how it's valid to any detail. the lack of detail was what made me go snooping around. guess someone didn't do their homework.

very helpful mom articles...

remember my post and article about MOM Reporting? looks like microsoft finally published an article about this. :) here's some other helpful MOM articles: The Microsoft Operations Manager (MOM) 2005 agent does not download any rules or send any information back to the MOM 2005 Management Server How to install and manage Microsoft Operations Manager 2005 agent computers that are behind a firewall or in an untrusted domain MOM 2005 agent logs an "existing connection was forcibly closed by the remote host" event " Failed to send SMTP message" error when MOM 2005 tries to send SMTP e-mail notification response Responses on the Management Server may not immediately stop running or start running when you put a MOM agent in maintenance mode or when you remove a MOM agent from maintenance mode in MOM 2005