Wednesday, January 30, 2008

Exam 70-400

In order to keep my other Microsoft certifications with company, I decided to take exam 70-400 to obtain a Microsoft Certified Technology Specialist (MCTS): System Center Operations Manager 2007, Configuration certification and passed with a 960 score!

The exam adequately covered skills that are essential in configuring Ops Manager.

Monday, January 21, 2008

Secure Vantage Team Blog

It was brought to my attention that Secure Vantage Technologies has started a team blog. Read it at http://securevantage.spaces.live.com/

I have heard several rumblings of late about a Secure Vantage VIP club!? Possibly the team will use the blog to enlighten us...

System Center Operations Manager 2007 Service Pack 1 Training Videos

The first wave of OpsMgr 2007 Sp1 training videos are now live on TechNet.

There are 9 different OpsMgr 2007 Sp1
videos available on the link below:

http://technet.microsoft.com/en-us/opsmgr/bb986763.aspx

Thursday, January 3, 2008

Install ACS Forwarder on RMS or Management Server

Below is a quick and dirty procedure to install and enable ACS Forwarding on a System Center Operations Manager RMS or Management Server.

1. Copy adtagent.exe to C:\windows\system32

2. Run command adtagent -install

3. Edit HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AdtAgent\Parameters

    a. Ensure/Add DWORD key EventlogLoggingLevel is set to 2

    b. Add DWORD key LocalConfig and set to 2

    c. Add DWORD key NoCache and set to 2

    d. Add Multi-String Value key AdtServers and enter name of the collector to

    forward to.

4. In Services CP, set Operations Manager Audit Forwarding Service to Automatic and start.

5. Verify by running SELECT * FROM dbo.dtMachine on the OperationsManagerAC database and finding the management server name. Could also run SELECT * FROM dbo.dtMachine WHERE Description = 'DOMAINNAMEHERE\MACHINENAMEHERE$'

Thursday, December 13, 2007

J.C. Hornbeck describes how to backup, restore AND RECOVER a lost RMS key. Enjoy!

---From http://blogs.technet.com/smsandmom/

OpsMgr 2007: What if I lose my RMS encryption key??

So let's say I have a functional OpsMgr 2007 infrastructure in place and then for whatever reason have to reinstall/replace the Root Management Server (RMS), but I didn't backup my RMS encryption key.  What are the exact ramifications of this and what would I need to do to correct it? 

Prior to Service Pack 1 (SP1), if something happened to your RMS and it had to be replaced, and you didn't backup your key, you were basically out of luck.  Your only recourse was to rebuild from scratch - not a pretty picture.  That's why we always told people to make sure they backed up their key as soon as they installed:

Backing up your RMS encryption key: http://technet.microsoft.com/en-us/library/bb309563.aspx.

Now with SP1, we have a new CREATE_NEWKEY command line switch that can make recovering from a situation like this potentially much easier. We also made running the encryption key backup process a mandatory process of setup, just so you'll have a friendly reminder.

So let's take a look at a couple scenario's:

1.  The Root Management Server is replaced or reinstalled and the key is not backed up or the password to the key is lost. There are no other Management Servers to promote.

Solution: Install a new Management Server (the RMS replacement) and be sure the computer name is the same name as the previous Root Management Server that is being replaced.  Setup will detect that the machine name is same as the Root Management Server in the database so it will recreate a new key and register the licenses.

2.  The Root Management Server is replaced or reinstalled and the key is not backed up or the password to the key is lost. There is at least one Management Server to promote to Root Management Server.

Solution: On the Management Server that will become the new Root Management Server, run MOM.msi with the CREATE_NEWKEY switch (msiexec.exe /i <Path to MOM.msi> CREATE_NEWKEY=1).  Configure the account for SDK/Config services (this account should have permission to the database, the SDK service account should be added to the SDK_users role, and the config service account should be added to the configsvc_users role).  Promote the Management Server to Root Management Server.

3.  The registry on the Root Management Server got corrupted, thus the encryption key is lost.
Solution: Run MOM.msi with special switch (msiexec.exe /i <Path to MOM.msi> CREATE_NEWKEY=1)

So does this mean you don't have to worry about backing up your keys?  No, you should always backup your keys and keep them in a safe place as doing so will potentially save you a lot of trouble down the road, but now if something happens there's possibly a way to recover without having to rebuild.

Tuesday, November 6, 2007

Ops Mgr 2007 SP1 RC

Be aware before moving forward with SP1 RC that there is no rollback path from RC -> RTM

Monday, November 5, 2007

Operations Manager 2007 Service Pack 1

Source: Stefan Stranger's Weblog

Release Candidate details:
· This will be publicly available release. Customers can download the Service Pack 1 RC from Microsoft Connect. Signup for this is public and available at http://connect.microsoft.com/systemcenter
· This release will be fully supported. Support options include:
o Microsoft Customer Support Services (CSS) – you can use your standard support options to get support on this edition
o Newsgroups – there will be a dedicated SP1 newsgroup
o Hotfixes requests that are accepted will be incorporated into the final RTM version
· This release is fully upgradable to the final RTM version of the Service Pack.
What's New in Operations Manager 2007 Service Pack 1
This topic describes some of the improvements and major changes in functionality that are included in Operations Manager 2007 Service Pack 1 (SP1). Operations Manager 2007 SP1 is available in two ways. First, it is offered as a standalone executable file that you use to upgrade an existing Microsoft System Center Operations Manager 2007 installation. Second, it has been "slipstreamed" into the Operations Manager 2007 installation media, which means that you can install Operations Manager 2007 from scratch and the final installed version will be Operations Manager 2007 SP1. Operations Manager 2007 SP1 is available for both x86-based and x64-based computers.
New Features
The new features that are in Operations Manager 2007 SP1 are:
· Improved performance and reliability when working with alerts, overrides, and searches.
· In all Alert views, performance has been increased through better fetching and yields alert row selection that is three times quicker. Actions and reports are fetched in the background, which further improves performance. Alert knowledge that is displayed in the Alert Details pane can be shown or hidden according to the user's preference.
· Operations Manager 2007 advanced search has been improved by enabling the ability to search across monitors and rules by their overrides.
· Support for the discovery and monitoring of both SNMP v1 and SNMP v2 network devices. Users can select which SNMP Community Version to search for in the Discovery Wizard.
· Support for exporting Operations Manager 2007 diagrams to Microsoft Visio VDX file format. Note that the Visio button is located on the toolbar when in a diagram view. Diagram layouts can now be saved and will be remembered when the diagram view is selected again.
· Support for copying and pasting (CTRL+C and CTRL+V) from the Alert details pane.
Setup and Recovery
The following are improvements in setup and recovery:
· To make backup and recovery easier, setup in Operations Manager 2007 SP1 starts the Secure Storage Backup Wizard at the end of setup, by default, to back up the RMS encryption keys. This is the same command-line tool used in the original version of Operations Manager 2007, but with an easier-to-use wizard interface. The wizard is actually started by using the command-line version of the tool when no parameters are passed to the tool or it is started from Windows Explorer. The Secure Storage Backup tool is located on the installation media in the Support Tools directory. The Secure Storage Backup Wizard can be started according to the user's preference.
· To make the recovery of a clustered RMS easier, Operations Manager 2007 SP1 enables the repromotion of the RMS cluster to the RMS role after it is fixed. This addresses the situation where a clustered RMS has failed and another management server in the management group has been promoted into the RMS role.
User Interface and Experience
The following are improvements in user interface and experience:
· To make the creation of new management packs easier, Operations Manager 2007 SP1 introduces the ability to copy views from any existing management pack to an unsealed management pack. This is done in the Monitoring view. For example, if you have created a management pack for SQL Server overrides and want to use one of the SQL Server management pack views in the SQL Server overrides management pack, you would simply select the desired view, right-click to copy it, and then paste it into the target management pack folder.
· In all Alert views in the Monitoring space and in the Web console, Operations Manager 2007 SP1 ensures that the Repeat Count value is incremented correctly.
· After you have created an override for any management pack object, you can look at the summary of overrides for the object type in the Overrides Summary box. Operations Manager 2007 SP1 ensures that the description of the override target is complete. For example, if you create an override for Logical Disk Free Space for the C:\ of Server1, the summary will display 'server1/c:'
Core Product
The following are improvements in the core Operations Manager 2007 product:
· SP1 ensures that when agents are uninstalled from a computer in the Administration space\Device Management container\Agent Managed node of the Operations Console, that they are also removed from the computer views in the Monitoring space.
· Scripts can now be used for diagnostic tasks.
· View names, data and, display strings in the Operations Console that have been collected from computers running different language versions of Microsoft Windows operating systems are displayed correctly.
Reporting
The following are improvements to reporting:
· When you are in a report, you can now choose to publish the report by selecting Publish from the File menu. This will allow you to publish reports to multiple locations, such as Microsoft Windows SharePoint Services Web sites.
Web Console
The following are improvements in the Operations Manager 2007 Web console:
· The Operations Manager Web console provides access to performance data. Users can then select specific counters to graph. In Operations Manager 2007 SP1, it is now possible to construct a filter for the desired performance counters to ease searching and navigation. This ability is available when a performance view is selected and displays in the Performance legend pane. The search options available are All items, Items in the Chart, Items not in the Chart, and Items by text search.
· The Web console has been further improved so that the Favorite Reports container is now available in My Workspace.
Audit Collection Services (ACS)
The following are improvements for ACS:
· New discoveries and views have been added. These features detect and indicate which agents and servers are ACS-forwarding enabled.
· There are more monitors and alert generating rules to track the health state of the ACS collectors. For example, Operations Manager 2007 SP1 includes the ability to watch the DB Queue % full level against default thresholds, such as the back-off threshold or disconnect threshold.
· The ACS forwarder feature is now supported on the Management and Gateway Server roles. The ACS Forwarder is disabled by default. When enabled, it will allow the inclusion of security auditing data for these server roles.
· When using ACS, one of the most common tasks is to enable forwarding on ACS agents. In Operations Manager 2007 SP1, an Operations Manager Command Shell script can be used to enable forwarding for entire computer groups, thereby greatly easing the deployment and administration of ACS.
Agentless Exception Monitoring (AEM)
AEM now provides an improved appearance and functionality of AEM reports.