Home » Microsoft Operations Manager 2005 (Page 2)

Category Archives: Microsoft Operations Manager 2005


Welcome to contoso.se! My name is Anders Bengtsson and this is my blog about Azure infrastructure and system management. I am a senior engineer in the FastTrack for Azure team, part of Azure Engineering, at Microsoft.  Contoso.se has two main purposes, first as a platform to share information with the community and the second as a notebook for myself.

Everything you read here is my own personal opinion and any code is provided "AS-IS" with no warranties.

Anders Bengtsson

MVP awarded 2007,2008,2009,2010

My Books
Service Manager Unleashed
Service Manager Unleashed
Orchestrator Unleashed
Orchestrator 2012 Unleashed
Inside the Microsoft Operations Management Suite

Script: Monitor Process

This is a script that will monitor if a process is running, and if it is running, for how long it has been been running. Default settings is monitoring notepad.exe and will generate a local event if it has been running for more than 15 minutes. You can implement this script with timed commands/execute a script

Download the script here

Links During July

  • If you want to monitor SNMP v1 devices you can call to Microsoft and ask for the KB939364 fix. They will give it to you for free.
  • Collection 3386: Implementing Microsoft System Center Operations Manager 2007, here
  • Systems Center Operations Manager 2007 Documentation seems to have been updated, here
  • Remote Operations Manager 2007 Deployment Guide, here
  • OpsMgr 2007 MOM 2005 Backward Compatibility MP Update, here
  • A updated version of Microsoft Windows Base Operating System MOM 2005 MP (7/11/2007), here
  • A updated version of the Microsoft Web Sites and Services Management Pack for MOM 2005, here
  • New MOM KB article, “You receive an error message when you try to deploy an agent update to a managed computer in Microsoft Operations Manager 2005“, here
  • Keep an Eye on Your Servers with Operations Manager 2007, a article by Pete Zerger, read it here
  • Disaster Recovery: OpsMgr 2007 Root Management Server on a Cluster, guide, read it here
  • New KB “System Center Operations Manager 2007 cannot find some network devices by using the network device discovery process”, here
  • New KB “You cannot deploy an agent by using the Discovery and Installation Wizard in System Center Operations Manager 2007”, here

Script: Check Account Status

This is two simple script to check if a account is enable or disable. If enable, a local event will be created. In this example I check if the Guest account is enable, if it is a local event will be generated. You can then pickup that event with a event rule.

strUser = "LDAP://cn=Guest,cn=Users,dc=contoso,dc=internal"Set objUser = GetObject _
If objUser.AccountDisabled = FALSE Then
 Set objShell = Wscript.CreateObject("Wscript.Shell")
 objShell.LogEvent EVENT_WARNING, _
        "The account " & strUser & " is no longer disable. Please investigate."
End If

If you want to check all accounts in a OU you can use the this script. It will check a OU named Service_accounts
set objOU = GetObject _
ObjOU.Filter= Array("user")
For Each objUser in ObjOU
 strUser = "LDAP://" + objUser.distinguishedName
 Set objUser = GetObject _
 If objUser.AccountDisabled = FALSE Then
 Set objShell = Wscript.CreateObject("Wscript.Shell")
 objShell.LogEvent EVENT_WARNING, _
        "The account " & strUser & " is no longer disable. Please investigate."
End If

Links during June

  • System Center Operations Manager 2007 Technical Walkthrough, here
  • The Dell Management Pack for Microsoft System Center Operations Manager integrates Dell PowerEdge server alerts into Ops Manager. Download here
  • System Center Trial Software, here
  • System Center Operations Manager TechCenter, here
  • System Center Operations Manager 2007 Virtual Labs, introduction and advanced
  • System Center Operations Manager 2007 Traning Videos, here and for download/offline viewing here
  • New version of Microsoft Web Sites and Services Management Pack for MOM 2005, download here



Management Pack for Exchange Server 2007 for MOM 2005

This version of the Exchange Server Management Pack monitors Microsoft Exchange Server 2007. The Exchange Server 2007 Management Pack includes rules and scripts to monitor and report on performance, availability, and reliability of all Exchange 2007 server roles including Mailbox, Client Access, Hub Transport, Edge Transport and Unified Messaging. The Exchange Server 2007 Management Pack for MOM 2005 topics explain how to monitor and maintain messaging resources.

File Name: Exchange2007ManagementPackForMOM2005.msi
Version: 08.01.0021.001
Date Published: 6/14/2007

Download here


New version of SQL MP for MOM 2005

Includes support for SQL 2005 SP2; improved product knowledge; improved support for localized versions (Version : 9.0.2047.0000).

Download here

Windows Base Operating System Management Pack for MOM 2005

A new version of the Windows base OS MP is available, version 05.0.3500.0010, date published 5/29/2007.

The Microsoft Windows Servers Base Operating System management pack 05.0.3500.0010 introduces monitoring of additional components available within the Microsoft Windows Server 2003 R2 operating system including Identity Management for UNIX(IDMU), Hardware Management events,NTFS file system monitoring, File Server Resource Monitoring (FSRM), Shadow Copies for Shared Folders (SCSF) Monitoring and more (See Management Pack Monitoring Scenarios with the Management Pack Guide for more information).

Download here

Links during May

  • Operations Manager 2007 Security Guide, link
  • Windows Vista Client Monitoring Management Pack for Operations Manager 2007, link
  • How to upgrade 180 days eval to full version, link
  • HP management packs for Ops Mgr 2007, link and link
  • How to Edit Company Knowledge in OpsMgr 2007, link
  • Debugging Failures when Deploying Agent from the Operations Console in OpsMgr 2007, link
  • Operations Manager 2007 Performance and Scalability Whitepaper, link
  • New version of Ops Mgr 2007 product documentation, link

Links during April

Some intresting links during April

  • System Center Operations Manager 2007 Pricing and Licensing, finally some information, here
  • A new version of Exchange Server Management Pack Configuration Wizard that will work with Ops Mgr and Exchange 2007, here
  • HP StorageWorks Management Pack for SCOM 2007, download here
  • What’s New? Why Upgrade to System Center Operations Manager 2007 (white paper)
  • System Center Operations Manager 2007 Overview (white paper)
  • How to Backup and Restore Encryption Keys in Operations Manager 2007 (link)
  • A great Ops Mgr command shell site (link)
  • System Center Essentials Support Forum (here)
  • New Terminal Services Management Pack (here)

Linux, Syslog and System Center Operations Manager 2007

We all know that there is no pure Microsoft environment. There is for example often a old Linux box, and that box need to be monitored as well as everything else. If you answer “no, it dont”, why dont you shut down that box immediate? In this post I will show how to get syslog messages from a Linux machine (Red Hat Fedora 6) into your Operations Manager 2007.

First you will have to modify your Linux to forward messages to your Operations Manager machine, and then create a rule in your Operations Manager server.

You will have to modify your Linux to forward messages to your Operations Manager machine. That you will do in the /etc/syslog.conf file. At this screendump you can see that I have added one line that will send all messages (*.*) to my Operations Manager server ( After added that line, and save changes (:wq!), you will have to restart the syslog service, that you can do with “service syslog restart”. There are a lot of settings that you can do in the syslog.conf to only forward some category of messages.

After that the Linux side is finish. As you can see with the “netstat –an” your Operations Manager server is not listening to the standard port (UDP port 514) by default. Your server will not do that until you have an active rule (not disabled) that use SysLogDS as data source. To create a rule to collect your syslog messages,

  1. From the Start Menu, select the SCOM Operations Console
  2. In the Navigation pane (left), Click Authoring
  3. In the Authoring pane, right click Rules and choose “Create a new rule…” from the context menu
  4. On the Select a Rule Type screen, select Alert Generating Rules\Event Based\Syslog (Alert), click Next
  5. On the General screen, input a suitable rule name and a description, click select and choose your management server in the select a target type window (select the machine that will recive syslog messages), click OK, back on the General screen, click Next
  6. On the Build Event Expression screen, create an expression, unfortunately I have not figur how to build a good expression. Input a expression and then delete it later. Click Next
  7. On the Configure Alerts screen, input an alert name, priority and severity. In the Alert description box, input as this screenshot. If you dont do this there will be no alert description in the console. With this config you will get a alert description like below. Click Create.
    Alert in Console
  8. In the Rules pane, right click your new rule and choose “Properties” from the context menu
  9. On the rule properties screen, click the Configuration tab
  10. On the rule properties screen and the configuration tab, click Edit under Data Sources
  11. On the expression screen, select the expression and click Delete. Click OK
  12. On the rule properties screen, click OK

That should do it!

Now we dont have a filter on the Ops Mgr side, but you can filter on the Linux/syslog side, until you have figur out how to do a good filter on the rule. You read about creating filter in this KB from Microsoft. It is about syslog in MOM 2000/2005 but the filter part is the same.