SCOM - Duplicate Signature ID usage detected for STT Signature ID

1. The HealthService starts the new rules in the configuration 
2. The STT module starts up attempts to register the signature id and 
    cannot since another version of the same rule is running. 
    The module then logs the event and unloads the workflow. 
3. The HealthService stops any old rules not in the configuration. 
4. The old version of the rule is stopped hence the duplicate signature id 
   is unregistered. 
5. The HealthService reloads any rules which failed during step 1. 
6. The STT module starts up normally (no issues registering the duplicate id) 

Unable to discover IIS 7 web site as ASP.Net Web Application

Symptom

Unable to discover IIS 7 web site as ASP.Net Web Application 

Cause

IIS Web application discovery rule 

Resolution

Override the "IIS 7.0 Web Application Discovery" rule. Set below values to True.

        Discover All directories as ASP.Net web application
        Discover Empty directories as ASP.Net Web Application
        Discover Empty directories as ASP.Net Web Service 

NetBIOS over TCP/IP

Symptom
===========

Changing the Primary Domain DNS name of this computer to "" failed on

Windows 7 when joining to domain

Cause
=========

W2K8R2/Win7 known issue when joining to domain

http://support.microsoft.com/kb/2018583/en-us

Workaround

================

Add Domain DNS Suffix in the TCP/IP Properties. 

a) Click Start , click Run , type ncpa.cpl , and then click OK .

b) In Network Connections , right-click Local Area Connection ,

and then click Properties .

c) Click Internet Protocol Version 4 (TCP/IPv4), and then click

Properties .

d) In the Internet Protocol Version 4 (TCP/IPv4) Properties dialog

box, click Advanced .

e) On the DNS tab, select these DNS Suffixes, click Add, type the

FQDN of the domain in the DNS Server Dialogbox, Click Add, and then click OK

three times

How to query Alert view ?

select * from dbo.AlertView 

Network location cannot be reached on joining domain

1. Open the Network and Sharing center
2. On the left side, click "Change Adapter Settings"
3. Right Click your connection and click on "Properties"
4. On the "Networking" tab, click Install
5. Install "Client for Microsoft Networks"
6. Reboot Server

How to open command prompt in WinPE

There are two different key combinations with which you can start command line (cmd) when in WinPE (Windows PreInstallation Environment).
In normal Windows Setup, when you just boot installation media from DVD or USB flash disk, you can press Shift-F10 to open command line.

In the case of System Center Configuration Manager (shortly SCCM, configmgr or even config manager) and its WinPE OSD installation or image capture, the boot image has a different key for that. You must press F8.

SCOM - Event id 14333 MSMQ error 'Public Queues registry key not found'

Problem

========

Getting event id 14333 MSMQ error 'Public Queues registry key not found.

Solution

========

we can resolve this issue by creating a dummy key under the registry

SOFTWARE\Microsoft\Microsoft Operations Manager\3.0\Modules\MSMQ Management Pack\HOCSPFE01.camden.local\Public Queues.

First we  created the dummy key in 2003 machine .

Alerts stopped coming.

SCOM : Getting an alert: hotfix is required for exchange 2010 management pack

Disable this monitor for all Servers and  target this alert only to Exchange servers. Follow the steps below to do that.

1.          Open SCOM Console and go to Authoring section.

2.          Select Monitors Node. Select the scope to “Health Service”.

3.          Search for “required SCOM hotfixes”

4.          Right click on “The required SCOM hotfixes for Exchange MP are not installed” monitor, Select Overrides –> Override this Monitor –> For all objects of class: Health Service.

5.          Check the box for Enabled and select False in Override Value column.  Optional: Select a custom management pack created by yourself on the bottom. Click OK to disable for monitor. 

6.          Right click on the same monitor again and select Overrides –> Override this Monitor –> For a Group..

7.          Type Exchange in the search box and select “Microsoft Exchange 2010 All Servers Computers” and click OK. 

8.          Monitor may be already enabled since we only selected Exchange servers only. You may change any alert priority or severity. Click OK.

SCOM 2012: Management Servers might not reconnect to SQL after a SQL outage

Symptoms
============

After an instance of Microsoft SQL Server that hosts the OperationsManager database goes offline, the System Center Management service of the Microsoft System Center 2012 Operations Manager Service Pack 1 (SP1) management server stops responding.

Solution

========

To resolve this issue, you can enable the automatic recovery feature in System Center 2012 Operations Manager SP1. By default, this automatic recovery feature is disabled. 

To enable the automatic recovery feature on the management server, follow these steps:

1.     Start Registry Editor.

2.     Locate and then click the following registry subkey:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\System Center\2010\Common\DAL

3.     Create the following two registry entries:

·         DALInitiateClearPool

Type: DWORD
Decimal value: 1

·         DALInitiateClearPoolSeconds

Type: DWORD
Decimal Value: 60

Note The DALInitiateClearPoolSeconds setting controls when the management server drops the current connection pool and when the management server tries to reestablish an SQL connection. We recommend that you set this setting to 60 seconds or more to avoid performance issues. 

4.     Restart the System Center Management service on the management server.

System Center 2012 Operations Manager: Recommended agent operating system fixes and updates

• Make sure that your agents, management servers, and gateways are running the latest update rollup (UR). As of the last revision of this article, the latest URs are as follows:
  • UR3 for System Center 2012 R2 (http://support.microsoft.com/kb/2965445) 
  • UR7 for System Center 2012 with Service Pack 1 (SP1) (http://support.microsoft.com/kb/2965420) 
  • UR3 for System Center 2012 without SP1 (http://support.microsoft.com/kb/2756127)
• All agents, management servers, and gateways should be running the latest version of the JET EDB hotfix for Windows.

  For Windows Server 2008 R2 and Windows 7

  The latest version of the JET EDB hotfix for Windows is included in Service Pack 1 (SP1).

  For Windows Server 2008 and Windows Vista

  Install the hotfix rollup that is mentioned in the following Microsoft Knowledge Base article:
  
  KB 2553708 - A hotfix rollup that improves Windows Vista and Windows Server 2008 compatibility with Advanced Format disks (http://support.microsoft.com/kb/2553708)

  For Windows Server 2003

  Install the hotfix that is mentioned in the following Microsoft Knowledge Base article:
  
  KB 981263 - Management servers or assigned agents unexpectedly appear as unavailable in the Operations Manager console in Windows Server 2003 or Windows Server 2008 (http://support.microsoft.com/kb/981263)
• There is an Avg. Disk Sec/Transfer issue that returns a very large value that is incorrect. For more information, see the following Microsoft Knowledge Base articles, as appropriate for your operating system:

  For Windows 2008 R2 or Windows 7

  KB 2470949 - The RegQueryValueEx function returns a very large incorrect value for the "Avg. Disk sec/Transfer" performance counter in Windows Server 2008 R2 or in Windows 7 (http://support.microsoft.com/kb/2470949)

  For Windows Server 2008 or Windows Vista

  KB 2495300 - Invalid "Avg. Disk sec/Transfer" value returned by the RegQueryValueEx function in Windows Server 2008 or in Windows Vista(http://support.microsoft.com/kb/2495300)
• You do not receive event notifications after you back up and then clear event logs in Windows Server 2008 or in Windows Vista. Therefore, OpsMgr is prevented from providing a warning about events after the event logs are cleared.

  For Windows 2008 or Windows Vista

  KB 2458331 - You cannot receive event notifications after you back up and then clear event logs in Windows Server 2008 or in Windows Vista (http://support.microsoft.com/kb/2458331

  (http://support.microsoft.com/kb/2458331)

  )Note This issue does not occur in Windows Server 2008 R2 or in Windows 7.
• The Win32_Service WMI class leaks memory in Windows Server 2008 R2 and in Windows 7:
  
  
  KB 981314 - The "Win32_Service" WMI class leaks memory in Windows Server 2008 R2 and in Windows 7 (http://support.microsoft.com/kb/981314)
  
  Note This issue is resolved in Windows Server 2008 R2 SP1 and Windows 7 SP1.
• A hotfix is available that improves the stability of the Windows Management Instrumentation repository in Windows Server 2003:
  
  
  KB 933061 - A hotfix is available that improves the stability of the Windows Management Instrumentation repository in Windows Server 2003 (http://support.microsoft.com/kb/933061)
• WSH binaries are overwritten by Windows File Protection after you install Windows Script 5.7 on a computer that is running Windows Server 2003 or Windows XP:
  
  
  KB 955360 - WSH binaries are overwritten by Windows File Protection after you install Windows Script 5.7 on a computer that is running Windows Server 2003 or Windows XP (http://support.microsoft.com/kb/955360)
  For Operations Manager, this may be the cause of high CPU use.
• A managed application has a high number of thread handles and event handles in the Microsoft .NET Framework 2.0:
  
  
  KB 968760 - A managed application has a high number of thread handles and of event handles in the Microsoft .NET Framework 2.0 (http://support.microsoft.com/kb/968760

  (http://support.microsoft.com/kb/968760)

  )
  For Operations Manager, this causes a large number of handles.
• The CPU usage of an application or a service that uses MSXML 6.0 to handle XML requests reaches 100 percent in Windows Server 2008, Windows Vista, Windows XP Service Pack 3, or other systems that have MSXML 6.0 installed:
  
  KB 968967 - The CPU usage of an application or a service that uses MSXML 6.0 to handle XML requests reaches 100% in Windows Server 2008, Windows Vista, Windows XP Service Pack 3, or other systems that have MSXML 6.0 installed (http://support.microsoft.com/kb/968967)
  
  For Operations Manager, this behavior causes high CPU usage for the Monitoringhost.exe process.
• New AFD connections fail when software that uses TDI drivers is installed on a Windows Server 2008 system or Windows Vista SP1 system that is running on a computer that has multiple processors:
  
  
  KB 961775 - New AFD connections fail when software that uses TDI drivers is installed on a Windows Server 2008 or Windows Vista SP1 system that is running on a computer that has multiple processors (http://support.microsoft.com/kb/961775)
• FIX: You receive a "Provider Load Failure" error message or the Wmiprvse.exe process stops responding when you use a SQL Server WMI provider to obtain information about SQL Server 2005, SQL Server 2008, or SQL Server 2008 R2 services:
  
  
  KB 980142 - FIX: "Provider Load Failure" error message or the Wmiprvse.exe process stops responding when you use a SQL Server WMI provider to obtain information about SQL Server 2012, SQL Server 2005, SQL Server 2008, or SQL Server 2008 R2 services (http://support.microsoft.com/kb/980142)
• Extended Protection for Authentication: This feature enhances the protection and handling of credentials when you authenticate network connections by using Integrated Windows Authentication (IWA). In Operations Manager, there may be some errors doing a client push. In this case, a network trace would contain the following:
  Server Error, (91) Invalid user identifier
  For more information, see the following article in the Microsoft Knowledge Base:
  KB 968389 - Extended Protection for Authentication (http://support.microsoft.com/kb/968389)
• B982168 - Description of the rollup update for the .NET Framework 3.5 Service Pack 1 on Windows XP and on Windows Server 2003 (976765, 980773 and 976769): June 8, 2010 (http://support.microsoft.com/kb/982168)
• KB 982167 - Description of the rollup update for the .NET Framework 3.5 Service Pack 1 and the .NET Framework 2.0 Service Pack 2 on Windows XP and on Windows Server 2003 (976765 and 980773): June 8, 2010 http://support.microsoft.com/kb/982167)
• KB 968936 - A rollup hotfix package for Windows Server 2008 Failover Clustering WMI provider (http://support.microsoft.com/kb/968936)
• There is a memory leak in IIS when you stress test our IIS discovery. The fix for this problem is important for those who use OpsMgr together with the IIS MP, and even more important when the APM feature is used in OpsMgr 2012. For more information, see the following article in the Microsoft Knowledge Base:
  
  
  KB 2618982 - FIX: Memory leak in Rhs.exe after you configure the IIS 7.5 W3SVC service in a Windows Server 2008 R2 SP1 failover cluster (http://support.microsoft.com/kb/2618982)
• KB 2547244 - The WMI service and the WMI providers stop responding when you use WMI performance classes to monitor performance on a computer that is running Windows 7 or Windows Server 2008 R2 (http://support.microsoft.com/kb/2547244
  (http://support.microsoft.com/kb/2547244)
  )
• KB 2505348 - High CPU usage or a lengthy startup process occurs during WMI repository verification when a large WMI repository exists in Windows 7 or in Windows Server 2008 R2 (http://support.microsoft.com/kb/2505348
  (http://support.microsoft.com/kb/2505348)
  )
• KB 2617858 - Unexpectedly slow startup or logon process in Windows Server 2008 R2 or in Windows 7 (http://support.microsoft.com/kb/2617858)
• KB 2692929 - "0x80041001" error when the Win32_Environment WMI class is queried by multiple requestors in Windows 7 or in Windows Server 2008 R2 (http://support.microsoft.com/kb/2692929)
• KB 960718 - FIX: The host process of the application crashes when the CounterExists method or the Exists method is called on a multiprocessor computer in IIS 6.0 (http://support.microsoft.com/kb/960718)
• KB 973275 - Only the first character appears for some strings in the event messages when you query the DFS Replication event log on a computer that is running Windows Server 2008 (http://support.microsoft.com/kb/973275)
• KB 932370 - The number of physical hyperthreading-enabled processors or the number of physical multicore processors is incorrectly reported in Windows Server 2003 (http://support.microsoft.com/kb/932370)
• KB 2812950 - The MOMPerfSnapshotHelper.exe process crashes or experiences high CPU usage in Windows Server 2008 SP2 (http://support.microsoft.com/kb/2812950
  (http://support.microsoft.com/kb/2812950)
  )
• KB 2484832 - FIX: ArgumentOutOfRangeException exception when you resize or scroll a window that has a DataGrid control in a .NET Framework 4.0-based WPF application (http://support.microsoft.com/kb/2484832)
• The Windows Management Framework 3.0 download is available from the Microsoft Download Center:
  
  
  Windows Management Framework 3.0 (http://www.microsoft.com/en-us/download/details.aspx?id=34595)
• KB 2159286 - FIX: The Remote Registry service crashes when an application tries to retrieve performance counter data from an instance of SQL Server on another computer (http://support.microsoft.com/kb/2159286)
• KB 2494158 - Managed service account authentication fails after its password is changed in Windows 7 or in Windows Server 2008 R2(http://support.microsoft.com/kb/2494158)
• KB 2734909 - Memory leak or handle leak occurs in the Perflib.lib component on a computer that is running Windows Server 2008 R2 or Windows 7 (http://support.microsoft.com/kb/2734909)
• KB 2163398 - A memory leak occurs in the Rhs.exe process when you configure IIS 7.0 World Wide Web Publishing Service in a Windows Server 2008 failover cluster (http://support.microsoft.com/kb/2163398)
• KB 2622802- The Group Policy Client service crashes on a terminal server that is running Windows Server 2008 or Windows Server 2008 R2 when multiple users connect to the server at the same time (http://support.microsoft.com/kb/2622802
  (http://support.microsoft.com/kb/2622802)
  )
• KB 979458 - The values of logical disk performance counters are set to "0" for all dynamic disk volumes on a computer that is running Windows Vista SP2 or Windows Server 2008 SP2 (http://support.microsoft.com/kb/979458)
• KB 2878378 - OpsMgr 2012 or OpsMgr 2007 R2 generates a "Heartbeat Failure" message and then goes into a grayed-out state in Windows Server 2008 R2 SP1 (http://support.microsoft.com/kb/2878378)
• KB 2506143 - Description of Windows Management Framework 3.0 for Windows 7 SP1 and Windows Server 2008 R2 SP1 (http://support.microsoft.com/kb/2506143)
• KB 2975719 - August 2014 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 (http://support.microsoft.com/kb/2975719)