2018年12月17日 星期一

Error ID:33510, DPM Could not find a suitable disk storage with enough free space for data source in SCDPM 2016

And it’s OK, because System Center 2016 Data Protection Manager running on Windows Server 2016, only supports  the new DPM Modern Storage feature which uses ReFs formatted volumes instead of disks.  The volume(s) must not reside on a Windows Dynamic Disks, just a basic disk which should be GPT if the disk is 2TB or larger.  Add the volume(s) to the DPM storage pool, then protection can succeed.
For more info about adding storage to DPM 2016, click here.

2018年12月10日 星期一

Azure Backup,All Backup job Fail - DPM could not execute a WMI query(33507)


Cause
======
The issue is caused by an incompatibility between Trend Micro and the DPM filter driver.

Action Plan
===========
When the antivirus was disabled MABS was able to create the Protection Group. But because running a server without an antivirus solution is not an option you can resolve the issue by adding the following registry key on any MABS server running with Trend Micro.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TmFilter\Parameters
Add DWORD (32 bit)
BypassDPMfilter, vaule of 1

2018年11月12日 星期一

VMware Workstation and Hyper-V are not compatible. Remove the Hyper-V role from the system before running VMware Workstation.

 VMware Workstation and Hyper-V are not compatible. Remove the Hyper-V role from the system before running VMware Workstation.

This is because the Hyper-V role is installed and this conflicts with VMware Workstation. To disable



Hyper-V from starting the following command can be used:

bcdedit /set hypervisorlaunchtype off

A reboot of of the Windows OS is necessary.



To enable the Hyper-V role again use the following command:

bcdedit /set hypervisorlaunchtype auto

A reboot of of the Windows OS is necessary.

2018年10月5日 星期五

OpsMgr Management Configuration process fails with timeout exception

Log Name:      Operations Manager 
Source:        OpsMgr Management Configuration 
Event ID:      29181 
Level:         Error 
User:          N/A 
Computer:      server.domain.com 
Description: 
OpsMgr Management Configuration Service failed to execute ‘DeltaSynchronization’ engine work item due to the following exception 
Microsoft.EnterpriseManagement.ManagementConfiguration.DataAccessLayer.DataAccessOperationTimeoutException: Exception of type ‘Microsoft.EnterpriseManagement.ManagementConfiguration.DataAccessLayer.DataAccessOperationTimeoutException’ was thrown. 
  at Microsoft.EnterpriseManagement.ManagementConfiguration.DataAccessLayer.DataAccessOperation.ExecuteSynchronously(Int32 timeoutSeconds, WaitHandle stopWaitHandle) 
  at Microsoft.EnterpriseManagement.ManagementConfiguration.SqlConfigurationStore.ConfigurationStore.ExecuteOperationSynchronously(IDataAccessConnectedOperation operation, String operationName) 
  at Microsoft.EnterpriseManagement.ManagementConfiguration.SqlConfigurationStore.ConfigurationStore.WriteConfigurationDelta(IConfigurationDeltaDataSet dataSet) 
  at Microsoft.EnterpriseManagement.ManagementConfiguration.Engine.DeltaSynchronizationWorkItem.TransferData(String watermark) 
  at Microsoft.EnterpriseManagement.ManagementConfiguration.Engine.DeltaSynchronizationWorkItem.ExecuteSharedWorkItem() 
  at Microsoft.EnterpriseManagement.ManagementConfiguration.Interop.SharedWorkItem.ExecuteWorkItem() 
  at Microsoft.EnterpriseManagement.ManagementConfiguration.Interop.ConfigServiceEngineWorkItem.Execute()

Solution
========
We can increase the timeout using the following method on all management servers:

Make a backup of "x:\Program Files\System Center 2012\Operations Manager\Server\ConfigService.Config"
Increase the timeout values in ConfigService.config for the following:
<OperationTimeout DefaultTimeoutSeconds="30"> to 300 seconds
<Operation Name="GetEntityChangeDeltaList" TimeoutSeconds="180" /> to 300 seconds.
Restart the configuration service

2018年9月20日 星期四

SCDPM - An unexpected error occurred while the job was running. (ID 104 Details: Unknown error (0x80041024) (0x80041024))

Analysis
=========

For SharePoint farm, recovery points will continue getting created with the databases that are consistent. To backup inconsistent databases, run a consistency check on the farm. (ID 3106)
An unexpected error occurred while the job was running. (ID 104 Details: Unknown error (0x80041024) (0x80041024))

Solution
========
To resolve this issue open the settings of the affected virtual machine in the Hyper-V Console. Under Management go to Integration Services uncheck 
Backup (volume shadow copy). After that, return to Data Protection Manager and perform a consistency check.

2018年9月16日 星期日

SCVMM 2016,Error (2912) An internal error has occurred trying to contact an agent when creating new VM


To solve this problem you could change the BITS port SCVMM is using during transfers:
1. On your VMM Server open the Registry
2. Browse to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft System Center Virtual Machine Manager Server\Settings
3. Locate BITSTcpPort which should have a value of decimal 443. Change this to some port unused in your environment. (e.g. 8800)
4. Restart Virtual Machine Manager Service so that the change takes effect.

2018年8月14日 星期二

SCOM 2016 – Linux Agent Deployment “Signed certificate verification operation was not successful”


If you are facing this scenario and your UNIX/Linux server has a different hostname then what is in DNS you have two choices. Either you change the hostname on your server, which may or may not be an option, or you create a new certificate with the FQDN hostname and private key without touching the server name at all using the scxsslconfig tool. I decided to perform the latter. Just open the a shell and run…

/opt/microsoft/scx/bin/tools/scxsslconfig –h Linuxname –d domainname.com -f –v

After executing the command, make sure to restart the agent.

/opt/microsoft/scx/bin/tools/scxadmin –restart

After the service is restarted head back to your SCOM console, and attempt to manage the Linux server again.

 

2018年7月8日 星期日

SCOM - How to List which server is the active resource pool member


use OperationsManager
select
BaseManagedEntity.DisplayName
,cs.agent.AGentGuid
,cs.WorkFlowExecutionLocationAgent.AgentRowId
,cs.workflowexecutionlocation.WorkflowExecutionLocationRowId
,cs.workflowexecutionlocation.DisplayName
from cs.WorkFlowExecutionLocationAgent
inner join cs.workflowexecutionlocation
ON cs.WorkFlowExecutionLocationAgent.WorkFlowExecutionLocationAgentRowId = cs.workflowexecutionlocation.WorkflowExecutionLocationRowId
inner join CS.agent
ON CS.agent.AgentRowId=cs.WorkFlowExecutionLocationAgent.AgentRowId
inner join BaseManagedEntity
ON BaseManagedEntity.BaseManagedEntityId = CS.agent.AGentGuid
where cs.workflowexecutionlocation.DisplayName like '%Pool%'

2018年6月7日 星期四

SCOM - Microsoft.SystemCenter.Apm.Wcf.IIS2008.Discovery - Event ID 10001 Error 0x8013101b

Solution
=========
Apply 
Microsoft .NET Framework 4.7

Microsoft .NET Framework 4.7 (Offline Installer) for Windows 7 SP1, Windows 8.1, Windows 10 Anniversary Update, Windows Server 2008 R2 SP1, Windows Server 2012, Windows Server 2012 R2 and Windows Server 2016



Analysis
=========
0x8013101b The assembly is built by a runtime newer than the currently loaded runtime, and cannot be loaded

         <DisplayString ElementID="Microsoft.SystemCenter.Apm.Wcf.IIS2008.Discovery">
          <Name>IIS WCF Web Service Discovery Rule</Name>

IIS WCF Web Service Discovery Rule
·         ID:  Microsoft.SystemCenter.Apm.Wcf.IIS2008.Discovery
·         Description:  Discovery rule used to find WCF Services deployed to IIS. The default pattern used by the discovery is to look for .svc files in the virtual directory, if any are found a WCF Service endpoint will be created. To specify additional file types that represent a WCF service override the AdditionalExtensions property and provide a semi-colon (;) delimited list of file extensions. An example of a new file extension list string is "foo;bar" that specifies files such as myFile.foo and myFile.bar represent WCF Services.
·         Target:  .NET Application Monitoring Agent
Enabled:  Yes

Microsoft.SystemCenter.Apm.Wcf.IIS2008.Discovery
<DeployableAssembly ID="Res.Microsoft.SystemCenter.Apm.Discovery.Wcf" Accessibility="Internal" FileName="Microsoft.EnterpriseManagement.Modules.Apm.Discovery.Wcf.dll" HasNullStream="false" QualifiedName="Microsoft.EnterpriseManagement.Modules.Apm.Discovery.Wcf, Culture=neutral, PublicKeyToken=31bf3856ad364e35, Version=7.0.5000.20" />

    <LanguagePack ID="ENU" IsDefault="true">
      <DisplayStrings>
        <DisplayString ElementID="Microsoft.SystemCenter.Apm.Wcf.IIS2008.Discovery">
          <Name>IIS WCF Web Service Discovery Rule</Name>
          <Description>Discovery rule used to find WCF Services deployed to IIS.  The default pattern used by the discovery is to look for .svc files in the virtual directory, if any are found a WCF Service endpoint will be created. To specify additional file types that represent a WCF service override the AdditionalExtensions property and provide a semi-colon (;) delimited list of file extensions.  An example of a new file extension list string is "foo;bar" that specifies files such as myFile.foo and myFile.bar represent WCF Services.</Description>
        </DisplayString>
      </DisplayStrings>
-----------------------------------------------------------------
        <DisplayString ElementID="ParentMP!Microsoft.SystemCenter.Apm.Wcf.IIS2008.Discovery">
<Name>IIS WCF Web 服務探索規則</Name>
<Description>用來尋找部署至 IIS WCF 服務的探索規則。探索使用的預設樣式為在虛擬目錄中尋找 .svc 檔案,並在找到時建立一個 WCF 服務端點。若要指定其他表示 WCF 服務的檔案類型,請覆寫 AdditionalExtensions 內容並提供分號分隔的副檔名清單。新的副檔名清單字串的範例如 "foo;bar",其指定了如 myFile.foo myFile.bar 等表示 WCF 服務的檔案</Description>

2018年5月6日 星期日

Windows 10 Start Menu not work

在開始–>滑鼠右鍵執行中,輸入以下指令:reg add “HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v “EnableXamlStartMenu" /t REG_DWORD /d “0″ /f

重新啟動電腦

2018年4月16日 星期一

HTTP 503 Error opening AD RMS console

Cause
The cause was the password in the IIS App pool had become corrupted. 

Resolution
To resolve the issue the password was updated in IIS by going into IIS / Advanced Settings / Identity / & Re-type password. 

2018年3月28日 星期三

WSUS - Not able to Complete the install of WSUS


Symptom
==========
WSUS post installation task failed.
Cause
===========
The port 8530 was listening to the IP 127.0.0.1

Error:
----------
2018-03-27 11:38:31.478 UTC Error       WsusService.9        HmtWebServices.CheckDssAuthWebService      DssAuth WebService WebException:System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it [::1]:8530

Resolution
==========
Deleted this IP mapping using the following command.
netsh http del iplisten ipaddress=127.0.0.1


2018年3月11日 星期日

Win 10 duo scan

Cause
=====
Windows 10 Duo Scan功能讓使用該作業系統會向WSUS和網際網路取的更新。

 Action Plan
==============
-請在Windows 10的電腦上打開edit group policy,將以下兩個GPO給開啟

-在命令提示字元套用在電腦上執行gpupdate /force直接套用GPO

-打開regedit,檢查HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate下是否有以下兩個key

-測試windows update是否運作正常  

必須開啟的GPO
  1. Do not connect to any Windows Update Internet locations

Even when Windows Update is configured to receive updates from an intranet update service, it will periodically retrieve information from the public Windows Update service to enable future connections to Windows Update, and other services like Microsoft Update or the Microsoft Store.

Use Computer Configuration\Administrative Templates\Windows Components\Windows update\Do not connect to any Windows Update Internet locations to enable this policy. When enabled, this policy will disable the functionality described above, and may cause connection to public services such as the Microsoft Store, Windows Update for Business and Delivery Optimization to stop working.
  1. Do not allow update deferral policies to cause scans against Windows Update

The new policy, Do not allow update deferral policies to cause scans against Windows Update, when enabled, will disable Dual Scan. This allows enterprises that wish to configure deferral policies, the ability to do so without being concerned that Dual Scan will override administrator intent.

Use Computer Configuration\Administrative Templates\Windows Components\Windows update\Do not allow update deferral policies to cause scans against Windows Update to enable this policy. When enabled, this policy will disable the functionality described above, and may cause connection to public services such as the Microsoft Store, Windows Update for Business and Delivery Optimization to stop working.

若要使用Do not allow update deferral policies to cause scans against Windows UpdateGPOWindows 10版本須在1607build1593之上,請參考以下連結
https://support.microsoft.com/en-us/help/4034658/windows-10-update-kb4034658
 

More Information
==============
 

DPM cannot backup Hyper-v --> 5.0/8.0 version


Hyper-V protection improvements

The following information touches on the improvements to protecting VMs with DPM 2016.+

Resilient Change Tracking (RCT)

In Windows Server 2016, Hyper-V virtual hard disks have built-in change tracking. As a result, in the case of a Host outage, or VM migration, change-tracking is automatically preserved. With RCT, backups:+
·         are more reliable: consistency checks aren't required after VM migration,
·         are scalable: more parallel backups and less storage overhead,
·         have improved performance: lower impact on the production fabric and faster backup.

Enabling RCT VM backup

Hyper-V VMs deployed on Windows Server 2016 and protected using DPM 2016 have RCT by default. VMs deployed on Windows Server 2012 R2 or earlier do not support RCT. However, you can upgrade older VMs. To upgrade older VMs to enable RCT:+
1.    In Hyper-V Manager, shut down the virtual machine.
2.    In Hyper-V Manager, select Action > Upgrade Configuration Version.
If this option isn't available for the virtual machine, then it's already at the highest configuration version supported by the Hyper-V host. For additional information about checking or upgrading the virtual machine configuration version, see the article, upgrading virtual machine version to Windows Server 2016.
If you want to use Windows PowerShell to upgrade the virtual machine configuration, run the following command where vmname is the name of the virtual machine.
Update-VMVersion <vmname>
3.    On the DPM 2016 server:
o    Stop protection of the VM and select Retain Data.
o    In the DPM 2016 Administrator Console, click Protection > on the tool ribbon, click New to start the Create Protection Wizard. Go through the wizard and select Refresh to update the data sources.
o    Select your VM and create a new protection group.
o    Delete the old VM's retained data once the retention range has expired.



Make the latest Hyper-V features available on your virtual machines by upgrading the configuration version. Don't do this until: +
·         You upgrade your Hyper-V hosts to the latest version of Windows or Windows Server.
·         You upgrade the cluster functional level.
·         You're sure that you won't need to move the virtual machine back to a Hyper-V host that runs a previous version of Windows or Windows Server.

Step 1: Check the virtual machine configuration versions

1.    On the Windows desktop, click the Start button and type any part of the name Windows PowerShell.
2.    Right-click Windows PowerShell and select Run as Administrator.
3.    Use the Get-VM cmdlet. Run the following command to get the versions of your virtual machines.
Get-VM * | Format-Table Name, Version
You can also see the configuration version in Hyper-V Manager by selecting the virtual machine and looking at the Summary tab.

Step 2: Upgrade the virtual machine configuration version

1.    Shut down the virtual machine in Hyper-V Manager.
2.    Select Action > Upgrade Configuration Version. If this option isn't available for the virtual machine, then it's already at the highest configuration version supported by the Hyper-V host.
To upgrade the virtual machine configuration version by using Windows PowerShell, use the Update-VMVersion cmdlet. Run the following command where vmname is the name of the virtual machine. +
Update-VMVersion <vmname>  

Supported virtual machine configuration versions

The following table shows which virtual machine configuration versions are supported by Hyper-V hosts that run on specific versions of Windows operating systems. +
Hyper-V host Windows version
Supported virtual machine configuration versions
Windows Server 2016
8.0, 7.1, 7.0, 6.2, 5.0
Windows 10 Anniversary Update
8.0, 7.1, 7.0, 6.2, 5.0
Windows Server 2016 Technical Preview
7.1, 7.0, 6.2, 5.0
Windows 10 build 10565 or later
7.0, 6.2, 5.0
Windows 10 builds earlier than 10565
6.2, 5.0
Windows Server 2012 R2
5.0
Windows 8.1
5.0
Run the PowerShell cmdlet Get-VMHostSupportedVersion to see what virtual machine configuration versions your Hyper-V Host supports. When you create a virtual machine, it's created with the default configuration version. To see what the default is, run the following command. +
Get-VMHostSupportedVersion -Default  
If you need to create a virtual machine that you can move to a Hyper-V Host that runs an older version of Windows, use the New-VM cmdlet with the -version parameter. For example, to create a virtual machine that you can move to a Hyper-V host that runs Windows Server 2012 R2 , run the following command. This command will create a virtual machine named "WindowsCV5" with a configuration version 5.0. +
New-VM -Name "WindowsCV5" -Version 5.0  

Why should I upgrade the virtual machine configuration version?

When you move or import a virtual machine to a computer that runs Hyper-V on Windows Server 2016 or Windows 10, the virtual machine"s configuration isn't automatically updated. This means that you can move the virtual machine back to a Hyper-V host that runs a previous version of Windows or Windows Server. But, this also means that you can't use some of the new virtual machine features until you manually update the configuration version. You can't downgrade the virtual machine configuration version after you've upgraded it. +
The virtual machine configuration version represents the compatibility of the virtual machine's configuration, saved state, and snapshot files with the version of Hyper-V. When you update the configuration version, you change the file structure that is used to store the virtual machines configuration and the checkpoint files. You also update the configuration version to the latest version supported by that Hyper-V host. Upgraded virtual machines use a new configuration file format, which is designed to increase the efficiency of reading and writing virtual machine configuration data. The upgrade also reduces the potential for data corruption in the event of a storage failure.

2018年1月18日 星期四

Demote Windows Server 2016 Domain Controllers

Uninstall Using PowerShell –

Import-Module ADDSDeployment
 
Uninstall-ADDSDomainController -DemoteOperationMasterRole:$true -Force:$true

2018年1月13日 星期六

Ghost/Orphaned entries in SCOM console Windows Computer view

1. Connect to the SCOM SQL server and open SQL Management studio

2. Right click on OperationsManager database and select new query

3. Run the following query in the right window to see the status of ALL computers in SCOM
SELECT * FROM dbo.[BasemanagedEntity] where FullName Like ‘%Windows.Computer%’

4. To see the status of a specific computer in SCOM (replace the text “fqdn” with the server name)
SELECT * FROM dbo.[BasemanagedEntity] where FullName Like ‘%Windows.Computer%’ and Name Like ‘%FQDN.of.my.computer%’

5. In the results scroll to the right to find the “IsDeleted” column. 0(Zero) means the database does not know the computer has been deleted. If it is zero then we will run the next command to change it to 1 (one)
replace the text “fqdn” with the server name
UPDATE dbo.[BasemanagedEntity] SET IsDeleted = 1 where FullName Like ‘%Windows.Computer%’ and Name Like ‘%FQDN.of.my.computer%’