Server Health Check

******************************************************************************** ******************** |_______________________________________________________________________________ ____________________| | MM MM SSSSS IIIIII TTTTTTT SSSSSS RRRRR VV VV HH HH CCCCC | | MMM MMM SS II TTT SS RR RR VV VV HH HH CCC | | MM MM MM MM SSSSS II TTT SSSSSS RRRRR VV VV HHHHHH CC | | MM MMM MM SS II TTT SS RR RR VV VV HH HH CCC | | MM M MM SSSSS IIIIII TTT SSSSSS RR R V HH HH CCCCC | |--------------------------------------------------------------------------------------------------| |>----------------------------- MSIT Server Heatlh Check v2.1.2427.6 -----------------------------> HIGH > HIGH > HIGH > HIGH > HIGH ;; IP Address(es) :;; 2001:4898:c8:6032 :210a:1416:5de0:a623; 2001:4898:dc05:d:210a:1416:5de0:a623; 157.54.89.141;;;; Ei ther the DNS server does not support the DNS dynamic update protocol or the aut horitative zone for the specified DNS domain name does not accept dynamic updat es.;;;; To register the DNS host (A or AAAA) resource records using the specific DNS domain name and IP addresses for this adapter; contact your DNS server or network systems administrator. 00001 Information Server Administrator 1009 10:59:58 08/21/2011 Systems Management Data Manager Stopped 00001 Information Microsoft-Windows-Service Pack Installer 9 14:15:21 08/21/2011 Service Pack 2 installation succeeded. 00001 Information Dell - System Update 6078 11:10:53 08/21/2011 Update ready to be applied at reboot;;Package: PE2950_BIOS_WIN_2.6.1.EXE - REDM OND\v-ad943;;Description: Dell Server BIOS; 2.6.1;;Previous version: 2.5.0;;Ne w version: 2.6.1;;Log file: C:\Dell\UpdatePackage\log\PE2950_BIOS_WIN_2.6.1.tx t;;Exit code = 2 (Reboot required) 00001 Error TermDD 56 11:10:48 08/21/2011 The Terminal Server security layer detected an error in the protocol stream and has disconnected the client. 00001 Error Service Control Manager 7034 11:00:06 08/21/2011 The DSM SA Data Manager service terminated unexpectedly. It has done this 1 tim e(s). 00001 Error Service Control Manager 7032 12:22:54 08/21/2011 The Service Control Manager tried to take a corrective action (Restart the servi ce) after the unexpected termination of the System Center Management service; bu t this action failed with the following error: ;;An instance of the service is a lready running. 00001 Error Service Control Manager 7031 12:21:54 08/21/2011 The System Center Management service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

00001 Error Microsoft-Windows-GroupPolicy 1129 11:09:04 08/21/2011 The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated once the machine gets connected to the domain controller and Group Policy has succesfully processed. If you do not see a success message for sever al hours; then contact your administrator. 00001 Error Microsoft-Windows-DistributedCOM 10016 15:31:27 08/21/2011 The application-specific permission settings do not grant Local Launch permissio n for the COM Server application with CLSID ;;{1CCB96F4-B8AD-4B43-9688-B273F58E0 910};; to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Us ing LRPC). This security permission can be modified using the Component Services administrative tool. 00001 Error Microsoft-Windows-DistributedCOM 10010 11:55:05 08/21/2011 The server {752073A1-23F2-4396-85F0-8FDB879ED0ED} did not register with DCOM wit hin the required timeout. ******************************************************************************** ******************** Event log:Operations Manager 01276 Information Health Service Script 6022 16:00:00 08/21/2011 LogEndToEndEvent.js : This event is logged to the Windows Event Log periodically to test a event collection. 00684 Information Health Service Script 3002 15:58:05 08/21/2011 SystemCenterCentral.Utilities.Certificates.LocalScriptProbe.vbs : Discovery: The certificate verification script found 3 certificates and CRLs stored locally on this computer in the certificate store 'My'. 00335 Information Health Service Script 14011 15:55:07 08/21/2011 Management Group: OPPROD;;Application Name: ErrorLog;;Script Source: Discovery : ;;End Discovery! 00335 Information Health Service Script 14003 15:55:07 08/21/2011 Management Group: OPPROD;;Application Name: ErrorLog;;Script Source: Discovery : ;;Error Log Constraint: [ { Application : 'Banshee';ErrorTables : [ { Criteria : '';DB : 'ProxyBlockTool';DateTime : { ColumnName : 'ErrorDateTime';DayOrHourOr Minute : 'Hour';From : '-1'};ErrorTable : 'ErrorLog';Servers : [ { Name : 'TK5TW CBANSQL01' } ]} ]};{ Application : 'Cortana';ErrorTables : [ { Criteria : '';DB : 'CortanaCaptureDB';DateTime : { ColumnName : 'ErrorDate';DayOrHourOrMinute : ' Hour';From : '-1'};ErrorTable : 'ErrorLog';Servers : [ { Name : 'Tk5NimonCaptuDB ' } ]};{ Criteria : '';DB : 'CortanaControlDB';DateTime : { ColumnName : 'Create dDate';DayOrHourOrMinute : 'Hour';From : '-1'};ErrorTable : 'ErrorLog';Servers : [ { Name : 'TK5NIMONCONFSQL' } ]}]};{ Application : 'Priya';ErrorTables : [ { C riteria : '';DB : 'IDB';DateTime : { ColumnName : 'CreatedDate';DayOrHourOrMinut e : 'Hour';From : '-1'};ErrorTable : 'ErrorLog';Servers : [ { Name : 'TWCPRIYASQ L02' } ]} ]};{ Application : 'ICE';ErrorTables : [ { Criteria : 'EventCode=\'NM1 005\' AND IsSuccess=0';DB : 'ICE4';DateTime : { ColumnName : 'EventDateTime';Day OrHourOrMinute : 'Hour';From : '-1'};ErrorTable : 'ErrorLog';Servers : [ { Name : 'CO1ICESQL03' } ]} ]}; { Application : 'Colossus';ErrorTables : [ { Criteria :

'';DB : 'FileHash';DateTime : { ColumnName : 'ErrorDateTime';DayOrHourOrMinute : 'Hour';From : '-1'};ErrorTable : 'ErrorLog';Servers : [ { Name : 'TK5TWCORKOSQ L01' } ]};{ Criteria : '';DB : 'FEP_DataCenter';DateTime : { ColumnName : 'Error DateTime';DayOrHourOrMinute : 'Hour';From : '-1'};ErrorTable : 'ErrorLog';Server s : [ { Name : 'TK5TWCORKOSQL01' } ]} ]}] 00335 Information Health Service Script 14000 15:55:07 08/21/2011 Management Group: Unknown;;Application Name: ErrorLog;;Script Source: Discovery : ;;Discovery- Arguments: ;;{165A309B-4BFD-6A12-A132-118583926606};;{9FB919F0-15 CB-EE18-D81A-7E44116D85A2};;TK5CCPWEB01.redmond.corp.microsoft.com;;OPPROD;;[ { Application : 'Banshee';ErrorTables : [ { Criteria : '';DB : 'ProxyBlockTool';Da teTime : { ColumnName : 'ErrorDateTime';DayOrHourOrMinute : 'Hour';From : '-1'}; ErrorTable : 'ErrorLog';Servers : [ { Name : 'TK5TWCBANSQL01' } ]} ]};{ Applicat ion : 'Cortana';ErrorTables : [ { Criteria : '';DB : 'CortanaCaptureDB';DateTime : { ColumnName : 'ErrorDate';DayOrHourOrMinute : 'Hour';From : '-1'};ErrorTable : 'ErrorLog';Servers : [ { Name : 'Tk5NimonCaptuDB' } ]};{ Criteria : '';DB : ' CortanaControlDB';DateTime : { ColumnName : 'CreatedDate';DayOrHourOrMinute : 'H our';From : '-1'};ErrorTable : 'ErrorLog';Servers : [ { Name : 'TK5NIMONCONFSQL' } ]}]};{ Application : 'Priya';ErrorTables : [ { Criteria : '';DB : 'IDB';DateT ime : { ColumnName : 'CreatedDate';DayOrHourOrMinute : 'Hour';From : '-1'};Error Table : 'ErrorLog';Servers : [ { Name : 'TWCPRIYASQL02' } ]} ]};{ Application : 'ICE';ErrorTables : [ { Criteria : 'EventCode=\'NM1005\' AND IsSuccess=0';DB : ' ICE4';DateTime : { ColumnName : 'EventDateTime';DayOrHourOrMinute : 'Hour';From : '-1'};ErrorTable : 'ErrorLog';Servers : [ { Name : 'CO1ICESQL03' } ]} ]}; { Ap plication : 'Colossus';ErrorTables : [ { Criteria : '';DB : 'FileHash';DateTime : { ColumnName : 'ErrorDateTime';DayOrHourOrMinute : 'Hour';From : '-1'};ErrorTa ble : 'ErrorLog';Servers : [ { Name : 'TK5TWCORKOSQL01' } ]};{ Criteria : '';DB : 'FEP_DataCenter';DateTime : { ColumnName : 'ErrorDateTime';DayOrHourOrMinute : 'Hour';From : '-1'};ErrorTable : 'ErrorLog';Servers : [ { Name : 'TK5TWCORKOSQL 01' } ]} ]}] 00335 Information Health Service Script 12812 15:55:07 08/21/2011 Dicovery Data Returned : Successful 00335 Information Health Service Script 12810 15:55:07 08/21/2011 Dicovery agent job instance number: : 0 00335 Information Health Service Script 12804 15:55:07 08/21/2011 Management Group:OPPROD;;Script Source: NetSec agent job Discovery : ;;Parse age nt job constraint successfully 00335 Information Health Service Script 12802 15:55:07 08/21/2011 Parameters : Parameter Number:5;;{99F5A18C-5EC2-E289-EE75-A5D78F8C0ECD};;{9FB919 F0-15CB-EE18-D81A-7E44116D85A2};;TK5CCPWEB01.redmond.corp.microsoft.com;;OPPROD; ;[{Application:'AltCreds';ServerName:'TK5TWCALTSQL01';Jobs:[{JobName:'Import_Nig htCrawlerData';Threshold:720};{JobName:'Import_MangooseCases';Threshold:720};{Jo bName:'AddYearlyPartitionTable';Threshold:720};{JobName:'AddPartitionToNCView';T hreshold:720}]};{Application:'Banshee';ServerName:'TK5TWCBANSQL01';Jobs:[{JobNam e:'DeleteTMGLogfiles';Threshold:720};{JobName:'JobBlockURLIPFromBotnet';Threshol d:720}]};{Application:'BIPS';ServerName:'TWCBIPSSQL01';Jobs:[{JobName:'BIPS_Pull AdminHandlingCasesFromCRMDB';Threshold:720};{JobName:'BIPS_DetectServerConnectio n';Threshold:720};{JobName:'BIPS_SyncRegionWithPriyaIDB';Threshold:720};{JobName :'BIPS_GetUpdateFromCRM';Threshold:720};{JobName:'BIPS_CaseProcessingAgentJob';T hreshold:720};{JobName:'BIPS_ErrorLogEmailToSENotificationOP';Threshold:720};{Jo bName:'BIPS_SyncExternalDatasources';Threshold:720}]};{Application:'Browser Usag

e Reporting';ServerName:'NSLAB-RH-IBU';Jobs:[{JobName:'DailyWebProxyCollector';T hreshold:2880};{JobName:'ReportExportNotifier';Threshold:2880};{JobName:'WeeklyC ollector';Threshold:2880};{JobName:'WeeklyConsolidateBU';Threshold:4320};{JobNam e:'WeeklyPurge';Threshold:2880}]};{Application:'DB Exporter';ServerName:'NetSecS emRpt01';DBInstanceName:'MSSQLSERVER2008';PortNumber:52000; Jobs:[{JobName:'Deco mpressionLogs_APAC_21';Threshold:720};{JobName:'DeleteCompressedFiles_InstanceID _1';Threshold:720};{JobName:'DeleteCompressedFiles_InstanceID_2';Threshold:720}; {JobName:'DecompressionLogs_NA_16';Threshold:720};{JobName:'DecompressionLogs_EM EA_33';Threshold:720};{JobName:'DecompressionLogs_NA2_52';Threshold:720};{JobNam e:'DeleteCompressedFiles_InstanceID_9';Threshold:720};{JobName:'FindProxyState'; Threshold:720};{JobName:'DBExporterMonitoringJob';Threshold:720};{JobName:'Decom pressionLogs_APAC_25';Threshold:720};{JobName:'DecompressionLogs_NA3_TMG_62';Thr eshold:720};{JobName:'ReprocessJob';Threshold:720};{JobName:'DecompressionLogs_N A2_54';Threshold:720};{JobName:'DeleteCompressedFiles_InstanceID_10';Threshold:7 20};{JobName:'DecompressionLogs_APAC_24';Threshold:720};{JobName:'DecompressionL ogs_Japan_41';Threshold:720};{JobName:'DeleteCompressedFiles_InstanceID_11';Thre shold:720};{JobName:'GetFileListFromDBExporter';Threshold:720};{JobName:'Decompr essionLogs_NA_15';Threshold:720};{JobName:'DecompressionLogs_NA_13';Threshold:72 0};{JobName:'DecompressionLogs_EMEA_34';Threshold:720};{JobName:'FindDiskSpace'; Threshold:720};{JobName:'DecompressionLogs_APAC_22';Threshold:720};{JobName:'Dec ompressionLogs_NA2_55';Threshold:720};{JobName:'DecompressionLogs_NA3_TMG_61';Th reshold:720};{JobName:'DecompressionLogs_NA_11';Threshold:720};{JobName:'Decompr essionLogs_EMEA_32';Threshold:720};{JobName:'UpdateFilelist_Compression_FailureF iles';Threshold:720};{JobName:'DecompressionLogs_NA_14';Threshold:720};{JobName: 'DecompressionLogs_EMEA_31';Threshold:720};{JobName:'DecompressionLogs_Japan_43' ;Threshold:720};{JobName:'DecompressionLogs_NA2_53';Threshold:720};{JobName:'Dec ompressionLogs_EMEA_35';Threshold:720};{JobName:'AssignCompressedFilesToJobs';Th reshold:720};{JobName:'DeleteCompressedFiles_InstanceID_8';Threshold:720};{JobNa me:'DecompressionLogs_NA3_TMG_65';Threshold:720};{JobName:'DecompressionLogs_NA_ 12';Threshold:720};{JobName:'DecompressionLogs_Japan_42';Threshold:720};{JobName :'DecompressionLogs_NA3_TMG_64';Threshold:720};{JobName:'DecompressionLogs_NA3_T MG_63';Threshold:720};{JobName:'DecompressionLogs_APAC_23';Threshold:720};{JobNa me:'DecompressionLogs_NA2_51';Threshold:720}]};{Application:'Mongoose';ServerNam e:'TKCRMSQL011SG6';Jobs:[{JobName:'ImportBusinessGroupsDataIntoMongoose';Thresho ld:720}]};{Application:'Colossus';ServerName:'TK5TWCORKOSQL01';Jobs:[{JobName:'D elete_Logs';Threshold:720};{JobName:'OWA_ETL_Delay';Threshold:720};{JobName:'Man age DHCP Partition';Threshold:720};{JobName:'FEP_PurgeObsoleteData';Threshold:72 0};{JobName:'SMS_ETL';Threshold:720};{JobName:'Manage WGIA Partition';Threshold: 720};{JobName:'WGIA_ETL';Threshold:720};{JobName:'ImportWebProxy_DataCenterMachi nes';Threshold:720};{JobName:'GetLogAttributes-OWA';Threshold:720};{JobName:'Man age FEP Partition';Threshold:720};{JobName:'SER_ETL';Threshold:720};{JobName:'FE P_DataCollector';Threshold:720};{JobName:'ARP_ETL';Threshold:720};{JobName:'DHCP _ETL';Threshold:720};{JobName:'Radius_ETL';Threshold:720};{JobName:'syspolicy_pu rge_history';Threshold:720};{JobName:'OWA_ETL_Daily';Threshold:720};{JobName:'Ge tLogAttributes-DHCP';Threshold:720};{JobName:'GetLogAttributes-ExchangeAV';Thres hold:720};{JobName:'ExchangeAV_ETL';Threshold:720};{JobName:'Manage ExchangeAV P artition';Threshold:720};{JobName:'ExchangeAV_DeleteProcessedLogs';Threshold:720 }]};{Application:'Colossus';ServerName:'TK5TWCORKOAPP01';Jobs:[{JobName:'dhcp_Co pyLogs_MainProcess_new';Threshold:720};{JobName:'DeleteOWALogFiles';Threshold:72 0};{JobName:'syspolicy_purge_history';Threshold:720};{JobName:'Sync DHCPServers' ;Threshold:720};{JobName:'GetExchangeAVLogs';Threshold:720}]};{Application:'Colo ssus';ServerName:'NETSECSEMSQL03';Jobs:[{JobName:'RunSSISPkg';Threshold:720};{Jo bName:'update_ISAIDS_ProxyServers';Threshold:720};{JobName:'Add_Partition_ISAIDS ';Threshold:720};{JobName:'create_Partitions_ISA_IDS';Threshold:720};{JobName:'I SAIDS_Pull_Proxy_Events';Threshold:720};{JobName:'syspolicy_purge_history';Thres hold:720}]};{Application:'Network Tools DB';ServerName:'ITSECSEMSQL01';Jobs:[{Jo bName:'[NetworkTools] Feedstore Pull';Threshold:720};{JobName:'[Setninel6.1]Prox yServerList';Threshold:720}]};{Application:'Night Crawler';ServerName:'TK5TWCACS DW01';Jobs:[{JobName:'Drop_AND_AddDailyPartition';Threshold:720};{JobName:'DropF actStagingDW_Table';Threshold:720};{JobName:'DropWorkstationStagingDW_Table';Thr

eshold:720};{JobName:'Extract stage';Threshold:720};{JobName:'NightCrawlerCollec torFilterDeployFailureNotification';Threshold:720};{JobName:'NightCrawlerCollect orFilterDeploySuccessNotification';Threshold:720};{JobName:'NightCrawlerCollecto rFilterMonitoring';Threshold:720};{JobName:'NightCrawlerDWBolusTest4ACSDB';Thres hold:720};{JobName:'NightCrawlerDWRowCountStatistics';Threshold:720};{JobName:'N ightCrawlerForwarderMonitoring4HourReport';Threshold:720};{JobName:'NightCrawler ForwarderMonitoringWeeklyrReport';Threshold:720};{JobName:'Space_for_Autogrowth' ;Threshold:720};{JobName:'SwitchPartition';Threshold:720};{JobName:'WS_ExtractET L';Threshold:720};{JobName:'WS_ExtractStage';Threshold:720};{JobName:'Manage DA Partition';Threshold:720};{JobName:'DAFeedImport';Threshold:720};{JobName:'Impor tIP2CountryRange';Threshold:720}]};{Application:'Night Crawler';ServerName:'TK5T WCACSETL01';Jobs:[{JobName:'NC_ExtractETL';Threshold:720}]};{Application:'Night Crawler';ServerName:'TK5TWCDADB01';Jobs:[{JobName:'ImportIP2CountryRange';Thresh old:720}]};{Application:'Search stat reporting';ServerName:'NSLab-RB-30';Jobs:[{ JobName:'SearchStats_Import_BusinessGroups';Threshold:720};{JobName:'SearchStats _Import_Countries';Threshold:720};{JobName:'SearchStats_Import_CrmFeedstoreListL astUpdated';Threshold:720};{JobName:'SearchStats_Import_Netlogon';Threshold:720} ;{JobName:'SearchStats_Import_WebProxyData';Threshold:720};{JobName:'SearchStats _Process_SearchStatsMonthly';Threshold:720};{JobName:'SearchStats_Import_SearchS tatsMonthlyDetail_Netsec';Threshold:720};{JobName:'SearchStats_Import_PullWebPro xyData';Threshold:720}]};{Application:'ICE4';ServerName:'CO1ICESQL04';Jobs:[{Job Name:'Filter E-Mail Import';Threshold:720};{JobName:'DeleteEmailLogs';Threshold: 720};{JobName:'DeleteE14E-MailLogFiles';Threshold:720}]};{Application:'ICE4';Ser verName:'CO1ICESQL03';Jobs:[{JobName:'Daily Report Mail';Threshold:720};{JobName :'FeedStore Refresh';Threshold:720};{JobName:'ImportITConfigServers';Threshold:7 20};{JobName:'UpdateStatisticsForWebProxy';Threshold:720};{JobName:'LOG_USER_QUE RIES';Threshold:720};{JobName:'Middle Layer Tables Refresh Job';Threshold:720};{ JobName:'ReCreate_ice_vw_GetConsolidatedFacts';Threshold:720};{JobName:'SlidingW indowForFirewall';Threshold:720};{JobName:'SlidingWindowForWeb';Threshold:720};{ JobName:'UpdateStatisticsForFirewall';Threshold:720}]}];; 00335 Information Health Service Script 12210 15:55:07 08/21/2011 Dicovery Data Returned : Successful 00334 Information Health Service Script 12601 15:55:07 08/21/2011 Management Group:OPPROD;;Application Name : Microsoft.NetSec.OPM.Application.Url Class;;Script Source: discovery;;version:.27 : ;;arguments:;;{EE242D4B-48EF-F8C0 -52CE-BF07ED9C5FAB};;{9FB919F0-15CB-EE18-D81A-7E44116D85A2};;TK5CCPWEB01.redmond .corp.microsoft.com;;OPPROD;;[{Application: 'AltCreds' ;Urls:[{Name:'AltCreds Pr od';Url:'https://nsacctrpt';server:'nslab-ra-17'}]};{Application: 'Banshee' ;Url s:[{Name:'Banshee Prod';Url:'https://proxyblock';server:'nslab-ra-17'};{Name:'Ba nshee extranet Website';Url:'http://CO1TWCBANAPP01.partners.extranet.microsoft.c om/httpMonitor.asmx';server:'nslab-ra-17'}]};{Application: 'BIPS' ;Urls:[{Name:' BIPS Prod';Url:'https://bipscm';server:'nslab-ra-17'}]};{Application: 'Cortana' ;Urls:[{Name:'Cortana Prod';Url:'https://nscortana';server:'nslab-ra-17'}]};{App lication: 'Mongoose' ;Urls:[{Name:'Mongoose Prod';Url:'https://nscrm';server:'ns lab-ra-17'}]};{Application: 'Portshut' ;Urls:[{Name:'Portshut';Url:'https://nspo rtshut/';server:'nslab-ra-17'}]};{Application: 'Priya' ;Urls:[{Name:'Priya Prod' ;Url:'https://nscrm';server:'nslab-ra-17'}]};{Application: 'Report it now' ;Urls :[{Name:'ReportItNow Prod';Url:'http://vm_corpseciis/';server:'nslab-ra-17'}]};{ Application: 'MEERA' ;Urls:[{Name:'MERA Prod';Url:'https://meeracm';server:'nsla b-ra-17'}]};{Application: 'Nsinv-Request' ;Urls:[{Name:'NSINV Prod';Url:'http:// nsinv-request';server:'nslab-ra-17'}]};{Application: 'SearchStat' ;Urls:[{Name:' SearchStat Prod';Url:'http://searchstats';server:'nslab-ra-17'}]};{Application: 'CaseLookup' ;Urls:[{Name:'CaseLookup Prod';Url:'https://nsi-litweb';server:'ns lab-ra-17'}]}] 00334

Information

Health Service Script

12208 15:55:07 08/21/2011 Dicovery service instance number: : 0 00334 Information Health Service Script 12206 15:55:07 08/21/2011 Management Group:OPPROD;;Script Source: NetSec Services Discovery : ;;Parse serv ice constraint successfully 00334 Information Health Service Script 12202 15:55:07 08/21/2011 Parameters : Parameter Number:5;;{A458E1EB-BE8E-F504-EFA0-6C986FA54B99};;{9FB919 F0-15CB-EE18-D81A-7E44116D85A2};;TK5CCPWEB01.redmond.corp.microsoft.com;;OPPROD; ;[{Application: 'Banshee';Services:[{service:'ProxyBlockService'; servers:'TK5TW CBANSQL01'}]};{Application: 'BIPS';Services:[{service:'BipsUpdateToMongoose'; se rvers:'TWCBIPSSQL01'}]};{Application: 'Browser Usage Reporting';Services:[{servi ce:'MSSQLSERVER'; servers:'NSLAB-RH-IBU'};{service:'SQLSERVERAGENT'; servers:'NS LAB-RH-IBU'}]};{Application: 'Cortana';Services:[{service:'Cortana Configuration Service'; servers:'TK5NimonconfSQL'};{service:'Cortana Data Collection Service' ; servers:['NSNIMLODAPAC';'NSNIMLODEMEA';'Tk5NimonLoader1';'Tk5NimonLoader2']};{ service:'CortanaDataLoadingService'; servers:['Tk5NimonCaptuDB';'NSNIMLODAPAC';' Tk5NimonLoader1';'Tk5NimonLoader2']};{service:'Cortana Data Analysis Service'; s ervers:'Tk5NimonCaptuDB'}]};{Application: 'DB Exporter';Services:[{service:'DbEx porter'; servers:['NetSecSemRpt01';'NETSECNAIDB1';'NETSECDBEXP03';'NETSECAPACIDB ';'NETSECDBEXPAPAC';'NETSECEMEAIDB1']};{service:'CompressionService'; servers:[' CO1ACSCORPDB03';'NETSECAPACIDB';'NETSECDBEXPAPAC';'NETSECEMEAIDB1';'NETSECDBEXPN A4']}]};{Application: 'Mongoose';Services:[{service:'MSCRMEmail'; servers:'TKCRM WEB01SG6'};{service:'MSCRMAsyncService'; servers:'TKCRMWEB01SG6'};{service:'MSSQ LSERVER'; servers:'TKCRMSQL011SG6'}]};{Application: 'Colossus';Services:[{servic e:'OWALogExporter'; servers:'TK5TWCORKOAPP01'}]};{Application: 'Orko';Services:[ {service:'MSSQLSERVER'; servers:'CO1TWCRPTSQL01'};{service:'SQLSERVERAGENT'; ser vers:'CO1TWCRPTSQL01'}]};{Application: 'Sentinel';Services:[{service:'SCSsvc'; s ervers:'NETSECMSDUTL03'}; {service:'Sentinel'; servers:'NETSECSEMCOR03'}; {servi ce:'BotNetService'; servers:'NETSECMSDUTL03'}]};{Application: 'NightCrawler';Ser vices:[{service:'AdtServer'; servers:['TK5TWCACSC02';'TK5TWCACSC04';'TK5TWCACSC0 5';'TK5TWCACSC06';'TK5TWCACSC10']}]}];; 00238 Information OpsMgr Connector 21024 16:04:59 08/21/2011 OpsMgr's configuration may be out-of-date for management group xitmon; and has r equested updated configuration from the Configuration Service. The current(out-o f-date) state cookie is "A6 89 DF E7 13 56 05 E5 94 FC 89 CC E9 4E 9B 48 80 70 F 5 2F " 00190 Information HealthService 7026 16:05:06 08/21/2011 The Health Service successfully logged on the RunAs account REDMOND\_xmonam for management group xitmon 00188 Warning HealthService 7001 15:54:40 08/21/2011 The password for RunAs account REDMOND\_xmonam for management group xitmon is ex piring on Friday; December 03; 2010. If the password is not updated by then; th e health service will not be able to monitor or perform actions using this RunAs account. There are -261 days left before expiration. 00170 Information Health Service Modules 10113 15:55:02 08/21/2011 Taking a New Global Snapshot. 00166

Information

HealthService

1210 15:56:14 08/21/2011 New configuration became active. Management group "xitmon"; configuration id:"A6 89 DF E7 13 56 05 E5 94 FC 89 CC E9 4E 9B 48 80 70 F5 2F ". 00166 Information Health Service Modules 10111 16:04:42 08/21/2011 Deleting Global Snapshot. 00140 Information OpsMgr Connector 21026 15:55:10 08/21/2011 OpsMgr has received confirmation for management group xitmon from the Configurat ion Service that our existing configuration is up-to-date. The current state cookie is "25 AB 26 79 3A C8 B4 80 C3 14 B3 9B 90 C7 B4 44 7D D9 0A 9F " 00140 Information HealthService 7019 15:54:40 08/21/2011 The Health Service has validated all RunAs accounts for management group OpsMgr0 7CORPMT04. 00126 Information Health Service Script 8501 15:55:07 08/21/2011 Management Group:OPPROD;;Data feed Name : ICE.SingleFirewallProxy;;Script Source : discovery;;version:.26 : ;;arguments:;;{C25F07CB-6375-9EDE-DB10-F2A3D60D232E}; ;{9FB919F0-15CB-EE18-D81A-7E44116D85A2};;TK5CCPWEB01.redmond.corp.microsoft.com; ;OPPROD;;CO1ICESQL03;;specialSQLServerInstanceName;;0;;-10;;0;;day 00126 Information Health Service Script 8401 15:55:07 08/21/2011 Management Group:OPPROD;;Data feed Name : ICE.FirewallProxy;;Script Source: disc overy;;version:.26 : ;;arguments:;;{1C40E1F5-9476-E286-5C86-C975CA04F403};;{9FB9 19F0-15CB-EE18-D81A-7E44116D85A2};;TK5CCPWEB01.redmond.corp.microsoft.com;;OPPRO D;;CO1ICESQL03;;specialSQLServerInstanceName;;0;;-10;;0;;day 00126 Information Health Service Script 8301 15:55:07 08/21/2011 Management Group:OPPROD;;Data feed Name : ICE.SingleWebProxy;;Script Source: dis covery;;version:.26 : ;;arguments:;;{B2A3D236-A885-6848-838C-D17D0D361D42};;{9FB 919F0-15CB-EE18-D81A-7E44116D85A2};;TK5CCPWEB01.redmond.corp.microsoft.com;;OPPR OD;;CO1ICESQL03;;specialSQLServerInstanceName;;0;;-10;;0;;day 00126 Information Health Service Script 8201 15:55:07 08/21/2011 Management Group:OPPROD;;Data feed Name : ICE.WebProxy;;Script Source: discovery ;;version:.26 : ;;arguments:;;{6D48AED3-1198-6F16-D488-40A7CC7FE8BC};;{9FB919F015CB-EE18-D81A-7E44116D85A2};;TK5CCPWEB01.redmond.corp.microsoft.com;;OPPROD;;CO 1ICESQL03;;specialSQLServerInstanceName;;0;;-10;;0;;day 00097 Information Health Service Script 8639 15:55:07 08/21/2011 Management Group: OPPROD;;Data Feed Name: NetLogon;;Script Source: Discovery : ; ;End Discovery! 00097 Information Health Service Script 8631 15:55:07 08/21/2011 Management Group: ;;Data Feed Name: NetLogon;;Script Source: Discovery : ;;Disco very- Arguments: {{D8CEE60D-1DF4-F9AC-B87F-7FCC8F6FCADB}} {{9FB919F0-15CB-EE18D81A-7E44116D85A2}} {TK5CCPWEB01.redmond.corp.microsoft.com} {CO1ICESQL03} {OPPR OD} {specialSQLServerInstanceName} {0} {-1} {0} {Hour} 00097

Information

Health Service Script

8609 15:55:07 08/21/2011 Management Group: OPPROD;;Data Feed Name: NetLogon;;Script Source: Discovery : ; ;End Discovery! 00097 Information Health Service Script 8601 15:55:07 08/21/2011 Management Group: ;;Data Feed Name: NetLogon;;Script Source: Discovery : ;;Disco very- Arguments: {{9C0229A7-A675-B779-C737-C1003ED5C79C}} {{9FB919F0-15CB-EE18D81A-7E44116D85A2}} {TK5CCPWEB01.redmond.corp.microsoft.com} {CO1ICESQL03} {OPPR OD} {specialSQLServerInstanceName} {0} {-1} {0} {Hour} 00090 Information HealthService 7006 15:54:38 08/21/2011 The Health Service has published the public key [79 86 D7 5E AA 9A 16 87 48 CF E D 7F 14 E9 03 5C ] used to send it secure messages to management group OpsMgr07C ORPMT04. This message only indicates that the key is scheduled for delivery; n ot that delivery has been confirmed. 00090 Information HealthService 2002 15:54:36 08/21/2011 Management Group "xitmon" was started. 00084 Information OpsMgr Connector 21025 16:05:05 08/21/2011 OpsMgr has received new configuration for management group xitmon from the Confi guration Service. The new state cookie is "A6 9B AF 75 CA 4F 6A 10 35 11 76 DC BF 83 A6 35 C5 B4 A3 9B " 00084 Information HealthService 7028 16:05:06 08/21/2011 All RunAs accounts for management group xitmon have the correct logon type. 00084 Information HealthService 7025 16:05:06 08/21/2011 The Health Service has authorized all configured RunAs accounts to execute for m anagement group xitmon. 00084 Information HealthService 7023 16:05:06 08/21/2011 The Health Service has downloaded secure configuration for management group xitm on successfully. 00082 Information HealthService 7024 16:05:06 08/21/2011 The Health Service successfully logged on all accounts for management group xitm on 00060 Information OpsMgr Connector 20063 15:54:36 08/21/2011 Active Directory Integration has been disabled for management group xitmon. 00057 Error Health Service Modules 11903 15:55:00 08/21/2011 The Microsoft Operations Manager Expression Filter Module could not convert the received value to the requested type. ;;;;Property Expression: Params/Param[4] ; ;;;Property Value: -261 ;;;;Conversion Type: DataItemElementTypeUnsignedInteger( 6) ;;;;Original Error: 0x80FF005A ;;;;One or more workflows were affected by thi s. ;;;;Workflow name: Microsoft.SystemCenter.HealthServiceRunAsAccounts.Expirat ionCheck.Unit ;;Instance name: TK5CCPWEB01.redmond.corp.microsoft.com ;;Instance ID: {5AFCAD07-FA4F-703E-2CCF-A298AB108B86} ;;Management group: xitmon

00054 Information OpsMgr Connector 20013 15:54:36 08/21/2011 The OpsMgr Connector successfully retrieved policy from Active Directory for man agement group OpsMgr07CORPMT04. 00050 Information Health Service Modules 10112 16:04:42 08/21/2011 Received registry notification for performance counter creation or deletion. 00048 Information Health Service Script 11600 15:55:07 08/21/2011 Management Group: ;;Data Feed Name: ALTCreds;;Script Source: Discovery : ;;Disco very - Arguments: {{8466A92A-D271-682F-33A4-89C3B6A11CF2}} {{9FB919F0-15CB-EE18 -D81A-7E44116D85A2}} {TK5CCPWEB01.redmond.corp.microsoft.com} {TK5TWCALTSQL01} { specialSQLServerInstanceName} {0} {-2} {0} {day} {OPPROD} 00048 Information Health Service Script 10800 15:55:07 08/21/2011 Management Group: ;;Data Feed Name: ACS;;Script Source: Discovery : ;;Discovery - Arguments: {{32657398-DF8A-1901-3AEE-C0469DA2BE40}} {{9FB919F0-15CB-EE18-D81A -7E44116D85A2}} {TK5CCPWEB01.redmond.corp.microsoft.com} {TK5TWCACSDB02;TK5TWCAC SDB04;TK5TWCACSDB05;TK5TWCACSDB06;NSLAB-RA-17;TK5TWCACSDB10} {-2} {0} {Hour} {OP PROD} 00046 Information HealthService 5500 15:54:59 08/21/2011 Frequent state change requests caused the incoming state change request to be dr opped due to it being older than the currently recorded state change for this mo nitor. This could also be due to an invalid configuration for this monitor. ;;; ;Affected monitor: Microsoft.Windows.Server.2008.OperatingSystem.WorkstationServ iceHealth ;;Instance: Microsoftr Windows Serverr 2008 Enterprise ;;Instance ID: A1D6CD72-ACBF-C3BC-7C5A-FB7C81779435 ;;Management Group: xitmon ;;;;Request gen erated time: 2011-08-21T08:54:59.4644787-07:00 ;;Requested state: Success ;;;;Re corded time: 2011-08-21T08:54:59.6829374-07:00 ;;Recorded state Success 00037 Warning Health Service Modules 10102 15:54:59 08/21/2011 In PerfDataSource; could not resolve counter ASM Networking Diagnostics; ICMP.Ro undTripTime; All Instances. Module will not be unloaded. ;;;;One or more workflo ws were affected by this. ;;;;Workflow name: MomUIGeneratedRulec41a307ae59d49b2 978fb4f773cafecf ;;Instance name: TK5CCPWEB01.redmond.corp.microsoft.com ;;Insta nce ID: {9FB919F0-15CB-EE18-D81A-7E44116D85A2} ;;Management group: xitmon 00036 Information Health Service Script 9809 15:55:07 08/21/2011 Management Group: OPPROD;;Data Feed Name: AVBSubmit;;Script Source: Discovery : ;;End Discovery! 00036 Information Health Service Script 9801 15:55:07 08/21/2011 Management Group: ;;Data Feed Name: AVBSubmit;;Script Source: Discovery : ;;Disc overy- Arguments: {{57A0A4B0-B01C-86CD-524D-20E826CF80EF}} {{9FB919F0-15CB-EE18 -D81A-7E44116D85A2}} {TK5CCPWEB01.redmond.corp.microsoft.com} {TK5TWCORKOSQL01} {OPPROD} {specialSQLServerInstanceName} {0} {-3} {0} {Day} 00036 Information Health Service Script 9400 15:55:07 08/21/2011 Management Group: ;;Data Feed Name: Feedstore;;Script Source: Discovery : ;;Disc overy - Arguments: {{25C432CE-2116-20C6-E7FE-A9C02AB5587B}} {{9FB919F0-15CB-EE1

8-D81A-7E44116D85A2}} {TK5CCPWEB01.redmond.corp.microsoft.com} {ITSECSEMSQL01} { specialSQLServerInstanceName} {0} {-7} {0} {day} {OPPROD} 00036 Information Health Service Script 8800 15:55:07 08/21/2011 Management Group: ;;Data Feed Name: ICEEmail;;Script Source: Discovery : ;;Disco very - Arguments: {{F478DF1E-FE4C-B58E-85F3-0CCCB0B61F5B}} {{9FB919F0-15CB-EE18 -D81A-7E44116D85A2}} {TK5CCPWEB01.redmond.corp.microsoft.com} {CO1ICESQL03} {spe cialSQLServerInstanceName} {0} {-3} {0} {day} {OPPROD} 00036 Information Health Service Script 7809 15:55:07 08/21/2011 Management Group: OPPROD;;Data Feed Name: FEP;;Script Source: Discovery : ;;End Discovery! 00036 Information Health Service Script 7801 15:55:07 08/21/2011 Management Group: ;;Data Feed Name: FEP;;Script Source: Discovery : ;;DiscoveryArguments: {{424A0913-8571-8694-BE69-F17D20A1619F}} {{9FB919F0-15CB-EE18-D81A7E44116D85A2}} {TK5CCPWEB01.redmond.corp.microsoft.com} {TK5TWCORKOSQL01} {OPPRO D} {specialSQLServerInstanceName} {0} {-6} {0} {Hour} 00036 Information Health Service Script 7601 15:55:07 08/21/2011 Management Group:OPPROD;;Data feed Name : Colossus.WebProxy;;Script Source: disc overy;;version:.26 : ;;arguments:;;{6A091D49-6CEF-C834-23D4-EFEB6AEA4D92};;{9FB9 19F0-15CB-EE18-D81A-7E44116D85A2};;TK5CCPWEB01.redmond.corp.microsoft.com;;OPPRO D;;TK5TWCORKOSQL01;;specialSQLServerInstanceName;;0;;-3;;-2;;day 00036 Information Health Service Script 7409 15:55:07 08/21/2011 Management Group: OPPROD;;Data Feed Name: SMS;;Script Source: Discovery : ;;End Discovery! 00036 Information Health Service Script 7401 15:55:07 08/21/2011 Management Group: ;;Data Feed Name: SMS;;Script Source: Discovery : ;;DiscoveryArguments: {{DC6CBA11-03EE-6D22-DE47-FF9387DD0991}} {{9FB919F0-15CB-EE18-D81A7E44116D85A2}} {TK5CCPWEB01.redmond.corp.microsoft.com} {TK5TWCORKOSQL01} {OPPRO D} {specialSQLServerInstanceName} {0} {-1} {0} {Day} 00036 Information Health Service Script 7209 15:55:07 08/21/2011 Management Group: OPPROD;;Data Feed Name: SER;;Script Source: Discovery : ;;End Discovery! 00036 Information Health Service Script 7201 15:55:07 08/21/2011 Management Group: ;;Data Feed Name: SER;;Script Source: Discovery : ;;DiscoveryArguments: {{402EFCD7-FBB9-74FC-7CB4-A67D31DED657}} {{9FB919F0-15CB-EE18-D81A7E44116D85A2}} {TK5CCPWEB01.redmond.corp.microsoft.com} {TK5TWCORKOSQL01} {OPPRO D} {specialSQLServerInstanceName} {0} {-1} {0} {Day} 00036 Information Health Service Script 7000 15:55:07 08/21/2011 Management Group: ;;Data Feed Name: WGIA;;Script Source: Discovery : ;;Discovery - Arguments: {{41759CB1-AEEF-83DB-F71D-C96DFF3C74F4}} {{9FB919F0-15CB-EE18-D81 A-7E44116D85A2}} {TK5CCPWEB01.redmond.corp.microsoft.com} {TK5TWCORKOSQL01} {spe cialSQLServerInstanceName} {0} {-1} {0} {day} {OPPROD}

00036 Information Health Service Script 6800 15:55:07 08/21/2011 Management Group: ;;Data Feed Name: RadiusWireless;;Script Source: Discovery : ; ;Discovery - Arguments: {{44683769-493F-02F9-1B30-91A7C45ACF04}} {{9FB919F0-15C B-EE18-D81A-7E44116D85A2}} {TK5CCPWEB01.redmond.corp.microsoft.com} {TK5TWCORKOS QL01} {specialSQLServerInstanceName} {0} {-1} {0} {day} {OPPROD} 00036 Information Health Service Script 6600 15:55:07 08/21/2011 Management Group: ;;Data Feed Name: RadiusVPN;;Script Source: Discovery : ;;Disc overy - Arguments: {{934BA53C-E0B3-23C6-2D34-36992B392609}} {{9FB919F0-15CB-EE1 8-D81A-7E44116D85A2}} {TK5CCPWEB01.redmond.corp.microsoft.com} {TK5TWCORKOSQL01} {specialSQLServerInstanceName} {0} {-1} {0} {day} {OPPROD} 00036 Information Health Service Script 6410 15:55:07 08/21/2011 Management Group: OPPROD;;Data Feed Name: DHCP;;Script Source: Discovery : ;;End Discovery! 00036 Information Health Service Script 6401 15:55:07 08/21/2011 Management Group: ;;Data Feed Name: DHCP;;Script Source: Discovery : ;;Discovery - Arguments: {{F088E781-2B8C-E94F-762F-396A8C529382}} {{9FB919F0-15CB-EE18-D81A -7E44116D85A2}} {TK5CCPWEB01.redmond.corp.microsoft.com} {TK5TWCORKOSQL01} {spec ialSQLServerInstanceName} {OPPROD} {0} {-2} {-1} {Day} {TK5TWCORKOAPP01} {specia lSQLServerInstanceName} {0} 00036 Information Health Service Script 6200 15:55:07 08/21/2011 Management Group: ;;Data Feed Name: OWA;;Script Source: Discovery : ;;Discovery - Arguments: {{26B1CF08-8F3A-E514-37D5-0D69DA3A47B7}} {{9FB919F0-15CB-EE18-D81A -7E44116D85A2}} {TK5CCPWEB01.redmond.corp.microsoft.com} {TK5TWCORKOSQL01} {spec ialSQLServerInstanceName} {0} {-1} {0} {day} {OPPROD} 00036 Information Health Service Script 15409 15:55:07 08/21/2011 Management Group: OPPROD;;Data Feed Name: ExchangeAV;;Script Source: Discovery : ;;End Discovery! 00036 Information Health Service Script 15401 15:55:07 08/21/2011 Management Group: ;;Data Feed Name: ExchangeAV;;Script Source: Discovery : ;;Dis covery- Arguments: {{E4EC4D10-0733-EE4D-5091-12BF4F242F92}} {{9FB919F0-15CB-EE1 8-D81A-7E44116D85A2}} {TK5CCPWEB01.redmond.corp.microsoft.com} {TK5TWCORKOSQL01} {OPPROD} {specialSQLServerInstanceName} {0} {-1} {0} {Day} 00036 Information Health Service Script 15309 15:55:07 08/21/2011 Management Group: OPPROD;;Data Feed Name: DA;;Script Source: Discovery : ;;End D iscovery! 00036 Information Health Service Script 15301 15:55:07 08/21/2011 Management Group: ;;Data Feed Name: DA;;Script Source: Discovery : ;;DiscoveryArguments: {{36FFD874-DA6E-5A40-5294-39A39C6579C7}} {{9FB919F0-15CB-EE18-D81A-7 E44116D85A2}} {TK5CCPWEB01.redmond.corp.microsoft.com} {TK5TWCACSDW01} {OPPROD} {specialSQLServerInstanceName} {0} {-1} {0} {Day} 00036 Information Health Service Script 15100 15:55:07 08/21/2011

Management Group: ;;Data Feed Name: FEP_DataCenter - EventLog;;Script Source: Di scovery : ;;Discovery - Arguments: {{FDBE5C90-A592-101E-53C0-E3BA0D66C533}} {{9 FB919F0-15CB-EE18-D81A-7E44116D85A2}} {TK5CCPWEB01.redmond.corp.microsoft.com} { TK5TWCORKOSQL01} {specialSQLServerInstanceName} {0} {-1} {0} {day} {OPPROD} 00036 Information Health Service Script 15000 15:55:07 08/21/2011 Management Group: ;;Data Feed Name: StagingURLIP;;Script Source: Discovery : ;;D iscovery - Arguments: {{B1586AE8-3291-F048-5137-DE8DC7F13195}} {{9FB919F0-15CBEE18-D81A-7E44116D85A2}} {TK5CCPWEB01.redmond.corp.microsoft.com} {TK5TWCSEMSQL0 1} {specialSQLServerInstanceName} {0} {-2} {0} {day} {OPPROD} 00036 Information Health Service Script 13000 15:55:07 08/21/2011 Management Group: ;;Data Feed Name: ARPCAM;;Script Source: Discovery : ;;Discove ry - Arguments: {{85CE65B1-87A9-79B1-923F-1338095FC7F9}} {{9FB919F0-15CB-EE18-D 81A-7E44116D85A2}} {TK5CCPWEB01.redmond.corp.microsoft.com} {TK5TWCORKOSQL01} {s pecialSQLServerInstanceName} {0} {-1} {0} {day} {OPPROD} 00036 Information Health Service Script 12701 15:55:07 08/21/2011 Management Group:OPPROD;;Application Name : Microsoft.NetSec.OPM.Applications.Ac countClass;;Script Source: discovery;;version:.26 : ;;arguments:;;{C89FF2B8-4445 -503C-7C52-1A53D2578B29};;{9FB919F0-15CB-EE18-D81A-7E44116D85A2};;TK5CCPWEB01.re dmond.corp.microsoft.com;;OPPROD;;[{application: 'AltCreds';usrs: [{ name: 'nsal tcre'; domain: 'redmond.corp.microsoft.com'; server:'nslab-ra-17';pwdExpAge:365} ]};{application: 'Banshee';usrs: [{ name: 'nsbansvc'; domain: 'redmond.corp.micr osoft.com'; server:'nslab-ra-17';pwdExpAge:365}]};{application: 'BIPS';usrs: [{ name: 'nsn'; domain: 'redmond.corp.microsoft.com'; server:'nslab-ra-17';pwdExpAg e:363}]};{application: 'Colossus';usrs: [{ name: 'nsnsfeed'; domain: 'redmond.co rp.microsoft.com'; server:'nslab-ra-17';pwdExpAge:365}]};{application: 'Cortana' ;usrs: [{ name: 'nscorsvc'; domain: 'redmond.corp.microsoft.com'; server:'nslabra-17;pwdExpAge:365'}]};{application: 'DB Exporter';usrs: [{ name: 'iceldrsv'; d omain: 'redmond.corp.microsoft.com'; server:'nslab-ra-17';pwdExpAge:365}]};{appl ication: 'Mongoose';usrs: [{ name: 'twcws'; domain: 'redmond.corp.microsoft.com' ; server:'nslab-ra-17';pwdExpAge:365};{ name: 'twcrmdev'; domain: 'redmond.corp. microsoft.com'; server:'nslab-ra-17';pwdExpAge:365}]};{application: 'Night Crawl er';usrs: [{ name: 'nsncsql'; domain: 'redmond.corp.microsoft.com'; server:'nsla b-ra-17';pwdExpAge:365}]};{application: 'Portshut';usrs: [{ name: 'nspssvc'; dom ain: 'redmond.corp.microsoft.com'; server:'nslab-ra-17';pwdExpAge:365}]};{applic ation: 'Priya';usrs: [{ name: 'twcws'; domain: 'redmond.corp.microsoft.com'; ser ver:'nslab-ra-17';pwdExpAge:365}]};{application: 'Report it now';usrs: [{ name: 'nsrptit'; domain: 'redmond.corp.microsoft.com'; server:'nslab-ra-17';pwdExpAge: 365}]}] 00036 Information Health Service Script 12000 15:55:07 08/21/2011 Management Group: ;;Data Feed Name: SearchSTAT;;Script Source: Discovery : ;;Dis covery - Arguments: {{56EAC0CF-5907-F008-2BBC-9AE3016278E7}} {{9FB919F0-15CB-EE 18-D81A-7E44116D85A2}} {TK5CCPWEB01.redmond.corp.microsoft.com} {NSLab-RB-30} {s pecialSQLServerInstanceName} {0} {-14} {1} {day} {OPPROD} 00036 Information Health Service Script 10101 15:55:07 08/21/2011 Management Group:OPPROD;;Data feed Name : IBU.BrowserUsage.Weekly;;Script Source : discovery;;version:.26 : ;;arguments:;;{A5041237-655A-3D7D-6BAE-7F957EC9309C}; ;{9FB919F0-15CB-EE18-D81A-7E44116D85A2};;TK5CCPWEB01.redmond.corp.microsoft.com; ;OPPROD;;NSLAB-RH-IBU;;specialSQLServerInstanceName;;0;;-7;;0;;day 00036

Information

Health Service Script

10001 15:55:07 08/21/2011 Management Group:OPPROD;;Data feed Name : IBU.BrowserUsage.Daily;;Script Source: discovery;;version:.26 : ;;arguments:;;{9C848252-8CD6-640A-71E0-CA388F8A5922};; {9FB919F0-15CB-EE18-D81A-7E44116D85A2};;TK5CCPWEB01.redmond.corp.microsoft.com;; OPPROD;;NSLAB-RH-IBU;;specialSQLServerInstanceName;;0;;-1;;0;;day 00030 Information OpsMgr Connector 21022 15:54:36 08/21/2011 No certificate was specified. This Health Service will not be able to communica te with other health services unless those health services are in a domain that has a trust relationship with this domain. If this health service needs to comm unicate with health services in untrusted domains; please configure a certificat e. 00030 Information OpsMgr Connector 20062 15:54:36 08/21/2011 Active Directory Integration has been enabled for management group OpsMgr07CORPM T04. 00030 Information HealthService 2012 15:54:35 08/21/2011 The Health Service successfully retrieved policy from Active Directory 00030 Information Health Service ESE Store 102 15:54:29 08/21/2011 HealthService (1792) Health Service Store: The database engine (6.00.6002.0000) started a new instance (0). 00029 Warning 2120 16:13:50 The Health Service has hich could not be sent

HealthService 08/11/2011 deleted one or more items for management group "OPPROD" w in 1440 minutes.

00025 Information HealthService 1201 19:29:28 08/19/2011 New Management Pack with id:"Microsoft.NetSec.OPM.Applications.AgentJobs"; versi on:"1.0.0.55" received. 00025 Information 1200 19:29:23 New Management Pack(s) 6 6F 84 A9 0A 38 15 D7

HealthService 08/19/2011 requested. Management group "OPPROD"; configuration id:"3 B0 31 68 2B 5F 5B 91 CA 9A D6 BC 7A ".

00024 Information HealthService 1204 23:41:00 08/19/2011 Management Pack with id:"Microsoft.SystemCenter.OperationsManager.DefaultUser"; version:"6.1.7221.0" is no longer used by HealthService and will be deleted from cache. 00023 Warning Health Service Script 6024 12:21:36 08/21/2011 LaunchRestartHealthService.js : Launching Restart Health Service. Health Service exceeded Process\Handle Count or Private Bytes threshhold. 00022 Information Health Service Script 6062 11:54:20 08/21/2011 RestartHealthService.js : Restarting Health Service. Service successfully restar ted. 00022

Information

Health Service ESE Store

103 11:53:51 08/21/2011 HealthService (1644) Health Service Store: The database engine stopped the insta nce (0). 00022 Error Health Service Modules 21400 14:27:09 08/21/2011 Failed to create process due to error '0x80070020 : The process cannot access th e file because it is being used by another process.;;'; this workflow will be un loaded. ;;;;Command executed: "C:\Windows\system32\cscript.exe" /nologo "Custo m.TaskScheduler2.Task.ServiceDiscovery.vbs" {6E1E14D0-B99F-DD2B-10F5-99698A9E694 3} {9FB919F0-15CB-EE18-D81A-7E44116D85A2} TK5CCPWEB01.redmond.corp.microsoft.com false;;Working Directory: c:\Program Files\System Center Operations Manage r 2007\Health Service State\Monitoring Host Temporary Files 150\1475\ ;;;;One or more workflows were affected by this. ;;;;Workflow name: Custom.TaskScheduler2 .Task.DiscoverByScript ;;Instance name: TK5CCPWEB01.redmond.corp.microsoft.com ; ;Instance ID: {9FB919F0-15CB-EE18-D81A-7E44116D85A2} ;;Management group: xitmon 00017 Error OpsMgr Connector 21006 07:15:10 08/21/2011 The OpsMgr Connector could not connect to TK5SCOMMG4MS2.redmond.corp.microsoft.c om:5723. The error code is 10060L(A connection attempt failed because the conne cted party did not properly respond after a period of time; or established conne ction failed because connected host has failed to respond.). Please verify ther e is network connectivity; the server is running and has registered it's listeni ng port; and there are no firewalls blocking traffic to the destination. 00014 Information Health Service ESE Store 701 11:00:01 08/21/2011 HealthService (1644) Health Service Store: Online defragmentation has completed a full pass on database 'c:\Program Files\System Center Operations Manager 2007\ Health Service State\Health Service Store\HealthServiceStore.edb'. 00014 Information Health Service ESE Store 700 11:00:00 08/21/2011 HealthService (1644) Health Service Store: Online defragmentation is beginning a full pass on database 'c:\Program Files\System Center Operations Manager 2007\H ealth Service State\Health Service Store\HealthServiceStore.edb'. 00011 Information OpsMgr Connector 21019 07:30:28 08/20/2011 OpsMgr has returned to communicating with it's primary host XITSQL08.redmond.cor p.microsoft.com 00008 Information Health Service Script 4002 10:00:09 08/20/2011 Microsoft.Windows.Server.LogicalDisk.DefragAnalysis.vbs : DefragAnalysis results (return code: 0)(disk: D:; computer: TK5CCPWEB01.redmond.corp.microsoft.com): O SRecommended = False; FilePercentFragmentation = 0. 00007 Error OpsMgr Connector 21016 16:33:33 08/18/2011 OpsMgr was unable to set up a communications channel to NSLAB-RA-17.redmond.corp .microsoft.com and there are no failover hosts. Communication will resume when NSLAB-RA-17.redmond.corp.microsoft.com is available and communication from this computer is allowed. 00006 Warning HealthService 1103 14:25:54 08/21/2011 Summary: 1 rule(s)/monitor(s) failed and got unloaded; 1 of them reached the fai lure limit that prevents automatic reload. Management group "OpsMgr07CORPMT04".

This is summary only event; please see other events with descriptions of unloade d rule(s)/monitor(s). 00006 Error HealthService 7000 22:51:17 08/08/2011 The Health Service could not log on the RunAs account FAREAST\mohsiny for manage ment group xitmon. The error is Logon failure: unknown user name or bad passwor d.(1326L). This will prevent the health service from monitoring or performing a ctions using this RunAs account 00004 Warning 7020 22:51:17 The Health Service has except those we could

HealthService 08/08/2011 validated all RunAs accounts for management group xitmon; not monitor.

00004 Information OpsMgr Connector 21017 07:24:56 08/20/2011 OpsMgr has successfully failed over to XITSUPPORTPC.fareast.corp.microsoft.com. 00004 Error OpsMgr Connector 21015 07:24:51 08/20/2011 OpsMgr was unable to set up a communications channel to XITSQL08.redmond.corp.mi crosoft.com. Communication will resume when XITSQL08.redmond.corp.microsoft.com is available and communication from this computer is allowed. 00004 Error HealthService 7015 22:51:17 08/08/2011 The Health Service cannot verify the future validity of the RunAs account FAREAS T\mohsiny for management group xitmon. The error is Logon failure: unknown user name or bad password.(1326L). 00002 Warning Health Service Modules 26013 15:54:59 08/21/2011 The Security Event Log on computer 'TK5CCPWEB01.redmond.corp.microsoft.com' appe ars to have "wrapped" or been cleared while the Windows Event Log Provider was not active or behind in processing events. This error occurs when the provider is inactive for a period of time in which more events are logged than the event log can contain or the log is cleared. Some events were likely lost. To avoi d this error in the future; make your event log larger or ensure that the agent service is not stopped for long periods. ;;;;One or more workflows were affecte d by this. ;;;;Workflow name: UIGeneratedMonitorb050255ec3bb4f0da11395c7819460a 9 ;;Instance name: TK5CCPWEB01.redmond.corp.microsoft.com ;;Instance ID: {9FB919 F0-15CB-EE18-D81A-7E44116D85A2} ;;Management group: xitmon 00002 Information Health Service Modules 26005 15:54:59 08/21/2011 The Windows Event Log Provider has resumed processing the Security event log on computer 'TK5CCPWEB01.redmond.corp.microsoft.com' after recovering from errors. ;;;;One or more workflows were affected by this. ;;;;Workflow name: UIGenerated Monitorb050255ec3bb4f0da11395c7819460a9 ;;Instance name: TK5CCPWEB01.redmond.cor p.microsoft.com ;;Instance ID: {9FB919F0-15CB-EE18-D81A-7E44116D85A2} ;;Manageme nt group: xitmon 00001 Warning Health Service Modules 26017 13:40:49 08/21/2011 The Windows Event Log Provider monitoring the Security Event Log is 31 minutes b ehind in processing events. This can occur when the provider is restarted after being offline for some time; or there are too many events to be handled by the workflow. ;;;;One or more workflows were affected by this. ;;;;Workflow name: U IGeneratedMonitorb050255ec3bb4f0da11395c7819460a9 ;;Instance name: TK5CCPWEB01.r

edmond.corp.microsoft.com ;;Instance ID: {9FB919F0-15CB-EE18-D81A-7E44116D85A2} ;;Management group: xitmon 00001 Warning Health Service Modules 10409 11:55:05 08/21/2011 Object enumeration failed;;;; Query: 'SELECT Name FROM Win32_ServerFeature WHERE Name = "Application Server Foundation"';; ;;HRESULT: 0x80041001 ;;Details: Gene ric failure;; ;;;;One or more workflows were affected by this. ;;;;Workflow nam e: Microsoft.Windows.AppServer.2008.Server.Discovery ;;Instance name: TK5CCPWEB0 1.redmond.corp.microsoft.com ;;Instance ID: {9FB919F0-15CB-EE18-D81A-7E44116D85A 2} ;;Management group: xitmon 00001 Information Health Service Modules 26018 13:40:49 08/21/2011 The Windows Event Log Provider monitoring the Security Event Log was previously behind in event processing and has now recovered. ;;;;One or more workflows were affected by this. ;;;;Workflow name: UIGeneratedMonitorb050255ec3bb4f0da11395c 7819460a9 ;;Instance name: TK5CCPWEB01.redmond.corp.microsoft.com ;;Instance ID: {9FB919F0-15CB-EE18-D81A-7E44116D85A2} ;;Management group: xitmon 00001 Information Health Service ESE Store 612 14:32:51 08/21/2011 HealthService (1760) Health Service Store: The database engine has successfully completed index cleanup on database 'c:\Program Files\System Center Operations M anager 2007\Health Service State\Health Service Store\HealthServiceStore.edb'. 00001 Information Health Service ESE Store 609 14:32:51 08/21/2011 HealthService (1760) Health Service Store: The database engine is initiating ind ex cleanup of database 'c:\Program Files\System Center Operations Manager 2007\H ealth Service State\Health Service Store\HealthServiceStore.edb' as a result of a Windows version upgrade from 6.0.6001 SP1 to 6.0.6002 SP2. This message is inf ormational and does not indicate a problem in the database. 00001 Information Health Service ESE Store 302 12:22:35 08/21/2011 HealthService (3840) Health Service Store: The database engine has successfully completed recovery steps. 00001 Information Health Service ESE Store 301 12:22:24 08/21/2011 HealthService (3840) Health Service Store: The database engine has begun replayi ng logfile c:\Program Files\System Center Operations Manager 2007\Health Service State\Health Service Store\edb.log. 00001 Information Health Service ESE Store 300 12:22:16 08/21/2011 HealthService (3840) Health Service Store: The database engine is initiating rec overy steps. 00001 Error Health Service Script 6061 12:22:38 08/21/2011 RestartHealthService.js : Restarting Health Service. Failed to restart service. ******************************************************************************** ******************** * Note: W2k3 = first occurrence, W2k8+ last occurrence

Recommendations: (sorted on priority) 1 * : Check working set in detailed report, some applications were consum ing excessive memory: java.exe, 1 * : Ipak needs addressing: Older then N-2: WIN2008SP2:Build 6.2.33.0 1 * : unexpected version: bxnd60a.sys Driver needs to be updated 1 * : unexpected version: bxvbda.sys Driver needs to be updated 2 * : Check with Site Services to see if RMB is available for this system 3 * : Service/s set to automatic but not started detected:TPM Base Servic es,