An approach to automate SCOM service account password change – part 2/3: prerequisites and execution steps

This is part two of my little blog series about how to change SCOM service accounts. In part one I talked about the challenges and the overall process. This part explains the necessary prerequisites and steps to perform the automated password change. Prerequisites So what prerequisites do we need and why? Software (on a workstation…


An approach to automate SCOM service account password change – part 1/3: background and process

Changing SCOM Service account passwords can be challenging and complex. MVP Marnix Wolf has written an excellent blog post about all necessary steps we have to take to change passwords in all the different locations like AD, Windows OS (Service), RunAs accounts, SQL Reporting configuration etc. But as SCOM is a powerful and mighty tool…


Quick note from the field: SDK/DAS Service account needs SCOM admin role membership

Configuring a high secure SCOM Management Group with the least amount of privileges possible can be challenging. Thanks to my colleagues Kevin Holman and Sergio Carrilho there is an excellent document which describes all accounts and their required access rights: SCOM Security Account Matrix Please be aware, that you also assign the SDK/DAS service account…


Quick note from the field: Access rights for set-scomlicense

Just in case you try to set a license for a SCOM Management Group with set-scomlicense and the Cmdlet hangs forever:Make sure that you execute set-scomlicense in an elevated Shell: On a SCOM Management Server (preferably the RMS emulator) With a user account that have this access rights: local Admin rights on the Management Server…


OpsMgr MP version number format – issue with mpseal.exe

Today I tried to seal a MP but got a strange error from mpseal.exe: Attempting to seal ManagementPack file: MyMP.xml: Failed with the following compiler errors during assembly creation: c:\Users\Dirk\AppData\Local\Temp\a7ohotqr.0.cs(3,30) : error CS0647: Error emitting 'System.Reflection.AssemblyVersionAttribute' attribute — 'The version specified '10.4.2013.2015040901' is invalid' Hmm, strange, the MP could be imported into the Management Group…


The book I always wanted to write

As my blog title “Operating Operations Manager” says, I focus on giving hints and tips on how to operate OpsMgr. My dream has always been to collect all my experiences and best practices and put them all together in a book. This dream has been somehow destroyed today *smile* Three highly respected colleagues have already…


Analyzing running workflows on a SCOM Agent (HealthService)

Today I was asked: How do I get a usable list of all workflows running on a SCOM Agent? That’s easy, I thought: that’s why we have the built-in task “Show Running Rules and Monitors for this Health Service” for:   Unfortunately, the output is not really easy to understand and to process. Therefore I…

2

How to verify that all Management Packs in a SCOM Management Group are up-to-date?

Have you checked your Management Groups lately if they contain the most current sealed Management Packs? How do you that? Easy task, isn’t it? Simply use the SCOM console to verify your MPs against the Microsoft online MP Web catalog and you are done! The problem Hmm, is it really that simple? Unfortunately I don’t…

2

Removing SCOM workflows via PowerShell and SDK

This is just a short post about how to remove SCOM workflows (Rules,Monitors and Overrides) via PowerShell. As you may have noticed, our OpsMgr PowerShell module provides several Cmdlets  for GETting workflows, but not for removing them: So, how do we remove a workflow? If you know the correct methods and how to use them,…