Implementing TLS 1.2 enforcement with SCOM

    Quicklinks:  Download Script  Download Management Pack   This is a requirement that I see is picking up steam with customers.  Customers are getting told by their security teams that they need to support their application and database servers using TLS 1.2 only, and no previous protocols enabled for SCHANNEL communications.   The good…

1

Deleting and Purging data from the SCOM Database

    First, I have to begin with a disclaimer – Microsoft does not support customers manually editing the database, unless under the guidance of a Microsoft support engineer with a support case. However, I have seen several blogs now “leaking” this guidance I send out or use from time to time…. so it is…

2

UR5 for SCOM 2016 – Step by Step

  KB Article for OpsMgr:  https://support.microsoft.com/en-us/help/4090987/update-rollup-5-for-system-center-2016-operations-manager Download catalog site:  http://www.catalog.update.microsoft.com/Search.aspx?q=4090987 Updated UNIX/Linux Management Packs:  https://www.microsoft.com/en-us/download/details.aspx?id=29696 Recommended hotfix page:  https://blogs.technet.microsoft.com/kevinholman/2009/01/27/which-hotfixes-should-i-apply/     NOTE:  I get this question every time we release an update rollup:   ALL SCOM Update Rollups are CUMULATIVE.  This means you do not need to apply them in order, you can always just apply…

9

Monitoring AD Certificate Services on Windows Server 2012 R2 and Windows Server 2016

  We have management packs for Active Directory Certificate Services on Windows 2012R2 and Windows 2016.  WS 2012 and 2012R2:  https://www.microsoft.com/en-us/download/details.aspx?id=34765 WS 2016:  https://www.microsoft.com/en-us/download/details.aspx?id=56671   However, there is an issue with the recently released ADCS MP for WS 2016.  A change was made in the library MP which modified some class property names.  This breaks…

2

What versions of SCOM can be upgraded to Operations Manager 1801?

    If you would like to move your SCOM deployment on to the Semi-Annual Channel, what versions does Microsoft support moving from? The answer is here:  https://docs.microsoft.com/en-us/system-center/scom/plan-system-requirements?view=sc-om-1801#supported-coexistence   There are two methods to get to SCOM 1801: Migration (parallel install with coexistence) In Place Upgrade Both are supported.   System Center Operations Manager 1801…

4

Operations Manager 1801 – Quickstart Deployment Guide

  There is already a very good deployment guide posted on Microsoft Docs here:   https://docs.microsoft.com/en-us/system-center/scom/deploy-overview?view=sc-om-1801   The following article will cover a basic install of System Center Operations Manager 1801.   The concept is to perform a limited deployment of OpsMgr, only utilizing as few servers as possible, but enough to demonstrate the roles and capabilities. …

10

Operations Manager 1801 is available!

    This is a major change from all previous versions of SCOM.  Operations Manager 1801 is the first release of SCOM built on the Semi-Annual Channel release cycle.  All new features and updates will now be delivered in this Semi-Annual Channel (SAC), following the same Semi-Annual release cycle that Windows Server is using.   …

0

Using Hashtables in your SCOM scripts

    When we work with getting data out of SCOM via PowerShell, or building automations, something that can really help speed things up are Hashtables.   I was recently working with a customer to build a discovery for a new class, and get properties from other existing classes.  I had to build an array…

3

VSAE now supports Visual Studio 2017

  System Center Visual Studio Authoring Extensions (VSAE) has been updated for VS2017   https://www.microsoft.com/en-us/download/details.aspx?id=30169   Read more about it here:  https://blogs.technet.microsoft.com/momteam/2017/12/01/system-center-visual-studio-authoring-extensionvsae-support-for-visual-studio-2017/   You voted.  Microsoft responded.  This had over 700 votes on Uservoice: https://systemcenterom.uservoice.com/forums/293064-general-operations-manager-feedback/suggestions/18560653-updated-vsae-to-support-visual-studio-2017   Version 1.3.0.0 is released on 11/29/2017. 

2

UR14 for SCOM 2012 R2 – Step by Step

    KB Article for OpsMgr:  https://support.microsoft.com/en-us/help/4024942/update-rollup-14-for-system-center-2012-r2-operations-manager Download catalog site:  http://www.catalog.update.microsoft.com/Search.aspx?q=4024942 UNIX/Linux Management Packs:  https://www.microsoft.com/en-us/download/details.aspx?id=29696   NOTE:  I get this question every time we release an update rollup:   ALL SCOM Update Rollups are CUMULATIVE.  This means you do not need to apply them in order, you can always just apply the latest update.  If you…

20

Alerting on SNMP traps in SCOM – Without discovering the SNMP Device

  Well, sort of, anyway.    I have written on SNMP monitoring in SCOM a few times: https://blogs.technet.microsoft.com/kevinholman/2011/07/20/opsmgr-2012-discovering-a-network-device/ https://blogs.technet.microsoft.com/kevinholman/2015/02/03/snmp-trap-monitoring-with-scom-2012-r2/ https://blogs.technet.microsoft.com/kevinholman/2015/12/16/how-to-discover-a-windows-computer-as-a-network-device-in-scom-2012/ https://blogs.technet.microsoft.com/kevinholman/2016/04/20/writing-a-custom-class-for-your-network-devices/   This one will be a little different. One of the challenges I have heard many times with SCOM – is that we must discover a network device, in order to monitor or receive…

5

UR4 for SCOM 2016 – Step by Step

    KB Article for OpsMgr:  https://support.microsoft.com/en-us/help/4024941/update-rollup-4-for-system-center-2016-operations-manager Download catalog site:  http://www.catalog.update.microsoft.com/Search.aspx?q=4024941 Updated UNIX/Linux Management Packs:  https://www.microsoft.com/en-us/download/details.aspx?id=29696 Recommended hotfix page:  https://blogs.technet.microsoft.com/kevinholman/2009/01/27/which-hotfixes-should-i-apply/     NOTE:  I get this question every time we release an update rollup:   ALL SCOM Update Rollups are CUMULATIVE.  This means you do not need to apply them in order, you can always just…

39

Using SCOM AD integration – but with a CMDB instead of LDAP wizards

    AD integration has been around since SCOM 2007 first shipped.  The concept is simple – the ability to deploy agents as part of a build process to the OS, but with the SCOM agent left un-configured.  Then the SCOM agent checks with Active Directory in its local domain, and received management group and…

1

How to create a SCOM group from a SQL CMDB Query

    I wrote an example of this a long time ago.  I was never happy with it, as it was VBScript based, hard to troubleshoot, and required lots of editing each time you wanted to reuse it.  It was also error prone, and didn’t work if the SQL query results contained computers that didn’t…

11

Please take this SCOM survey – make your voice heard!

  The SCOM Product Group is looking for YOUR feedback. Please respond to the survey: https://aka.ms/scomsurvey   System Center is changing.  We are aligning to the Windows Server Semi-Annual Channel update process, which will provide for frequent and continuous releases.  (see announcement​ here.) Because of this – the SCOM product team would love to hear…

6

SCOM 2016 now supports SQL 2016 SP1

    SQL 2016 Service Pack 1 is now supported for SCOM 2016 deployments. https://docs.microsoft.com/en-us/system-center/scom/plan-sqlserver-design#sql-server-requirements   There is no Update Rollup level requirement for this.  You can deploy SCOM 2016 in new deployments on SQL 2016 SP1, and you may upgrade existing deployments to SQL 2016 SP1.

0

Demo SCOM Script Template

    I thought I’d take a moment to publish my SCOM script template. Whenever I am writing a SCOM script for monitoring, discovery, or automation, there are some “standards” that I want in all my scripts.   1.  I personally feel that all script running in SCOM should at the MINIMUM log at script…

5

Event 18054 errors in the SQL application log – in SCOM 2016 deployments

    When SCOM is installed – it doesn’t just create the databases on the SQL instance – it adds data to the sysmessages view for different error scenarios, to the Master database for the instance. This is why after moving a database, or restoring a DB backup to a rebuilt SQL server, or when…

0

How to create a SCOM group from an Active Directory Computer Group

    There have been a bunch of examples of this published over the years.  Some of them worked well, but I was never happy with many of them as they were often vbscript based, hard to troubleshoot, and required lots of editing each time you wanted to reuse them.  Many were often error prone,…

9

Monitoring for Time Drift in your enterprise

    Time sync is critical in today’s networks.  Experiencing time drift across devices can cause authentication breakdowns, reporting miscalculations, and wreak havoc on interconnected systems.  This article shows a demo management pack to monitor for time sync across your Windows devices. The basic idea was – to monitor all systems and compare their local…

0