OpsMgr 2012: Configure notifications

<!--[if lt IE 9]>


Comments (64)
  1. Kevin Holman says:

    @Andy – My understanding is that the connector framework has not changed so your custom connectorsa should just work.  You should test, however, to ensure that there is no back compat issue with your SDK commands custom to your connector.

  2. David Flores Zafra says:

    Saludos, Kevin Holman

    He realizado todos los pasos que indicas en tu tutorial y me sigue saliendo este error.

    Notification subsystem failed to send notification using device/server ‘outlook.latam.telefonica.corp’ over ‘Smtp’ protocol to ‘consolasccm.fija.pe@telefonica.com’. Microsoft.EnterpriseManagement.HealthService.Modules.Notification.SmtpNotificationException: Failure sending mail. –> Unable to connect to the remote server –> No connection could be made because the target machine actively refused it Smtp status code ‘GeneralFailure’. Rule id: Subscription6cd8df94_a9c8_4721_9f13_ee48c23ae340

    Otro error que muestra también es:

    Notification subsystem failed to send notification over ‘Smtp’ protocol to ‘consolasccm.fija.pe@telefonica.com’. Rule id: Subscription6cd8df94_a9c8_4721_9f13_ee48c23ae340

    Le solicito si me puede apoyar a resolver este caso, para ello brindo los siguientes datos que he realizado,

    Al utilizar el comando PING al “outlook.latam.telefonica.corp” me muestra que no hay respuesta o tiempo de espera agotado para esta solicitud.

    Agradecere a interpretar es error que me muestra esos dos mensajes y así poder buscar una solución, cuyo objetivo es que me permita enviar notificaciones de alertas a mi Correo.


    1. Joel M. says:

      Hi, @David Flores Zafra encontraste la solucion? Podrias ayudarme porfavor? Tengo el mismo error pero con el servidor GMAIL. Gracias, espero tu respuesta porfavor.

  3. Kevin Holman says:

    @Samir – I cannot say – it depends on how your SMTP server is configured.  Best to get with your Exchange admins.

  4. También utilice : http://sourceforge.net/projects/smtpclient/files/ y desde este equipo recibo mail sin problemas son de la herramienta de notificación de SCOM 2012 – Responder : jecavallin@hotmail.com

  5. Also use: http://sourceforge.net/projects/smtpclient/files/ and receive mail from this computer without problems are the notification tool SCOM 2012

  6. Kevin Holman says:

    @DH –

    The notification account is only used on a single management server that is part of the notifications resource pool… whichever MS happens to own the notification role.  It is the only management server that connect to exchange.  You do not distribute the notification account to gateways… their alerts flow into a management server queue, then they are inserted into the database, then a notification workflow runs on a set frequency and looks for alerts matching notification criteria, and sends notifications.  If there is something different or unique about alerts coming from agents behind gateways – that is based on the configuration of those servers.

  7. Hi Kevin, I tell him that I have a setup like this on the way to spend it publishes. Retail Version 2012 Version 7.0.8560.0.
    The mail server is Lotus Notes. Perform all the checks are correct, for example Talnet port 25.
    But do not send emails. I can tell you can configure a cone event generation? thank you very much

  8. Kevin Holman says:

    @DC – I haven’t – I just cant always answer all the blog questions in a timely manner. These are busy days for a PFE in the field! Blog comments are not just for the blog owner to answer questions – this is for the community to answer questions as well.

    @Timothy – no – there is no audit log. There are many blog posts about this topic with some ideas, like using command channel notification to create a log, or sending a copy of all notifications to a test mailbox for inspection. The logging would be at the
    SMTP layer.

  9. Anonymous says:

    How to configure smtp.gmail.com for outbound alerts/notifications in SCOM 2012?

  10. Anonymous says:

    Hi Kevin!

    I have been following your blogs and they are simply excellent!! 🙂

    One of the issues w.r.t notifications I found was- I have 2 SCOM 2012 environments (PROD- with UR2 and DEV-RTM and  both notifications setups are exact replica) I am getting alerts for DEV and not for PROD. All my mail server settings are fine. Do you think this could be an issue with UR2?

    Thanks and regards,


    System Center Consultant

  11. Anonymous says:

    Hi Kevin

    My customer has configured the Authentication method for SMTP as Anonymous in Channel.

    Also not created Domain User account, Run As Account & Run As Profile.

    The current configuration is without Run As Account & Run As Profile & running fine, received notification mails.

    It means if Authentication method for SMTP is Anonymous then in that case no need to have Domain User account & no need to create Run As Account & then Run As Profile.

    The Run As Account & Run As Profile need to create when selected Windows Integrated as Authentication method.

    kindly reply



  12. Kevin Holman says:

    @Rick – same as in SCOM 2007 – use groups, different subscriptions, different criteria, different subscribers, different schedules.

  13. Anonymous says:


    Can someone advise on how to stop the email notifications at every polling interval?

    I have configured a disk utilization alert and specified the interval frequency as 5 minutes.

    I am receiving email notifcations at every polling interval and this is causing too many mail triggers.

    Please advise!




  14. andyinsdca says:

    Do internal connectors still run the same? What system actually runs the bits for an internal connector?

  15. Rick says:

    Kevin, thanks for the info, how would one set up multi-level notifications??  I need my notifications to alert at different times based off different info..

  16. klauss says:

    How to configure smtp.gmail.com for outbound alerts/notifications in SCOM 2012?

  17. Ismail says:

    Hi Kevin,

    We are trying to setup notifications for a client, we are running though issues. The client is using the below.

    SMTP:  externally hosted exchange

    User name and password- need to be authenticated using SSL

    Now when we configure the Alerts, the notification fail due to TLS not authenticating. I followed the steps you mentioned above. It does not seem to work. Can you please let me know to get around this.



  18. Ismail says:

    Sorry forgot to mention, the Port bieng used is a custom port number. Not the regular SMTP.

    Authentication: SSL


    Exchange- Externally hosted.

  19. SAMIR FARHAT says:

    Excellent post Kevin, you give excellent blogs.

    I want to use a notification account that doesn't have a mailbox (Exchange 2010).

    What are the minimal rights (where to find them) to allow the account to connect to the SMTP Exchange Server.


    Samir FARHAT, Infrastructure Consultant

  20. sugu says:

    Can i send the output of the command as a notifications  via email in SCOM?

    e.e gpresult in command line

  21. Warren says:

    Is there anything different that needs to be done to get SMS notifications via a modem working with OM2012? After we upgraded our sms's stopped sending.

  22. davide says:

    Hi Kevin I'm configuring the notification for SCOM 2012 Sp1. The scenario is: a command channel and an SMTP channel… I also have configurated the Subscribers and the subscription one for command and one for SMTP. Where's the problem now? If I enable all the subscription everything work but if i set on my command subscription to use command and smtp channel, mail stop to arrive to my mailbox when new alert is generated. Do U know if is there some problem about this?



  23. Gareth Davies says:

    Hi Kevin,

    I am looking to implement a tiered notification, with escalation..so for example..

    Initial alert hits Email Group

    Unresolved after 30 mins text sent to on call engineer

    Unresolved after a further 60 mins all engineers receive text

    Is this possible to configure in scom 2012 sp1?



  24. Shahin Choudhury says:

    Hi Kevin,

    A thing about the Notification Channel format. Printing Priority and Severity does not necessarily translate into the user friendly string format. I expected like 'Low' or 'High'  to be printed for Priority or severity being 'Warning' or 'Error'. Instead when I add the following text into my channel format for Severity: $Data[Default='Not Present']/Context/DataItem/Severity$, I get 2 for error, 1 for Warning and 0 for Information. Same issue with Priority as well.

    I want to know if this is by design or can we somehow translate the numbers into user friendly string format. It helps for our support engineers to prioritize their work.

    Thank you,


  25. DH says:

    Hi Kevin, great post as always, I do have a question though and it is probably a stupid one. We have everything set up and working for notifications internally and we have 2 remote domains that send notifications in via Gateway servers. The internal notifications are fine but the external ones have the date set in American format. I did some reading and it was suggested that I should log on to the management server using the notification account but this would seem silly since the internal ones work fine.

    The question is, do I have to set up a new notification account from each of the external domains and add them as a user in Exchange or can I use the internal notification account and distribute the credentials to the external Gateway servers? I'm just a bit unclear on the authentication across external domains.

  26. JStar73 says:

    Are there some restrictions who can or cannot view the hyperlinks with in the emails?

    How are these configured, I have setup the Read-Only Operators, within the User Roles, however my users are still getting 403 errors?  My SCOM Admins open up the links without any problems at all.


  27. Miguel Mota says:

    Hello Kevin,

    I'm trying to configure the notifications alerts from SCOM 2012, but i keep getting the error "Client not authenticated".

    I'm not using Exchange, i'm using an third part software smtp server just to relay to Office365 smtp server. I've configured everything right (RunAsAccount, RunAsProfile, Channels, Subscribers and Subscriptions).

    Could you please help me on this one?

  28. gowdhaman says:

    Kevin, I wonder why there is no option to subscribe for alerts associated with particular agent (path). Instead we need to create a group for bunch of objects for which we need subscriptions. This ends up in multiple group creation for multiple customers and finally a big mess. I'm currently using a powershell to notify based on path parameter but I like to have it as inbuilt feature. Please let me know if it makes sense…

  29. Anonymous says:

    Pingback from SCOM QUICK Install | config.re

  30. Bettra says:

    Hi Kevin.

    I want to send notifications using SCOM 365 office, configure the relay and configure notifications following your blog, but notifications do not work.

    The error is: Notification subsystem failed to send notification over ‘Smtp’ protocol to ‘user@domain.com’

    Notification subsystem failed to send notification using device / server ‘smtp.office365.com’ over ‘Smtp’ protocol to ‘user@domain.com’.

    help me!
    Thank you

  31. Anonymous says:

    С принятием Федерального закона Российской Федерации от 21.07.2014г. № 248-ФЗ «Об исчислении времени»

  32. Anonymous says:

    С принятием Федерального закона Российской Федерации от 21.07.2014г. № 248-ФЗ «Об исчислении времени»

  33. Hi Kevin,
    I have a subscriber to receive alerts between specified time (schedule time) for some particular services if they are stopped. I am wondering if other services also get this setting, that if other services stop, then alerts for these other services alert only
    during the schedule time and no alerts during unschedule time, which I do not want, the other services should be alerted all time, except the ones which are configured during schedule period


  34. Anonymous says:

    Обновление от 09.10.2014: В данную статью внесены дополнения, в связи с выпуском пакета обновлений KB2998527

  35. Timothy Francis says:

    Is there an audit log for notifications in SCOM 2012? I am constantly hounded by users saying "I didn’t get my email on the alert". In SCOM 2007 R2 I included myself on every email for this very reason. Very inefficient. Are there any improvements to report?

  36. DC says:

    I’m thinking Kev’s moved on….

  37. Delay Notifications says:

    If I understand it right , using a Subscriber Schedule (or extra Schedule on used channel for a subscriber) the mail/SMS will only be sent when the event condition occurs within that time frame. How to make sure that an event that occurs earlier but the
    error-condition still exists at the start of aschedule window will be sent ?
    Or in short : how to masks events but to reports all open events to time-frame 5am-11pm e.g ?

  38. Noah says:

    Excellent walkthrough of the topic, thanks. I was looking for a way to send SMS texts and voice calls from SCOM alerts and ended up creating a PowerShell script to do this. If anyone is looking for something similar, it’s available for download with docs
    and videos here:

  39. Kyle says:

    Anyone else having trouble setting this up for office365 SMTP Servers?

  40. Amar says:

    Hi Kevin,

    We have a SCOM 2012 SP1 environment. We have 6 management servers and all of them are in the notification resource pool as the membership is still set to automatic. One day the email notifications stopped working and they started working after i flushed the
    health service state on the RMS emulator. All other servers in the pool were healthy, except for the RMS emulator which was greyed out.

    Why would the notification stop working if only the RMS emulator was greyed out. Notifications should have continued to work, because other servers in the pool were healthy. Is there still some kind of dependency on the RMS emulator ?

  41. Joachim Luengas says:

    Please, somebody: How to configure smtp.gmail.com for outbound alerts/notifications in SCOM 2012?

  42. Ron says:

    How to create a notification when my server is now up.

  43. Surya says:

    Hi Kevin,
    How can we send email to multiple address in ‘To’ in the email. We added different addresses in Subscribers but it still sends as different emails like To:’someteam@some.com’ and another email as To:’anotherteam@another.com’. I want it as To:’someteam@some.com;anotherteam@another.com’

  44. Hi Kevin,

    How do I make sure that an alert which was triggered was sent to the subscriber successfully from SCOM without inspecting the subscriber.?

    Aakash Saxena

  45. Steve LaPlace says:

    Good morning;
    I followed your instruction to the tee. I need a little bit more functionality but it not working for me. Conditions “with specific text in the description”— if I need to match the following text string “Event Description: The following alarm: SLA_MISSED_END” what should the Text String input look like? I’ve different inputs but no luck. Thanks!

  46. Derik Petrillo says:

    We have Scom 2012 R2 and my co worker thought originally we would see continuous alerts from SCOM for heartbeat failures, but I thought that was not the case. Upon looking back through our emails I do not see continuous alerts being generated on Heartbeat failures… Is there a way to keep getting heartbeat alerts until the Client is back online? I do not see this option anywhere and i am not finding info online about it.

  47. Morning, so I am getting the basic same errors posted below.
    Failed to send notification over ‘Smtp’ protocol to ’emailaddress’. See previous messages for device-specific errors One or more workflows were affected by this. Workflow name: Subscriptionc8981159_2b8d_481e_8090_6dfe4dca6b35 Instance name: Alert Notification Subscription Server Instance ID: {E07E3FAB-53BC-BC14-1634-5A6E949F9230} Management group: SCOM

    Failed to send notification using device/server ‘mailaddress’ over ‘Smtp’ protocol to ‘phonenumber@txt.att.net’. Exception ‘Microsoft.EnterpriseManagement.HealthService.Modules.Notification.SmtpNotificationException’: Failure sending mail. –> Unable to read data from the transport connection: net_io_connectionclosed.. Smtp status code ‘GeneralFailure’ One or more workflows were affected by this. Workflow name: Subscription70268946_214a_49a5_b2e3_3b801db35787 Instance name: Alert Notification Subscription Server Instance ID: {E07E3FAB-53BC-BC14-1634-5A6E949F9230} Management group: SCOM

    However, our Exchange mail relay/pool is set to allow “anonymous” connections over port 25. Firewall rules setup to acclow SCOM Mgmt servers to comminicate over this port. These message pop up sporadically, most of the emails get through but some do not.
    would I configure the notifications account to use ananymous with no password to resolve the issue?
    Thanks as always for sharing your knowledge and assistance!

    1. Rajesh says:

      @Tony Strother
      can you advise if you were able to fix the mail delivery issue with scom. am facing the same issue right now, would require some assistance

      we have recently implemented SCOM 2016 server and since then we are unable to get any notification from SCOM

      our scom servers are joined in domain “A” and SMTP firewall port 25 opened against mail server and telnet is working

      our mail server are joined in domain “Q”.

      we have successfully created a SMTP channel , subscriber and subscriptions. but if any alert generates we are getting below events in console and email is not triggered by SCOM. for confirmation i sent a test email using powershell it delivered to my mail.

      can you advise is there something we need to look if we have scom and smtp server in different domain. any run as accounts to be used? our smtp server uses Anonymous access. kindly advise.

      Telnet to SMTP server looks like : 220*********************************

      1) Notification subsystem failed to send notification over ‘Smtp’ protocol to ‘MY EMAIL ADD’. Rule id: Subscription6930339c_2676_4749_aea4_caedea3cd0a7

      2)Notification subsystem failed to send notification using device/server ‘DOMAIN Q SMTP SERVER’ over ‘Smtp’ protocol to ‘MY EMAIL ADD’. Microsoft.EnterpriseManagement.HealthService.Modules.Notification.SmtpNotificationException: Failure sending mail. –> Unable to connect to the remote server –> A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond smtpserverip:25. Smtp status code ‘GeneralFailure’. Rule id: Subscription6930339c_2676_4749_aea4_caedea3cd0a7

      1. >>Morning Rajesh: No, I have not been able to fix it, very frustrating!!. The issue is sporadic! Our parent State IT Department controls/host the smtp servers/exchange server environment, we have network/server level firewall rules in place that allow servers to communicate via SMTP, Port 25, “anonymously” to these servers. We use an FQDN for the “smtp server pool”. I t was all working without issue until a few months back I cannot seem to put my finger on what the issue is. I have spoken and have gotten logs/traces from our local and State IT department that confirms there are no denies occuring, I can run the powershell “Test-NetConnection outbound.mail.nc.gov -port 25 -InformationLevel Quiet” and it comes back TRUE everytime. The issue occurs with random subscriptions and subscribers, random times during the day/evening. We have quite a few subscriptions due to the critical nature of some of our services. I have added these keys to each of the Mgmt Servers that are in the Notifications Resource Pool per a document I read, does not appear to be helping. HKLM\Software\Microsoft\Microsoft Operations Manager\3.0\Modules\Global\Command Executer\AsyncProcessLimit with a decimal value of 10. I started at 10 since I was seeing error msgs that that threshold had been exceeded, went to 15, saw the same, and am now at 20. This setting produces a performance hit on your mgmt servers so be cautious with it. I have not seen a msg yet that that limit has been reached, so keeping it there for now. I have been scouring the internet looking for a resolution but so far, no success. Anyone else reading this I could certainly use inout/assistance. I have a support ticket currently open with Microsoft and they have yet to nail down what the issue is.

        1. Morning, here is another sample of what I am seeing:
          Notification subsystem failed to send notification over ‘Smtp’ protocol to ‘address@ncdot.gov’. Rule id: Subscription37ce7ce0_5c8d_433d_8421_31dd74044a72
          Notification subsystem failed to send notification using device/server ‘outbound.mail.nc.gov’ over ‘Smtp’ protocol to address@ncdot.gov‘. Microsoft.EnterpriseManagement.HealthService.Modules.Notification.SmtpNotificationException: Error in processing. The server response was: 4.3.2 Please try again later. Smtp status code ‘LocalErrorInProcessing’. Rule id: Subscriptionc8981159_2b8d_481e_8090_6dfe4dca6b35


  48. Afternoon, Question on Notifications Resource Pool and All Management Servers Resource Pool- I have two Mgmt Servers in my Prod environment- should I have both servers in both pools? I ask becasue I have a about 6 fairly good size criteria in a number of the subscriptions so I wonder if that is competing for/impacting resources when it it comes to notifications? Also, as an aside, should I have the 550ish servers I currently monitor on only one of the mgmt servers or spread evenly across both? I have read competing blog info as well as gone through Microsoft sizing tool, which suggest up to 1000 agents on one Mgmt Server, using the other for HA and up to 10 SDK/Console user access????
    Thanks in advance for the assistance!

    1. Kevin Holman says:

      Yes – you should include all management servers in each of those two pools, when you only have two management servers. Two MS plus the default observer gives workflows hosted by those pool to have high availability. If you only put one MS in a pool, that MS because a single point of failure.

      The criteria of your subscriptions is irrelevant to anything related to pools.

      Generally speaking in SCOM 2012+, you should spread your agent load across management servers. The sizing documents are very generic. The environment will best be load balanced when you balance your agents across each MS. That said – with only 550 agents, it really doesn’t matter much.

      1. Afternoon and thank you for the info! I have been battling this notification failure issue for apprx 3-4 months now. MS tells me SCOM is working fine. My Exchange Group tells me Exchange and the SMTP pool is working fine. Something is not fine somewhere..
        Continuing to explore.
        Thanks as always!

        1. Kevin Holman says:

          When you get something like this – that is totally a problem with the SMTP server, as the SMTP server is literally responding with an error:

          Notification subsystem failed to send notification over ‘Smtp’ protocol to ‘address@ncdot.gov’. Rule id: Subscription37ce7ce0_5c8d_433d_8421_31dd74044a72
          Notification subsystem failed to send notification using device/server ‘outbound.mail.nc.gov’ over ‘Smtp’ protocol to address@ncdot.gov‘. Microsoft.EnterpriseManagement.HealthService.Modules.Notification.SmtpNotificationException: Error in processing. The server response was: 4.3.2 Please try again later. Smtp status code ‘LocalErrorInProcessing’.

  49. Ashish says:

    Hi Kevin,
    Email notifications sent to the multiple subscribers however it shows only one address in the TO field.We got this checked with exchange team and they told us that it is sending individual emails.Can’t we make some setting so that it will show all the addresses in TO field of the emails of the notifications sent?


  50. Daniel says:

    is there any diffrence configuring the notification to work between exchange 2013 to exchange 2007?

  51. Kittu says:

    Hi Kevin,

    I have an Issue with Notification Resource Pool. Out of four MS those all are members of Notification pool , always a single MS is sending all Notification & when It Went down Notification Stops. Could you kindly suggest how to check resource Pool communication as Ideally It should failed over to another MS. Waiting fro your response..

    1. Kevin Holman says:

      When one MS fails – the role did fail over to another in the pool. The problem is – you have not allowed all servers in the pool authorization to use the SMTP server, or distribution is not set correctly to the pool, or the rights configuration for the runas account is different between servers. The event logs hold the answer. You need to search them.

      1. Kittu says:

        Hi Kevin,

        How to check if distribution is not set correctly to the pool, or the rights configuration for the runas account is different between servers.

        We have SMTP server where particular subnets are allowed to send mails , MS does come under these Subnets.


  52. Morning, Great article, thank you! I have followed the steps you outline above. I am seeing a Run as account cannot logon locally error for both of my scom servers. In looking through the blogs I am not quite sure what “email enabled” means and how to ensure that the account I am trying to use is setup that way. If anyone here has a link to an useful article on this I would greatly appreciate it! Our SMTP “relay” is anonymous and I have been using that for quite a while. However, I have begun seeing Failed to send notification errors increasingly, so I am wondering if using the authenticated route might not resolve this? I see on average 2-15 or 20 of these a day. Our environment generates a lot of notifications for our Production environment and 24×7 monitored stuff.
    Thanks in advance for your time and assistance!

  53. layola vimal says:

    Hi all, I configured a run as account for my notification pool. My intention is to use mail flow should be in authenticated way. So we got a id and a password. After configuring id and password monitoringhost.exe is not taking my account name as mentioned in the last screenshot. Your assistance is more required.

  54. MWD1107 says:

    Hey, community (and Kevin). I saw someone else ask the same question, and I’m still scratching my head. I’ve set up some certificate monitor overrides but they’re firing off way too many emails and alerts. Where is this configured? Thanks in advance for any help.

  55. NJM_makeitso says:

    What is the format attribute to ONLY show the non-fqdn server name? (so instead of servername.domain.dn it will show just servername.

Comments are closed.

Skip to main content