System Center Operations Manager Assessment on Operations Management Suite – Public Preview!

Are you worried about the health of your Operations Manager environment? Looking for a tool that can help keep Operations Manager up-to-date and run efficiently?

We present you the System Center Operations Manager Assessment solution that assesses the risk and health of your System Center Operations Manager Server environments. This solution is available to all 2012 SP1 and 2012 R2 Operations Manager users on Operations Management Suite (OMS) for free!

Solution Description

System Center Operations Manager Assessment solution on OMS assesses your Operations Manager environment against best practices that were collected over the years from Microsoft Knowledge Base articles and field engineers across multiple environments, industries and scenarios. This solution provides a health check and risk assessment of the Operations Manager environment and recommendations to fix the issues identified.

System Center Operations Manager Assessment data collection details

System Center Operations Manager Assessment collects WMI data, Registry data, EventLog data, Operations Manager data through Windows PowerShell, SQL Queries, File information collector using the Server that you have enabled.

The following table shows data collection methods for System Center Operations Manager Assessment, and how often data is collected by an agent.

platform Direct Agent SCOM agent Azure Storage SCOM required? SCOM agent data sent via management group default collection frequency
Windows 7 7 7 8 7 7 days

Installing and Configuring the solution

Use the following information to install and configure the solution

Add solution to OMS Workspace

Before you can use an assessment solution in OMS, you must have the solution installed. To read more about installing solutions, see Add Log Analytics solutions from the Solutions Gallery.
After adding the solution to your workspace, a tile for System Center Operations Manager Assessment (Preview) shows up on the dashboard displaying below message

Click on the tile and follow the steps mentioned there

scomassessmentconfigsteps
The SCOMAssessmentConfigure.ps1 allows you to configure the assessment through Power-Shell script.
To configure the assessment through Operations Manager console, follow the below links in the same order:

  1. Set the Run As account for System Center Operations Manager Assessment
  2. Configure the System Center Operations Manager Assessment rule

Set the Run As account for System Center Operations Manager Assessment

OMS builds upon management packs for workloads to provide value-add services. Each workload requires workload-specific privileges to run management packs in a different security context, such as a domain account. You need to provide credential information by configuring an Operations Manager Run As account.

Use the following information to set the Operations Manager run-as account for System Center Operations Manager Assessment.

  • In the Operations Manager Console, go to the Administrations tab
  • Under the Run As Configuration, click Accounts
  • Create the Run As Account, following through the Wizard, creating a Windows account. The account to be used is the one identified and having all the prerequisites below
    • A domain account member of the local Administrators group on all servers in the environment (All Operations Manager Roles – Management Server, OpsMgr Database, Data Warehouse, Reporting, Web Console, Gateway)
    • Operation Manager Administrator Role for the management group being assessed
    • Execute the script to grant granular permissions to the account on SQL instance used by Operations Manager.
      Note: If this account has sysadmin rights already, then skip the script execution.
  • Under Distribution Security, select More secure
  • Specify the Management Server on which this account will be distributed
  • Go back to the Run As Configuration and click Profiles
  • Search for the System Center Operations Manager Assessment Profile
  • The profile name should be, “Microsoft System Center Advisor SCOM Assessment Run As Profile”
  • Right click and update its properties, and add the recently created Run As Account we just created in step 3

Configure the System Center Operations Manager Assessment rule

System Center Operations Manager Assessment Solution’s Management Pack consists of a rule by name “Microsoft System Center Advisor SCOM Assessment Run Assessment Rule”. This rule is responsible for the run of the assessment. To enable the rule and configure the frequency, follow the steps below.

Enable the assessment to run

By default, “Microsoft System Center Advisor SCOM Assessment Run Assessment Rule” rule is in disabled state. To run the assessment, this rule has to be enabled against a Management Server. To do this, follow the steps below:

  • Enable the rule for a specific Management Server
    • In the Authoring workspace of the Ops Manager console, search for the Rule “Microsoft System Center Advisor SCOM Assessment Run Assessment Rule” in Rules pane
    • From the search results appeared, select the one with “Type: Management Server”
    • Right click on the above selected rule and click on Overrides  For a specific object of class: Management Server
    • Select the Management Server that this rule should execute on from the available Management servers
    • Make sure to change the property value of Enable to “True” as in the screenshot shown below:

1

While still in this window, to configure the frequency of the run, follow the steps below

   Configure the frequency of the run

The assessment is configured to run 10080 minutes (or 7 days), the default interval. This interval can be overridden to a value of at least 1440 minutes (or 1 day). This value represents the minimum time gap required between successive assessment runs. To override the interval, follow the steps below:

  • Override the interval of the assessment run
    • In the Authoring workspace of the Ops Manager console, search for the Rule “Microsoft System Center Advisor SCOM Assessment Run Assessment Rule” in Rules pane
    • From the search results appeared, select the one with “Type: Management Server”
    • Right click on the above selected rule and click on “Override the Rule  For all objects of class: Management Server”
    • Change the parameter value of Interval to the desired interval value.
      In the screenshot below, this value is set to 1440 minutes i.e. 1 day
      2
    • Note that if the value is set to less than 1440 minutes, then the rule runs at a one day interval i.e. the rule ignores this interval value and runs at a frequency of 1 day

 SQL Script to grant granular permissions to the Run As account

Execute below script to grant required permissions to the Run As account on the SQL Instance used by Operations Manager

-- Replace <UserName> with the actual user name being used as Run As Account.
 USE master

-- Create login for the user, comment this line if login is already created.
 CREATE LOGIN [UserName] FROM WINDOWS

--GRANT permissions to user.
 GRANT VIEW SERVER STATE TO [UserName]
 GRANT VIEW ANY DEFINITION TO [UserName]
 GRANT VIEW ANY DATABASE TO [UserName]

-- Add database user for all the databases on SQL Server Instance, this is required for connecting to individual databases.
 -- NOTE: This command must be run anytime new databases are added to SQL Server instances.
 EXEC sp_msforeachdb N'USE [?]; CREATE USER [UserName] FOR LOGIN [UserName];'

Use msdb
 GRANT SELECT To [UserName]
 Go

--Give SELECT permission on all Operations Manager related Databases
 --Replace the Operations Manager database name with the one in your environment
 Use [OperationsManager];
 GRANT SELECT To [UserName]
 GO

--Replace the Operations Manager DatawareHouse database name with the one in your environment
 Use [OperationsManagerDW];
 GRANT SELECT To [UserName]
 GO

--Replace the Operations Manager Audit Collection database name with the one in your environment
 Use [OperationsManagerAC];
 GRANT SELECT To [UserName]
 GO

--Give db_owner on [OperationsManager] DB
 --Replace the Operations Manager database name with the one in your environment
 USE [OperationsManager]
 GO

ALTER ROLE [db_owner] ADD MEMBER [UserName]
 GO

Solution Details

After a successful assessment of the Operations Manager environment, recommendations are generated. Users can view these recommendations in their OMS workspace by clicking the System Center Operations Manager Assessment tile.

3

4

Each recommendation has a weightage assigned based on probability of occurrence, impact if occurred and effort required to fix. This will guide the user to prioritize the recommendations to act on.

Clicking on any of the recommendations, will open a new screen with details such as description of the issue, suggested actions, affected objects etc.

5

 System Center Operations Manager Assessment solution FAQ

I added the assessment solution to my OMS workspace. But I don’t see the recommendations. Why?
After adding the solution, below steps to be followed to see the recommendations on OMS dashboard.

Is there a way to configure how often the assessment runs?
Yes. See Configure the run frequency.+

If another server is discovered after I’ve added the System Center Operations Manager Assessment solution, will it be assessed?
Yes, after discovery, it is assessed from then on–by default, every seven days.+

What is the name of the process that does the data collection?
AdvisorAssessment.exe+

Where does the AdvisorAssessment.exe process run?
AdvisorAssessment.exe runs under the HealthService of the management server where the assessment rule is enabled. Using that process, discovery of your entire environment is achieved through remote data collection.+

How long does it take for data collection?
Data collection on the server takes about one hour. It may take longer in environments that have many Operations Manager instances.+

What if I set the interval of the assessment to less than 1440 minutes?
The assessment is pre-configured to run at a maximum of once per day. If you override the interval value to a value less than 1440 minutes, then the assessment uses 1440 minutes as the interval value.+

How to know if there are pre-requisite failures?
If the assessment ran and you don’t see results, then it is likely that some of the pre-requisites for the assessment failed. You can execute queries: Type=Operation Solution=SCOMAssessment and Type=SCOMAssessmentRecommendation FocusArea=Prerequisites in Log Search to see the failed pre-requisites.+

There is a Failed to connect to the SQL Instance (….). message in pre-requisite failures. What is the issue?
AdvisorAssessment.exe, the process that collects data, runs under the HealthService of the management server. As part of the assessment, the process attempts to connect to the SQL Server where the Operations Manager database is present. This error can occur when firewall rules block the connection to the SQL Server instance.+

What type of data is collected?
The following types of data are collected: – WMI data – Registry data – EventLog data – Operations Manager data through Windows PowerShell, SQL Queries and File information collector.+

Why do I have to configure a Run As Account?
For an Operations Manager server, various SQL queries are run. In order for them to run, you must use a Run As Account with necessary permissions. In addition, local administrator credentials are required to query WMI.+

Why display only the top 10 recommendations?
Instead of giving you an exhaustive, overwhelming list of tasks, we recommend that you focus on addressing the prioritized recommendations first. After you address them, additional recommendations will become available. If you prefer to see the detailed list, you can view all recommendations using Log Search.+

Next Steps

Try this solution today on your Operations Manager environment and we would love to hear your feedback on this.
Get started with Operations Management Suite and activate your free account

How to share feedback?

User Voice : To suggest any improvements/ideas on this solution, visit the SCOM UserVoice page
Email: Tell us at scompm@microsoft.com
OMS Forums: Good general discussion of OMS.  Visit the OMS Forums.

Join the conversation

Add Comment

  1. John LeMay

    So I just finished setting this up and I have data to review in OMS so all is working. I followed the instructions which indicate the RunAs account should be distributed to a SINGLE management server and that the assessment rule should be overridden for that one MS. In a production environment with multiple MS (single management group), should the RunAs account be distributed to and the rule overridded for all MS roles or is a single MS enough?

    • Hello John,

      It is enough to distribute the RunAs account and overridde the rule for one Management Server in a Management Group. The RunAs account has all the required permissions to gather information about whole of the Management Group to suggest recommendations.

      -Sai

  2. Martin Ehrnst

    Hi,

    I previusly added this through PowerShell when it was in private preview, but no data was ever collected. I later removed it, but when i try to add it again the operation fail.
    This is the same for two Workspaces in wester europe. Any ideas?

    • Hi Martin,

      Is this a custom powershell script that you have used to add the solution earlier? Are you trying again through powershell to add the solution to the workspace?
      From private preview to public preview, the solution got renamed. May be the name change is causing the operation to fail?

      -Sai