OpsMgr 2007: Subscriptions getting automatically disabled – Event ID 11452 logged


image I recently ran across an issue where notification subscriptions were getting disabled every 30 minutes. The strange thing was that only about half of the subscriptions were being disabled and they were the same subscriptions every time. I tried re-enabling them with both Powershell as well as the GUI and had the same result, the subscriptions kept being disabled. After digging through event logs I found this warning:

Log Name: Operations Manager
Source: Health Service Modules
Event ID: 11452
Task Category:   None
Level: Warning

Validate alert subscription data source module encountered an alert subscription data source with configuration that has gone out of scope. Disabling the alert subscription data source module.

Alert subscription name: Subscriptionaca6a276_e5a9_446b_9751_0ea539168e41

One or more workflows were affected by this.
Workflow name: Microsoft.SystemCenter.ValidateAlertSubscription

The problem turned out to be that I recently cleaned up the SCOM Admins user group and one of the users removed from the group had created half of the subscriptions. By putting the user back in the SCOM Admins group and re-enabling the subscriptions the problem was solved but we really didn’t want this user in the SCOM Admins group as he had moved on to a different role.

So why was this happening? When a subscription is created the user who created the subscriptions SID is associated with that subscription. There is a workflow that checks every half hour for SIDs no longer valid. They could be invalid because their accounts access that had been removed, or possibly because the account has been disabled or deleted.

Resolution

To fix it long term I first exported the “Microsoft.SystemCenter.Notifications.Internal” management pack. This management pack is unsealed and contains all subscriptions.

Inside the management pack I searched for one of the subscriptions that were being disabled and one that was wasn’t. I then replaced the SID of the bad subscription with the SID of the good subscription.

After replacing the SIDs I re-imported the management pack and re-enabled all subscriptions and the problem was solved for good.

Here is an example of one of the SIDs I had to replace.

</Criteria>
<ExpirationStartTime>
10/11/2008 21:38:45</ExpirationStartTime>
<PollingIntervalMinutes>
1</PollingIntervalMinutes>
<UserSid>S-1-5-21-3273141924-712819414-2074229892-500</UserSid>
<LanguageCode>ENU</LanguageCode>
<ExcludeNonNullConnectorIds>
false</ExcludeNonNullConnectorIds>
<RuleId>$MPElement$</RuleId>

Hope this helps,

Satish Phatge | System Center Support Engineer

Comments (10)

  1. Anonymous says:

    FYI, I had this happen when our scom admin left. We just logged into the server as the service account and recreated the subcriptions. Seemed easier to us.

  2. Anonymous says:

    Thanks Satish

  3. Andy says:

    Great Job Satish that really helped

  4. tom says:

    Great article, helps out a lot… just curious if that was the intended design by MS, to have a UserSID tied to a notifcation subscription…seems to break some significant things if the user in question leaves the company and their account is deleted…almost like setting a service to run as a user account with an expiring password…

  5. Anonymous says:

    This seems to be a pretty big miss for the SCOM dev team. Is there a fix on the way?

    We had this same issue and were able to fix it by making a small change to the subscription (modified the name field) and saving it. Obviously this isn't a real fix since we just changed which SID is attached to the subscription and we'll have the same issue if that user leaves the company.

  6. Anonymous says:

    Pingback from Subscriptions in SCOM 2007 automatically disabled ??? Simon W??hlin

  7. Dominique says:

    I would definitely prefer to have the subscriptions attached to a service account as people moves, but as our security prevent us to log in with a service account means it is a catch 22…
    As I don’t have any subscription link to a service account for now how do I get the SID of the MOM Action account?
    Anything plan by Microsoft in SCOM 2012?
    Thanks,
    Dom

  8. Dominique says:

    Thanks for this great article…
    I found the SID for the Mom Action Service account…
    Which privileges and rights should this account have?
    Thanks,
    Dom

  9. lucy says:

    I would like to apprentice at the same time as you amend your web site, how could i subscribe for a blog site?
    http://showboxandroids.com/showbox-apk/
    http://showboxappandroid.com/
    Latest version of Showbox App download for all android smart phones and tablets. It’s just 2 MB file you can easily get it on your android device without much trouble. Showbox app was well designed application for android to watch movies and TV shows, Cartoons
    and many more such things on your smartphone.
    http://showboxandroids.com/showbox-for-pc/
    http://showboxappandroid.com/showbox-for-pc-download/

  10. show box says:

    Thanks for the great info. I really loved this. I would like to apprentice at the same time as you amend your web site, how could i subscribe for a blog site?
    For more info on showbox please refer below sites:
    http://showboxandroids.com/showbox-apk/
    http://showboxappandroid.com/
    Latest version of Showbox App download for all android smart phones and tablets.
    http://movieboxappdownloads.com/ – It’s just 2 MB file you can easily get it on your android device without much trouble. Showbox app was well designed application for android to watch movies and TV shows, Cartoons and many more such things on your smartphone.
    For showbox on iOS (iPhone/iPad), please read below articles:
    http://showboxappk.com/showbox-for-ipad-download/
    http://showboxappk.com/showbox-for-iphone/
    Showbox for PC articles:
    http://showboxandroids.com/showbox-for-pc/
    http://showboxappandroid.com/showbox-for-pc-download/
    http://showboxforpcs.com/
    There are countless for PC clients as it is essentially easy to understand, simple to introduce, gives continuous administration, effectively reasonable. it is accessible at completely free of expense i.e., there will be no establishment charges and after establishment
    it doesn’t charge cash for watching films and recordings.
    http://www.showboxforipad.org/showbox-apk/ Not simply watching, it likewise offers alternative to download recordings and motion pictures. The accompanying are the strides that are to be taken after to introduce Showbox application on Android. The above
    all else thing to be done is, go to the Security Settings on your Android telephone, Scroll down and tap on ‘Obscure sources’.
    http://www.showboxforipad.org/
    http://movieboxappdownloads.com/moviebox-apk-android/
    http://movieboxappdownloads.com/download-moviebox-pc/
    Movie Box, an esteemed movies application in which you can find stacks of programs and films. The guide is given here to download Movie Box app to Android and to Apple iOS 9.0.2, iOS 8.4/8.3 and also for the lower versions without Jailbreak.
    http://showboxforiphone.org/
    Please do login to Showbox application with the help of Ymail. You can login in Ymail from here –
    http://ymaillogintips.com/
    Sign Up & Do registration for latest movies on Showbox application