Active Directory tasks failing for 2008/2008R2 Servers in SCOM 2007 R2

Recently, I deployed Active Directory Management pack (version 6.0.7065.0) in my SCOM 2007 R2 environment. To check health of one of my domain controller (2008R2), I tried to run DCDIAG task from SCOM console and I got the error below. I tried launching other AD related tasks from my SCOM Console like repadmin, netdom and got similar error. I thought of updating my AD MP to latest one (6.0.7670.0) but got the same problem.

clip_image001

I went through the error message and did some troubleshooting.Finally I was able to fix this. So in this blog we will discuss cause of this problem and some ways to fix this.

Cause: These AD tasks in SCOM were trying to execute from directory C:\Program files\Support Tools. This path was correct in 2000/2003 Servers but in 2008/2008 R2 servers these tools are part of Core OS. Since SCOM tasks are still trying old path, they failed to locate those tools.

Some possible ways of troubleshooting: I tried three different ways that proved helpful to me to fix this issue.

1) Override the path while running the tasks: This way every time you run any task, you can change the path of execution. It will not save the new path. Click on Override

clip_image002

Change the path from %ProgramFiles%\Support Tools to %windir%\system32.

Click on Override and run the task.

clip_image003

Concern with this is that it will not save the Overridden path and so you need to change it every time.

2) Use MKLINK: We will create directory symbolic link using MKLINK. You can find more about MKLINK here . You can run below given command on 2008/2008 R2 domain controllers one by one manually. Once symbolic link is created, you can launch the task from SCOM console.

clip_image005

3) Using PSEXEC: If you have big enterprise and good number of domain controllers, you can use PSEXEC to create symbolic link for you. Download PSEXEC from here. I created a text file on my SCOM server with name of each domain controller in separate line. Below is the syntax used:

clip_image007

Once the command got completed, I was able to run DCDIAG, REPADMIN and other AD related tasks from my SCOM Console.

 

Happy Reading Smile