System Center Operations Manager 2016 Step by Step– Part 10 – Installing agent

So lets install our first agent. In my case I will install first agent on SQL server that is hosting my SCOM databases. Go to administration pane and right click on any item in Administration pane. Click on  discovery wizard.

image

Discovery Wizard is used to install agent on Linux/Unix and Windows  computers for monitoring, or add network devices to SCOM network monitoring. In this example we are installing Windows computer.

image

On this windows you can choose to discover all computer from your domain, or use advanced search to pinpoint servers you want agents to be installed.

image

If you choosed advanced discovery you have two options to search for computers. One is to query AD, and second one is to browse and computer manually.

I choose browse and entered computer name.

image

image

On Administrator account page you will select SCOM Action Account or enter specific domain account  that has admin privileges to install agent on selected computer. You can use local admin account of computer, but be shure to select check box under account data.

image

Click Discover and after some time list will be populated with your computer or computers. Select check box next to computer you want agent to be installed. Go Next

image

On summary page you can choose account agent will use to run service, and installation path of agent. I use Local System like agent service account. It has some advantages and disadvantages, like everything else.

image

Click finish and agent installation will begin. After some time success message will appear.

 

imageimage

If you go back to Monitoring pane, under Discovered Inventory computer will show up. It is still not monitored because discovery need time to discover all elements installed on computer.

image

Advertisements

System Center Operations Manager 2016 Step by Step– Part 9 – Installing UR2

Hi. So we came long way. If you spend a lot of time dealing with SCOM you will probably encounter some bug or problems in software. From time to time Microsoft release Update Rollups. They are usually fixing noticed problems, or sometimes create new one Smile. Developers! Installation is not so straight forward. Like with management packs you need to read installation manual. UR2 is current version.  You can follow instructions on this KB article, or follow next lines.

I assume that you downloaded all needed files. You will need to extract msp files to one folder. There is a separate file of UR for every SCOM role. Sometimes some UR doesn’t have UR file for specific role

image

There is specific order of installing UR-s. You will install it in next order on all server that host specific role.

  • Management server or servers
  • Web console server role computers
  • Gateway
  • Operations console role computers

First of all open command prompt as Administrator and navigate to you extracted files. First we install management server UR on all servers with that role.

image

When you start installation it finish fast, so don’t worry if you think nothing happened

image

After that repeat the same process for web console, getaway and operations console role.Second step includes connecting to SQL server that hosts SCOM databases, and running Update_rollup_mom_db.sql  sql script on OperationsManager database. Script is located in %SystemDrive%\Program Files\System Center 2016\Operations Manager\Server\SQL Script for Update Rollups. Script can take some time if you have big database. Be patient.

image

After you run script standard procedure is to import new versions of management packs related to UR. You go to Administration pane> Management packs > Import Management packs. Like on next picture

image

Choose Add from disk and navigate to %SystemDrive%\Program Files\System Center 2016\Operations Manager\Server\Management Packs for Update Rollups

image

Usually I choose everything and then delete unnecessary MPs. Full list after selecting all MPs  is presented on next picture. First thing you will remove from the list is all language resources other then ENU. If you use some specific language listed choose it accordingly.

SNAGHTML27470208

After removing unnecessary MPs this s what its left. Import MPs

image

After that we check up on agent installed on monitoring servers. (We will installed agents on monitored computers in later blogs)  All server that need update will be in Pending Management. Select servers in your preferred manner and install updates to agent.

image

Last thing but not least is to update your consoles on all computers that have one installed.

There is more detailed about installing SCOM UR, especially if you monitor Linux/Unix computers. For all of it you can reference to more detailed blog post of Kevin Holman about installing UR for SCOM

System Center Operations Manager 2016 Step by Step–Part 8

Lets do one simple thing before weekend. Lets activate SCOM license.  If you open SCOM console in Help > About section you can notice that this version is Evaluation copy. Evaluation copy can work 6 months.

image

To find your license key, you will need to go to Microsoft Licensing Service Center and under downloads for System Center copy you license key.

image

To activate license you will need to enter it using PowerShell command Set-SCOMLicense. To do it, open PowerShell console in Administrator mode, and enter commands written below. You may need to restart your computer. Last command will show you license status. As you can see it still Evaluation license. It is entered in registry and it takes restart to load it Smile

import-module OperationsManager
Set-SCOMLicense -ProductId "<yourlicensekey>“ 
Get-SCOMManagementGroup | ft skuforlicense, version, timeofexpiration -a

image

After restart if you enter this command again you will get activated license and also Retail text  in console Help > About

image

image

System Center Operations Manager 2016 Step by Step–Part 7

After SCOM installation there will always be some hiccups to solve. Lets start with two. First one is long time friend of SCOM and second one is related to SCOM 2016 installation. If you open SCOM console most likely you will see this error:

Data Access Service SPN Not Registered

The System Center Data Access service failed to register an SPN. A domain admin needs to add MSOMSdkSvc/scom2016 and MSOMSdkSvc/scom2016.contoso.com to the servicePrincipalName of CN=SCOM2016,OU=servers,DC=contoso,DC=com

 

image

From times of SCOM 2012 management servers can run on multiple computers for redundancy and workload offload. Before there was only one management server  and usual place were SPN  (Service Principal Name) was added was its computer account. Today we use domain user account for running this service on multiple servers and SPN should be placed there. So lets list SPN for account we use. We use setspn command.

C:\Windows\system32>setspn -l contoso\scomcdas
Registered ServicePrincipalNames for CN=scomcdas,DC=contoso,DC=com:

We see there is no SPN registered for this account because this account does not have rights to do that

If you run this on computer account we get next result

C:\Windows\system32>setspn –l contoso\scom2016
Registered ServicePrincipalNames for CN=SCOM2016,OU=servers,DC=contoso,DC=com:

MSOMHSvc/SCOM2016
MSOMHSvc/scom2016.contoso.com
WSMAN/scom2016
WSMAN/scom2016.contoso.com
TERMSRV/SCOM2016
TERMSRV/scom2016.contoso.com
RestrictedKrbHost/SCOM2016
HOST/SCOM2016
RestrictedKrbHost/scom2016.contoso.com
HOST/scom2016.contoso.com

So lets add SPN for our account. You do this with commands

setspn -A  MSOMSdkSvc/SERVERNAME DOMAIN\USERNAME
setspn -A  MSOMSdkSvc/SERVERNAME.fqdn.name DOMAIN\USERNAME

C:\Windows\system32>setspn -s MSOMSdkSvc/scom2016.contoso.com contoso\scomcdas

Checking domain DC=contoso,DC=com

Registering ServicePrincipalNames for CN=scomcdas,DC=contoso,DC=com
MSOMSdkSvc/scom2016.contoso.com
Updated object

Repeat the same with NETBIOS name  setspn -s MSOMSdkSvc/scom2016 contoso\scomcdas

If you list you SPN on domain account it should look like this:

C:\Windows\system32>setspn -l contoso\scomcdas
Registered ServicePrincipalNames for CN=scomcdas,DC=contoso,DC=com:

MSOMSdkSvc/scom2016
MSOMSdkSvc/scom2016.contoso.com

SDK will be healthy now

image

The EXECUTE permission was denied on the object ‘sp_help_jobactivity’, database ‘msdb’, schema ‘dbo’.

New features, new problems. This is second error you will receive on SCOM 2016 installation only. If you did all by the book and you click Maintenance Schedule you will get this error.

image

You will see it also in Operations Manager event log even if you didn’t try to use Meintenence schedule.

image

What to do? This is purely missing permissions of SCOM sdk account on SQL server. so to solve this one install SQL Management Studio if you didn’t already and give you SCOM SDK account next permissions on msdb database.

image

Error is fixed now and you will not see it in the future.

System Center Operations Manager 2016 Step by Step–Part 6

Lets install Reporting server now. I needed to change my design because I read note below on TechNet. It means if you use web console and want to access Reporting, you will not be able to access it if you installed this role on server different than web console role server. So I needed to install reporting services on management server and not on SQL server like I planed.

On the same TechNet link you can find all steps required to check if your Reporting services are configured correctly. Still, if you pass next steps, you are good to install SCOM Reporting server.

If you encounter  SQL Server instance empty problem when installing Reporting role please read this blog System Center Operations Manager 2016 Step by Step– Part 16 – Installing Reporting role on remote SQL installation? Missing SQL instance!?

 

Although SQL Server Reporting Services is installed on the stand-alone server, Operations Manager reports are not accessed on this server; instead, they are accessed in the Reporting workspace in the Operations console. If you want to access published reports via the web console, you must install the Operations Manager web console on the same computer as Operations Manager Reporting server.

 

I installed Reporting Services (in Native mode) on server. Open Reporting Services Configuration Manager and connect to you Reporting instance to configure it.

image

Check that you Reporting Services are running.

image

Go to Service accounts. You need to enter here you Data warehouse reader account. When you enter it it will ask you for backup encryption key location and password. It is used to encrypt all communication of Reporting service. Store it on safe place together with password. image

image

Open Web Service URL and click apply.

image

When you click on URL and open it in browser you should get next data. It means Reporting Services are available.

image

Go to Database page. We need to create Reporting database on SQL server.

image

Click on change database and choose Create new database

image

Choose SQL server you will create database on and select account which has enough rights to create database on this server

image

Give some name to database

image

Enter service credentials from service account page (Data Warehouse reader account)  that will grant that account access to reporting database

image

Click next on summary page and if everything went successful go finish

image

Check Web portal URL page

image

Click Apply and check url in browser. You should get this web page if everything is fine. This is SSRS 2016 so page may look different if you use another SQL version

image

On Execution account  page enter DWH reader account again. One more thing to check. Go to Scale-out Deployment. Your Reporting Services server should be joined.

image

That all regarding configuring  SSRS for SCOM Reporting server. Now lets install SCOM Reporting server. Before setup check Remote registry service. It should be started and startup need to be automatic on SCOM Reporting server. Run setup and choose this role to install

image_thumb65

All prerequisites should be clear

image

Your SQL Reporting Service instance should be automatically shown on this page, or if there is more then one?! choose yours.

image

You will enter here you SCOM DWH Data reader account.

image

Go thru three next pages and start installation. If everything is green, you have SCOM Reporting server installed.

image

System Center Operations Manager 2016 Step by Step–Part 5

And now lets do easy part clicking next buttons. Just to remind you. We are installing SCOM 2016 on one server that will be management, web console and reporting server and another server that will host SQL workloads.

  1. Start setup.exe and click on Install.image
  2. Choose roles you will install image
  3. Select Installation locationimage
  4. On Prerequisites page you will have nothing to do if you already done all things from Part 4 of seriesimage
  5. Name Management group. It should be unique if you have more then one in your System Center ecosystemimage
  6. Skip configuration page and enter all data needed for Operational Database and Data Warehouse database on next pageimage
  7. Set all needed for SCOM Web console. Use SSL if you want securityimage
  8. This page is self-explanatoryimage
  9. If you already prepared SCOM accounts for different roles please fill them inimage
  10. Read or don’t read this one and click nextimage
  11. Choose carefully what you wish forimage
  12. Check all settings you put for installation and go Installimage
  13. After everything went successful setup is complete. There is a warning to enter license because you installed Evaluation copyimage
  14. Console will open and everything is set to go. image
  15. One thing remains. If you remember, we created AD group that will be SCOM administrator. Please go to administration pane > User Roles > Operations Manager Administrators. As you can see BUILTIN\Administrators is default administrators in you SCOM environment. Delete it and add your SCOM administrators group.imageimage

This conclude our first par of installation because we need to do Reporting server installation also. I will explain it right away in next blog just because I don’t want to have blog more than 100 pages long Smile

System Center Operations Manager 2016 Step by Step–Part 4

I saw today  that I wrote last post almost a month ago. It took me almost a month to go back to what I started to do. Installing SCOM 2016. In last blog post we prepared SQL server for installation. Yesterday I was checking on event logs for SQL, and there was some errors. So please install CU 4 for SQL 2016 RTM to suppress these errors.

Lets continue. I want to prepare for SCOM installation. What I need to install beforehand? All prerequisites you can find on TechNet System Center guide page but I will simple it up.

First thing is Management server. You will install SCOM console there and you need to  install the Report Viewer controls to any server that will receive a SCOM console.  There is a prereq for the Report View controls which is the “Microsoft System CLR Types for SQL Server 2014” (ENU\x64\SQLSysClrTypes.msi) available here:   https://www.microsoft.com/en-us/download/details.aspx?id=42295.

Install that first and after that install Report Viewer.

image

So we finish prereq one. Lets go prereq two. To install web console on any server you will need to install IIS with all of this options.

Internet Information Services: IIS 7.5 and later versions, with the IIS Management Console and the following role services installed:

  • Static Content
  • Default Document
  • Directory Browsing
  • HTTP Errors
  • HTTP Logging
  • Request Monitor
  • Request Filtering
  • Static Content Compression
  • Web Server (IIS) Support
  • IIS 6 Metabase Compatibility
  • ASP.NET (both the 2.0 and 4.0 versions of ASP.NET are required.)
  • Windows Authentication

Just run this PowerShell command any it is done.You put you path in source parameter for Windows Server OS installation source or if your computer has access to Internet you don’t need it. It is required for asp.net 2.0 activation (correct me if I am wrong)

Add-WindowsFeature NET-WCF-HTTP-Activation45,Web-Static-Content,Web-Default-Doc,Web-Dir-Browsing,Web-Http-Errors,Web-Http-Logging,Web-Request-Monitor,Web-Filtering,Web-Stat-Compression,Web-Mgmt-Console,Web-Metabase,Web-Asp-Net,Web-Windows-Auth -Restart -Source D:\sources\sxs

image

Restart computer after this. Recommended by Kevin Holman. After that you will probably get new updates so update computer before continuing.

Lets prepare service accounts. You need next accounts

  • Local System                      SCOM Server Action Account (you can create domain one, I use local system)
  • DOMAIN\scomcdas            SCOM Config and Data Access Account
  • DOMAIN\scomdwreader    SCOM Data warehouse Reader Account
  • DOMAIN\scomdwriter     SCOM Data warehouse Write Account
  • DOMAIN\scomsql              SQL Service Account
  • DOMAIN\ScomAdmins       SCOM Administrators security group

Add scomcdas, scomdwreader,scomdwriter and Scom server action account if you created domain one to ScomAdmins group. Add the “SCOMAdmins” domain global group to the Local Administrators group on each server.

This is basic prerequisites for running setup of SCOM. See you tomorrow I hope.

System Center Operations Manager 2016 Step by Step–Part 3

Hi again

after some work problems I get back to new SCOM 2016 installation. I mentioned last time that we will today install SQL server. There were some questions about which version to use. I wanted to install SQL 2016 SP1 but I get notice it is not yet supported (see comments on this post by Kevin Holman.  You can get the list of last supported databases with SCOM 2016 UR1 on this TechNet link

image

You can use version you choose, because if you remember SQL license is free for System Center products. With only one rule, just use it for System Center products databases and nothing else.

Did you create SQL service account. If you didn’t, do it now. I created only two. One for SQL service account and one for SQL Reporting services account. So lets start. Choose new SQL server installation

image

After entering product key, accept license terms of use. I skipped Microsoft updates because I don’t want to end up with SP1 I don’t need for this SCOM installation.

image

If everything is green you are good even windows firewall scream for attention here. You choose next features needed for SCOM SQL installation

image

Choose default instance if you don’t need better that that

image

Enter you domain service accounts for SQL services and give services automatic startup. Also check Volume Maintenance Task privilege to use this new SQL feature.

image

You need to use this SQL collation. In any case it is by default in SQL installation sou you will not miss it

image

Specify Windows authentication mode (do not use Mixed mode)

image

You setup your database and log files as you can, but rule of the thumb is to format those drives with 64K allocation unit sizes, and if you have possibility put your tempdb database and log on SSD drive. It is best to leave that volumes only for databases.

image

On Reporting Services page choose Install and Configure

image

Click next on Feature Configuration Page if everything is green  and then Install on Ready to Install page.

After everything is done, we are free to go further. Until next time

image

SQL Server Broker for the Operations Manager database is disabled

I was moving Operations Manager database today, but after everything went smooth, I get this error  “SQL Server Broker for the Operations Manager database is disabled” How  to fix it?

First of all stop all SCOM services in this order

  1. System Center Management Configuration
  2. Microsoft Monitoring Agent
  3. System Center Data Access Service

After that Open SQL Management Studio and do this SQL queries (run one by one)

ALTER DATABASE OperationsManager SET SINGLE_USER WITH ROLLBACK IMMEDIATE
 ALTER DATABASE OperationsManager SET ENABLE_BROKER
 ALTER DATABASE OperationsManager SET MULTI_USER

SELECT is_broker_enabled FROM sys.databases WHERE name='OperationsManager'

If everything is successful last query will give you result 1, so it means that SQL broker service is enabled.

Start Services in opposite order then stopping. Have a nice weekend

System Center Operations Manager 2016 Step by Step– Part II

I promised last time I will give my example of SCOM environment (experience based)  so you can compare it with your requirements, to see if that may work for you. Right know lets start with number of current SCOM agents on my SCOM server. I recently deleted some because we changed Exchange environment and some other things. To get exact number of agent installed around we will use PowerShell and simply do next

image

As you can see I have 35 agents installed. If you are unfamiliar with the term, it is every computer that have SCOM agent installed (MMA – Microsoft Monitoring Agent).  It is not some representative number. Still I think it is more common then people think. But still there is much more hidden workload that is not accounted in this number.

You will probably want to monitor some network devices too. Or maybe even storage or some other SNMP enabled devices. Lets count them with PowerShell. As you can see there is some IP addresses there. They are some optical switches, tape library, storage etc.

image

That is not all but lets stop there. Where is it running now? You will be surprised!  All of this is running on just one physical HP DL380 G5 server fully populated with disks and 32 GB of RAM with SCOM environment installed including databases (I mean DWH&ACS database too). But please don’t go there. This server was installed in time of SCOM 2007 R2 version when that was enough for that workload. I needed to tweak a lot of things to get it running on current SCOM 2012 R2 version. It survived couple of SCOM upgrades in between . Console was slower but it worked. I am now more clever and I will do fresh start. So what configuration can easily chew this environment. I found some servers in our warehouse with next configuration.

image

It doesn’t seems some round numbers but people from supply have some strange configurations in their heads Smile

What is important here. First of all, please separate SQL workload from management server. Two reasons.

  1. SQL workload can be very hard on performance and will stand in the way of normal SCOM functioning. It will take RAM, processors, everything it needs to work.
  2. SQL Server license is free for System Center use only. So please don’t put it on some big SQL server where you have a ton of other databases. In my case I will put also SCCM database here because it is small enough. If you need SQL workload for some other System Center product consider more RAM memory and enough space to accommodate database sizes

I don’t have anything against virtual servers. Management server can be virtualized in this configuration without to much fuss. SQL virtualization? Maybe, but that is you decision to make. So what we need for next time.

We will start with SQL installation. Because I want to run SCCM database here too, I need to consider what SQL version are compatible for both System Center products. As I understood somewhere Configuration Manager is going on its own path besides System Center product. I still didn’t chew on that one, but it was always separate product for me. From times of SMS 2003.

image

If you look at the SQL compatibility for ConfigMgr 2016 (I need to stop using SCCM) you will see that SQL 2016 SP1 is supported. I will try to install SP1 version and see if that goes. I didn’t found any documentation is SP1 supported for SCOM but I will look for it.

Until next time