Comments for Brad's Tech Blog http://bradstechblog.com Microsoft technologies like: System Center Operations Manager, and whatever else comes up at the office. Mon, 22 Mar 2010 19:55:34 +0000 http://wordpress.org/?v=2.9.2 hourly 1 Comment on How to create a Recovery task in SCOM on a windows service. by WHRKit http://bradstechblog.com/scom/how-to-create-a-recovery-task-in-scom-on-a-windows-service/comment-page-1#comment-499 WHRKit Mon, 22 Mar 2010 19:55:34 +0000 http://bradstechblog.com/?p=205#comment-499 Thank you. I wish the documentation and the books I have would describe it in such clear instructions. This is a life saver for me at this point. I have servers that seem to let services die mainly after hours or on weekends - so, this should give me more sleep, too. :-) Thank you. I wish the documentation and the books I have would describe it in such clear instructions. This is a life saver for me at this point. I have servers that seem to let services die mainly after hours or on weekends – so, this should give me more sleep, too. :-)

]]> Comment on How to move the OperationsManager DataBase to a new SQL server by Brad Hearn http://bradstechblog.com/scom/how-to-move-the-operationsmanager-database-to-a-new-sql-server/comment-page-1#comment-498 Brad Hearn Tue, 19 Jan 2010 20:18:08 +0000 http://bradstechblog.com/?p=297#comment-498 Hi Chris, You will have the chance to change the path when you re-attach the database. At this point the wizard will place all your DB files into that location. If you have a test environment, you should run through once as well. Even if you don't have a test server with a SAN, it would still be helpful for you to go through the process of moving the database itself. However, not being a SQL guy myself don't take this as the right approach. But if you are planning on using the same drive letters for your SAN attached drive. Then you may not need to detach and reattach the database. You might be able to simply stop your sql services, copy the database over to the new drive, change the drive letters on the SAN drive to match the original. And restart the database. Let me know what you do, I am curious. Brad Hi Chris,

You will have the chance to change the path when you re-attach the database. At this point the wizard will place all your DB files into that location. If you have a test environment, you should run through once as well. Even if you don’t have a test server with a SAN, it would still be helpful for you to go through the process of moving the database itself.

However, not being a SQL guy myself don’t take this as the right approach. But if you are planning on using the same drive letters for your SAN attached drive. Then you may not need to detach and reattach the database. You might be able to simply stop your sql services, copy the database over to the new drive, change the drive letters on the SAN drive to match the original. And restart the database.

Let me know what you do, I am curious.

Brad

]]> Comment on Deploying SCOM Gateway server by Brad Hearn http://bradstechblog.com/scom/deploying-scom-gateway-server/comment-page-1#comment-497 Brad Hearn Tue, 19 Jan 2010 17:58:09 +0000 http://bradstechblog.com/?p=246#comment-497 Hi Krishna, If I understand your question to be "Can you use the IPSEc offline cert instead of a custom OpsMgr cert?" I would say no. There are OID's that need to be part of the certificate. So in this case you will need to create it. I have not used 2008 R2 CA yet for Opsmgr. But yes, you can use this. I have seen many blogs as well that discuss this. Hope this helps, Brad Hi Krishna,

If I understand your question to be “Can you use the IPSEc offline cert instead of a custom OpsMgr cert?”

I would say no. There are OID’s that need to be part of the certificate. So in this case you will need to create it.

I have not used 2008 R2 CA yet for Opsmgr. But yes, you can use this. I have seen many blogs as well that discuss this.

Hope this helps,
Brad

]]> Comment on How to move the OperationsManager DataBase to a new SQL server by Chris Rundle http://bradstechblog.com/scom/how-to-move-the-operationsmanager-database-to-a-new-sql-server/comment-page-1#comment-496 Chris Rundle Mon, 18 Jan 2010 12:48:49 +0000 http://bradstechblog.com/?p=297#comment-496 Hi Brad, First, thanks for all the articles, they're really useful. A question about moving the OpsMgr databases: If you started off with the DBs on the same server as the SQL Server instance, but then wanted to move them to a SAN for added resilience, at what point in the restore would you specify the new locations for the DBs and Logs, assuming you followed best practice and put the DBs and Logs on separate drives? Regards, Chris Hi Brad,
First, thanks for all the articles, they’re really useful.
A question about moving the OpsMgr databases: If you started off with the DBs on the same server as the SQL Server instance, but then wanted to move them to a SAN for added resilience, at what point in the restore would you specify the new locations for the DBs and Logs, assuming you followed best practice and put the DBs and Logs on separate drives?
Regards,
Chris

]]> Comment on Deploying SCOM Gateway server by Krishna http://bradstechblog.com/scom/deploying-scom-gateway-server/comment-page-1#comment-495 Krishna Mon, 18 Jan 2010 10:25:21 +0000 http://bradstechblog.com/?p=246#comment-495 Hello Brad, Thank you for this Artilce We are planning to Monitor our servers in DMZ throught Scom, will IPSec (Offline Request) custom certicate can be used for this as well ? Currently I have CA installed on Windows 2003 Standard edition which is also a DC and we are planning to migrate to Windows 2008 enterprise or Windows 2008 R2 Standard as this supports V1, V2, V3 certificate templates. Currently we are running on SCOM 2007 SP1 and all servers are windows 2003. Kindly Advice if i need to make sure for any other prerequistes. Will windows 2008 R2 CA will suites our requirement Regards, Krishna http://smtpport25.wordpress.com Hello Brad,

Thank you for this Artilce

We are planning to Monitor our servers in DMZ throught Scom, will IPSec (Offline Request) custom certicate can be used for this as well ?

Currently I have CA installed on Windows 2003 Standard edition which is also a DC and we are planning to migrate to Windows 2008 enterprise or Windows 2008 R2 Standard as this supports V1, V2, V3 certificate templates.

Currently we are running on SCOM 2007 SP1 and all servers are windows 2003.

Kindly Advice if i need to make sure for any other prerequistes. Will windows 2008 R2 CA will suites our requirement

Regards,
Krishna
http://smtpport25.wordpress.com

]]> Comment on Promoting MS to RMS : USE WITH CAUTION!! by Brad Hearn http://bradstechblog.com/scom/promoting-ms-to-rms-use-with-caution/comment-page-1#comment-494 Brad Hearn Thu, 14 Jan 2010 15:02:29 +0000 http://bradstechblog.com/?p=13#comment-494 Hi Chris, Promoting is a simple task. But make sure you follow the steps. If done wrong it can create more issues for you when you are ready to bring the original RMS online. If you need to promote your MS due to a full cluster loss. And you plan to return to the cluster after it has been resorted. Then you will need to to promote the virtual RMS only. Do not promote the nodes. If you were to do this you could introduce multiple RMS's into AD and will been then be stuck with the ugly job of cleaning up SPN's. If you need to rebuild the cluster. You would promote to the MS first. Make sure you perform a full promotion and removal of the old RMS when you do this. Rebuild your cluster and then promote it again. Send me a note if you have any questions through this. Brad Hi Chris, Promoting is a simple task. But make sure you follow the steps. If done wrong it can create more issues for you when you are ready to bring the original RMS online. If you need to promote your MS due to a full cluster loss. And you plan to return to the cluster after it has been resorted. Then you will need to to promote the virtual RMS only. Do not promote the nodes. If you were to do this you could introduce multiple RMS’s into AD and will been then be stuck with the ugly job of cleaning up SPN’s.

If you need to rebuild the cluster. You would promote to the MS first. Make sure you perform a full promotion and removal of the old RMS when you do this. Rebuild your cluster and then promote it again. Send me a note if you have any questions through this.

Brad

]]> Comment on Promoting MS to RMS : USE WITH CAUTION!! by Chris Rundle http://bradstechblog.com/scom/promoting-ms-to-rms-use-with-caution/comment-page-1#comment-493 Chris Rundle Thu, 14 Jan 2010 14:47:26 +0000 http://bradstechblog.com/?p=13#comment-493 If the RMS is clustered, but both nodes go down (network failure, rack destruction etc) and you promote a MS to be the temporary RMS, when the cluster is bought back online, do BOTH nodes need to be demoted/promoted to RMS, or just the virtual RMS? Same question applies if the cluster needs to be rebuilt - in that case there would still be a clustered MS to demote/promote. Thanks. If the RMS is clustered, but both nodes go down (network failure, rack destruction etc) and you promote a MS to be the temporary RMS, when the cluster is bought back online, do BOTH nodes need to be demoted/promoted to RMS, or just the virtual RMS? Same question applies if the cluster needs to be rebuilt – in that case there would still be a clustered MS to demote/promote.
Thanks.

]]> Comment on Deploying SCOM Gateway server by Brad Hearn http://bradstechblog.com/scom/deploying-scom-gateway-server/comment-page-1#comment-492 Brad Hearn Fri, 18 Dec 2009 13:48:42 +0000 http://bradstechblog.com/?p=246#comment-492 Jacob, You will need both the custom certificate and root certificate for all your management servers. This includes your RMS, all MS servers and any gateways that you have. And remember that after you have imported these certs on each server using the MMC certificate tool, you will then need to use the SCOM certimport utility on each server to update the registry with the certificate serial number. Brad Jacob,

You will need both the custom certificate and root certificate for all your management servers. This includes your RMS, all MS servers and any gateways that you have. And remember that after you have imported these certs on each server using the MMC certificate tool, you will then need to use the SCOM certimport utility on each server to update the registry with the certificate serial number.

Brad

]]> Comment on Deploying SCOM Gateway server by Jacob http://bradstechblog.com/scom/deploying-scom-gateway-server/comment-page-1#comment-491 Jacob Wed, 16 Dec 2009 23:51:42 +0000 http://bradstechblog.com/?p=246#comment-491 Thanks for the reply and do we need custom certificate for RMS and MS? Thanks for the reply and do we need custom certificate for RMS and MS?

]]> Comment on How to create a Recovery task in SCOM on a windows service. by Brad Hearn http://bradstechblog.com/scom/how-to-create-a-recovery-task-in-scom-on-a-windows-service/comment-page-1#comment-490 Brad Hearn Tue, 15 Dec 2009 13:53:45 +0000 http://bradstechblog.com/?p=205#comment-490 Torben, You can connect to any server to select the service if you like, this is only here to simplify this process and to help us avoid spelling errors. It is not necessary to connect the the actual server that you are planning on running the task against in the process of creating the task.. You may also type the service name in manually if you like. The recovery task will work on the DMZ machine using the runas account that you have created for it. Hope this helps Brad Torben,

You can connect to any server to select the service if you like, this is only here to simplify this process and to help us avoid spelling errors. It is not necessary to connect the the actual server that you are planning on running the task against in the process of creating the task.. You may also type the service name in manually if you like. The recovery task will work on the DMZ machine using the runas account that you have created for it.

Hope this helps
Brad

]]>