For those who have more then one exchange server, i.e. Edge - Hub/Mailbox, you can use this script to monitor exchange services and if any of the services crashes and doesn't come up this can help monitor and send notification via emails. Next week I will blog about a similar script that allows for remote monitoring of these services using Powershell and WMI.
So the process involves creating the script below, and then schedule it to run every hour using the Windows Scheduler. Once this is set, the service will run locally on the machine, query itself to see if any of ...<< MORE >>
Installing Exchange SP1 Pre-reqs on Windows 2008
Prereqs:
.NET Framework 2.0 or 3.0
Powershell
MMC 3.0 (Installed by default)
IIS 7.0 with various components
Unlike IIS 6 in Windows 2003, the version that comes with Windows 2008 are broken down into many different components that must be installed/selected individually during the installation process. You can install this through the Server Manager MMC using Roles or use a command line as described here.
NOTE: All server roles other than the Edge Transport server role must first join to the appropriate internal Active Directory forest and domain
Steps:
At the command prompt type:
ServerManagerCmd ...<< MORE >>
So we have SCOM scours through our Domain Controllers in event logs in Agentless mode to look for security event IDs such as account lockout, deletion, creation, etc. Recently, we ran into an issue where SCOM was throwing caution alerts in the monitor view of SCOM with the following description:
Parameter replacement during creation of the alert failed.
Alert: 73A482E1-631D-C63A-1D17-D563646BBD9B
Workflow: MomUIGeneratedRule800972be4c264006b51ebab11dface54
Instance: domaincontroller.domain.com
Instance ID: {7A857146-7E01-F125-C938-21D9B1F75114}
Management Group: MGMTGroup1
Failing replacement: $Data/Params/Param[8]$
After some poking around I decided that the only thing worth looking at is the Alert ID and the Workflow ID. After a googling for a bit ...<< MORE >>