Issues that you may experience after you install MOM 2005 on a computer that is running Windows Server 2003 with SP1

This article describes issues that you may experience after you install Microsoft Operations Manager (MOM) 2005 on a computer that is running Microsoft Windows Server 2003 with Service Pack 1 (SP1). This article also describes troubleshooting steps that you can take if you experience these issues. Finally, this article presents information that is useful if you run MOM 2005 on Windows Server 2003 with SP1, and you have enabled Windows Firewall.

You may experience several issues when you run MOM 2005 on a computer that is running Windows Server 2003 with SP1. Most of these issues are related to changes in Windows Server 2003 SP1. These changes affect the default configuration of COM+ and DCOM components. The changes also affect the way the least-privileged user account runs in the MOM Administrator console. The following is a list of these issues.

MOM server-related issues

1. When the MOM-to-MOM Product Connector in MOM 2005 tries to forward alert and discovery information to another MOM Management Server computer, you receive the following error message:
   Description: Inserting data threw an UnauthorizedAccessException. User is not part of the MOM Service or Administrators group on the remote machine.
   For more information about this problem, click the following article number to view the article in the Microsoft Knowledge Base:
   895951  (http://support.microsoft.com/kb/895951/ ) You receive an "UnauthorizedAccessException" error message when the MOM-to-MOM Product Connector tries to forward alert and discovery information in Microsoft Operations Manager 2005
2. When you use the Install Agent Wizard to install a MOM 2005 agent on an unmanaged computer, you receive the following error message:
   The MOM Server could not access registry key or value 'SYSTEM\CurrentControlSet\Control \Session Manager\Environment' on computer unmanaged computer name.
   Error code: 5
   Error Description: Access is denied.
   For more information about this problem, click the following article number to view the article in the Microsoft Knowledge Base:
   895195  (http://support.microsoft.com/kb/895195/ ) You receive an "Access is denied" error message when you use the Install Agent Wizard in Microsoft Operations Manager 2005

MOM Reporting-related issues

When you try to install the MOM 2005 Reporting component on a computer that is running Windows Server 2003, you may receive the following error message when Setup tries to create the data source: This problem typically occurs when Microsoft SQL Reporting Services SP1 is also installed on the computer. For more information about this problem, click the following article number to view the article in the Microsoft Knowledge Base:

MOM Administrator console-related issues

1. You receive the following error message when you try to open the MOM Administrator console on a computer that is not the MOM server:
   You do not have the appropriate privilege to connect to this MOM Management Server. You must be a member of at least the MOM Users group. Contact your MOM Administrator if you need access to the MOM Administrator Console.
   You may also receive the following error message when you try to open the MOM Operator console:
   Access denied to server: servername
   Note In this error message, servername is a placeholder for the name of your MOM server. For more information about this problem, click the following article number to view the article in the Microsoft Knowledge Base:
   895952  (http://support.microsoft.com/kb/895952/ ) You receive a "You do not have the appropriate privilege" error message when you try to open the Microsoft Operations Manager (MOM) 2005 Administrator Console
2. When you try to perform a commit configuration change operation from a remote MOM Administrator console, you may receive the following error message:
   Access denied
   This behavior occurs because the security permissions for remote users have changed in Windows Server 2003 SP1. By default, a remote user may not be able to enumerate or read a list of services when the user connects to a computer that is running Windows Server 2003 with SP1. To work around this problem, add the user accounts that are members of the MOM Administrators group and of the MOM Authors group to the local Administrators group on the Windows Server 2003-based computer. To do this, follow these steps:
   1. Log on to the computer by using an account that has administrative credentials.
   2. Click Start, point to Administrative Tools, and then click Computer Management.
   3. In Computer Management, expand Local Users and Groups, click the Groups folder, right-click Administrators, and then click Add to Group.
   4. In the Administrators Properties dialog box, click Add.
   5. In the Select Users dialog box, type the user account that is a member of the MOM Administrators group and of the MOM Authors group, and then click OK.
   6. Repeat steps d and e for each user account that you want to be able to remotely access the MOM Administrator console.
3. When you try to view the Computer Groups container in the MOM Administrator console, you receive the following error message:
   0x800706be: The remote procedure call failed
   When this problem occurs, the following event messages are logged in the Application log on the MOM Management Server computer.
   
   Message 1

   Type: Application Error
   Event ID: 1000
   Description:
   Faulting application dllhost.exe, version 5.2.3790.0, faulting module ntdll.dll, version 5.2.3790.1830, fault address 0x000120d0.

   Message 2

   Event ID: 4786
   Description:
   The system has called a custom component and that component has failed and generated an exception. This indicates a problem with the custom component.

   For more information about this problem, click the following article number to view the article in the Microsoft Knowledge Base:
   896989  (http://support.microsoft.com/kb/896989/ ) You receive a "0x800706be" error message when you try to view the Computer Groups container in the MOM 2005 Administrator Console

Windows Firewall-related issues

MOM Server

To use Windows Firewall on a MOM server that is running Windows Server 2003 with SP1, you must configure the firewall so that the MOM server can correctly operate. To do this, use one of the following methods:

Method 1

In the Security Configuration Wizard, select and add the MOM server components that you have installed. These components are listed as Microsoft Operations Manager 2005 server or Microsoft Operations Manager 2005 Workgroup Edition server. If you want users to be able to remotely access the MOM consoles, enable the Remote administration for MOM Management server option on the Select Server Roles page in the wizard. Then, apply the resulting policy.

Method 2

Manually configure the Windows Server 2003 firewall. For more information about how to do this, click the following article number to view the article in the Microsoft Knowledge Base:

MOM agent

To use Windows Firewall on a MOM-managed computer that is running the MOM agent, configure the firewall so that the MOM server can install, remove, or update the computer that is running the MOM agent. To do this, use one of the following methods.

Method 1

In the Security Configuration Wizard, select the Microsoft Operations Manager 2005 agent option, and then apply the resulting policy.

Method 2

Manually configure the Windows Server 2003 firewall to let the MOM server access the MOM agent. For more information about how to do this, click the following article number to view the article in the Microsoft Knowledge Base:

MOM Remote Prerequisite Checker

You can use the MOM Remote Prerequisite Checker (MOMNetChk.exe) utility in the Microsoft Operations Manager Resource Kit to scan a computer for the status of the ports that the MOM service and related services use. To obtain the MOM Resource Kit, visit the following Microsoft Web site: The MOM Remote Prerequisite Checker conducts a series of connectivity tests. These tests include a ping test and a test for DNS connectivity. The utility also provides information about the status of services that the MOM service depends on. This information can appear in a report window or be saved in the Momscan.log file.

To use the MOM Remote Prerequisite Checker, start MOMNetChk.exe, enter the computer name, and then click Run Scan. If you want to save the results to a log file, click Save to Log File, and then specify the location of the file. To view the results of the tests that were run, expand the nodes in the left pane of the utility window.

Note The MOMNetChk.exe utility tests the status of required network and service components. It does not report specific errors.

MOM Reporting

To use Windows Firewall on a MOM Reporting server, configure the firewall on the computer so that Microsoft SQL Server and Microsoft Internet Information Server (IIS) can correctly operate. For more information about how to do this, click the following article number to view the article in the Microsoft Knowledge Base:

MOM database

We do not know of any issues with the MOM database. However, to use Windows Firewall on a MOM Database Server computer, configure the firewall so that Microsoft SQL Server can correctly operate. For more information about how to do this, click the following article number to view the article in the Microsoft Knowledge Base: For information about an error message that you may receive when you connect to the MOM database through a firewall, click the following article number to view the article in the Microsoft Knowledge Base: