locked
Intersite latency - can't override RRS feed

  • Question

  • I have problem with SCOM 2007 R2 with management pack for Active Directory 6.0.7065.0.

     

    All domain controllers are Windows 2003 32bit, forest level is Windows 2003, there are no Windows 2008 nor 2000 domain controllers. First problem is described in:

    http://www.eggheadcafe.com/software/aspnet/30315495/intersite-replication-ove.aspx

     

    I can’t do working override default values for intersite replication interval – default is 15 minutes – I want to set 75 minutes and this change is not received by agents on domain controllers. Agent reports in event log 15 minutes info of not working replication:

    Site name: xxx

    (Intersite, expected replication time is 15 minutes)

    DCxxx01, Domain:dcxx01.some.domain, 57

     

    I tried to override “Intersite Expected Max Latency (min)” with enforcing this setting in:

    Rules:

        [DEPRECATED] AD Replication Monitoring

    Monitors:

      AD Replication Performance Collection – Metric Replication Latency: Maximum

      AD Replication Performance Collection – Metric Replication Latency: Minimum

      AD Replication Performance Collection – Metric Replication Latency: Average

      AD Replication Performance Collection – Metric Replication Latency

     

    Override points to “Active Directory DC and Global Catalog Server Role (Windows 2003 Server)” and similar without Global Catalog Role.

     

    The same problem I have with monitoring application partitions. I have created AD MP Account for replication monitoring, account works well for three main partitions but we don’t want to monitor application partition. In the same four monitors and in the same single rule I overide “Monitor Application Partitions” with enforcing this setting and on every one of 70 DC I have same events, that:

    -          access denied to dc=ForestDnsZones,dc....

    -          access denied to dc=DomainDnsZones,dc...

    -          expected replication time is 15 minutes, blah, blah, blah

     

    What have I done:

    -          Flush Health Service State and Cache – on many DC;

    -          restart of agent – on many DC.

     

    Why so many rules in this AD MP have got “[DEPRECATED]” prefix?
    regards,
    e-micra

    Wednesday, February 17, 2010 9:56 AM

Answers

  • Hi

    You can't do this - once you break a seal, it is broken. You can't patch it back up again (it would defeat the purpose of having a seal in the first place).

    At best, you can disable existing rules and then recreate them from scratch (there is no copy \ paste functionality) in a custom management pack.

    Sorry I can't provide a better solution.

    Good Luck

    Graham
    View OpsMgr tips and tricks at http://systemcentersolutions.wordpress.com/
    Thursday, February 18, 2010 12:03 AM

All replies

  • Wednesday, February 17, 2010 1:14 PM
  • Thanks, I missed this article or missed info in article.

    Ok, in this case there is only one option: unseal MP, correct these and seal again?

    Wednesday, February 17, 2010 9:45 PM
  • Hi

    You can't do this - once you break a seal, it is broken. You can't patch it back up again (it would defeat the purpose of having a seal in the first place).

    At best, you can disable existing rules and then recreate them from scratch (there is no copy \ paste functionality) in a custom management pack.

    Sorry I can't provide a better solution.

    Good Luck

    Graham
    View OpsMgr tips and tricks at http://systemcentersolutions.wordpress.com/
    Thursday, February 18, 2010 12:03 AM
  • One slight correction to Graham's post.  You can use MPSeal.exe to seal the MP yourself, once you've made changes to it.
    This posting is provided "AS IS" with no warranties, and confers no rights. Use of attachments are subject to the terms specified at http://www.microsoft.com/info/cpyright.htm
    Wednesday, April 28, 2010 9:11 PM
  • The best post on how to override the Intrasite Replication I've seen is over on Jimmy's Blog. Overriding the AD MP is fairly clunky overall.
    Thursday, April 29, 2010 9:01 AM
  • Hi Cory

    I need to be more precise in my wording ... if you use MPSeal then you are creating a new seal ... not recreating the original seal. So I can't use MPSeal to reseal a Microsoft Management Pack (in this case the AD Management Pack) and expect it to work .. or be upgradeable .. can I??

    Cheers

    Graham  


    View OpsMgr tips and tricks at http://systemcentersolutions.wordpress.com/
    Thursday, April 29, 2010 9:35 AM