none
Performance metric failure (Metric collection) RRS feed

  • Question

  • I have 2 servers that keep failing to gather performance metrics. They are configured like my other servers that get the metrics fine. They get the connect to WMI fine. I am trying to collect from MAPS on an XP Pro PC. Once server is 2000, the other is 2003. The services and security settings are as they should be. The odd thing is that while the wizard is running, the security event log logs events for my machine connecting over the network, so I know its making the connection to the servers, but there will be a log on and then a log off at the same second. The virus check came up clean so I don't think there is anything like that. Below is the log entries for both servers. These repeat every 5 minutes or so.

    The 2000 machine:

    Event Type:    Success Audit
    Event Source:    Security
    Event Category:    Logon/Logoff
    Event ID:    540
    Date:        8/13/2008
    Time:        8:52:37 AM
    User:        ServerA\Administrator
    Computer:    ServerA
    Description:
    Successful Network Logon:
         User Name:    Administrator
         Domain:        workgroupA
         Logon ID:        (0x0,0x17A01537)
         Logon Type:    3
         Logon Process:    NtLmSsp
         Authentication Package:    NTLM
         Workstation Name:    MyPC


    Event Type:    Success Audit
    Event Source:    Security
    Event Category:    Logon/Logoff
    Event ID:    538
    Date:        8/13/2008
    Time:        8:52:37 AM
    User:        ServerA\Administrator
    Computer:    ServerA
    Description:
    User Logoff:
         User Name:    Administrator
         Domain:        workgroupA
         Logon ID:        (0x0,0x17A01537)
         Logon Type:    3
     

    The 2003 machine:

    Event Type:    Success Audit
    Event Source:    Security
    Event Category:    Logon/Logoff
    Event ID:    576
    Date:        8/13/2008
    Time:        10:38:58 AM
    User:        DomainA\administrator
    Computer:    ServerB
    Description:
    Special privileges assigned to new logon:
         User Name:    Administrator
         Domain:        DomainA
         Logon ID:        (0x0,0x1FD8A14)
         Privileges:    SeSecurityPrivilege
                SeBackupPrivilege
                SeRestorePrivilege
                SeTakeOwnershipPrivilege
                SeDebugPrivilege
                SeSystemEnvironmentPrivilege
                SeLoadDriverPrivilege
                SeImpersonatePrivilege

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


    Event Type:    Success Audit
    Event Source:    Security
    Event Category:    Logon/Logoff
    Event ID:    540
    Date:        8/13/2008
    Time:        10:38:58 AM
    User:        DomainA\administrator
    Computer:    ServerB
    Description:
    Successful Network Logon:
         User Name:    Administrator
         Domain:        DomainA
         Logon ID:        (0x0,0x1FD8A14)
         Logon Type:    3
         Logon Process:    NtLmSsp
         Authentication Package:    NTLM
         Workstation Name:    MyPC
         Logon GUID:    -
         Caller User Name:    -
         Caller Domain:    -
         Caller Logon ID:    -
         Caller Process ID: -
         Transited Services: -
         Source Network Address:    MyPC's IP
         Source Port:    0

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    Event Type:    Success Audit
    Event Source:    Security
    Event Category:    Logon/Logoff
    Event ID:    538
    Date:        8/13/2008
    Time:        10:38:58 AM
    User:        DomainA\administrator
    Computer:    ServerB
    Description:
    User Logoff:
         User Name:    Administrator
         Domain:        DomainA
         Logon ID:        (0x0,0x1FD8A14)
         Logon Type:    3


    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    Any ideas?

    Thanks
    • Edited by squallwesker Wednesday, August 13, 2008 3:54 PM Not clear enough
    Wednesday, August 13, 2008 3:53 PM

All replies

  • Are your XP machine (where MAPS is installed)  and your two servers all members of the same domain?  Are you using domain admin credentials in the MAPS Perf Metrics wizard?

    Thanks,
    Jay
    Wednesday, August 13, 2008 6:14 PM
  • The xp machine and the 2003 server are both on the same domain. I'm using the domain admin account for those. The 2000 machine is in a workgroup. I'm using a different admin credentials for that. I haven't had this problem with other domain or workgroup machines.
    Wednesday, August 13, 2008 6:35 PM
  • I know for sure if the machine that MAPS is running on is not a member of the domain that you're trying to gather perf metrics on, it won't work.   I'm not sure what the behavior will be if MAPS is on a domain-joined machine and you're trying to gather perf metrics from a workgroup machine.   Do you have this working with other workgroup machines?

    Wednesday, August 13, 2008 7:02 PM
  • Yes, I have gathered performance metrics for a few non-domain servers.
    Wednesday, August 13, 2008 7:06 PM
  • OK.   MAPS generates a log file as it runs.  Let me check with the the team here to see if we would get additional information from that file that might help with diagnosis if we increase the logging level.

    Hang tight....
    Wednesday, August 13, 2008 7:10 PM