System Center Essentials 2010 announcement

• Link
  Frequently Posted Questions and Answers
  Anshu Agrawal Monday, January 11, 2010 8:49 PM

  Frequently Posted Questions and Answers

  Following list of questions are from SCE 2007 and SCE 2010 forums and answers applies to SCE 2010.
  Document Owner: Anshu Agrawal

   

  Question 1 - How can I create auditing rules in Essentials?

  Question 2 - How do I set up a remote console in a different domain or using local policy?

  Question 3 - How can I discover network devices to manage?

  Question 4: Can I run both Essentials and WSUS in the same domain?

  Question 5: Can I monitor a machine that is in a workgroup?

  Question 6:  My managed computers installed successfully, but still report a status of "unknown" in the computer space.  How can I get them to contact?

  Question 7: How can I create a dynamic deployment group?

  Question 8: I get an error when creating software packages saying verification failed.  How do I resolve the issue?

  Question 9: What would prompt an update to go in “Unknown” category in updates space overviews page?

  Question 10: What steps are required to uninstall Essentials from server A and reinstall on server B on same domain?

  Question 11: Is it possible to upgrade from SQL Express to SQL standard without reinstalling Essentials?

  Question 12: Can Essentials ask for the location of the VM files on the destination during the migration process?

  Question 13: Can a package be redeployed?

  Question 14: If we disable auto-select would it uncheck previously selected products?

  Question 15: Where can I find deployment guide of Essentials 2010?

  Question 16: What is the data retention schedule for reporting in Essentials? 

  Question 17: How can you send files to Microsoft for the Essentials team to review?

  Question 18: How can you verify if the computer (agent) is contactable via network?

  Question 19: What if the computer discovery fails for an agent box?

  Question 20: How can you choose installation path for SQL in Essentials installation process?

  Question 21: Why does running the automatic approval rule for all computers result in unapproved updates?

  Question 22: Can third party updates be approved by auto-approval feature?

  Question 23: What if you see monitoringHost.exe process consuming a lot of CPU?

  Question 24: How to troubleshoot if windows update (WU) and Essentials reports different status for updates?

  Question 25: What are the locations to find common logs to troubleshoot issues in Essentials?

  ----------------------------------------------------------------------------------------

  Question 1 - How can I create auditing rules in Essentials?

  Answer: In Essentials, you can create custom rules that collect events from the security log. 

  Go to Authoring space -> Management Pack objects -> select Rules -> Create a rule -> Alert Generating Rules/Event Based/NT Event Log.

  Select the Essentials group you want to collect events from. To collect from all computers, select the Agent group.

  Select the Security Log to collect events from. Next you build the Filter Expression.

  The Source will be Security and the Event ID will be the security event you are interested in, for example event 612 is Audit Policy Changed.

  Finally, configure the alert with title and description to match the event, such as "Audit Policy was changed".

  You need to make sure that auditing for the type of event you want to capture is turned on at the domain group policy or local security policy level, otherwise the security events won't be written to the log for Essentials to see them.

   

  Question 2 - How do I set up a remote console in a different domain or using local policy?

  Answer: When in the same domain, the certificates used to connect to Essentials are generally available from the group policy, but for a different domain or local policy, the certificates require manual import on the UI machine.

  The two certificates are available on the Essentials server in the install directory folder titled Certificates.  The WSUSSSLCert.cer should be imported into the local computer's trusted root authority store.  The WSUSCodeSigningCert.cer should be imported into the local computer's trusted root authority, third party publishers and third party root certification authority stores.

  Question 3 - How can I discover network devices to manage?

  Answer: To discover network devices, launch the same wizard used to discover computers (it appears in the administration space of the splash page in Computer and device section with the name "Add new Computer and devices").  In the Discovery type page, chose network devices.

   

  Question 4: Can I run both Essentials and WSUS in the same domain?

  Answer: Individual machines can only report to one WSUS server.  Those machines managed by Essentials should only report to the Essentials server for updates, although users are not prohibited from contacting Microsoft update directly by default.  If not all machines in the domain report to the Essentials server, a second Essentials server can be used to manage just those machines not included in Essentials.

   

  If the current environment is running a WSUS 3.0 server, you can upgrade the current server to be a Essentials server and retain the settings and data currently stored.

   

  Question 5: Can I monitor a machine that is in a workgroup?

  
  Answer: Yes.  You will require two certificates from a trusted authority for both the Essentials server and the new manual agent.

  For more information on how to create the appropriate certificates, see http://technet.microsoft.com/en-us/library/bb735408.aspx

   

  To import the Essentials server’s certificate on the server machine, use the install directory\tools\MOMCertImport.exe tool. 

  Use the System Center Essentials 2010 media and choose a manual agent install.  You will need the two certificates from the install directory of SCE in a folder called ‘certificates’ (WSUSSSLCert.cer and WSUSCodeSigningCert.cer, as well as the PFX certificate from the trusted authority and the trusted authority .cer certificate.

   

  Question 6:  My managed computers installed successfully, but still report a status of "unknown" in the computer space.  How can I get them to contact?

  Answer:  The out of box experience wizard or configure product features wizard must have been run before computers will report status in this section.  If using group policy, the settings may take some time to update before the clients will contact.  If using local policy, the configure product features wizard must be run before agent deployment.

  If these steps have been completed successfully, check one of the machines that is reporting the "unknown" inventory by running the rsop.msc.  Computer Configuration\Administrative Settings\Windows Components\Windows Update\Specify intranet Microsoft updates location should point to https://sceserver.fqdn:8531.  If this is not the case, check that the computer is a member of the AD security group SCE Managed Computers (SCESERVER_MG) and if so, try relogging into the machine or rebooting to pick up the group membership.

  If the correct server is reported, check the %WINDIR%\WindowsUpdate.log to see if any errors are occurring with contacting the Essentials server.  As always, if the answer is not clear, these forums are here to help!  Including the log file information in your post will aid in quick answer.

   

  Question 7: How can I create a dynamic deployment group?

   Answer: Many dynamic groups are available in Essentials from imported management packs that are not initially update/software deployment groups.  For example, groups already exist for SQL servers, active directory servers, or exchange servers if the management packs have been imported for monitoring.  To make these deployment groups, chose to create a group from an already exiting group in the computers space grouping wizard.  If the group you would like to create does not exist by default, try choosing the option to Specify Criteria.  This will create a dynamic group based on manufacturer, model, operating system, service pack, and/or organizational units.

  The authoring space contains a more complex grouping wizard that can create a dynamic computer group based on computer properties.  Once the group has been created from the wizard, it will be available to become update/software deployment group in the computers space using the “create new groups wizard”.

   

  Question 8: I get an error when creating software packages saying verification failed.  How do I resolve the issue?

   

  Answer: Either the out of box experience wizard or the product configuration wizard must be run before using any of the software packaging features of the product.  If this is a remote UI, ensure that the WSUSSigningCert.cer is imported onto the local UI machines Trusted Root Authorities, Third Party Publishers and Trusted Publishers certificates store.  You can find this certificate on the Essentials server installation directory in a folder called Certificates.

   

  Question 9: What would prompt an update to go in “Unknown” category in updates space overviews page?

  Answer: The Update comes to unknown state if it’s not pending, failed or successful. When an update is not qualified for any other states it will put into unknown state.

  Basically “unknown” state is not an installation status as we have pending, failed and successful. Usually it is because an update is so “new” to Essentials that WSUS hasn’t run the applicability check on that update yet. So WSUS does not even know if the update is applicable to the clients. Not to mention the installation status which is after the applicability check, approval and installation of the update are done. Unknown is usually a transient state.

  The unknown state will not display on the overview page of the updates space in Essentials 2010.

   

  Question 10: What steps are required to uninstall Essentials from server A and reinstall on server B on same domain?

  Answer: You must uninstall Essentials from server A to install it on server B first if both servers are on same domain (Only one copy of Essentials per domain is supported).
  Please follow the following steps:
  
  1. Uninstall from server A
  2. Check to make sure the AD GPO and Security group objects are gone from AD (The security group is called SCE Managed Computers and the policy objects are named System Center Essentials All Computer Policy and SCE Managed Computer Policy)
  3. Install Essentials on server B.
  NOTE: Please go to administration->agent managed and uninstall all SCE agents prior to reinstalling Essentials.
  
  Also, uninstall Essentials will also uninstall WSUS.

  Question 11: Is it possible to upgrade from SQL Express to SQL standard without reinstalling Essentials?

  Answer: It is possible to upgrade SQL Express to SQL standard:
  http://www.toddklindt.com/blog/Lists/Posts/Post.aspx?ID=55 

  Question 12: Can Essentials ask for the location of the VM files on the destination during the migration process?

  Answer: On the Migrate Virtual machine page, there is an option to specify the folder location on the destination host. There is also a "Browse..." button to select a different location on the destination host. The virtual machine will be placed on the location specified here.

  Question 13: Can a package be redeployed?

  Answer: If you have successfully deployed your package and try to redeploy it won't fail or give you any errors, it will just not re-deploy it. In other case if you are trying to redeploy a package because it failed before. You can fix the failures on the package and redeploy it and it will deploy it. You can also do:
  1)If the package is based on msi, you just uninstall it on the client and it will be redeployed.
  2) If the package is based on exe, you have to delete the file C:\Windows\SoftwareDistribution\DataStore\DataStore.edb (need to stop the automatic update service before). If you do this, all exe based applications that have been deployed to this machine before will be redeployed.

  Question 14: If we disable auto-select would it uncheck previously selected products?

  Answer: If you disable auto-select it will keep the products selection settings currently chosen but it will not add any or remove any product unless the user selects to manually.

  Question 15: Where can I find deployment guide of Essentials 2010?

  Answer: Deployment Guide

   

  Question 16: What is the data retention schedule for reporting in Essentials? 

  Answer: The data retention value is 37 days for reporting.
  If the retention period is increased on SQL Express you may hit the maximum allowed SQL Express database size.

  Question 17: How can you send files to Microsoft for the Essentials team to review?

  Answer: You can send data like logs, screenshots etc to us for review rather than posting them into a thread post.  This should help keep the posts smaller and easier to read.

  If requested, please send email to SCEData@microsoft.com.  If at all possible, please zip the files before sending.

  Please be sure to match the subject of the email with the subject of the post.

  Question 18: How can you verify if the computer (agent) is contactable via network?

  Answer:

  a.     Use the ping command to try and reach the computer using the same name provided to the discovery wizard.  You can do that by going to computer space -> select the computer -> Ping from task pane.

  b.    b. If the machine responds to a ping command, use the IP address of the computer to run ping with the “-a” switch and the IP address, e.g. “ping –a <IP address>”.  This will display the DNS name of the machine; it should match what was used in the original ping command.

  c.     c. Use “nbstat –a <computer name>” to see the registered NetBIOS name and the domain for the computer.  Use “nbstat –A <IP address>” to accomplish the same task using the IP address of the machine.

  d.    NetBIOS is not enabled by default and your network may not be configured to use it.  To determine NetBIOS status, use “ipconfig /all” from the command-line and look for a NetBIOS entry.

   

  Question 19: What if the computer discovery fails for an agent box?

  Answer:  Open the Event Viewer on Essentials server, check if any error message is logged on the Operations Manager event log with the computer name. You can forward the error message or screenshot at SCEData@microsoft.com

   

  Question 20: How can you choose installation path for SQL in Essentials installation process?

  Answer: Default installation does not allow choosing the SQL installation path. But you can install the SQL manually in the desired location and then try installing the SCE 2010. You can find the SQL 2008 Express bits under the prerequisite\SQL folder. SCE setup will detect the installed SQL instance.

   

  Question 21: Why does running the automatic approval rule for all computers result in unapproved updates?

  Answer: this can happen if EULA for that unapproved update has not been accepted. You can manually accept EULA and approve the update and then re-run your auto-approval rule. You will have to accept a EULA for each product separately.   Still it will save time of not approving all EULA for a single product manually.

   

  Question 22: Can third party updates be approved by the auto-approval feature?

  Answer: In Essentials 2010 you cannot run auto-approval rules to approve third party updates / catalogs.

   

  Question 23: What if you see monitoringHost.exe process consuming a lot of CPU?

  Answer: MonitoringHost.exe uses 100% of CPU is a known issue  - Kevin discusses it here from ops manager:
  http://blogs.technet.com/kevinholman/archive/2009/07/20/do-you-randomly-see-a-monitoringhost-exe-process-consuming-lots-of-cpu.aspx
  
  You can try restarting your health service for now.

   

  Question 24: How to troubleshoot if windows update (WU) and Essentials report different status for updates?

  Answer: If you are seeing more updates on WU/MU please take one update which is not shown in Essentials as needed and make sure the update is approved to the specific client.

  You can get the information by creating a view with the filter “Unapproved update” , select the specific computer group where your client machine resides. If you see the updates there you need to approve the updates.

  The other way you can achieve this by opening the %windir%/windowsupdate.log and look for the update and see what target group the update is approved to. E.g.

  2009-12-01 10:03:59:928  944 ee0 PT Initializing simple targeting cookie, clientId = d1b466eb-cc3c-43c1-bf48-d93323414e04, target group = , DNS name = sh13.shs.loc

  In the above log the target group is null and therefore the update is not approved.

  If you still see the discrepancy please post your query on Essentials forums.

   

  Question 25: What are the locations to find common logs to troubleshoot issues in SCE?

  Answer: You can find all the locations in the Essentials blog for Essentials 2010 troubleshooting guide:

  http://blogs.technet.com/systemcenteressentials/archive/2009/12/05/essentials-2010-troubleshooting-guide.aspx

  Please let us know if you have any other question along with answer which we can add in this post. 

   

   

  Credit for Answers Provided by:

  Stephanie Drenchen

  Anshu Agrawal

  Ranjith A

  Yog Li

  John Joyner

• Link
  Frequently Asked Questions for System Center Essentials 2010
  Richard Rundle Monday, September 28, 2009 9:25 PM

  Frequently Asked Questions

  General

  Q. What is System Center Essentials 2010?

  A. Microsoft System Center Essentials 2010 provides IT professionals in mid-sized organizations a unified physical and virtual IT management experience. It enables you to better secure, update, monitor, and troubleshoot from a single console, so you can efficiently and proactively manage your IT environment

   

  Q. When will System Center Essentials 2010 be available?

  A. The evaluation version of Essentials 2010 is available now. Essentials 2010 will be available for purchase from June 1, 2010.

   

  Q. How can I evaluate Essentials 2010?

  A. Download Essentials 2010 (registration required).

   

  Q. How long can I use the trial version of Essentials 2010?

  A. The trial version is valid for 180 days (6 months) from the date of installation.

   

  Q. Can I upgrade from the RC of Essentials 2010 to the final (RTM) version?
  A. Yes. You can upgrade from the RC to the RTM. Download the trial version and run SetupSCE.exe to upgrade.
  

  
  Q. Can I upgrade from the Beta of Essentials 2010 to the RC or the RTM?
  A. No. You need to uninstall the Beta and then install the RTM version.

   

  Q. What documentation is available for Essentials 2010?

  A. You can access Release Notes, Deployment Guide, Operations Guide, videos and other documentation from the Essentials 2010 evaluation site.

   

  Features and Specifications

  Q. How many computers can I manage with System Center Essentials 2010 RC?

  A. You can manage up to 50 computers running a Windows Server operating system and up to 500 computers running a Windows client operating system You can also monitor network devices using Essentials.  

   

  Q. What languages is System Center Essentials 2010 available in?

  A. Essentials 2010 is available in Chinese (Simplified), Chinese (Traditional), English, French, German, Italian, Japanese, Korean, Portuguese (Brazil), Russian and Spanish. English is the first language released, and all languages will be available within 90 days of the English language release.

   

  Q. Does System Center Essentials 2010 support Remote Operations Manager?

  A. No. Remote Opertions Manager is only supported for Operations Manager 2007 SP1 and Essentials 2007 SP1.

   

  Q. Can I upgrade from Essentials 2007 to Essentials 2010?

  A. Yes. It is possible to upgrade your existing Essentials 2007 installation to Essentials 2010 using the same server.  Run SetupSCE.exe and your existing installation will be detected and you will have the option to upgrade.

   

  Q. Can I run both Essentials 2007 and Essentials 2010 in the same environment?

  A. Yes, but you must meet the following criteria:

  ·         You cannot monitor the same computers using both Essentials 2007 and Essentials 2010.

  ·         If Essentials 2007 is using domain policy then Essentials 2010 must use local policy.
  

  More information on domain and local policy configuration is in the Essentials Deployment Guide.
   

  Q. Can I run both Essentials 2010 and Virtual Machine Manager 2008 in the same environment?

  A. Yes. Do not manage the same hosts or virtual machines using both Essentials 2010 and Virtual Machine Manager 2008 R2. Essentials 2010 includes its own functionality for managing virtual machines. You cannot install both the Essentials 2010 and Virtual Machine Manager 2008 R2 on the same computer. 
    

  Pricing and Licensing

  Q. How much does System Center Essentials 2010 cost?

  A. Final pricing and licensing will be available by the end of May 2010. There is currently a limited time offer to purchase Essentials 2007 and Virtual Machine Manager 2008 with one year of Software Assurance which includes a free upgrade to Essentials 2010.

• Link
  Welcome to System Center Essentials 2010!
  Richard Rundle Friday, September 25, 2009 10:33 PM

  Hello and welcome to the Microsoft System Center Essentials 2010 forum!

  This forum provides you an opportunity to join a community of IT Administrators who are using System Center Essentials 2010. Essentials 2010 is designed for managing IT environments with up to 50 servers and 500 client computers.

  Here you can share knowledge, get questions answered, and learn from others with IT environments similar to yours.

  Microsoft System Center Essentials 2010 is the successor to System Center Essentials 2007. If you have questions on Essentials 2007, please post them in the Essentials 2007 forums.