Applying CU1 to OpsMgr 2012 SP1 with Kevin Holman

Even though updating System Center 2012 Operations Manager has gotten a whole lot easier it is still better the guides from Kevin Holman. Check the guide for CU1 for SP1 here.

SLA Management in System Center Operations Manager

The idea behind this article is to show you how you can create dynamic groups that represent different Service Level Agreements (for example GOLD, SILVER or BRONZE). Depending what SLA level is certain CI (server) it will be put in the corresponding group.

Also I should mention that this solution is already available over Internet but is described in a couple of articles by different authors an I just want to gather all the information on one place and point out some tips that will be helpful if you decide to implement such solution on your own.


First you need to build your SLA model. The best way is to use Active Directory. Lets say you have 3 different SLAs – GOLD, SILVER and BRONZE then you can create 3 security groups for example SLA-GOLD, SLA-SILEVR and SLA-BRONZE. In these groups you will put the AD computer objects of your servers. For example if server have SLA GOLD the computer object of that server have to be added as member of group SLA-GOLD. With this example you distribute all your servers in the groups depending on your SLA. If you have servers that do not have SLA you do not add them in any of the groups. When you populate the 3 groups you have to create one GPO. That GPO should apply different registry key on the servers depending in which security group is. It is good idea the reg key to be applied in path like this HKLM\Software\CompanyName with DWORD Values like SupportLevel and data like 1 for GOLD, 2 for SILVER, 3 for BRONZE and 0 for NO-SLA. So if server doesn’t belong to any of the 3 groups DWORD Value SupportLevel with data 0 will applied. This GPO should be linked to the OU where you store the computer objects for your servers.

Note: You can use your own DWORD or String values for distinguishing SLA.

This SLA model for Active Directory was developed by my colleague Yordan Dimov.

Now that we have the registry keys applied to the servers we need to bring that information in SCOM. Kevin Holman has a great article describing how to do that titled “Creating custom dynamic computer groups based on registry keys on agents”.

The disadvantage of the proposed solution by Kevin is that it populates only the the SCOM computer objects in the dynamic groups. Kevin also mentions that disadvantage. Bu there is solution for that proposed by Tim McFadden in “Dynamic Computer groups that send heartbeat alerts”. In the article you will find out how to populate the groups the SCOM heartbeat object of the servers. In the comments of the article you can also find out a way to add the cluster names if the servers that are added to particular group are nodes of a cluster. I suggest to populate the groups with the heartbeat objects and the cluster names in order not to miss alerts when you forward them to SCSM or any other Configuration Management System.

Note: You have to have some some basic knowledge about the structure of management packs and XML.

After this you might think you are ready but there are some other obstacles you may face. If you have Hyper-V servers with virtual machines on top of them and you’ve imported Hyper-V management pack you will probably stumble on one particular issue. If you add Hyper-V server to SLA group all the virtual machines that are located on that server will be added to the SLA group in SCOM also. And some of these virtual machines may even do not have SLA and you alerts for them will be forwarded to your ticketing system. I can confirm that this issue is present in SCOM 2007 but you may also face it in SCOM 2012. In the Hyper-V Management Pack there is discovery that creates relationship between the Hyper-V server and the guest virtual machines but that association doesn’t work properly as it creates these weird issues. Another issue that you might face because of that association is for example if you put Hyper-V hosts in maintenance mode all virtual machines on that host will also be put in maintenance mode. But there is a cure for these issues also. You have to disable that discovery and Kevin described how in his article “Why do my group memberships for Windows Computers have machines that don’t belong there?”.

If you follow the steps described by Kevin and you still see this association for hyper-v servers that are part of clusters I suggest to follow these steps to resolve it completely:

1. Manually uninstall all SCOM agents on all nodes part of a cluster.

2. Remove the cluster name from agentless monitoring. If you can do it trough the SCOM console follow this article “Operations Manager (SCOM) 2007 – How to remove cluster objects from scom when computer objects in cluster cannot be deleted”.

4. Delete the nodes from Agent Managed views in Administration pane.

3. Run Remove-DisabledMonitoringObject command in SCOM PowerShell. Wait 20-30 min.

4. Install SCOM agents on all nodes.

5. Add cluster name to Agentless monitoring.

Now that you fixed any obstacles you can configure SCOM to send alerts to SCSM only for servers that are in SCOM SLA group. This can happen trough the following steps:

1. Open SCOM console.

2. Open Administration pane.

3. Open Internal connectors view.

4. Find the connector that sends alerts to SCSM and configure it to send alerts alerts only from your dynamic SLA groups.

Additionally with these SLA groups in SCOM you can create different overrides depending on SLA level.

Once again a big thank you to all members of the SCOM community.

Performance monitors for Cluster Disks in latest Windows OS MP

As Kevin describes in his article about the latest Window OS MP Cluster disks are missing performances rules. So Kevin decided to help the community and showed us how we can make an MP to create these rules. Find the article here.

Thank you Kevin for helping the community.

OpsMgr 2012: Update Rollup 2 by Kevin Holman

As usual Kevin releases an article describing his experience of installing the latest update on SCOM. This is a must read article which you can find here.

I am MCSE: Private Cloud

Last Sunday I’ve got the idea that I should pass Monitoring and Operating a Private Cloud with System Center 2012 exam. I saw in several posts that Marnix Wolf, Kevin Holman and Bob Cornelissen managed to pass the exam. And as I always wanted to be as good as these guys I decided to accept the challenge to pass that exam. If you want to be like the best you have to act like the best. I’ve been studding System Center 2012 components since beta (watching videos, reading articles, participating in learning sessions and etc.) and I have pretty decent knowledge for the previous versions with most experience in SCOM. So when I made up my mind first thing in the morning I’ve called the testing center and scheduled exam date for 21st of June. The days before the exam after work I’ve studied for couple of hours. I was nervous before and during the exam but when I finished it and I saw the magic word that I’ve passed I’ve felt relived and very happy at the same time. So now I am waiting my MCP profile to be updated and to actually see it with my own eyes. With this exam passed and because I have already MCSA: Windows Server 2008 and 70-569 I have to receive also Microsoft Certified Solutions Expert: Private Cloud. I was the first person that took the exam in that testing center and probably I am the first from my country that took it. The same probably applies to MCSE: Private Cloud. I am really happy and I recommend to every engineer that is SCOM expert to take it.