SCE SP1 Group Memberships Not Reflected in WSUS
I've been researching this problem and trying fixes off and on for a few weeks. Hoping that someone with more experience with SCE and WSUS will be able to help me solve it. Sorry, but I cannot think of a single event or process that might have caused the issue, only that I noticed the problem and can replicate it at will. Not sure either if the problem resides in SCE or WSUS or a combination of both. I'll explain that below. Currently running SCE SP1 v.6.0.1885.0,WSUS v.3.2.7600.226 and SQL 2005 v.9.0.4053 on Server 2003 SP2. Everything patched current through last week. The SCE / WSUS environment has been stable for quite some time ... at least as stable as can be expected from the current SCE / WSUS versions. So ....... here are the symptoms .... 1. Create a group in SCE with one member. The group appears in WSUS, but without any members. Count in WSUS shows 0 of 0, 47 total. Updatestatus is 'Any'. (PROBLEM #1)2. Add more members to the group in SCE. All members appear if Properties are selected, but only the original computer is listed if the group name is selected in the Computers panel. (PROBLEM #2). No change in WSUS ... group name appears, but no members listed.I have tried using Refresh in both SCE and WSUS, but no change. Same if I restart the OpsMgr Health Service. Same if I wait 2+ hours to allow the System.SCE.MP.GroupSynchronizationRule to run. Same if I assign some updates to the group via SCE after creating the group.To the best of my recollection, I have not made changes in WSUS ..... only in SCE. Listed below are some of the OpsMgr events that I think are pertenant to this issue:Event Type:WarningEvent Source:Health Service ModulesEvent Category:NoneEvent ID:31401Date:11/30/2009Time:12:15:25 PMUser:N/AComputer:ESC-IT-03Description:An exception occured processing a group membership rule -- retrying:Subscription ID: c16e296d-3ed4-4f49-8382-5f84bc78fb98Rule ID: 01837450-a5f0-70f1-7639-3a653f0be1dcGroup ID: f983c360-58c7-bd3b-b4bf-95cd3ba31d92Group type name: Microsoft.SystemCenter.Essentials.DefaultUser.DeploymentGroup_c30f14b1701f442b9074d8aaf32978dfException: System.ArgumentOutOfRangeException: Index was out of range. Must be non-negative and less than the size of the collection.Parameter name: index at System.ThrowHelper.ThrowArgumentOutOfRangeException(ExceptionArgument argument, ExceptionResource resource) at System.ThrowHelper.ThrowArgumentOutOfRangeException() at System.Collections.Generic.List`1.get_Item(Int32 index) at System.Collections.ObjectModel.ReadOnlyCollection`1.System.Collections.Generic.IList<T>.get_Item(Int32 index) at Microsoft.EnterpriseManagement.Common.ResultSet.get_Item(Int32 index) at Microsoft.EnterpriseManagement.Mom.DataAccess.DataAccessUtility.GetManagedEntityKeyValuePairs(Guid baseManagedEntityId, Guid managedTypeId, Int32 mtvRow, QueryResults mtvQueryResults, ReadOnlyCollection`1 keyPropPairs, DatabaseConnection databaseConnection) at Microsoft.EnterpriseManagement.Mom.DataAccess.DataAccessUtility.GetManagedEntityKeyValuePairs(Guid baseManagedEntityId, DatabaseConnection databaseConnection) at Microsoft.EnterpriseManagement.Mom.DataAccess.EntityKeyValuePairCache.GetKeyValuePairs(Guid baseManagedEntityId, DatabaseConnection databaseConnection) at Microsoft.EnterpriseManagement.Mom.DatabaseQueryModules.ExpressionEvaluatorForSnapshot.GetIncludeListMembershipChangesForSnapshot(IList`1 includeList, Guid groupInstanceId, Guid groupTypeId, Guid relationshipId, Guid targetManagedTypeId, ReadOnlyCollection`1 groupKeyNameValuePairs, DatabaseConnection databaseConnection) at Microsoft.EnterpriseManagement.Mom.DatabaseQueryModules.MembershipRuleEvaluator.EvaluateSnapshot(MembershipSubscription subscription, DatabaseConnection databaseConnection) at Microsoft.EnterpriseManagement.Mom.DatabaseQueryModules.MembershipCalculationManager.SnapshotCalculation(MembershipSubscription membershipSubscription, DatabaseConnection databaseConnection) Event Type:WarningEvent Source:Health Service ModulesEvent Category:NoneEvent ID:31401Date:11/30/2009Time:12:15:29 PMUser:N/AComputer:ESC-IT-03Description:An exception occured processing a group membership rule -- retrying:Subscription ID: a099fb9b-f8c1-48ec-8fcc-953a881cc529Rule ID: 335d2d7f-e371-d8be-b7a0-9b10f6f578e0Group ID: 4fd5c374-4b41-6506-1a2a-5ccc7d95bc7aGroup type name: Microsoft.SystemCenter.Essentials.DefaultUser.DeploymentGroup_0ad21e48a77f4678be4362b3b8bd251aException: System.ArgumentOutOfRangeException: Index was out of range. Must be non-negative and less than the size of the collection.Parameter name: index at System.ThrowHelper.ThrowArgumentOutOfRangeException(ExceptionArgument argument, ExceptionResource resource) at System.ThrowHelper.ThrowArgumentOutOfRangeException() at System.Collections.Generic.List`1.get_Item(Int32 index) at System.Collections.ObjectModel.ReadOnlyCollection`1.System.Collections.Generic.IList<T>.get_Item(Int32 index) at Microsoft.EnterpriseManagement.Common.ResultSet.get_Item(Int32 index) at Microsoft.EnterpriseManagement.Mom.DataAccess.DataAccessUtility.GetManagedEntityKeyValuePairs(Guid baseManagedEntityId, Guid managedTypeId, Int32 mtvRow, QueryResults mtvQueryResults, ReadOnlyCollection`1 keyPropPairs, DatabaseConnection databaseConnection) at Microsoft.EnterpriseManagement.Mom.DataAccess.DataAccessUtility.GetManagedEntityKeyValuePairs(Guid baseManagedEntityId, DatabaseConnection databaseConnection) at Microsoft.EnterpriseManagement.Mom.DataAccess.EntityKeyValuePairCache.GetKeyValuePairs(Guid baseManagedEntityId, DatabaseConnection databaseConnection) at Microsoft.EnterpriseManagement.Mom.DatabaseQueryModules.ExpressionEvaluatorForSnapshot.GetIncludeListMembershipChangesForSnapshot(IList`1 includeList, Guid groupInstanceId, Guid groupTypeId, Guid relationshipId, Guid targetManagedTypeId, ReadOnlyCollection`1 groupKeyNameValuePairs, DatabaseConnection databaseConnection) at Microsoft.EnterpriseManagement.Mom.DatabaseQueryModules.MembershipRuleEvaluator.EvaluateSnapshot(MembershipSubscription subscription, DatabaseConnection databaseConnection) at Microsoft.EnterpriseManagement.Mom.DatabaseQueryModules.MembershipCalculationManager.SnapshotCalculation(MembershipSubscription membershipSubscription, DatabaseConnection databaseConnection) ........ quite a few more event id 31401, thenthree event id 30202:Event Type:ErrorEvent Source:System Center EssentialsEvent Category:NoneEvent ID:30202Date:11/30/2009Time:12:16:58 PMUser:N/AComputer:ESC-IT-03Description:The SCE Group identified by '30753587-1af7-90ce-c97f-f8f3d9a4e7e6' could not synchronize to its associated WSUS Group identified by '97b065a6-c64a-4e34-b86f-b5bbbf07b8ba' because the SCE Group could not be found. The module will be unloaded. Management Group: ESC-IT-03_MGRule: System.SCE.MP.GroupSynchronizationRuleInstance: 97b065a6-c64a-4e34-b86f-b5bbbf07b8ba.30753587-1af7-90ce-c97f-f8f3d9a4e7e6Instance Id:{BA6221CA-B360-CDC6-E589-AD426F8DA203} Event Type:ErrorEvent Source:System Center EssentialsEvent Category:NoneEvent ID:30202Date:11/30/2009Time:12:16:58 PMUser:N/AComputer:ESC-IT-03Description:The SCE Group identified by '3b0d02f0-bed0-1fbf-91d0-21ac3d376c8b' could not synchronize to its associated WSUS Group identified by 'e3aa4b1c-d214-4d76-adb7-a4caa52d6592' because the SCE Group could not be found. The module will be unloaded. Management Group: ESC-IT-03_MGRule: System.SCE.MP.GroupSynchronizationRuleInstance: e3aa4b1c-d214-4d76-adb7-a4caa52d6592.3b0d02f0-bed0-1fbf-91d0-21ac3d376c8bInstance Id:{9A65FE7B-1858-D381-8159-DC66C3272A9D} Event Type:ErrorEvent Source:System Center EssentialsEvent Category:NoneEvent ID:30202Date:11/30/2009Time:12:16:58 PMUser:N/AComputer:ESC-IT-03Description:The SCE Group identified by '0c2e59d1-e3fd-8ced-cc99-9fa5c3c00dad' could not synchronize to its associated WSUS Group identified by 'd77dee8c-8da5-41c9-ab4e-8adc39f01f8e' because the SCE Group could not be found. The module will be unloaded. Management Group: ESC-IT-03_MGRule: System.SCE.MP.GroupSynchronizationRuleInstance: d77dee8c-8da5-41c9-ab4e-8adc39f01f8e.0c2e59d1-e3fd-8ced-cc99-9fa5c3c00dadInstance Id:{82359ABD-7286-3FC2-0873-BF10CD46E852} There are a heckuva lot more event ids and instances than just these two. I'll be happy to post any of those or any other information that might assist in figuring out the problem(s). Thanks in advance,Bob LaszkoSpanky's Portable Servicesrlaszko@spankysps.com
December 1st, 2009 2:39am

Hello Bob,Did you ever delete any Computer Group in WSUS console before this issue occured? For example, "All computers" or "All servers"? If so, try the solution in the thread below:Deleted "All Clients" group by mistakehttp://social.technet.microsoft.com/forums/en-US/systemcenter/thread/272c53de-cc76-44cc-a843-41dd62c5b5b7/Multiple issueshttp://social.technet.microsoft.com/forums/en-US/systemcenter/thread/01cd4140-a880-4792-be1d-930ab5d1958a/Besides, did the issue just occur after upgrading WSUS 3.1 to 3.2?Thanks, Yog Li - MSFT
Free Windows Admin Tool Kit Click here and download it now
December 2nd, 2009 2:40pm

Yog Li,Thanks for the reply. Yes, it's entirely possible that I deleted a group i WSUS. With that in mind, a couple of weeks ago Itried the suggstion from the the first link that you listed. All of the TargetGroupID records already matched the same groups listed in TargetGroupID field :< I have seen and reviewed the second link as well, but didn't think it would apply to my situation. If you're recommending that I try it, even though the 'default' groups of All Computers, All Servers and All Clients are intact, what steps, if any, should I take to preserve changes that could be wiped out by deleting MPs? We upgraded to WSUS 3.2 a couple of months ago. Everything worked fine until just a couple of weeks ago. Thanks again for your assistance. Bob Laszko
December 2nd, 2009 5:35pm

Hello Bob,There's no need to try to restore the default groups if they are no deleted. If you did delete a group from WSUS console, try the steps in the followingthread to delete the Group from the database.Event ID 30201http://social.technet.microsoft.com/Forums/en-US/systemcenter/thread/7ee2423f-4f89-4eef-aa6e-5bf8598686f8/Hope it helps,Yog Li - MSFT
Free Windows Admin Tool Kit Click here and download it now
December 3rd, 2009 1:53pm

Bob,There is a limitation in SCE as for the number of groups that you can have. If you have more then 24-28 groups (inlcuding the default) you will start getting sync errors and the groups will be out of sync.How many groups do you have (if you look in the computer space)Bjrn Axell MVP - Advisec AB http://blog.advisec.com
December 8th, 2009 1:07am

Yog Li,Sorry for the delay in responding. I didn't get any auto-alert emails that you had left another message :<I had previously tried the tips given in the link you suggested (http://social.technet.microsoft.com/Forums/en-US/systemcenter/thread/7ee2423f-4f89-4eef-aa6e-5bf8598686f8/) but hadno luck because the GUID identifiedin"The SCE Group identified by" part of the event error was notlisted in any record under in the MOMGroupIDxxxxxxxx field. However, I looked at it again this morning andfound that the GUIDs identified in two of the three event errors were now in OperationsManager.MT_DeploymentSettings in the MOMGroupIDxxxxxx field. The group names matched what I had created in SCE. As a test, I have deleted one of the records. I'm going to let the synchronization happen 'naturally', so I'l wait two hours and see what happens. I'll post the results as soon as I can.Thanks again for the assist.Bob Laszko
Free Windows Admin Tool Kit Click here and download it now
December 10th, 2009 7:31pm

Bjorn,Thanks for the tip, but I had already come across that one too. I only have eight groups defined. Bob Laszko
December 10th, 2009 7:32pm

Yog Li,Sorry, but same results as I posted in my original message. Group members appear in the Computer pane of SCE if they are entered at the same time as the group is created. Otherwise, group members added after the group was created do not appear in the Computer pane, but do appear if the properties for the group are displayed.In all cases, the group names appear in WSUS, but without any members.
Free Windows Admin Tool Kit Click here and download it now
December 16th, 2009 4:23am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics