When clicking on a link in a SCOM email alert for more information I receive a permissions error. What is happening?? This used to work? dsk

>What is happening?? What role do you have in OpsMgr? Are you OpsMgr Admin? Operator?http://OpsMgr.ru/

Mostly it is because it is using the credentials of the logged on user on your local machine where you run outlook. Which might not be a scom operator or higher level user. (I assume you dont get a prompt to enter a user and password here)Bob Cornelissen - BICTT (My BICTT Blog)

I used to be able to access the link in the emailed alert which pulls additional information from the SCOM. And I am a SCOM admin so this does not make sense?? Is there a local security policiy on the SCOM server required??dsk

I used to be able to access the link in the emailed alert which pulls additional information from the SCOM. And I am a SCOM admin so this does not make sense?? Is there a local security policiy on the SCOM server required??dsk

What web pages do I need to check on my SCOM RMS server for permissions?? I am getting authentication error when using locahost instead of the server name.dsk

Hi, May I know what the target of the link is, is it pointing to the web console? If possible, please paste it to your web browser and see how it works or see if you can access web console. Regarding the security settings, please also refer to: Role-based Security in Operations Manager 2007 http://technet.microsoft.com/en-us/library/bb735424.aspx Hope this helps. Thanks. Nicholas Li - MSFT Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

SCOM emailed alert below: Alert: The Operations Manager agent processes are using too much processor time Source: ZXXxxxxxx01.XXXXXX.XXX.XXX.gov Path: ZXXxxxxxx01.xxxxx.xxx.xxx.gov Last modified by: System Last modified time: 5/23/2011 5:39:54 AM Alert description: The total processor utilization of all agent processes has exceeded the threshold over multiple samples. Alert view link: "https://Dxxxxxxxx008P.xxxxx.xxx.xxx.gov/default.aspx?DisplayMode=Pivot&AlertID=%7b14d4a059-cbe7-449b-ae7f-3eadf0b5bf06%7d" Notification subscription ID generating this message: {9445F307-8D8D-D9A9-494E-799D3D3B362E} the link below does not work for additional information provide to the alert. This is not a SCOM console issue. After entering in the password with an account with Scom admin permissions I receive the below error with associated URL: URL: https://dXXXXXXXXX008p.XXXXX.XXX.XXX.gov/default.aspx?DisplayMode=Pivot&AlertID=%7b14d4a059-cbe7-449b-ae7f-3eadf0b5bf06%7d You do not have permission to view this directory or page. XXXXXXXXXXXXXXXXXXXX Also when I click on the the high level visio icon for additional information for AD. It normally provides additional scom alert information regarding the alert is another ppopup. Instead I receive the same error statementafter entering a password with an account which is a SCOM admin: You do not have permission to view this directory or page. dsk

SCOM emailed alert below: Alert: The Operations Manager agent processes are using too much processor time Source: ZXXxxxxxx01.XXXXXX.XXX.XXX.gov Path: ZXXxxxxxx01.xxxxx.xxx.xxx.gov Last modified by: System Last modified time: 5/23/2011 5:39:54 AM Alert description: The total processor utilization of all agent processes has exceeded the threshold over multiple samples. Alert view link: "https://Dxxxxxxxx008P.xxxxx.xxx.xxx.gov/default.aspx?DisplayMode=Pivot&AlertID=%7b14d4a059-cbe7-449b-ae7f-3eadf0b5bf06%7d" Notification subscription ID generating this message: {9445F307-8D8D-D9A9-494E-799D3D3B362E} the link below does not work for additional information provide to the alert. This is not a SCOM console issue. After entering in the password with an account with Scom admin permissions I receive the below error with associated URL: URL: https://dXXXXXXXXX008p.XXXXX.XXX.XXX.gov/default.aspx?DisplayMode=Pivot&AlertID=%7b14d4a059-cbe7-449b-ae7f-3eadf0b5bf06%7d You do not have permission to view this directory or page. XXXXXXXXXXXXXXXXXXXX Also when I click on the the high level visio icon for additional information for AD. It normally provides additional scom alert information regarding the alert is another ppopup. Instead I receive the same error statementafter entering a password with an account which is a SCOM admin: You do not have permission to view this directory or page. dsk

SCOM emailed alert below: Alert: The Operations Manager agent processes are using too much processor time Source: ZXXxxxxxx01.XXXXXX.XXX.XXX.gov Path: ZXXxxxxxx01.xxxxx.xxx.xxx.gov Last modified by: System Last modified time: 5/23/2011 5:39:54 AM Alert description: The total processor utilization of all agent processes has exceeded the threshold over multiple samples. Alert view link: "https://Dxxxxxxxx008P.xxxxx.xxx.xxx.gov/default.aspx?DisplayMode=Pivot&AlertID=%7b14d4a059-cbe7-449b-ae7f-3eadf0b5bf06%7d" Notification subscription ID generating this message: {9445F307-8D8D-D9A9-494E-799D3D3B362E} the link below does not work for additional information provide to the alert. This is not a SCOM console issue. After entering in the password with an account with Scom admin permissions I receive the below error with associated URL: URL: https://dXXXXXXXXX008p.XXXXX.XXX.XXX.gov/default.aspx?DisplayMode=Pivot&AlertID=%7b14d4a059-cbe7-449b-ae7f-3eadf0b5bf06%7d You do not have permission to view this directory or page. XXXXXXXXXXXXXXXXXXXX Also when I click on the the high level visio icon for additional information for AD. It normally provides additional scom alert information regarding the alert is another ppopup. Instead I receive the same error statementafter entering a password with an account which is a SCOM admin: You do not have permission to view this directory or page. dsk

the link above is to my SCOM RMS server for which I am a SCOM admin.dsk

the link above is to my SCOM RMS server for which I am a SCOM admin.dsk

After clicking on moss high level visio icon for AD--specific DC icon is receive the below error: You do not have permission to view this directory or page. final url shown with above error: https://dXXXXXXXXX008p.XXXXX.XXX.XXX.gov/default.aspx?DisplayMode=Pivot&ViewType=AlertView&PmoID=256d8c4c-a56c-745f-5452-7cbf2a4af9a7 I am using a SCOM admin account and this used to work. the only thing I can think of is that I restarted the SCOM servers a couple weeks ago.dsk

After clicking on moss high level visio icon for AD--specific DC icon is receive the below error: You do not have permission to view this directory or page. final url shown with above error: https://dXXXXXXXXX008p.XXXXX.XXX.XXX.gov/default.aspx?DisplayMode=Pivot&ViewType=AlertView&PmoID=256d8c4c-a56c-745f-5452-7cbf2a4af9a7 I am using a SCOM admin account and this used to work. the only thing I can think of is that I restarted the SCOM servers a couple weeks ago.dsk

After clicking on moss high level visio icon for AD--specific DC icon is receive the below error: You do not have permission to view this directory or page. final url shown with above error: https://dXXXXXXXXX008p.XXXXX.XXX.XXX.gov/default.aspx?DisplayMode=Pivot&ViewType=AlertView&PmoID=256d8c4c-a56c-745f-5452-7cbf2a4af9a7 I am using a SCOM admin account and this used to work. the only thing I can think of is that I restarted the SCOM servers a couple weeks ago.dsk

Just out of curiousity, have you changed the default port where the web console is installed? normally it would be lik this: http://machinename:51908/default.aspx . You can check this in scom console - administration - settings - web addresses. normally i always change this url from the netbiosname to the FQDN name in this line. Of course you can change the port but it has to change in IIS as well in that case.Bob Cornelissen - BICTT (My BICTT Blog)

Just out of curiousity, have you changed the default port where the web console is installed? normally it would be lik this: http://machinename:51908/default.aspx . You can check this in scom console - administration - settings - web addresses. normally i always change this url from the netbiosname to the FQDN name in this line. Of course you can change the port but it has to change in IIS as well in that case.Bob Cornelissen - BICTT (My BICTT Blog)

Just out of curiousity, have you changed the default port where the web console is installed? normally it would be lik this: http://machinename:51908/default.aspx . You can check this in scom console - administration - settings - web addresses. normally i always change this url from the netbiosname to the FQDN name in this line. Of course you can change the port but it has to change in IIS as well in that case.Bob Cornelissen - BICTT (My BICTT Blog)

Please note that my scom web console is working and scom console is working when logged onto my workstation as well as on the SCOM servers: http://machinename:51908/default.aspx while logged onto RMS SCOM server error- "this page cannot be found" http 400 bad request error From the SCOM console-administration-settings-web addresses: 1) web console: https://DXXXXXXXXXX.XXX.XX.Gov/default.aspx when clicking test button>>> IIS 7.5 detailed error - 401.1- unauthorizedzed-windows internet explorer 2) online product knowledge: nothing configured. The below page associated with IIS 7.5 detailed error - 401.1- unauthorizedzed-windows internet explorer: erver Error in Application "OPERATIONS MANAGER 2007 WEBCONSOLE" Internet Information Services 7.5 Error Summary HTTP Error 401.1 - Unauthorized You do not have permission to view this directory or page using the credentials that you supplied. Detailed Error Information Module WindowsAuthenticationModule Notification AuthenticateRequest Handler PageHandlerFactory-ISAPI-2.0-64 Error Code 0x8009030e Requested URL https://dXXXXXXXXXXXXX.XXXXX.XXX.XXX.gov:443/default.aspx Physical Path D:\Program Files\System Center Operations Manager 2007\Web Console\default.aspx Logon Method Not yet determined Logon User Not yet determined dsk

Please note that my scom web console is working and scom console is working when logged onto my workstation as well as on the SCOM servers: http://machinename:51908/default.aspx while logged onto RMS SCOM server error- "this page cannot be found" http 400 bad request error From the SCOM console-administration-settings-web addresses: 1) web console: https://DXXXXXXXXXX.XXX.XX.Gov/default.aspx when clicking test button>>> IIS 7.5 detailed error - 401.1- unauthorizedzed-windows internet explorer 2) online product knowledge: nothing configured. The below page associated with IIS 7.5 detailed error - 401.1- unauthorizedzed-windows internet explorer: erver Error in Application "OPERATIONS MANAGER 2007 WEBCONSOLE" Internet Information Services 7.5 Error Summary HTTP Error 401.1 - Unauthorized You do not have permission to view this directory or page using the credentials that you supplied. Detailed Error Information Module WindowsAuthenticationModule Notification AuthenticateRequest Handler PageHandlerFactory-ISAPI-2.0-64 Error Code 0x8009030e Requested URL https://dXXXXXXXXXXXXX.XXXXX.XXX.XXX.gov:443/default.aspx Physical Path D:\Program Files\System Center Operations Manager 2007\Web Console\default.aspx Logon Method Not yet determined Logon User Not yet determined dsk

Please note that my scom web console is working and scom console is working when logged onto my workstation as well as on the SCOM servers: http://machinename:51908/default.aspx while logged onto RMS SCOM server error- "this page cannot be found" http 400 bad request error From the SCOM console-administration-settings-web addresses: 1) web console: https://DXXXXXXXXXX.XXX.XX.Gov/default.aspx when clicking test button>>> IIS 7.5 detailed error - 401.1- unauthorizedzed-windows internet explorer 2) online product knowledge: nothing configured. The below page associated with IIS 7.5 detailed error - 401.1- unauthorizedzed-windows internet explorer: erver Error in Application "OPERATIONS MANAGER 2007 WEBCONSOLE" Internet Information Services 7.5 Error Summary HTTP Error 401.1 - Unauthorized You do not have permission to view this directory or page using the credentials that you supplied. Detailed Error Information Module WindowsAuthenticationModule Notification AuthenticateRequest Handler PageHandlerFactory-ISAPI-2.0-64 Error Code 0x8009030e Requested URL https://dXXXXXXXXXXXXX.XXXXX.XXX.XXX.gov:443/default.aspx Physical Path D:\Program Files\System Center Operations Manager 2007\Web Console\default.aspx Logon Method Not yet determined Logon User Not yet determined dsk

http://machinename:51908/default.aspx . using FQDN also says cannot display the page. please let me know where is IIS and SCOM I need to make the changes? Please be explicit. Just curious I have not touched these configuration so am wondering how these could have been changed???dsk

I am a SCOM admin.dsk

I am a SCOM admin and local admin on the RMS scom server so permissions is not the issues.dsk

Could this have something to do with a policy applied to your RMS for IE?Regards, Blake Email: mengotto<at>hotmail.com Blog: http://discussitnow.wordpress.com/

I am using IE from my workstation. I can access the scom web console and standalone scom console from my workstation. However the link to the alert information in the SCOM emailed alerts and doubleclicking on a AD icon for more alert information both say I do not have permissions. I am a scom admin and local admin on the scom rms server. While logged onto the scom rms server, I copied the url which fails from my workstation and tried from the SCOM rms server IE: HTTP Error 401.1 - Unauthorized You do not have permission to view this directory or page using the credentials that you supplied. Detailed Error Information Detailed Error Information Module WindowsAuthenticationModule Notification AuthenticateRequest Handler PageHandlerFactory-ISAPI-2.0-64 Error Code 0x8009030e Requested URL https://XXXXXXXXXXX.XXXXXXX.xxx.xxx.gov:443/default.aspx?DisplayMode=Pivot&AlertID=%7b1623f56e-2c55-4183-914d-9e11980d4d63%7d Physical Path D:\Program Files\System Center Operations Manager 2007\Web Console\default.aspx Logon Method Not yet determined Logon User Not yet determineddsk

Who manages IIS on your web server? Is it your team, or another team? This appears to be a permissions issue on the IIS box if you ask me.Regards, Blake Email: mengotto<at>hotmail.com Blog: http://discussitnow.wordpress.com/

Also looks like the url changes? SO what is important to find out is on the webserver itself check what its binding is. On what port is it listening? Default 51908? Or has somebody moved it to be on port 80? And is it http or https?? And if https is in order please check if that is implemented. Otherwise go to the scom console - administration - settings - web addresses again and triple check the entry listed there for http/https and for the port in the url. Check that it is the same as what you are using in your webconsole from your desktop.Bob Cornelissen - BICTT (My BICTT Blog)

Also looks like the url changes? SO what is important to find out is on the webserver itself check what its binding is. On what port is it listening? Default 51908? Or has somebody moved it to be on port 80? And is it http or https?? And if https is in order please check if that is implemented. Otherwise go to the scom console - administration - settings - web addresses again and triple check the entry listed there for http/https and for the port in the url. Check that it is the same as what you are using in your webconsole from your desktop.Bob Cornelissen - BICTT (My BICTT Blog)