SCOM errors

Hello I just installed SCOM 2007 R2 and installed CU5. Now I see state of management server has critical and I see these error on windows logs. Any ideas what might be causing this?

 

Log Name:      Operations Manager
Source:        OpsMgr SDK Service
Date:          1/6/2012 11:38:37 AM
Event ID:      26319
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      SCOMPRD01.dpu.depaul.edu
Description:
An exception was thrown while processing GetUserRolesForOperationAndUser for session id uuid:b99d4e6e-5f9d-4051-93e9-6f15f632edc1;id=68.
 Exception Message: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
 Full Exception: System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
   at Microsoft.Interop.Security.AzRoles.IAzApplication2.InitializeClientContextFromStringSid(String SidString, Int32 lOptions, Object varReserved)
   at Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AzManHelper.GetScopedRoleAssignmentsForUser(IList`1 roleNames, String userName)
   at Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AuthManager.GetUserRolesForOperationAndUser(Guid operationId, String userName)
   at Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccess.GetUserRolesForOperationAndUser(Guid operationId, String userName)
   at Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessTieringWrapper.GetUserRolesForOperationAndUser(Guid operationId, String userName)
   at Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessExceptionTracingWrapper.GetUserRolesForOperationAndUser(Guid operationId, String userName)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="OpsMgr SDK Service" />
    <EventID Qualifiers="49152">26319</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2012-01-06T17:38:37.000000000Z" />
    <EventRecordID>8906</EventRecordID>
    <Channel>Operations Manager</Channel>
    <Computer>SCOMPRD01.dpu.depaul.edu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>GetUserRolesForOperationAndUser</Data>
    <Data>uuid:b99d4e6e-5f9d-4051-93e9-6f15f632edc1;id=68</Data>
    <Data>Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))</Data>
    <Data>System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
   at Microsoft.Interop.Security.AzRoles.IAzApplication2.InitializeClientContextFromStringSid(String SidString, Int32 lOptions, Object varReserved)
   at Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AzManHelper.GetScopedRoleAssignmentsForUser(IList`1 roleNames, String userName)
   at Microsoft.EnterpriseManagement.Mom.Sdk.Authorization.AuthManager.GetUserRolesForOperationAndUser(Guid operationId, String userName)
   at Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccess.GetUserRolesForOperationAndUser(Guid operationId, String userName)
   at Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessTieringWrapper.GetUserRolesForOperationAndUser(Guid operationId, String userName)
   at Microsoft.EnterpriseManagement.Mom.ServiceDataLayer.SdkDataAccessExceptionTracingWrapper.GetUserRolesForOperationAndUser(Guid operationId, String userName)</Data>
  </EventData>
</Event>

January 6th, 2012 8:40pm

Hi,

How did you upgrade? Did you follow Kevin's guide: http://blogs.technet.com/b/kevinholman/archive/2011/08/03/opsmgr-2007-r2-cu5-rollup-hotfix-ships-and-my-experience-installing-it.aspx  ?

Free Windows Admin Tool Kit Click here and download it now
January 6th, 2012 9:04pm

Thanks for the reply

I followed steps from the MS KB. But I just looked at Kevin Blogs and I did followed all the steps. Also I notice reports are missing from reports tab.

I have One RMS server and databases are hosted separate sql server. All server are windows 2008 R2 SP1.

January 6th, 2012 10:29pm

When you look at the health explorer that says your management server is critical, what does it tell you to be wrong?

-Tero

Free Windows Admin Tool Kit Click here and download it now
January 8th, 2012 2:09am

it shows critical error on Data Wareshouse SQL RS Deployment Management Pack List Request First Chance State

 

Name: Operations Manager
Source: Health Service Modules
Event Number: 31569
Level: 1
Logging Computer: SCOMPRD01.test.com
User: N/A
 Description:
Report deployment process failed to request management pack list from SQL RS Server. The operation will be retried. Exception 'SoapException': System.Web.Services.Protocols.SoapException: An error occurred when invoking the authorization extension. ---> Microsoft.ReportingServices.Diagnostics.Utilities.AuthorizationExtensionException: An error occurred when invoking the authorization extension. ---> System.ServiceModel.FaultException`1[[System.ServiceModel.ExceptionDetail, System.ServiceModel, Version=3.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)) at Microsoft.ReportingServices.WebServer.ReportingService2005Impl.ListChildren(String Item, Boolean Recursive, CatalogItem[]& CatalogItems) at Microsoft.ReportingServices.WebServer.ReportingService2005.ListChildren(String Item, Boolean Recursive, CatalogItem[]& CatalogItems) One or more workflows were affected by this. Workflow name: Microsoft.SystemCenter.DataWarehouse.Deployment.Report Instance name: SCOMPRD01.dpu.depaul.edu Instance ID: {E414E65C-05B8-4F1D-46C5-28789E230E76} Management group: SCOM 
 

Event Data:

< DataItem type =" System.XmlData " time =" 2012-01-09T14:17:48.0662940-06:00 " sourceHealthServiceId =" E414E65C-05B8-4F1D-46C5-28789E230E76 " >
< EventData >
  < Data > SCOM </ Data >
  < Data > Microsoft.SystemCenter.DataWarehouse.Deployment.Report </ Data >
  < Data > SCOMPRD01.test.com </ Data >
  < Data > {E414E65C-05B8-4F1D-46C5-28789E230E76} </ Data >
  < Data > SQL RS Server </ Data >
  < Data > SoapException </ Data >
  < Data > System.Web.Services.Protocols.SoapException: An error occurred when invoking the authorization extension. ---> Microsoft.ReportingServices.Diagnostics.Utilities.AuthorizationExtensionException: An error occurred when invoking the authorization extension. ---> System.ServiceModel.FaultException`1[[System.ServiceModel.ExceptionDetail, System.ServiceModel, Version=3.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)) at Microsoft.ReportingServices.WebServer.ReportingService2005Impl.ListChildren(String Item, Boolean Recursive, CatalogItem[]& CatalogItems) at Microsoft.ReportingServices.WebServer.ReportingService2005.ListChildren(String Item, Boolean Recursive, CatalogItem[]& CatalogItems) </ Data >
  </ EventData >
  </ DataItem >

January 9th, 2012 11:31pm

You can try to temporarily add the account you are using as datawarehouse write account to operations manager administrators as the issue is stating access denied issue. Try also that http://localhost/ReportServer and http://localhost/Reports addresses work when you are logged to the reporting server with the datawarehouse write account.

Free Windows Admin Tool Kit Click here and download it now
January 10th, 2012 12:06am

Hi,

Try to Exporte the MP that  containing the overrides for the SQL MP and  Deleted all SQL MPs which were loaded in SCOM R2 and  Imported the newest SQL MPs and try to configure OpsMgr to use Windows Authentication for the data warehouse workflows and follow the steps in this link :

http://blogs.technet.com/b/smsandmom/archive/2007/09/06/system-center-operations-manager-doesn-t-show-any-reports.aspx

January 10th, 2012 1:03pm

Hi, Please check the issue referring to the following posts: OpsMgr 2007: Error running report: "Message: Loading reporting hierarchy failed. Access is denied" http://blogs.technet.com/b/operationsmgr/archive/2009/01/27/opsmgr-2007-error-running-report-message-loading-reporting-hierarchy-failed-access-is-denied.aspx When you try to install Microsoft System Center Operations Manager 2007 Reporting, the installation is unsuccessful http://support.microsoft.com/kb/938627/en-us Meanwhile, please ensure there is enough free disk space for the database.
Free Windows Admin Tool Kit Click here and download it now
January 10th, 2012 2:54pm

I had local administrators group as operations manager administrators. I added datawarehouse write account to ops manager

 

When i try goto http://localhost/ReportServer and http://localhost/Reports when logged as datawarehouse write account I get this error

 

Reporting Services Error
--------------------------------------------------------------------------------
 
An error occurred when invoking the authorization extension. (rsAuthorizationExtensionError) Get Online Help
Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))

--------------------------------------------------------------------------------

 

 SQL Server Reporting Services

Error
 
 
 
    
 
 
 
An error occurred when invoking the authorization extension. (rsAuthorizationExtensionError) Get Online Help Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
 
 
 
 
 
 

January 10th, 2012 5:49pm

Ok if this is the case, you will have to fix this all from SQL reporting part. SCOM follows the security considerations specified in the SSRS (SQL server reporting services.)

I would say, Try to reset SRS and check if the reporting URLs works fine, only then go for SCOM reporting server installation

Free Windows Admin Tool Kit Click here and download it now
January 10th, 2012 7:11pm

Definitely DO NOT try resetSRS yet!

This seems an issue that can be resolved  by giving rights to the specified account. Sign in to the reporting server as local administrator (this needs to be the local admin, not an account that is in administrators group) and login to http://localhost/ReportServer and then assign rights to the domain account that you are using as the datawarehouse write account. I have to run now, but I'll get back on the details if you need info on how to do it.

Actually here's what you need to do http://msdn.microsoft.com/en-us/library/aa337385.aspx. Assign administrator rights for the datawarehouse write account.

-Tero

 

January 10th, 2012 7:19pm

Sure I will try that.

 

Free Windows Admin Tool Kit Click here and download it now
January 12th, 2012 6:40pm

Hi Ad, was this question answered for you?

There is actually also the possibility that the runas accounts had some kind of problem which causes you to have to reset them. Those are the ones of the Simple Authentication type. Both their user name and password have to contain only one space (so delete contents of user name and password and just press the space-bar once. that resets them and perhaps that gets the situation moving again.

March 25th, 2012 4:38pm

Hello Bob- I granted permissions as per KB below and that resolved my issue

http://support.microsoft.com/kb/938627

"

To resolve this problem, add the SDK service account to the Windows Authorization Access group. To do this, follow these steps:

  1. Click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
  2. In Active Directory Users and Computers, click Builtin, and then double-click Windows Authorization Access Group.
  3. Click the Members tab, and then add the SDK service account to the members list.

"

Free Windows Admin Tool Kit Click here and download it now
March 25th, 2012 4:46pm

Thanks Ad, its sure to help somebody else :-)
March 25th, 2012 5:19pm

For me it was related to Reporting Services Configuration-->Service Account which had been set to

Network Service that had not access to my domain.After changing it with an domain-admin account

the above error disappeared.

Hope this help resolves yours too.

Free Windows Admin Tool Kit Click here and download it now
January 10th, 2014 10:54am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics