flashcash5åjÈ\jÈyv+ºË¢{&‰Ê貇ír‰

HI,

I have just installed MOM 2005 Workgroup edition on a server 2003 machine
and am getting this error on bootup:

Event Type: Error
Event Source: Microsoft Operations Manager
Event Category: MOM Agent
Event ID: 25269
Date: 15/06/2007
Time: 11:36:14
User: TEST\momMSAaccount
Computer: MOM
Description:
The Application Log Provider failed to load the web service configuration.
Source: Internet Information Server web server log
Description: IIS Application Log - Web Server
Error: 2147500037:Unspecified error

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Any ideas?
I read somewhere that this might be related to IIS websites being stopped
but they're all running..

Thanks in advance

anders bengtsson

Hi flashcash5,

I dont have a solution for you, but have you read the MP guide and verify
that you have install the MP in a correct way?

---
Regards
Anders Bengtsson, MCSE:Security
http://www.contoso.se

f> HI,
f>
f> I have just installed MOM 2005 Workgroup edition on a server 2003
f> machine and am getting this error on bootup:
f>
f> Event Type: Error
f> Event Source: Microsoft Operations Manager
f> Event Category: MOM Agent
f> Event ID: 25269
f> Date: 15/06/2007
f> Time: 11:36:14
f> User: TEST\momMSAaccount
f> Computer: MOM
f> Description:
f> The Application Log Provider failed to load the web service
f> configuration.
f> Source: Internet Information Server web server log
f> Description: IIS Application Log - Web Server
f> Error: 2147500037:Unspecified error
f> For more information, see Help and Support Center at
f> http://go.microsoft.com/fwlink/events.asp.
f>
f> Any ideas?
f> I read somewhere that this might be related to IIS websites being
f> stopped
f> but they're all running..
f> Thanks in advance
f>

flashcash5åjÈ\jÈyv+ºË¢{&‰Ê貇ír‰

Thanks for the reply.

Do you mean the IIS MP guide? If so, no, i have not read it - i'm still
spending my time looking at MOM do***entation alone.

It seems to be a permissions issue as i added the Management Server Action
Account to the local admins group, rebooted and this error did not show.
(tested this a few times)

Permissions i had were:
• Member of the local Users group
• Member of the local "Performance Monitor Users" group
• "Manage auditing and security log" permission (SeSecurityPrivilege)
• "Allow log on locally" permission (SeInteractiveLogonRight)

Any more information is appreciated

anders bengtsson

Hi flashcash5,

You should run local system as action account. If you want to use the management
server action account for deploying agents it will need local administrator
permissions on all machines.


---
Regards
Anders Bengtsson, MCSE:Security
http://www.contoso.se

f> Thanks for the reply.
f>
f> Do you mean the IIS MP guide? If so, no, i have not read it - i'm
f> still spending my time looking at MOM do***entation alone.
f>
f> It seems to be a permissions issue as i added the Management Server
f> Action Account to the local admins group, rebooted and this error did
f> not show. (tested this a few times)
f>
f> Permissions i had were:
f> • Member of the local Users group
f> • Member of the local "Performance Monitor Users" group
f> • "Manage auditing and security log" permission (SeSecurityPrivilege)
f> • "Allow log on locally" permission (SeInteractiveLogonRight)
f> Any more information is appreciated
f>

flashcash5åjÈ\jÈyv+ºË¢{&‰Ê貇ír‰

Ok thanks. So i set it in the SetActionAccount tool then as per usual?
Would you say that using the system account is the best practise with
security in mind? If you have any other options or tips, they will be
appreciated.

Thanks again,
flash

anders bengtsson

Hi flashcash5,

Yes you can use SetActionAccount.exe. Create a domain account which is local
admin on your management server. You can also use this account whne you d
new agents, if it is local memeber of your target machines. More info at

http://www.it-jedi.net/2006/02/how-to-change-any-password-in-mom.html


---
Regards
Anders Bengtsson, MCSE:Security
http://www.contoso.se

f> Ok thanks. So i set it in the SetActionAccount tool then as per
f> usual? Would you say that using the system account is the best
f> practise with security in mind? If you have any other options or
f> tips, they will be appreciated.
f>
f> Thanks again, flash
f>

flashcash5åjÈ\jÈyv+ºË¢{&‰Ê貇ír‰

Thanks for this.
I have a domain account with local admin rights now.
There's so much do***entation even before i start looking at the MP guide -
pretty daunting..