当在SCOM 2007 SP1环境下遭遇SQLSERVER进程持续占用CPU 100%的解决办法

错误日志:

 

在数据仓库中存储数据失败。将重试操作。
异常“SqlException”: 超时时间已到。在操作完成之前超时时间已过或服务器未响应。

一个或多个工作流受此影响。

工作流名称: Microsoft.SystemCenter.DataWarehouse.Synchronization.TypedManagedEntity
实例名称: server-mom-ltd.beijing.cnooc.corp
实例 ID: {1335BCEE-3DB3-30E0-6C16-7AD94C352253}
管理组: scom2007

有关更多信息,请参阅在 http://go.microsoft.com/fwlink/events.asp 的帮助和支持

 

 

报表部署过程从 Data Warehouse 请求管理包列表失败。将重试操作。
异常“SqlException”: 超时时间已到。在操作完成之前超时时间已过或服务器未响应。

一个或多个工作流受此影响。

工作流名称: Microsoft.SystemCenter.DataWarehouse.Deployment.Report
实例名称: server-mom-ltd.beijing.cnooc.corp
实例 ID: {1335BCEE-3DB3-30E0-6C16-7AD94C352253}
管理组: scom2007

有关更多信息,请参阅在 http://go.microsoft.com/fwlink/events.asp 的帮助和支持

 

 

 

 

在数据仓库中存储数据失败。将重试操作。
异常“SqlException”: 超时时间已到。在操作完成之前超时时间已过或服务器未响应。

一个或多个工作流受此影响。

工作流名称: Microsoft.SystemCenter.DataWarehouse.Synchronization.TypedManagedEntity
实例名称: server-mom-ltd.beijing.cnooc.corp
实例 ID: {1335BCEE-3DB3-30E0-6C16-7AD94C352253}
管理组: scom2007

有关更多信息,请参阅在 http://go.microsoft.com/fwlink/events.asp 的帮助和支持

 

 

 

监视 Application 事件日志的 Windows 事件日志提供程序处理事件时 延迟了 406 分钟。当提供程序脱机一段时间后重新启动时,或当工作流要处理的事件太多时, 可能会发生这种情况。

一个或多个工作流受此影响。

工作流名称: Microsoft.Windows.Server.2003.OperatingSystem.WindowsActivation
实例名称: Microsoft(R) Windows(R) Server 2003, Enterprise Edition
实例 ID: {D603B69C-7B2A-D6E0-1CFC-F19334A58E7B}
管理组: scom2007

有关更多信息,请参阅在 http://go.microsoft.com/fwlink/events.asp 的帮助和支持中心。

 

 

 

对管理组“scom2007”中 ID 为“{D603B69C-7B2A-D6E0-1CFC-F19334A58E7B}”的实例“Microsoft(R) Windows(R) Server 2003, Enterprise Edition”运行的规则“Microsoft.Windows.Server.2003.OperatingSystem.CheckingFileSystemOccuredOnStartup.Collection”中,由于未处理的数据太多而丢弃数据。

有关更多信息,请参阅在 http://go.microsoft.com/fwlink/events.asp 的帮助和支持

 

 

原因:SCOM 2007 SP1的DW数据库缺少必要的索引

解决办法:

使用SQL 2005查询分析器运行如下命令:

use operationsmanagerdw
sp_updatestats

posted @ 2008-08-22 16:56 kongkong 阅读(56) | 评论 (0)编辑
最近有人把"Office Communication 2007 Resource Kit" book 里的OCS Powershell Scripts 共享出来了。方便我们使用POWERSHELL管理OCS 2007
目前这个工具的功能:
Powerpack Feature Highlights:
- View and Provision OCS settings on users:
- View all AD details for OCS users
- Use canned filters to quickly view which users are enabled or disabled for key OCS functionality.
- Enable/Disable key OCS functionality (e.g. Public IM)
- Remotely View key Edge settings (from an OCS Administrative Tool or Front-End computer), including:
- Internal and External Edge server settings
- Federated Partners and Federated Public IM Network Settings
- Easily access and view all OCS Global Settings in one location, including Pools, Enterprise Voice and Meeting Settings and Policies, Location Profiles, Normalization Rules, Archive and CDR, and Federation.
- On any local OCS machine:
- View and Control OCS Services
- View OCS specific Event Log Errors and Warnings
- Provision Address Book settings that not available in the OCS Administrative console
下面我们一起来安装这个工具
1,我们会用到图形化的POWERSHELL工具PowerGUI
下载地址:
http://www.powergui.org/index.jspa
(前提你服务器要安装POWERSHELL哦)
2,下载OCS PowerPack
http://powergui.org/entry.jspa?externalID=1926&categoryID=21
3,导入包


4,查看管理工具包内容




posted @ 2008-08-09 00:07 kongkong 阅读(92) | 评论 (0)编辑
问题:大家经常会在维护AD的同时有可能误删除用户,OU等等信息,但是删除的同时又没有对AD进行备份,造成数据永久丢失,或者重建帐户。
解决:下面我给大家说一种简单,免费的解决办法来解决这个问题,这个是用到了AD墓碑时间的概念,Windows Server 2003的墓碑时间是60天,从Windows Server 2003 SP1开始,微软把AD的墓碑时间调整为180天,也就是说我们在180天内误删除AD的任何信息都是可以很简单的还原的
下面我们来介绍这款工具:
QUEST Object Restore for Active Directory(这是QUEST很少的免费软件之一,相比QUEST Recovery Manager for Active Directory功能弱很多,但是我们还是可以使用到)
软件在:
http://worlddownloads.quest.com.edgesuite.net/Repository/www.quest.com/latest_versions/ObjectRestoreforActiveDirectory_10.zip
进行下载,很小900多K,安装很简单,不再截图

界面很简单,点击连接到域

连接到需要还原数据的站点
测试还原帐户:
我们先创建一个带有OCS属性的帐户

我们的账户里包含SIP地址,删除用户
再去还原界面:

看到我们之前删除的帐户
还原:

后的帐户丢失SIP地址,帐户为禁用状态,启用即可
测试删除OU:

还原也OK,至此,我们测试结束,欢迎大家提出意见
posted @ 2008-07-22 16:55 kongkong 阅读(92) | 评论 (0)编辑
Forefront Security for Office Communications Server 2007 Beta终于发布了,一起体验下吧~


下载(支持WINDOWS SERVER 2008):
http://www.microsoft.com/downloads/details.aspx?FamilyId=D128FD1A-42A2-47CB-9DE8-E4EA8BA2382D&displaylang=en

下面我们来一起安装它:
运行安装程序:(字体好恶心。。。测试版也不能这样啊)

安装注意--IM通知帐户:

全文:
在下面的安装页面将提示您输入域帐户用于 Forefront IM 通知。  此帐户还将用于运行 ForefrontRTCProxy 服务用来截取来自 Office Communications Server SIP 通信进行扫描。
此帐户必须满足以下要求: 该帐户必须被为ForefrontRTCProxy服务授予 “ 运行为服务” 权限。
该帐户必须是 “ RTC Server Applications ” 本地组的一个成员。
该帐户必须是 “ RTCUniversalServerAdmins ” 和 “ RTCProxyUniversalServices ” 域 组的成员。
无法满足这些要求将导致安装失败和 Office Communications Server 前端服务无法启动。


按照要求输入帐户呗。。。

访问代理,需要的可以配置

这个跟FSS别的产品一样,都是这8个引擎


安装路径

开始安装

安装完成,但是老有这种莫名其妙的错误提示,可能和我没安.net 2.0 sp1有关

配置界面

扫描选项,很强大,可以从根本解决用户传送文件带病毒问题

posted @ 2008-07-18 11:28 kongkong 阅读(60) | 评论 (0)编辑
新功能侧重于配置更改管理和增强的疑难解答能力,旨在帮助您发现并解决 ISA 服务器管理控制台中的 ISA 服务器配置问题。

该 Service Pack 包括以下全新功能和增强功能:

• 配置更改跟踪 - 可注册应用于 ISA 服务器的所有配置更改,帮助您评估进行这些更改后可能产生的问题。
• 测试按钮 - 测试已发布服务器与 ISA 服务器的 Web 发布规则的一致性。
• 通讯模拟器 - 按照指定的请求参数(如内部用户和 Web 服务器)模拟网络通讯,提供为请求评估的防火墙策略规则的相关信息。
• 诊断日志查看器 - 此功能现已作为选项卡集入到 ISA 服务器管理控制台中,可显示有关数据包进度的详细事件并提供有关处理过程和规则匹配的信息。
对现有功能的增强,包括:
• 在单播、多播和应用 Internet 组管理协议 (IGMP) 的多播这三种模式下,都支持集成的 NLB 模式。以前,ISA 服务器集成 NLB 仅支持单播模式。
• 支持使用包含多个主题备用名称 (SAN) 条目的服务器证书。以前,ISA 服务器只能使用服务器证书的主题名(公用名)或 SAN 列表中的第一个条目。
• 支持 Kerberos 约束委派 (KCD) 跨域身份验证。使用 KCD,现在可以将与 ISA 服务器不在同一域但在同一林的用户的凭据委派给内部已发布网站。
• 支持在工作组部署过程中进行客户端证书身份验证。这样就不必将每个客户端证书映射到 Active Directory® 目录用户帐户中了。

有关此 Service Pack 的更多信息,请参阅 Microsoft 文章 943462

有关安装 ISA 服务器更新和修补程序的一般信息,请参阅 Microsoft 文章 885957

下载:http://www.microsoft.com/downloads/details.aspx?displaylang=zh-cn&FamilyID=d2feca6d-81d7-430a-9b2d-b070a5f6ae50
posted @ 2008-07-04 09:10 kongkong 阅读(87) | 评论 (0)编辑
要在POP3的客户端使用全球通讯簿,需要把地址簿从Exchange 服务器上导出,再导入到Outlook 的本地联系人中。

您可以使用csvde来导出AD中的用户名称和邮件地址,然后,从导出的文件导入到POP客户端的联系人中。这里提供一个例子,导出显示名称和邮件地址,您可以在-l 参数后添加需要导出的属性值,命令如下:

csvde -r "(objectClass=user)" -d "dc=domain,dc=com" -l displayName,mail -f c:\users1.csv

把users1.csv导入到Outlook本地联系人的方法如下:
1. 启动Outlook。
2. 单击文件\导入/导出,选择从另一程序或文件导入,单击下一步。
3. 选择以逗号为分隔符(Windows),单击下一步。
4. 指定.csv文件位置,单击下一步。
5. 指定导入位置,选择联系人,单击下一步。
5. 勾选将“User.csv”导入下列文件夹,在设置映射窗口,把左边的Display 拖动到右边窗口的姓名,把Mail拖到邮件地址,使得用户属性与本地联系人的属性相对应。
6. 单击完成,完成导入操作。

How to export GAL (Global Address List)
http://support.microsoft.com/kb/555397/en-us
posted @ 2008-06-30 12:06 kongkong 阅读(190) | 评论 (0)编辑
1. 在Exchange 2007 CAS 服务器上打开IIS 管理器。
2. 定位到RPC 虚拟目录,点击右键,选择属性。
3. 在属性窗口,单击安全页。
4. 在authentication and access control单击编辑
5. 选择 Basic Authentication
6. 在域名后输入您的域名。
7. 右键点击左边窗口的服务器名称,选择所有任务->重启IIS。
posted @ 2008-06-30 12:01 kongkong 阅读(105) | 评论 (0)编辑

…is not a good idea.  In a production deployment a second server should be built using the desired server name, and then all OCS users moved over to it.  Or a temporary staging server can be stood up in order to rebuild the original server.  Either way, simply renaming an Office Communications Standard Server 2007 can be painful.

 

Shortly after deploying a standard server in my lab I noticed during server configuration that I had fat-fingered the server's hostname and was not to happy about that. I decided to see what would happen if I just renamed the server without any preparation in OCS.  After renaming my virtual guest from JDSSOCS01 to JDSOCS01 I was welcomed with a standard Windows startup message alerting me to a service failure.

 

A quick scan of the Application event log uncovers event ID 12291 explaining that "the Communications service is registered for a different machine."  Microsoft Knowledgebase Article ID 830535 covers this error, but in reference to LCS 2003, and states that changing the FQDN of a Live Communications Server is not supported.  So it doesn't appear to be supported in OCS 2007 either.

 

The article's resolution suggests exporting the RTC SQL database to a file, removing the OCS services, and re-installing the product.  Because I had already renamed the server I was unable to deactivate the pool/server using the previous name and was presented with a couple warnings during the uninstall that some configuration information will be left in the Active Directory domain; I took note of this for later troubleshooting. I also completely removed the SQL 2005 Express components in order to wipe the OCS install from the server.

 

During reinstallation of the OCS Standard Server the setup wizard reported a failure and viewing the install log showed that the server could not be activated for a pool due to a conflict. At this point I decided to just delete the VM and rebuild the server from a fresh image as deploying a clean lab environment was my overall goal.  Before creating a new server with the desired server name of JDSOCS01 I went to delete the existing computer object in Active Directory, but oddly enough I was warned that deletion of that object would result in all child objects also being removed from AD.  I checked out the existing computer object using ADSIedit and apparently the OCS installation inserts additional objects under the server:

 

 

I deleted the computer object and imaged a new virtual guest using the correct server name.  This time the OCS Standard Server installation completed successfully, but  I received another error after validating the front-end server configuration:

 

Failure: [0xC3FC200D] One or more errors were detected

 Diagnose Server

   Check Configuration

      Checking all trusted servers

         Internal Server JDSSOCS01.lab.schertz.local

DNS Resolution failure: No such host is known

Suggested Resolution: Make sure there are no typos in the Server name. Make sure that the Server name is published in the DNS (A or SRV record) or hosts file entry is configured correctly.

 

This is the part where I spent some time digging through AD looking for where the old server name was hiding.   After running some LDAP queries using the string *pool* I discovered where OCS stores it's configuration data in AD:

 

CN=RTC Service,CN=Microsoft,CN=System.DC=domain,DC=com

 

I located and deleted the Pool object for the old server:

 

CN=JDSSOCS01,CN=Pools,CN=RTC Service,CN=Microsoft,CN=System,DC=schertz,DC=local

 

 

But that didn't resolve the validation errors after rebooting the OCS server.  I dug deeper and found both the old and new server FQDNs referenced in multiple objects under Global Settings, MCU Factories, Trusted MCUs, and Trusted WebComponentsServers.  Using the command ldifde -f output.txt -d "dc=schertz,dc=local" is was able to search the text export file for all the objects with attributes referring to "jdssocs01":

 

CN=Global Settings,CN=RTC Service,CN=Microsoft,CN=System.DC=schertz,DC=local

 

DN:  CN={DB1226B0-B04E-494F-BF44-6C365A2A4CF1}

objectCategory:  CN=ms-RTC-SIP-TrustedServer

msRTCSIP-TrustedServerFQDN:  JDSSOCS01.schertz.local

 

CN=MCU Factories,CN=RTC Service,CN=Microsoft,CN=System.DC=schertz,DC=local

 

DN:  CN={0AAB2557-E5AA-4229-8F43-600554BAE453}

objectCategory:  CN=ms-RTC-SIP-MCUFactoryService,CN=Schema,CN=Configuration,DC=schertz,DC=local

msRTCSIP-MCUFactoryData:  FactoryURL=https://JDSSOCS01.schertz.local:444/LiveServer/MCUFactory/

 

DN:  CN={55753891-89EA-4F18-B020-5FA5928BE97F}

objectCategory:  CN=ms-RTC-SIP-MCUFactoryService,CN=Schema,CN=Configuration,DC=schertz,DC=local

msRTCSIP-MCUFactoryData:  FactoryURL=https://JDSSOCS01.schertz.local:444/LiveServer/MCUFactory/

 

DN:  CN={56B7C1C4-1961-461A-B40F-3ABB3C62BE31}

objectCategory:  CN=ms-RTC-SIP-MCUFactoryService,CN=Schema,CN=Configuration,DC=schertz,DC=local

msRTCSIP-MCUFactoryData:  FactoryURL=https://JDSSOCS01.schertz.local:444/LiveServer/MCUFactory/

 

DN:  CN={E1F6A173-E15D-427A-8E2A-87DD1CAAD947}

objectCategory:  CN=ms-RTC-SIP-MCUFactoryService,CN=Schema,CN=Configuration,DC=schertz,DC=local

msRTCSIP-MCUFactoryData:  FactoryURL=https://JDSSOCS01.schertz.local:444/LiveServer/MCUFactory/

 

 

CN=Trusted MCUs,CN=RTC Service,CN=Microsoft,CN=System.DC=schertz,DC=local

 

DN:  CN={459B434F-3099-4049-8A2E-56D0524AFAD4}

objectCategory:  CN=ms-RTC-SIP-TrustedMCU,CN=Schema,CN=Configuration,DC=schertz,DC=local

msRTCSIP-TrustedMCUFQDN:  JDSSOCS01.schertz.local

 

DN:  CN={51D7A033-A074-4285-9589-FB78AAB6A460}

objectCategory:  CN=ms-RTC-SIP-TrustedMCU,CN=Schema,CN=Configuration,DC=schertz,DC=local

msRTCSIP-TrustedMCUFQDN:  JDSSOCS01.schertz.local

 

DN:  CN={9DE8BC35-D15A-4F8F-8BCD-A819014420F0}

objectCategory:  CN=ms-RTC-SIP-TrustedMCU,CN=Schema,CN=Configuration,DC=schertz,DC=local

msRTCSIP-TrustedMCUFQDN:  JDSSOCS01.schertz.local

 

DN:  CN={C5677C4C-7BE6-484D-9CD4-878F1F8427BE}

objectCategory:  CN=ms-RTC-SIP-TrustedMCU,CN=Schema,CN=Configuration,DC=schertz,DC=local

msRTCSIP-TrustedMCUFQDN:  JDSSOCS01.schertz.local

 

 

CN=Trusted WebComponentsServers,CN=RTC Service,CN=Microsoft,CN=System.DC=schertz,DC=local

 

DN:  CN={93A1A739-3B44-4F0B-935A-170EAAA63026}

objectCategory:  CN=ms-RTC-SIP-TrustedWebComponentsServer

msRTCSIP-TrustedWebComponentsServerFQDN:  JDSSOCS01.schertz.local

 

I deleted all objects above and then removed the invalid ServicePrincipalName entries from the RTCService and RTCComponentService user accounts.

 

 

I forced AD replication between both domain controllers and rebooted the OCS server, and the validation check no longer reports any failures.

posted @ 2008-06-30 11:42 kongkong 阅读(150) | 评论 (0)编辑

下载地址:
http://office.microsoft.com/en-us/help/HA101733831033.aspx
关于更新内容:
http://support.microsoft.com/kb/950050

posted @ 2008-06-29 23:32 kongkong 阅读(232) | 评论 (1)编辑

Okay - this is going to be a short post as I am off to party for the rest of the day.

Hyper-V has RTM'd!

Press release here: http://www.microsoft.com/presspass/features/2008/jun08/06-26hyperv.mspx

John Howard has install directions here: http://blogs.technet.com/jhoward/archive/2008/06/26/hyper-v-rtm-announcement-available-today-from-the-microsoft-download-centre.aspx

And my favorite - QLogic reports getting up to 180,000 IOPs at 88 - 97% native performance on Hyper-V RTM:

http://ir.qlogic.com/phoenix.zhtml?c=85695&p=irol-newsArticle&ID=1169854&highlight=

Cheers,
Ben

 


中文版下载(X64):http://www.microsoft.com/downloads/details.aspx?displaylang=zh-cn&FamilyID=f3ab3d4b-63c8-4424-a738-baded34d24ed
x86:http://www.microsoft.com/downloads/details.aspx?FamilyID=6f69d661-5b91-4e5e-a6c0-210e629e1c42&DisplayLang=zh-cn

posted @ 2008-06-27 09:53 kongkong 阅读(91) | 评论 (0)编辑