I have been seeing more and more organizations tightening security which is excellent! However, one of the victims is the System Center Operations Manager Default Action Account – the action account is denied the log on locally right on the RMSe and other management servers. I am not too concerned when it occurs on an agent since that won’t disrupt the health of the entire management group but when it happens on the RMS / Management Servers - yikes.

Naturally, the Operations Manager log will get flooded with 1102 errors and 7002 and 7015 events that identify the account has been not granted the log on locally right. Too bad System Center Operations Manager can’t monitor itself. So what we have implemented for the Infinity Connected™ management group (you can never be too safe) and what we’ve recommended to our on-premise customers is to leverage the “Attach Task To This Event…” action included with Event Viewer. Its simple and you can have it send an e-mail when 7002 / 7015 appear in the Operations Manager log of any management server in your management group. If you are running a heavy management group, you want to identify this ASAP and resolve immediately otherwise it is OperationsManager churn city!

There is no shortage of excellent blogs related to System Center Operations Manager 2012 dashboards but I did want to point out two very convenient features. Features not available in SCOM 2007 and not widely publicized as far as I can tell. They make data analysis a little easier. For dashboard junkies such as myself, this is a big deal.

  • Sort by Column – You can sort by any column in a dashboard which has performance related data. It’s probably very important to also note performance data is being pulled from the data warehouse when you use the ‘Performance Widget’. The image below is sorted by ‘Maximum Value’. Simply clicking on the desired field, data is sorted lowest to highest. A second click will reverse the order. It may seem like a small piece of functionality but in SCOM 2007 the selection pane did not have any data - to get this type of data you had to rely on SCOM reporting services.

Figure 1:CPU

  • Data Highlighting – It’s the equivalent of ‘Ctrl + h’ in perfmon.exe but it’s accomplished with a simple mouse click. By simply clicking any of the items in the chart, its graph data is brought to the foreground. Very useful when working with large sets of data (see above).

Last thing I wanted to mention is the System Center Operations Manager product group has a tool which allows you to author and customize dashboard widgets and save them to an unsealed management pack which allows you to export to other management groups. This is a huge deal. You can design and tune a widget in your Test / QA management group (as you should) then export to production or you can write an awesome widget and you can share. You can read more at the Operations Manager Engineering Blog.