AD Agent Assignment: Unknown Active Directory error while updating management group container

Microsoft.SystemCenter.ADAssignment.UnknownError.Alert (Rule)

Active Directory returned an unknown error. Error description might have more information.

Knowledge Base article:

Summary

An error occurred while attempting to update the management group container(s) in Active Directory that are used for AD integration.

Causes

This rule runs on a server in the AD Assignment resource pool and uses the default action account. Review the alert details to identify the event that triggered the alert. The most common causes are access denied and connectivity issues.

Resolutions

Examine the error message provided in the supporting events to identify the underlying issue(s). A web search on the specific error message may provide help with troubleshooting the problem. Ensure that the action account for the AD Assignment resource pool has sufficient privileges to access the Active Directory container. Confirm that all servers in the AD Assignment resource pool have connectivity to the domain where the container is located.

Additional

For information on Active Directory integration, see Use Active Directory to Assign Computers (http://go.microsoft.com/fwlink/?LinkId=194447).

Element properties:

TargetMicrosoft.SystemCenter.ADAssignmentResourcePool
CategoryOperations
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
Operations Manager failed to update Active Directory
{0}
Event LogOperations Manager

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
Consolidator ConditionDetection Microsoft.SystemCenter.Overridable.ConsolidatorCondition Default
Alert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.SystemCenter.ADAssignment.UnknownError.Alert" Enabled="true" Target="SCLibrary!Microsoft.SystemCenter.ADAssignmentResourcePool" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Operations</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>.</ComputerName>
<LogName>Operations Manager</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Health Service Modules</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<Value Type="String">$Target/ManagementGroup/Name$</Value>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<XPathQuery Type="String">Params/Param[1]</XPathQuery>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">11460</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<ConditionDetection ID="Consolidator" TypeID="Microsoft.SystemCenter.Overridable.ConsolidatorCondition">
<ConsolidationProperties>
<PropertyXPathQuery>Params/Param[5]</PropertyXPathQuery>
<PropertyXPathQuery>Params/Param[7]</PropertyXPathQuery>
</ConsolidationProperties>
<IntervalSeconds>3600</IntervalSeconds>
<Count>3</Count>
</ConditionDetection>
<WriteActions>
<WriteAction ID="Alert" TypeID="Health!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>2</Severity>
<AlertName/>
<AlertDescription/>
<AlertOwner/>
<AlertMessageId>$MPElement[Name="Microsoft.SystemCenter.ADAssignment.UnknownError.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/Context/DataItem/EventDescription$</AlertParameter1>
</AlertParameters>
<Suppression>
<SuppressionValue>$Data/Context/DataItem/Params/Param[5]$</SuppressionValue>
<SuppressionValue>$Data/Context/DataItem/Params/Param[7]$</SuppressionValue>
</Suppression>
</WriteAction>
</WriteActions>
</Rule>