如果站点组件管理器无法更新 Active Directory 中的对象,则此规则会生成警报。
Configuration Manager 无法创建、读取、更新或删除 Active Directory 中的已有对象。 检测到 Configuration Manager 状态消息 4912、4913 以及 4915。
发生此问题的原因可能是:
此站点服务器的计算机帐户可能对 Active Directory 中的 Configuration Manager 容器不具有完全控制权限。
Active Directory 对象已移至系统管理容器之外的位置,或者该对象已丢失。
尚未使用正确的 Configuration Manager Active Directory 类和属性扩展 Active Directory 架构。
向站点服务器计算机帐户授予对 Active Directory 中的 Configuration Manager 容器以及所有子对象的完全控制权限。
将对象从其当前位置删除,并允许 Configuration Manager 创建新对象。
Target | Microsoft.SystemCenter2012.ConfigurationManager.SiteComponentManager | ||
Category | EventCollection | ||
Enabled | False | ||
Event_ID | 4912 | ||
Event Source | SMS Server | ||
Alert Generate | True | ||
Alert Severity | Error | ||
Alert Priority | Normal | ||
Remotable | True | ||
Alert Message |
| ||
Event Log | Application | ||
Comment | SIV:SVC0029 |
ID | Module Type | TypeId | RunAs |
---|---|---|---|
DS | DataSource | Microsoft.Windows.EventProvider | Default |
Alert | WriteAction | System.Health.GenerateAlert | Default |
WriteToDB | WriteAction | Microsoft.SystemCenter.CollectEvent | Default |
WriteToDW | WriteAction | Microsoft.SystemCenter.DataWarehouse.PublishEventData | Default |
<Rule ID="Microsoft.SystemCenter2012.ConfigurationManager.SiteComponentManager.CanNotUpdateADObject_Events" Comment="SIV:SVC0029" Enabled="false" Target="SCCM!Microsoft.SystemCenter2012.ConfigurationManager.SiteComponentManager" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Application</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">4912</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">SMS Server</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>
<WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
<WriteAction ID="Alert" TypeID="SystemHealth!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>2</Severity>
<AlertName/>
<AlertDescription/>
<AlertOwner/>
<AlertMessageId>$MPElement[Name="Microsoft.SystemCenter2012.ConfigurationManager.SiteComponentManager.CanNotUpdateADObject_AlertMessageResourceID"]$</AlertMessageId>
<AlertParameters/>
<Suppression>
<SuppressionValue/>
</Suppression>
<Custom1/>
<Custom2/>
<Custom3/>
<Custom4/>
<Custom5/>
<Custom6/>
<Custom7/>
<Custom8/>
<Custom9/>
<Custom10/>
</WriteAction>
</WriteActions>
</Rule>