Service account password for Office Communications Server will expire soon. Once the password expir

OCS_Password_Expiry_Check_12296_AP (Rule)

Service account password for Office Communications Server will expire soon. Once the password expires, Office Communications Server will not function correctly.

Knowledge Base article:

Summary

Service account password for Office Communications Server will expire soon. Once the password expires, Office Communications Server will not function correctly.

Causes

Service account password has not been changed although it will expire soon.

Resolutions

Change the account password at the earliest possible time, set the new password on the service account and restart Office Communications Server. If there are multiple Office Communications Server servers in your deployment, please set this new password on all servers using this account for the service.

Element properties:

Target

Microsoft_Office_Communications_Server_2007_R2_Access_Edge_Server

Category

EventCollection

Enabled

True

Event_ID

12296

Event Source

OCS Password Expiry Check

Alert Generate

True

Alert Severity

Error

Alert Priority

Normal

Remotable

True

Alert Message

Service account password for Office Communications Server will expire soon. Once the password expires, Office Communications Server will not function correctly.

{0}

Event Log

Office Communications Server

Member Modules:

ID	Module Type	TypeId	RunAs
CollectEvent	DataSource	Microsoft.Windows.EventProvider	Default
WriteAlert	WriteAction	System.Health.GenerateAlert	Default
WriteToDB	WriteAction	Microsoft.SystemCenter.CollectEvent	Default
WriteToDW	WriteAction	Microsoft.SystemCenter.DataWarehouse.PublishEventData	Default

Source Code:

<Rule ID="OCS_Password_Expiry_Check_12296_AP" Enabled="true" Target="Microsoft_Office_Communications_Server_2007_R2_Access_Edge_Server" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="CollectEvent" TypeID="SCWindowsLibrary!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="SCWindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Office Communications Server</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">OCS Password Expiry Check</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="UnsignedInteger">12296</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WriteToDB" TypeID="SCSystemLibrary!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="WriteAlert" TypeID="SCHealth!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>2</Severity>

      <AlertMessageId>$MPElement[Name="Service_account_password_for_Office_Communications_Server_will_expire_soon__Once_the_password_expires__Office_Communications_Server_will_not_function_correctly_"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDescription$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue>$Data/EventDisplayNumber$</SuppressionValue>

        <SuppressionValue>$Data/PublisherName$</SuppressionValue>

      </Suppression>

    </WriteAction>

    <WriteAction ID="WriteToDW" TypeID="SCDataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>