SMS 2003 service failure: SMS_SQL_MONITOR was unable to log on

SMS_2003_service_failure__SMS_SQL_MONITOR_was_unable_to_log_on_9_Rule (Rule)

Knowledge Base article:

Summary

The service has failed to start because the user credentials and password are no longer valid. As a result the service is no longer available to dependent services and clients. If SMS is configured to use Advanced Security, it is possible that the account used to log on was changed from Local System to something else.

Causes

The account used to start the service has invalid credentials or insufficient privilege to start the service.

Resolutions

If SMS is configured to use Advanced Security, use the Services snap-in, in Microsoft Management Console (MMC) to change the user account back to Local System. If SMS is configured to use Standard Security, change the password by using the SMS Administrator console or by resetting the site.

External

For more assistance, a list of additional support options is available in the support section of the SMS Web site at Support for Systems Management Server.

Additional

This alert is best handled by SMS administrators.

Sample Events

The %1 service was unable to log on as %2 with the currently configured password due to the following error: %n%3%n%n To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

Element properties:

TargetMicrosoft.SMS.2003.Microsoft_SMS_2003_Site_Database_Servers_Installation
CategoryEventCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityLow
RemotableTrue
Alert Message
SMS 2003 服务故障: SMS_SQL_MONITOR 无法登录

$Data/LoggingComputer$ - SMS 2003 服务故障: SMS_SQL_MONITOR 无法登录。

检测到 $Data/LoggingComputer$ 上运行的 SMS_SQL_MONITOR 服务在 $Data/@time$ 停止。
Event LogSystem
CommentMom2005ID='{6E2435CD-421D-4DD4-9057-2E31F15CAB24}';MOM2005ComputerGroupID={6E07E901-5EEF-4D43-ABC9-5A73BC9B072D}

Member Modules:

ID Module Type TypeId RunAs 
_907D4578_146C_11D3_AB21_00A0C98620CE_ DataSource Microsoft.Windows.EventProvider Default
CollectEventData WriteAction Microsoft.SystemCenter.CollectEvent Default
CollectEventDataWarehouse WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default
GenerateAlert WriteAction System.Mom.BackwardCompatibility.AlertResponse Default

Source Code:

<Rule ID="SMS_2003_service_failure__SMS_SQL_MONITOR_was_unable_to_log_on_9_Rule" Target="Microsoft.SMS.2003.Microsoft_SMS_2003_Site_Database_Servers_Installation" Enabled="true" ConfirmDelivery="true" Comment="Mom2005ID='{6E2435CD-421D-4DD4-9057-2E31F15CAB24}';MOM2005ComputerGroupID={6E07E901-5EEF-4D43-ABC9-5A73BC9B072D}">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="_907D4578_146C_11D3_AB21_00A0C98620CE_" Comment="{907D4578-146C-11D3-AB21-00A0C98620CE}" TypeID="WindowsLibrary!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>System</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>Service Control Manager</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">Params/Param[1]</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>SMS_SQL_MONITOR</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>7038</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">
<AlertGeneration>
<GenerateAlert>true</GenerateAlert>
<Owner/>
<Description>
$Data/LoggingComputer$
- SMS 2003 service failure: SMS_SQL_MONITOR was unable to log on.

The SMS_SQL_MONITOR service running on
$Data/LoggingComputer$
was detected as stopped at
$Data/@time$
.</Description>
<AlertLevel>70</AlertLevel>
<ResolutionState/>
<Source>
$Data/PublisherName$
</Source>
<Name>SMS 2003 service failure: SMS_SQL_MONITOR was unable to log on</Name>
</AlertGeneration>
<InvokerType>0</InvokerType>
</WriteAction>
<WriteAction ID="CollectEventData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectEvent"/>
<WriteAction ID="CollectEventDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
</WriteActions>
</Rule>