Welcome to this TechNet Event

1. Welcome to this TechNet Event • FREE bi-weekly technical newsletter • FREE regular technical events hosted across the UK • FREE weekly UK & US led technical webcasts • FREE comprehensive technical web site • Monthly CD / DVD subscription with the latest technical tools & resources • FREE quarterly technical magazine We would like to bring your attention to the key elements of the TechNet programme; the central information and community resource for IT professionals in the UK:

3. Microsoft Operations Manager (MOM)2005: Essential MOM Gordon McKenna MVP – MOM Microsoft Management Specialist

4. Agenda • MOM 2005 – A Brief History • MOM 2005 Architectural Overview • Management Pack Overview • Management Pack Deep Dive

5. MOM 2005 – A Brief History

6. A Brief History of MOM • Mission Critical Software • Formed in early 90’s selling NT4.0 administration\migration software • Developed ADMT for Microsoft • Very successful product in One Point Enterprise Administrator • Bought Sentry Enterprise Event Manager from UK company Serverware in 1996

7. Sentry EEM 2.5

8. Sentry EEM Specs • Gatherer\Sender Technology • Over a Dozen Knowledge Packs • 30 built-in, customizable, Web-enabled reports • Originally Shipped with Microsoft Access 97 runtime database • 50 events per second from each sender. Supported as many as 10,000 senders • Deployed by Microsoft Internally

9. One Point Operations Mgr • Re-Written with Latest Microsoft DNA Technology - DAS, MSDTC, COM\Com+, SQL • Agent/Consolidator Architecture • ActiveAgent technology • SNMP (WMI) Enabled • Better Scalability • Auto Agent Install (no manual) • Access Based Reporting • Agent Footprint 53MB

10. NetIQ Acquire MCS • NetIQ Acquire Mission Critical Software • NetIQ have two Systems Management Offerings OOM and AM • Microsoft Cross Licence OOM Technology for £180 million • Microsoft Perform a re-badging exercise including bug fix • MOM 2000 is born • Microsoft go to market

11. MOM 2000

12. MOM 2000 Features • Product Knowledge (AKM’s) Now Written by Product Teams • Better Product Support • Improved Scalability: - 1000 Nodes per Management Zone - Agent Discovery 15 Mins - Multi-tiering through Alert Forwarding • 22MB Agent Footprint • Partner Ready

13. MOM SP1 • Increased Agent Stability • LOTS of Added Security Features • Improved Management Packs • Bug Fixes

14. Today - MOM 2005

15. MOM 2005 Features • Brand New .Net Console • State Roll-up View • New Web Console • SRS Based Reporting • More In-Built Security • Improved Agent Technology • Improved Performance • Increased Scalability

16. Improvements in Performanceand Scale

17. MOM 2005 Consoles

18. MOM 2005 Architectural Overview

19. Event and performance management • Enterprise event collection • Rules based filtering and consolidation • Proactive alerting/action response Enterprise ready • Central console • Full redundancy • Extensible • MCF Reporting • Web based management reports • Scheduled Publishing MOM 2005 Delivers Automation • Scripts • Tasks • Diagnostics Apps/Role Monitoring • Health Model • Rules libraries • Built-in knowledge-base

20. MOM 2005 Architecture System Center Data Warehouse • System Center Data Warehouse • SQL Reporting Services • MOM 2005 Database • Data aggregation • Knowledge - management packs • Configuration data • MOM 2005 Server • Database access • Consolidator • Agent manager • User interfaces • Agentless monitoring • MOM 2005 Agents • Local monitoring • Local management • Encrypted Communications Reporting MOM Server Ops Console Admin Console Web Console DB Agents Agents

21. MOM – Operator Perspective Consoles • View Alerts/Server State condition requiring intervention execute tasks topological views service level exceptions Agents Agents Ops Console MOM 2005 Server Admin Console HTTP Internet InformationServer Web Console Reporting Examples • Server Availability • Operational Health • Security Events System Center Data Warehouse

22. MOM Server MMC UI Heartbeat from EX01 MOM Server passes down new EX01assigned rules rules run locally alerts, events, and perf sent to MOM server W2K01 W2K02 W2K09 EX01 … Collects Atrributes (Registry Keys) Deploying MOM Attributes Computer Group Def. Rules Views Domain DC EX01 added to Exchange Computer Groups Associated to Exchange Rules Install Exchange Management Pack

23. Alerts View

24. State View

25. Diagram View

26. Console Task (Response)

27. Runtime Tasks Author/Admin launches task Task is submitted to the Management Server Task is sent to agent Task is executed Console Tasks User launches task Task is executed on the console computer Action Account Two Types Of Tasks

28. Management Pack Overview

29. It’s All About Knowledge INVESTMENT PRESENTATION KNOWLEDGE INSTRUMENTATION 1995 2000 2005

30. Key Components of a MP Processing Rule Group Computer Group Computer Attribute Processing Rule Processing Rule Processing Rule Computer Include Computer Exclude Computer Attribute = registry key to create dynamic group

31. Event Rules Collection rules Filtering rules Missing event rules Consolidation rules Duplicate Alert Suppression Provider Response Knowledge NT event log Perfmon data WMI SNMP Log files Syslog Timed rule Alert Script Command line SNMP trap Pager Email Task Managed Code File Transfer Product Knowledge Links to Vendor Company Knowledge Links to Centralized Company knowledge Rules • Performance Rules • Measuring • Threshold • Alert Rules Rule Criteria Wheresource=DCOM and Event ID=1006

32. Product Knowledge • Huge feature of Management Packs • Enable faster issue resolution • Facilitate correct targeting/escalationof issues Lower TCO! • Authored/Reviewed by product experts • Development team • Support (e.g. Microsoft PSS) • Content drawn from key support issues and resolutions

33. ExchangeKnowledge Base • Knowledge is a key feature • Facilitates rapid issue resolution • Empowers front line operators • Less escalation • Faster resolution

34. Company Knowledge Base • Use the company knowledge base to document workarounds • Company Knowledge Base bound to each rule; workarounds should be applicable to alert the rule will generate • Establish Company Knowledge Base format for consistency and ease of troubleshooting.

35. Management Packs on the MOM 2005 CD Exchange 2000 and 2003 Server Internet Information Services MOM 2005 Security (MBSA) SQL Server 2000 Windows Active Directory Windows Server Cluster Windows DNS Windows Server (2000, 2003, NT4) SMS 2003 Tier 2 Management Packs (released to web) Web Sites & Services Virtual Server 2005 Critical Desktops Application Center 2000 FRS DFS Terminal Services Print Services DHCP ISA 2004 Exchange Best Practice Analyzer v2 Updates of existing packs Other packs as Product Groups update them and release new products MOM 2005 Management Packs Plus can use all MOM 2000 MP’s

36. Group Policy .Net Framework Hardware via WMI Windows SharePoint Services Windows Media® Services 9 Series Component Services (MTS) DNS WINS RRAS MSMQ MSDTC NLB WSRM (Windows System Resource Manager) FRS ADS (Automated Deployment Services) Exchange 5.5 SQL Server 7.0 Proxy Server 2.0 ISA Server 2000 Site Server 3.0 Commerce Server 2000 SNA Server 4.0 Host Integration Server 2000 BizTalk 2002 Ent Ed & 2004 SharePoint Portal Server 2003 Microsoft Identity Integration Server 2003 Microsoft Office Live Communications Server (LCS) 2003 Microsoft Office Project Server 2003 SMS 2.0 MOM 2000 Modules

37. HP Insight Manager (free) Dell OpenManage (free) Fujitsu Siemens ServerView (free) Citrix MetaFrame (free) Veritas Backup Exec (free) Vintella for UNIX and Linux Metilinx for UNIX and Linux eXc for UNIX, Linux, MVS, AS/400, network equipment etc Jalasoft – Cisco, F5, APC Smarts – InCharge connector Tidal – SAP and Enterprise Scheduler Skywire – iWave integration with other management systems and helpdesk Actional web services Amberpoint web services Full Armour – Fazzam NetPro – AD and DNS Opalis – workflow automation Quest – integration with Spotlight 1E – MOMent – Business views and SLA reporting Third Party MPs and add-ons Check out www.momanswers.com for community MPs

38. Management Pack Deep Dive

39. Management Pack Goals • Developed by application owners: Microsoft/Third Parties/Custom • Unparalleled product expertise • New management paradigm • Provide a consistent monitoring solution across system services • Streamline datacenter operations • Reduce time to investigate and resolve • Lower Total Cost of Ownership (TCO) • Facilitate preemptive monitoring • Higher Quality of Service • Out-of-box solution • Fast Return On Investment (ROI)

40. Microsoft provides Management Packs for Windows and Microsoft applications Management Packs for the rest of the enterprise stack: Partners All Management Packs produced by application owners/experts Extensions: Backup, Anti Virus, etc. Microsoft Applications Windows Network Server Hardware / Storage 3rd Party Applications 3rd Party Applications Microsoft Applications Application Stack

41. MOM 2005 Base MPs • Management Packs on the MOM 2005 CD • Exchange 2000 Server • Exchange Server 2003 • Internet Information Services • MOM 2005 • MOM 2000 Transition • Baseline Security Analyzer (MBSA) • SQL Server 2000 • Windows Active Directory • Windows Server Cluster • Windows DNS • Windows Server (2000, 2003, NT4) • Systems Management Server 2003

42. Full Catalog Available • MOM Catalog http://www.microsoft.com/management/mma/catalog.aspx • Microsoft and Partners • Management Packs • Connectors

43. Management Packs • Management Pack imported via MOM Server • Discovery finds computers in need of a given Management Pack • MOM deploys appropriate Management Packs • No need to touch managed nodes to install Management Packs • Rules: Implement all MOM monitoring behavior • Watch for indicators of problems • Verify key elements of functionality • Management Packs provide a definition of server health

44. MP Drilldown • Active Directory • SQL Server 2000 • Windows XP • Virtual Server 2005 • FRS and DFS • Just a small taster or our MPs….

45. Availability Key processes NetLogon FRS ISM W32Time KDC End to end replication monitoring Client side monitoring Topology view Collection Key performance counters Replication latency Events Reporting Service availability Domain changes Performance and Trending Active Directory MP

46. Active Directory MP

48. Events Monitors ~400 operationally relevant events Operational Knowledge Script / Synthetic Monitoring Service Monitoring Remote Connectivity Database and log free space Database health Configuration monitoring Replication Monitoring Long Running Agent Jobs Blocked SPIDs Performance SQL Performance counters Operating System monitoring Thresholds Performance Views Reporting Configuration Performance Load and Capacity Planning Enterprise configurations 100% Cluster support Named instance support 64bit support SQL Server MP

49. Query executed Response time evaluated Alert generated on failure or delayed response Remote Connectivity Client

50. Recently Released MPs • Windows OS Refresh • Windows Desktop • Virtual Server • Windows DFS • Windows DHCP • Windows FRS • Windows Terminal Server • Application Center • Web Sites and Web Services