Solved

SBS 2011 Reports / Alerts / Security Critical

Posted on 2016-07-20
  • SBS
  • Windows Server 2008
  • MS SQL Server 2008
  • Active Directory
  • MS Server OS
  • +1
12
78 Views
Last Modified: 2016-08-26
Currently, one of the SBS 2011's I look after is experiencing the following >
  • No summary / detailed reports will generate or email on schedule.
  • Summary / Detailed reports will generate and email manually, however.
  • No alerts for actions such as server restarts are generated.
  • The security status for all computers is critical in the SBS console.

What has changed?
Prior to this, the reports had stopped generating so I followed the steps to recreate the SBS Monitoring Database (not for the first time).  This completed without any issues.

What have I done to try and fix the issue?

Recreate the SBS Monitoring DB again (after waiting a few weeks).
Adjust every facet of the reports to try and 'stamp in' the settings again.
Ran the Fix My Network Wizard.
Ran the BPA 2.0 (Clean).
Followed the guidance here > https://technet.microsoft.com/en-us/library/gg680308.aspx > no changes were required.

If you look at that guidance, I think the issue is that the tasks that are supposed to run aren't running, at least not all of them...  The SBSMonitoring.mdf is less than 3MB in size.

Any help you can provide would be appreciated greatly.
0
Comment
Question by:Mdlinnett
  • 6
  • 5
12 Comments
 
LVL 22

Expert Comment

by:David Atkin
ID: 41724532
Hello,

Can you give us the procedure you used to rebuild the SBS Monitoring DB please?

Any errors in the event log relating to the SQL (SBSMONITORING) Service?


Dave
0
 
LVL 5

Author Comment

by:Mdlinnett
ID: 41725117
Rebuild procedure > https://blogs.technet.microsoft.com/sbs/2011/08/22/how-to-recreate-the-sbsmonitoring-database/

In the event logs there is only one event that isn't informational, which was generated after a reboot before the DB was ready to accept new client connections.
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 41735333
Can you post the Dataservicecomponents log file in C:\Program Files\Windows Small Business Server\Logs\MonitoringServiceLogs

(if it's quite large, please just post the portion from when you recreated the monitoring database)
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 5

Author Comment

by:Mdlinnett
ID: 41751037
Hi Jeffrey,

Thank you for your assistance, I apologise for the delay in attaching the necessary file, I've just been on annual leave.

I've attached the log in it's entirety in order to ensure nothing is omitted.

There is an error message relating to the NT AUTHORITY\SYSTEM account not being found, but that happens on other SBS installations we look after which have no issues with the monitoring DB AND there is an article on Small Business Susan's blog indicating that it's a benign SBS issue.

Thank you once again for your time in assisting me.

Matt
DataServiceComponents.log
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 41754996
Sometimes when you recreate the monitoring database the permissions don't get applied right on the folder that contains it.  Please make sure that SYSTEM has full control of this folder:

C:\Program Files\Microsoft SQL Server\MSSQL10_50.SBSMONITORING\MSSQL\DATA

(or whatever folder contains the .mdf file)

SYSTEM should actually have full control of all folders on your server,   If you have other folders which do not have this configured you may want to do an NTFS Permissions reset on your C: drive with this command:

icacls * /t /q /c /reset

(Documentation for DACL reset:  https://technet.microsoft.com/en-us/library/cc753525(WS.10).aspx)
0
 
LVL 5

Author Comment

by:Mdlinnett
ID: 41756028
Hi Jeffrey,

SYSTEM has full control of the folder and the permissions have been inherited by all files in the folder aside from SBSMonitoring.mdf and SBSMonitoring_log.ldf.

SBSMonitoring.mdf permissons
Having checked the other SBS's I look after, the permissions on those 2 files match across them all, however all have had the SBSMonitoring DB recreated at least once.  I need to verify what the permissions are on a vanilla SBS 2011 install.  I'll have to spin up a VM.
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 41756929
Those are the correct permissions.
0
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 500 total points
ID: 41756967
So I reviewed the logs a bit more and while doing so, I was prompted to remember that the processing of these tasks by SQL combines both Monitoring and SharePoint procedures.  The failing task regarding NT AUTHORITY\SYSTEM is actually during a SharePoint-related task and the cause of this failure is usually because you haven't run PSCONFIG after SharePoint updates have been applied.

This issue has the potential of killing off the monitoring reports as well due to the integration of having SharePoint use the same Database functions as Monitoring.

So please be sure this was run:
https://blogs.technet.microsoft.com/sbs/2011/05/24/you-must-manually-run-psconfig-after-installing-sharepoint-2010-patches/
0
 
LVL 5

Author Comment

by:Mdlinnett
ID: 41760661
Hi Jeffrey,

I like to think I'm pretty thorough when installing updates & making sure that any SharePoint updates are followed up by a PSConfig.

I ran the following command on the Server from the SharePoint 2010 Management Shell and received a return value of False. > (get-spserver $env:computername).NeedsUpgrade
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 41763432
Well, then, I don't know what else I can suggest -- there must be some other error showing up in the event logs which would provide a clue, but without being able to review those, I can't really help any more than I have.
0
 
LVL 5

Author Comment

by:Mdlinnett
ID: 41771374
Hi Jeffrey,

I'm at the customer site today and intended to go through the event logs for any errors that might shed some light on the situation.

Last night I rebooted / applied updates to the Server as I do each month, and the alerts and reports are now being generated and are coming through via email?

Colour me confused, but the issue is now resolved with no known reason.  Thank you very much for your help.
0
 
LVL 5

Author Closing Comment

by:Mdlinnett
ID: 41771383
Not entirely sure what resolved the issue but Jeffrey deserves credit for his assistance and willingness to help me reach a solution.
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
When you try to extract and to view the contents of a Microsoft Update Standalone Package (MSU) for Windows Vista, you cannot extract the files from the MSU. Here we are going to explain how to extract those hotfix details without using any third pa…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now