SBS 2011 Reports / Alerts / Security Critical

Currently, one of the SBS 2011's I look after is experiencing the following >
  • No summary / detailed reports will generate or email on schedule.
  • Summary / Detailed reports will generate and email manually, however.
  • No alerts for actions such as server restarts are generated.
  • The security status for all computers is critical in the SBS console.

What has changed?
Prior to this, the reports had stopped generating so I followed the steps to recreate the SBS Monitoring Database (not for the first time).  This completed without any issues.

What have I done to try and fix the issue?

Recreate the SBS Monitoring DB again (after waiting a few weeks).
Adjust every facet of the reports to try and 'stamp in' the settings again.
Ran the Fix My Network Wizard.
Ran the BPA 2.0 (Clean).
Followed the guidance here > > no changes were required.

If you look at that guidance, I think the issue is that the tasks that are supposed to run aren't running, at least not all of them...  The SBSMonitoring.mdf is less than 3MB in size.

Any help you can provide would be appreciated greatly.
Who is Participating?
Jeffrey Kane - TechSoEasyConnect With a Mentor Principal ConsultantCommented:
So I reviewed the logs a bit more and while doing so, I was prompted to remember that the processing of these tasks by SQL combines both Monitoring and SharePoint procedures.  The failing task regarding NT AUTHORITY\SYSTEM is actually during a SharePoint-related task and the cause of this failure is usually because you haven't run PSCONFIG after SharePoint updates have been applied.

This issue has the potential of killing off the monitoring reports as well due to the integration of having SharePoint use the same Database functions as Monitoring.

So please be sure this was run:
David AtkinTechnical DirectorCommented:

Can you give us the procedure you used to rebuild the SBS Monitoring DB please?

Any errors in the event log relating to the SQL (SBSMONITORING) Service?

MdlinnettAuthor Commented:
Rebuild procedure >

In the event logs there is only one event that isn't informational, which was generated after a reboot before the DB was ready to accept new client connections.
Free tool for managing users' photos in Office 365

Easily upload multiple users’ photos to Office 365. Manage them with an intuitive GUI and use handy built-in cropping and resizing options. Link photos with users based on Azure AD attributes. Free tool!

Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Can you post the Dataservicecomponents log file in C:\Program Files\Windows Small Business Server\Logs\MonitoringServiceLogs

(if it's quite large, please just post the portion from when you recreated the monitoring database)
MdlinnettAuthor Commented:
Hi Jeffrey,

Thank you for your assistance, I apologise for the delay in attaching the necessary file, I've just been on annual leave.

I've attached the log in it's entirety in order to ensure nothing is omitted.

There is an error message relating to the NT AUTHORITY\SYSTEM account not being found, but that happens on other SBS installations we look after which have no issues with the monitoring DB AND there is an article on Small Business Susan's blog indicating that it's a benign SBS issue.

Thank you once again for your time in assisting me.

Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Sometimes when you recreate the monitoring database the permissions don't get applied right on the folder that contains it.  Please make sure that SYSTEM has full control of this folder:

C:\Program Files\Microsoft SQL Server\MSSQL10_50.SBSMONITORING\MSSQL\DATA

(or whatever folder contains the .mdf file)

SYSTEM should actually have full control of all folders on your server,   If you have other folders which do not have this configured you may want to do an NTFS Permissions reset on your C: drive with this command:

icacls * /t /q /c /reset

(Documentation for DACL reset:
MdlinnettAuthor Commented:
Hi Jeffrey,

SYSTEM has full control of the folder and the permissions have been inherited by all files in the folder aside from SBSMonitoring.mdf and SBSMonitoring_log.ldf.

SBSMonitoring.mdf permissons
Having checked the other SBS's I look after, the permissions on those 2 files match across them all, however all have had the SBSMonitoring DB recreated at least once.  I need to verify what the permissions are on a vanilla SBS 2011 install.  I'll have to spin up a VM.
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Those are the correct permissions.
MdlinnettAuthor Commented:
Hi Jeffrey,

I like to think I'm pretty thorough when installing updates & making sure that any SharePoint updates are followed up by a PSConfig.

I ran the following command on the Server from the SharePoint 2010 Management Shell and received a return value of False. > (get-spserver $env:computername).NeedsUpgrade
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Well, then, I don't know what else I can suggest -- there must be some other error showing up in the event logs which would provide a clue, but without being able to review those, I can't really help any more than I have.
MdlinnettAuthor Commented:
Hi Jeffrey,

I'm at the customer site today and intended to go through the event logs for any errors that might shed some light on the situation.

Last night I rebooted / applied updates to the Server as I do each month, and the alerts and reports are now being generated and are coming through via email?

Colour me confused, but the issue is now resolved with no known reason.  Thank you very much for your help.
MdlinnettAuthor Commented:
Not entirely sure what resolved the issue but Jeffrey deserves credit for his assistance and willingness to help me reach a solution.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.