1 2 3 Previous Next 26 Replies Latest reply on Sep 28, 2011 5:09 PM by mpopa

    8.8 update

      We are receiving the  alert in our scom environment since the mcafee 8.8 update.

      All the necessary exclusions have been made, scriptscan has also been disabled.

      We have removed mcafee from 2 servers as a troubleshooting step,  those machines no longer receive the below alert.

        • 1. Re: 8.8 update
          wwarren

          What alert, exactly?

          • 2. Re: 8.8 update

            This is one of the Errors we're getting and this is what we have tried this morning.

            They receive this error in their event view:

             

            Data was found in the output, but has been dropped because the Event Policy for the process started at 8:25:39 AM has detected errors.   The 'ExitCode' policy expression:

                            [^0]+

            matched the following output:

                            -1073741819

             

            Command executed:            "C:\Windows\system32\cscript.exe" /nologo "NslookupAllTests.js" "10.10.in-addr.arpa" "10.0.0.28,fe80::5579:a1:00921:007e" "ns" "false"  "none" "380" "2" "false"

            Working Directory:               C:\Program Files\System Center Operations Manager 2007\Health Service State\Monitoring Host Temporary Files 5\9632\

             

            One or more workflows were affected by this. 

             

            Workflow name: Microsoft.Windows.DNSServer.2008.Monitor.ZoneResolution

            Instance name: 1.1.in-addr.arpa (VR-SI-AUT-DC02.corp.simlds.com)

            Instance ID: {108D37D2-E8FF-47B3-6526-2BDD20E5035A}

            Management group: SIML-1

             

             

            What we tried we viewed access protection log as well as on access scanner log and there is nothing been shown with regards to SCOM 2007, We then disabled the Access protection and the problem still persists, We disabled the on-access scanned and the problem still persists. We disabled both the On-access and access protection and problem still occurred.

             

            We then enabled the scripts scanner after been told the script scanner should be disabled and the event stopped occurring.

             

            Please see call number below:

             

             

             

            Message was edited by: ftkally on 2/8/11 1:56:58 AM CST

             

             

            Message was edited by: ftkally on 2/8/11 1:59:27 AM CST
            • 3. Re: 8.8 update

              We have removed mcafee from 2 servers as a troubleshooting step,  those machines no longer receive the below alert.


              Subject: scom2007 error: event 21414

              Data was found in the output, but has been dropped because the Event Policy for the process started at 09:22:51 AM has detected errors.   The 'ExitCode' policy expression:
                              [^0]+
              matched the following output:
                              -1073741819

              Command executed:            "C:\Windows\system32\cscript.exe" /nologo "MicrosoftExchangeServerRoleDiscovery.js" 0 {215703BC-1574-FD56-558E-68278BF873F9} {A750EE53-7D17-98F0-8496-EB9B9FEE54DD} {8CF025A8-6D2F-C625-CBBB-A31DD2FC5967} Mailbox SR-SI-MGT-AP03.corp.simlds.com "SR-SI-MGT-AP03" "Head-Office" "SR-SI-MGT-AP03.corp.simlds.com" "" "" "" "false"
              Working Directory:               C:\Program Files\System Center Operations Manager 2007\Health Service State\Monitoring Host Temporary Files 5\2654\

              One or more workflows were affected by this.

              Workflow name: Microsoft.Exchange.2010.MailboxRole.DiscoveryRule
              Instance name: SR-SI-MGT-AP03.corp.simlds.com
              Instance ID: {A750EE53-7D17-98F0-8496-EB9B9FEE54DD}
              Management group: SIML-1

              • 4. Re: 8.8 update

                hi

                 

                please look at the updates i have posted and advice.

                • 5. Re: 8.8 update
                  dinozoff

                  I have the same problems (except with SCE2010). I have lots of problems at the moment since the roll-out of VSE 8.8 and latest Agent patch.

                  When I have more info i let you know.

                  • 6. Re: 8.8 update

                    Same problem here, running SCOM 2007 R2 CU4

                    • 8. Re: 8.8 update

                      hi

                       

                      did recieve my updates.

                       

                      any advice ????

                      • 9. 8.8 update
                        dinozoff

                        I'm gonna test the exclusions. Thanks         

                        1 2 3 Previous Next