After you deploy SCOM 2007 R2 you may see continual warning messages on your Domain Controllers Labelled Script or Executable Failed to run that look similar to the following:
The process started at 4:45:57 PM failed to create System.Discovery.Data, no errors detected in the output. The process exited with 0
Command executed: "C:\Windows\system32\cscript.exe" /nologo "DiscoverSQL2005DBEngineDiscovery.vbs" {E71360F6-C12E-8326-4539-FBC9D78862F5} {BCE2D5F1-8D22-C571-78E0-460A4CF96215} SYDDCV06.dev.uw.local TEST.domain.local "Exclude:"
Working Directory: C:\Program Files\System Center Operations Manager 2007\Health Service State\Monitoring Host Temporary Files 1\245\
One or more workflows were affected by this.
Workflow name: Microsoft.SQLServer.2005.DBEngineDiscoveryRule.Server
Instance name: TEST.domain.local
Instance ID: {BCE2D5F1-8D22-C571-78E0-460A4CF96215}
Management group: TEST
and
Forced to terminate the following process started at 1:09:31 AM because it ran past the configured timeout 120 seconds.
Command executed: "C:\WINDOWS\system32\cscript.exe" //nologo "C:\Program Files\System Center Operations Manager 2007\Health Service State\Monitoring Host Temporary Files 53\2496\AD_Replication_Monitoring.vbs" tested.domain.local testdc tested.domain.local 15 5 24 false true 6 false true 24 {EAE1DDC9-ED02-91F5-63F9-82A3CFC828D0} false
Working Directory: C:\Program Files\System Center Operations Manager 2007\Health Service State\Monitoring Host Temporary Files 53\2496\
One or more workflows were affected by this.
Workflow name: Active_Directory_Latency_Alert_Rule_For_Windows2003
Instance name: TESTDC
Instance ID: {CAB3978D-7D5F-1DCF-4CF3-7A90F916BE6E}
By default the SCOM HealthService only allows NT AUHORITY\Authenticated Users to access the service. You can verify this by running the HSLockdown.exe tool.
C:\Program Files\System Center Operations Manager 2007>HSLockdown.exe TEST /L
Management Group [UW]
Allowed:
NT AUTHORITY\Authenticated Users
Denied:
In order to fix this you need to add NT AUTHORITY\SYSTEM by doing the following:
C:\Program Files\System Center Operations Manager 2007>HSLockdown.exe TEST /A "NTAUTHORITY\SYSTEM"
[TEST] NT AUTHORITY\SYSTEM allowed.
Management Group [TEST]
Allowed:
NT AUTHORITY\SYSTEM
NT AUTHORITY\Authenticated Users
Denied:
Please restart the Health Service to apply changes
You must then restart the HealthService. You can do this with sc stop HealthService and then sc start HealthService. You could also just open services.msc and restart the System Center Management service.
