SCOM 2012 SP1 client-side event 34215

This is a short tip to solve the error event 34215, this event appears when client-side is trying to write an extra configuration into a IIS shared configuration and you don´t have enough permissions.

First thing, is understand how client-side monitoring is deployed. By default, client-side monitoring, tries to create the CSMCollector virtual directory and the OperationsManagerCsmCollector v.4.0 application pool when you execute the client-side wizard in the SCOM console.
The solution is easy, just give the computer permissions (web server) over the shared directory of IIS config.

After that you will get an event 34243 that means "The new client-side monitoring configuration has been successfully applied. No conflicts were detected."

SCOM 2012 check root login into CentOS system

Continuing the previous post, here is a recipe to rise an alert when root or privileged account has login into CentOS box via SSHD.

Obviously, for this recipe you need the Unix/Linux Management Packs applied and properly configured, here is an old post concerning this topic. 

There are at least two ways, via ACS or via Unix/Linux Log file monitoring to rise this type of alerts. 

The quickest and easiest way is with Log file monitoring, but it is less accurate than ACS, for example ACS has a set of reports to get detailed login statistics, but in some scenarios, it could be noisy and complex to manage.

SCOM 2012 - Create alert / monitor based on Windows event ( Administrator login alert )

Today, our customer asks us how we can know when the Administrator has logon via terminal server on Windows Server on their Domain.
The answer is with SCOM, using the event alert feature.
When you do a login in Windows 2008 or higher and the audit is running an event with id 4624  is created in the security log of the machine.
So first step to create the alert / monitor is to enable the audit.
You have to add new group policy with the audit enabled in the OU of the computers that you want to monitor, in this image you can see highlighted what you need.

Vmware Notes (I)

Recently, I have been reading a little bit about Vmware, usually, I am Hyper-V guy, but probably in a short time I am going to work with Vmware.
I have been doing a little bit of research about Vmware and here are some notes that I have taken/pasted about this topic.

This article, doesn't cover all topics regarding Vmware, probably I will write a second article where I will extend it.

I hope these notes will be useful to you.

When use PCL or PS printer drivers

Today we are going to talk about a topic that at first glance seems not interesting, printing performance.

At our office we've faced this problem as well as some clients asked us about slow performance printing PDF files through one our products.

The problem: 
After a new coorporative printer/drivers deploy, end users complaint about very slow printing when they print PDF medium size files and terribly slowness with large files.

Wsus report with powershell

Last Tuesday, someone in our department asked us if it is possible to get a report via email that displays information about failed computers.

By default Windows 2008 R2 does not provide WSUS cmdlets, so we need to load WSUS assemblies from .NET, here is a URL with the method and properties http://msdn.microsoft.com/en-us/library/microsoft.updateservices.administration(v=vs.85).aspx

Recipe: IAS log parser

Today we need to parse an IAS log, we need to know who are logging in the system. Usually we use IASLogparser, but unfortunately in this case we did not have the license.
So, we need to read the file specifications from Microsoft in this URL http://technet.microsoft.com/es-es/library/dd197432(v=ws.10).aspx  and parse the log file.
We selected Powershell as our script language and it was easy to build a parser, we made it in less than one hour.