Microsoft Knowledge Base Article
This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved.
Terms
of Use |
Trademarks
Article ID: 904738 - Last Review: October 27, 2006 - Revision: 1.1
The Microsoft Operations Manager (MOM) 2005 agent does not download any rules or send any information back to the MOM 2005 Management Server
After you manually install a Microsoft Operations Manager
(MOM) 2005 agent, the MOM 2005 agent does not download any rules or send any
information back to the MOM 2005 management server. Additionally, you
receive either of the following two error messages in the MOM 2005 Operator Console:
A Manually installed agent connection has been
refused
Agent Install Failure - Upgrade
Failed
This symptom occurs if the following conditions are
true:
- The Mutual authentication required setting or the Reject new manual agent installations setting is enabled.
- The MOM 2005 agents and MOM 2005 Management Server
authenticate one another by using the Kerberos protocol.
- The MOM 2005 agents are outside a firewall or are in an
un-trusted domain.
To resolve this problem, follow these steps:
- Start the MOM 2005 Administrators Console.
- Expand Microsoft Operations Manager
(MOMServerName), expand
Administration, and then click Global
Settings.
- Double-click
Security.
- On the Security tab, click to clear the Mutual authentication required
check box, and then click OK.
- Double-click Management
Servers.
- Click the Agent Install tab, click to clear the
Reject new manual agent installations check box, and then
click OK.
Microsoft
has confirmed that this is a problem in the Microsoft products that are listed
in the "Applies to" section.
Mutual authentication prevents a malicious attacker from
posing as a MOM 2005 Management Server or a MOM 2005 agent and then initiating
communications or performing actions. Mutual authentication requires that the
MOM 2005 Management Server and the MOM 2005 agent authenticate each other by using
the Kerberos protocol before the communication. By default, the Mutual authentication required setting is enabled if you are using Active Directory
on the network.
APPLIES TO
- Microsoft Operations Manager (MOM) 2005
| kberrmsg kbtshoot kbprb KB904738 |
Community Feedback System
Very often, it takes hours to solve a problem. Very often, you've looked high
and low, and have tried a lot of solutions. When you finally found it, chances
are, it was because someone else helped you. Here's your chance to give back.
Use our community feedback tool to let others know what worked for you and what
didn't.
Please also understand that the community feedback system is not warranted to be
correct, it's simply a system that we've built to let people try and help each
other. If something in a feedback response doesn't make sense to you, or you're
not comfortable making changes that the feedback talks about (like registry
edits), please consult a professional.
Thank you for using kbAlertz.com Feedback System.
-- Scott Cate