AVIcode

The AVIcode blog has moved!

J.C. Hornbeck — Tue, 14 Feb 2012 20:09:08 GMT

With the impending launch of System Center 2012, we thought now would be a fine time to move our standalone AVIcode blog and integrate it fully into our Operations Manager team blog at http://blogs.technet.com/b/momteam/. Starting today, all future AVIcode posts will be made on our Operations Manager team blog so if you subscribe via RSS you’ll want to be sure to update those subscriptions so you don’t miss out on all the future excitement.

You can subscribe to the Operations Manager team blog here. We have a lot planned so stay tuned!

J.C. Hornbeck | System Center & Security Knowledge Engineer

Get the latest System Center news on Facebook and Twitter:

The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/

Searching in AVIcode SE Viewer fails with "The URL encoded form data are not valid" error

J.C. Hornbeck — Thu, 02 Feb 2012 18:00:40 GMT

Here’s a new Knowledge Base article we published today. This one talks about an issue introduced with MS11-100 that causes searches in AVIcode to fail:

=====

Symptoms

When using AVIcode SE Viewer to search for specific criteria, the following error message may be generated:

: Operation is not valid due to the current state of the object. (translation: the operation is not valid Because of the state of the object)
Source: System.Web
Target Site: Void ThrowIfMaxHttpCollectionKeysExceeded ()

Stack Trace: at System.Web.HttpValueCollection.ThrowIfMaxHttpCollectionKeysExceeded ()
to System.Web.HttpValueCollection.FillFromEncodedBytes (Byte [] bytes, Encoding encoding)
System.Web.HttpRequest.FillInFormCollection to ()

Message: The URL encoded form data are not valid.
Source: System.Web
Target Site: Void FillInFormCollection ()

Stack Trace: at System.Web.HttpRequest.FillInFormCollection ()
System.Web.HttpRequest.get_Form to ()
System.Web.HttpRequest.get_HasForm to ()
to System.Web.UI.Page.GetCollectionBasedOnMethod (Boolean dontReturnNull)
System.Web.UI.Page.DeterminePostBackMode to ()
at System.Web.UI.Page.ProcessRequestMain (Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

Message: Exception of type 'System.Web.HttpUnhandledException' was thrown.
Source: System.Web
Target Site: Boolean HandleError (System.Exception)

Stack Trace: at System.Web.UI.Page.HandleError (Exception e)
at System.Web.UI.Page.ProcessRequestMain (Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest (Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest ()
at System.Web.UI.Page.ProcessRequest (HttpContext context)
to ASP.pages_search_allevents_aspx.ProcessRequest (HttpContext context)
to
at System.Web.HttpApplication.ExecuteStep (IExecutionStep step, Boolean & completedSynchronously)

Cause

This issue was introduced by Microsoft Security Bulleting MS11-100 (http://support.microsoft.com/kb/2656351 or http://technet.microsoft.com/en-us/security/bulletin/ms11-100). This hotfix affects any applications that rely on .Net Framework 4 and that handle large amounts of forms data. The hotfix adds the following key to the web.config file which has a default value of 1000:

Resolution

To resolve this issue, modify the web.config file located in <drive>:\Program Files (x86)\AVIcode\Intercept\SEViewer\Web and change the value of MaxHttpCollectionKeys to a higher value. For example, change this:

to this:

More Information

Note that increasing the MaxHttpCollectionKeys value above the default setting of 1000 increases the susceptibility of your server to the Denial of Service vulnerability that is discussed in security bulletin MS11-100. Please be sure you understand the issue as documented in Knowledge Base article 2661403 (http://support.microsoft.com/kb/2661403) and the possible ramifications for your particular environment before making the modifications discussed above.

=====

For the most current version of this article please see the following:

2667985 : Searching in AVIcode SE Viewer fails with "The URL encoded form data are not valid" error

J.C. Hornbeck | System Center & Security Knowledge Engineer

Get the latest System Center news on Facebook and Twitter:

The Forefront Server Protection blog: http://blogs.technet.com/b/fss/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/

Microsoft Enterprise Product Roadmap Webcast

J.C. Hornbeck — Thu, 19 Jan 2012 17:14:21 GMT

Please join us for a high level discussion into Microsoft software investments designed to cover most of the major product lines. This will be a 35,000 foot view into the following areas:

Windows Family
Virtualization
Office System
Unified Communications
IT Management
Security

This particular webcast is scheduled for Friday, January 20 at 1:00pm Pacific Time although others are scheduled as well. See this link for more information.

J.C. Hornbeck | System Center & Security Knowledge Engineer

Get the latest System Center news on Facebook and Twitter:

Steps to import AVIcode 5.7 templates after upgrading to System Center 2012 - Operations Manager

J.C. Hornbeck — Wed, 26 Oct 2011 18:12:10 GMT

Here’s another good KB article we published today that shows you how to import AVIcode 5.7 templates after upgrading to the 2012 version of OpsMgr:

=====

Symptoms

After upgrading a System Center Operations Manager 2007 R2 management group that was integrated with AVIcode 5.7 to System Center 2012 - Operations Manager, when trying to edit new or existing AVIcode 5.7 templates in the Operations Console, one of these errors occurs:
The page [AVIcode.SystemCenter.UIPages.LobASPNETChooseName] in the assembly [AVIcode.SystemCenter.UIPages, Version=5.7.491.0, Culture=Neutral, PublicKeyToken=5e9f8bbdb7409eb4] could not be loaded. Please make sure that the account you are running under has sufficient privileges to load the given assembly, or the Management Pack that defines this page is installed or the assembly containing the page is in the path of the executable or that the page derives from known Operations Manager page type.

Microsoft.EnterpriseManagement.Internal.UI.Authoring.Extensibility.UISDKException: The page could not be loaded. Please review the errors and try again. ---> Microsoft.EnterpriseManagement.Internal.UI.Authoring.Extensibility.UISDKException: The page could not be loaded. Please review the errors and try again. ---> System.MissingMethodException: Method not found: 'Microsoft.EnterpriseManagement.ManagementGroup Microsoft.EnterpriseManagement.UI.UIPage.get_ManagementGroup()'.

Cause

After upgrading to the newer version of Operations Manager, the console cannot load the correct Wizard Pages for the AVIcode template and for the .NET Events view because it must reference binaries from the SDK for Operations Manager 2007.
To allow monitoring configuration changes, this solution redirects the binding assemblies of the UI SDK for Operations Manager 2007 to the UI SDK for the newer version of Operations Manager.
The Template need updating too, but this doesn’t happen automatically during setup.

Resolution

When AVIcode .NET Enterprise Management Pack for Operations Manager 2007 is present in the management group, and the system gets upgraded, some management packs will need to be manually upgraded after setup has finished, in order to fix incompatibilities with the 2012 release of Operations Manager.
The Management Pack files will be copied to the server under the directory where Operations Manager is installed, but not imported automatically.
The MP files that need to be imported are:
1. AVIcode.DotNet.SystemCenter.Enterprise.Monitoring.mpb
2. AVIcode.DotNet.SystemCenter.Client.Monitoring.mp

More Information

To restore management pack templates functionality, the used should import the fix for the AVIcode Management Packs which will be copied by setup to the server under the directory where Operations Manager is installed.

=====

For the most current version of this article please see the following:

2606375: Steps to import AVIcode 5.7 templates after upgrading to System Center 2012 - Operations Manager

J.C. Hornbeck | System Center Knowledge Engineer

AVIcode agent installation fails with “1324 Error.” The Path “My Documents” contains an invalid character.

J.C. Hornbeck — Thu, 29 Sep 2011 17:44:42 GMT

Just a quick heads up on a new KB article we published today:

=====

Symptoms

The installation (setup) of the AVIcode agent on a computer fails with the following error:

“1324 Error.” The Path “My Documents” contains an invalid character.

Cause

This is usually caused by an invalid character in the user profile. For example, this error could occur if the Windows Registry entry for My Documents is pointing to an invalid location (e.g. Drive D and there is no drive D).

Resolution

To resolve this issue, verify that the My Document location for the user profile is not redirected to a location that is not available. Group policy can cause My Document redirections if configured by Network Administrator. If the My Document folder is pointing to a location that is not accessible, reconfigure the system so that the My Document location information in the Registry points to a local folder, then log out from system, log back in and begin the install process again. Once the location is valid it should proceed as expected.

=====

For the most current version of this article please see the following:

2625330: AVIcode agent installation fails with “1324 Error.” The Path “My Documents” contains an invalid character.

J.C. Hornbeck | System Center Knowledge Engineer

NOW LIVE: The Microsoft TechNet Gallery

J.C. Hornbeck — Thu, 18 Aug 2011 14:40:35 GMT

As many of you probably already know, for a long time the Script Repository (a special-purpose gallery) has been an engine of great content and community engagement on TechNet. Well starting last week it was upgraded significantly and launched as the new TechNet Gallery, supporting not only just scripts but many other technical resources for Microsoft products including App-V, Exchange, and System Center.

Also of note is that in addition to English, the new gallery is available in French, German, Spanish, Japanese, Simplified Chinese, Traditional Chinese, Brazilian Portuguese, Russian, Italian, Korean, Czech, Polish, and Turkish. Individuals’ contributions and engagement with the TechNet Gallery are tracked in their TechNet profiles and fully integrated with our reputation system which is also fully localized.

If IT resources like scripts, management packs, utilities, and extensions are important for your success, you’ll definitely want to bookmark this one.

TechNet Gallery

J.C. Hornbeck | System Center Knowledge Engineer

How to Extend an Expired Evaluation License in AVIcode

J.C. Hornbeck — Wed, 17 Aug 2011 14:02:50 GMT

Hi Everyone, Nicholas Dodge here. Today I want to take a minute to talk about a recent issue I encountered that involved extending an expired AVIcode evaluation license. In this scenario, my customer was using an Evaluation License version of AVIcode and the evaluation period as well as the evaluation license that was in use had both expired. The customer was also using a previous version of AVIcode (e.g. version 5.6 SP1) and wanted to continue their evaluation period rather than upgrade to version 5.7. In this scenario, we simply needed to extend the evaluation period of the expired license.

In order to successfully resolve this issue, we are required to import a new evaluation license. License keys from version 5.7 are backwards compatible with licenses for version 5.6 and this can be confirmed by examining the contents of an AVIcode SMSE\SMSD license file as follows:

<license>
<definition>
<company>AVIcode Inc.</company>
<customer>SMSE/SMSD licensed customer</customer>
<product>AVIcode Intercept Studio</product>
<version>5.0</version>
<copyright>(C) 2008 AVIcode Inc.</copyright>

In the above example, we can clearly identify the version checking for 5.0 as a minimum, so as a result this particular version 5.7 license file could be successfully imported into the 5.6 environment. If you don’t have this license file you can contact Microsoft Customer Support directly to obtain a new license file for import.

Alternatively, you can download the trial/evaluation version of AVIcode from the official Microsoft AVIcode site. This package includes evaluation licenses for both Intercept Studio as well as Advisor with an expiration date up to December, 2011. This can be found at the following location:

http://www.microsoft.com/systemcenter/en/us/avicode.aspx

With the new license file available, simply open SEViewer and navigate to Tool –> Licenses. At that point, choose Remove Evaluation License in the License Management Wizard. After removing the expired evaluation license, import the recently downloaded License using the Tool –> Licenses - License Management Wizard once again. Now you will have an extended evaluation license period using the recently acquired evaluation license.

Nicholas Dodge | Senior Support Escalation Engineer

New KB: Invalid column name 'ASPECTID' error in the AVIcode 5.7 SE-Viewer Configuration Utility

J.C. Hornbeck — Mon, 06 Jun 2011 15:20:14 GMT

Here’s a quick heads up on a new Knowledge Base article for AVIcode that we published this morning:

=====

Symptoms

When using AVIcode Intercept Studio 5.7, you receive the following error in the SE-Viewer Configuration Utility when you try to update the SE-Viewer database for use with Advisor:

Invalid column name 'ASPECTID'.

Specifically, this problem affects SE-Viewer installations that previously ran the 4.1 version.

Cause

The dbo.ASPECT table had different columns and data types in the 4.1 version of Intercept Studio. When you upgrade from 4.1 to version 5.0 or higher, the upgrade retains these old column names and data types. However, the script in 5.7 to prepare the SE-Viewer database for use with Advisor does not work with the old version of the table.

Resolution

To resolve this problem, use the steps below to rename the existing dbo.ASPECT table and recreate it.

Create a full backup of the SE-Viewer database.
Open SQL Management Studio and connect to the database instance that contains the SE-Viewer database.
In Object Explorer, expand Databases/<SE-Viewer database>/Tables.
Right-click the dbo.ASPECT table and click Rename.
Rename the table to dbo.ASPECT_old or something similar.
Click the New Query button.
On the SQL Editor toolbar, make sure the SE-Viewer database is the current table.
Paste the below script into the query window and press F5 to execute it.

/*==============================================================*/
/* Table: ASPECT */
/*==============================================================*/
CREATE TABLE DBO.ASPECT (
ASPECT NVARCHAR(50) NOT NULL,
DESCRIPTION NVARCHAR(255) NULL,
ASPECTID INT IDENTITY,
CONSTRAINT PK_ASPECT PRIMARY KEY (ASPECTID)
)
go

GRANT SELECT ON DBO.ASPECT TO PUBLIC
GO

INSERT INTO DBO.ASPECT VALUES('All', 'All')
GO

INSERT INTO DBO.ASPECT VALUES('ApplicationFailure', 'Application Failure')
GO

INSERT INTO DBO.ASPECT VALUES('Connectivity', 'Connectivity')
GO

INSERT INTO DBO.ASPECT VALUES('Security', 'Security')
GO

INSERT INTO DBO.ASPECT VALUES('Performance', 'Performance')
GO

INSERT INTO DBO.ASPECT VALUES('uncategorized', 'Operational Info')
GO

INSERT INTO DBO.ASPECT VALUES('SystemFailure', 'System Failure')
GO

/*==============================================================*/
/* End of script */
/*==============================================================*/

After you run the script, run the SE-Viewer Configuration Utility to configure Advisor.

=====

For the most current information please see the following:

KB2560917 - Invalid column name 'ASPECTID' error in the AVIcode 5.7 SE-Viewer Configuration Utility

J.C. Hornbeck | System Center Knowledge Engineer

System Center Unlimited - All your favorite System Center posts, together in one central place

J.C. Hornbeck — Thu, 12 May 2011 17:02:02 GMT

If you’ve been following the blogging efforts of the System Center support and product teams for any length of time then you know we have quite a few different blogs based on the technology or product we focus on. For example, we have the App-V blog, the DPM blog, the ConfigMgr 2007blog, Nexus SC plus many many more, and we do that because sometimes maybe you want DPM info but don’t care about App-V (or vice versa), but what if you’re like so many of our customers and actually do use most of the System Center products together and you want an easier way to track all the content we publish? Well that’s a common request that we get so I decided to setup a single site that mirrors all of the feeds from our most popular System Center sites all in one place. Now by subscribing to a single site you can get all of your favorite System Center content pushed right to your desktop. Here are the feeds I’m mirroring:

I named this blog System Center Unlimited mainly because that’s kind of what it is, an unlimited view into the official System Center universe, so if this sounds like something you’d like then check it out at the link below and let me know what you think:

http://blogs.technet.com/b/systemcentertech

And don’t forget, you can still get all this same information by following me on Twitter or by becoming a fan on Facebook.

Enjoy!

J.C. Hornbeck | System Center Knowledge Engineer

The System Center Blog Aggregator app is now available on Android

J.C. Hornbeck — Tue, 10 May 2011 15:46:31 GMT

A few weeks back I announced the System Center Blog Aggregator app for Windows Phone 7 and today I wanted to let you know that it was now available for all you Android users out there as well. I won’t go into all the details as you can read that at the link above, but here are a couple screen shots to give you an idea of what it looks like. It’s essentially the same app except for the addition of the Nexus SC blog and the blog for Microsoft Server Application Virtualization. Look for the original Windows Phone 7 app to be updated shortly.

After you load and start The System Center Blog Aggregator you see the main screen that defaults to loading the Nexus SC System Center site:

From there you simply click the list button and you’ll see the option for all of our other blogs:

From there you can select and read any blog you like. So there you have it, an app that allows you to follow our content quickly and easily right on your Android phone. If you have an Android phone you should load up The System Center Blog Aggregator and check it out. It’s free after all so what do you have to lose? You can find it here.

Enjoy!

J.C. Hornbeck | System Center Knowledge Engineer

Free 3 day Office 365 Jump Start Training Event

J.C. Hornbeck — Tue, 03 May 2011 13:41:00 GMT

I know this isn’t AVIcode specific but I thought you might want to know about a great training opportunity we have coming up at the end of the month for Office 365. On May 24th through 26th Microsoft Learning is hosting a free 3-day Jump Start tailored for IT Pros interested in learning more about preparing for and deploying Office 365. This is the first public training for IT Pros on Office 365. The course will be streamed live from 10:00-am-4:00pm PDT on all 3 days, and the recordings will be published later on TechNet Edge for later viewing.

We’ll deliver an overview of Office 365, Exchange Online, SharePoint Online, and Lync Online. Top subject matter experts for each technology will be delivering the content and you can find more info in this MSL blog post.

To get all the details, including the daily schedule, instructor bios and a registration link see the following:

https://www.eventbuilder.com/microsoft/event_desc.asp?p_event=x8f7i41r

Enjoy!

J.C. Hornbeck | System Center Knowledge Engineer

Fix: The warning "Specified has newer version 5.6.6 than may be created by this tool 5.6.5." is generated when installing the SEViewer Database in AVIcode 5.6

J.C. Hornbeck — Mon, 28 Mar 2011 15:22:46 GMT

Just an FYI on a new AVIcode Knowledge Base article we published this morning:

=====

Symptoms

During the installation of the AVIcode 5.6 SEViewer, the following warning is generated when testing the connection to the database:

"Specified <SEViewerDBName> has newer version 5.6.6 than may be created by this tool 5.6.5. Please specify another database name."

The database is the correct version and may have been used previously by the version 5.6 SEViewer.

Cause

The installation of the AVIcode Advisor increments the database version from 5.6.5 to 5.6.6. The installation program for the SEViewer is configured to block installation for databases that do not have version 5.6.5. The following scenario can cause these symptoms:

- Install SEViewer version 5.6SP1 and create a new database with version 5.6.5 during install.
- Install Advisor version 5.6.SP1, configure and create the database during install.
- Uninstall Advisor
- Uninstall SEViewer
- Reinstall SEViewer 5.6SP1 again and test the connection to the existing SEViewer database.

Resolution

Option 1: Reinstall AVIcode Advisor (configuration is not required), then install SEViewer.

Option 2: Modify the value for "DBversion" in the file "SEViewer.config"

Navigate to the folder "C:\Program Files (x86)\AVIcode\Intercept\SEViewer"
Open the file "SEViewer.config" in notepad or another text editor.
Locate the following entry:
<defaultSettings>
…
<add type="DBVersion" value="5.6.5" />
…
</defaultSettings>
Change the value from 5.6.5 to 5.6.6

=====

The information above was published today in the following Microsoft Knowledge Base article written by Rich Pesenko:

KB2522412 - The warning "Specified <SEViewerDBName> has newer version 5.6.6 than may be created by this tool 5.6.5." is generated when installing the SEViewer Database in AVIcode 5.6

J.C. Hornbeck | System Center Knowledge Engineer

New KB: You cannot upgrade AVIcode SE-Viewer 5.0 to 5.7

J.C. Hornbeck — Thu, 10 Mar 2011 16:57:47 GMT

Here’s another heads up on a new AVIcode Knowledge Base article we published this morning. This one talks about how to fix an issue where the upgrade of AVIcode SE-Viewer from version 5.0 to 5.7 fails with “Can not upgrade currently installed version of AVIcode Intercept SEViewer.”

Symptoms

When you try to upgrade AVIcode SE-Viewer from version 5.0 to 5.7, you receive the following message:

Can not upgrade currently installed version of AVIcode Intercept SEViewer. Please uninstall the product before running this setup.

Cause

AVIcode Intercept Studio 5.7 does not support direct upgrade from SE-Viewer 5.0 because of differences in how the two versions configure IIS.

Resolution

To work around this limitation, uninstall SE-Viewer 5.0, manually remove the IIS components and install SE-Viewer 5.7. After the installation, you can run the SE-Viewer Configuration Utility to upgrade the existing database. Please see More Information for detailed steps.

More Information

Use the following steps to migrate from SE-Viewer 5.0 to 5.7:

Create a backup of the SE-Viewer database.
Start the SE-Viewer Configuration utility and take note of the SQL server name, SE-Viewer database name and SQL login name.
Use Add or Remove Programs in Control Panel to uninstall SE-Viewer 5.0.
Open IIS Manager and find the web site that contains the SEViewer and SELog virtual directories.
Open the properties of the web site and take note of the TCP port it uses. This setting is on the Web Site tab.
Also in IIS Manager, open the properties of the Intercept application pool and take note of the account it uses. This setting is on the Identity tab.
Delete the SE-Viewer web site and Intercept application pool.
Install SE-Viewer 5.7.
Start the SE-Viewer Configuration Utility.
Enter the names of the existing SQL server and SE-Viewer database.
If you are using SQL authentication, enter the SQL login name for SE-Viewer.
Click Test.
When prompted, click Yes to upgrade the database.
In the SE-Viewer Database Configuration dialog, enter the credentials of a SQL sysadmin account and click Connect. If the current user is a sysadmin, you can click "Use Windows NT Integrated security" instead of entering credentials manually.
Click Execute to run the Upgrade Database action.
When the database upgrade is complete, click Close.
Click Apply to apply the configuration.
If you were using a custom TCP port or application pool account on the old SE-Viewer, change the settings in IIS to match the previous configuration.
If the application pool account is a user account, make sure this account has Read and Read & Execute permission on the SE-Viewer installation folder and all subfolders, as well as Full permission on the <installationDir>\Database folder and all subfolders.
Finally, open the SE-Viewer web page to confirm it works. Check the Intercept event log for errors.

=====

The information above was published today in the following Microsoft Knowledge Base article written by Senior SEE Michael Sadoff:

KB2519822 - You cannot upgrade AVIcode SE-Viewer 5.0 to 5.7

J.C. Hornbeck | System Center Knowledge Engineer

New KB: AVIcode 5.7 SE-Viewer upgrade fails with Windows Installer Error 1722

J.C. Hornbeck — Thu, 10 Mar 2011 15:40:33 GMT

Just a quick heads up on a new AVIcode Knowledge Base article we published this morning. This one talks about how to fix error 1722 when trying to install AVIcode SE-Viewer 5.7:

Symptoms

When you try to upgrade to AVIcode SE-Viewer 5.7 from version 5.0, 5.5 or 5.6, the installation fails and you receive an error message that is similar to the following:

Error 1722. There is a problem with this Windows
Installer package. A program run as part of the setup
did not finish as expected. Contact your support
personnel or package vendor. Action
ElevatedPermissionsFW4, location: ...\MSI2543.tmp
Additionally, the Windows Installer log contains messages that are similar to the following:
MSI (c) (DC:E8) [10:32:14:983]: Doing action: ElevatedPermissionsFW4
Action 10:32:14: ElevatedPermissionsFW4.
Action start 10:32:14: ElevatedPermissionsFW4.
MSI (c) (DC:E8) [10:32:15:374]: Note: 1: 1722 2: ElevatedPermissionsFW4 3: C:\DOCUME~1\<username>\LOCALS~1\Temp\1\MSI12.tmp 4: {64E1E2A7-E337-4CB6-9266-79D006505253}
Info 2835.The control ErrorIcon was not found on dialog SetupError.
Error 1722.There is a problem with this Windows Installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or package vendor. Action ElevatedPermissionsFW4, location: C:\DOCUME~1\<username>\LOCALS~1\Temp\1\MSI12.tmp, command: {64E1E2A7-E337-4CB6-9266-79D006505253}
MSI (c) (DC:E8) [10:32:24:374]: Product: AVIcode Intercept SE-Viewer 5.7 -- Error 1722.There is a problem with this Windows Installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or package vendor. Action ElevatedPermissionsFW4, location: C:\DOCUME~1\<username>\LOCALS~1\Temp\1\MSI12.tmp, command: {64E1E2A7-E337-4CB6-9266-79D006505253}

Cause

This occurs if you originally installed the 5.0, 5.5 or 5.6 version of SE-Viewer using the AVIcode .NET Enterprise Management Pack installer package.

Resolution

To work around this problem, use the Orca.exe program from the Windows SDK to remove the ElevatedPermissionsFW4 custom action from SEViewer5_7.msi. Use the following steps to do this:

Download and run the Windows SDK web installer from the following URL:
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=6b6c21d2-2006-4afa-9702-529fa782d63b&displaylang=en
In the Windows SDK setup wizard, select to install only the Tools feature in Installation Options. The Tools feature is in the Windows Native Code Development category. You can deselect all other features.
After Windows SDK installation completes, open the following folder:
C:\Program Files\Microsoft SDKs\Windows\v7.1\Bin
In the Bin folder, double-click Orca.msi to install Orca. Select the Typical setup type.
Make a copy of the SE-Viewer 5.7 installer package (SEViewer5_7.msi).
Launch Orca from the Start menu.
In Orca, open the copy of SEViewer5_7.msi.
In the Tables pane on the left, select the CustomAction table.
In the Action pane on the right, right-click the ElevatedPermissionsFW action and click Drop Row. Click OK to confirm.
Save the change and close Orca.
Run the edited SEViewer5_7.msi using an administrator account. On Windows Vista or later, use an adminsitrator command prompt to launch the installer.
If you are using the AVIcode .NET Enterprise MP, upgrade it by running the management pack installer package (AVIcode_NET_Enterprise_Management_Pack5_7.msi) on the Operations Manager 2007 Root Management Server. In the setup wizard, select to install only the management pack and console components.
On any Operations Manager 2007 secondary management servers or standalone console computers, run the MP installer package and select only the console components.

=====

The information above was published today in the following Microsoft Knowledge Base article written by Senior SEE Michael Sadoff:

KB2519798 - AVIcode 5.7 SE-Viewer upgrade fails with Windows Installer Error 1722

J.C. Hornbeck | System Center Knowledge Engineer

New KB Article: How to add custom performance counters in AVIcode 5.7

J.C. Hornbeck — Wed, 02 Mar 2011 14:54:06 GMT

Here’s a new Knowledge Base article we published this morning. This one was written by System Center Senior Support Escalation Engineer Michael Sadoff and explains how to add your own custom performance counters so that they’re collected by the Intercept Agent.

=====

In AVIcode Intercept Studio 5.7, the Intercept Agent collects a number of performance counters for monitored applications by default. In addition to these default counters, Intercept Management Console includes a predefined list of counters you can add to application monitoring through the user interface.
To add predefined counters, open Application Properties in the Intercept Management Console, click the Performance Counters tab and then click Advanced. The Add button opens a dialog with the list of predefined counters.
If you are interested in a performance counter that is not in the predefined list, you can make those available by editing the XML configuration files. This article describes the steps for doing this.

More Information

To add custom performance counters for an agent, use the following steps to edit the PerfCounterMonitor.config file:

1. Close all instances of Intercept Management Console.

2. Open the Standard folder in the Intercept Agent installation directory. The following is the default path:

C:\Program Files\AVIcode\Intercept\Agent\v5.7.491\Configuration\Standard

3. In the Standard folder, create a copy of PerfCounterMonitor.config as a backup.

4. Open PerfCounterMonitor.config in Notepad and scroll to the bottom of the counterDefinitions section.

5. Add a blank line at the end of the list and optionally add an XML comment as a separator, such as the following:

<!--Custom Counters—>

6. Copy one of the existing counter definitions and paste it to the next line, such as the following:

<ss:counterDefinition id="1349" object="Windows Workflow Foundation" name="Workflows Pending" edit="true" measure="no suffix"/>

7. Change the ID of the pasted counter definition to 2000:

<ss:counterDefinition id="2000" object="Windows Workflow Foundation" name="Workflows Pending" edit="true" measure="no suffix"/>

8. Change the object and name attributes to match the object and counter you want to monitor.

9. Repeat steps 6-8 for each counter you want to add. Make sure each ID is unique.

10. Save the changes and close the file.

11. Reopen the Intercept Management Console.

12. Right-click the Applications folder and click Properties.

13. Click the Performance Counters tab and then click Advanced.

14. Click Add and confirm that the new counters are available.

15. Add the desired counters.

16. Restart Intercept Service after you apply configuration changes.

If you are running AVIcode Advisor, you have to edit the SEViewer.config file to make sure the transfer procedure includes custom counters. Use the following steps to edit the SEViewer.config file:

1. On the SE-Viewer server, open the SE-Viewer installation directory.

Default path on 32-bit operating systems: C:\Program Files\AVIcode\Intercept\SEViewer
Default path on 64-bit operating systems: C:\Program Files (x86)\AVIcode\Intercept\SEViewer

2. Create a copy of SEViewer.config as a backup.

3. Open SEViewer.config in Notepad and find the Aggregation task in the reportingOperations element.

4. Add custom counters to the perfcounterSet element. Follow the format of existing counters and use the comment section above perfcounterSet for reference on how to set the TYPE, INSTANCEFUNC and DATEFUNC attributes.

5. Save changes and close the configuration file.

=====

The information above was published today in the following Microsoft Knowledge Base article written by Michael Sadoff:

KB2514627 - How to add custom performance counters in AVIcode 5.7

J.C. Hornbeck | System Center Knowledge Engineer

AVIcode Quick Fix: HTTP 500 Internal server error running Advisor Problem Analysis Reports in AVIcode Intercept Studio 5.6

J.C. Hornbeck — Wed, 23 Feb 2011 15:44:51 GMT

When you run one of the Problem Analysis Reports in AVIcode Intercept Studio 5.6, you may receive the following error:

An error has occurred
The additional error information can be found in the Windows
Application Log. We apologize for any inconvenience caused
by this temporary service outage.

Specifically, this problem affects the following reports:

Day of Week Utilization
Hour of Day Utilization
Utilization Trend

When the reporting error occurs, Intercept Advisor logs an Error event in the Application Log with event ID 0 and a message that says "(500) Internal server error".

Also, the Report Server log (i.e. ReportServerService__<datetime>.log) contains an exception that is similar to the following:

library!ReportServer_0-93!cca4!01/24/2011-10:17:02:: i INFO: RenderForNewSession('/AVIcode/Intercept Studio/AVIcode Advisor Reports/Problem Analysis Reports/Utilization Trend')
processing!ReportServer_0-93!cca4!01/24/2011-10:17:04:: e ERROR: Throwing Microsoft.ReportingServices.ReportProcessing.ReportProcessingException: Query execution failed for dataset 'ResourceUtilization'., ;
Info: Microsoft.ReportingServices.ReportProcessing.ReportProcessingException: Query execution failed for dataset 'ResourceUtilization'. ---> System.Data.SqlClient.SqlException: String or binary data would be truncated.
The statement has been terminated.
at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection)
at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj)
at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj)
at System.Data.SqlClient.SqlDataReader.SetMetaData(_SqlMetaDataSet metaData, Boolean moreInfo)
at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj)
at System.Data.SqlClient.SqlDataReader.ConsumeMetaData()
at System.Data.SqlClient.SqlDataReader.get_MetaData()
at System.Data.SqlClient.SqlCommand.FinishExecuteReader(SqlDataReader ds, RunBehavior runBehavior, String resetOptionsString)
at System.Data.SqlClient.SqlCommand.RunExecuteReaderTds(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, Boolean async)
at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method, DbAsyncResult result)
at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method)
at System.Data.SqlClient.SqlCommand.ExecuteReader(CommandBehavior behavior, String method)
at System.Data.SqlClient.SqlCommand.ExecuteDbDataReader(CommandBehavior behavior)
at System.Data.Common.DbCommand.System.Data.IDbCommand.ExecuteReader(CommandBehavior behavior)
at Microsoft.ReportingServices.DataExtensions.SqlCommandWrapperExtension.ExecuteReader(CommandBehavior behavior)
at Microsoft.ReportingServices.OnDemandProcessing.RuntimeDataSet.RunDataSetQuery()Specifically, this problem may affect the following reports

Cause

This is a known issue in AVIcode Intercept Studio 5.6.

Resolution

To resolve this issue upgrade to AVIcode Intercept Studio 5.7.

=====

The information above was published today in the following Microsoft Knowledge Base article written by Michael Sadoff:

KB2507948 - HTTP 500 Internal server error running Advisor Problem Analysis Reports in AVIcode Intercept Studio 5.6

J.C. Hornbeck | System Center Knowledge Engineer

How to configure Windows authentication for the SELog virtual directory in AVIcode Intercept Studio

J.C. Hornbeck — Tue, 22 Feb 2011 15:45:49 GMT

Looks like the wait is over as Windows 7 Service Pack 1 (SP1) and Windows Server 2008 R2 Service Pack 1 should be available today via the Windows Download Center. Or if you're the patient type you can always wait for it to show up via Windows Update which should also happen today. Just remember that if you're using one of previous releases of the Service Pack, such as the Beta or RC, you'll need to uninstall that before installing the final release.

But on to the meat of today's post, which is a notification on the latest AVIcode Knowledge Base article we published this morning that explains how to secure the SELog virtual directory to prevent unauthorized systems from connecting. The contents of the article are below but as always, be sure you check out the direct link below to make sure you're seeing the latest version.

=====

In AVIcode Intercept Studio, the Intercept Service on the agents connects to the SELog virtual directory on the SE-Viewer to upload collected monitoring data. The SELog virtual directory is configured to allow anonymous authentication by default, but some organizations may want to enable Windows authentication for this virtual directory to prevent unauthorized systems from connecting.

Use the following steps to configure Windows authentication for the SELog virtual directory:

Create a service account for the Intercept Service to use on agents.
On the SE-Viewer computer, grant the service account Read and Write permissions for the SELog virtual directory. The following is the default local path of the directory on 32-bit Windows versions:
C:\Program Files\AVIcode\Intercept\SEViewer\LogWS
On 64-bit Windows versions, the following is the default path:
C:\Program Files (x86)\AVIcode\Intercept\SEViewer\LogWS
On the Intercept Agent computers, add the service account to the local Administrators group to allow it to logon as a service and monitor all .NET applications.
Configure the Intercept Service on agents to logon using the designated service account.
Add the username and password to the SEAgent.config file on each agent. See details about this step later in the article.
Log on to the Intercept Agent computers with the credentials of the service account and encrypt the SEAgent.config file using EFS to protect the username and password.
On the SE-Viewer computer, use IIS Manager to disable anonymous authentication for the SELog virtual directory and enable Windows authentication instead.
Restart the Intercept Service on agents and monitor the Intercept event log to make sure that it connects successfully.

Details about step 5:

The SEAgent.config file on each agent stores its connection configuration. The following is the default location of the file:

C:\Program Files\AVIcode\Intercept\Agent\v5.x.x\Configuration

In the above folder path, 5.x.x is the version and build number of Intercept Studio.

The Start menu contains a shortcut to open the configuration file. To use the shortcut, click AVIcode Intercept Studio on the All Programs menu, point to Intercept Configuration and then click Connection Configuration.

SEAgent.config is an XML file. Within its alias element, add userName and password elements immediately after initializeString. Here is an example:

<alias>
<name>SEViewer</name>
<connectionType>WebService</connectionType>
<initializeString>http://site/selog/semlogws.asmx</initializeString>
<userName>SomeUser</userName>
<password>SomePassword</password>
<proxy/>
</alias>

=====

For the latest version of this article see the link below:

KB2509259 - How to configure Windows authentication for the SELog virtual directory in AVIcode Intercept Studio

J.C. Hornbeck | System Center Knowledge Engineer

Quick Fix: Event IDs 3020, 4000 and 4299 are logged every few seconds in the Intercept EventLog after upgrading AVicode Intercept Studio Agent

J.C. Hornbeck — Thu, 10 Feb 2011 19:31:53 GMT

After upgrading the AVIcode Intercept Studio Agent, the following events may be logged every few seconds in the Intercept EventLog:

Log Name:      Intercept
Source:        Intercept PerfCounterMonitor
Date:
Event ID:      4299
Task Category: None
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      <COMPUTER>
Description: Probably registry keys for performance counters was been corrupted. Please contact Techical Support if this issue persist.

System information:
Agent version: 5.7.491.0
Windows version: 2.6.1.3.400.0.9.0.

Log Name:      Intercept
Source:        Intercept PerfCounterMonitor
Date:
Event ID:      4000
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      <COMPUTER>
Description: An error has occurred. Please contact Technical Support if this issue persists.
Error: The system cannot find the file specified.
Code: 80070002 Type: COM object External Time <time> Thread: 2964 Raised in: hr. CCounterController::FinalConstruct, Caught in: CCounterController::FinalConstruct.

System information:
Agent version: 5.7.491.0
Windows version: 2.6.1.3.400.0.9.0.

Log Name:      Intercept
Source:        Intercept PMonitor
Date:
Event ID:      3020
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      <COMPUTER>
Description: Cannot call controller method.
The system cannot find the file specified. Error: The system cannot find the file specified.
Code: 80070002 Type: COM object

System information:
Agent version: 5.7.491.0
Windows version: 2.6.1.3.400.0.9.0;
.NET Framework: v2.0.50727
Process ID: 1112; Instance ID: 0;
InstanceName: w3wp.exe [x64];
Application Pool: <Application Pool>.

Cause

One or more Performance Counters have become corrupted preventing AVIcode Intercept Studio Agent from setting counter information upon Agent installation.

Resolution

Perform the following steps to unregister the Intercept Counters module, rebuild Performance Counters and then re-register the Intercept Counters module:

Stop the Intercept Service service.
Open a Command Prompt and navigate to C:\Windows\System32 (x86) or C:\Windows\SysWOW64 (x64).
Type regsvr32 /u InterceptCounters.dll and press Enter.
Type lodctr /r and press Enter.
Type regsvr32 InterceptCounters.dll and press Enter.
Start the Intercept Service service.

Hope this helps,

Jeff Fanjoy | Senior Support Escalation Engineer

Are you wanting to learn more about AVIcode? Here's a great place to start

J.C. Hornbeck — Wed, 26 Jan 2011 17:51:04 GMT

Friend of the blog and Microsoft MVP Simon Skinner has been using AVIcode for years and recently he took the time to dissect and document a great introduction to AVIcode 5.7. He put together 6 different blog posts that do a fantastic job helping you get started with the newest version so whether you're new to AVIcode or just want an overview of 5.7 you'll definitely want to give these posts a read:

System Center Central : AVIcode 5.7 – Part 1 : AVIcode 5.7 goes live

System Center Central : AVIcode 5.7 – Part 2 : Licensing

System Center Central : AVIcode 5.7 – Part 3 : Terminology

System Center Central : AVIcode 5.7 – Part 4 : Install the SEviewer

System Center Central : AVIcode 5.7 – Part 5 : Navigation of the SEviewer

System Center Central : AVIcode 5.7 – Part 6 : Securing the SEviewer

Thanks Simon!

J.C. Hornbeck | System Center Knowledge Engineer

FYI: Integration of TechNet Blog User Account with TechNet Forums Profile

J.C. Hornbeck — Wed, 26 Jan 2011 14:23:36 GMT

For those of you who sign-in to comment on the TechNet Blogs, there is a change coming on January 27^th 1:00 pm (PST) regarding user accounts and profiles. Please click here to read about this change.

If you have questions please leave a comment on the linked blog post so that the TechNet Blogs platform team can reply to you directly.

J.C. Hornbeck | System Center Knowledge Engineer

You receive a prompt to install .NET Framework 2.0 when you try to remove an AVIcode feature

J.C. Hornbeck — Tue, 25 Jan 2011 16:19:30 GMT

Just a heads up on a new AVIcode Knowledge Base article we published today where you're prompted to install .NET Framework when trying to uninstall an AVIcode component:

=====

Symptoms

When you try to remove a feature of AVIcode 5.6 or an earlier version, you receive the following message:

Please install .NET Framework 2.0 before installing Intercept Studio.

This prevents you from removing the AVIcode feature. For example, this problem may prevent removal of AVIcode SE-Viewer, AVIcode Intercept Agent or the AVIcode .NET Enterprise Management Pack.

Cause

The installer (.MSI) files have launch conditions to check whether version 1.1 or 2.0 of the .NET Framework is installed. However, the installer fails to detect older .NET Framework versions if you have a more recent version installed. For example, the affected system may have .NET Framework 4.0.

Workaround

Upgrade to the 5.7 version of the AVIcode feature that you are trying to remove. After you complete the upgrade, uninstall the 5.7 version.

For example, if you are trying to remove the 5.5 version of the AVIcode Intercept Agent, upgrade to the 5.7 version by running Agent5_7.msi or Agent5_7x64.msi. After the upgrade, use Programs and Features in Control Panel to uninstall AVIcode Intercept Agent 5.7.

To download AVIcode 5.7, select the appropriate link on the AVIcode Home page:

http://www.microsoft.com/systemcenter/en/us/avicode.aspx

=====

For the latest version of this article see the link below:

KB2500681 - You receive a prompt to install .NET Framework 2.0 when you try to remove an AVIcode feature

J.C. Hornbeck | System Center Knowledge Engineer

We have a new AVIcode forum on TechNet

J.C. Hornbeck — Tue, 18 Jan 2011 15:26:54 GMT

Just an FYI that we're now hosting a new AVIcode specific forum on TechNet that will be frequented by members of the product team, support and the MVP community. If you do any work with AVIcode then you'll definitely want to bookmark this one.

You can find it here: http://social.technet.microsoft.com/Forums/en-US/category/systemcenteroperationsmanager

J.C. Hornbeck | System Center Knowledge Engineer

No events are logged to AVIcode Intercept Studio SE-Viewer when monitoring a .NET 4.0 application

J.C. Hornbeck — Thu, 13 Jan 2011 16:43:52 GMT

Just a heads up on a new AVIcode Knowledge Base article we published today:

=====

Symptoms

An AVIcode Intercept Studio Agent is installed and configured to monitor an Application or Web Application that was created using .NET 4.0 but no events are being displayed in SE-Viewer.

When examining the Intercept EventLog the Intercept Service can be seen starting successfully however there is no indication of PMonitor starting successfully.

Cause

AVIcode Intercept Studio versions 5.6 and earlier do not support .NET 4.0.

Resolution

To resolve this issue upgrade to AVIcode Intercept Studio version 5.7 or later.

More Information

Although AVIcode Intercept Studio 5.6 does not fully support .NET 4.0, beta support for .NET 4.0 can be enabled by performing the following steps:

Navigate to the AVIcode Intercept Studio Agent installation folder (default = C:\Program Files\Avicode\Intercept\Agent\v5.6.XXX).
Navigate to the sub-folder Configuration\Standard.
Open the file PMonitor.config using Notepad.
Search for the text supportedFramework and change the max attribute to the value 4.1 (example: <ss:supportedFramework max="4.1"/>).
Save the modified PMonitor.config file.
Open a Command Prompt then execute IISRESET.

NOTE: This is not a supported configuration and should be used only as a temporary bridge to upgrading to AVIcode Intercept Studio 5.7.

=====

For the latest version of this article see the link below:

KB2494250 - No events are logged to AVIcode Intercept Studio SE-Viewer when monitoring a .NET 4.0 application

J.C. Hornbeck | System Center Knowledge Engineer

Unable to select dates with a year greater than 2010 in AVIcode Intercept Studio SE-Viewer

J.C. Hornbeck — Mon, 10 Jan 2011 16:18:04 GMT

Just an FYI on a new Knowledge Base article we published today:

=====

Symptoms

When using the AVIcode Intercept Studio SE-Viewer application to review data by date/time ranges, the date picker dialog does not allow any dates with a year beyond 2010 to be either selected using the Calendar control or by manually entering the year.

Cause

The Calendar control has a hard-coded value to only show up to the year 2010 and the date picker dialog as a whole is configured to only allow year values up to 2010.

Resolution

Resolution 1:

Upgrade to AVIcode Intercept Studio 5.7 or later.

Resolution 2:

To resolve this issue in versions prior to 5.7, perform the following steps:

On the AVIcode Intercept Studio SE-Viewer server, navigate to the <SE-Viewer Install>\Web\Scripts folder.
Open the controls.js file in Notepad.
Search for MaxVal = 2010 and replace that text with MaxVal = 2020.
Save the modified controls.js file and close Notepad.
Navigate to the <SE-Viewer Install>\Web\Behaviors folder.
Open the Calendar.htc file in Notepad.
Search for maxYear = 2010 and replace that text with maxYear = 2020.
Save the modified Calendar.htc file and close Notepad.
Refresh the view in AVIcode Intercept Studio SE-Viewer.

=====

For more information and the latest version of this article see the link below:

KB2493388 - Unable to select dates with a year greater than 2010 in AVIcode Intercept Studio SE-Viewer

J.C. Hornbeck | System Center Knowledge Engineer

Blog posts to read on AVIcode 5.7

Jason Buffington — Tue, 21 Dec 2010 21:00:00 GMT

If you really want to learn about AVIcode and its Application Monitoring capabilities, one of my favorite SMEs on the ‘net is Simon Skinner – SystemCenterCentral Twitter

Simon is a long-time System Center Operations Manager MVP, who has been working with the AVIcode technologies since well before Microsoft acquired them in 2010. Simon recently published a series of blog posts around the newly released AVIcode 5.7 product.

Ya gotta check ‘em out:

System Center Central : AVIcode 5.7 – Part 1 : AVIcode 5.7 goes live

System Center Central : AVIcode 5.7 – Part 2 : Licensing

System Center Central : AVIcode 5.7 – Part 3 : Terminology

System Center Central : AVIcode 5.7 – Part 4 : Install the SEviewer

System Center Central : AVIcode 5.7 – Part 5 : Navigation of the SEviewer

System Center Central : AVIcode 5.7 – Part 6 : Securing the SEviewer

Of course, Simon just keeps writing more good stuff – so instead of amending all of his links here … click to see a complete list of Simon’s posts.

Simon and another of my favorite MVPs (Pete Zerger – SystemCenterCentral Twitter) will be giving a webcast in January to let the world know why they are excited about AVIcode and its acquisition by Microsoft, as part of the larger System Center management story.

Click here to register for the AVIcode webcast on January 12

There is a lot of excitement from System Center veterans on AVIcode – so check ‘em out !

As always, thanks for reading !

Jason Buffington
Senior Technical Product Manager – System Center

System Center Data Protection Manager
System Center Operations Manager
AVIcode