Microsoft IT Health Scanner Released!

re: Microsoft IT Health Scanner Released!

lukasbeeler — Tue, 07 Jul 2009 23:53:40 GMT

Just tried it. It crashes a few moments after starting the scan.

Could it have something to do with our DCs running WS08 Core?

re: Microsoft IT Health Scanner Released!

EBS Team — Thu, 09 Jul 2009 01:41:47 GMT

Can you please send us zipped Data and Logs folders (under %systemdrive%\Microsoft IT Environment Health Scanner\Wizard) so that we can investigate the crash?

re: Microsoft IT Health Scanner Released!

Paul Dougherty — Mon, 13 Jul 2009 20:00:31 GMT

Looks like the network adapter gateway testing is confused. It tells us we need more than one value on a given nic and points to the subnet address x.x.x.0/24 rather than our true gateway.

re: Microsoft IT Health Scanner Released!

Ilya Dagenais — Tue, 14 Jul 2009 22:12:50 GMT

Error's out after a few minutes and all scan's are skipped with the error: "Error: The value of the serverReferenceBL attribute for ,<servername> was not set."

I got this same error with EBS prep tool. The server it errors on is not even a DC...just a test server. How do I either correct what it is looking for or get passed it?? Thx

re: Microsoft IT Health Scanner Released!

EssentialBloggers — Tue, 14 Jul 2009 23:56:31 GMT

The reason for this failure ("Error: The value of the serverReferenceBL attribute for ,<servername> was not set.") is that the tool is detecting the server as a bad DC (that is, that test server was probably once a DC, but was not properly dcpromo-ed down).

If the server is not a DC anymore, clean it up from AD using the instructions here:

http://support.microsoft.com/kb/216498

re: Microsoft IT Health Scanner Released!

Claire H — Wed, 15 Jul 2009 19:28:49 GMT

I, also, am having issues with the scanner crashing after a few minutes. Would you like me to send you our logs as well?

re: Microsoft IT Health Scanner Released!

Juan Pablo Vargas — Wed, 22 Jul 2009 00:20:45 GMT

I have problems runing this tool in my network, The problems are related to conectivity issues with the security server.

The XXXXXXX server could not be accessed using WMI. Actions that you can perform to resolve this issue might include stopping the firewall before you run the wizard, ensuring that the server is available, installing WMI provider on a Windows 2000 server, enabling WMI access on the server, or removing the server object from Active Directory Sites and Services if the server has been decommissioned.

re: Microsoft IT Health Scanner Released!

EssentialBloggers — Wed, 22 Jul 2009 00:34:34 GMT

Juan,

Most likely, your firewall is blocking access to WMI. Are you running the Health Scanner in an EBS environment (or any environment with TMG/ISA)?

If yes, we have to be able to query WMI on the TMG server from the workstation or server you are running the wizards on. If you can sacrifice taking the entire network offline while the wizard runs (this won't work if you have remote sites), running "net stop fweng /y" from the TMG server will allow the tool to run.

The more complete way to do this is to temporarily open up TMG to allow the wizard to run:

1. Create a bi-directional allow-all access rule between the two machines:

Name: Allow all

Protocols: All outbound traffic

From: local host; machine running wizards

To: local host; machine running wizards

Users: All users

Right-click on the rule, choose "Configure RPC Protocol", and de-select "Enforce strict RPC compliance"

2. Edit the 'RPC (all interfaces)' protocol in toolbox and deselect the RPC filter.

3. Right-click on Firewall Policy, Choose 'edit system policy ...', and choose 'Active Directory'. De-select "Enforce strict RPC compliance"

Click apply and ok to save the settings, and refresh Monitoring\Configuration until it shows 'Server configuration matches the Configuration Storage server configuration'

re: Microsoft IT Health Scanner Released!

EssentialBloggers — Wed, 22 Jul 2009 00:36:16 GMT

Claire,

Yes, please feel free to send us the logs.

re: Microsoft IT Health Scanner Released!

EssentialBloggers — Wed, 22 Jul 2009 00:40:19 GMT

Paul,

Can you please make sure you entered the correct internal IP address of your main firewall on the Firewall IP page (note: it may or may not be the same as the gateway)? If so, and you are still having issues, please email us your logs!

re: Microsoft IT Health Scanner Released!

Aaron Perrault — Wed, 22 Jul 2009 18:34:43 GMT

I am having problems running this in our environment. We are a pure Windows 2003, Native, Active Directory, with Cisco routers, firewalls and switches. The software installs just fine but when i run it, I put the IP address and Subnet of our main Cisco firewall, and the subnet mask it has, and then i add our other IP ranges, but when i say scan it looks like it is trying to collect data but i get the following message:

The specified domain controller doesn't appear in ServerTable: SERVERNAME (the name of one of my DCs)

and then it skips the rest of the tests. I have tried running this from a local workstation, from a member server, and from one of our DCs, but i get the same type of message (the DC listed usually changes) but the results are always the same. I really would love to get some results.

Please help if possible

thanks

app

aaron.perrault@i365.com

re: Microsoft IT Health Scanner Released!

apperrault — Wed, 22 Jul 2009 18:52:36 GMT

The specified domain controller doesn't appear in ServerTable: SERVERNAME (the name of one of my DCs)

Please help if possible

thanks

app

aaron.perrault@i365.com

re: Microsoft IT Health Scanner Released!

EssentialBloggers — Wed, 22 Jul 2009 22:43:09 GMT

Aaron,

Is SERVERNAME still a DC in your environment? Generally, the tool gives that error for the servers it finds in AD that used to be DCs, but were not demoted corretly/successfully (hence, data is left in AD that needs to be removed).

Can you please send us your logs (zip Data and Logs folders under %systemdrive%\Microsoft IT Environment Health Scanner\Wizard)?

re: Microsoft IT Health Scanner Released!

apperrault — Wed, 22 Jul 2009 22:55:53 GMT

They are always active domain controllers in our environment. I have sent a zip of the two logs to the address requested.

thanks for the help

app

re: Microsoft IT Health Scanner Released!

jgurtz — Fri, 24 Jul 2009 19:28:13 GMT

Another crasher here...logs sent to the posted email

re: Microsoft IT Health Scanner Released!

Karen — Mon, 27 Jul 2009 02:33:22 GMT

Just installed Microsoft IT Environment Health Scanner onto a member server. 2003 SP2.

Data Collection Errors:

Server information - a list of servers could not be collected from AD DS. Ensure that your netowkr is functioning correctly and that this computer can access AD DS.

re: Microsoft IT Health Scanner Released!

fbroussey — Wed, 29 Jul 2009 17:10:30 GMT

Hi,

I got the following behaviour (win 2003 domain). When i launch the scan , it stop with the error message :

"A list of servers could not be collected from Active Directory Domain Services (AD DS). Ensure that your network is functioning correctly and that this computer can access AD DS."

But i dont know what it means and how to check that the coputer can access AD DS.

Thanks for your answer.

re: Microsoft IT Health Scanner Released!

Ilya Dagenais — Wed, 29 Jul 2009 20:29:21 GMT

Ok, got past the DC error (thanks for the advice on manually cleaning the DC info out of AD), then I got a WMI error on one of the Win2000 servers...corrected that. Now I get an "DNS Query Access Failed" on the same win2000 sever that had the WMI issue.

Any advice? Same thing, scanner skips all other tests.

Thanks

re: Microsoft IT Health Scanner Released!

EssentialBloggers — Wed, 29 Jul 2009 21:51:17 GMT

Do you have the latest SP on the Win 2000 box? Also, Win 2000 requires DNS WMI provider installed - see http://msdn.microsoft.com/en-us/library/ms682138(VS.85).aspx .

re: Microsoft IT Health Scanner Released!

EssentialBloggers — Thu, 30 Jul 2009 01:00:09 GMT

fbroussey -

Most likely you have some old left-over objects in AD (in the list of computers) that are confusing the tool (the tool sees them in teh AD but cannot contact these servers).

To clean up the AD follow:

http://support.microsoft.com/kb/216498

Then re-run the tool

re: Microsoft IT Health Scanner Released!

Ilya Dagenais — Thu, 06 Aug 2009 16:53:36 GMT

OK, completed the steps to adding the DNS WMI provider on win2000. Still same error. The server that is erroring isn't even a DNS server...it's a simple terminal server.

re: Microsoft IT Health Scanner Released!

tripl3 — Fri, 07 Aug 2009 10:27:20 GMT

Hi!

Great tool!

I also get the error :

"The specified domain controller doesn't appear in ServerTable: SERVERNAME"

I have verified that the server is a DC and I ran DCDIAG /V on the server and it passes the tests.

How do I find the configuration in AD that causes the error in Microsoft IT Healtcheck?

Thanks!

re: Microsoft IT Health Scanner Released!

Ross Ellicott — Sat, 15 Aug 2009 06:50:21 GMT

I also get the error :

"The specified domain controller doesn't appear in ServerTable: SERVERNAME"

I have verified that the server is a DC and I ran DCDIAG /V on the server and it passes the tests.

How do I find the configuration in AD that causes the error in Microsoft IT Healtcheck?

Interestingly, the offending server errors out when running the health check. (WEBS.BPA.Console.Exe has stopped working).

Please advise.

Ross.

re: Microsoft IT Health Scanner Released!

EssentialBloggers — Mon, 17 Aug 2009 20:41:35 GMT

If you are having an issue, please send us your logs with a brief explanation, so that we can see what is going on please :) Email them to tjuliak@msn.com

re: Microsoft IT Health Scanner Released!

Bill — Tue, 25 Aug 2009 18:45:07 GMT

Cannot get the tool to run due to WMI Error. Running the tool on Win 2003 SBS R2 SP2 with ISA 2004. Workarounds?

re: Microsoft IT Health Scanner Released!

James — Wed, 26 Aug 2009 23:53:23 GMT

I also get the error :

"The specified domain controller doesn't appear in ServerTable: SERVERNAME"

re: Microsoft IT Health Scanner Released!

James — Thu, 27 Aug 2009 00:04:35 GMT

BTW, I can't send our logs due to confidentiality. What should I look for? What does the message mean?

re: Microsoft IT Health Scanner Released!

wazza — Wed, 02 Sep 2009 09:32:55 GMT

Did anyone manage to find a solution to the following. I get it each time I launch the scan and it errors on the Data collection, server information with the error message :

"A list of servers could not be collected from Active Directory Domain Services (AD DS). Ensure that your network is functioning correctly and that this computer can access AD DS."

I haven't been able to find out how to get around this or correct it.

re: Microsoft IT Health Scanner Released!

Travis — Tue, 08 Sep 2009 06:22:47 GMT

I receive the following error when running this tool against my 2008-R2 functional domain/forest: "The functional level of the domain is not valid."

Is there an ETA on the next version of this tool that will run against a 2008-R2 functional domain?

re: Microsoft IT Health Scanner Released!

Cristian V. — Wed, 09 Sep 2009 00:40:22 GMT

I got the error,

A list of servers could not be collected from Active Directory Domain Services (AD DS). Ensure that your network is functioning correctly and that this computer can access AD DS.

But the ip address of our firewall is correct, i veirifed with ntdsutil and only the available domian controlers are listed.

Tried dcdiag and all test passed.I will send you the logs.

re: Microsoft IT Health Scanner Released!

Stephen Suley — Wed, 09 Sep 2009 16:41:02 GMT

Each time I run the scan in my 2 server, Domain Server 2008 functionality level enviroment. I get all kinds of errors, I have no firewalls enabled on any servers. Can you give me an idea why I can't seem to scan and of the items listed?

Data collection errors Errors: 1

PrereqInfo

Error: Connectivity did not occur during the prerequisite validation phase. Refer to sections of the analysis report for details.

Network Connectivity Errors: 2, Skipped: 1

Server names resolve correctly

Completed

Active Directory is connected to all domain controllers

Completed

Remote WMI access is enabled on servers

Error: The fpsmail.fossil ( this is a linux POP email server) server could not be accessed using WMI. Actions that you can perform to resolve this issue might include stopping the firewall before you run the wizard, ensuring that the server is available, installing WMI provider on a Windows 2000 server, enabling WMI access on the server, or removing the server object from Active Directory Sites and Services if the server has been decommissioned.

See also: KB 875605, KB 216364, KB 682138

Servers can be queried using DNS

Completed

Time service is running on all domain controllers

Completed

Exchange service is installed

Error: The Exchange service cannot be contacted on the fpsmail.fossil server.

DSAccess is configured correctly