1. Microsoft Management Seminar Series
System Monitoring and Reporting

2. Goals for this Session:
Introduce you to the concept of pro-active monitoring as part of your management strategy
Explain what tools are available to help you deal with the challenges you face
Demonstrate the tools, tips, tricks and best practices to make your life easier.

3. Agenda Why Monitor? MOM 2005 – What is it? MOM 2005 Architecture
Management Packs
MOM 2005 Reporting
Enterprise Configurations
Scalability
Series Summary
The Future…

4. Sustaining & Running Existing
IT Challenges Today
A Crisis in Complexity and Value
Perception as commodity and cost center
Resources consumed by maintenance
Need to demonstrate value
Ever shrinking budgets
Inefficient capacity usage
Economic hardship
Wide spread uncertainty
The Agile Business
Increases
Value Creation
Decreases
Maintenance &
Delivery
30%
New Capability
70%
Sustaining & Running Existing
Capability
45%
New Capability
55%
Existing Capability
Today’s IT
Desired IT
IT must deliver more business value
Software must unlock Business Potential
Source: Accenture I.T. Spending Survey

5. Why Monitor? Support Departments Process Management Business Impact
Fire fighting – reactive administration
Technology ‘silos’
Time and skill set not well utilized
Process Management
No accountability in service delivery processes
Lack of process consistency
Lack of process owners
No ownership for end-to-end process management
Business Impact
Downtime
Lack of confidence in IT
Customer dissatisfaction
Competitive disadvantages
Failure to meet service expectations

6. Why MOM 2005? Availability Manageability Security Reliability
Accountability

7. MOM Architectural Overview
Reporting Database
Reporting Console
Operator Console
Admin Console
Web Console
MOM Database
MOM
Server
Agents
Agents

8. MOM Architectural Overview Work Flow
MMC
MOM Admin creates
processing rules and
sets notifications
Operators access data and resolve alerts
Alert
Console
Targeted notifications
MOM generates alert

9. MOM Consoles One MMC Snapin per management group
Administrator Console
One MMC Snapin per management group
Rules Node – To author, view, modify, Export/Import rules
Computer Group Rules
Rule Groups and Rules
Operator Console (introduced in MOM 2005)
To create and display view instances, Update Alerts
User Customizable Views of many types – e.g. Alert Views, State views
Views can be organized in a folder hierarchy
Views can be imported and exported
Context Sensitive tasks
Multipane View
Web Console

10. Mom Rules Rule Provider Criteria Response Knowledge Event Rules
Collection rules
Filtering rules
Missing event rules
Consolidation rules
Duplicate Alert Suppression
Performance Rules
Measuring
Threshold
Alert Rules
Rule
Provider
NT event log
Perfmon data
WMI
SNMP
Log files
Syslog
Criteria
Response
Alert
Script
SNMP trap
Pager
Task
Managed Code
File Transfer
Where source=DCOM and Event ID=1006
Knowledge
Product Knowledge
Links to Vendor
Company Knowledge
Links to Centralized Company knowledge

11. MOM Management Packs Distribution Mechanism: “Management Pack”
Management Pack’s can be built by ISV’s and customized, or built from scratch by customers
Management Packs can be imported/exported as fully self contained units
Management Packs contents:
Rule Groups
Rules
Computer Group Rules and Attributes to be collected
Views
Relationships
KBs
Provider Instances
Tasks
Scripts
Notification Groups
Schema
Topology Diagram Definitions
Reports ( in a separate file)

12. Knowledge Base Knowledge is a key feature
Facilitates rapid issue resolution
Empowers front line operators
Less escalation
Faster resolution

13. Management Pack Ecosystem
Microsoft Applications
Application Center 2000
BizTalk Server 2002 Enterprise Edition
Commerce Server 2000
Exchange Server 2003 / 2000 / 5.5
Host Integration Server 2000
Identity Integration Server 2003
Internet Security and Acceleration Server 2000
Live Communications Server 2003 (LCS)
Microsoft Operations Manager 2000
Project Server 2003
Proxy Server 2.0
SharePoint Portal Server 2003
Site Server 3.0
SNA Server 4.0
SQL Server 2000 / 7.0
Systems Management Server 2003 / 2.0
…and more
Windows
Windows Operating Systems
Active Directory
DNS service
IIS versions 4.0 / 5.0 / 6.0
Windows System Resource Manager
Server clusters
Component Services (formerly MTS 2.0)
Message Queuing (MSMQ)
Distributed Transaction Coordinator (MS DTC)
.NET Framework
Windows Internet Name Service (WINS)
Windows SharePoint Services
Network Load Balancing
Routing and Remote Access service
Terminal Services
File Replication Services
…and more
3rd Party Management Packs
Applications
Citrix: MetaFrame XP
NetIQ XMPs: Oracle, Domino, Antivirus, Security
Active Directory
Full Armor Fazam Auditing NetPro Directory Analyzer
Hardware
HP Insight Manager
Dell OpenManage
Platforms
eXc Software: IBM AS400, IBM z/OS, Unix, Linux
Metilinx: Linux / Unix
Devices
JalaSOFT: Cisco Routers and Switches

14. Reporting
Based on SQL Reporting Service and the System Center Data Warehouse:
Long term data storage
Customization
Dynamic/Sophisticated reports
Per report security
Exporting data to other formats
Service specific reports out of box
Summary reports
Capacity and performance trend graphs
Operations reports
Resources
Availability and Reliability
Capabilities
View or print
Publish to Web site
Schedule generation

15. MOM 2005 Scalability MOM 2005 feature Maximum supported
Agent-managed computers per configuration group
3,500
Agentless managed computers per configuration group 60
Agent-managed computers per Management Server
1,200
Management Servers per configuration group 10
Agent-managed computers per Management Server that can run a synchronous runtime task
Simultaneous tasks per Agent-managed computer
Levels in a multitiered MOM configuration 2
Zone configuration groups per master configuration group in a multitiered MOM configuration 15
Alerts per day that can be forwarded to the master configuration group (top tier) in a multitiered MOM configuration
120,000
MOM Administrator consoles per Management Server
Reporting subsystems per MOM database 1
Management Servers per agent for multihoming 4
Size of the MOM database (GB) 30
Size of the Reporting database (GB)
200
Discovery time for 2,000 agent-managed computers (in minutes)
2–3
Agent-managed computers that the Diagram view can simultaneously render
1,000
Agent-managed computers that the Diagram view can render within three seconds after a query result is received from the database

16. MOM 2005 Scalability Feature MOM 2000 MOM 2000 SP1 MOM 2005
Managed computers in a Management group
1,000
2,000
3,500
Managed computers per Management Server
700
1,200
Managed computers per Console
6,000
20,000
35,000

17. MOM 2005 Workgroup Edition Product Delivers
Event and Performance Management
Enterprise event collection
Rules based filtering and consolidation
Proactive alerting/action response
Automation
Scripts
Tasks
Diagnostics
Apps/Role Monitoring
Health Model
Rules libraries
Built-in knowledge-base
Limits:
Requires AD
Requires Windows Server 2003
No Reporting
No MCF
Small to Medium Businesses
with up to 10 Monitored Computers
AD, Exchange, SQL, IIS
Small Business Server 2003

18. Demo
Managed Environment

19. Microsoft Management Seminar Series
Series Summary

20. Series Summary We looked at…
Dynamic Systems Initiative (DSI)
Microsoft Operations Framework (MOF)
Identity Management with Microsoft Identity Integration Server (MIIS)
Asset Management With Systems Management Server (SMS 2003)
Change Management including Patch management and Software Deployment with SMS 2003
System State and Health Monitoring / Reporting with Microsoft Operations Manager (MOM 2005)

21. Microsoft Management Seminar Series
The Future

22. 2003 2004 2005 Future Windows Server 2003 SMS 2003
Windows Update Services
SMS 2003 Device Mgmt and OS Deploy FPs
MOM 2005
System Center 2005
Virtual Server 2005
Visual Studio 2005
2004
2005
System Center “v2”
Windows “Longhorn”
Visual Studio “Orcas”
Future

23. announcing… Protection Manager
Integrates data from MOM, SMS and AD
Extensible schema
Enables better business decision making
announcing…
System Center Reporting Manager 2005 Beta
Offline data warehouse
Consolidated view of multi-site hierarchies
Streamlined query and report creation
Data consolidation across multiple management groups

24. Available Now… Protection Manager
Continuous operation
Minimal potential data loss
Fast backup
Available Now…
System Center Data Protection Manager 2006 Beta
Rapid recovery
High reliability
Enable self-service recovery
Easy setup and operation
Centralized management
Standard server hardware

25. announcing… Protection Manager Express Edition
Sizing solution for Exchange 2003 and MOM 2005
Assess architectural choices for future deployments
What-if analysis
TCO
announcing…
Community Technology Preview for partners
Model performance of current deployment
Find future bottlenecks
Predict user experience
Understand the impact of changes
Optimize upgrade path

26. Useful Links:
Dynamic Systems Initiative (DSI) MOM 2005: System Centre Data Protection Manager: System Centre Reporting Manager

27. A HUGE Thanks to LegendCorp for helping out with the series!
Questions and Answers?
A HUGE Thanks to LegendCorp for helping out with the series!
Blogs.TechNet.com/BruceCowper