1. ADM361 Microsoft Operations Manager 2000 – SP1 Overview Martin Dey Sr. Product Manager Enterprise Management Division

2. Why Do People Stop Using Management Tools? Can’t decide what should be monitored Too much/too little data returned Too much time spent managing the management tool

3. Agenda MOM 2000 Product Overview Case Study: MOM at Microsoft MOM 2000 Refresh Service Pack 1 Changes Management Pack Updates MOM 2000 SDK 2 MOM 2000 Resource Kit MOM 2004 – and beyond…

4. Management Solutions SERVERSCLIENTS

5. MOM Architecture MOM DB MOMServer Agent Agent Data/configuration Storage Reporting Alert state management MOM Agent Win32 service Runs rules locally including local responses Data Collection, Consolidation, and Filtering MOM User Interface MMC snap-in and Web Console MOM Server (DCAM) Database Access Service (DAS) Handles connections to the DB Consolidator Agent functionality on MOM Server Server side responses Agent Manager Discovery Agent install/Uninstall Attribute Collection

6. Wealth Of Data Sources Registry PerfMonCounters NT Event LogScripts SNMP SQLServer ActiveDirectoryExchange.NET WMI Providers BizTalk MOM Agent (OnePoint Service) WMI ext for WDM

7. What Management Packs Do Encapsulate product-specific operational intelligence Measure System and service availability System usage and performance Record errors and events Automatic responses for Self correcting problems Notification of operators Collect data for views and reports

8. Processing Rule MOM Rules Processing rule group ComputerGroup Processing rule Provider NT event log NT event log Perfmon data Perfmon data WMI WMI SNMP SNMP Log files Log files Syslog Syslog Criteria Where source=DCOM and Event ID=1006 Where source=DCOM and Event ID=1006 Response Alert Alert Script Script SNMP trap SNMP trap Pager Pager E-mail E-mail KB data Knowledge Knowledge Site specific knowledge Site specific knowledge

9. Management Packs Included With Base License Windows ® 2000 Windows NT ® 4.0 (limited) Active Directory Event collector (Default Windows events) Terminal server DNS DHCP WINS RRAS IIS SMS MTS MSMQ MSDTC MOM Windows Server Clusters Network Load Balancing.NET Framework

10. Management Packs Included in Application Management Pack Exchange 2000 and 5.5 SQL Server 2000 and 7.0 Application Center 2000 Internet Security and Acceleration Server 2000 Proxy Server 2.0 Site Server 3.0 Commerce Server 2000 SNA Server 4.0 Host Integration Server 2000 Biztalk Server 2002* Sharepoint Portal Server 2.0* *Management Pack ships on product CD

11. MOM Managing MOM Agent Manager automatically Discovers New Servers to Monitor Deploys Agents to the New Servers Distributes Appropriate Rules to Agents MOM also Monitors MOM Database MOM Servers (DCAM) Management Pack for MOM itself

12. Rule Movement And Data Flow MOM DB MOMServer Agent Agent Alerts, events and perf

13. Configuration Group Agents Agents Agents Agents Agents Agents Agents Agents Agents Availability And Scalability MOMSERVER MOM DB MOMSERVERMOMSERVER Clustered MOM DB

14. Multiple Management Authorities Configuration Group A Configuration Group B MOM DB MOMSERVER MOMSERVER MOMSERVER AgentAgentAgent

15. Multiple Management Authorities Agent machine included in “managed computer rules” for multiple config groups Only one agent installed per-machine Agent version is most recent of those available Rule conflicts handled independently Uninstalling agent from only one config group removes the rules, not the agent

16. Zone Configuration Group Zone Configuration Group Master Configuration Group Master Configuration Group Managing Across Firewalls Internal, Domain A DMZ, Domain B TCP 1270 MOM DB MOMSERVER External/Internet Router/Firewall Agents MOMSERVER Router/Firewall Agents Agents Agents Alerts

17. Case Study: MOM 2000 at Microsoft

18. Operations & Technology Group Microsoft’s First and Best Customer Early adopter of Microsoft technologies Improve products by providing Real-world enterprise environment Strategic feedback Implementation feedback

19. OTG Data Center Overview Centralized IT Operations Regional representation Service levels From power and cooling to full support Data Centers 3 Enterprise 19 Regional 400 sites 400 LOB applications

20. OTG MOM Infrastructure Central management of 7,000 servers Regionally collect alerts in Redmond and Dublin Alert forwarding from Dublin & Tokyo to Redmond of critical alerts Event and Performance data ‘harvested’ nightly Regional Collection Alert Forwarding Planned Alert Forwarding Canyon Park Building 11 Tukwila Los Colinas Charlotte Chicago Dublin TVP UK-IDC Madrid Les Ulis Milan Stockholm Munich Tokyo KK-IDC Sydney Singapore Benelux Silicon Valley

21. Daily OTG event processing Log volume by percentage: 90% security log, 8% application log and 2% system log. On average, each managed node generates 24,000 events/day. The local event agent processes each event (one event in every 4 seconds). 35 Million Events/Alerts collected daily Security Events:31.5 Million Application Events:2.8 Million System Events:.7 Million 86 tool servers for event management. Alert delay to the central Console under 2 minutes globally. 120 Million NT Events 35 Million Events/Alerts1100 Alerts = 180 SRs 31.5 Million events 85 Million events discarded Agent processes 1,073 rules Forwarded Managed ServersCollector/Gatherer Alert Console Security DB Collected Forwarded 31.5 Million Events 3.5 Million Alerts

22. Microsoft OTG OTG Current Daily Averages for AD and Exchange Monitors > 7,000 servers WW from a single location Analyses 100% of all AD & Exchange events generated Exchange: processes 42k events, collects 1.2M instances of performance data, issues <1 alert per server/day AD: Issues less than 3 operator alerts per AD DC per day Manages 98,000 clients with SMS (11k @ SMS 2003) The value of MOM to OTG Before MOM: Multiple products required 35 operator alerts investigated for each trouble ticket raised 100% AD problem investigations in response to h/desk calls Since MOM SP1: MOM is the sole manager of ITG Windows servers Intervention to trouble ticket ratio dropped to 3:1 97% all AD issues fixed proactively

23. Reporting DB Top Tier Config Group Config Group 1 Multi Tier Architecture Provides Scalability! Config Group 2 Config Group 3 Config Group 4 Config Group 5 Config Group 6 Config Group 7 Config Group 8

24. Config Group 1 Exchange Config Group Multi Homed Architecture File Server Print Server RAS DHCP Server DC Exchange Server Backup Config Group 2 Config Groups Agents Provides Flexibility!

25. Redundant Design OTG’s DCAM and database implementation eliminates single point of failure Database MOM DCAMs Managed Servers Database

26. Redundant Design Database MOM DCAMs Managed Servers Database Database and Failover DCAM DCAM and Failover Database OTG’s DCAM and database implementation eliminates single point of failure

27. MOM 2000 Refresh

28. Service Pack 1 Management Pack Updates Programmatic Access to MOM for ISVs and IT Developers – MOM SDK2 The MOM Resource Kit

29. MOM 2000 Service Pack 1 Globalization readiness Complete scrub of all Management Pack rules Scalability/Performance improvements MOM RTMMOM SP1 DCAMS/CG:6 10 Agents/DCAM: 700 1,000 Agents/CG: 1,000 2,000 Clustered MOM database support Improved scripting support Product and documentation fixes

30. Management Pack Updates New Management Packs.NET Framework Network Load Balancing Windows Server Clusters Other Significant Enhancements Exchange Management Pack Active Directory Management Pack Overall improvements Alert Quality – better info in fewer alerts

31. Microsoft Management Products for the Enterprise Common infrastructure Taxonomy Of Windows Management Solutions LessMore # of Windows IT and Admin/IT skill-set Third-party solutions Solutions for Consumers and Small Biz Function Shipped in Windows Value-add Microsoft Products Partner solutions built on Microsoft mgmt products or directly on Windows

32. MOM 2000 SDK2 Contents All required components ship with MOM SP1 MOM WMI provider (exposes Alerts, Events, Computers) Nine SQL Views (exposes read-only access to Alerts, Events) Custom UI view type objects Script debugging support in agent Support for larger scripts Additional documentation and samples SDK Help Code Samples Pocket MOM, WMI tool, scripts, sample MPs, sample SQL queries, sample custom UI views

33. MOM 2000 SDK2 Opportunities ISV/Partner opportunities Two-way connectors Integration of UI views Custom reporting solutions Better support for managing non-Windows servers Customer scenarios Programmatic group management Access to all data collected by mom through SQL views (Read only) Programmatic access to Alerts (auto-resolve, update comments, assign) Help/Service desk integration

34. Partner Quotes “The new SDK will provide a means to move event and monitoring data between Microsoft Operations Manager and BMCs leading enterprise event management system, PATROL, providing our mutual customers with flexible management of their Windows environment’’ - Dave Anderson, Director, BMC Software “The latest version of Microsoft's [MOM] SDK will enable flexible integration between the Netcool suite and Microsoft Operations Manager, providing our mutual customers with a real-time monitoring and service visibility solution that encompasses application, system and network resources’’ - Darin Layman, Vice President, Micromuse “Microsoft's MOM SDK 2 provides practical enhancements that will enable users of CA's Unicenter solutions to leverage interactive communication with MOM objects to help achieve critical management efficiencies and ease implementation of highly automated systems management processes’' - David Hochhauser, Vice President, Computer Associates

35. Partners Extending MOM Citrix – MetaFrame XP and WMI Provider Global Maintech – WMI Event Providers for MVS, AS400, Unix, Linux HP Compaq Management Pack for Insight Manager HP Openview Service Desk NetIQ Windows NT 4.0 XMP Security XMP XMP Connectors for Tivoli, NetCool, and others Netreon – Brocade SAN management Neon Systems – iWave Adapter for helpdesk

36. MOM And Connectors Build your own connector Use MOM SDK resources Complexity can vary One-way connectors are simple Two-way connectors are more complex Customized for each environment Build a connector with assistance Consulting resources can maximize knowledge of MOM and other system Buy a connector Global Maintech, Neon Systems, NetIQ For more information on building connectors ADM393 – Extending MOM 2000: Friday 14:30 Room 6

37. MOM 2000 Resource Kit Utilities and tools for “tuning” MOM installations Commercially viable support Additional tools will be added Contents NEW: ConfigureLogs – manage event log settings across computer groups NEW: DTS Package – move MOM data to an offline data warehouse EventSim – playback of Windows events RunMOMScript – Rule script testing/debugging Server Status Monitor – up/down status for up to ten servers

38. MOM And Windows Server 2003 MOM SP1 has been tested with Windows Server 2003 RC2 When Windows Server 2003 shipped, no further fixes were required for MOM New and updated Management Packs will be available on the web

39. Introducing MOM 2004

40. MOM 2004 What We Heard about MOM 2000 What We’re Doing in MOM 2004 Deploys in hours not weeks Support for more complex environments Rolling upgrades State monitoring & diagnostics Integrated data warehouse for off-line reporting Auto-alert resolution Task-based UI Topological views New Management Packs Cluster monitoring Fully language neutral “Make MOM easier to deploy.” “Make MOM easier to use.” “Improve MOM knowledge”

41. Web Services Management UDDI ASP.NET.NET Framework MP New UDDI MP New Web Services MP New Windows Server 2003 MP New SQL ‘Yukon’ MP New IIS v6 MP

42. UDDI ASP.NET.NET Framework MP New UDDI MP New Web Services MP New Windows Server 2003 MP New SQL ‘Yukon’ MP New IIS v7 MP System Center Suite

43. What We Heard About MOM and SMS What We’re Doing in System Center Suite Servers, services & database coexistence Cooperating consoles SMS deployment status forwarded as MOM alerts Integrated data warehouse Combined SMS & MOM data Unified reporting for servers managed by SMS and MOM Integrated packaging & licensing Seamless migration for MOM & SMS customers “Make MOM and SMS easier to use together” “Provide integrated reports” “Make MOM & SMS easier to purchase”

44. Waves of Innovation

45. Community Resources http://www.microsoft.com/communities/default.mspx Most Valuable Professional (MVP) http://www.mvp.support.microsoft.com/ Newsgroups Converse online with Microsoft Newsgroups, including Worldwide http://www.microsoft.com/communities/newsgroups/default.mspx User Groups Meet and learn with your peers http://www.microsoft.com/communities/usergroups/default.mspx

46. evaluations evaluations

47. © 2003 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.