Missing Event rule generates a missing event when the rule criteria are matched (832552)

CAUSE

This problem may occur if Microsoft Operations Manager (MOM) 2000 incorrectly increments the next Missing event expiration date/time when MOM receives an event that matches the Missing event criteria. This problem may occur if the following conditions are true:

The Missing event schedule (when MOM expects the event to occur) spans midnight. For example, the Missing event schedule runs between 22:00 and 02:00.
An event that matches the Missing event criteria is generated within the Missing event schedule before midnight.

In this case, an event that MOM received that matches the Missing event rule is matched, but the Missing event rule is rescheduled incorrectly. Therefore, a Missing event occurs at the end of the scheduled time even though MOM received a matching event within the schedule before midnight.

RESOLUTION

Hotfix information

A supported hotfix is now available from Microsoft, but it is only intended to correct the problem that this article describes. Apply it only to systems that are experiencing this specific problem.

To resolve this problem, contact Microsoft Product Support Services to obtain the hotfix. For a complete list of Microsoft Product Support Services telephone numbers and information about support costs, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support

Note In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

Prerequisites

You must have MOM 2000 Service Pack 1 (SP1) installed to apply this hotfix.

Restart requirement

You do not have to restart your computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other hotfixes.

File information

The English version of this hotfix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

   Date         Time   Version  Size       File name    Platform
   -------------------------------------------------------------
   11-Feb-2004  17:59  1.0.0.0  3,957,952  Q832552.exe  I386

After you apply this hotfix, the following files will have the following attributes or later:

   Date         Time   Version      Size       File name  Platform
   ---------------------------------------------------------------
   02-Dec-2003  22:09  4.0.1300.12  4,930,957  Eemwf.dll  I386

Hotfix installation

Apply this hotfix to all DCAM computers and to all manually installed agents. When you apply the hotfix to a DCAM, the MOM service (OnePointService.exe) stops and restarts. Because the hotfix includes a DLL that is a core component of the MOM agent, after you apply the hotfix to a DCAM, all the agents that the Agent Manager on that DCAM manages are flagged for reinstallation. If agent installation approval is set to Manual, the Pending Installation node of the MOM Administration console contains the agents that require approval after the next scheduled Agent Manager scan.

To apply this hotfix, run the hotfix installation package Q832552.exe on each DCAM in the configuration group from a local disk or a network share. Follow the steps that appear on the screen. You must manually apply this hotfix to any agent that was manually installed. To silently apply the hotfix, use the /s switch on Q832552.exe.