You may not see the same event description in MOM 2000 that you see in Event Viewer (295859)

SYMPTOMS

When you receive an error message in Microsoft Operations Manager (MOM) 2000, you may not see the same event description that is displayed in Event Viewer. For example, MOM may display the following error message:

DCOM got error "%2147746132" from the computer Computername when attempting to activate the server:
{9F53525D-62DA-11D2-84AF-00A0C9861EAB}

However, Event Viewer may display the following event:

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10006
Description:
DCOM got error "Class not registered " from the computer Computername when attempting to activate the server:
{9F53525D-62DA-11D2-84AF-00A0C9861EAB}

"Class not registered" is not displayed in MOM. Therefore, the error message that appears in MOM is less descriptive and less helpful than the event description that appears in Event Viewer.

The same problem occurs with at least two Active Directory event messages, Event ID 565 and Event ID 566. For event ID 565, MOM displays the following error message:

Event ID: 565
Date: 6/21/2001
Time: 9:51:08 AM
User: Domain\USER
Computer: Computername
Description:
Object Open:
Object Server: DS
Object Type: %{bf967aa5-0de6-11d0-a285-00aa003049e2}
Object Name: %{a262f519-7302-470b-8686-5fb7a1a517ac}
...

However, Event Viewer displays the following event:

Event ID: 565
Date: 6/21/2001
Time: 9:51:08 AM
User: Domain\USER
Computer: Computername
Description:
Object Open:
Object Server: DS
Object Type: organizationalUnit
Object Name: OU=TEST,DC=DCNAME,DC=COM
...

RESOLUTION

Hotfix information

A supported hotfix is now available from Microsoft, but it is only intended to correct the problem that is described in this article. Only apply it to systems that are experiencing this specific problem. This hotfix may receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next MOM 2000 service pack that contains this hotfix.

To resolve this problem immediately, contact Microsoft Product Support Services to obtain the hotfix. For a complete list of Microsoft Product Support Services telephone numbers and information about support costs, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support

Note In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

Prerequisites

To apply this hotfix, you must have Microsoft Operations Manager 2000 Service Pack 1 (SP1) installed on the computer. For more information about how to obtain MOM 2000 SP1, visit the following Microsoft Web site:

http://www.microsoft.com/mom/downloads/previous/sp1trial/default.mspx

Restart requirement

You must restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other hotfixes.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

   Date         Time   Version     Size    File name
   -------------------------------------------------
   07-Dec-1999  12:00  5.0.2134.1  28,944  Psapi.dll

Hotfix installation information

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

You must install this hotfix on each computer for which at least one of the following conditions is true:

The computer hosts a Microsoft Operations Manager Consolidator (CAM).
The computer hosts a manually installed Microsoft Operations Manager agent.

After you install this hotfix, you must set the entry for the following registry subkey to enable MOM 2000 to resolve security GUIDs and SIDs:

HKEY_LOCAL_MACHINE\SOFTWARE\Mission Critical Software\Onepoint\Configurations\<Config Group>\Operations\Agent

To enable MOM 2000 to resolve security GUIDs and SIDs, set the entry for this subkey as follows:

Value name: ResolveGUID
Value type: REG_DWORD
Value data: 1

A value of 1 enables MOM 2000 to resolve security GUIDs and SIDs. A value of 0 (zero) turns off this functionality.

Note When you install this hotfix on a Microsoft Operations Manager Consolidation (CAM) server, the installation program starts an agent update to all currently managed servers. The update process uses the following steps:

At the next scheduled Managed Computer Scan operation, the list of agent computers that must be updated appears in the Pending Installation folder in the Configuration Microsoft Management Console (MMC) snap-in. If you must start the Managed Computer Scan immediately, start it.
The deployment of the updated agents must be approved on the Microsoft Operations Manager Consolidator (CAM) computer.
The deployment of the updated agent occurs for each managed node only after this deployment has been approved in the Pending Installation folder.