Alert from Windows 2000-Based Agent Computer Seems to Come from a Windows NT 4.0 Processing Rule Group (296026)


The information in this article applies to:

  • Microsoft Operations Manager 2000
This article was previously published under Q296026

SYMPTOMS

Some alerts from a Microsoft Windows 2000-based agent computer may appear to be generated by Microsoft Windows NT 4.0 processing rules.

CAUSE

This behavior can occur because the rule that triggers the alert is shared by a Windows NT 4.0 processing rule group (PRG) and a Windows 2000 PRG, but the rule lists only the Windows NT 4.0 PRG as its parent.

STATUS

Microsoft has confirmed this to be a problem in Microsoft Operations Manager 2000.

MORE INFORMATION

The following example illustrates this behavior:

The processing rule group Windows NT System - NetEvent.DLL is a child group to both of the following PRGs:
  • Microsoft Windows NT 4.0 Base Functions\Windows NT 4.0 - All Computers
  • Microsoft Windows 2000 Operating System\Windows 2000 - All Computers\Windows 2000 System - NetEvent.DLL\
However, Windows NT System - NetEvent.DLL records only Microsoft Windows NT 4.0 Base Functions\Windows NT 4.0 - All Computers as its parent.

When a rule under Windows NT System - NetEvent.DLL generates an alert on a Windows 2000-based computer and you click View Rule on the generated alert in Microsoft Management Console (MMC) to check the associated processing rule, you note that the processing rule path for the alert is Microsoft Windows NT 4.0 Base Functions\Windows NT 4.0 - All Computers\Windows NT System - NetEvent.DLL\Windows System NetEvent.DLL (shared)\.

This can be confusing because it is the branch under the Windows 2000 parent PRG that actually generates the alert.
Modification Type:MinorLast Reviewed:6/13/2005
Keywords:kbbug kbnetwork kbpolicy KB296026
©2004 Microsoft Corporation. All rights reserved.