The MOM agent or the MOM server does not start, and event 9029 is logged in Microsoft Operations Manager 2005 (883347)


The information in this article applies to:

  • Microsoft Operations Manager 2005

SYMPTOMS

In Microsoft Operations Manager (MOM) 2005, the MOM agent or the MOM server does not start, and the following event is logged in the Application event log:Event Type: Error
Event Source: Microsoft Operations Manager
Event Category: MOM Server
Event ID: 9029
Description: The Microsoft Operations Manager service (MOMService.exe) was unable to run under the supplied credentials. Please use the SetActionAccount utility to set an action account which meets the guidelines documented in the Microsoft Operations Manager documentation.

CAUSE

This problem may occur if any one or more of the following conditions are true:
  • A domain controller is not available to perform the logon.
  • The action account is disabled or deleted.
  • The action account's password has expired.
  • The action account that the MOM service uses does not have permissions to log on locally. By default, only administrator accounts automatically receive Allow Logon Locally permissions on domain controllers. The account that is used by the MOM service must be able to log on locally to the computer.

RESOLUTION

To resolve this problem, make sure that a domain controller is available on the network, that the action account is active, and that the action account's password has not expired, and that the action account that MOM uses has Allow Logon Locally permissions. To make sure that the action account has Allow Logon Locally permissions, follow these steps:
  1. Click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
  2. Right-click the domain object, and then click Properties.
  3. On the Group Policy tab, click the domain policy, and then click Edit.
  4. Expand Computer Configuration\Windows Settings\Security Settings\Local Policies, and then click User Rights Assignment.
  5. Double-click Allow log on locally, and then click Add User or Group.
  6. Type the user account, click OK, and then click OK.
  7. Quit Group Policy Object Editor.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

You can use the SetActionAccount.exe tool to examine the action account. This tool is located in the Program Files\Microsoft Operations Manager 2005 folder. To do this, follow these steps:
  1. Click Start, click Run, type cmd, and then click OK.
  2. At the command prompt, locate the Program Files\Microsoft Operations Manager 2005 folder.
  3. Type the following:

    SetActionAccount.exe Management_Group_Name -query

    Note You must specify your management group name. You can change the MOM action account by using the -set command instead of the -query command.
Modification Type:MinorLast Reviewed:7/8/2005
Keywords:kbtshoot kbService kberrmsg kbEvent kbUser kbSecurity KB883347 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.