Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
|Source: SMS Server|
On <date> <time> component <cumponent name> on computer <computer name> reported: Systems Management Server cannot update the already existing object "<object name>" in Active Directory.
Possible cause: This site's SMS Service account or the site server's machine account may not have full control rights for the "System Management" container in Active Directory
Solution: Give the site's SMS Service account full control rights to the "System Management" container and all child objects in Active Directory.
Possible cause: The Active Directory object "<object name>" has been moved to a location outside of the "System Management" container or has been lost.
Solution: Delete the object from its current location and let SMS create a new object.
Possible cause: The Active Directory schema has not been extended with the correct SMS Active Directory classes and attributes.
Solution: Turn off Active Directory publishing for each site in the forest until the schema can be extended. The schema can be extended with the tool "extadsch.exe" from the SMS CD.
|English: Request a translation of the event description in plain English.|
As per Microsoft: "This problem may occur when the SMS Site Component Manager cannot locate or does not have the correct permission to manage the System Management container in the Active Directory directory service". See ME830022 for information on solving this problem.
|Private comment: Subscribers only. See example of private comment|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated