What is Run As Account and How to create a Run As account and associate with a Run As profile

 Run as Account and Run as Profile

Basically run as account is a Windows account that can be associated with the rules and can use Windows authentication and plan basic digest simple or binary methods for authentication.

Run as Account defines which credentials will be used for certain actions that can be carried out by the operation manager Agent and these accounts centrally managed by the SCOM Console.

We assign dedicated account to execute or push task from SCOM operation console to client machine that is Run As Account, 

Run as Account is associated with Run as profile.  And run as profile is associated with workflow.

How to Create Run as Account

Login to SCOM Operation console -> Click Administration 

Right click and select Create Run as Account

Click Next

Select Account Type from Run as Account type:

Give Display Name and Description

Enter User name

And Password

Select security level as per your requirement

Click create

How to Associate Run as Account with Run as profile

Now go to Administration -> Click profiles 

Select profile from the list to associate Run as Account

Double click on profile

Click next

Click Add button -> Select account from Run As account drop down list

If you want to manage All target object with the same Run As account then click all target else a selected class.

Filter by:  Type object name 

Select Object and click Add

Click Save

Thank you all done!

What is group in SCOM and how to create and manage Dynamic Group in SCOM 2019

 Group in SCOM:-

Groups are logical grouping of different types of objects within the Operation console; it may be server, application, services or any particular object. 

So it really helps to target while configuring any particular alert or rules or monitors.

Also you can target it to configuring the notification subscriptions.

Groups are defined in the Sealed or Unsealed Management Pack.

Two Types of group in SCOM

1. Dynamic Group

2. Manual Group

Manual Group:-So in the manual method, you have to add the group members manually by searching it one by one.

Dynamic Group:- In Dynamic group, you can write your own discovery queries, which will help to discover the different types of objects.

Whenever any new object is being added, added into the environment, it will be automatically discovered

How to Create Group in SCOM

Login to SCOM Operation manager Console -> Click Authoring

Click Groups

Right Click and select create a new Group

Type group Name and assign Management Pack (Custom Management pack for overwrite)

Click Next

Click Add/Remove Objects

Search for: Select Windows server

Filter by part of name: Click search and select the available items

Select Available item and click ADD

Click Next

Now Click Create/Edit rules

Select Desire class -> Click Add

Define the expression

Click Apply Ok

If you want to Add/Remove Subgroups click and configure else skip it.

If you want to exclude any object just click else click next

Group has been created

Thank you all!

What is Rule in SCOM - How Rule work in SCOM - Types of Rule in SCOM and How to Create Event Based Rule in SCOM 2019

 In this blog I will cover what is Rule in SCOM, how does it work? Types of Rule in SCOM and how to create event based rule in SCOM 2019

What is Rule in SCOM?

Rule, basically define what you want to monitor. They define the data to collect and describe how to process and respond to that data.

The rules exist to perform various functions in operations manager, although,

That rule does not affect the state of an object where a monitor does impact the state of an object.

Rules that generate alerts don’t auto close. 

How do rules work?

For example, when you create an event based rule to configure and alert generating rule, as soon as you configure an event based rule.

Whenever an event is getting generated on the targeted object, that event is being captured by this rule and the condition, when the condition is met and alert data is being sent to the operations manager to trigger an alert in the operations console.

How to create a Rule in SCOM?

Login to SCOM Console -> Click Authoring

Under management pack -> click Rules

Right Click and select create a new rule

Here I am selecting event based alert

Select NT EventLog -> From Management pack list drop down and select Custom Management pack for overwrite.

Rule Name-> Type Rule Name

Rule Category -> Drop down and select from the list

Rule Target -> Browse and Select from list – Here I am selecting Windows Computer

Uncheck Rule is enabled -> By default it will be enabled. -> Next

Log Name -> Browse and search for Computer where you want to apply this rule – Here I am applying on SCCM.ads.com 

From Available event logs select System 

Click Ok -> Next

In EventID -> Enter Event number

In EventSource -> Enter Source 

Note -: you can refer any system based event from any server like below

You can change Priority and Severity as per your requirement.

Click create button 

Search the newly created rule Service Control Manager-test

By default newly created rules apply on all classes, you need to select the correct class that you had selected during creation.

Right click and select Overrides -> Override the Rule -> For all objects of another class

Note-: you can select as per your requirement like single or group or all objects

Search Windows Computer

Check mark on Enabled Parameter Name and change the Override Value to True

Click Apply and Ok

Now Rule has created and enabled -: Go to Monitoring tab and see Active Alert