Ensure that port 1270 UDP is open. You need to open both TCP/UDP. Once 1270 UDP is open, your last contacted column will start to populate within 15 mins. If you only open 1270 TCP, the column will remain blank.
May need to restart the MOM service on the management server.
Also see https://cloudbuild.co.uk/?p=1630
Copy below to a notepad and rename with a .reg extension. Such as AmendMOMagent.reg
Test on a client and check the registry is amended. When ready, apply via group policy. If you wish to use a script, see https://cloudbuild.co.uk/?p=1638
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Mission Critical Software\OnePoint\Configurations\forefrontclientsecurity\Operations\Agent\Consolidators]
“PeerCount”=dword:00000001
“Consolidator 1 Host”=”server.domain.com”
“Consolidator 1 AD Name”=”server.domain.com”
Insert the below script into a notepad, amend bold text as required. Save as .bat file and deploy via group policy or run manually if you have a few machines. Test before applying to live environment.
MsiExec.exe /I \\path to momagent.msi /norestart /qn /l*v “%temp%\MOMReinstall.log” CONFIG_GROUP=”Default is ForefrontClientSecurity but amend if different” CONFIG_GROUP_OPERATION=”ModifyConfigGroup” MANAGEMENT_SERVER=”NEW MOM SERVER GOES HERE” AM_CONTROL=”Full” REQUIRE_AUTH_COMMN=1 REINSTALL=”ALL”
If mom agent control is not FULL (AM_CONTROL=”Full”), please amend. Mine were set to full.
1) Open a command prompt
2) Browse to SetActionAccount.exe which should be located in C:\Program Files\Microsoft Forefront\Client Security\Server\Microsoft Operations Manager 2005
3) Type SetActionAccount.exe ManagementGroupName -query (amend ManagementGroupName as required, default is usually forefrontclientsecurity).
Once you know which account is the MOM action account, ensure it has the correct permissions, such as needs to be part of local admins etc
135
1270 TCP/UDP
1433
80
1272
1271
A useful tool to use to check all required ports are open is momNetChk.exe – This is available from the Microsoft Operations Manager 2005 Toolkit. You can download directly from Microsoft from http://download.microsoft.com/download/d/4/b/d4bfc32c-d8d2-4541-8356-4c6359eecbb4/MOM2005ResKit.msi
If you prefer to have a read before downloading visit http://technet.microsoft.com/en-us/systemcenter/om/bb498260. The tool is available below the Tools and Utilities section.
After you have installed the tool kit, a folder will appear under c:\Program Files named Microsoft Operations Manager Resource Kit. Do a search for momnetchk.exe and then double click the .exe, type in a machine name and click run scan. All tests should show green, if not save the results to a log file and check which ports were blocked.
A really useful tool.
I would recommend you run the tool from both, Server and Client and ensure the required ports are open. For example, if you open port 1270 TCP but not UDP you may experience issues such as the last contact column within MOM console being blank. To install on the client just copy the whole folder across to C:\program files on the client machine.
Subscribe to new tech posts.
We will never send you spam email or forward your details to third parties.
This will close in 0 seconds