Archive for the ‘User Group Meeting’ Category

System Center Universe APAC 2016 Announcement!

October 29, 2015 Leave a comment

Looks like System Center Universe APAC 2016 will be an even bigger event, hosted in both Malaysia and in Australia. Now that sounds like a fun trip! March 8 and 9 2016. For more information please see the official web site

Categories: User Group Meeting Tags:

Happy New year 2015!

January 16, 2015 Leave a comment


Happy belated New year all to all!

I was renewed for a 6th year as an MVP Jan 1st 2015.

It is quite an honor and privilege to work with such a dedicated group of diverse individuals that could only come together thru a program like the Microsoft Most Valuable Professional Award.

I am a bit behind on my community involvement because I have relocated to Houston Texas for a new employment opportunity.  I actually moved here 7 weeks ago and my family just arrived this past weekend, so I am finally starting to get back to a normal routine. I hope to get involved in the local System Center Community here in Houston over the next month. As a part of this effort I will be going in person up to SCU 2015 (wed Feb 4th) in Dallas this year.

If you have any SCOM related questions, requests, or how to do something feel free to contact me at jscottmossATgmailDOTcom.

-Scott Moss

MidWest Management Summit 2014 Administrative Uses of PowerShell in SCOM 2012

November 12, 2014 Leave a comment

Here is a dump of the one liners and examples from my Administrative Uses of PowerShell in SCOM 2012.


# NEED TO KNOW for writing effective PowerShell criteria based queries to the opsmgr db.
# Severity : Critical = 2,  Warning = 1, Information = 0
# Priority : High = 2, Medium = 1, Low = 0
# ResolutionState: Closed = 255, New = 0
# IsMonitorAlert: True = 1, False = 0

#Importing the SCOM PowerShell module
Import-module OperationsManager
#Connect to localhost when running on the management server
$connect = New-SCOMManagementGroupConnection –ComputerName localhost

# Or enable the two lines below and of course enter the FQDN of the management server in the first line.
#$MS = ""
#$connect = New-SCOMManagementGroupConnection –ComputerName $MS

#Get New Critical Alerts Counts
(Get-SCOMAlert -ResolutionState 0 -Severity 2).count
#Get A count of all Critical alerts both open and closed
(Get-SCOMAlert -ResolutionState 0,255 -Severity 2).count
#Get New Warning Alerts Counts
(Get-SCOMAlert -ResolutionState 0 -Severity 1).count
#Get New Informational Alerts Counts
(Get-SCOMAlert -ResolutionState 0 -Severity 0).count

#get a count of rule based alerts
(Get-SCOMAlert -criteria "IsMonitorAlert=0").count
#Get a count of monitor based alerts
(Get-SCOMAlert -criteria "IsMonitorAlert=1").count

#WILL THIS WORK? NO, once IsMonitorAlert is added as a part of the criteria, have to use ""
#(Get-SCOMAlert -resolutionstate 0 -severity 2 -Criteria "IsMonitorAlert = 0").count
#the following line will work
(Get-SCOMAlert -Criteria "ResolutionState = 0 AND Severity = 1 AND IsMonitorAlert = 0").count
#the order of the critera is not that important unless your data set is large, in that case use the big filter first
(Get-SCOMAlert -Criteria "IsMonitorAlert = 0 and ResolutionState = 0 AND Severity = 1").count

#Get New Error Alerts, sort by Name
Get-SCOMAlert -ResolutionState 0 -Severity 2 | sort Name
#Get New Warning Alerts, sort by name
Get-SCOMAlert -ResolutionState 0 -Severity 1 | sort Name
#Get New Informational Alerts, sort by name
Get-SCOMAlert -ResolutionState 0 -Severity 0 | sort Name

# Get a list of open ERROR alerts created by a monitor
Get-SCOMAlert -Criteria "ResolutionState = 0 AND Severity = 2 AND IsMonitorAlert = 1"

# get a LIST of open alerts created by a monitor
Get-SCOMAlert -Criteria "ResolutionState = 0 AND IsMonitorAlert = 1"
# get a COUNT of open alerts created by a monitor
(Get-SCOMAlert -Criteria "ResolutionState = 0 AND IsMonitorAlert = 1").count

# get a LIST of open alerts created by a rule
Get-SCOMAlert -Criteria "ResolutionState = 0 AND IsMonitorAlert = 0"
# get a COUNT of open alerts created by a rule
(Get-SCOMAlert -Criteria "ResolutionState = 0 AND IsMonitorAlert = 0").Count

# get list of closed alerts created by a monitor
Get-SCOMAlert -Criteria "ResolutionState = 255 AND IsMonitorAlert = 1"

# get list of closed alerts created by a rule
Get-SCOMAlert -Criteria "ResolutionState = 255 AND IsMonitorAlert = 0"
# get a list of open alerts that are warning alerts
Get-SCOMAlert -Criteria "ResolutionState = 0 AND Severity = 1"
# open critical alerts
Get-SCOMAlert -Criteria "ResolutionState = 0 AND Severity = 2"
# Open Critical and Warning alerts
Get-SCOMAlert -ResolutionState 0 -Severity 2,1

# Becasue you would never want to close an alert generated by a monitor, with out resetting #the health of the alerts monitor. There will not be a one liner that will close alerts generated #by a monitor. There will be a script that will do that available soon.

# Get New Alerts generated by a rule, and close the alerts.
Get-SCOMAlert -Criteria "ResolutionState = 0 AND IsMonitorAlert = 0" | Resolve-SCOMAlert -Comment ‘Alerts Closed by Chuck Norris’

#SCOM 2012 backup all MPS
Get-SCManagementPack | Export-SCManagementPack -path c:\MPBackup

#Get Agents that are not healthy
Get-SCOMAgent | where {$_.HealthState -ne “Success”}

#how to enable agent proxy
Get-SCOMAgent |where {$_.ProxyingEnabled -like $false}|Enable-SCOMAgentProxy
#To verify this one-liner has the desired effect, run the following one-liner, which returns a
#list of agents along with confirmation that agent proxy has been enabled.
Get-SCOMAgent |where {$_.ProxyingEnabled -like $true} | select Name, ProxyingEna-bled

#The Get-SCOMAgentApprovalSetting cmdlet fetches the AgentApprovalSetting for the #management group to which the OpsMgr PowerShell console is currently connected. It will #show either, Pending, AutoApprove, or AutoReject.

#The cmdlet Set-SCOMAgentApprovalSetting sets the AgentApprovalSetting for the #management group to which the OpsMgr PowerShell console is currently connected. The #three parameters are AutoApprove, AutoReject, and Pending. Here is an example to set the #agent approval setting for the management group to manual:
Set-SCOMAgentApprovalSetting -Pending
#To verify the changes were applied, run the following:

#Add custom alert resolution states
Add-SCOMAlertResolutionState -Name ‘OS Support’ -ResolutionStateCode 15
Add-SCOMAlertResolutionState -Name ‘Exchange Support’ -ResolutionStateCode 20
#To verify the alert resolution state changes, run the get-scomalertresolutionstate

#remove custom alert
Get-SCOMAlertResolutionState -Name ‘OS Support’ | Remove-SCOMAlertResolutionState

#Working with resource pools
Get-SCOMResourcePool -Name "Notifications Resource Pool" | GM
#changing the resourec pool
Get-SCOMResourcePool -Name “Notifications Resource Pool”|Set-SCOMResourcePool –EnableAutomaticMembership $FALSE
#how to verify settings changes
Get-SCOMResourcePool -DisplayName “Notifications Resource Pool” |FT Name, IsDynamic

#SCOM license mini-report
Get-SCOMAccessLicense | measure-object -property LogicalProcessorCount,PhysicalProcessorCount -sum | foreach {$_.Property + " Total : " + $_.Sum}

#How to retrieve a list of all object classes present in your Operations Manager 2012 #management group:
Get-SCOMClass| format-table DisplayName, Description
#Determine the management pack in which the class is defined:
Get-SCOMClass| format-table DisplayName, Description, ManagementPack
#Use the following to send this information to a csv file for easy reading in Excel:
Get-SCOMClass | select-object DisplayName, Description | export-csv -path c:\classes.csv
#Retrieving all the classes defined in a specific management pack is also a single line affair #with the following one-liner, which retrieves all the classes in the #Microsoft.SQLServer.Library management pack:
get-scomclass | where {$_.ManagementPackName -like ‘Microsoft.SQLServer.Library’}

#Exploring Discovered Instances
Get-SCOMClassInstance| select-object DisplayName, Name, Description

Get-SCOMClass -name "Microsoft.SQLServer.2012.Database" | Get-SCOMClassInstance

Get-SCOMClass -name "Microsoft.SQLServer.2012.Database" | Get-SCOMclassInstance | Format-Table DisplayName, PathName -auto

#The Get-SCOMGroup cmdlet makes this an easy task, facilitating enumeration of group members in a single line of PowerShell, as shown in the following example.
Get-SCOMGroup -DisplayName "<DisplayName of Group>" | GetSCOMClassInstance
Get-SCOMGroup -DisplayName "<DisplayName of Group>" | GetSCOMClassInstance | export-csv D:\TEMP\groupmembers.csv -notypeinfo

#getting alerts related to a group
$Group = Get-SCOMGroup -displayname ‘BLOG – My Application’
$ClassInstances = $Group.GetRelatedMonitoringObjects(‘Recursive’)
$Alerts = Get-SCOMAlert -instance $ClassInstances -ResolutionState (0..254)
$Alerts | ft Name

#Temporarily Disabling All Notification Subscriptions
Get-SCOMNotificationSubscription | where {$_.Enabled -eq $true} | Disable-SCOMNotificationSubscription

#Enable all notification subs
Get-SCOMNotificationSubscription | where {$_.Enabled -eq $false} | Enable-SCOMNotificationSubscription

#Report on Agent Primary Management Server and Failover Management Servers
Get-SCOMAgent|sort ComputerName|ft -a Computer-Name,primarymanagementservername,@{l="SecondaryManagementServers"; e={$_.getfailovermanagementservers()|foreach{$}}}

#cool way of flushing a SCOM Agent Cache using powershell

#Add SCOM Subscribers the easy way

Add-SCOMNotificationSubscriber -Name ‘James Moss’ -DeviceList ‘’,’sms:4048675309′,’sip:JIMMYjames’


#Connect SCOM 2007 cmdlets to 2012 OM load snapin and run startup script
Add-PSSnapIn Microsoft.EnterpriseManagement.OperationsManager.Client

# To Find out what the OperationsManager Cmdlets are
get-command -module OperationsManager

#Retrieve PowerShell Cmdlets and Parameters
Get-Command -Module OperationsManager | Select-Object -Property Name,@{Name=’Parameters’;Expression={(Get-Command $_).Parameters.Keys}} | Sort Name

#Find out more about the OperationsManager Module
$mod=get-module OperationsManager
$mod | select * | more

#Help is also a great helper when you are trying to get familiar with new cmdlets
#I want to find out what cmdlets have SCOMALERT in their name
Get-help *SCOMALERT*
#Or what cmdlets have SCOMCLASS in their name
Get-help *SCOMCLASS*

#Get-Member is your friend to show you information about the objects cmdlets are bringing back
Get-SCOMAlerts | Get-Member
Get-SCOMAlerts | GM
# you can pipe several cmdlets together and utilize GM to see the properties and methods available to the resulting objects
GET-SCOMAlerts |

#to limit what get-member brings back specify the member type to property
get-member -membertype property

#info about properties

#Ever wanted to know what you can pipe between cmdlets?  Say you are using the Get-#SCOMRule cmdlet to figure something about a SCOM Rule
#1) Pipe the Get-SCOMRule  Get-Member to find out the TypeName which is #Microsoft.EnterpriseManagement.Configuration.ManagementPackRule
#2) use get-command –ParameterType #Microsoft.EnterpriseManagement.Configuration.ManagementPackRule  to find out what #cmdlets will work with it.
#this piece of information came from Jeffery Snover from a MS TechEd video with Don Jones, I #think it was 2014 NA.
#But if you ever have to learn some new cmdlets from another module like Office 365 or Lync, #this could literally help you cut your learning curve in half by knowing
#what cmdlets can work together using the same types of data

get-command -ParameterType Microsoft.EnterpriseManagement.Configuration.ManagementPackRule

PS D:\> get-command -ParameterType Microsoft.EnterpriseManagement.Configuration.ManagementPackRule

CommandType     Name                                               ModuleName
———–     —-                                               ———-
Cmdlet          Disable-SCOMRule                                   OperationsManager
Cmdlet          Enable-SCOMRule                                    OperationsManager
Cmdlet          Get-SCOMEvent                                      OperationsManager
Cmdlet          Get-SCOMOverride                                   OperationsManager
Cmdlet          Get-SCOMOverrideResult                             OperationsManager

#another problem that you can run across when working with PowerShell is missing what #type of data a property is using
#an example that happened earlier this year is someone was trying to figure out how many #SCOM rules are enabled by default.
#so if you briefly look at the get-member output from get-scomrule you will notice that there #is a property called Enabled.
#going from my previous experience, and not looking at this information from Get-member, I #thought for sure it would be a Boolean value like $True or $False
Get-scomrule | GM
#enabled is actually a multiple value possibility 4 of which are True and False but it is not a #Boolean value but to get there is going to take some work…
get-scomrule | get-member -name Enabled

PS D:\> get-scomrule | get-member -name Enabled

   TypeName: Microsoft.EnterpriseManagement.Configuration.ManagementPackRule

Name    MemberType Definition
—-    ———- ———-
Enabled Property   Microsoft.EnterpriseManagement.Configuration.ManagementPackMonitoringLevel Enabled {get;set;}

#BING Microsoft.EnterpriseManagement.Configuration.ManagementPackMonitoringLevel
#Find the MPRULES properties
#Then click on the link to the enumeration, which is

#Scroll down to find the possible members of the enabled value which are:

#how to remove white space
$agent = Get-SCOMAgent
$agent | Group PrimaryManagementServerName -Noelement | sort Name | select Name, Count

#white space removed
$agent = Get-SCOMAgent
$agent | Group PrimaryManagementServerName -Noelement | sort Name | Format-Table Name, Count -auto

SCU2014 Event for ATLSMUG Folks

January 30, 2014 Leave a comment

Due to the snow and ice problem this week in Atlanta, we had to cancel our event at the Alpharetta Microsoft campus today. As the SCU event is virtual, we will just watch it from home!

Enjoy the art!


Categories: ATLSMUG, User Group Meeting Tags:

SCU 2014 Simulcast Event Jan 30th 2014

January 10, 2014 Leave a comment

If you are thinking about coming to this event please register on event bright to ensure we order enough food for breakfast, lunch and snacks! To register for the Atlanta SCU 2014 Simulcast, which will be at the Alpharetta Microsoft complex please register here:

The agenda for the event can be found here

Hope to see you there!

System Center Virtual User Group Meeting #22

October 22, 2013 1 comment

Please join us for System Center Virtual User Group #22. We have a good mixture of PowerShell System Center 2012 R2 and Cloud discussions to keep any geek happy. After registering for this event on the EventBrite site, an email will be sent to you the day before the event with the attendee URL so you can join the live meeting.

Registration Link:

Event Date: Friday Nov 8th 1 pm to 3 pm est


12:30 to 1:00 meeting open
1:00 to 1:05 Intro Scott Moss
1:10 to 1:55 System Center 2012 R2 Build Automation using PowerShell
2:00 to 2:55 The Cloud OS – ‘One Microsoft’ in Action
3:00 to 3:05 Scott Moss


Session Name: System Center 2012 R2 Build Automation using PowerShell

In this session Joe Thompson and Pete Zerger will discuss how to deploy System Center 2012 R2 in a lab, Proof of Concept, or Production environment in a hurry, but don’t know where to start? This session will serve as a “Quick Start Guide” to get you going using the PowerShell Deployment Toolkit (PDT) and Desired State Configuration (DSC). The PowerShell Deployment Toolkit (PDT), available in the Microsoft TechNet Gallery gives you the ability to create a complete Microsoft System Center 2012 R2 environment, while PowerShell Desired State Configuration (DSC) is the new management framework available in Windows Server 2012 R2 PowerShell 4 that can further extend the customizations possible with PDT.

Session Name: The Cloud OS – ‘One Microsoft’ in Action

In this session Christian Booth will discuss those challenges and how we can overcome them to realize the benefits of cloud computing through Microsoft’s new Cloud OS strategy.

Speaker BIO

Pete Zerger
Pete Zerger is a consultant, author, speaker and seven-time Microsoft MVP focusing on System Center management, private cloud and data center automation solutions. He is a frequent speaker at Microsoft conferences and has written a number of books and articles on System Center technologies, including most recently SC 2012 Orchestrator Unleashed, from Sams Publishing, available in July 2013.

Joe Thompson
Joe Thompson has over 20 years’ experience in datacenter operations focused on Configuration and Patch Management, systems monitoring, automation and integration. Have worked with Operations Manager starting with 2007 in 2010 and Configuration Manager starting with 2007 R3 since 2011. Recently left the corporate world to start my career in Microsoft Systems Management consulting with Infront.

Christian Booth
Christian is a childhood to adult geek in its truest form, Comic books, video games, and Doctor Who- he has gone from running a BBS in his childhood to helping architect and implement some very large and complex datacenters. Christian recently joined Microsoft from being the Director and Lead Technical Architect at Private Consulting firm in Redmond for the last 4 years, where he developed a Microsoft Infrastructure practice from the ground up. Christian has more than 17 years’ experience on the Microsoft platform and how it integrates into large and very heterogeneous infrastructures.
With his extensive background in System Management and Virtualization Christian has been for the last few years running technical deep dives (Lunch and Learns) for Microsoft customers, doing training engagements for MS learning partners, and speaking at majority of the Microsoft and Partner conferences on the west coast. Christian is currently co-authoring a Windows 2012R2 book from Sybex and Co-Hosts a weekly Podcast called “SkillingUp” where he focus on MS certification and not only how to grow your career in the Microsoft technology stack but the soft skills to get ahead. Christian’s podcast is frequented by other MVPs in the community and internal MS Staff.

We look forward to seeing you online!

Thank you,

Scott Moss
Microsoft MVP (System Center Cloud and Datacenter Management)
Vice President Atlanta SMUG
President System Center Virtual User Group

System Center Virtual User Group #21 and ATLSMUG Meeting 9/13/2013

September 9, 2013 1 comment

Please join us Friday September 13, 2013 for another joint meeting of the ATLSMUG and System Center Virtual User Group meeting #21. I look forward to seeing you there!

To Register and get attendee information please go to:

All times are in Eastern

Presenters Agenda Start End
ATLSMUG Opening Introductions 9:30 am 9:40 am
Tommy Patterson What’s New in R2? 10:00 am 10:45 am
Chris Nakagaki vCOPS with Log Insight 11:00 am 11:45 am
Secunia Lunch Sponsor   12:00 12:50
Hal Rottenberg Analyzing ConfigMgr Agent Logs 1:00 pm 1:45 pm
Scott Moss SCOM 2012 MP Authoring 101 w/ Visio Tools 2:00 pm 2:45 pm
ATLSMUG Closing 3:00 pm 3:20 pm



Meaghan McKeown, How to Hit a Moving Target – Vulnerability Intelligence for 3rd Party Patching

Do you know what software applications need updating in your system  today?  Once you identify, how are you creating and deploying these patches in your system? With nearly 86% of vulnerabilities coming exclusively from 3rd party software applications, it’s more important than ever to patch everything in your environment. In this session we will go through how vulnerability intelligence can help you prioritize what patches are most important for your environment based on your security risks.  Plus, we will demo how you can create and deploy third party patches through Microsoft’s System Center Configuration Center 2012.


Tommy Patterson, What’s New in Server 2012 R2 and Windows Azure

Tommy’s action packed presentation and demo compiles many of the new details revealed during TechEd, MMS, and TechReady for all things new in Server 2012 R2 and Windows Azure.

Tommy Patterson began the virtualization adventure during the launch of VMware’s ESX server’s initial release.  At a time when most admins were only adopting virtualization as a lab-only solution, he pushed through the performance hurdles to quickly bring production applications to the environment.  Since the early 2000s, he has spent most of his career in a consulting role providing assessments, engineering, planning, and implementation assistance to many members of the Fortune 500.  Troubleshooting complicated scenarios, and incorporating best practices into customer’s production virtualization systems has been his passion for many years.  Now he shares his knowledge of virtualization and cloud computing at Microsoft as an IT Pro in the Platform Evangelists division.

K. Chris Nakagaki, Troubleshooting @ Cox Communiccations w/ vCOPs and Log Insight

In this session, Chris explores the ways Cox utilizes the various toolsets within vCenter Operations in conjunction with Log Insight for troubleshooting and deeper problem analysis.

Chris is a lead systems administrator @ Cox Communications.  His current favorite technologies revolve around virtualization, cloud computing architectures, and POWERshell.  Also, a self-diagnosed technophile to top it all off.

Hal Rottenberg (with Garth Maynard), Exploring System Center ConfigMgr Logs for Fun and Profit

In this session, Hal will talk about the value of logs and other machine data, particularly the things that AREN’T in the System Center GUI. We’ll go into a few different ways to collect this data. Once you have it all in one place, Hal will show you some of the cool stuff you can find in SCCM agent logs that might help you to solve some thorny issues in your environment. You’ll also learn how to use PowerShell or Splunk as the tools to collect and analyze log data.

Hal Rottenberg works as a Solution Architect for Splunk. His background is in Windows and VMware systems engineering, PowerShell automation, and big data analytics. Hal is a Microsoft PowerShell MVP, and is the co-host of the long-running PowerScripting Podcast. He enjoys speaking about technology at user groups and conventions when he’s not running his kids around to soccer practice. You can find him online as halr9000 everywhere that geeks hang out.

Scott Moss, SCOM 2012 MP Authoring 101 w/ Visio Tools

This session is an introduction for the IT professional on how to utilize the Visio Authoring tool to extend Operations Manager 2012 monitoring capability. Scott will walk through making a management pack as well as sealing it.

Scott is currently performing contract work for various agencies, focusing heavily on Operations Manager and integrating OpsMgr with other System Center products.