Deploying Multiple Management Groups with Multihomed Agents

Authors: John Hallows, James R. Morey

Program Managers: Vlad Joanovic, Lorenzo Rizzi, Travis Wright

Published:   September 2004

Applies To:   Microsoft Operations Manager 2005

Document Version:   Release 1.0

The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of publication. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information presented after the date of publication.

This White Paper is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPR 10110w2210k ESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS DOCUMENT.

Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation.

Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property.

Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious, and no association with any real company, organization, product, domain name, e-mail address, logo, person, place, or event is intended or should be inferred.

2004 Microsoft Corporation. All rights reserved.

Microsoft, MS-DOS, Windows, Windows NT, Windows Server, Active Directory, ActiveSync, and Windows Mobile are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.

The names of actual companies and products mentioned herein may be the trademarks of their respective owners.

Acknowledgments

Primary Reviewers: Barry Webberley, Stephanie Couch

Secondary Reviewers: Ian Jirka

Managing Editor: Sandra Faucett

Chapter 8

You can configure agents to be members of, and to report to, more than one management group by using multihoming. Multihoming allows you to distribute monitoring requirements across different groups within your organization. For example, one group monitors a computer only for security issues, while another group monitors the same computer because it is running a specific Microsoft Windows application, such as Microsoft Exchange. By installing multiple management groups and then multihoming Microsoft Operations Manager (MOM) agents, you can distribute monitoring requirements across these groups.

In This Chapter

Before You Begin

Deployment Scenario Description

Deployment Topology

Installing Multihomed Agents

Send feedback to the MOM Documentation Team: [email protected].

Before You Begin

Before you begin deploying MOM, review the key concepts of MOM and your deployment design and planning documents. Areas to review include:

Chapter 3, "Deploying MOM 2005 Across Multiple Computers."

The MOM 2005 release notes to identify any changes that could affect planning for a new deployment (for example, performance and sizing calculations).

The Microsoft Operations Manager 2005 Security Guide.

Identifying Computers to be Multihomed

Identify the computers on which you want to have multihomed agents. If you plan to install agents remotely by using the MOM Administrator console, decide which Management Server within each management group you will use to install the agent.

Reviewing Installation Requirements

Before installing agents, verify that all managed computers meet the minimum system requirements. For more information about these requirements, see the MOM 2005 Supported Configurations data sheet.

Multihomed agents require an additional 3 MB of disk space for each additional management group that the agent belongs to.

Verifying Network Connectivity to Managed Computers

Run network connectivity tests, such as the Ping tool, to verify that the communication between each Management Server and the managed computers is functioning correctly.

Determining Which Agent Installation Method to Use

You can install multihomed agents on a managed computer either remotely, by using the Add Computers Wizard in the MOM Administrator console, or locally, by running the Manual Agent Setup Wizard on the target computer. You do not have to use the same installation method for all management groups, so you can use the installation method that works best for each management group.

Remotely installing multihomed agents

When you use a Management Server in the first management group to remotely install an agent to a target computer, MOM installs the agent software on the computer.

As you add this same computer to additional management groups, MOM does not install any additional software, it only adds the name of each new management group to the configuration for the managed computer. The Management Server then restarts the MOM service, which causes the agent to recognize the new management group.

Manually installing multihomed agents

Under certain circumstances, installing an agent manually is preferable to using the Management Server to install the agent. In some cases, installing the agent manually is the only method available for installing an agent. For more information about when and how to install agents manually see Chapter 4, "Discovering Computers and Deploying MOM Agents."

When you run the Manual Agent Setup Wizard locally on the target computer to add the first management group, MOM installs the agent software on the computer.

You can run the wizard again for each additional management group that you want the computer to belong to. When you add the computer to subsequent management groups, MOM does not install any additional software, it only adds the name of each new management group to the registry of the computer. The Manual Agent Setup Wizard then restarts the MOM service, which causes the agent to recognize the new management group.

Reviewing Security Implications

By default, on Windows 2000, the MOM Service on the managed computer runs under the Local System account and on Windows Server 2003 it runs under the Network Service account. When the MOM Service needs to run a task, such as checking the local providers for data or running a response, the service initiates a separate process. This process runs either in the context of the Local System / Network Service account or in the context of the domain or local account that was specified for the Action Account at the time that the agent was installed. For a multihomed agent, each management group can independently specify the agent Action Account that the MOM Service uses to check providers and run responses.

For additional information about the security implications for installing agents, see the Microsoft Operations Manager 2005 Security Guide.

Coordinating Multihomed Agent Ownership

It there are different administrators for the management groups that a multihomed agent will belong to, you should assign a primary owner for each multihomed agent or group of agents. The primary owner should work with the administrators of other management groups to coordinate the following:

Agent installation

Identify the method that will be used to install agents. The method might vary between management groups. Ensure that no agent will belong to more than four management groups.

Agent version and updates

Determine which version of the MOM agent is used and determine when the agent is updated. After an agent is updated, management groups cannot install a previous version of the agent unless the updated agent is uninstalled.

Disk space requirements

Ensure that adequate disk space is available on the managed computer for all management groups. See the "Review Installation Requirements" section earlier in this chapter.

Agent log file settings

Review the size requirements for the event log files on the managed computer. Set the log sizes to the maximum value that is required by any one of the management groups. For more information about configuring log files, see Chapter 4, "Discovering Computers and Deploying Agents."

Troubleshooting agent issues

Coordinate with administrators across management groups to troubleshoot and resolve agent issues.

In a multihomed agent environment, the agent reports the events, alerts, and performance data that it collects to multiple management groups. You can configure an agent to report up to four different management groups. Each management group can have its own set of processing rules and configuration information for the multihomed agents. The multihomed agents process each set of processing rules independently, so there is no conflict of rules.

You can deploy this architecture across multiple domains.

The topology of multiple management groups with multihomed agents includes:

Multiple management groups based on the single management group architecture.

Agents belonging to as many as four management groups.

Multihomed agents and agents belonging to just one management group.

The deployment scenario in this chapter illustrates how to deploy Microsoft Operations Manager 2005 by using two management groups with multihomed agents.

Figure 8.1   Topology of multiple management groups with multihomed agents

In Figure 8.1:

For simplicity, each management group is illustrated with a single Management Server. These Management Servers are labeled MS01 for management group 1 (MgmtGrp01) and MS02 for management group 2 (MgmtGrp02).

The MOM database for each management group is on a separate computer.

Multihomed agents on computers S1 and S2 belong to and report to both management groups.

To install multihomed agents, you must have at least two, and no more than four, management groups installed. To install the management groups, use the information provided in Chapter 3, "Deploying MOM 2005 across Multiple Computers."

Installing Agents for the First Management Group

You can install agents remotely by using the Install / Uninstall Agents Wizard in the MOM Administrator console. In each management group that you want the agent to belong to, run the wizard and designate the Management Server that you want to serve as the primary host for the agent.

You can also install agents manually by running the MOM Agent Setup Wizard on the managed computer.

For more information about installing MOM agents, see Chapter 4 "Discovering Computers and Deploying Agents."

Verifying agent installation and status

MOM will display a task progress dialog, showing you the individual stages of the agent installation and the progress on that step. You can copy and paste the details of this finished progress to any text file.

If the agents are installed manually the computers appear in the Pending Actions view and must be approved before they will begin processing data.

To verify agent installation and status

In the MOM Administrator console, expand Administration, expand Computers, and then click All Computers.

Verify that the computers where you installed the agents appear in the details pane and that the Management Mode field is Agent (agent-managed).

Verify that the agent is reporting to the Management Server by noting the date and time in the Last Contacted column.

Adding Additional Management Groups to Create Multihomed Agents

Repeat the agent installation process for each management group that you want the agent to belong to.

If you rerun the Manual Agent Setup Wizard to add additional management groups on a managed computer, the wizard presents a different set of pages. To add the computer to another management group, select the Modify option on the Program Maintenance page. For more information about manually installing agents, see Chapter 4, "Discovering Computers and Deploying Agents."