Josh's IT-Blog

Azure Automation Hybrid Worker behind a Firewall / Proxy

Burkard Josh 24. March 2016 0

One nice feature of Azure Automation is the Hybrid Worker. With the Hybrid Worker you can execute Runbooks inside your onPremise infrastructure. according to the official documentation or at John Hennen’s post, you have to open your FireWall for outbound traffic to *.cloudapp.net for this ports 443,9354,30000-30199.

When i told this requirement to our security-team, they weren’t very enthusiastic about the wildcard rule for *.cloudapp.net. So i have to search another solution.

To configure the Microsoft Monitoring Agent to use your proxy services, go to the Control Panel → System and Security → Microsoft Monitoring Agent and then go to the Proxy Settings tab:

daily Backup Report for SC DPM

Burkard Josh 2. November 2015 0

i like System Center Dataprotection Manager, especially for the backup possibilites of remote Windows servers and the Online backup to Azure. But in my past, i lost the overview about succeded and failed backup jobs. The included reporting doesn’t helped me enough, and the alert notification was like spam. I needed a daily reportÂ with one view of all Jobs, Disks, Agents and other states. To reach this goal, i wrote my own PowerShell script, which i want toÂ share here.

the report, sent by mail will look like this:

Find SCSI ID’s and Drive Letters for VMware VMs

Burkard Josh 21. May 2014 0

Some times I have the problem, I need to resize or delete a VMware Virtual Disk, but I only know the Guest’s Drive Letter. In VM’s where I have only one virtual Disk, or where each virtual Disk has a different size,Â this isn’t a problem. butÂ if youÂ have a VM with multiple virtual disk with exactly the same size, you can’t compare it between the Guest Disk Manager and the virtual Disk sizes.

I searched long time to solve this problem, but I couldn’t find an easy solution. so I wrote this PowerShell script:

<#
.Synopsis
   get SCSI-Luns of vmWare-VM's and theire appriative Drive-Letters
.DESCRIPTION
   get SCSI-Luns of vmWare-VM's and theire appriative Drive-Letters
.EXAMPLE
   get-SCSI-Mappings -VM ServerName -rename $false
.INPUTS
   VM
.NOTES
    Author:  Josh Burkard
    Created: 2014-05-07

    Requirements:
    - WMI
    - PowerCLI 5.5 R2 (maybee less, but not tested)
#>

    Param
    (
        [Parameter(Mandatory=$true, 
                   ValueFromPipeline=$true,
                   ValueFromPipelineByPropertyName=$true, 
                   ValueFromRemainingArguments=$false, 
                   Position=0,
                   ParameterSetName='Parameter Set 1')]
        $VM,
        [Parameter(Mandatory=$true, 
                   ValueFromPipeline=$true,
                   ValueFromPipelineByPropertyName=$true, 
                   ValueFromRemainingArguments=$false, 
                   Position=0,
                   ParameterSetName='Parameter Set 1')]
        $rename
    )

    Begin
    {
        Add-PSSnapin VMware.VimAutomation.Core
        Add-PSSnapin VMware.VimAutomation.License
        Add-PSSnapin VMware.DeployAutomation

        $vcServerName = 'vcenter.domain.local'
        $cred = Get-Credential -Message $vcServerName -UserName 'domain\administrator'
        Connect-VIServer -Server $vcServerName -Credential $cred


        $Win32_LogicalDiskToPartition = Get-WmiObject -Class Win32_LogicalDiskToPartition -ComputerName $VM -Credential $cred 
        $Win32_DiskDriveToDiskPartition = Get-WmiObject -Class Win32_DiskDriveToDiskPartition -ComputerName $VM -Credential $cred 
        $Win32_DiskDrive = Get-WmiObject -Class Win32_DiskDrive -ComputerName $VM -Credential $cred 
        $Win32_LogicalDisk = Get-WmiObject -Class Win32_LogicalDisk -ComputerName $VM -Credential $cred 

        $DiskInfo = @()
        if ( ( $VmView = Get-View -ViewType VirtualMachine | where {$_.Name-eq $VM } ) ) 
        {
            $VirtualSCSIControllers = $VMView.Config.Hardware.Device | where {$_.DeviceInfo.Label -match "SCSI-Controller"}

            foreach ($VirtualSCSIController in $VirtualSCSIControllers ) 
            {
                $VirtualDiskDevices = $VMView.Config.Hardware.Device | where {$_.ControllerKey -eq $VirtualSCSIController.Key}
                foreach ( $VirtualDiskDevice in $VirtualDiskDevices ) 
                {
                    $VirtualDisk = "" | Select SCSIController, DiskName, SCSI_Id, DiskFile,  DiskSize, WindowsDisk, DriveLetters, DriveNameOrg, DriveNameNew
                    $VirtualDisk.SCSIController = $VirtualSCSIController.DeviceInfo.Label
                    $VirtualDisk.DiskName = $VirtualDiskDevice.DeviceInfo.Label
                    $VirtualDisk.SCSI_Id = "$($VirtualSCSIController.BusNumber) : $($VirtualDiskDevice.UnitNumber)"
                    $VirtualDisk.DiskFile = $VirtualDiskDevice.Backing.FileName
                    $VirtualDisk.DiskSize = $VirtualDiskDevice.CapacityInKB * 1KB / 1GB
                    # Match disks based on SCSI ID
                    $DiskMatch = $Win32_DiskDrive | ?{($_.SCSIPort â€“ 2) -eq $VirtualSCSIController.BusNumber -and $_.SCSITargetID -eq $VirtualDiskDevice.UnitNumber}
                    if ($DiskMatch) 
                    {
                        $VirtualDisk.WindowsDisk = "Disk $($DiskMatch.Index)"

                        $DiskPartitions = $Win32_DiskDriveToDiskPartition | where { $_.Antecedent -eq $DiskMatch.Path }
                        foreach ($DiskPartition in @($DiskPartitions) )
                        {
                            $LogicalPartitions = $Win32_LogicalDiskToPartition | where {  $_.Antecedent -eq $DiskPartition.Dependent }
                            foreach ($LogicalPartition in @($LogicalPartitions) )
                            {
                                if ( ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).VolumeName -match ':' -and ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).VolumeName -match '_')
                                {
                                    # SCSI-ID already in Name
                                    $VirtualDisk.DriveLetters += ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).DeviceID
                                    $VirtualDisk.DriveNameOrg += ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).VolumeName
                                    $VirtualDisk.DriveNameNew += ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).VolumeName
                                } elseif ( @($DiskInfo | where { $_.DriveLetters -eq ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).DeviceID } ).count -ne 0 )
                                {
                                    # Drive-Letter already exist in List
                                    $VirtualDisk.DriveLetters += ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).DeviceID
                                    $VirtualDisk.DriveNameOrg += ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).VolumeName
                                    $VirtualDisk.DriveNameNew += "$($VirtualSCSIController.BusNumber):$($VirtualDiskDevice.UnitNumber)_" + (@($DiskInfo | where { $_.DriveLetters -eq ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).DeviceID } ) | Select -Last 1).DriveNameNew
                                } else {
                                    # drive-Letter does not exist
                                    $VirtualDisk.DriveLetters += ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).DeviceID
                                    $VirtualDisk.DriveNameOrg += ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).VolumeName
                                    $VirtualDisk.DriveNameNew += "$($VirtualSCSIController.BusNumber):$($VirtualDiskDevice.UnitNumber)_" + ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).VolumeName
                                }
                            }
                        }
                    }
                    $DiskInfo += $VirtualDisk
                }
            }
        }
        $DiskInfo | Out-GridView

        if ($rename)
        {
            foreach ($VirtualDisk in $DiskInfo)
            {
                $drive = Get-WmiObject Win32_Volume -ComputerName $VM -Credential $cred -Filter "DriveLetter = '$($VirtualDisk.DriveLetters)'"
                $drive.Label = $VirtualDisk.DriveNameNew
                $drive.put() | Out-Null
            }
        }

        Disconnect-VIServer * -Confirm:$false
    }

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

.Synopsis

get SCSI-Luns of vmWare-VM's and theire appriative Drive-Letters

.DESCRIPTION

get SCSI-Luns of vmWare-VM's and theire appriative Drive-Letters

.EXAMPLE

get-SCSI-Mappings -VM ServerName -rename $false

.INPUTS

.NOTES

Author: Josh Burkard

Created: 2014-05-07

Requirements:

- WMI

- PowerCLI 5.5 R2 (maybee less, but not tested)

Param

(

[Parameter(Mandatory=$true,

ValueFromPipeline=$true,

ValueFromPipelineByPropertyName=$true,

ValueFromRemainingArguments=$false,

Position=0,

ParameterSetName='Parameter Set 1')]

$VM,

[Parameter(Mandatory=$true,

ValueFromPipeline=$true,

ValueFromPipelineByPropertyName=$true,

ValueFromRemainingArguments=$false,

Position=0,

ParameterSetName='Parameter Set 1')]

$rename

)

Begin

{

Add-PSSnapin VMware.VimAutomation.Core

Add-PSSnapin VMware.VimAutomation.License

Add-PSSnapin VMware.DeployAutomation

$vcServerName = 'vcenter.domain.local'

$cred = Get-Credential -Message $vcServerName -UserName 'domain\administrator'

Connect-VIServer -Server $vcServerName -Credential $cred

$Win32_LogicalDiskToPartition = Get-WmiObject -Class Win32_LogicalDiskToPartition -ComputerName $VM -Credential $cred

$Win32_DiskDriveToDiskPartition = Get-WmiObject -Class Win32_DiskDriveToDiskPartition -ComputerName $VM -Credential $cred

$Win32_DiskDrive = Get-WmiObject -Class Win32_DiskDrive -ComputerName $VM -Credential $cred

$Win32_LogicalDisk = Get-WmiObject -Class Win32_LogicalDisk -ComputerName $VM -Credential $cred

$DiskInfo = @()

if ( ( $VmView = Get-View -ViewType VirtualMachine | where {$_.Name-eq $VM } ) )

{

$VirtualSCSIControllers = $VMView.Config.Hardware.Device | where {$_.DeviceInfo.Label -match "SCSI-Controller"}

foreach ($VirtualSCSIController in $VirtualSCSIControllers )

{

$VirtualDiskDevices = $VMView.Config.Hardware.Device | where {$_.ControllerKey -eq $VirtualSCSIController.Key}

foreach ( $VirtualDiskDevice in $VirtualDiskDevices )

{

$VirtualDisk = "" | Select SCSIController, DiskName, SCSI_Id, DiskFile, DiskSize, WindowsDisk, DriveLetters, DriveNameOrg, DriveNameNew

$VirtualDisk.SCSIController = $VirtualSCSIController.DeviceInfo.Label

$VirtualDisk.DiskName = $VirtualDiskDevice.DeviceInfo.Label

$VirtualDisk.SCSI_Id = "$($VirtualSCSIController.BusNumber) : $($VirtualDiskDevice.UnitNumber)"

$VirtualDisk.DiskFile = $VirtualDiskDevice.Backing.FileName

$VirtualDisk.DiskSize = $VirtualDiskDevice.CapacityInKB * 1KB / 1GB

# Match disks based on SCSI ID

$DiskMatch = $Win32_DiskDrive | ?{($_.SCSIPort â€“ 2) -eq $VirtualSCSIController.BusNumber -and $_.SCSITargetID -eq $VirtualDiskDevice.UnitNumber}

if ($DiskMatch)

{

$VirtualDisk.WindowsDisk = "Disk $($DiskMatch.Index)"

$DiskPartitions = $Win32_DiskDriveToDiskPartition | where { $_.Antecedent -eq $DiskMatch.Path }

foreach ($DiskPartition in @($DiskPartitions) )

{

$LogicalPartitions = $Win32_LogicalDiskToPartition | where { $_.Antecedent -eq $DiskPartition.Dependent }

foreach ($LogicalPartition in @($LogicalPartitions) )

{

if ( ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).VolumeName -match ':' -and ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).VolumeName -match '_')

{

# SCSI-ID already in Name

$VirtualDisk.DriveLetters += ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).DeviceID

$VirtualDisk.DriveNameOrg += ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).VolumeName

$VirtualDisk.DriveNameNew += ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).VolumeName

} elseif ( @($DiskInfo | where { $_.DriveLetters -eq ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).DeviceID } ).count -ne 0 )

{

# Drive-Letter already exist in List

$VirtualDisk.DriveLetters += ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).DeviceID

$VirtualDisk.DriveNameOrg += ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).VolumeName

$VirtualDisk.DriveNameNew += "$($VirtualSCSIController.BusNumber):$($VirtualDiskDevice.UnitNumber)_" + (@($DiskInfo | where { $_.DriveLetters -eq ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).DeviceID } ) | Select -Last 1).DriveNameNew

} else {

# drive-Letter does not exist

$VirtualDisk.DriveLetters += ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).DeviceID

$VirtualDisk.DriveNameOrg += ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).VolumeName

$VirtualDisk.DriveNameNew += "$($VirtualSCSIController.BusNumber):$($VirtualDiskDevice.UnitNumber)_" + ($Win32_LogicalDisk | where { $_.__PATH -eq $LogicalPartition.Dependent }).VolumeName

}

$DiskInfo += $VirtualDisk

}

$DiskInfo | Out-GridView

if ($rename)

{

foreach ($VirtualDisk in $DiskInfo)

{

$drive = Get-WmiObject Win32_Volume -ComputerName $VM -Credential $cred -Filter "DriveLetter = '$($VirtualDisk.DriveLetters)'"

$drive.Label = $VirtualDisk.DriveNameNew

$drive.put() | Out-Null

}

Disconnect-VIServer * -Confirm:$false

}

you have to define theÂ variable vcServerName in line 43 and then run it by execute

.\get-SCSI-Mappings.ps1 -VM "VMName" -rename $false

1	.\get-SCSI-Mappings.ps1 -VM "VMName" -rename $false

when you run the script, it will ask you for credentials and then shows you the SCSI-ID’s of your virtual disk and the Windows drive informations:

document your SCOM 2012 environment

Burkard Josh 11. April 2014

This is quite huge for me, because I’ve been working on this script for the last two months and finally decided, to release the script to public, although I know that it’s still far from complete.

Document your Operations Manager 2012 environment

You should know your environment and what happens in it and you should be able to show people what exactly has been configured in your environment. This is quite important for consultants, but also for admins. Consultants need to create a documentation after implementing Operations Manager 2012 at a costumer’s site and admins should be able to know how their environment looks like at any given time.

demoted Domain Controller still present in SCOM

Burkard Josh 24. February 2014 0

If you demote a Domain Controller, SCOM will generate a lot of alerts. By design, there is no automatically undiscovery for the Rules and Monitores for the Active Directory Roles.

Solution 1

This solution will remove all disabled Class instances from an existing object. it will not change any other properties of the object.

Open the Operations Management Shell
type in this command:

Remove-SCOMDisabledClassInstance -ComputerName <Demoted Server>

1	Remove-SCOMDisabledClassInstance -ComputerName <Demoted Server>

Stop the System Center Management service
Delete the folder C:\Program Files\System Center Operations Manager\Agent\Health Service State
Start the System Center Management service

Solution 2

This solution will clear only the agent cache. Sometime this will be sufficient, if the server discovery / undiscovery was already done well:

Stop the System Center Management service
Delete the folder C:\Program Files\System Center Operations Manager\Agent\Health Service State
Start the System Center Management service

Solution 3

This solution will remove the entire object and then recreate the object with it’s discovery. The new object wouldn’t be discovered as Domain Controller. The new object will have an new guid and any overwrites to the old object will be lost.

extend the Active Directory Users class for SCSM

Burkard Josh 17. February 2014 0

Today I needed some additional fields for the Active Directory User class for an SCSM Service Offering. For example, I need the PrimarySmtpAddress, which exists in the AD as mail, but not in the SCSM class. in this post, I will describe, how I did it:

We will need:

System Center Service Manager 2012 SP1
System Center Orchestrator 2012 SP 1
Service Manager Authoring Tool
Strong name key file

Open the Service Manager Authoring Tool and click to the menu File New, to create a new Management Pack. Define a unique name for your management packs file name, in this Example: Josh.Test.Library.xml (Library mean’s that we will extend a library class)

delete orphaned computers from SCOM

Burkard Josh 21. January 2014 0

after renaming a Active Directory computer, the computer was automatically detected in SCOM with the correct new name. but after short time, I detected, that the originally agent was already there, but not reachable. so I deleted the old computer under Device Management – Agent Managed.

normally after maximum 3 days, the agent isn’t visible in the computer view. the delay of 3 days is by design. so don’t delete the computer manually to early.

If you still see the Computer showing up – even after 3 days – then in most cases, there is still a discovery associated with it. To find the discovery, use this query:

SELECT BME.FullName, DS.DiscoveryRuleID, D.DiscoveryName FROM typedmanagedentity TME 
JOIN BaseManagedEntity BME ON TME.BaseManagedEntityId = BME.BaseManagedEntityId 
JOIN DiscoverySourceToTypedManagedEntity DSTME ON TME.TypedManagedEntityID = DSTME.TypedManagedEntityID 
JOIN DiscoverySource DS ON DS.DiscoverySourceID = DSTME.DiscoverySourceID 
JOIN Discovery D ON DS.DiscoveryRuleID=D.DiscoveryID 
WHERE BME.Fullname LIKE '%ComputerName%'

SELECT BME.FullName, DS.DiscoveryRuleID, D.DiscoveryName FROM typedmanagedentity TME

JOIN BaseManagedEntity BME ON TME.BaseManagedEntityId = BME.BaseManagedEntityId

JOIN DiscoverySourceToTypedManagedEntity DSTME ON TME.TypedManagedEntityID = DSTME.TypedManagedEntityID

JOIN DiscoverySource DS ON DS.DiscoverySourceID = DSTME.DiscoverySourceID

JOIN Discovery D ON DS.DiscoveryRuleID=D.DiscoveryID

WHERE BME.Fullname LIKE '%ComputerName%'

in my case, I didn’t found any discovery for this computer and it was still available in the Windows Computer view one week after deletion of the agent.

Create SCOM Dashboard for SharePoint in Visio

Burkard Josh 15. January 2014 0

This week I created a DashBoard for SCOM in Visio to present it on a SharePoint site. Normally you could use the Visio 2010 Addin for SystemCenter – Operations Manager. But this addin has some special prerequisites for the presentation on the SharePoint site, like installing SCOM components and special configurations on the SharePoint Farm. Also it has the limitation, that it can only present monitor states, and can’t present rule values (for example: disk usage).

So I created my own solution, which I will describe here. An overview to the steps:

website rebranding

Burkard Josh 14. January 2014 0

Hello

my website was over years reachable under josh-burkard.ch, which was a long url. I was on search for a new and shorter domain name for this website. now I have found one, which is shorter and which describes what i’m doing and writing about: Information Technology (IT). So, my new web address is burkard.IT

of course, the old address will be available, but I would like the new shorter one.

SCOM 2012 agent communication issue

Burkard Josh 6. January 2014 0

This days, I had a very special problem with some new SCOM agents. I installed some new servers and installed the SCOM 2012 agent on it. But after some time, they appeared in the Agent Managed view, still as not monitored.

first I looked up the event logs on the new servers and found this errors:

According to this errors, I found a lot of blogs about network and certificate issues, like this one: http://geertbaeten.wordpress.com/2013/07/08/scom-agent-or-gateway-certificate-issue/

but I don’t have a Certificate authority and I also assumed not have a network problem.

Share this:

Share this:

Share this:

Document your Operations Manager 2012 environment

Share this:

Solution 1

Solution 2

Solution 3

Share this:

Share this:

Share this:

Share this:

Share this:

Share this: