BPA not pulling the user count
-
8 octombrie 2008 15:18
We cannot get the user count when the BPA is run. The user account that the user is used to run the BPA has Enterprise Admin and Domain Admin rights, is a member of the RTCUniversalServerAdmins, and a member of RTCUniversalReadOnlyAdmins (as required by the BPA). We are connecting to AD using the FQDN of the DC (GC) in the child domain OCS is deployed. It pulls the OCS server info (i.e. Pool Count, OCS Server Role count, etc.) but the user count is blank. The only errors I am seeing is the beginning of the xml report is: "Error querying DNS Server 192.x.x.x for resolving _ntp._udp.corp.domain.com. Error code is DNS name does not exist".
Any suggestions as to what the issue may be or would anyone know where it is looking for the user count so we can possibly look there for permissions issues.
Here is a copy of the xml report portion that should have the user count...
<Object Type="Group" Name="User" ProcessTime="0">
<Instance Type="Group" Name="Rules" /><Rule Name="AD_EnvironmentAssesment_iStatSummaryNumberOfRTCEnabledUsers" Query="//Instance[@Key10='1']/Setting/Value" Error="None" Text="Found {9} enabled user(s)." P9="//Instance[@Key10='1']/Setting/Value" Pass="False" /><Rule Name="AD_EnvironmentAssesment_iStatSummaryNumberOfEnabledForFederationUsers" Query="//Instance[@Key10='2']/Setting/Value" Error="None" Text="Found {9} user(s) enabled for federation." P9="//Instance[@Key10='2']/Setting/Value" Pass="False" /><Rule Name="AD_EnvironmentAssesment_iStatSummaryNumberOfEnabledForInternetAccessUsers" Query="//Instance[@Key10='3']/Setting/Value" Error="None" Text="Found {9} user(s) enabled for remote access." P9="//Instance[@Key10='3']/Setting/Value" Pass="False" /><Rule Name="AD_EnvironmentAssesment_iStatSummaryNumberOfEnabledForEnhancedPresenceUsers" Query="//Instance[@Key10='4']/Setting/Value" Error="None" Text="Found {9} user(s) enabled for enhanced presence." P9="//Instance[@Key10='4']/Setting/Value" Pass="False" /><Rule Name="AD_EnvironmentAssesment_iStatSummaryNumberOfPublicNetworkEnabledUsers" Query="//Instance[@Key10='5']/Setting/Value" Error="None" Text="Found {9} user(s) enabled for public IM connectivity." P9="//Instance[@Key10='5']/Setting/Value" Pass="False" /><Rule Name="AD_EnvironmentAssesment_iStatSummaryNumberOfRemoteCallControlTelephonyEnabledUsers" Query="//Instance[@Key10='6']/Setting/Value" Error="None" Text="Found {9} user(s) enabled for remote call control." P9="//Instance[@Key10='6']/Setting/Value" Pass="False" /><Rule Name="AD_EnvironmentAssesment_iStatSummaryNumberOfUCEnabledUsers" Query="//Instance[@Key10='7']/Setting/Value" Error="None" Text="Found {9} user(s) enabled for UC." P9="//Instance[@Key10='7']/Setting/Value" Pass="False" />- <Rule Name="AD_EnvironmentAssesment_iStatSummaryNumberOfOCS2007HomedUsers" Query="sum(//Instance[@Key10='8']/Setting/Value)" Error="None" Text="Found {9} user(s) homed on Office Communications Server 2007 Enterprise Edition pool(s) and/or Office Communications Server 2007 Standard Edition server(s)." P9="sum(//Instance[@Key10='8']/Setting/Value)" Pass="False"><Result>0</Result></Rule>- <Rule Name="AD_EnvironmentAssesment_iStatSummaryNumberOfNonOCS2007HomedUsers" Query="sum(//Instance[@Key10='9']/Setting/Value)" Error="None" Text="Found {9} user(s) homed on pool(s)/server(s) other than Office Communications Server 2007 Enterprise Edition pool(s) and/or Office Communications Server 2007 Standard Edition server(s)." P9="sum(//Instance[@Key10='9']/Setting/Value)" Pass="False"><Result>0</Result>
Toate mesajele
-
8 octombrie 2008 23:31
That is strange as I can see how many users there are enabled for different services
It says Found {9} users ...
Or are you saying that you have far more users enabled and that this is not the correct number?
-
9 octombrie 2008 16:10That {9} is actually a place holder for the actual number of users. Here is an example of a BPA report that successfully pulled the user count...
ext="Found {9} enabled user(s)." P9="//Instance[@Key10='1']/Setting/Value" Pass="True">Name="AD_EnvironmentAssesment_iStatSummaryNumberOfRTCEnabledUsers" Query="//Instance[@Key10='1']/Setting/Value" Error="None"
<Rule></Result></Rule><Message Name="AD_EnvironmentAssesment_iStatSummaryNumberOfRTCEnabledUsers" Query="//Instance[@Key10='1']/Setting/Value" Error="None"
Text="Found {9} enabled user(s)." P9="57" Pass="True">Found 57 enabled user(s).</Message>
- <Rule Name="AD_EnvironmentAssesment_iStatSummaryNumberOfEnabledForFederationUsers" Query="//Instance[@Key10='2']/Setting/Value" Error="None"
Text="Found {9} user(s) enabled for
federation." P9="//Instance[@Key10='2']/Setting/Value" Pass="True"><Result><Message<Value>39</Value>
Name="AD_EnvironmentAssesment_iStatSummaryNumberOfEnabledForFederationUsers" Query="//Instance[@Key10='2']/Setting/Value" Error="None"
Text="Found {9} user(s) enabled for
federation." P9="39" Pass="True">Found 39 user(s) enabled for federation.</Message>
Notice the section <Value> where the number of users were found. -
9 octombrie 2008 22:48
So you did succeed in running BPA in the past...
Have you tried running this from another server?
The problem for the _ntp record has nothing to do with the users as it is required for the TANJAY phones to automatically find the time servers on the network.
-
10 octombrie 2008 16:39BPA has always run in the past and present but it has never been able to pull the user count.
-
13 octombrie 2008 16:01Did you try to run it on another server?
-
13 octombrie 2008 17:40
Yes and same issue.
I reiterate the original question:
Any suggestions as to what the issue may be or would anyone know where it is looking for the user count so we can possibly look there for permissions issues.
-
13 octombrie 2008 22:44
Looked into the documentation.
You must have DomainAdmin/Admin on OCS Server/RTCUniversalReadOnlyAdmin and Exchange View Only Admin
If that does not work then try to run this on a server that is member of your child domain
----
Required Group Memberships and User Rights
To successfully run the Office Communications Server 2007 Best Practices Analyzer, the user account that you use to log on must be a member of the following groups:
- DomainAdmins in order to enumerate Active Directory information and to call the Windows Management Instrumentation (WMI) providers on domain controllers and global catalog servers.
- Administrators on each Office Communications Server and each edge server in order to call the WMI providers and to access the registry.
- RTCUniversalReadOnlyAdmins
In addition, your user account must be a full or delegated Exchange View Only Administrator on the Exchange organization.
-
13 octombrie 2008 22:46
And also make sure you have the following requirements
Other Prerequisites for Microsoft Office Communications Server 2007 Best Practices Analyzer Tool
In addition to running the Microsoft Office Communications Server 2007 Best Practices Analyzer Tool with an account that has the required permissions on the Active Directory® Domain Services, an account that has the required permissions on the Office Communications Servers, and an account that has the required permissions on the Exchange Server 2007 Unified Messaging servers, your system must meet the following requirements.
The computer on which you install the Office Communications Server 2007 Best Practices Analyzer must have the following software:
- .NET Framework 2.0
- Office Communications Server 2007 Administrative Tools
Other computers in your deployment must meet the following requirements:
- In an Office Communications Server 2007 Enterprise Edition pool, the Office Communications Server 2007 Administrative Tools must be installed on the Back-End Server for the pool.
Note The Office Communications Server 2007 Administrative Tools are required to collect data about the Office Communications Server 2007 Enterprise Edition pool.
- In a Microsoft Office Live Communications Server 2005 with SP1 Enterprise Edition pool, the Live Communications Server 2005 with SP1 Administrative Tools must be installed on the Back-End Server for the pool.
Note The Live Communications Server 2005 SP1 Administrative Tools are required to collect data about the Live Communications Server 2005 SP1 Enterprise Edition pool.
- If the Best Practices Analyzer is installed on a member server of a domain, Active Directory must be installed on a computer in the same forest that is running either Windows® 2000 Server or Windows Server™ 2003. If the Best Practices Analyzer is installed on a workgroup server, access to Active Directory is not required.
- The Remote Registry (RemoteRegistry) service must be running on all Active Directory, Microsoft Exchange Server, and Office Communications Server 2007 servers.
- Windows Management Instrumentation (WMI) (winmgmt) service must be running on all Active Directory, Exchange Server, and Office Communications Server 2007 servers.
- The user who is logged on and running the Exchange Server Best Practices Analyzer must have read/write access to the folder where the tool is installed.
Office Communications Server 2007 Best Practices Analyzer can be run in the following environments:
- Live Communications Server 2005 SP1 on Windows Server 2003.
Note There is a difference between the implementations of the Live Communications Server 2005 SP1 and Office Communications Server 2007 WMI class, so limited data collection and analysis will be performed on a Live Communications Server deployment.
- Office Communications Server 2007 on Windows Server 2003 SP1.
-
14 octombrie 2008 13:16
Once again, all that has already been checked and permissions checked. This is not my first go around on installing OCS. This is the first environment that I have not had the BPA successfully pull the user count. When I was asking about permissioning, I actually meant like WMI, registry, etc. permissions. Not the obvious user groups you need to be a member of when you run it.
Does anyone know where the user count is pulled from or where the BPA looks for the user count?