locked
BPA not pulling the user count RRS feed

  • Question

  • We cannot get the user count when the BPA is run. The user account that the user is used to run the BPA has Enterprise Admin and Domain Admin rights, is a member of the RTCUniversalServerAdmins, and a member of RTCUniversalReadOnlyAdmins (as required by the BPA). We are connecting to AD using the FQDN of the DC (GC) in the child domain OCS is deployed. It pulls the OCS server info (i.e. Pool Count, OCS Server Role count, etc.) but the user count is blank. The only errors I am seeing is the beginning of the xml report is: "Error querying DNS Server 192.x.x.x for resolving _ntp._udp.corp.domain.com. Error code is DNS name does not exist".

     

    Any suggestions as to what the issue may be or would anyone know where it is looking for the user count so we can possibly look there for permissions issues.

     

    Here is a copy of the xml report portion that should have the user count...

    <Object Type="Group" Name="User" ProcessTime="0">

    - <Instance Type="Group" Name="User">
    - <Object Type="Group" Name="Rules" ProcessTime="0">
      <Instance Type="Group" Name="Rules" />
      <Rule Name="AD_EnvironmentAssesment_iStatSummaryNumberOfRTCEnabledUsers" Query="//Instance[@Key10='1']/Setting/Value" Error="None" Text="Found {9} enabled user(s)." P9="//Instance[@Key10='1']/Setting/Value" Pass="False" />
      <Rule Name="AD_EnvironmentAssesment_iStatSummaryNumberOfEnabledForFederationUsers" Query="//Instance[@Key10='2']/Setting/Value" Error="None" Text="Found {9} user(s) enabled for federation." P9="//Instance[@Key10='2']/Setting/Value" Pass="False" />
      <Rule Name="AD_EnvironmentAssesment_iStatSummaryNumberOfEnabledForInternetAccessUsers" Query="//Instance[@Key10='3']/Setting/Value" Error="None" Text="Found {9} user(s) enabled for remote access." P9="//Instance[@Key10='3']/Setting/Value" Pass="False" />
      <Rule Name="AD_EnvironmentAssesment_iStatSummaryNumberOfEnabledForEnhancedPresenceUsers" Query="//Instance[@Key10='4']/Setting/Value" Error="None" Text="Found {9} user(s) enabled for enhanced presence." P9="//Instance[@Key10='4']/Setting/Value" Pass="False" />
      <Rule Name="AD_EnvironmentAssesment_iStatSummaryNumberOfPublicNetworkEnabledUsers" Query="//Instance[@Key10='5']/Setting/Value" Error="None" Text="Found {9} user(s) enabled for public IM connectivity." P9="//Instance[@Key10='5']/Setting/Value" Pass="False" />
      <Rule Name="AD_EnvironmentAssesment_iStatSummaryNumberOfRemoteCallControlTelephonyEnabledUsers" Query="//Instance[@Key10='6']/Setting/Value" Error="None" Text="Found {9} user(s) enabled for remote call control." P9="//Instance[@Key10='6']/Setting/Value" Pass="False" />
      <Rule Name="AD_EnvironmentAssesment_iStatSummaryNumberOfUCEnabledUsers" Query="//Instance[@Key10='7']/Setting/Value" Error="None" Text="Found {9} user(s) enabled for UC." P9="//Instance[@Key10='7']/Setting/Value" Pass="False" />
    - <Rule Name="AD_EnvironmentAssesment_iStatSummaryNumberOfOCS2007HomedUsers" Query="sum(//Instance[@Key10='8']/Setting/Value)" Error="None" Text="Found {9} user(s) homed on Office Communications Server 2007 Enterprise Edition pool(s) and/or Office Communications Server 2007 Standard Edition server(s)." P9="sum(//Instance[@Key10='8']/Setting/Value)" Pass="False">
      <Result>0</Result>
      </Rule>
    - <Rule Name="AD_EnvironmentAssesment_iStatSummaryNumberOfNonOCS2007HomedUsers" Query="sum(//Instance[@Key10='9']/Setting/Value)" Error="None" Text="Found {9} user(s) homed on pool(s)/server(s) other than Office Communications Server 2007 Enterprise Edition pool(s) and/or Office Communications Server 2007 Standard Edition server(s)." P9="sum(//Instance[@Key10='9']/Setting/Value)" Pass="False">
      <Result>0</Result>
    Wednesday, October 8, 2008 3:18 PM

All replies

  • That is strange as I can see how many users there are enabled for different services

    It says Found {9} users ...

     

    Or are you saying that you have far more users enabled and that this is not the correct number?

     

    Wednesday, October 8, 2008 11:31 PM
  • That {9} is actually a place holder for the actual number of users. Here is an example of a BPA report that successfully pulled the user count...

    ext="Found {9} enabled user(s)." P9="//Instance[@Key10='1']/Setting/Value" Pass="True">Name="AD_EnvironmentAssesment_iStatSummaryNumberOfRTCEnabledUsers" Query="//Instance[@Key10='1']/Setting/Value" Error="None"
    <Rule>
    - <Result>
    <Value>57</Value>
      </Result>
      </Rule>
      <Message Name="AD_EnvironmentAssesment_iStatSummaryNumberOfRTCEnabledUsers" Query="//Instance[@Key10='1']/Setting/Value" Error="None"
    Text
    ="Found {9} enabled user(s)." P9="57" Pass="True">Found 57 enabled user(s).</Message>
    - <Rule Name="AD_EnvironmentAssesment_iStatSummaryNumberOfEnabledForFederationUsers" Query="//Instance[@Key10='2']/Setting/Value" Error="None"
    Text
    ="Found {9} user(s) enabled for
    federation.
    " P9="//Instance[@Key10='2']/Setting/Value" Pass="True">
    <Result>
      <Value>39</Value>
    <Message
    Name
    ="AD_EnvironmentAssesment_iStatSummaryNumberOfEnabledForFederationUsers" Query="//Instance[@Key10='2']/Setting/Value" Error="None"
    Text
    ="Found {9} user(s) enabled for
    federation.
    " P9="39" Pass="True">Found 39 user(s) enabled for federation.</Message>

    Notice the section <Value> where the number of users were found.
    Thursday, October 9, 2008 4:10 PM
  • So you did succeed in running BPA in the past...

    Have you tried running this from another server?

     

    The problem for the _ntp record has nothing to do with the users as it is required for the TANJAY phones to automatically find the time servers on the network.

     

    Thursday, October 9, 2008 10:48 PM
  • BPA has always run in the past and present but it has never been able to pull the user count.

     

    Friday, October 10, 2008 4:39 PM
  • Did you try to run it on another server?

     

    Monday, October 13, 2008 4:01 PM
  • Yes and same issue.

     

    I reiterate the original question:

    Any suggestions as to what the issue may be or would anyone know where it is looking for the user count so we can possibly look there for permissions issues.

    Monday, October 13, 2008 5:40 PM
  • Looked into the documentation.

    You must have DomainAdmin/Admin on OCS Server/RTCUniversalReadOnlyAdmin and Exchange View Only Admin

     

    If that does not work then try to run this on a server that is member of your child domain

     

    ----

    Required Group Memberships and User Rights

    To successfully run the Office Communications Server 2007 Best Practices Analyzer, the user account that you use to log on must be a member of the following groups:

    1. DomainAdmins in order to enumerate Active Directory information and to call the Windows Management Instrumentation (WMI) providers on domain controllers and global catalog servers.
    2. Administrators on each Office Communications Server and each edge server in order to call the WMI providers and to access the registry.
    3. RTCUniversalReadOnlyAdmins

    In addition, your user account must be a full or delegated Exchange View Only Administrator on the Exchange organization.

     

    Monday, October 13, 2008 10:44 PM
  • And also make sure you have the following requirements

     

    Other Prerequisites for Microsoft Office Communications Server 2007 Best Practices Analyzer Tool

    In addition to running the Microsoft Office Communications Server 2007 Best Practices Analyzer Tool with an account that has the required permissions on the Active Directory® Domain Services, an account that has the required permissions on the Office Communications Servers, and an account that has the required permissions on the Exchange Server 2007 Unified Messaging servers, your system must meet the following requirements.

     

    System requirements

    The computer on which you install the Office Communications Server 2007 Best Practices Analyzer must have the following software:

    • .NET Framework 2.0
    • Office Communications Server 2007 Administrative Tools

    Other computers in your deployment must meet the following requirements:

    • In an Office Communications Server 2007 Enterprise Edition pool, the Office Communications Server 2007 Administrative Tools must be installed on the Back-End Server for the pool.

       Note   The Office Communications Server 2007 Administrative Tools are required to collect data about the Office Communications Server 2007 Enterprise Edition pool.

    • In a Microsoft Office Live Communications Server 2005 with SP1 Enterprise Edition pool, the Live Communications Server 2005 with SP1 Administrative Tools must be installed on the Back-End Server for the pool.

       Note   The Live Communications Server 2005 SP1 Administrative Tools are required to collect data about the Live Communications Server 2005 SP1 Enterprise Edition pool.

    • If the Best Practices Analyzer is installed on a member server of a domain, Active Directory must be installed on a computer in the same forest that is running either Windows® 2000 Server or Windows Server™ 2003. If the Best Practices Analyzer is installed on a workgroup server, access to Active Directory is not required.
    • The Remote Registry (RemoteRegistry) service must be running on all Active Directory, Microsoft Exchange Server, and Office Communications Server 2007 servers.
    • Windows Management Instrumentation (WMI) (winmgmt) service must be running on all Active Directory, Exchange Server, and Office Communications Server 2007 servers.
    • The user who is logged on and running the Exchange Server Best Practices Analyzer must have read/write access to the folder where the tool is installed.

    Supported Environments

    Office Communications Server 2007 Best Practices Analyzer can be run in the following environments:
    • Live Communications Server 2005 SP1 on Windows Server 2003.

       Note   There is a difference between the implementations of the Live Communications Server 2005 SP1 and Office Communications Server 2007 WMI class, so limited data collection and analysis will be performed on a Live Communications Server deployment.

    • Office Communications Server 2007 on Windows Server 2003 SP1.

     

    Monday, October 13, 2008 10:46 PM
  • Once again, all that has already been checked and permissions checked. This is not my first go around on installing OCS. This is the first environment that I have not had the BPA successfully pull the user count. When I was asking about permissioning, I actually meant like WMI, registry, etc. permissions. Not the obvious user groups you need to be a member of when you run it.

     

    Does anyone know where the user count is pulled from or where the BPA looks for the user count?

     

     

     

     

     

    Tuesday, October 14, 2008 1:16 PM