SCOM Noisy alerts RRS feed

  • Question

  • Can anyone help me in getting the below alert resolved.

    1.Active Directory did not perform an authenticated remote procedure call (RPC) to another domain controller because the desired service principal name (SPN) for the destination domain controller is not registered on the Key Distribution Center (KDC) domain controller that resolves the SPN.
    Destination domain controller:



    2.The Knowledge Consistency Checker (KCC) has detected problems with the following directory partition.
    Directory partition:
    There is insufficient site connectivity information in Active Directory Sites and Services for the KCC to create a spanning tree replication topology. Or, one or more domain controllers with this directory partition are unable to replicate the directory partition information. This is probably due to inaccessible domain controllers.

    3.The dynamic registration of the DNS record '_ldap._tcp.INLUCAWP._sites.TCS.com. 600 IN SRV 0 100 389 ROOTDC07.TCS.com.' failed on the following DNS server:

    DNS server IP address:

    Returned Response Code (RCODE): 5

    Returned Status Code: 10048

    For computers and users to locate this domain controller, this record must be

    An account specified in the Run As profile "Microsoft.Windows.Server.AD.ActionAccountProfile" cannot be resolved.

    This condition may have occurred because the account is not configured to be distributed to this computer. To resolve this problem, you need to open the Run As profile specified below, locate the account entry as specified by its SSID, and either choose to distribute the account to this computer if appropriate, or change the setting in the profile so that the target object does not use the specified account.
    Note: you may use the command shell to get the Run As account display name by its SSID.

    Management Group: CORP-SCOM
    Run As Profile: Microsoft.Windows.Server.AD.ActionAccountProfile
    Account SSID: 00D3BD64FA1FC89B032F87E4EF240FDC5EC6B8CACF00000000000000000000000000000000000000

    5.The SAM database was unable to lockout the account of 87602 due to a resource error, such as a hard disk write failure (the specific error code is in the error data) . Accounts are locked after a certain number of bad passwords are provided so please consider resetting the password of the account mentioned above.

    6.A thread in Active Directory is waiting for the completion of a RPC made to the following domain controller.
    Domain controller:

    get changes

    Thread ID:

    Timeout period (minutes):

    Active Directory has attempted to cancel the call and recover this thread.

    Thursday, September 8, 2011 4:56 PM