Microsoft KB Archive/883347

= The MOM agent or the MOM server does not start, and event 9029 is logged in Microsoft Operations Manager 2005 =

Article ID: 883347

Article Last Modified on 12/4/2006

-

APPLIES TO


 * Microsoft Operations Manager (MOM) 2005

-





SYMPTOMS
In Microsoft Operations Manager (MOM) 2005, the MOM agent or the MOM server does not start, and the following event is logged in the Application event log: Event Type: Error

Event Source: Microsoft Operations Manager

Event Category: MOM Server

Event ID: 9029

Description: The Microsoft Operations Manager service (MOMService.exe) was unable to run under the supplied credentials. Please use the SetActionAccount utility to set an action account which meets the guidelines documented in the Microsoft Operations Manager documentation.



CAUSE
This problem may occur if any one or more of the following conditions are true:
 * A domain controller is not available to perform the logon.
 * The action account is disabled or deleted.
 * The action account's password has expired.
 * The action account that the MOM service uses does not have permissions to log on locally. By default, only administrator accounts automatically receive Allow Logon Locally permissions on domain controllers. The account that is used by the MOM service must be able to log on locally to the computer.



RESOLUTION
To resolve this problem, make sure that a domain controller is available on the network, that the action account is active, and that the action account's password has not expired, and that the action account that MOM uses has Allow Logon Locally permissions. To make sure that the action account has Allow Logon Locally permissions, follow these steps:
 * 1) Click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
 * 2) Right-click the domain object, and then click Properties.
 * 3) On the Group Policy tab, click the domain policy, and then click Edit.
 * 4) Expand Computer Configuration\Windows Settings\Security Settings\Local Policies, and then click User Rights Assignment.
 * 5) Double-click Allow log on locally, and then click Add User or Group.
 * 6) Type the user account, click OK, and then click OK.
 * 7) Quit Group Policy Object Editor.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.



MORE INFORMATION
You can use the SetActionAccount.exe tool to examine the action account. This tool is located in the Program Files\Microsoft Operations Manager 2005 folder. To do this, follow these steps:  Click Start, click Run, type cmd, and then click OK. At the command prompt, locate the Program Files\Microsoft Operations Manager 2005 folder. Type the following:

SetActionAccount.exe  -query

Note You must specify your management group name. You can use the -set command instead of the -query command to change the MOM action account, reset or change the action account password.

Additional query words: rights privileges

Keywords: kbtshoot kbservice kberrmsg kbevent kbuser kbsecurity KB883347

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.