Microsoft KB Archive/296026

= Alert from Windows 2000-Based Agent Computer Seems to Come from a Windows NT 4.0 Processing Rule Group =

Article ID: 296026

Article Last Modified on 10/27/2006

-

APPLIES TO


 * Microsoft Operations Manager 2000 Service Pack 1

-



This article was previously published under Q296026



SYMPTOMS
Some alerts from a Microsoft Windows 2000-based agent computer may appear to be generated by Microsoft Windows NT 4.0 processing rules.



CAUSE
This behavior can occur because the rule that triggers the alert is shared by a Windows NT 4.0 processing rule group (PRG) and a Windows 2000 PRG, but the rule lists only the Windows NT 4.0 PRG as its parent.



STATUS
Microsoft has confirmed this to be a problem in Microsoft Operations Manager 2000.



MORE INFORMATION
The following example illustrates this behavior:

The processing rule group Windows NT System - NetEvent.DLL is a child group to both of the following PRGs:
 * Microsoft Windows NT 4.0 Base Functions\Windows NT 4.0 - All Computers
 * Microsoft Windows 2000 Operating System\Windows 2000 - All Computers\Windows 2000 System - NetEvent.DLL\

However, Windows NT System - NetEvent.DLL records only Microsoft Windows NT 4.0 Base Functions\Windows NT 4.0 - All Computers as its parent.

When a rule under Windows NT System - NetEvent.DLL generates an alert on a Windows 2000-based computer and you click View Rule on the generated alert in Microsoft Management Console (MMC) to check the associated processing rule, you note that the processing rule path for the alert is Microsoft Windows NT 4.0 Base Functions\Windows NT 4.0 - All Computers\Windows NT System - NetEvent.DLL\Windows System NetEvent.DLL (shared)\.

This can be confusing because it is the branch under the Windows 2000 parent PRG that actually generates the alert.

Additional query words: invalid

Keywords: kbbug kbnetwork kbpending kbpolicy KB296026

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.