Zenoss for monitoring Microsoft Active Directory, Cluster Services, Exchange, IIS, SQL Server, Windows

• http://wiki.zenoss.org/ZenPack:Microsoft_Windows
• Better then WMI and RPC
• http://serverfault.com/questions/191308/which-ports-does-wmi-service-in-active-directory-use-exactly

Setup Zenoss

• http://wiki.zenoss.org/ZenPack:PythonCollector
• Only for kerberos: yum -y install krb5-workstation

Install WinRM

WinRM 2.0 for 2003, 2008, Vista, XP

• http://support.microsoft.com/kb/968929

WinRM 3.0 for 2008, 7

• http://www.microsoft.com/en-us/download/details.aspx?id=34595

Info

• http://technet.microsoft.com/en-us/scriptcenter/dd742419.aspx

Setup Windows

Show certificate

• run mmc

Conf

• Open ports 5985 (http) / 5986 (https) for WinRM
• Run command prompt as Administrator
• winrm get winrm/config
• winrm quickconfig
• winrm s winrm/config/service @{MaxConcurrentOperationsPerUser="4294967295"}
• winrm s winrm/config/winrs @{MaxShellsPerUser="2147483647"}
• winrm s winrm/config/winrs @{IdleTimeout="7200000"}
• Basic Authentication (Windows default is Kerberos see note below for more information)
• winrm s winrm/config/service/auth @{Basic="true"}
• Set HTTPS
• winrm create winrm/config/Listener?Address=*+Transport=HTTPS @{Hostname="serverfqdn";CertificateThumbprint="1fd53031caf98df226428069ccfdf3152b6ddc2b"}

Check

• winrm enumerate winrm/config/listener
• netstat -na | findstr "5986"

Change port

• winrm set winrm/config/listener?Address=*+Transport=HTTPS @{Port="8888"}

HTTP

• HTTP (Windows default is HTTPS see note below for more information)
• winrm s winrm/config/service @{AllowUnencrypted="true"}

Windows Perfmon Missing Counters

cd windows\system32
lodctr /R

For English Counters

• del c:\windows\system32\perf*005.dat 005 for czech lang
• run perfmon

Counters Info

• http://support.microsoft.com/kb/300956
• http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1005653

cd %Systemroot%\System32
findstr drivername *.ini

HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Perflib\009

Debug

zenmodeler run -v10 -d <device> --collect Interfaces
zenpython run -v10 -d <device>

Resources

• http://blogs.technet.com/b/meamcs/archive/2012/02/25/how-to-force-winrm-to-listen-interfaces-over-https.aspx
• http://pubs.vmware.com/orchestrator-plugins/index.jsp#com.vmware.using.powershell.plugin.doc_10/GUID-2F7DA33F-E427-4B22-8946-03793C05A097.html
• http://blogs.technet.com/b/jonjor/archive/2009/01/09/winrm-windows-remote-management-troubleshooting.aspx