For anyone interested, this alert was due to the IIS 6 compatibility components 
being removed from the server by another admin. Without the IIS6 features, the 
namespace (root/MicrosoftIISv2) and classes (ApplicationPoolSetting) do not 
exist. Those WMI entries are present when the IIS6 features are installed. 
Mystery solved.

Thanks,
Geoff

From: Orlebeck, Geoffrey
Sent: Friday, April 17, 2015 11:44 AM
To: '[email protected]'
Subject: ADFS False Positive?

Having an issue where SCOM is reporting "AD FS application pool is Not Running 
On The Federation Server". However, the website and app pool are running in 
IIS, as well as AD FS is currently working with the vendors we leverage AD FS 
for single sign-on.

We have the latest AD FS MP from what I can tell (v7.0.8560.0). I tried 
resetting/recalculating the health state but it fails. I bounced the server and 
the issue persists, even though AD FS continues to function without issue. 
There are a total of three alerts being generated:

SERVER - Failed to write to the audit log
SERVER - The audit log event source could not be registered
(Web Site) - AD FS app pool is not running on FS server

There were some Windows Updates installed last night (I haven't obtained a list 
yet of what patches were deployed), and a restart, but otherwise no changes 
have been made to the system. I found one article that discusses ensuring some 
IIS 6 components be installed (Last post in this thread 
here.<https://social.technet.microsoft.com/Forums/en-US/8efa04d0-54f9-4c1b-9009-85237714a5a6/scom-alert-ad-fs-application-pool-adfsapppool-is-stopped-in-the-iis-manager?forum=operationsmanagermgmtpacks>).
 However, I don't want to start randomly making changes to the actual roles if 
it's not the appropriate area.

The audit log entries point to our ADFS service account, but the account is a 
local admin on the ADFS server and its credentials are valid. Just wondering if 
anyone has run into this before and what may have fixed it for you.

Thanks!
-Geoff
Confidentiality Notice: This is a transmission from Community Hospital of the 
Monterey Peninsula. This message and any attached documents may be confidential 
and contain information protected by state and federal medical privacy 
statutes. They are intended only for the use of the addressee. If you are not 
the intended recipient, any disclosure, copying, or distribution of this 
information is strictly prohibited. If you received this transmission in error, 
please accept our apologies and notify the sender. Thank you.



Reply via email to