Technical Reference for the Windows Desktop Base Operating System Management Pack

Computer Attributes in the Windows Desktop Base Operating System Management Pack

The Microsoft Windows Desktop Base Operating System Management Pack collects the following attribute for computers:

  • Windows Current Version

Computer Groups in the Windows Desktop Base Operating System Management Pack

The Microsoft Windows Desktops Base Operating System Management Pack includes the following computer groups:

  • Microsoft Windows XP Computers

  • Microsoft Windows Desktops

Notification Groups in the Windows Desktop Base Operating System Management Pack

The Desktop Base Operating System Management Pack does not include additional notification groups.

Scripts in the Windows Desktop Base Operating System Management Pack

The Microsoft Windows Desktop Base Operating System Management Pack includes the following scripts.

Microsoft Windows Desktop CPU Overload Script

This script generates an alert if CPU usage is above 95% or if the CPU queue length is above 15 per processor.

Table 8 Associated Rules

Location

Rule

Default Value

State Monitoring and Service Discovery\Performance Rules

Performance Threshold: Processor\% Processor Time threshold exceeded

Enabled

Table 9 Script Parameters

Script Parameter

Description

Default Value

CpuPercentageThreshold

Generates an alert if the percentage of CPU usage is above this value.

95

CpuQueueLenThreshold

Generates an alert if the processor queue length (per processor) is above this value.

15

Microsoft Windows Desktop OS IPCONFIG Release and Renew

This script performs the IPConfig Release and IPConfig Renew tasks on target computers. There are no associated rules or script parameters.

Microsoft Windows Desktop Service Discovery Script

This script discovers attributes of Windows computers. There are no script parameters for this script.

Table 10 Associated Rules

Location

Rule

Default Value

State Monitoring and Service Discovery\Event Rules

Base OS Desktop Service Discovery

Enabled

Microsoft Windows Desktop Storage Service Discovery Script

This script discovers attributes of the logical disk. There are no script parameters.

Table 11 Associated Rules

Location

Rule

Default Value

State Monitoring and Service Discovery\Event Rules

Run Storage Discovery

Enabled

Microsoft Windows Desktop Storage State Monitoring Script

This script monitors the status of key health components for logical disks. The information gathered by this script is used for red, yellow, and green state monitoring values.

Table 12 Associated Rules

Location

Rule

Default Value

State Monitoring and Service Discovery\Event Rules

Run Storage State Monitoring

Enabled

Alerts are generated based on the values that are set for the free-space thresholds. Values below the established thresholds trigger alerts. However, alerts for non-system and system drives are generated only when the values for both the free space megabytes and the free space percentage are below the configured thresholds.

Table 13 Script Parameters

Script Parameter

Description

Default Value

MegaByteFreeSpaceThreshold

The threshold value for all volumes.

100

NonSystemDriveFreeSpaceMegaByteYellowState

The threshold value for a warning alert.

500

NonSystemDriveFreeSpacePercentageYellowState

The threshold value for a warning alert.

10

NonSystemDriveFreeSpaceMegaByteRedState

The threshold value for an error-level alert.

250

NonSystemDriveFreeSpacePercentageRedState

The threshold value for an error-level alert.

5

SystemDriveFreeSpaceMegaByteRedState

The threshold value for an error-level alert.

250

SystemDriveFreeSpaceMegaByteYellowState

The threshold value for a warning alert.

500

SystemDriveFreeSpacePercentageRedState

The threshold value for an error-level alert.

5

SystemDriveFreeSpacePercentageYellowState

The threshold value for a warning alert.

10

Rules in the Windows Desktop Base Operating System Management Pack

The Desktop Base Operating System Management Pack contains the following rule groups and rules.

Windows XP\Core System Components and Services

Table 14 lists the rules included in this rule group.

Table 14 Rules

Rule

Type

Enabled

Severity

Dependencies and other notes

The service has entered into an unpredictable state.

Event

Yes

Warning

 

Software updates have been partially installed. The system must be manually restarted.

Event

Yes

Warning

 

Software update installation failed.

Event

Yes

Critical Error

 

Software updates are ready for installation. User action is required to initiate installation.

Event

Yes

Warning

 

Performance registry corruption

Event

Yes

Error

 

Too many requests for performance disk counter data have failed.

Event

Yes

Error

 

The event log file is full. New event instances will be discarded.

Event

Yes

Critical Error

 

Software updates have been partially installed. The system will automatically restart.

Event

Yes

Warning

 

Software updates have been partially installed. The system will automatically restart in 5 minutes.

Event

Yes

Warning

 

Windows is unable to connect to the Automatic Updates service.

Event

Yes

Critical Error

 

The service terminated unexpectedly.

Event

Yes

Service Unavail-able

 

Too many requests for performance counter data have timed out.

Event

Yes

Error

 

The service or driver failed to start.

Event

Yes

Service Unavail-able

 

The service is misconfigured.

Event

Yes

Warning

 

Windows has not been activated. Please activate Windows within the next 15 days.

Event

Yes

Warning

 

Windows has not been activated. Please activate Windows within the next 5 days.

Event

Yes

Critical Error

 

Disk performance counters request failed (Consolidation).

Consoli-dation

Yes

 

 

Send e-mail or a page response for any alerts with a severity of "Service Unavailable."

Notifica-tion

Yes

 

 

Windows XP\Networking

Table 15 Rules

Rule

Type

Enabled

Severity

Dependencies and other notes

IP Address Conflict

Event

Yes

Warning

 

Network Adapter Disconnected

Event

No

Warning

 

Duplicate Name on Network

Event

Yes

Warning

 

Windows XP\Performance

The Performance public views in this Management Pack depend on the associated rules in the rule group to be enabled. Performance counters are collected by rules in this rule group, as well as by performance rules in the Storage rule group. Table 16 lists the rules included in this rule group.

Table 16 Rules

Rule

Type

Enabled

Severity

Dependencies and other notes

Performance Measuring: Network Interface\Bytes Sent/sec.

Performance Measuring

No

 

 

Performance Measuring: Processor\% Processor Time\_Total

Performance Measuring

No

 

 

Performance Measuring: Network Interface\Bytes Total/sec.

Performance Measuring

No

 

 

Performance Measuring: Network Interface\Bytes Received/sec.

Performance Measuring

No

 

 

Performance Measuring: System\Processor Queue Length

Performance Measuring

No

 

 

Performance Measuring: System\Context Switches/sec.

Performance Measuring

No

 

 

Performance Measuring: Memory\Available Megabytes

Performance Threshold

No

 

 

Performance Measuring Paging File % Usage

Performance Measuring

No

 

 

Windows XP\Reliability

The Reliability public views in this Management Pack depend on the associated rules in the rule group to be enabled. Table 17 lists the rules included in this rule group.

Table 17 Rules

Rule

Type

Enabled

Severity

Dependencies and other notes

An application is repeatedly generating application errors.

Event

Yes

Critical Error

 

The application generated an application error (Collection).

Collec-tion

Yes

 

 

Send e-mail or a page response for any alerts with a severity of "Service Unavailable."

Notifica-tion

Yes

 

 

Windows XP\State Monitoring and Service Discovery

All of the rules in this rule group contribute to state monitoring. Table 18 lists the rules included in this rule group.

Table 18 Rules

Rule

Type

Enabled

Severity

Dependencies and other notes

Run Storage Discovery

Event

Yes

 

 

Event Log Health Check

Event

Yes

Critical Error

 

DHCP Client Health Check

Event

Yes

Critical Error

 

Base OS Service Discovery

Event

Yes

 

Dependencies:

  • Core Windows services state monitoring

Server Health Check

Event

Yes

Critical Error

 

Logical Disk Manager Health Check

Event

Yes

Critical Error

 

Remote Procedure Call (RPC) Health Check

Event

Yes

Critical Error

 

DNS Client Health Check

Event

Yes

Critical Error

 

Plug and Play Health Check

Event

Yes

Critical Error

 

Run Storage State Monitoring

Event

Yes

 

Dependency:

  • Disk free space state monitoring

Workstation Health Check

Event

Yes

Critical Error

 

Computer Browser Health Check

Event

Yes

Critical Error

 

TCP/IP NetBIOS Helper Health Check

Event

Yes

Critical Error

 

Send e-mail or a page response for any alerts with a severity of "Service Unavailable."

Notification

Yes

 

 

Performance Threshold: PhysicalDisk\Avg. Disk sec./Write threshold exceeded

Performance Threshold

Yes

Warning

Dependency:

  • Disk latency performance state monitoring

Performance Threshold: Processor\% Processor Time threshold exceeded

Performance Threshold

Yes

Critical Error

Dependency:

  • Processor performance state monitoring

Performance Threshold: Memory\% Committed Bytes in Use threshold exceeded

Performance Threshold

Yes

Critical Error

Dependency:

  • Memory performance state monitoring

Performance Threshold: Memory\Available Mbytes threshold exceeded

Performance Threshold

Yes

Critical Error

Dependency:

  • Memory performance state monitoring

Performance Threshold: PhysicalDisk\Avg. Disk sec./Read threshold exceeded

Performance Threshold

Yes

Warning

Dependency:

  • Disk latency performance state monitoring

Windows XP\Storage

Performance counters are collected by rules in this rule group, as well as by performance rules in the Performance rule group. Table 19 lists the rules included in this rule group.

Table 19 Rules

Rule

Type

Enabled

Severity

Dependencies and other notes

NTFS - File System Corrupt

Event

Yes

Critical Error

 

LDM - Auto Import Failed

Event

Yes

Critical Error

 

NTFS - Quota Threshold Limit Reached

Event

Yes

 

No alert is generated by default

Dependency:

  • Public view: Storage - Disk Quota Events

LDM - Volume Not Started

Event

Yes

Critical Error

 

LDM - Cant Read Disk

Event

Yes

Critical Error

 

Chkdsk - Checking File System occurred on startup

Event

Yes

 

No alert is generated by default.

NTFS - Quota Threshold Reached

Event

Yes

 

No alert is generated by default.

NTFS - Delayed Write Lost

Event

Yes

Critical Error

 

LDM - Disk Group Failed

Event

Yes

Critical Error

 

Send e-mail or a page response for any alerts with a severity of "Service Unavailable."

Notifica-tion

Yes

 

 

Performance Measuring: LogicalDisk\% Free Space

Measur-ing

No