Alerts

Configure Windows Small Business Server 2003 to send you an e-mail each time a critical performance threshold is exceeded.

To receive alert notifications, select the Send me notification of alerts by e-mail check box to specify one or more e-mail addresses to send alert notifications to, and then type the e-mail addresses. To separate multiple e-mail addresses, use a semicolon (;).

After completing this wizard, you can configure the default alerts and thresholds by clicking Configure Alert Notifications in the Monitoring and Reporting snap-in in Server Management. Additional alerts can be created using the Health Monitor snap-in; however, the new alerts cannot be configured using the Configure Alert Notifications task.

By default, you can receive e-mail alerts for the following services:

Service Description

DHCP Server

Performs TCP/IP configuration for DHCP client computers, including dynamic assignments of IP addresses, specification of the WINS and DNS servers, and connection-specific DNS names. If this service is stopped, the DHCP server will not perform TCP/IP configuration for client computers.

DNS Server

Activates Domain Name System (DNS) client computers to resolve DNS names by answering DNS queries and DNS dynamic update requests. If this service is stopped, DNS name resolution will fail, and DNS updates will not occur. This can prevent users from accessing the server and the Internet.

Error Reporting Service

Collects, stores, and reports unexpected application crashes to Microsoft. If this service is stopped, then Error Reporting will occur only for kernel faults and some types of user mode faults.

Event Log

Activates event log messages issued by Windows-based programs and components to be viewed in Event Viewer.

Fax

Allows users to send and receive faxes, utilizing fax resources available on the computer running Windows Small Business Server 2003.

By default, service and performance alerts for Fax are not enabled. If you install and configure a fax modem, you can enable the Fax alerts by using the Alert Notifications configuration tool.

IPSEC Services

Provides end-to-end security between client computers and servers on TCP/IP networks. If this service is stopped, TCP/IP security between client computers and servers on the network will be impaired.

Kerberos Key Distribution Center

Allows users to log on to the network using the Kerberos authentication protocol. If this service is stopped, users will be unable to log on to the network.

Microsoft Exchange Information Store

Manages the Exchange mailbox and public folder stores. If this service is stopped, mailbox stores and public folder stores on the computer running Windows Small Business Server 2003 will be unavailable.

Microsoft Exchange Management

Manages Exchange management information that uses Windows Management Instrumentation (WMI). If this service is stopped, Exchange management information using WMI will be unavailable.

Microsoft Exchange POP3

Provides Post Office Protocol version 3 (POP3) services to client users. If this service is stopped, client computers will be unable to connect to the computer running Windows Small Business Server 2003 by using the POP3 protocol. This alert is disabled by default.

Microsoft Exchange Routing Engine

Provides Exchange routing services using link state information. If this service is stopped, messages will not be routed by the computer running Windows Small Business Server 2003.

Microsoft Exchange System Attendant

Provides monitoring, maintenance, and Active Directory lookup services, such as monitoring of services and connectors, defragmenting the Exchange store, and forwarding Active Directory queries to a Global Catalog server. Most Exchange services depend on the Microsoft Exchange System Attendant service and will stop if this service is stopped. Additionally, if this service is stopped, then monitoring, maintenance, and query services will be unavailable.

MSSQL$ SBSMonitoring

This service is required to manage information displayed in server performance reports and usage reports. If this service is stopped, users will be unable to view server performance or usage reports.

MSSQL$ Sharepoint

Allows users access to your Windows SharePoint-based intranet site. This service is required for access to your Windows SharePoint-based intranet.

Print Spooler

Manages all local and network print queues and controls all printing jobs. If this service is stopped, printing on the computer running Windows Small Business Server 2003 will be unavailable.

Routing and Remote Access

Activates virtual private network (VPN) and network address translation (NAT) routing services. If this service is stopped, these services will be unavailable. This service is enabled if you configure router, firewall, or VPN services.

SBCore Service

Provides core server services.

Security Accounts Manager

Signals other services that the Security Accounts Manager (SAM) is ready to accept requests.

Server

Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable.

Simple Mail Transfer Protocol (SMTP)

Transports e-mail across the network. If this service is stopped, alert notifications will not be delivered to the recipients.

Terminal Services

Allows multiple users to be connected interactively to the computer running Windows Small Business Server 2003.

Windows Internet Name Service (WINS)

Resolves NetBIOS names for TCP/IP clients by locating network services that use NetBIOS names. If this service is stopped, network NetBIOS services will not function properly.

World Wide Web Publishing

Provides Web connectivity and administration through the Internet Information Services snap-in.

By default, you can receive e-mail alerts for the following preconfigured performance counters:

Alert name Performance counter Default threshold

Allocated Memory

Committed Bytes

> 2 gigabytes (GB)

Disk Activity

% Disk Idle Time

< 5%

inetinfo.exe private bytes

Process - Private Bytes

> 100 megabytes (MB)

Low Disk Space

Disk Free Megabytes

< 500 MB

lsass.exe private bytes

Process - Private Bytes

> 100 MB

Memory Available

Available Mbytes

< 4 MB

Printing Errors

Print Job Errors

> 1

Processor Activity

% Idle Time

< 5%

Received Fax Failures

Failed Receptions

> 1

Sent Fax Failures

Failed Outgoing Connections

> 1

SMTP Server Remote Queue Length

Remote Queue Length

> 30

store.exe private bytes

Process - Private Bytes

> 100 MB

System Up Time

System Up Time

< 600 seconds

By default, you can receive e-mail alerts for the following preconfigured event log errors:

Event log error Event ID Event Log File Description

Account Lockout

539

Security

An account was locked out due to multiple failed logon attempts that occurred in a short period of time.

Windows Small Business Server Backup failed

5634

Application

One or more components of Windows Small Business Server Backup failed.

Notes

  • If you select to receive Alert Notifications in e-mail, recipients may receive a large volume of alert messages in their mailbox.
  • If Exchange is not installed, Exchange alerts are disabled.