Microsoft Knowledge Base Article
This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved.
Terms
of Use |
Trademarks
Article ID: 909031 - Last Review: October 27, 2006 - Revision: 1.3
You receive a “The MOM Server failed to install agent on remote computer†error message when you try to install Microsoft Operations Manager (MOM) agents by using the Push distribution method
When you try to install Microsoft Operations Manager (MOM) agents by using the Push distribution method, you receive the following error message:
The MOM Server failed to install agent on remote computer <full_computer_name>.
Error Code: -2147467259
Error Description: The Agent could not contact the MOM Server.
Microsoft Installer Error Description: No Description Available
Additionally, the following symptoms occur:
- A message that is similar to the following appears in the MOM Management Server computer’s Application log:
Event Type: Error
Event Source: Microsoft Operations Manager
Event Category: MOM Server
Event ID: 21083
Date: date
Time: time
User: domain\mom_action_account
Computer: SERVER_NAME
Description:
The MOM Server failed to install agent on remote computer <full_computer_name>.
Error Code: -2147467259
Error Description: The Agent could not contact the MOM Server.
Microsoft Installer Error Description: No Description Available
- The following error message is logged in the MOMService.mc8 log file on the MOM agent:
Err:Unable to open channel to server using the MOMX protocol.
- The following error message is logged in the MOMService.mc8 log file on the MOM Management Server computer:
Err:AcceptSecurityContext failed, error = -2146893056
- MOM agents may not be able to communicate with the MOM Management Server computer.
- MOM agents may fail over to other MOM Management Server computers.
This problem occurs when the EnablePMTUDiscovery registry entry in the following registry subkey is set to 0:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
If this entry is set to 0, the MOM agent Kerberos negotiate packets are fragmented because of small packet sizes.
Note By default, this registry value is set to 0 when you install ISA Server 2004.
To resolve this problem, use one of the following methods.
Method 1: Set the value of the EnablePMTUDiscover registry entry to 1 on the MOM Management Server computer and on the agents
To set the value of this registry entry to 1, follow these steps:
- Click Start, click Run, type regedit, and then click OK.
- Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
- Right-click EnablePMTUDiscovery, and then click Modify.
- In the Value data box, type 1, and then click OK.
- Quit Registry Editor, and then restart the computer.
Method 2: Turn off the Mutual Authentication setting for all agents
- In the MOM 2005 Administrator console, expand Microsoft Operations Manager (Your Site), expand Administration, and then click Global Settings.
- In the details pane, right-click Communications, and then click Properties.
- Click the Security tab, click to clear the Mutual Authentication required check box, and then click OK.
- When you receive a warning that states that the agents and that MOM Management Server computers must be synchronized, click OK .
- In the navigation pane, expand Computers, and then click Agent-managed Computers.
- In the details pane, select all the agent-managed computers.
- On the Action menu, point to All Tasks, click Update Agent Settings, and then click OK.
Note Unless you have configured custom accounts, accept the following default settings:- For the Which account do you want to use for updating the agent settings option, select the default setting of Management Server Action Account.
- For the Which account do you want to use for the Agent Action Account option, select the default setting of Local System.
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
APPLIES TO
- Microsoft Operations Manager (MOM) 2005
| kberrmsg kbtshoot kbprb KB909031 |
Community Feedback System
Very often, it takes hours to solve a problem. Very often, you've looked high
and low, and have tried a lot of solutions. When you finally found it, chances
are, it was because someone else helped you. Here's your chance to give back.
Use our community feedback tool to let others know what worked for you and what
didn't.
Please also understand that the community feedback system is not warranted to be
correct, it's simply a system that we've built to let people try and help each
other. If something in a feedback response doesn't make sense to you, or you're
not comfortable making changes that the feedback talks about (like registry
edits), please consult a professional.
Thank you for using kbAlertz.com Feedback System.
-- Scott Cate