Pack Catalog

Security for Removable Media Manager (secRMM) Management Pack for OpsMgr

A LaMark — Fri, 04 May 2012 01:10:33 GMT

Squadra Technologies security Removable Media Manager (secRMM) software is Windows security software that runs on your company’s workstations and servers. secRMM manages removable media. In this context, Removable media is defined as external hard disks, USB sticks, SD-Cards, smart phones, CD-ROM and DVD. These are typical ways that people move files around or backup data. secRMM allows you to track all write activity to the removable media devices in your computer environment as well as giving you the ability to control (or authorize) who can write to the removable media devices.

Unlike other security software products, secRMM is designed as a light-weight security software product. What this means is that when secRMM does not need to be running, it enters into a quiescent state. The secRMM software will run only when a Removable Media device is plugged into the computer. This means that your end-users will not feel a performance impact from the secRMM software in their normal day-to-day computer work activities.

secRMM logs events into the Windows security event log. secRMM comes with a free Microsoft Operations Manager (OpsMgr) Mangement Pack that will create OpsMgr alerts from the secRMM events.

For details and download, please visit http://www.squadratechnologies.com and http://www.squadratechnologies.com/secRMMDownloads.aspx

Microsoft Network Policy Server (NPS)

Bas Sterkenburg — Fri, 04 May 2012 14:33:31 GMT

This management pack monitors the Network Policy and Access server (NPS) role of Windows Server 2008 and Windows Server 2008 R2

Update:

v1.0.1.70 - Added sealed MP version; bugfix performance views

Discovery
The first discovery is targeted to all Windows Server 2008 and 2008 R2 operating systems to determine if NPS role is installed or not. The discovery checks for existence of registry key HKLM\System\CurrentControlSet\Services\IAS.

Scripted configuration discovery
If the NPS role is installed there are 4 scripted discoveries to discover the configuration:
• Network Policy Server Client Configuration Discovery (netsh nps show client)
• Network Policy Server Connection Request Policy Configuration (netsh nps show crp)
• Network Policy Server Connection Network Policy Configuration (netsh nps show np)
• Network Policy Server Log Configuration Discovery

HP MSA2000 Monitoring Management Pack.

Bobgreen — Sat, 21 Apr 2012 16:41:54 GMT

This management pack monitors the health of HP Modular Smart Array 2000 G1/G2/G3 Series and Performance of HP Modular Smart Array P2000 G3. For more information see .docx file in archive.

Most of the rules, monitors and discoveries have a Knowledge Articles.
First actions:

Download and install HP P2000 MSA Monitoring Tool (ftp://ftp.hp.com/pub/softlib2/software1/sc-windows/p1993940870/v70415/cp015535.exe) on monitoring hosts.
Provide Credentials
Discover HP MSA2000 System.

One agent can manage only one HP MSA2000 Modular Smart Array.

UPD 11.04.2012
Sorry, no path to upgrade from 1.0.0.0 to version 1.0.0.1. You need to delete previous management pack and import new, rediscover all MSA2000 devices.
What's new in this version:
- All scripts was stabilized;
- Improved Cookdown;
- Discoveries are corrected;
- New classes was added (I/O module, Expander ports);
- Script-based events. They have not so cool feature - event code showed in Log Name, this cased by not properly display data of description in console. If you don't want to collect events just disable the HP MSA2000 Collect Event rule.
- Alert rules with big knowledge base.
If you have some troubles or questions, send me your XMLs from MSACLI.exe to bobgreen(at)mail(dot)ru.

Monitor for a Mapped Drive of Current Logged in User

uglywon — Wed, 28 Dec 2011 21:56:53 GMT

This is a basic Scrip monitor that checks for:

A User is logged in to session 0 (Not RDP) and that user’s user name starts with “svc”)
A Z: Drive is mapped and that it’s remote path starts with “\\Server\remote path”

Bitlocker Check MP

matthiasr — Mon, 12 Dec 2011 09:26:20 GMT

Dynamic Memory MP

Brunosa — Sun, 20 Nov 2011 02:42:45 GMT

This management pack adds first level of monitoring for the Dynamic Memory feature that shipped with Hyper-V in Windows Server 2008 R2 SP1. It detects which virtual machines are Dynamic Memory-enabled, and adds a subclass to these VMs to monitor and tracks Dynamic Memory usage. One monitor specifically rolls up at the performance level for the VM object, and several performance counters provide more detailed information. See the sample screenshots section of this guide. Note that while this community MP provides better insight on how Dynamic Memory is being used and can be useful for virtualization administrators, it is not mandatory for a good monitoring experience of Dynamic Memory-enabled machines. The guide gives examples how the Core OS MP copes with memory management to avoid unwanted noise whether or not Dynamic Memory is enabled. See http://blogs.technet.com/b/yasc/archive/2011/10/18/dynamic-memory-management-pack.aspx for more details and screenshots

USB Storage Device Detection Sample Mgmt Pack

Tommy Gunn — Mon, 24 Oct 2011 15:27:06 GMT

by Tao Yang, this MP uses 2 very simple alert generating rules to detect USB Mass Storage Device creation and deletion WMI event. Both rules are set to run every 60 seconds so within 60 seconds of the event, an Information alert is generated in SCOM.

Maintenance Mode Notification

Bobgreen — Sun, 23 Oct 2011 00:57:50 GMT

This management pack generate information alerts about computers which sets in maintenance mode. You can create subscribtion on this alert.

Opalis Sample Policies: User and Virtual Machine Provisioning

Pete Zerger — Tue, 30 Aug 2011 15:04:23 GMT

This download includes sample Opalis workflows and related Service Manager 2010 custom change templates to demonstrate System Center-integrated automation for enterprise and private cloud. These policies will be represented in an upcoming article.

Workflows should function in both Opalis Integration Server 6.3 and Orchestrator 2012, which is in beta at the time of this post.

HP EVA Performance Management Pack v3

Alexey Zhuravlev — Wed, 05 Oct 2011 12:23:39 GMT

This management pack is based on HP EVA Performance Management Pack v2 by Alain Côté. Some improvements that I’ve made in v3:

Scripts are composed in a shared data sources to support ‘cookdown’
New classes for better targeting and granularity
Most of the collection rules have a short knowledge articles
Added the Unit Monitor that checks for friendly names config file existence and generates an alert (including a knowledge base article)
Minor scripts improvements. New scripts a little bit more stable and should not fail if you do not have an optional components (like a data replication groups) on your EVA
New views
Collection Rules for Windows PerfMon Counters are added (this rules are disabled by default)
Diagnostic task for Disk Group - Average Write Latency Monitor shows a TOP 5 virtual disks for Write Latency (not for activity, we're found that top 5 active (in+out MB\s) disks don’t help us to troubleshoot, just because our biggest virtual disks are always on top, not the slowest disks which are the 'latency generators')
New reports (defined in the dedicated management pack)

UPDATED (ver. 3.0.0.226 for unsealed and 3.0.0.225 for the sealed one):

Fixed the bug in the EVA.Disk.Group.Write.Latency.Monitor

UPDATED (ver. 3.0.0.224):

Increased discovery timeouts
Fixed typos in discovery scripts

UPDATED

(ver. 3.0.0.222):

Fixed typo in diagnostic scripts
Changed the Event Source for the event that diagnostic task create

System Center Configuration Manager Integration Pack Extention

Pete Zerger — Wed, 18 May 2011 19:14:44 GMT

by Ryan Andorfer, this integration pack adds some additional integration points for Opalis to System Center Configuration Manager. These functions are used in my User Self imaging workflow that will be demoed at MMS 2011.

This project is currently under heavy development. I am releasing and early version in .DLL form (use Run .Net Object to execute) so that people can test and give feedback.

SharePoint 2010 Extension MP

matthiasr — Mon, 30 May 2011 10:49:22 GMT

Example MP for extending the SharePoint Monitoring.
- Monitoring of different SP Service
- Monitoring of Site Collection Sizes
- Monitoring of Content DBs
- Monitoring of SP SQL Instances

There will be warning events created if size limits are reached.

feel free to edit and use.

To enable the performance collection you have to create an registry value on one of your WFE servers.

[HKEY_LOCAL_MACHINE\SOFTWARE\PB\SPMonitoring]
"Enabled"="true"

VMWare VSphere Integration Pack for Opalis

Tommy Gunn — Tue, 29 Mar 2011 15:56:57 GMT

by Ryan Andorfer, This integation pack is based off of the latest version of the VMWare CMDLets (http://www.vmware.com/support/developer/windowstoolkit/wintk40u1/html/index.html) and the source code is available in the source code area. There is no documentation for the IP yet, but each object corresponds to a CMDLet from VMWare so you can see their documentation for a reference for now.

SCCM Client Center Integration Pack for Opalis

Tommy Gunn — Tue, 29 Mar 2011 15:53:46 GMT

SCCM Client Center Integration Pack for Opalis is an System Center Opalis Integration Pack to manage and orchestrate System Center Configuration Manager (SCCM) 2007 Agents from Opalis workflows. It supplements the SCCM Integration Pack with nearly 30 objects delivering functionality beyond the native SCCM IP.

Opalis Integration Server 6.3 Management Pack for SCOM R2

SCOMGUY — Sun, 13 Mar 2011 10:29:59 GMT

Have you been waiting for Microsoft to release an Operations Manager management pack for Opalis Integration Server? Wait no longer. The objective of this MP is to ensure the Opalis platform is healthy so automation transpires and availability issues are identified quickly. This solution checks the availability of Opalis 6 by discovering and monitoring the associated NT services. The MP is simple and effective for most scenarios. You may also find it useful in a topological sense for locating Opalis components where you thought they didn’t exist.

The SCOMGUY Opalis 6 Management Pack includes discoveries, service monitors, alerts, and views to assist Operators in detecting issues with Opalis Integration Server 6 servers.

·         Discovers Opalis 6 server components
·         Monitors Opalis 6 NT services
·         Agent Tasks to remedy service failures
·         Alerting Rules for Opalis 6 exceptions in the text logs
·         Opalis server state views for Role, Components and Services

Designed for use with Opalis 6.3 and SCOM R2

Download the package from the source by clicking the Download button.

Integration Pack for SharePoint

Tommy Gunn — Tue, 22 Feb 2011 09:18:46 GMT

The SharePoint IP was created by Jeff Fanjoy. This Integration Pack adds the following objects to Opalis Integration Server:

Create List Item
Delete Attachment
Delete Document
Delete List Item
Download Attachment
Download Document
Get Attachment List
Get List Item
Monitor List Item
Update List Item
Upload Attachment

Opalis Scheduled Tasks Integration Pack

Tom Gerald — Mon, 31 Jan 2011 19:31:02 GMT

by Ryan Andorfer, this Opalis integration pack can be used to manipulating scheduled tasks on windows systems.

Provides the following functionality

Create Scheduled Task
Delete Task
Add Daily Trigger
Add Monthly DOW Trigger
Add On Idle Trigger
Add On Logon Trigger
Add On System Start Trigger
Add Run Once Trigger
Add Weekly Trigger
Clear Task Triggers
Get Scheduled Tasks
Get Task Triggers
Kill Task
Run Scheduled Task
Set Task

This code runs as the user your Opalis Action Server is installed as. There is no 'configuration' (working against a com interface that doesn't accept passed credentials). With this in mind I am looking into how to add a 'security' tab to QIK based objects to allow this whole object to have a configurable user.

Integration Pack for MSSQL Tasks

Tommy Gunn — Fri, 28 Jan 2011 16:50:02 GMT

from Charles Joy, this IP provides extended Data Management functions to OIS and MSSQL. This Integration Pack adds the following objects to Opalis Integration Server:

• Test MSSQL Connection
• Deploy MSSQL Scripts
• Get OIS Variable Info
• Update OIS Variable Value
• Generate XML from MSSQL

Take particular note of the "Get OIS Variable Info" and "Update OIS Variable Value", if implemented, these objects enable you to make those OIS Variables you have, actuall Variable! Oh, and if you wanted to be able to generate XML from a standard SQL table, check out "Generate XML from MSSQL" :)

OIS-SCOM Extensibility Kit 2.0

Tommy Gunn — Fri, 28 Jan 2011 16:46:53 GMT

from Charles Joy, the Opalis Integration Server (OIS) – System Center Operations Manager (SCOM) Extensibility Kit 2.0 includes examples of how to extend SCOM using both the SCOM and OIS SDKs. The C# code and compiled DLL included here offer two OIS objects which can be used to automatically create or delete notification subscriptions based on an existing Channel as well as work against existing Pending Agent Installs in the SCOM database.

Included in this Extensibility Kit:

Opalis Ready DLL:
Can be used with the “Invoke .NET” object included in the Integration Pack for “Opalis Quick Integration Kit for Microsoft .NET”
- OpalisSCOMExtensibility.dll
- NOTE: This DLL is dependent on some other resources, see System Requirements.

C# Source Code:
Example C# Source Code illustrating the combination of the SCOM and OIS SDKs.
- SCOM_NoteSubcriptionCreate.cs
- SCOM_NoteSubcriptionDelete.cs
- SCOM_AgentInfoAdapter.cs
- SCOM_ApprovePendingAgentInstall.cs
- SCOM_ListPendingAgentInstalls.cs
- NOTE: These C# files are dependent on some other resources, see System Requirements.

This Extensibility Kit (DLL to be used with the Opalis “Invoke .NET” object) adds the following object capability to Opalis Integration Server:

Create SCOM Notification Subscription (SCOM.SCOMSDK.SCOMNoteSubcriptionCreate)
Delete SCOM Notification Subscription (SCOM.SCOMSDK.SCOMNoteSubcriptionDelete)
List Pending Agent Installs (SCOM.SCOMSDK.SCOMListPendingAgentInstalls)
Approve Pending Agent Installs (SCOM.SCOMSDK.SCOMApprovePendingAgentInstall)

This DLL (and appropriate dependencies) can be rolled up into an Opalis Integration Pack (not included here) by using the QIK Wizard.

Please Refer to the OIS-SCOM Extensibility Kit 2.0 - User Guide for more information on System Requirements, Installation, Configuraiton and Usage.

Local User and Group Management Integration Pack

Tommy Gunn — Thu, 27 Jan 2011 16:47:52 GMT

by Ryan Andorfer, this Opalis Integration pack provides objects for management of local computer groups and users. This project contains the following Opalis Objects:

Add Local Computer Account
Remove Local Computer Account
Add User to Local Computer Group
- Support for local users and AD users
Remove User from Local Computer Group
- Support for local users and AD users

Opalis Utilities Integration Pack

Tommy Gunn — Thu, 27 Jan 2011 16:37:19 GMT

by Ryan Andorfer, this integration pack extends Opalis Integration Server with to provide some additional utilities, including

DateTime - Get Current Datetime
File System - Get Subdirectories
Registry
- Add Registry Key
- Delete Registry Key
- Add Registry Key Value
- Delete Registry Key Value
- Set Registry Key String Value
- Read Registry Key Value
System
- Sleep
Text
- Split String
- Count Lines
- Select Line