RunAs Account/Password Expiration Check Monitor

  • ID:  Microsoft.SystemCenter.HealthServiceRunAsAccounts.ExpirationCheck.Unit
  • Description:  Checks for expiring RunAs accounts and their passwords
  • Target:  Health Service
  • Enabled:  Yes

Operational States

Name State Description
One or more RunAs accounts are expiring or have their password expiring very soon. Error  
One or more Run As accounts are expiring or have their password expiring within 14 days. Warning  
No RunAs accounts are currently expiring. Success  

Alert Details

Monitor State Message Priority Severity Auto Resolution
One or more RunAs accounts are expiring or have their password expiring very soon. (Error) RunAs Account(s) Expiring Soon Medium Warning No

Run As Profiles

Name
Default

Monitor Knowledgebase

Summary

The specified RunAs account is expiring (or its password is expiring). If the account or password expired, the health service will not be able to monitor or perform actions using this RunAs account.

Below is a summary of the default configuration of this monitor:

  • Red state: Transition to red state if the specified RunAs account (event 7014) or its password (event 7001) will expire in less than 3 days

  • Yellow state: Transition to yellow state if the specified RunAs account (event 7014) or its password (event 7001) will expire soon (in 4 days or more)

  • Green state: Transition to green state if the health service has successfully validated all RunAs accounts (except the unauthorized ones) (event 7019 or 7020) or if the Health service failed to validate any RunAs accounts (event 7021)

Causes

The red (or yellow) state can indicate the following may be happening on the agent:

  • The specified RunAs account is expiring. If the account expiration is not extended before expiry, the health service will not be able to monitor or perform actions using this RunAs account.

  • The password for the specified RunAs account is expiring. If the password is not updated before the expiry date, the health service will not be able to monitor or perform actions using this RunAs account.

Resolutions

You can perform the following steps to resolve the problem or to gather data prior to seeking assistance from Microsoft product support:

  • Extend the account (update the account password) in Active Directory (for domain accounts) or on the local computer (for local accounts).

  • Capture all 7### events, save the Operations Manager event log on the agent computer and call Microsoft product support. During the support call, mention the most recent 7### events and any error codes (e.g. event 7022) inside the event and ask if the Operations Manager event log is needed.

External References
This monitor does not contain any external references.

See Also for System Center Library Management Pack


Downloads for System Center Library Management Pack

AZURE OPTIMIZATION ASSESSMENT GET STARTED
MIGRATION TO AZURE GET STARTED
SYSTEM CENTER MIGRATION TO AZURE GET STARTED
MIGRATION TO AZURE FOR SQL AND WINDOWS 2008 GET STARTED