SNMP and GPO settings for Disk Thresholds

[Rnollen]

Dear All,

I am currently setting up a HP Sim environment for about 150 servers, all W2K and W2k3 machines.

Now I have some problems setting up the SNMP communication for altering the Disk Thresholds.
We currently have a GPO in use that sets the "Read Only" strings for the SNMP in the SNMP service on the Local Machines.

A question: Is it possible that I leave the settings in the SNMP service on the local machine untouched and on the SMH I add the Read/Write string on the SNMP page? So that I can save my Disk Thresshold settings?
Is it possible that the SMH does have other SNMP values then SNMP Service?
This because I cannot use the GPO to set Read/Write strings for the SNMP Service? I have tried to search the Internet for a custom ADM Script, but found none that works. If someone has an working example??

At this point none of the servers are able set the Disk Thresholds. On all the servers I can see the File Thresholds settings, but I cannot save any disk threshold settings. My thought was that this was a SNMP Issue. But our company wants to centrally deploy these settings through a GPO.

Thx in advance..

[Albert Austin · Accepted solution]

Hi,

"Is it possible that I leave the settings in the SNMP service on the local machine untouched and on the SMH I add the Read/Write string on the SNMP page? So that I can save my Disk Thresshold settings?
Is it possible that the SMH does have other SNMP values then SNMP Service?"

No, since they are the same. Any changes made on the SMH is also done in the services and vice-versa.

Rgds,

Albert

[Rnollen]

So if I change these settings on the SMNP page of the SMH, the SNMP service also then knows these changes? And therefore I don't have to alter GPO SNMP settings?

Because I CAN change the SNMP settings on the SMH but I CANNOT change the SNMP settings on the SNMP service (Because of the GPO, I can disable this but then I have to change SNMP settings on 150 servers).

[Aravindh Rajaram]

Yes. Changes in the SMH page gets reflected in the SNMP service too.

[Albert Austin]

HI,

"So if I change these settings on the SMNP page of the SMH, the SNMP service also then knows these changes?"
Yes

"And therefore I don't have to alter GPO SNMP settings?"
Yes u dont have to alter GPO, BUT, I dont think its that simple, I dont have this issue in my environment but I would think even though you do make these changes in SMH, GPO restriction will not let you enforce this in your environment.

"(Because of the GPO, I can disable this but then I have to change SNMP settings on 150 servers)."

You dont need to go through such a long process, since with "Replicate Agent settings" in SIM you do these changes with ease.

Albert

[Rnollen]

Perfect, but if I create an SNMP Read/Write instance through the SMH, then they don't appear in the SNMP Service Page?

But if the Read/Write community name is working, does anyone has an idea why I am not able to save the Disk Threshold settings for my server through the SMH ? If I have the Read/Write community string?

[Albert Austin]

As I mentioned in my last reply. Your GPO has the last word. So if you dont loosen your policy I dont really think it would work.

Albert

[Rnollen]

@All
@Albert,

Thx for the replies...

I have altered the GPO and set de communities to "Not Configured". Now I can alter the Disktreshold settings on the HP Sim server. But the Disk Threshold settings on other servers doesn't work.

I have made a Read/Write string on those servers, but it doesn't work? Any idea's?

Thx in advance..

[Albert Austin]

"but it doesn't work?"

When you say it does not work, could you elaborate? IS it that the bar is not active?

This may be quite a silly question but do you have java installed on the server?

What I would suggest is to access host SMH through your SIM console. Since java is installed on your SIM server. See if that works.

Albert

[Rnollen]

@Albert

No the bar is visible and java is working fine. But i have tried some servers now and on the W2k3 machines I can save the settings, but not yet on the W2K machines so there must be still something wrong there and I am going to look into that..

But it is going better and better, unfortunately i had to turn off the GPO settings for the Servers OU but this is the only "working" solution I think....

[Albert Austin]

Good to know its looking better, keep us updated with your progress. Would be good info for others trying to do the same.

Albert

p.s. If all those who have replied to your problem have been of any assistance, dont forget to award points.

[Rnollen]

Some updates..

I have created a Custom ADM file and imported this in a GPO and everything is working like a charm.

I used Reg2ADM to convert a Registry hive to a ADM Template file. I manual set the SNMP Community strings on the SNMP Service and then exported the following Registry Key: "SYSTEM\CurrentControlSet\Services\SNMP\Parameters\ValidCommunities. This Reg file I have converted to a ADM File with Reg2ADM.

After this, I imported this ADM file into a GPO of the Computer Settings. Then you must deselect an option on the MMC page. Go to "View", then "Filtering" and deselect the option: "Only show policy settings that can be fully managed"
After this the Custom Made ADM file will fully be visible. Only all the SNMP Community names doesn't have a Value jet (Reg2ADM didn't convert the settings by me) So I had to set the value's manualy. A Value of 4 gives "Read Only" rights (For example for the Public community name) and a Value of 8 gives "Read/Write" rights...

Deploy the GPO to the servers and then all SNMP Community strings are setup correctly.

Only one thing is important; make sure there aren't any other GPO's in use where the SNMP Community strings are set. Because then the custom made ADM won't work. If this is the case, set the other SNMP Community strings to "Not configured".

Thanx for all the support.