How to fix SCOM event 4511 - Initialization of a module of type "RegistrySyncProbe" (CLSID "{472364F2-A1F0-41C0-9A8F-E00C92C2AB31}") failed with error code The parameter is incorrect.

Question

Hello All,

Can someone please advise on the below issue ?

We are using SCOM 2019 - UR4.

Event Description :

Initialization of a module of type "RegistrySyncProbe" (CLSID "{472364F2-A1F0-41C0-9A8F-E00C92C2AB31}") failed with error code The parameter is incorrect. causing the rule "Microsoft.Windows.FileServer.DFSN.10.0.RoleServiceDiscovery" running for instance "hostname.tm.toppanmerrill.com" with id:"{DDBAE77F-DD23-DFE7-C92F-D3A62E8DADC8}" in management group "TM-Prod".

The alert started triggering for few more servers.

Thanks,

Adam

Answer 1

Hi,

For event id 4511, it is complicated (varies from environment to environment) and may require digging into the management pack. You may locate the management pack unsealed version according to the rule name and check to see if there are any findings.

Below is a similar blog to locate the root cause and solution for your reference.

Regards,

Alex

Answer 2

Hi,

The workflow that is failing for you (Microsoft.Windows.FileServer.DFSN.10.0.RoleServiceDiscovery) is related to a discovery which targets objects of type Microsoft.Windows.Server.10.0.Computer and I would suspect its permissions related.

Questions:

1. What version of the Microsoft.Windows.FileServer.DFSN.2016 Management Pack are you running?
2. What version of the Microsoft.Windows.Server.2016.Discovery Management pack are you running?

Actions:

1. Make sure you are running the latest version of the management packs.
2. Read carefully the requirements for accounts and permissions from the MP guides: Here is the link to download them: https://www.microsoft.com/en-us/download/details.aspx?id=57594

Marius - https://mariusene.com/