question

shankar431-9012 avatar image
0 Votes"
shankar431-9012 asked Crystal-MSFT commented

Event ID's 7015 and 7002 on SCOM 2019 management servers

Hi All,

On SCOM 2019 Management Servers we are receiving the events below in windows application logs.

1)Event ID :7015
The description for Event ID 7015 from source HealthService cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:
svcscom-naa
Logon failure: the user has not been granted the requested logon type at this computer.
1385L
SCOM_MG
Log name: Application

2)Event ID :7002
The description for Event ID 7002 from source HealthService cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:
svcscom-naa
SCOM_MG
Log on as a service
Log name: Application

Can you please let us know what action needs to be taken for the above mentioned Event ID's.
Also please let us know if we need to grant any other permission to svcscom-naa .

Regards,
Ravi shankar

msc-operations-manager
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

GeorgeMoise-0315 avatar image
0 Votes"
GeorgeMoise-0315 answered

Hi,

Does the user svcscom-naa have Log on as a Service permissions on the Computers where you got this error?

The following information was included with the event:
svcscom-naa
SCOM_MG
Log on as a service
Log name: Application





This article from Kevin might help - https://kevinholman.com/2019/03/14/security-changes-in-scom-2019-log-on-as-a-service/



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

shankar431-9012 avatar image
0 Votes"
shankar431-9012 answered

Hi George,

Thank you for the update.
Do we need to add this notification action account(svcscom-naa) in below location (Log on as a service) locally on the management servers.
Local Security Policy > Local Policies > User Rights Assignment > Log on as a service.

Kindly confirm.

Regards,
Ravi shankar

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Crystal-MSFT avatar image
0 Votes"
Crystal-MSFT answered Crystal-MSFT commented

@shankar431-9012, For the error we get, it seems the account didn't have enough permission. If the "Log on as a service" permission hasn't been granted to the account yet. we can follow the steps in the following link to add it and see if it is working.
https://docs.microsoft.com/en-us/system-center/scom/enable-service-logon?view=sc-om-2019

Hope it can help.


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@shankar431-9012, Hope everything is going well. Could you let us know if it is working after granting the required permission? If there's any update, feel free to let us know.

0 Votes 0 ·