Contact Info

Crumbtrail

ActiveXperts.com » Support » Serial Port Component » KB Article

Knowledge Base FAQ Items

 

Browse All Questions:

INSTALLATION


Q6500035: During installation, ActiveXperts Network Monitor Setup asks for Administrator credentials for its service. Is this required?

If you want to monitor member servers or domain controllers in your Active Directory domain, it's strongly recommended to enter Domain Administrator credentials.

For many tasks (like disk space checking, event log monitoring, and so on), Local Administrator rights are required on the monitored computers. By default, Domain/Enterprise Administrators are Local Administrators on domain member servers. If you do not enter a Domain- or Enterprise Administrator account during installation, you must configure an Administrator account for each check that requires it in the ActiveXperts Network Monitor software.


Q6500007: When I run the Installer, I get the following error message: "Error installing iKernel.exe (0xa00)". What's wrong?

Most probably, you don't have administrator rights on the machine where you install the product. Local administrator rights are required to install ActiveXperts Network Monitor on the computer.


Q6500060: I want to install ActiveXperts Network Monitor on a server that is also used for other purposes. Will it conflict with other software?

No, it won't. ActiveXperts Network Monitor doesn't install/replace any Windows systems DLL's. It makes use of Microsoft runtime libraries, but these are installed in ActiveXpert's installation directory and will only be used by ActiveXperts. ActiveXperts does not install components in the Windows directory or one of its subdirectories.


Q6500055: I want to move our ActiveXperts Network Monitor Engine service to another server. How to achieve this?

These are the steps to accomplish the migration to a new sever:

  1. Export the current configuration to save place. To do so, choose 'Configuration->Backup Configuration' from the 'File' menu in the Manager;
  2. On the new server, Restore your configuration in the same way as described in FAQ Item 6500005

Q6500020: I want to monitor several servers in my network. Do I need to install agents (or server-side software) on those servers?

ActiveXperts Network Monitor is agentless; no agents will be installed on the monitored servers. You only need to install the ActiveXperts Network Monitor Engine service on 1 central server in your network.


Q6500025: Does the installation of ActiveXperts Network Monitor require a reboot of my server?

No, a reboot is not required.


Q6500052: I want to change the ActiveXperts Network Monitor Engine service credentials. How can I do that?

Please do the following:

  1. In Windows, open the 'Administrative Tools' folder.
  2. Double-click 'Services'.
  3. Right-click the 'ActiveXperts Network Monitor' service, and then click 'Properties'.
  4. On the 'Log On' tab, select the account and provide the password (if necessary). Click 'Apply'.
  5. On the 'General' tab, click the Stop/Start button to restart the service.

Q6500050: The ActiveXperts Network Monitor Engine service fails to start. How do I know the reason for that?

To see why the ActiveXperts Network Monitor Engine service did not want to start, use the Windows Event Viewer.

Check the Application Log located in the 'Windows Log' of the Event Viewer, and search for the 'AxNmSvc' Event Source.
One of the most common reasons is, that you have assigned wrong credentials to the ActiveXperts Network Monitor Engine service. Use the Services Control applet to assign the right these credentials. Make sure that this account had (Domain) Administrator rights on the server where the ActiveXperts Network Monitor Engine service is running.


Q6500015: I'm unable to upgrade to the latest version. The installation keeps asking me to uninstall the software. Even after I uninstalled the product, it keeps telling me that. What is the problem?

ActiveXperts uses the InstallShield product for its installations. Only on rare occasions, InstallShield does not update its registry key after uninstall, so it will prompt you to uninstall the next time you start the installation. You can use this workaround:

  • Start the registry editor (REGEDIT.EXE);
  • Open the HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ key;
  • Delete the 53FD4AF2-59DC-48E0-B345-CF8491D34460 key.

Now, InstallShield won't ask to uninstall anymore.


Q6500012: I want to uninstall ActiveXperts Network Monitor manually. What are the steps?

The best way to uninstall ActiveXperts Network Monitor is by using the 'Add/Remove Programs' applet from the Operating System.
However, if you want to uninstall manually for some reason, use following steps to uninstall Network Monitor manually:

  • Stop the Network Monitor service by using the Services applet, or by typing NET STOP AXNMSVC from the command prompt;
  • Quit the Manager application;
  • Delete folder C:\Program Files\ActiveXperts\Network Monitor (or alternate directory) and all sub-directories;
  • Delete folder C:\Program Files\Common Files\ActiveXperts (or alternate directory);
  • Delete folder C:\ProgramData\\ActiveXperts\Network Monitor (or alternate directory). IMPORTANT: Make sure to make a backup of this folder first, as it contains the configuration file (CONFIG.SDF) and custom scripts!
  • Launch the registry editor (REGEDIT.EXE);
  • Open the HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ key;
  • Delete the 53FD4AF2-59DC-48E0-B345-CF8491D34460 key.

Q6500017: I want to re-install ActiveXperts Network Monitor. Can I install the product in the same folder on the filesystem as my previous installation?

There are two folder involved: the Program Data folder, default:
  C:\ProgramData\ActiveXperts\Network Monitor\
and the Program Files directory folder, default:
  C:\Program Files\ActiveXperts\Network Monitor\

On Uninstall, the Program Data folder is preserved, while the Program Files folder is deleted.

On Reinstall, if the same Program Data is selected, the installer will rename the previous Program Data folder (adding extension: '.saved') and allow you to continue using the selected name. When the installation is complete, the Manager will launch the Restore Wizard and suggest the '.saved' data folder to restore from.


Q6500006: I want to reinstall the software and use the default Data Folder 'C:\ProgramData\ActiveXperts\Network Monitor\'. However, Setup does not accept this Folder saying the the Folder is already in use. What should I do?

Setup tries to rename the previous Folder to 'C:\ProgramData\ActiveXperts\Network Monitor.saved', in order to allow you to Restore from this Folder after installation. Apparently, the rename fails.
There are a few common reasons why the Folder cannot be renamed:

  • One or more files are still open. For instance, a Log File, or a custom Powershell/VBScript File. Make sure to close all Files.
  • The Folder is still open, either in the File Explorer, or else by a Command Prompt.
  • You used ActiveXperts Web Access before, and the Web Server (IIS) is still pointing to 'C:\ProgramData\ActiveXperts\Network Monitor'. Try to stop the Web Server for a moment using the following command from the command prompt:
    NET STOP W3SVC
    Then, continue Setup. Do NOT forget to restart the Web Server (NET START W3SVC) after Setup has completed.
  • The Folder is accessed through a network share. Try to stop the 'Server' service for a moment using the following command from the command prompt:
    NET STOP SERVER
    Then, continue Setup. Do NOT forget to restart the Web Server (NET START SERVER) after Setup has completed.

If you cannot figure it out, cancel Setup, reboot the system, and try again.


Q6500003: How do I know what's new in the latest version of the ActiveXperts Network Monitor?

For a list of new features, enhancements and fixes, see ActiveXperts Network Monitor Release Notes.


Q6500005: I want to upgrade to the latest version. What is the procedure for upgrading?

ActiveXperts lets you import any configuration created with an earlier version. That means: all checks, global settings, statistical database and custom scripts.

On ActiveXperts client workstations (if any):

  • If you have client workstations running 'ActiveXperts Network Monitor Manager' to connect to the remote ActiveXperts monitoring server, uninstall the software using the 'Add/Remove Programs' applet on each client workstation.

On the central ActiveXperts monitoring server:

  1. Uninstall 'ActiveXperts Network Monitor' using the 'Add/Remove Programs' applet in the Control Panel. NOTE: The ActiveXperts Program Data folder (default: C:\ProgramData\ActiveXperts\Network Monitor\) will be preserved so you can Restore it in Step 6.
  2. Reboot the server.
  3. Download the latest version of ActiveXperts Network Monitor from the ActiveXperts Download Site
  4. Run the installation; the installation will rename the previous ActiveXperts Program Data folder. Default rename will be:
    C:\ProgramData\ActiveXperts\Network Monitor.saved\.
  5. After installation is complete, you'll be prompted to Restore your previous configuration using a Wizard.
    Note that if you cancel this Wizard, you can always use 'File->Configuration->Restore Configuration' at a later stage.
  6. Optionally, Manually Restore custom scripts (if any). If you use custom scripts (.vbs, .ps1, .cmd or .sh), copy the files manually to the scripts directory. Default script folder:
    C:\ProgramData\ActiveXperts\Network Monitor\Scripts\

If you install Network Monitor in the same directory as the previous Network Monitor version, the configuration is automatically converted. Otherwise, you need to import the previous configuration.
IMPORTANT: If you want to use the same Data Folder (default: 'C:\ProgramData\ActiveXperts\Network Monitor') but the Folder is in use, please see FAQ #6500006.

To (re)install the manager application on remote PC(s), you must (re)create the share in the Remote Manager tab of the 'Remote Management' dialog (Tools menu).

CONFIGURATION & ADMINISTRATION


Q6600137: I want the strongest encryption of my passwords in the CONFIG.SDF file. How to achieve this?

The passwords are already encrypted according to a strong, proprietary encryption method. If oyu want most encrypption, we recommend to use EFS encryption of the CONFIG.SDF file, and use the AES256 encryption algorith.

To encrypt:

  • Open File Explorer from your Start menu and navigate to the file you want to encrypt.
  • Right-click on the file and select Properties. Then, click on the Advanced button.
  • Check the box next to Encrypt contents to secure data. Click OK, then Apply.
  • Choose the option to encrypt the file only/
  • Back up your encryption key.

Now, make sure that the ActiveXperts Network Monitor Engine service is also aware of the encryption. In order for the service to read the CONFIG.SDF file, you'll need to Import the key into the Personal Certificate Store.To do so:

  • Logon interactivily using the ActiveXperts Network Monitor Engine service account
  • Open the Microsoft Management Console (MMC) by pressing Win + R, typing mmc, and pressing Enter.
  • In MMC, go to File > Add/Remove Snap-in.
  • Select 'Certificates' and click Add.
  • Choose 'My user account' and click Finish.
  • Expand the 'Certificates - Current User' tree.
  • Right-click on the 'Personal' folder, select All Tasks, and then Import.
  • Follow the Certificate Import Wizard to import your private key (usually a .pfx file).
  • When prompted, enter the password for the private key.
  • Once imported, you should be able to access the EFS-encrypted files with that user account.

Q6600110: Is there a scripted way to put checks on hold?
See FAQ Item 6650020.
Q6600135: Are my passwords stored encrypted in the CONFIG.SDF file?

Yes, all passwords are stored encrypted in the CONFIG.SDF file. The CONFIG.SDF file is a Microsoft SQL Compact Edition File. The encryption used is a strong, proprietary encryption.

If you want maximum encryption, we recommend to encrypt the CONFIG.SDF file using EFS and use AES256 as the encryption algortithm.

To read more, please see FAQ Q6600137.


Q6600130: I want to execute a SQL query to modify data in the CONFIG.SDF configuration database file using a sql script. Is this possible?

Yes, it is possible. The database is a Microsoft SQL Server Compact Edition file, and can be opened in Microsoft SQL Server Management Studio (part of Microsoft SQL Server):

  • Launch SQL Server Management Studio;
  • In the 'Object Explorer' window, select the 'Connect...' drop down box, and select 'SQL Server Compact...';
  • Specify the 'Database file' and click 'Connect'.

You can now execute your database queries.

Please note that all checks are stored in the 'Nodes' table. The 'Nodes' table contains all folders and checks data.


Q6600030: I want to merge two configuration files from different servers into one configuration file. What is the procedure for that?

Let the ActiveXperts Helpdesk team do this for you; free of charge if you have a valid maintenance contract.

Please contact ActiveXperts Support via e-mail and send them the two config SDF files as e-mail attachments.
Or, upload the two files to a secure file transfer service like WeTranfer, and send us the URL so we can download.

our team will merge the files and send the resulting configuration file back to you, either via e-mail or else via WeTransfer.


Q6600132: I want to make changes in the CONFIG.SDF configuration database file using a script or program. Is it possible?

Yes, that is possible. See Configuration API FAQ items.


Q6600125: Can I use an Active Directory Managed Service Account to run ActiveXperts?

Yes you can. You need to create a Managed Service Account in Active Directory first. After creation, you need to assign the account to the ActiveXperts Network Monitor Engine service in the 'Services' applet in Windows.

How to create an Active Directory Managed Service account

Start a new Powershell command prompt on the server where you want to run ActiveXperts, to execute the commands to create and install the new account.

Create a new service account like this (we create account 'MyAcc1' in domain 'MYAD' as an example):

New-ADServiceAccount -Name "MyAcc1" -RestrictToSingleComputer

Next, add the new account to Active Directory:

Add-ADComputerServiceAccount -Identity MYAD -ServiceAccount "MyAcc1"

Next step is to install service account in Active Directory:

Install-ADServiceAccount -Identity "MyAcc1"

How to associate the Active Directory Managed Service account to ActiveXperts

To run the ActiveXperts Network Monitor Engine service using the Active Directory Managed Service Account, please do the following:

  • Make sure that ActiveXperts Network Monitor is installed, running under any account (for instance, the 'Local System' account);
  • Start the Windows 'Services' applet, for instance from the 'Windows Admistrative Tools' folder;
  • Double-click on the 'ActiveXperts Network Monitor Engine' service to open up the Properties window;
  • Select the 'Log On' tab;
  • select the 'This account' radio button;
  • Browse for the Managed Service account (e.g.: 'MyAcc1') and select it.
  • Press OK and restart the service.

Q6600140: When I start the ActiveXperts Network Monitor Engine service, I get the following error: "ActiveXperts Network Monitor Engine could not start due to a configuration consistency failure (error 25202)". What is the problem?

Please do the following:

  • In the Manager application, choose File->Properties
  • Make a screenshot of the 'ActiveXperts Network Monitor Configuration' window and send it by e-mail to support@activexperts.com.

Our helpdesk will handle the call as soon as possible.


Q6600020: I want to rename the hostname (NetBIOS) of the server where the ActiveXperts Network Monitor Engine service is running. Is there anything I need to change in the ActiveXperts configuration?

You do not need to make any changes. It is recommended to restart the ActiveXperts Network Monitor Engine service, as it uses the NetBIOS hostname in its Alert Notifications, and this name is retrieved only once on service startup.


Q6600025: Can I change the name of the workstation where a Manager application is running on?

You can change the name of the Windows machine where the Manager application is running on. It will not affect the ActiveXperts Network Monitor Manager operation.


Q6600100: When I click on the 'service' icon in the ActiveXperts Network Monitor toolbar, I cannot stop or start the ActiveXperts Network Monitor Engine service with error "Unable to execute command. Make sure you are an Administrator". What can I do?

There can be two reasons for that:

  • You're not logged on as an Administrator. You must be an Administrator of the computer in order to query/stop/start a service;
  • Windows UAC (User Access Control) requires you to use the 'Run As Administrator' option in order to stop/start the service. One way to do this is, is by pressing the SHIFT key and hold while you right-click the Manager shortcut item in Windows Start menu. Then, choose 'Run As Administrator'.

Q6600120: I want to give read-only access to my 1st line helpdesk staff. They should be able to view the status of the network, but they're not allowed to make changes to the configuration. Is this possible?

Yes that is possible. Access to the configuration of ActiveXperts Network Monitor is controlled by Operator Roles. Allow full control to any user on all configuration aspects, or allow only predefined operators to access the configuration and associate permissions to those operators.

Choose 'Options' from the 'Tools' menu, and select the 'Operators and Roles' tab. Read more in the ActiveXperts Network Monitor manual, chapter 'Operators and Roles'.


Q6600010: When I start the Manager, I get Error '25004 "Unable to open Configuration Database".

When you start the Manager and get Error 25004: "Unable to open Configuration Database", there's most probably a security issue where the ActiveXperts Network Monitor Manager cannot read the Configuration Database (CONFIG.SDF). The application will close immediately.

The easiest way to find this out, is by launching the Manager using the 'Run As Administrator' option. One way to do this is, is by pressing the SHIFT key and hold while you right-click the Manager shortcut item in Windows Start menu. Then, choose 'Run As Administrator'.

Once confirmed that it is a security issue, check out your NTFS permissions on the ActiveXperts installation directory (default: 'C:\ProgramData\ActiveXperts\Network Monitor').

CONFIGURATION API


Q6650040: I would like to create new checks, in an automated way.

Use the following script for that:
  C:\ProgramData\ActiveXperts\Network Monitor\Configuration API\VBScript\CreateCheck.ps1  (Powershell)
or
  C:\ProgramData\ActiveXperts\Network Monitor\Configuration API\VBScript\CreateCheck.vbs  (VBScript)


Q6650030: How can I display all properties of a particular Check?

Use the following script for that:
  C:\ProgramData\ActiveXperts\Network Monitor\Configuration API\VBScript\ShowCheck.ps1  (Powershell)
or
  C:\ProgramData\ActiveXperts\Network Monitor\Configuration API\VBScript\ShowCheck.vbs  (VBScript)


Q6650210: Can I use the Configration API in VB.NET?

If your Visual Studio version still supports VB.NET, it is possible. VB.NET has become less prominet in recent versions of Visual Studio.

To write a VB.NET based console application, please use the following steps:

  • Launch Microsoft Visual Studio;
  • Create a new 'VB.NET Console Project'
  • In the Project context menu, choose 'Add->COM Reference...' and 'ActiveXperts Network Monitor Configuration API'
  • In your program source code, include the 'ActiveXperts Network Monitor Configuration API' namespace like this:
      Imports AXNMCFGLib
  • Declare and create a new Network Monitor Config API object like this:
      Dim objNMConfig As NMConfig = New NMConfig()

Finally, start writing your program like this:

Imports AXNMCFGLib
Dim objNMConfig As NMConfig = New NMConfig()
Console.WriteLine("ActiveXperts Network Monitor API: {0}" & vbCrLf & "Build: {1}" & vbCrLf & "Module: {2}", 
                   objNMConfig.Version, objNMConfig.Module, objNMConfig.Build)

Add your functionality using the Configuration API Manual and the Powershelll/VBScript samples included with the software.
Default Folder: C:\ProgramData\ActiveXperts\Network Monitor\Configuration API\


Q6650200: Can I use the Configration API in CSharp.NET?

Sure. To write a .NET based console application, please use the following steps:

  • Launch Microsoft Visual Studio;
  • Create a new '.NET Console Project'
  • In the Project context menu, choose 'Add->COM Reference...' and 'ActiveXperts Network Monitor Configuration API'
  • In your program source code, include the 'ActiveXperts Network Monitor Configuration API' namespace like this:
      using AXNMCFGLib;
  • Declare and create a new Network Monitor Config API object like this:
      NMConfig objNMConfig = new NMConfig();

Finally, start writing your program like this:

using AXNMCFGLib;

NMConfig objNMConfig = new NMConfig(); // Create instance of COM Object

Console.WriteLine("ActiveXperts Network Monitor API {0}\nBuild: {1}\nModule: {2}\n",
                   objNMConfig.Version, objNMConfig.Build, objNMConfig.Module);

Add your functionality using the Configuration API Manual and the Powershelll/VBScript samples included with the software.
Default Folder: C:\ProgramData\ActiveXperts\Network Monitor\Configuration API\


Q6650020: I want to put certain checks 'On Hold' in a scripted way, so I can schedule this job.

Use the following script for that:
  C:\ProgramData\ActiveXperts\Network Monitor\Configuration API\VBScript\HoldChecks.ps1  (Powershell)
or
  C:\ProgramData\ActiveXperts\Network Monitor\Configuration API\VBScript\HoldChecks.vbs  (VBScript)


Q6650010: I want to modify checks in the configuration. Can this be achieved programmatically?

Sure. There are samples for Powershell and VBScript in the following default Folder:
  C:\ProgramData\ActiveXperts\Network Monitor\Configuration API\Powershell\
and
  C:\ProgramData\ActiveXperts\Network Monitor\Configuration API\VBScript\

Check out Powershell scripts ModifyChecks.ps1 and ModifyCheck.ps1, or VBScript scripts ModifyChecks.vps and ModifyCheck.vbs.

MONITORING CPU USAGE


Q6700020: I'm still having problems monitoring CPU usage. I tried the Windows WMIC utility but I'm still not able to find the reason.

First, make sure you've tried WMIC. See FAQ #6700010.

If that doesn't help you out, please try our CPU Diagnostic Tool. You can launch it from the Manager's menu:
Tools->Diagnostic Tools->CPU Diagnostic Tool

The tool generates a log file. Please send the log to support@activexperts.com.


Q6700010: I'm having problems monitoring CPU usage on a remote server. How can I troubleshoot?

ActiveXperts uses WMI (Windows Management Instrumentation) to collect data about (remote) Windows machines. WMI is part of Windows operating systems and installed by default. First check out the following:

WMI can use WinRM (preferred), or DCOM (legacy). In ActiveXperts, the WMI operation mode can be set per server. By default, the global WMI operation mode is used; see Tools->Options->{Windows Machines} in the Manager application.

Ensure that Windows WMI services are running on the monitoring server and the monitored server, and that firewall settings do not prevent you from accessing the remote computer via WMI.

 

Troubelshoot CPU monitoring using WMI/WinRM

Run the following Powershell command to query CPU usage using WMI through WinRM:

Get-WSManInstance -ComputerName computername -Enumerate -ResourceURI wmicimv2/* -Filter "SELECT * FROM Win32_Processor WHERE DeviceID='CPU0'" | Select-Object -ExpandProperty LoadPercentage

or (with alternate credentials):

# Prompt to enter the username and password
$objCred = Get-Credential 
# Call Get-WSManInstance
Get-WSManInstance -ComputerName computername -Credential $objCred -Enumerate -ResourceURI wmicimv2/* -Filter "SELECT * FROM Win32_Processor WHERE DeviceID='CPU0'" |  Select-Object -ExpandProperty LoadPercentage

To verify WMI access through WinRM, see FAQ #Q7260015

 

Troubelshoot CPU monitoring using WMI/DCOM

Run the following command to query CPU usage using WMI through DCOM:

WMIC /node:computername PATH Win32_Processor WHERE DeviceID='CPU0' GET LoadPercentage

or (with alternate credentials):

WMIC /node:computername /user:user /password:password PATH Win32_Processor WHERE DeviceID='CPU0' GET LoadPercentage

To verify WMI access through DCOM, see FAQ #Q7250015

MONITORING DATABASES


Q6750033: I'm trying to monitor our Oracle database, but I can't figure out what the correct connection string is. Can you please assist?

There's no fixed connection string syntax for Oracle; the format of the connection string depends on the Oracle version, the authentication method and the type of security used. Please check the following web site for more information about Oracle connection strings: www.connectionstrings.com.


Q6750010: I'm having problems formatting a database connection string for our MS SQL server, how should this connection string be formatted?

Check out our online Database Monitoring Guidelines to read more about how to setup an MS SQL / ADO database check.


Q6750025: I can't get my ODBC check to work. What should I do?

First check your System DSN settings, and test them from the Control Panel. Be sure you are using the right DSN with Network Monitor. Or use ADO as an alternative; ADO works similar as ODBC but doesn't require DSN configuration.


Q6750035: What databases can be monitored by ActiveXperts?

There's native support for MS SQL and Oracle. Besides that, any ODBC and ADO compliant database is supported. To read more about ADO, click here.


Q6750030: When monitoring my Oracle database, Network Monitor gives me the following error: 'Failed to load Oracle Client modules'.

To monitor Oracle with ActiveXperts Network Monitor, you need to have installed one of the following Oracle clients:

  • Standard Oracle client;
  • Oracle Instant Client.

If you do not want to run Oracle applications on your monitoring server, but only want to check Oracle availability through ActiveXperts, it is recommended to install the Oracle Instant Client. It is a free product, and can be downloaded from the Oracle download area.

For more information on monitoring Oracle using ActiveXperts, click here.

MONITORING DHCP


Q6770010: I get a generic SNMP error on monitoring my DHCP server. What's wrong?

Monitoring Windows based DHCP server is based on SNMP. You need your SNMP service to be running on your DHCP server.

Unfortunately, Microsoft stops supporting the facility to monitor DHCP server through SNMP (and WMI) for the most recent server operating systems and most recent patch levels. There's a lot of information, questions and complaints on that on the internet. Read more on this in the article SNMP OID to get DHCP scopes on the Microsoft web site.

ActiveXperts is waiting for Microsoft for an alternate way to monitor SHCP servers and DHCP scopes.

MONITORING DISK DRIVES/DISK SPACE


Q6800030: Can I monitor NetApp volumes using ActiveXperts Network Monitor?

Yes, you can, but only through SNMP. The vast majority of NetApp drives support the SNMP v2c protocol. This allows you to monitor any performance counter of your NetApp volume, including drive space.


Q6800010: I'm having problems monitoring Disk Drives usage on a remote server. How can I troubleshoot?

ActiveXperts uses WMI (Windows Management Instrumentation) to collect data about (remote) Windows machines. WMI is part of Windows operating systems and installed by default. First check out the following:

WMI can use WinRM (preferred), or DCOM (legacy). In ActiveXperts, the WMI operation mode can be set per server. By default, the global WMI operation mode is used; see Tools->Options->{Windows Machines} in the Manager application.

Ensure that Windows WMI services are running on the monitoring server and the monitored server, and that firewall settings do not prevent you from accessing the remote computer via WMI.

 

Troubelshoot Disk Drives monitoring using WMI/WinRM

Run the following Powershell command to query a Disk Drive using WMI through WinRM:

Get-WSManInstance -ComputerName computername -Enumerate -ResourceURI wmicimv2/* -Filter "SELECT * FROM Win32_DiskDrive  WHERE Index='0'" | Select-Object -ExpandProperty Status

or (with alternate credentials):

# Prompt to enter the username and password
$objCred = Get-Credential 
# Call Get-WSManInstance
Get-WSManInstance -ComputerName computername -Credential $objCred -Enumerate -ResourceURI wmicimv2/* -Filter "SELECT * FROM Win32_DiskDrive WHERE Index='0'" |  Select-Object -ExpandProperty Status

To verify WMI access through WinRM, see FAQ #Q7260015

 

Troubelshoot Disk Drive monitoring using WMI/DCOM

Run the following command to query a Disk Drive using WMI through DCOM:

WMIC /node:computername PATH Win32_DiskDrive WHERE Index='0' GET Status

or (with alternate credentials):

WMIC /node:computername /user:user /password:password PATH Win32_DiskDrive WHERE Index='0' GET Status

To verify WMI access through DCOM, see FAQ #Q7250015


Q6800020: I have a RAID configuration (RAID5). I want to get a notification when one of the disks fails, but can't find how to configure it in Network Monitor. Please help.

The operating system has access to RAID set as it were one physical drive. So, it is not a simple matter of checking a disk. A failure of a disk in a RAID can only be determined by the manufacturer's hardware driver or management software. So there are basically two options to check such a failure:

  • Event Log - most manufacturer's driver software generate an event in the Event Log. For instance, Compaq Insight Manager generates an event in the Event Viewer's System Log when there's a problem with a disk. Let ActiveXperts Network Monitor scan the Event Log for such events;
  • SNMP - more and more manufacturers support SNMP for their RAID controller. ActiveXperts fully supports SNMPv1, SNMPv2c and SNMPv3. Check the vendor's manual for relevant SNMP OID's.

Q6800015: I want to monitor my Disk Drives. Will ActiveXperts Network Monitor tell me when a disk is not healthy?

Yes, that is exactly what the 'Disk Drive' check does. When a disk becomes 'not healthy' or unavailable, Network Monitor will let you know.


Q6800025: I want to check disk space of my Linux and Unix servers. Is this possible?

To monitor Linux and Unix disks, use an ActiveXperts SSH check. There are scripts included in ActiveXperts to monitor disk usage and disk free space, as well as various other aspects.


Q6800017: When trying to monitor disk space on a remote workstation, I get the following error: "Result is: Uncertain" with Last Response saying: "Unable to retrieve space for disk [\\Wks001\C$]". What is the problem?

This problem only applies to v.2016 or older. Later versions have the Drive/Disk Space Check based on WMI.
There can be a few reasons. Most probably, the problem is not related to ActiveXperts Network Monitor at all. A few reasons for not being able to monitor the disk:

  • Administrative shares (e.g. \\server\c$) are disabled. Please check on the monitored server first to access that share (for instance by typing \\server\c$ in the Explorer's address bar);
  • The administrative shares have different names than default (default: c$, d$, etc.)
  • Firewall is enabled. If the Windows firewall is enabled on the monitored computer, you cannot access the share from a remote location;
  • Credentials are not sufficient. ActiveXperts Network Monitor uses the ActiveXperts Network Monitor Engine service credentials to monitor the share. Check the service account. Also, try to access the share from the monitored machine using the Windows Explorer, but make sure that you have logged on interactively on the monitoring machine with the same credentails as useed for the service.

Q6800012: I want to monitor a mapped network drive. The drive mapping is named T: and it maps to a network share. ActiveXperts Network Monitor is not able to monitor this drive mapping. Why is it?

Persistent drive mappings defined per-user (not per computer) and are only restored on interactive logon. Since ActiveXperts Network Monitor runs as a service in the background, it does not logon interactive. As a result, drive mappings cannot be monitored. You can only monitor drives and folders using a UNC formatted share network folder.

MONITORING DNS


Q6810010: When performing a DNS check with type 'ANY', no DNS records exist. But if I specify type 'A', DNS records do exist. Why is it?

With most DNS servers, using a DSN query with the 'ANY' type should return all known DNS records for the specified host.

However, with some DNS server, the servers only return a 'CNAME' record. ActiveXperts Network Monitor reports that no DNS records exist.

With these DNS servers, you should specifying 'A', 'AAAA', 'NS', 'MX' or other explicitely.

One example of DNS servers suffering from this problem is the public Google DNS server (8.8.8.8).


Q6810020: I'm having problems monitoring my DNS server. How can I troubleshoot?

Please try the DNS Diagnostic Tool. You can launch it from the ActiveXperts Manager's menu:
Tools->Diagnostic Tools->DNS Diagnostic Tool

The tool generates a log file. Please send the log to support@activexperts.com.

MONITORING DYNAMICS


Q6820010: Which versions of Microsoft Dynamics can be monitored?

You can monitor the following MS Dynamics suites:

  • MS Dynamics AX
  • MS Dynamics NAV
  • MS Dynamics CRM
  • MS Dynamics SL

Q6820020: Do you have a list of Performance Counters for MS Dynamics, so I select relevant performance counters?

Yes, there's a list of Performance Counters here: activexperts.com/support/network-monitor/online/dynamics-counters/.

MONITORING ENVIRONMENTAL - TEMPERATURE/HUMIDITY/MORE


Q6830050: I'm using the AVTech Room Alert 32S device. Where can I find the SNMP MIB file?

The MIB file is provided as part of the installation, and can be found at the following location:

C:\ProgramData\ActiveXperts\Network Monitor\Mibs\


Q6830060: How to setup a trap based alarm in ActiveXperts?

As the Trap OID is not unique to the sensor, but is used for all sensors, there must be another way to distinguish the sensor. We do this by constructing a regular expression, accepting/not accepting the received SNMP Trap.

For example, if you have a Door Sensor and a Motion sensor (both are Switch Sensors) on a Room Alert 32S device with IP 10.1.1.155, this is what needs to be done:

  • In the AVTech Room Alert device settings, make sure both sensors have unique descriptions defined. For instance 'SwitchSensor01: Door Sensor' and 'SwitchSensor02: 'Motion Sensor';
  • In the AVTech Room Alert device settings, make sure a trap is sent out on failure. Make sure it is sent to the IP address of the ActiveXperts monitoring server;
  • In the ActiveXperts Manager, create a new Check for the Door sensor by selecting [Environmental Monitoring]->'Any Check (SNMP Trap based)'
  • Use the following parameters in the configuration dialog: Accept Trap(s) from host: 10.1.1.155
    Accept OID Sym/Num: iso.org.dod.internet.private.enterprises.avtech.products.roomalert32S.traps.alarmmessage.0
    Accept Only if Data Value matches following Regular Expression: .*Door.*, or ^.*SwitchSensor01.*$
  • Leave all other fields default
  • Create a new Check in the same way, but make sure the regular expression is different, e.g.: ^.*Motion.*$

Q6830027: Do you have a list of Sensatronics OID's that can be monitored by Network Monitor? We use the EM1 model.

For a list of Sensatronics EM1 OID's, click here.


Q6830010: Your web site states that an AVTech Room Alert device is recommended. I already have a device from NTI (Network Technologies) that does exactly the same. Can I use it?

Yes, you can. The NTI device has an SNMP interface, like most environmental monitors. Simply look up the SNMP OID identifiers in the NTI manual, and use the ActiveXperts' SNMP check to monitor temperature, humidity or wetness.


Q6830020: Can you provide me with a list of all AVTech devices supported by your software?

For a list of supported Sensatronics models, click here.


Q6830015: We purchased a Sensatronics EM1 device. Our network policy requires to use SNMP. You built-in temperature seems to be based on Sensatronics' web interface. How can I use SNMP to monitor temperature?

The Sensatronics EM1 supports SNMP. SNMP is enabled by default. You just need to enter a new SNMP check in Network Monitor and enter the appropriate SNMP OID's. Check the Sensatronics EM1 manual to get a list of supported OID's.


Q6830025: We use a Sensatronics EM1 device. We do know the default IP address of this device. How can we set it?

To configure the unit:

  • Determine a static IP and net mask that is available on the network;
  • Connect the unit to a PC's serial port, using the supplied RS-232 cable;
  • Start a terminal emulator program, for instance: HyperTerminal;
  • Set the RS-232 port settings to 9600,8,N,1 (no flow control);
  • Press Return to reach the main menu;
  • From the main menu, you will be able to set the IP address.

Q6830040: After the upgrade to the latest ActiveXperts Network Monitor version, all Sensatronics checks fail.

After the upgrade ActiveXperts Network Monitor to the latest version, some Sensatronics devices cannot be monitored, reporting "Unable to connect; no response received from remote server", even though the device can be pinged.

The reason for this problem is the fact that ActiveXperts uses the WinHTTP library of the Operating System. In v.7 and older, ActiveXperts used a separate WinHTTP5 library (not part of the OS). The WinHTTP library of a recent operating systems do NOT support HTTP0.9 anymore. And some Sensatronics models with older firmware have a HTTP0.9 web server inside.

To fix the problem, perform the following steps:

  • Open the Registry Editor (REGEDIT.EXE)
  • Open HKLM\Software\ActiveXperts\Network Monitor\Sensatronics\ and set Http09CompatibilityFlag to 1
  • Quit the the ActiveXperts Network Monitor Manager application
  • Restart the ActiveXperts Network Monitor Engine service

NOTE: If the registry entry 'Http09CompatibilityFlag' is NOT there, start the Manager application in Administrator modus ('Run As Administrator') and create a new EM1 check once more. Make sure you query the device in the configuration window. Now, the 'Http09CompatibilityFlag' should be there.

MONITORING EVENT LOG


Q6850003: When I try to setup a new Event Log check in the Manager for one of our old Windows 2003 servers, I get an error saying: "Unable to retrieve a list of Event Logs from the remote computer. The machine is either not accessible, or the remote computer does not run Windows 2008 or Windows 7 or higher.".

If you have Network Monitor running on Windows 7 workstation or higher, or Windows 2008 workstation or higher, you can monitor any Windows event log, not only the standard Application/System/Security logs, but also the extended .evtx logs. You can query any windows computers except Windows XP, Windows 2000 and Windows 2003.


Q6850002: When I try to setup a new Event Log check in the Manager, I get the error: "Failed to initialize library [axsnmwev.dll]. You can only query event logs on Windows 2008 (or higher) server platforms, or Windows 7 (or higher) workstations."

If you have ActiveXperts Network Monitor running on a Windows 2003 (R2) server, you can monitor ONLY standard Application/System/Security logs on remote computers.

The reason for this is the fact that the Windows API on the Windows 2003 operating system does not support extended event logs (.evtx).


Q6850030: I am trying to monitor the Event Log with a VBScript check. However the result is always "uncertain", even when the built-in Event Log monitor shows an error. What is the uncertain state? Is this a permissions problem?

Most probably, it is uncertain because there's an error in the script as a result of a 'null' object. This happens when the remote machine cannot be accessed. Please try to temporarily remove the 'On Error Resume Next' statements in the script. Network Monitor will then show the line where the script error occurs. Most probably, it is due to a WMI security problem. To read more about that, click here.


Q6850020: Is there a way to include event details in e-mail notifications?

Yes, it is possible. First of all, make use of the EventLog.vbs VBScript check or EventLog.ps1 Powershell check. The scripts Event Logs in the same way as the built-in check. With a small modification the script, you can include event details in your notifications.


Q6850010: I want to monitor multiple Event Logs in one Event Log check. Is this possible?

In the standard built-in Event Log check, you can only do basic Event Log checking. To do more advanced Event Log monitoring, you should use the EventLog.vbs VBscript or EventLog.ps1 PowerShell script that ships with the product, and customize it to meet your requirements.


Q6850015: I'm using ActiveXperts Network Monitor for monitoring all Event Logs in my network, but I noticed that the software is consuming a lot of bandwidth. What should I do?

Event Log monitoring consumes a lot of network bandwidth, and can really decrease the performance of your network, especially with large Event Logs. Unfortunately, there's nothing we can do about it. Just try any WMI script by Microsoft that scans event logs over the network and you'll see. In general, do not maintain large event logs, e.g. only log events from the last week, and (important!) import your event log data in some Event Log Archiver program (there are many). Also, do not query event logs frequently, not like every 5 minutes, but for instance once every hour.

MONITORING EXCHANGE


Q6870010: I'm having problems with monitoring MS Exchange: The error I get is: "Win32_PerfRawData_MSExchangeIS_MSExchangeIS class does not exist." What should I do?

This problem occurs because Windows Management Instrumentation (WMI) uses AutoDiscovery/AutoPurge (ADAP) to build its internal performance counter table. If the particular Exchange service on the monitored computer was not started when the WMI ADAP process is started, the performance counters are not transferred to WMI.

Please run the following command from the command line on the monitored computer:

  wmiadap /f

and then restart the wmi-service.

MONITORING FTP(S)/SFTP


Q6890050: When I run an SFtp check, I get an error saying: 'ERROR 22943: Unable to instantiate SFtp provider DLL" . What's wrong?

The Microsoft C and C++ (MSVC) Runtime Libraries are missing on your Windows operating system. These libraries are required by the following ActiveXperts Network Monitor checks:

  • Ssh
  • Scp
  • SFtp

The above checks are built by using Microsoft C and C++ tools.

Solution

Please download the Microsoft Visual C++ Redistributable package from the Microsoft site, and run the setup.
Please visit the Microsoft Visual C++ Redistributable downloads page and download/install the latest supported x64/x86 version.


Q6890030: Is SFTP supported?

Yes, ActiveXperts suppports SFTP (SSH File Transfer protocol).

Please note that FTPS (FTP over SSL) is also supported.


Q6890020: Is FTPS supported?

Yes, FTPS (FTP over SSL) is supported.

ActiveXperts also supports SFTP (SSH File Transfer protocol).


Q6890010: I can't monitor my Linux-based FTP servers, but I can monitor my Windows-based FTP servers. What's wrong?

Most Linux flavors use case-sensitive URL's, and Windows doesn't. Please check if this is the problem.

MONITORING HTTP(S)


Q6900040: I want to monitor a web site and match a pattern; the pattern consists of one fixed word "John" followed by either the word "Doe" or "Deere". How can match this pattern?

It is easy by the use of a regular expression. Make sure you enable the 'Use Regular Expressions' checkbox in the check's configuration window, and enter the following pattern:
    John (Doe|Deere)


Q6900050: I am monitoring our web site but I get an error "22407: No response received from remote server". In Google Chrome, I can access the site. What could be the reason?

Most probably, you're running the ActiveXperts on an older Windows platform.

ActiveXperts uses the WinHTTP library of the Operating System to monitor web sites. If you run ActiveXperts on Microsoft Windows 2012R2 or older, you will definitely face problems on many sites.

So, to run HTTPs checks without problems, run ActiveXperts on Windows 2016 or higher.


Q6900015: I want to monitor multiple HTTP(s), but I want to control which TLS and SSL protocols are allowed: Can this be done?

Yes, you can enable/disable these secure protocols individually for each web site that you check. The following protocols are supported: TLS1.0, TLS1.1, TLS1.2, TLS1.3, SSL2 and SSL3.

Be careful with SSL2: some servers deny web requests when the client (like ActiveXperts Network Monitor) allows an SSL2 session. For that reason, SSL2 is disabled by default.


Q6900020: Is the HTTP check case sensitive?

It depends: on LINUX and UNIX, the URL's may be case sensitive, so must enter URL's with the right lower/uppercase characters. The HTTP contents check is NOT case sensitive.


Q6900010: When I check a particular web site, Network Monitor is able to connect to the web site, but is not able to match the pattern. I checked with my browser, the pattern is there. What's the reason?

Most probably, this web site contains a redirection to other pages, or it includes frames. ActiveXperts Network Monitor does NOT redirect to a linked page, it only checks the actual page, on purpose.

The easiest way to find this out, is by using HTTP Client Diagnostic Utility (Diagnostic Utilities are available from the 'Tools' menu).

You will see the contents as it is retrieved by the ActiveXperts Network Monitor Engine service, and you'll be able to find out the reason. Most probably, you should match your pattern against one of the include pages of the main page.

MONITORING ICMP


Q6910020: I want to use Windows TELNET utility to check a remote port, but the TELNET utility is not installed. How can I install TELNET?

The Windows TELNET utility is not installed by default. But it is included in the distribution files of Windows. To install TELNET, start a new command prompt in Admin mode and type:
dism /online /Enable-Feature /FeatureName:TelnetClient


Q6910010: My ICMP/TCP check is not working. How can I troubleshoot?

First of all, make sure you make only one request at a time. You can set this value in the ICMP/TCP Check configuration window. You should use '1' because some servers may block your request when there are too many requests in a short time.
For the same reason, decrease your Check Frequence interva and set it to '1'.

If that does not help, try the built-in Windows TELNET utility from the command-line on the monitoring server to troubleshoot, like this:

  • Open a new command prompt on the monitoring server;
  • Type:
    TELNET , e.g.:
    TELNET myserver.northwindtraders.intra 3389
  • If a blank screen appears, the connection was established successfully

The Windows TELNET utility is not installed by default, but is part of the distribiotn files of Windows. To install TELNET, start a new command prompt in Admin mode and type:
dism /online /Enable-Feature /FeatureName:TelnetClient

MONITORING IIS APPLICATION POOLS


Q6920010: I'm monitoring my IIS Application Pools using ActiveXperts, but on one server I receive the error "WMI Error 0x8004100E: The specified namespace did not exist on the server.". What's wrong?

First of all, make sure that other WMI based checks on that server do work fine. For instance, try to monitor the CPU usage on that server using the ActiveXpert CPU check.

Then, make sure that you have installed the 'IIS Management Scripts and Tools' component of the 'Web Server' role. The 'IIS Management Scripts and Tools' component is NOT installed by default!
To do so, start the 'Server Manager' tool of Windows, select the 'Dashboard' tab, and choose 'Add roles and features'. Configure the 'Web Server' role to include the 'IIS Management Scripts and Tools' component.

MONITORING MEMORY


Q6930030: It is possible to monitor Hyper-V Dynamic Memory through ActiveXperts Network Monitor?

There is no built-in Hyper-V Dynamic Memory check in Network Monitor.

However, it is very well possible to monitor Hyper-V Dynamic Memory performance counters through our Performance Counter check. There's a good article on these counters here:
windowsitpro.com/virtualization/q-what-are-new-performance-counters-hyper-v-r2-sp1-measure-dynamic-memory


Q6930020: Network Monitor shows odd values for the 'Available Memory' check for my Windows 2003 servers. What should I do.

This is a known problem on Windows 2003 and Windows 2003 SP1 machines. It is an issue in WMI, that has fixed in Windows 2003 SP2. So if you are monitoring Windows 2003 machines without SP2 installed, please install SP2 in order to monitor 'available memory' properly.


Q6930010: I'm having problems monitoring memory usage on a remote Windows server. How can I troubleshoot?

ActiveXperts uses WMI (Windows Management Instrumentation) to collect data about (remote) Windows machines. WMI is part of Windows operating systems and installed by default. First check out the following:

WMI can use WinRM (preferred), or DCOM (legacy). In ActiveXperts, the WMI operation mode can be set per server. By default, the global WMI operation mode is used; see Tools->Options->{Windows Machines} in the Manager application.

Ensure that Windows WMI services are running on the monitoring server and the monitored server, and that firewall settings do not prevent you from accessing the remote computer via WMI.

 

Troubelshoot Memory monitoring using WMI/WinRM

Run the following Powershell command to query Memory usage using WMI through WinRM:

Get-WSManInstance -ComputerName computername -Enumerate -ResourceURI wmicimv2/* -Filter "SELECT * FROM Win32_PerfFormattedData_PerfOS_Memory" | Select-Object -ExpandProperty AvailableBytes

or (with alternate credentials):

# Prompt to enter the username and password
$objCred = Get-Credential 
# Call Get-WSManInstance
Get-WSManInstance -ComputerName computername -Credential $objCred -Enumerate -ResourceURI wmicimv2/* -Filter "SELECT * FROM Win32_PerfFormattedData_PerfOS_Memory" |  Select-Object -ExpandProperty AvailableBytes

To verify WMI access through WinRM, see FAQ #Q7260015

 

Troubelshoot Memory monitoring using WMI/DCOM

Run the following command to query Memory usage using WMI through DCOM:

WMIC /node:computername PATH Win32_PerfFormattedData_PerfOS_Memory GET AvailableBytes

or (with alternate credentials):

WMIC /node:computername /user:user /password:password PATH Win32_PerfFormattedData_PerfOS_Memory GET AvailableBytes

To verify WMI access through DCOM, see FAQ #Q7250015

MONITORING MSMQ


Q6940040: How do I know the names of the Message Queues installed on a computer?

Start a new command prompt on the partuicular Windows computer, and execute the following command:

WMIC /node:localhost PATH Win32_PerfRawData_MSMQ_MSMQQueue GET Name

It will display a list of message queueus installed on the computer.


Q6940030: I'm still having problems monitoring a Message Queue. I tried the Windows WMIC utility but I'm still not able to find the reason.

First, make sure you've tried WMIC. See FAQ #6940010.

If that doesn't help you out, please try the Message Queue Diagnostic Tool. You can launch it from the ActiveXperts Manager's menu:
Tools->Diagnostic Tools->MS Message Queue Diagnostic Tool

The tool generates a log file. Please send the log to support@activexperts.com.


Q6940020: I'm having problems with monitoring MSMQ: The error I get is: "Win32_PerfRawData_MSMQ_MSMQQueue class does not exist." What should I do?

This problem occurs because Windows Management Instrumentation (WMI) uses AutoDiscovery/AutoPurge (ADAP) to build its internal performance counter table. If the particular MSMQ service on the monitored computer was not started when the WMI ADAP process is started, the performance counters are not transferred to WMI.

Please run the following command from the command line on the monitored computer:

  wmiadap /f

and then restart the wmi-service.


Q6940010: I'm having problems monitoring a Microsoft Message Queue usage on a remote Windows server. How can I troubleshoot?

ActiveXperts uses WMI (Windows Management Instrumentation) to collect data about (remote) Windows machines. WMI is part of Windows operating systems and installed by default. First check out the following:

WMI can use WinRM (preferred), or DCOM (legacy). In ActiveXperts, the WMI operation mode can be set per server. By default, the global WMI operation mode is used; see Tools->Options->{Windows Machines} in the Manager application.

Ensure that Windows WMI services are running on the monitoring server and the monitored server, and that firewall settings do not prevent you from accessing the remote computer via WMI.

 

Troubelshoot MSMQ monitoring using WMI/WinRM

Run the following Powershell command to query MSMQ usage using WMI through WinRM:

Get-WSManInstance -ComputerName computername -Enumerate -ResourceURI wmicimv2/* -Filter "SELECT * FROM Win32_PerfRawData_MSMQ_MSMQQueue" | Select-Object Name,MessagesInQueue

or (with alternate credentials):

# Prompt to enter the username and password
$objCred = Get-Credential 
# Call Get-WSManInstance
Get-WSManInstance -ComputerName computername -Credential $objCred -Enumerate -ResourceURI wmicimv2/* -Filter "SELECT * FROM Win32_PerfRawData_MSMQ_MSMQQueue" |  Select-Object Name,MessagesInQueue

To verify WMI access through WinRM, see FAQ #Q7260015

 

Troubelshoot MSMQ monitoring using WMI/DCOM

Run the following command to query MSMQ usage using WMI through DCOM:

WMIC /node:computername PATH Win32_PerfRawData_MSMQ_MSMQQueue GET Name, MessagesInQueue

or (with alternate credentials):

WMIC /node:computername /user:user /password:password PATH Win32_PerfRawData_MSMQ_MSMQQueue GET Name, MessagesInQueue 

To verify WMI access through DCOM, see FAQ #Q7250015

MONITORING NETWORK


Q7240028: I cannot find a particular WMI class on my target machine, although it should be there. Is there a way to rebuild the WMI repository?

Yes you can. Use the winmgmt command-line tool to rebuild the WMI repository on the target Windows platform:

  • Open an Elevated Command Prompt
  • Stop the WMI Service by typing: net stop winmgmt
  • Rebuild the WMI Repository by typing: winmgmt /salvagerepository
  • Restart the WMI Service by typing: net start winmgmt
  • Check for errors by typing: winmgmt /verifyrepository
  • REBOOT THE WINDOWS MACHINE

Q6950010: How can I monitor network bandwith and network packets on the Windows workstations and servers in my network?

Create a new 'Performance Counter' check. Select the 'Network Interface' performance object, and choose the relevant NIC card as the instance. Then, select your performance item(s), e.g. 'Bytes Received/sec, 'Bytes Sent/sec', 'Bytes Total/sec', 'Current Bandwidth', 'Packets Received/sec', etc.

MONITORING POWERSHELL


Q6960030: When a PowerShell is executed by ActiveXperts Network Monitor, I get the following error: "The term 'ps1' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again". What is the problem?

Under the hood, ActiveXperts executes all PowerShell checks by executing a command like this:

cmd /q /c "C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell.exe "C:\PROGRA~1\ACTIVE~1\NETWOR~1\scripts\MONITO~2\CPU.PS1"

As you can see, a 8dot3 naming convention is used for powershell files, simply because PowerShell cannot deal with long filenames when used from the command line.

Sometimes, 8dot3 naming convention is DISABLED on the file system, and PowerShell scripts will not work, ending up with the standard PowerShell error: "The term ‘ps1’ is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again"

SOLUTION: Enable 8dot3 naming on the filesysten where Network Monitor is installed.

To find out if 8dot3 is enabled on your filesystem, use the standard command line tool FSUTIL:

FSUTIL.EXE 8dot3name query C:

To enable, use:

FSUTIL.EXE 8dot3name set C: 0

You may need top copy files again because 8dot3 names are created upcon copy.

Verify by listing files from the command lne like this:

DIR /X c:

You can see our PowerShell log file(s) if you enable logging for the PowerShell thread(s). To do so, specify a valid log file in registry key:

HKLM\Software\ActiveXperts\Network Monitor\Server\Trace\ThreadPowerShell000
(and HKLM\Software\ActiveXperts\Network Monitor\Server\Trace\ThreadPowerShell001, ... )

IMPORTANT: You need to restart the service in order for reguistry changes to take effect.


Q6960020: We use PowerShell scripts to monitor several servers. Is there a way to see how the PowerShell interpreter is invoked by the Network Monitor Engine?

You can turn on PowerShell logging for the Network Monitor Engine. To do so, enter a valid file name in the following registry entries (there's a registry entry for each PowerShell thread/subprocess):

HKLM\Software\ActiveXperts\Network Monitor\Server\Trace\ThreadPowerShell000
HKLM\Software\ActiveXperts\Network Monitor\Server\Trace\ThreadPowerShell001

For instance:

  c:\powershell00.log
  c:\powershell01.log

After that, restart the service. Then, all PowerShell operations will be written to the log file(s).


Q6960010: When I run a Powershell-based check. I get an error: "Execution of PowerShell scripts is disabled on this system."

You must allow Powershell scripting on the machine that has ActiveXperts Network Monitor running. Read more on allowing Powershell scripting here:
activexperts.com/support/network-monitor/online/powershell/

Please note that allowing Powershell on 32-bit operating systems is different from 64-bit operating systems.

MONITORING PRINTERS


Q6980030: My printer always shows 'Idle' (value: 3), even though it is online. What is the reason?

ActiveXperts uses WMI (part of the Windows OS) to monitor printers. WMI retrieves the printer information from the spoolsv.exe process. So whether the printer status information retrieved is reliable depends on the printer driver.

If the printer driver bypass the the spooler to get status or they do not report the status data exchange to the spooler process, the print provider will report whatever status the spooler contains. If the spooler reports Ready, it never gets data with a status change (default is ready) and the provider just exports this as Idle.


Q6980015: I have a Windows server with printers installed. The printers are IP printers on the network. The server is able to see the status, online/offline/etc. But Network Monitor always reports the printer as down. What could be the problem?

ActiveXperts uses WMI (Windows Management Instrumentation) to collect data about (remote) Windows machines. WMI is part of Windows operating systems and installed by default. First check out the following:

WMI can use WinRM (preferred), or DCOM (legacy). In ActiveXperts, the WMI operation mode can be set per server. By default, the global WMI operation mode is used; see Tools->Options->{Windows Machines} in the Manager application.

Ensure that Windows WMI services are running on the monitoring server and the monitored server, and that firewall settings do not prevent you from accessing the remote computer via WMI.

 

Troubelshoot Printer monitoring using WMI/WinRM

Run the following Powershell command to query Printer usage using WMI through WinRM:

Get-WSManInstance -ComputerName computername -Enumerate -ResourceURI wmicimv2/* -Filter "SELECT * FROM Win32_Printer" | Select-Object Name,PrinterStatus

or (with alternate credentials):

# Prompt to enter the username and password
$objCred = Get-Credential 
# Call Get-WSManInstance
Get-WSManInstance -ComputerName computername -Credential $objCred -Enumerate -ResourceURI wmicimv2/* -Filter "SELECT * FROM Win32_Printer" | Select-Object Name,PrinterStatus

To verify WMI access through WinRM, see FAQ #Q7260015

 

Troubelshoot Printer monitoring using WMI/DCOM

Run the following command to query Printer usage using WMI through DCOM:

WMIC /node:computername PATH Win32_Printer GET Name, PrinterStatus

or (with alternate credentials):

WMIC /node:computername /user:user /password:password PATH Win32_Printer GET Name, PrinterStatus 

To verify WMI access through DCOM, see FAQ #Q7250015

 

Possible PrinterStatus Values

  • 0 - Idle
  • 1 - Paused
  • 2 - Error
  • 3 - Pending Deletion
  • 4 - Paper Jam
  • 5 - Paper Out
  • 6 - Manual Feed
  • 7 - Paper Problem
  • 8 - Offline
  • 9 - I/O Active
  • 10 - Busy
  • 11 - Printing
  • 12 - Output Bin Full
  • 13 - Not Available
  • 14 - Waiting
  • 15 - Processing
  • 16 - Initialization
  • 17 - Warming Up
  • 18 - Toner Low
  • 19 - No Toner
  • 20 - Page Punt
  • 21 - User Intervention Required
  • 22 - Out of Memory
  • 23 - Door Open
  • 24 - Server_Unknown
  • 25 - Power Save

MONITORING PROCESSES


Q7000020: I'm still having problems monitoring processes. I tried the Windows WMIC utility but I'm still not able to find the reason.

First, make sure you've tried WMIC. See FAQ #7000010.

If that doesn't help you out, please try the Process Diagnostic Tool. You can launch it from the ActiveXperts Manager's menu:
Tools->Diagnostic Tools->Process Diagnostic Tool

The tool generates a log file. Please send the log to support@activexperts.com.


Q7000010: I'm having problems monitoring processes on a remote Windows server. How can I troubleshoot?

ActiveXperts uses WMI (Windows Management Instrumentation) to collect data about (remote) Windows machines. WMI is part of Windows operating systems and installed by default. First check out the following:

WMI can use WinRM (preferred), or DCOM (legacy). In ActiveXperts, the WMI operation mode can be set per server. By default, the global WMI operation mode is used; see Tools->Options->{Windows Machines} in the Manager application.

Ensure that Windows WMI services are running on the monitoring server and the monitored server, and that firewall settings do not prevent you from accessing the remote computer via WMI.

 

Troubelshoot Process monitoring using WMI/WinRM

Run the following Powershell command to query Process usage using WMI through WinRM:

Get-WSManInstance -ComputerName computername -Enumerate -ResourceURI wmicimv2/* -Filter "SELECT * FROM Win32_PerfRawData_PerfProc_Process" | Select-Object Name,HandleCount

or (with alternate credentials):

# Prompt to enter the username and password
$objCred = Get-Credential 
# Call Get-WSManInstance
Get-WSManInstance -ComputerName computername -Credential $objCred -Enumerate -ResourceURI wmicimv2/* -Filter "SELECT * FROM Win32_PerfRawData_PerfProc_Process" | Select-Object Name,HandleCount

To verify WMI access through WinRM, see FAQ #Q7260015

 

Troubelshoot Process monitoring using WMI/DCOM

Run the following command to query Process usage using WMI through DCOM:

WMIC /node:computername PATH Win32_PerfRawData_PerfProc_Process GET Name, HandleCount

or (with alternate credentials):

WMIC /node:computername /user:user /password:password PATH Win32_PerfRawData_PerfProc_Process GET Name, HandleCount 

To verify WMI access through DCOM, see FAQ #Q7250015

MONITORING SERVICES


Q7020020: I'm still having problems monitoring Windows services. I tried the Windows WMIC utility but I'm still not able to find the reason.

First, make sure you've tried WMIC. See FAQ #7020010.

If that doesn't help you out, please try the Service Diagnostic Tool. You can launch it from the ActiveXperts Manager's menu:
Tools->Diagnostic Tools->Service Diagnostic Tool

The tool generates a log file. Please send the log to support@activexperts.com.


Q7020010: I'm having problems monitoring services on a remote Windows server. How can I troubleshoot?

ActiveXperts uses WMI (Windows Management Instrumentation) to collect data about (remote) Windows machines. WMI is part of Windows operating systems and installed by default. First check out the following:

WMI can use WinRM (preferred), or DCOM (legacy). In ActiveXperts, the WMI operation mode can be set per server. By default, the global WMI operation mode is used; see Tools->Options->{Windows Machines} in the Manager application.

Ensure that Windows WMI services are running on the monitoring server and the monitored server, and that firewall settings do not prevent you from accessing the remote computer via WMI.

 

Troubelshoot Service monitoring using WMI/WinRM

Run the following Powershell command to query Services using WMI through WinRM:

Get-WSManInstance -ComputerName computername -Enumerate -ResourceURI wmicimv2/* -Filter "SELECT * FROM Win32_Service" | Select-Object DisplayName,Name,State

or (with alternate credentials):

# Prompt to enter the username and password
$objCred = Get-Credential 
# Call Get-WSManInstance
Get-WSManInstance -ComputerName computername -Credential $objCred -Enumerate -ResourceURI wmicimv2/* -Filter "SELECT * FROM Win32_Service" | Select-Object DisplayName,Name,State

To verify WMI access through WinRM, see FAQ #Q7260015

 

Troubelshoot Process monitoring using WMI/DCOM

Run the following command to query a Services using WMI through DCOM:

WMIC /node:computername PATH Win32_Service GET DisplayName, Name, State

or (with alternate credentials):

WMIC /node:computername /user:user /password:password PATH Win32_Service GET DisplayName, Name, State 

To verify WMI access through DCOM, see FAQ #Q7250015

MONITORING SNMP


Q7050020: Is the Windows SNMP Trap Service required to send out SNMP Traps from Network Monitor?

No, this is not required. ActiveXperts SNMP Trap notifications do not rely on this service.

If you need the Windows SNMP Trap Service for other applications, ActiveXperts will still be able to send out SNMP Trap notifications.


Q7050027: When I try to start listening for incoming traps, I get a SYSTEM ERROR in my Network Monitor log saying: "Failed to listen for incoming SNMP traps. Either the port is in use, or the Windows SNMP trap service is started". I'm pretty sure that no other SNMP process is running.

Please double check on your system, to make sure no other SNMP receiver is running. By default, SNMP trap receivers listen on port 162.

To do so, start a new command prompt, and type 'netstat -a -p udp'. In the resulting list, make sure that default port 162 is not listed.


Q7050015: I want to monitor devices through SNMP. Is the Windows SNMP Service required to be installed and running?

No, the ActiveXperts SNMP Get check does NOT require the Windows SNMP Service to be installed and/or running. The check does not rely on this service.

If you need the Windows SNMP Service for other applications, ActiveXperts will still be able to perform checks through SNMP.


Q7050025: Is the Windows SNMP Trap Service required to receive SNMP Traps with Network Monitor?

No, it is not required. It is even not possible to receive traps through SNMP with Network Monitor while the Windows SNMP Trap Service is running, unless you specify a different port for the ActiveXperts trap listener.

If you have the Windows SNMP Traps Service running (default on port 162), ActiveXperts Network Monitor will NOT be able to receive incoming SNMP Traps. ActiveXperts opens an UDP socket (default port 162) to listen for incoming traps; only one process at a time can listen for packets on one port. However, you can specify an alternate for ActiveXperts Network Monitor (Tools->Options->Advanced->SNMP Trap Receiver Settings).

MONITORING SSH


Q7060010: Why are remote sessions not closed ?

This can happen when the command started is a background process which keeps current stdout or stderr open. The solution is to redirect stdout and stderr. Click here for more information.

The other possibility is that you are running a version of OpenSSH which is older than 4.9. These versions contain a bug which causes it to never close sessions for root users. More information in the release notes for version 4.9 under (bz#926).


Q7060050: When I run an Ssh check, I get an error saying: 'ERROR 22473: Unable to instantiate Ssh provider DLL" . What's wrong?

The Microsoft C and C++ (MSVC) Runtime Libraries are missing on your Windows operating system. These libraries are required by the following ActiveXperts Network Monitor checks:

  • Ssh
  • Scp
  • SFtp

The above checks are built by using Microsoft C and C++ tools.

Solution

Please download the Microsoft Visual C++ Redistributable package from the Microsoft site, and run the setup.
Please visit the Microsoft Visual C++ Redistributable downloads page and download/install the latest supported x64/x86 version.


Q7060020: Is OpenSSL used in the SSH implementation of ActiveXperts Network Monitor?

No. ActiveXperts Network Monitor has its own implementation of all cryptographic functions. The OpenSSL open-source implementation is not used.


Q7060030: I want to use Private Key File authentication. What private key file file format is supported by ActiveXperts?

The Private Key File should be PuTTY compatible. PuTTY is a free and open-source terminal emulator, and very popular under Windows.

This means that your Linux private key file should be converted to a PuTTY compatible format using the PuttyGen.exe utility. Download PuttyGen.exe from the PuTTY web site. After conversion, you can use it in ActiveXperts.
Click here for more information.

MONITORING TERMINAL SERVICES


Q7120010: I'm having problems monitoring Terminal Services on a remote server. How can I troubleshoot?

ActiveXperts uses WMI (Windows Management Instrumentation) to collect data about (remote) Windows computers. WMI is part of Windows operating systems and installed by default.
Please check out the following:

  1. Check the Services applet on the monitoring server and monitored server to verify that the WMI services are indeed running.
  2. Make sure that firewall settings are not prevent you from accessing the remote computer through WMI.

Windows ships with the WMIC command line utility ('Windows Management Instrumentation Command-line'). Use this utility to check if WMI is working fine and to check credentials.

  1. Try to query the Termian Serivces counter on the monitoring machine:
    WMIC /node:localhost PATH Win32_PerfRawData_LocalSessionManager_TerminalServices GET ActiveSessions, InactiveSessions, TotalSessions
  2. Use the same command from a console window on the monitored server:
    WMIC /node:localhost PATH Win32_PerfRawData_LocalSessionManager_TerminalServices GET ActiveSessions, InactiveSessions, TotalSessions
  3. Finally, run the command from the monitoring server to check CPU usage on the monitored server:
    WMIC /node:computername /user:user /password:password PATH Win32_PerfRawData_LocalSessionManager_TerminalServices GET ActiveSessions, InactiveSessions, TotalSessions

MONITORING UNIX/LINUX MACHINES


Q7150030: I want to use the built-in RSH command utility to check the results against ActiveXperts Network Monitor, but when I type 'RSH' from the command line, the command seems to be missing. What's wrong?

The RSH client command line utility is part of Windows until Windows 7 and Windows 2008. To use RSH from the command line in Windows 7 (or Windows 2008) and higher, download rshclient.zip, extract the files in a new directory, and follow the instructions listed in the extracted README.TXT.


Q7150010: I have a UNIX machine, but when monitoring through your RSH function, I get a message "Unable to connect to remote computer". What's up?

Most probably, RSH is not configured properly on the remote UNIX machine. Be sure to setup your .rhosts file correctly on your UNIX server.

The .rhosts file typically permits network access on UNIX/LINUX systems. The .rhosts file lists computer names and associated logon names that have access to remote computers. When you run rcp, rexec, or rsh commands remotely with a proper .rhosts file, you do not need to provide logon and password information for the remote computer. The .rhosts file is a text file in which each line is an entry. An entry consists of the local computer name, the local user name, and any comments about the entry. Each entry is separated by a tab or space, and comments begin with a pound sign (#). For example:

host7 #This computer is in room 31A

The .rhosts file must be in the user's home directory on the remote computer. For more information about the specific implementation of the .rhosts file on a remote computer, see the remote system documentation.

When troubleshooiting RSH, try the Windows built-in RSH client command utility to test if the RSH configuration is working fine.


Q7150015: We are running Network Monitor and seem to get a lot of "uncertain, permission denied" on Unix RSH scripts. Could you please point me to the right direction?

Problems regarding RSH are usually due to the configuration of the RSH daemon on the remote server (.rhosts file), so check the RSH configuration on the Unix machine first.

Then, isolate the problem by using the standard Windows built-in RSH tool. Let's assume that the remote UNIX machine called PLUTO, you can issue the following command from the command line:

RSH PLUTO ls

Q7150020: I need technical instructions about how to setup the RSH daemon on LINUX. Do you know any reference?

Click here for instruction about how to setup the RSH daemon on LINUX.

MONITORING VBSCRIPT


Q7200020: When running a custom VBScript script, it gives me an error on WScript.Echo. How can I use WScript.Echo?

WScript.Echo only works for a script that is called by a command line interpreter (i.e. CSCRIPT or WSCRIPT). You should avoid all console-related functions.
The online Network Monitor VBScript Guidelines explain how to write VBScript checks for ActiveXperts Network Monitor, and provides information about troubleshooting.


Q7200025: I want to use double-quotes as parameters for my script. How can I do this?

To pass a regular string parameter to your VBScript function, you should use double-quotes , e.g.:
  "\\myserver\c$"

If you want to have a double-quote as part of the string passed to the function, you should escape the double-quote character by a double-quote, e.g.:
  "ActiveXperts Software, ""Innovators in Communications""."


Q7200010: Is it possible to debug my VBScript based checks?

There's an online ActiveXperts VBScript Guidelines page available here. It tells you how to write new VBScript checks, how to test these scripts and how to use the ActiveXperts VBScript debugger.

MONITORING WINDOWS / WMI


Q7240010: What is the difference between WMI/DCOM and WMI/WinRM

WMI/DCOM is the older protocol for accessing WMI (Windows Management Instrumentation) data remotely. WMI/WinRM is a newer, more secure protocol that replaced WMI/DCOM. WMI/WinRM uses the WS-Management protocol and uses encrypted, HTTP-based communication. It also supports remote access over the Internet, while WMI/DCOM was limited to local networks.


Q7240020: I'm using WMI for my Windows checks. Do I retrieve the same data with WinRM as I used to retrieve through DCOM?

Yes, the same WMI data can be retrieved through both WinRM and DCOM. The difference is in the method of accessing the data and the security protocols used. WinRM provides a more secure and flexible way to access WMI data compared to DCOM. The WMI data itself is the same regardless of which protocol is used to access it.


Q7240025: I'm getting an error saying that 'Win32_Service' does not exist. Other basic WMI classes like 'Win32_LogicalDisk' do not exist either.

Most probably, your WMI repository needs to be rebuild or repaired. For instructions, see FAQ #Q7240028.


Q7240040: I'm not able to monitor any Win32_PerfRawData counters. However, I'm sure they are installed on the monitored system. I can also see those counters in the Administrative Tools\Performance tools. What should I do?

This problem occurs because Windows Management Instrumentation (WMI) uses AutoDiscovery/AutoPurge (ADAP) to build its internal performance counter table. If a particular service on the monitored computer was not started when the WMI ADAP process is started, the performance counters are not transferred to WMI.

Please run the following command from the command line on the monitored computer:

  wmiadap /f

and then restart the wmi-service.

MONITORING WINDOWS / WMI (DCOM)


Q7250050: When I try to monitor my TMG server, ActiveXperts tells me that the RPC Server is unavailable (error 0x800706BA). We're using WMI through DCOM.

Incoming WMI requests are denied by the TMG policy by default. To enable RPC, open the 'Configure RPC protocol policy' configuration window, and disable the 'Enforce strict RPC compliance' option. This way, the policy will allow RPC type protocol such as DCOM.


Q7250070: Is there a way to bypass the DCOM hardening changes that forces RPC_C_AUTHN_LEVEL_PKT_INTEGRITY authentication? We're using WMI through DCOM.

Yes you can. First of all, you need to make sure you have the September 2021 patches or later installed.

Registry setting to enable or disable the hardening changes for CVE-2021-26414, you can use the following registry key:

  • Path : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat
  • Value Name: "RequireIntegrityActivationAuthenticationLevel"
  • Type: dword
  • Value Data: default = 0x00000000 means disabled. 0x00000001 means enabled. If this value is not defined, it will default to enabled.

To read more, please see: KB5004442—Manage changes for Windows DCOM Server Security Feature Bypass (CVE-2021-26414).


Q7250065: We receive the following error when executing a Windows check: "Please raise the activation authentication level at least to RPC_C_AUTHN_LEVEL_PKT_INTEGRITY in client application". We're using WMI through DCOM.

Microsoft has strengthened the authentication used between DCOM clients and servers, ensuring that none of the data transferred between the client and server has been modified.

More more information, see FAQ #Q7250060


Q7250060: We've raised the authentication level to require RPC_C_AUTHN_LEVEL_PKT_INTEGRITY on all of our Windows servers. Is ActiveXperts able to handle it? We're using WMI through DCOM.

By default, ActiveXperts uses the RPC_C_AUTHN_LEVEL_DEFAULT level to connect to remote Windows Servers. This will not suffice for servers that require RPC_C_AUTHN_LEVEL_PKT_INTEGRITY authentication.
You need to change the following registry entry:

HKLM\Software\ActiveXperts\Network Monitor\Server\DCOM\AuthenticationLevel

and set the value to 5, which means: RPC_C_AUTHN_LEVEL_PKT_INTEGRITY
This requires a restart of the 'ActiveXperts Network Monitor Engine' service!

Please note that this requires ActiveXperts Network Monitor v.2022 build 880.2103 or higher.

Value Name Meaning
0 RPC_C_AUTHN_LEVEL_DEFAULT Same as RPC_C_AUTHN_LEVEL_CONNECT
1 RPC_C_AUTHN_LEVEL_NONE No authentication.
2 RPC_C_AUTHN_LEVEL_CONNECT Authenticates the credentials of the client and server.
3 RPC_C_AUTHN_LEVEL_CALL Same as RPC_C_AUTHN_LEVEL_PKT.
4 RPC_C_AUTHN_LEVEL_PKT Same as RPC_C_AUTHN_LEVEL_CONNECT but also prevents replay attacks.
5 RPC_C_AUTHN_LEVEL_PKT_INTEGRITY Same as RPC_C_AUTHN_LEVEL_PKT but also verifies that none of the data transferred between the client and server has been modified.
6 RPC_C_AUTHN_LEVEL_PKT_PRIVACY Same as RPC_C_AUTHN_LEVEL_PKT_INTEGRITY but also ensures that the data transferred can only be seen unencrypted by the client and the server.

If the above does not work out, please read FAQ #Q7250070


Q7250020: For one of my Windows servers, I get the error: "Unable to connect to [myserver]; WMI Error 0x80070005: Access is denied". We're using WMI through DCOM.

In most situation, the credentials do not suffice. Make sure that the credentials, used for the ActiveXperts Network Monitor Engine service to login, have full permissions on the monitored server. Or use alternate credentials for the particular check, so that ActiveXperts doesn't use the service credentials but the alternate credentials instead to login and monitor the remote server.

To verify, check WMI without ActiveXperts by running the Windows built-in WMIC utility from the command-line (replace myserver with the hostname of your server):

WMIC /node:myserver PATH Win32_Processor WHERE DeviceID='CPU0' GET LoadPercentage

To use alternate credentials, execute the following command (replace myserver, account and password ):
WMIC /node:myserver /user:account /password:password PATH Win32_Processor WHERE DeviceID='CPU0' GET LoadPercentage


Q7250005: What ports do I need to open in the firewall to enable communication between the ActiveXperts Network Monitor server and the monitored Windows servers? We're using WMI through DCOM.

WMI through DCOM uses TCP ports 135 and 445, as well as dynamically-assigned ports above 1024.

If you monitor Windows machines through a firewall, it is recommended to use WMI over WinRM, because that uses only one port (default: 5986 for secure HTTPs access, or 5985 for non-secure HTTP access).


Q7250010: For one of my Windows servers, I get the error: "Unable to connect to [myserver]; WMI Error 0x800706BA: The RPC server is unavailable". We're using WMI through DCOM.

Most common reason are:

  • DCOM is disabled on that server
  • Firewall settings on the monitored server block all RPC data
  • The account used is not a member of the built-in local Administrator

For enabling/disabling DCOM, see FAQ #Q7250017

The solutions are described below.

Firewall Settings

If you use a third-party firewall on the monitored server, check the appropriate settings. If you do not use a third-party firewall, type 'Windows Defender Firewall' in the Search bar of the monitored server, and open the 'Windows Defender Firewall with Advanced Security' application.
If you have your Public Profile switched on, you will get an 'RPC Server is unavailable' error, so switch it off! If it does not work, also try the Private Profile and the Domain Profile.

UAC Settings

Make sure that UAC (User Account Control) is not causing you problems. UAC is enabled by default. Try to switch it off on the monitored server and see if the problem still persists. To disable UAC:

  • Start a new Command Prompt;
  • Type 'UserAccountControlSettings.exe' to open the User Account Control Settings window;
  • Drag the slide-bar to: 'Never Notify';
  • Reboot the server (you will be prompted to do so).

Alternate credentials

If you have created a local Administrator account on a monitored Windows 2022/2019/2016/2012/2008 server, and you use this account as alternate credentials without turning off UAC, it will definitely not work! Only the built-in local Administrator has sufficient rights. If you want to make use of another local Administrator, make sure UAC is turned off.

DCOM Server Process Launcher

On the monitored server, also check the 'DCOM Server Process Launcher'. This is a service that should be set to 'Automatic Start', and should always be running.
Check the settings in the Services applet of the operating system.

WMIC

Check WMI without ActiveXperts by running the Windows built-in WMIC utility from the command-line (replace myserver with the hostname of your server):

WMIC /node:computername PATH Win32_Processor WHERE DeviceID='CPU0' GET LoadPercentage

To use alternate credentials, execute (replace myserver, account and password ):
WMIC /node:computername /user:user /password:password PATH Win32_Processor WHERE DeviceID='CPU0' GET LoadPercentage


Q7250015: How to verify WMI access through DCOM?

To test whether you can connect to the remote computer using DCOM, run the following command in Powershell:

New-CimSession -ComputerName REMOTEMACHINE -SessionOption (New-CimSessionOption -Protocol Dcom)

or (with alternate credentials):

New-CimSession -ComputerName REMOTEMACHINE -SessionOption (New-CimSessionOption -Protocol Dcom) -Credential "DOMAIN\USER"

If you have access to the remote computer through DCOM, run the following Powershell command to verify access to WMI from DCOM:

Get-WmiObject -ComputerName REMOTEMACHINE -Query "SELECT * FROM Win32_ComputerSystem"

or (with alternate credentials):

Get-WmiObject -ComputerName REMOTEMACHINE -Credential "DOMAIN\USER" -Query "SELECT * FROM Win32_ComputerSystem"

Q7250018: How to enable/disable WMI through DCOM on a Windows member server using a Group Policy?

To enable/disable WMI through DCOM on a Windows member server through a group policy, you can follow the steps below:

ActiveXperts Error Codes

Click here to view the full list of ActiveXperts error codes

Contact Support

To contact the ActiveXperts Help Desk, click here.