I am trying to get to the bottom of something “strange” that I came across today. We do our SLA’s based on SCOM agent (watcher) health so when I get the daily report and see something in unplanned maintenance mode it stands out.
Looking on the SCOM management console I noticed that two servers where in unplanned maintenance mode with no comments filled in (the admins are supposed to put something in) and with 450 minutes of MM still to run.
The 2 servers involved had in fact had power cuts the previous day and come back up a couple of minutes later. However everybody has said they didn’t put the servers into MM.
What is strange also is that if I look in the Operations Manager event log on both servers I can’t find any reference to event 1215 which would show to me the MS has told the server to go into MM anyway. This is the same on both the servers.
Any thoughts?
Many thanks