Technical: Microsoft – Server Performance Advisor – Setup & Trouble Shooting
Whenever I notice prolonged server performance issues, Microsoft Server Performance Advisor comes to mind.
It is now at version 3 and it allows a visually appealing and intuitive toolset for measuring Server Performance.
The current version, 3.0, can be downloaded from http://msdn.microsoft.com/en-us/library/windows/hardware/hh367834.aspx.
How To – Video
- SPA 3.0 – A simple server performance tuning advisor (Microsoft’s own Kevin Chin)
There is quite a bit of praises to sing about this product. But, one of my often fraught problems with it, is its security authentication sub-system.
It asks the Operator for a password and stores that password along with the logged-on user account. That combination is then used to connect to Registered Servers and utilize the registered server’s local “Performance Logs and Alerts” (PLA) Services.
The registered server’s PLA Services creates & kicks off Performance Monitor runs.
Unfortunately, in following Microsoft’s published Best Practices guidance for securing Windows Active Directory Domains, most organizations are base-lined to prevent some of the security underpinnings of this otherwise wonderful and free product.
In the rest of this post, I will begin the documentation of some of the errors that might be posted in the product’s log.txt file as one tries using the product.
+ SpaException: Failed to create performance logs and alerts data collection set on server .
+ COMException: A specified logon session does not exist. It may already have been terminated. (Exception from HRESULT: 0x80070520)
This error is usually caused by the fact that the account that you designated (when asked for your Windows Security) is constrained per a Local Policy:
“Network access: Do not allow storage of credentials or .NET Passports for network authentication”
To confirm that this is indeed the problem:
- Launch Local Security Policy
- Transverse the left panel – Security Settings / Account Policies / Local Policies / Security Options
- In the right panel, seek out “Network Access: Do not allow storage of passwords and credentials for network authentication”
“Error : Changing the account information failed. The following error was reported. Error number : 0x80070520”, while changing the AT Service Schedular Account in Windows Server 2008.
- Click on Start >> Run
- In the Run Windows, please type in dsa.msc
- In the Active Directory Users and Computers Window, right click on the domain name and selectProperties.
- Click on the Group Policies Tab.
- Select the Default Domain Policy and Click on Edit.
- In the Group Policy Editor Window, browse to the following location :
- Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options
- On the Right Panel, select Network access: Do not allow storage of credentials or .NET Passports for network authentication
- Double Click on the policy and either Disable it or change it to Not Defined.
- Click OK, Close the Group Policy Editor.
+SpaException: Result path was not found
Ensure you have entered a full UNC Name for the File Share Location. The syntax being \\server-name\share-name.
Please keep in mind that the following:
- A share name without the server-name will not work
+ SpaException: Failed to create performance logs and alerts data collection set on server ..
+ COMException: No mapping between account names and security IDs was done. (Exception from HRESULT: 0x80070534)
Ensure that you ‘re not using a local Account, but a Domain Account.
- Server Performance Advisor (SPA) 3.0