Exchange 2010 Monitoring with SCOM 2012 – Correlation Service Issue

After setting up the Exchange management pack, installing the correlation engine the SCOM server gives errors like “The Microsoft Exchange Monitoring Correlation Service on Local Computer started and then stopped. Some services stop automatically if they are not in use by other services or programs”.

This is because we have to do some adjustments to get the Exchange 2010 MP to work properly with Operations Manager 2012.

1. Run Exchange 2010 Management Pack setup on a Management Server
2. Stop the Correlation Engine to prevent the event log flooding with errors.
3. Import the Management Packs
4. Check the name of the SCOMRMSEmulator.
5. Change the Management Server in the config file
6. Changing the Service Account
7. Start the Microsoft Exchange Monitoring Correlation service

Presuming that importing the management pack and installation of the correlation engine finished successfully we continue with step 4; don’t forget to stop the Exchange correlation service

Step 4: Check the name of the SCOMRMSEmulator.
Which server is the RMS Emulator? Usually the first Management Server in the Management Group, but to be sure
– start the SCOM powershell and type:
– Copy the FQDN name

Step 5: Change the Management Server in the config file
The default path is C:\Program Files\Microsoft\Exchange Server\v14\Bin
– Open the file Microsoft.Exchange.Monitoring.CorrelationEngine.exe.config with notepad or some other Text editor.
– Change the value of ‘localhost’ to the FQDN servername of your RMS Emulator.

Step 6. Changing the Service Account
– Start Services.msc
– Go to the “Microsoft Exchange Monitoring Correlation” service, choose properties Go to the logon tab
– Fill in a user account with proper rights in Exchange (Admin)

There is no information about this in the MP guide but you have to change the login account from local service to a user account with proper rights.

Check the eventviewer.

Sometimes You might find a warning event from
Source Bid
Event Id 1
C:\Program Files\Microsoft\Exchange Server\v14\Bin\Microsoft.Exchange.Monitoring.CorrelationEngine.exe 5364 Microsoft.EnterpriseManagement.OperationsManager, Version=6.0.4900.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 System.DllNotFoundException: Unable to load DLL ‘MOMBIDldr.dll’: The specified module could not be found. (Exception from HRESULT: 0x8007007E) at Bid.internalInitialize()

To solve this, just copy the file from C:\Program Files\System Center Operations Manager 2012\Server to C:\Program Files\Microsoft\Exchange Server\v14\Bin I tried it with the 2007 R2 assembly and with the 2012 RC assembly, both seem to work – at least it doesn’t throw any events anymore