The MBSA Management Pack in MOM 2005 is a particular bear to setup. I'm going to talk about one particular error below. Before I do that - “What is the MBSA MP?”. Simply put, it automates the MBSA or Microsoft Baseline Security Analyzer. The MBSA tool scans machines and tells you waht security patches it has, and what it's missing. In addition to Windows, it can scan SQL, Exchange, and perhaps a few other products. I'm not sure off the top of my head.

A user posted this error on the MOM newsgroups:

File transfer response - Could not create, resume or complete a BITS job
Description: The agent DOMAIN\MOMSERVER BITS job
MOM_File_Transfer_Job_MgmtGroup{14379596-507A-4DDD-A54A-302EBF8693F7}
entered into a transient error state. Error description: The operation timed
out . Files list ('remote file', 'local file'):
('http://go.microsoft.com/fwlink/?LinkID=18922'
'C:\Program Files\Microsoft Operations Manager 2005\Downloaded
Files\MgmtGroup\mssecure.cab').

This error will get raised whenever the management server does not have acess to the Internet. The referenced file mssecure.cab is an archive Microsoft provides which has a summary of all the security patches in a format the MBSA understands. Everytime security updates are released, this file is refreshed. The MBSA management pack, if installed in the management group periodically tries to download the latest version of the cabinet. If Internet access is unavailable, the above event will show up in the management console for the management server which it occurred on. If you cannot enable Internet access on the management server, you can manually download the file and disable the rule which does so automatically.

First, download the cabinet from Microsoft at http://go.microsoft.com/fwlink/?LinkID=18922. It will have a version number - mssecure_1234.cab. Rename the file to mssecure.cab, and place it in the
C:\Program Files\Microsoft Operations Manager 2005\Downloaded Files\YourMgmtGroup\ folder on each of the management servers.

Finally, using the admin console, disable the rule (open the properties, uncheck enabled) in the MBSA MP under File Transfer Rules called “Download mssecure.cab...”.

Share this post: email it! | digg it! | bookmark it! | live it!