Error enabling Operations Manager Audit Collection Service with SCOM 2016 TP4

Hi all,

If you want to install Operations Manager Audit Collection Service and the Audit collection services Collector Setup Wizard finishes with the following error:

start adtserver service: failure 0x00002098

...should it mean that you have some problems with the SPNs(Service Principal Name). If you check the Event Viewer,  you will find the following error registered:

EventID: 7023
Source: Service Control Manager
Message: The Operations Manager Audit Collection Service service terminated with the following error: Insufficient access rights to perform the operation.

Then the solution it's easy, you need to register the required SPN in order the service can start correctly:

Management Server:

• AdtServer/FQDN DOMAIN\account
• AdtServer/NetBios DOMAIN\account
• MSOMHSvc/FQDN DOMAIN\account
• MSOMHSvc/NetBios DOMAIN\account

Database Server:

• MSSQLSvc/FQDN:1433 DOMAIN\account
• MSSQLSvc/FQDN DOMAIN\account
• MSSQLSvc/NetBios DOMAIN\account

Ok...let's go to see a real case...

Suppose you has a management server named "ScomServer", database server "RandomDBServer" and a domain named "TheXdom.com". Then the "Operations Manager Audit Collection Service" is running under "Network Service" account and the "SQL Server" service running under "TheXdom\sqlEngineAcc". Then you need to run in a elevated command prompt:

1. setspn -S AdtServer/ScomServer.TheXdom.com TheXdom\ScomServer$
2. setspn -S AdtServer/ScomServer TheXdom\ScomServer$
3. setspn -S MSOMHSvc/ScomServer.TheXdom.com TheXdom\ScomServer$
4. setspn -S MSOMHSvc/ScomServer TheXdom\ScomServer$
5. setspn -S MSSQLSvc/RandomDBServer.TheXdom.com TheXdom\sqlEngineAcc
6. setspn -S MSSQLSvc/RandomDBServer TheXdom\sqlEngineAcc

Don't worry if your environment still have one of these SPN, the -S parameter checks it for you!

If these steps cannot solve your problem, perhaps you need to check this Microsoft KB

Hope it helps!