System Center Service Manager Operations Guide: Authors
System Center Service Manager Operations Guide: Authors
Guide
Microsoft Corporation
Published: April 16, 2010
Authors
Anat Kerry, Bill Anderson, John Downing, and Liza Poggemeyer
Applies To
System Center Service Manager 2010
Feedback
Send suggestions and comments about this document to [email protected].
This document is provided “as-is”. Information and views expressed in this document, including
URL and other Internet Web site references, may change without notice. You bear the risk of
using it.
Some examples depicted herein are provided for illustration only and are fictitious. No real
association or connection is intended or should be inferred.
This document does not provide you with any legal rights to any intellectual property in any
Microsoft product. You may copy and use this document for your internal, reference purposes.
You may modify this document for your internal, reference purposes.
© 2010 Microsoft Corporation. All rights reserved.
Microsoft, Active Directory, SQL Server, Windows, Windows Server, and Windows Vista are
trademarks of the Microsoft group of companies.
All other trademarks are property of their respective owners.
Revision History
Release Date Changes
Managing an Incident.................................................................................................................... 10
Troubleshooting Incidents............................................................................................................. 18
Managing a Problem..................................................................................................................... 20
In This Section
Searching for Information
Describes how to search for configuration items and other incidents, problems, and
knowledge articles.
Managing an Incident
Describes how incidents and incident views are created, edited, and resolved.
Troubleshooting Incidents
Describes how to troubleshoot incidents using service maps, running tasks, and by
publishing announcements.
Managing a Problem
Describes how create and edit problem records, resolve problems and related
incidents automatically, and how to link incidents or change request to a problem
record.
6
Searching for Information
In System Center Service Manager 2010, you can use the search feature in the Service Manager
console to look for information. The search box is in the upper-right corner of the Service
Manager console. By default, the search feature looks for all objects. The results can include
incidents, change requests, problems, and configuration items of Windows-based computers. You
can filter search results by using the filter bar. You can also perform an advanced search for these
items plus the following items:
Knowledge articles
Announcements
Domain users
Manual activities
However, only knowledge articles are returned when you perform a knowledge search.
When you search for most items in Service Manager, only exact keyword matches return results.
However, partial matches are returned for configuration items of Windows-based computers.
Searches that use wildcard characters are not supported.
When you search for items and when you open a view that displays a large number of items, and
there are more than 5,000 items in the results, the complete results can take a few minutes to
appear.
In This Section
Sample Scenario: Managing Incidents and Problems
Describes the scenarios that involve incidents and problems in Service Manager.
7
Managing an Incident
Describes how to create, edit, and resolve incidents and incident views.
Troubleshooting Incidents
Describes how to troubleshoot incidents by using service maps, by running tasks,
and by publishing announcements.
Managing a Problem
Describes how to create and edit problem records, how to resolve problems and
related incidents automatically, and how to link incidents or change requests to a
problem record.
8
Managing Incidents
In the scenario that encompasses incident management, Phil uses incident management to
restore regular operations as quickly and as cost-effectively as possible. For example, by using
the E-mail Incident template to populate a new e-mail-related incident, he can quickly create an
incident and ensure that the correct impact, urgency, assigned analyst, and support tier fields are
configured. Carrying the example further, he creates a new incident for a user who is unable to
view an e-mail that was sent with restricted permissions. Phil creates an incident view so that he
can easily work with all incidents that are created for e-mail problems. When changes are made
to an incident, the he edits the incident to reflect changes.
In another example, an end user experiences a printer problem, so she sends an e-mail message
to the help desk. Upon receipt, Service Manager automatically creates an incident from the
message. Phil investigates the problem, in part, by viewing the service. After the underlying
problem has been solved, the he resolves and closes the incident.
At Woodgrove Bank, connectors are configured so that Service Manager imports configuration
items and alerts from System Center Operations Manager, so some new incidents are
automatically created. Phil reviews the automatically created incidents for accuracy.
Troubleshooting Incidents
In the scenario that encompasses troubleshooting incidents, Phil is conducting an initial
investigation of the problem that Joe is experiencing. Phil suspects that the root cause of the
problem is that Microsoft Exchange Server 2007 SP1 needs to be applied to Joe’s Exchange
server. However, there are other Exchange servers at Woodgrove Bank that probably also need
to be updated. Phil starts his investigation by viewing the service that Garret created for the
Exchange Service. When any incidents affect a service component, that component is marked
with an orange icon resembling a square containing an exclamation point. When a change
request affects a service component, the component is marked with a special blue icon
resembling a square containing a right-pointing arrow. Phil uses the map view on the Service
Components tab to view configuration items and view incidents associated with them. Then he
opens other configuration items and adds them to the open incident.
To further troubleshoot, Phil wants to ping a remote computer that is exhibiting problems. He can
use tasks that are part of the Service Manager console instead of having to use various other
tools. After Phil completes his troubleshooting, he can publish an announcement to all Self-
Service Portal users notifying them of the problem. He can remove the announcement after the
problem has been resolved.
Managing Problems
In the scenario that encompasses problem management, Phil has created a change request
asking the Exchange Administrators group to apply a service pack that is expected to resolve the
problem. When a root cause is found and mitigated or resolved, the change request is completed
and Phil is notified. He then uses the following procedures to resolve a problem and automatically
resolve incidents associated with the problem.
9
Managing an Incident
The procedures in this section describe how to manage incidents by using System Center
Service Manager 2010.
For a detailed description of the complete scenario for managing incidents and problems, see
Sample Scenario: Managing Incidents and Problems.
Help desk analysts use incident management to restore regular operations as quickly and as
cost-effectively as possible by creating new incidents. They also work in partnership with Service
Manager administrators to ensure that incidents that are created automatically or by end-users
are correctly categorized and reassigned to appropriate personnel. Methods that analysts use to
accomplish these duties include:
Using the E-mail Incident template to create new incidents
Reviewing automatically created incidents
Reviewing and updating incidents created by end-users who have sent requests by e-mail
Publishing announcements for incidents to the Self-Service Portal, when necessary
Follow these steps to manage an incident.
Task Description
Step 1: How to Manually Create a New Describes how to create new incidents in
Incident response to a call from a user or from an e-
mail request. Also describes how to create new
incidents automatically from the System Center
Operations Manager Alert connector.
Step 2: How to Change an Existing Incident Describes how to make changes to an incident
in response to new information.
Optional step: How to Contact a User From an Describes how to contact a user by e-mail or
Incident Form instant message while you have an incident
form open.
Step 3: How to Create an Incident View and Describes how to create a view of incidents
Personalize It that match the criteria you define.
Step 4: How to Resolve and Close an Incident Describes how to resolve and close an incident
after the underlying problem is solved.
Optional step: How to Publish an Describes how to publish an announcement for
Announcement for an Incident an incident to all Self-Service Portal users.
10
Using the E-mail Incident template to populate a new e-mail-related incident, you can quickly
create an incident and ensure that the correct impact, urgency, assigned analyst, and support tier
fields are configured.
If you configure connectors so that Service Manager imports configuration items and alerts from
System Center Operations Manager, some new incidents are automatically created. An analyst
reviews the automatically created incidents for accuracy.
In System Center Service Manager 2010, incidents are automatically created from e-mail
requests by users. If the user is recognized as a Service Manager end user, the request sent to
the helpdesk e-mail address automatically creates a new incident.
Note
Service Manager can automatically generate new incidents from e-mail requests only
after a Service Manager administrator enables inbound e-mail processing. By default, the
impact and urgency of every incident created by e-mail submission is set to medium, and
no category is assigned.
Normally, you create incidents only for user accounts in your organization that have Active
Directory Domain Services (AD DS) accounts that are synchronized with Service Manager.
However, you might occasionally need to manually create incidents for users. For example, you
might need to create an incident for a new user whose account is not yet in AD DS or if an Active
Directory account is not yet synchronized with Service Manager. You can also manually create
incidents to support external vendors who do not have Active Directory accounts. In another
example, you might need to open an incident for an on-site technician who does not have an
Active Directory account but who needs to report an incident. Or, you might need to open an
incident for an externally-supported customer who does not have an Active Directory account. In
all these examples, you must manually create a user in Service Manager. For more information,
see How to Manually Add a User in the System Center Service Manager Administrator’s Guide.
IDs that are assigned to change requests and incidents are not created in sequence. However,
newer change requests and incidents are assigned IDs with a higher number than ones created
previously.
Optionally, you can publish an announcement that is visible to Self-Service Portal users for an
incident.
See Also
Managing an Incident
11
incident for a person who is experiencing an e-mail-related problem. You can link other affected
items, such as various computers, to indicate that the issue affects more than one computer.
12
2. In the Work Items pane, expand Incident Management, and then click All Incidents.
New incidents appear in the All Incidents view.
Note
Incidents are automatically created by System Center Service Manager 2010 when the
Operations Manager Alert connector is enabled. You can edit the new incidents that are
generated when an Operations Manager alert is raised and assign the incidents to
analysts.
13
created automatically from an Operations Manager alert.
4. In the Tasks pane, click Edit.
5. In the Incident form, under Support Group, select Tier 1.
6. Under Assigned to, enter the name of the help desk analyst who will investigate the
problem.
7. Click OK to close the form and to save your changes.
Note
If a user’s account belongs to a domain other than the domain in which the Service
Manager management server has its computer account, the presence indicator might not
accurately display the user’s status.
14
To contact a user by e-mail
1. In an open incident form, click the presence indicator next to the Affected user box,
and then click the arrow icon next to the box.
2. Click Send Mail.
3. Your e-mail client program opens and adds the user’s name to the To field. Compose
the e-mail message, and then send it.
15
properties list, select Classification Category, and then click Add. You might need to
scroll to see the Add button.
10. At the end of the Criteria section, in the Criteria definition area, select E-mail
problems. When complete, the criterion resembles [Incident] Classification
Category equals E-Mail Problems.
11. Click Display, and in the Columns to display list, select Status, Classification
Category, and Description. Next, under Assigned To User, select Display Name.
Then, click OK.
Note
It might take a few seconds for the new incident view to appear.
16
4. In the Tasks pane, click Resolve.
5. In the Resolve dialog box, select the appropriate category for resolving this incident in
the Resolution Category list. For example, select Fixed by higher tier support.
6. In the Comments field, type a comment that explains the resolution. For example, type
Resolved by installing Service Pack 1 on the Exchange server, and then click OK.
7. In the Tasks pane, click Close.
8. In the Close dialog box, type a comment about the closure of the incident, and then
click OK.
Note
It might take a few seconds for the new status to appear. To immediately view
the change, click Refresh.
Note
Typically, you access the Self-Service Portal by using a Web browser to open https://
web_server_name/enduser/home.aspx. In the URL, the Web server name you type is the
same name that was specified during Service Manager setup.
17
will be offline from 1 P.M. to 2 P.M. today.
6. In the Body box, type the content of the announcement. For example, type Printer
technicians are servicing the MICR check printers from 1 P.M. to 2 P.M. today as
part of their annual maintenance program.
7. In the Expiration Date box, set a future expiration date for the announcement.
8. In the Priority list, select the appropriate priority level.
Troubleshooting Incidents
The procedure in this section describes how to troubleshoot incidents.
For a detailed description of the complete scenario for troubleshooting incidents, see Sample
Scenario: Managing Incidents and Problems.
Task Description
Note
You might not be able to successfully troubleshoot all incidents with this step.
18
incident affects one configuration item, other configuration items that are part of the service might
also be affected. If necessary, you can add additional configuration items as items that are
affected by the same open incident.
Additionally, when you use the Service Components tab to view the service map, you can easily
determine whether there are active incidents or change requests open for a service component.
When any incidents affect a service component, that component is marked with an orange icon
resembling a square containing an exclamation point. When a change request affects a service
component, the component is marked with a special blue icon resembling a square containing a
right-pointing arrow.
19
Items tab. Verify that the new incident appears under Work items affecting this
configuration item.
Managing a Problem
The procedures in this section describe how to manage problems in System Center Service
Manager 2010.
For a detailed description of the complete scenario for managing problems, see Sample
Scenario: Managing Incidents and Problems.
In Service Manager, problems are records that are created to help prevent future problems and
incidents from happening, to eliminate recurring incidents, and to minimize the impact of incidents
that cannot be prevented. Analysts can use the Service Manager console to create problem
records and to associate incidents with problems.
Task Description
Step 1: How to Create and Edit Problem Describes how to create and edit problem
Records records to group related incidents.
Step 2: How to Resolve Problem Records and Describes how to resolve a single problem to
Related Incidents Automatically automatically close the related incidents.
Step 3: How to Link an Incident or Change Describes how to link an incident or change
Request to a Problem Record request to an associated problem record.
20
3. In the Tasks pane, click Create Problem.
4. In the Title box, type a title for the problem. For example, type Outlook E-Mail
Restricted Permissions.
5. In the Description box, type a description of the problem. For example, type Users
cannot view e-mail messages sent with restricted permissions.
6. If you want to assign the problem to an analyst, enter the name of the analyst in the
Assigned to box.
7. In the Source list, select the source of the problem request.
8. Select the appropriate values in the Category, Impact, and Urgency boxes.
9. Click OK.
21
cannot view e-mail messages sent with restricted permissions.
4. If you want to assign the problem to an analyst, enter the name of the analyst in the
Assigned to box.
5. In the Source list, select the source of the problem request.
6. Select the appropriate values in the Category, Impact, and Urgency boxes.
7. Click OK.
To resolve a problem record and the incidents that are associated with it
1. In the Service Manager console, click Work Items.
2. In the Work Items pane, expand Problem Management, and then click Active
Problems.
3. In the Active Problems view, double-click the problem record that you want to resolve.
Then, in the Tasks pane, click Resolve.
4. Click the Resolution tab, and then click to select the Auto-resolve all incidents
associated with this problem check box.
5. In the Resolution category box, select the appropriate category.
22
6. In the Resolution description box, type a summary of the resolution for this problem
record. For example, type Application of Exchange Server 2007 SP1 fixed the
restricted permission problem that affected users across forests.
7. Click OK.
Note
It might take a few minutes for the incident status to be updated to Resolved.
23
Managing Changes and Activities
IT departments must manage changes to their IT environment and the risk associated with such
changes. The change management features in System Center Service Manager 2010 help you
manage change by providing repeatable, predictable, and measured processes to implement
change.
The topics in this section are organized according to common change management scenarios.
Even though the sample scenarios refer to a fictitious organization, Woodgrove Bank, the
scenarios and steps are based on real use and describe how to use the change and activity
management features in Service Manager.
In This Section
Sample Scenario: Managing Changes and Activities
Describes the scenarios that involve change requests and activities in Service
Manager.
24
Sample Scenario: Managing Changes and
Activities
This sample scenario for System Center Service Manager 2010 helps you achieve your goal of
managing changes and activities by using multiple scenarios end-to-end. You can think of this
sample scenario as a case study that helps put the individual scenarios and procedures in
context.
Initiating and Classifying a Change Request Describes how change requests are started
and classified. Also describes how to add items
and activities to change requests.
Approving and Modifying Change Requests Describes how to modify change requests by
adding change details and change reviewers.
Also describes how to approve a review
activity.
Suspending and Resuming a Change Request Describes how to pause and resume a change
request.
Implementing and Closing a Change Request Describes how to complete manual activities to
track tasks, how to close a change request
after you finalize the changes, and how to
notify users.
25
After the change request is created, the change reviewers at Woodgrove Bank must approve the
change request, and the change implementers must complete the actions that are required for
the change. These review and implementation steps are defined in the change request as a set of
review activities and manual activities.
26
See Also
Initiating and Classifying a Change Request
Approving and Modifying Change Requests
Suspending and Resuming a Change Request
Implementing and Closing a Change Request
Task Description
Step 1: How to Create a New Change Request Describes how to create a new change request
for a service to modify server infrastructure.
Step 2: How to Add Related Items to a Change Describes how to add items, such as files, to a
Request change request.
Step 3: How to Add Manual Activities to a Describes how to add a manual activity to a
Change Request change request to manage tasks.
27
view, you can also create a new change request from other places in System Center Service
Manager 2010.
Note
IDs assigned to change requests and incidents are not created in sequence. However,
newer change requests and incidents are assigned IDs with a higher number than ones
created previously.
28
To validate the creation of a change request
1. Open the service that contains the items for which you created the change request,
and then click the Service Dependents tab.
2. In the Service Components list, notice that the two servers you opened the change
request for are marked with YES under the Affected By Change column.
3. Click Cancel to close the service.
Note
You might need to maximize the form to view buttons on the tab.
6. Under Knowledge Articles, click Add to attach a knowledge article to the change
request.
7. Click OK.
29
To validate that you added related items to a change request
To verify that the file and knowledge articles were attached to the change request,
reopen the change request, and then click the Related Items tab.
30
Approving and Modifying Change Requests
The procedures in this section describe how to approve a change request in System Center
Service Manager 2010.
For a detailed description of the complete scenario for approving a change request, see Sample
Scenario: Managing Changes and Activities.
Task Description
Step 1: How to Edit a Change Request Describes how to edit a change request to add
or revise details.
Step 2: How to Add a Change Reviewer Describes how to add a change reviewer to a
change request.
Step 3: How to Approve a Review Activity Describes how to approve a review activity for
Using the Console a change request.
Step 3: How to Send Automated Activity and Describes how to notify users when they have
Change Request Notifications an activity that requires approval or when a
change request is closed.
31
1. Double-click the change request that you updated.
2. Verify that your changes are displayed in the change request form.
32
How to Approve a Review Activity Using the
Console
In System Center Service Manager 2010, you can use the following procedure to approve a
review activity in the Service Manager console. In many cases, multiple people or groups must
vote to approve a single review activity before its approval is final.
Note
Users can only approve or reject the activities that are assigned to them.
33
Task Description
Step 1: How to Put a Change Request on Hold Describes how to put a change request on hold
indefinitely.
Step 2: How to Resume a Change Request Describes how to resume a change request
that was put on hold.
Optional step: How to Unblock a Failed Describes how to unblock a failed change
Change Request request.
35
Implementing and Closing a Change Request
The procedures in this section describe how to implement and close a change request in System
Center Service Manager 2010.
For a detailed description of the complete scenario for implementing and closing a change
request, see Sample Scenario: Managing Changes and Activities.
Task Description
Step 1: How to Complete or Fail a Manual Describes how to complete or fail a manual
Activity activity to track tasks.
Step 2: How to Close a Change Request Describes how to close a change request after
changes are finalized or after the change
request fails.
Optional Step: How to Send Automated Activity Describes how to send automatic notifications
and Change Request Notifications for activities and change requests.
36
4. In the Tasks pane, click Mark as Failed.
5. In the Comments box, type a comment, and then click OK. For example, type The
post-implementation analysis indicates that the new hardware does not
adequately meet our needs and has failed the review.
Note
If an end user cancels a software request before the software is deployed to the end
user’s computer, the associated change request might reflect the In Progress status
indefinitely. If this occurs, cancel the request and then close it.
Note
Only administrators can configure workflow notifications.
38
15. If you are creating an e-mail notification template, complete the Create E-Mail
Notification Template wizard.
16. After you have selected an e-mail template, click Add, ensure that Reviewers appears
under the User column, and then click Next.
17. On the Summary page, review the summary information, and then click Create.
18. On the Completion page, click Close.
39
Viewing and Running Reports
One of the responsibilities of Jeff Ford, a business analyst at Woodgrove Bank, is to provide a
picture of the overall cost of the service infrastructure. One of the methods that he uses to gather
data is Service Manager reports. Service Manager reports enable him to collect and view data
and trends from across the business environment. For example, he can generate a report that
shows the number of incidents that occur in a specific time frame. He can then use that
information to calculate the cost of each incident (in hours) and also to identify any trends and
take preventative measures to reduce the cost and occurrence of incidences.
Reports are viewable for all Service Manager console users in Reporting. If users can view work
items, they can also view reports in work item task lists. Any user can export report data from a
report they view. Exported reports are saved in a variety of file formats.
The following tasks are addressed in this guide.
Task Reference
40
Change management List of RFCs Provides a list of RFCs within
a certain timeframe
Change management RFC Detail Provides a detailed view of a
specified RFC.
Configuration management Computer Detail Provides detailed configuration
information for a specific
computer.
Configuration management Computer Inventory Provides a list of computers
available in the management
group.
Incident management Incident analyst report
Incident management Incident detail Provides detailed information
for a specific incident.
Incident management Incident SLA
Incident management List of Incidents Provides a list of all incidents
within a certain timeframe.
Problem management List of Problems Provides a list of all problems
within a certain timeframe.
Problem management Problem detail Provides detailed information
for a specified problem.
41
Reporting workspace and all the reports in Service Manager. You can also grant restricted access
to specific report folders (such as the Incident report folder) or to individual reports. The following
procedure describes how to grant SSRS access for all the Service Manager reports to an Active
Directory group (woodgrove\SCSMReportAccess).
Note
Before you can run a report, the ETL process must be complete. For more information
about the ETL process and about how to schedule it to run, see How to Enable Data
Warehouse Jobs Schedules in the Service Manager Administration Guide
(http://go.microsoft.com/fwlink/?LinkId=178233).
The Service Manager data warehouse does not create dimensions for classes or
relationships in unsealed management packs. If you are using an unsealed management
pack, you will not see any data from that management pack in your reports. Because of
this, the best practice is to model all classes and relationships in sealed management
packs.
For this example, you must have previously created an incident. Otherwise, the report will
return no data.
To run a report
1. In the Service Manager console, click Reporting.
42
2. Expand Reports, and then expand a report folder. For example, expand Incident
Management.
Click the name of the report you want to run. For example, click List of Incidents
Report.
3. In the Tasks list, click Run Report.
4. Click Parameter Control Header to display the parameter controls for the report. Use
these parameters to customize the report.
Each report has a set of parameters you can use to search and filter for the specific
items you want to include in the report. For example, in the List of Incidents report,
you can set the following parameters:
Date Filter – you can search by the date the incident was created, by the date it
was resolved, or by the date it was closed.
Assigned To
Priority
ID
Description
Resolution Description
Contact Method
Source
Status
Classification
Support Group
Urgency
Impact
Resolution Category
5. In the Start Date list, select the date one week before the current date (today), and
then click anywhere in the form.
6. Optionally, specify other criteria that you want to filter.
7. In the Tasks list, click Run Report.
8. In the report, review the data to ensure the incident information that you want to view is
displayed. If you do not see the information you expect, revise the criteria, and then run
the report again by clicking Run Report.
In reports that show lists or additional detail (such as the associated sub-reports in the
List of Incidents report), you might see multiple rows that contain the same information.
This is because an instance can have multiple types (for example, a computer is a
Computer and a Windows Computer and a Managed Windows Computer). The level
of detail for these reports is per type per instance, so these multiple types result in
multiple rows.
Note
43
If there is no data in the report, ensure that the ETL process is complete. A
delay might occur between the start of the process and when data is available
for reports.
44
How to Create a Linked Report in Service
Manager
You can use the following procedure in System Center Service Manager 2010 to create a linked
report.
A linked report is a shortcut to a report—it is similar to a program shortcut on your desktop. A
linked report is derived from publicly defined reports from any management pack. A linked report
retains some of the original report's properties, such as the report layout. Other properties of the
linked report, such as parameters and subscriptions, can be different from the original report.
45
3. Type a name for the report, and then click OK.
4. Close the report window.
5. In the Reporting navigation tree, click Favorite Reports.
The new report is displayed.
46