Azure AD Connect MonitoringAgent High CPU – Server 2016

So… I’m running an AD on an Intel NUC, and after a recent set of updates the NUC started to sound like a hairdryer!

 The ESXi Host was reporting some pretty fantastic CPU numbers (considering there’s not a lot of workloads on this yet, 3 VMs doing not a lot).

393FAAD0-4CB5-4DC5-BAC4-942EFE8D44C8
When having a look at the VM, I see most of the CPU being taken up by ‘Microsoft.Online.Reporting.Monitoring.Agent.Startup’. This is a component of Azure AD Connect, which I’m using to sync user accounts into Office 365 for my Lab.
Some time later and a bit of Google-Fu, I found this on MSDN. The initial comments mentioned that KB4054566 was to blame, but searching for the update it was not present on my system.
Some of the other suggestions mentioned:
  • Server 2008R2 “Microsoft .NET Framework 4.7.2”
  • Server 2012 = KB4054542
  • Server 2012R2 = KB4054566
  • Server 2016 = KB4054590

Another potential. However: AC58268A-EB8C-4006-AC1E-80F52F2297BC.png

Scrolling some more,  PieterPretorius came up with the following discovery. KB4338814!!

This one had been installed the day I did the updates, and promptly uninstalled it. Head to Control Panel, Programs and Feature and click “View installed Updates” and find KB4338814.

 

FC22E1CF-5078-4AEA-ACED-ED58E49DB004

This took a little time to remove, and after a reboot the NUC had settled down back to near silent!

I’ll be writing another post about keeping an Intel NUC NUC7i7DNHE quiet, as the default Fan settings are a bit… noisy. 

Follow Up: Keeping KB4338814 at bay. 

The next day I ran some more updates on the server and noticed that KB4338814 was coming back again! I had not tried to block updates on Server 2016 yet so had a look into it, as the usual methods I’d used in the past weren’t present.

Head to: https://support.microsoft.com/en-us/kb/3073930 and download the wushowhide.diagcab file and run it.

91A908B1-ABD8-41D9-AE09-39D8D3E1F711

10BCB8A1-FA56-4D18-AC05-92CB43DC8742.png

All done. In my case, the update was already installing when I blocked it. I had to restart the server to finsh installing it, then remove it agian, and restart…. I’m very thankful this is in a Lab and not a production system!
Many thanks to https://www.top-password.com/blog/block-specific-updates-in-windows-10/ for the information on how to hide Updates in Windows 10.

Easy access to Office 365 Apps from Workspace ONE

Providing access to applications as easy as possible is one of the primary goals of Workspace ONE. While Workspace ONE can enable Single Sign On to Office 365, I see most setups just deploying the main portal to Office 365.  One massive improvement we can make is to provide users with links directly to O365 services, such as OneDrive, Outlook and Excel Online by enabling one click links into these services.

Below is a step by step guide to get each service within Office 365 presented to end users via the Workspace ONE Catalog.

Continue reading “Easy access to Office 365 Apps from Workspace ONE”