[mssms] RE: Inconsistent software updates reports
For case one, make sure you are running the report against the same SUG that the deployment uses. This report will show different results if the SUGs are different. The downfall of enforcement state reports is that it will tell you a server is compliant, but only against what you've advertised to it, not against what it needs. so either include everything from MS in a deployment or be cognizant of which updates you're compliant against. For case two, in SCCM 2012 clients will report Downloaded Updates instead of waiting for maintenance window like in 2007. Check to make sure it's not actually waiting for a maintenance window. There may be nothing wrong with it. I also find that sometimes repairing the client doesn't do what's needed to clear up status reporting. I usually completely uninstall first, then reinstall, and sometimes I stop BITS and the Windows Update services rename c:\windows\softaredistribution to .old and restart the services. C:\windows\windowsupdate.log will let you know what's going on too to some degree. Todd From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Corkill, Daniel Sent: Sunday, January 4, 2015 10:46 PM To: mssms@lists.myitforum.com Subject: [mssms] Inconsistent software updates reports Why not start my first day back from the break with some patching fun. Firstly, I have a server that when viewed using the 'states 1 - enforcement states for a deployment' report shows as compliant, but when I view the 'compliance 3 - update group (per update)' report it's listed as required for an update (the latest Flash Player update which we SCUP). I have confirmed the update is installed on the server and there's no updates available in software center. I've performed a software updates deployment eval scan and confirmed in the statemessage.log that the messages are successfully being forwarded to the MP. This morning I performed a repair of the client and the reports are still inconsistent. Secondly, another server is reporting a 'downloaded updates' last state in the 'states 1 - enforcement states for a deployment' report despite all applicable updates being installed. I performed a repair of the client on this server too but it's not being reported as complaint. Does anyone have any thoughts or suggestions? Always appreciative. Daniel. * This email, including any attachment, is confidential to the intended recipient. It may also be privileged and may be subject to copyright. If you have received this email in error, please notify the sender immediately and delete all copies of the email. Any confidentiality or privilege is not waived. Neither the Council nor the sender warrant that this email does not contain any viruses or other unsolicited items. This email is an informal Council communication. The Council only accepts responsibility for information sent under official letterhead and duly signed by, or on behalf of, the Chief Executive Officer. Privacy Collection Notice Logan City Council may collect your personal information, e.g. name, residential address, phone number etc, in order to conduct its business and/or meet its statutory obligations. The information will only be accessed by employees and/or Councillors of Logan City Council for Council business related activities only. If your personal information will be passed onto a third party, Council will advise you of this disclosure, the purpose of the disclosure and reason why. Your information will not be given to any other person or agency unless you have given us permission or we are required by law.
RE: [mssms] RE: User/Device Affinity
Sounds like we won’t be the only one using UDA. I wasn’t a fan at first, but once everyone gets the correct device, it makes stuff a lot easier. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Roland Janus Sent: Saturday, January 3, 2015 8:03 PM To: mssms@lists.myitforum.com Subject: RE: [mssms] RE: User/Device Affinity That’s actually a mix of both threads, just adding primary device only to it. -R From: Roland Janus [mailto:roland.ja...@hispeed.ch] Sent: Sonntag, 4. Januar 2015 02:02 To: 'mssms@lists.myitforum.com' Subject: RE: [mssms] RE: User/Device Affinity Actually, I wouldn’t mind, but I haven’t figured out yet how and what I want exactly. ☺ One thing seems to be clear, from the other thread: I need the applications list from all applications, the required ones for the user of the currently re-installed device and all available applications the user requested through the portal. Actually, I was looking at this http://www.petervanderwoude.nl/post/install-user-targeted-applications-during-os-deployment-via-powershell-and-configmgr-2012/ But I think the SQL query seems to be much easier, so I wouldn’t mind at all if you have that already or something I can build on. The only thing left with this would be superseded applications. If version 1.0 was installed through the portal, a supersedence updated it to 1.1, then the query would only get me 1.0 again and not 1.1. Not sure what to do with that. I don’t want it to be to complex (complicated ☺ ) -Roland From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Todd Hemsell Sent: Samstag, 3. Januar 2015 21:08 To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: Re: [mssms] RE: User/Device Affinity that is what I do. Do you need code? On Tue, Dec 30, 2014 at 1:38 PM, Roland Janus roland.ja...@hispeed.chmailto:roland.ja...@hispeed.ch wrote: My goal is to have admin assigned UDA only, through service desk, and assign software mainly to users to avoid managing computers (or asking users for them) I also want it to be installed on the device with the primary user only, not have them followed. -R From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] On Behalf Of Robert Schlichting Sent: Dienstag, 30. Dezember 2014 19:44 To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: [mssms] RE: User/Device Affinity Personally.. I don’t really care about user affinity to any specific device.. but then, I’m a fairly small facility, and users are either always using the same machines, or they are using identical kiosks, so for us, UDA really doesn’t do much. -Rob. From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of John Aubrey Sent: Tuesday, December 30, 2014 11:15 AM To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: [mssms] User/Device Affinity Does anyone use UDA? I’ve been toying around with the idea of more user centric approach. Our IT department isn’t very good at keeping our inventory system up to date. From my job, it probably wouldn’t be any harder than managing systems. I don’t really care what computer you are using, I care that the correct software is available to you. What’s everyone’s thoughts? --John
RE: [mssms] Application naming
Our packaging factory build MSI packages with specific naming conventions, so for best practices sake we add (most of the time :) ) them with the same name : [cid:image001.png@01D0290D.414F8AF0] -Message d'origine- De : listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] De la part de Merenda, Kenneth Envoyé : lundi 5 janvier 2015 17:22 À : mssms@lists.myitforum.com Objet : RE: [mssms] Application naming I try to match exactly the publisher, title and version as shown in Programs and Features. Since we can't have duplicate application names, sometimes I will include the version in the application title, but not in the application catalog localized application name. Kenneth Merenda -Original Message- From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of William Jackson Sent: Monday, January 5, 2015 9:56 AM To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: Re: [mssms] Application naming How are you naming your applications? Specifically, are you using the version field or are you adding the version (also?) to the name? What about Publisher? Attached is a taste of what I do. * I fill in Publisher (which, strangely, is Manufacturer when looking at a list of Applications in the console). * I include the Application name and version in the Name field, with a few exceptions. I *don't* include the version number in the Application Catalog Localized application name. * I put the version in the Version field. Java is a funny one. I use, for example, Java 8 Update 25 for the name and 8.0.250 (the version in the MSI) for the version. William
RE: [mssms] Application naming
I try to match exactly the publisher, title and version as shown in Programs and Features. Since we can't have duplicate application names, sometimes I will include the version in the application title, but not in the application catalog localized application name. Kenneth Merenda -Original Message- From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of William Jackson Sent: Monday, January 5, 2015 9:56 AM To: mssms@lists.myitforum.com Subject: Re: [mssms] Application naming How are you naming your applications? Specifically, are you using the version field or are you adding the version (also?) to the name? What about Publisher? Attached is a taste of what I do. * I fill in Publisher (which, strangely, is Manufacturer when looking at a list of Applications in the console). * I include the Application name and version in the Name field, with a few exceptions. I *don't* include the version number in the Application Catalog Localized application name. * I put the version in the Version field. Java is a funny one. I use, for example, Java 8 Update 25 for the name and 8.0.250 (the version in the MSI) for the version. William
[mssms] SCCM 2012 reports not running for standard user
Hi, I am having an issue running reports from the SQL Server Reporting Services URL. I have two accounts, an elevated account the is part of Domain Admins and has the Full Administrator security role within SCCM 2012 and a standard user account that has no domain privileges. My standard account though is part of an AD group for SCCM reporting that I am trying to grant privileges to run reports. If I start IE with my standard account, none of the drop downs (for Collection , etc) populate. Thought if the report has no drop downs iI will get the report headign information but no data. If I start IE with my elevated account I can run reports fine. Based on Google searches, I have added the following security to the Report Viewers Security role: 1. set Read permissions to Yes for Site 2. set View Asset Intelligence to Yes for Software Titles Note: this did not fix the issue I have granted the AD group datareader permissions on the SCCM SQL Server and REportign server databases...this did not work. Just to check, I granted the group SysAdmin privileges to the databases..did not work either and have since removed. Anyone have any idea what set of permissions I am missing? Thanks and Happy New Year, Paul
RE: [mssms] Summarization - Collection in console
Err ok but you do know that the console has more overhead to it than running reports. Plus you now have to give each user the console and therefore anytime you install a CU or R or SP release you will need to update every user. The summarizing task are not documents anywhere (to my knowledge). Since I always want my users to see the most current data, I never point them to the console and only point them to the reports, plus I'm still a firm believe that you need to keep everyone out of the console (even with RBA enabled) From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of sccmfun Sent: Wednesday, December 31, 2014 1:47 PM To: mssms@lists.myitforum.com Subject: RE: [mssms] Summarization - Collection in console We have some users who don't have access to the reports, rbac'ed them so all they have is console access. Chances are I'm going to leave it the way it is, but for my own knowledge would of liked to know how to kick it off and not wait to summarize. From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Garth Jones Sent: Wednesday, December 31, 2014 11:41 AM To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: RE: [mssms] Summarization - Collection in console I'm unclear as to why you wouldn't use reports. Report will ALWAYS be 100% update date, the console will be up to 24 hours out of date as the data is summarized, in order to allow the console to be fast. IMO you should NEVER use the console for anything except for creating collection and deploying software. It is just not as efficient as the reports. From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Roland Janus Sent: Wednesday, December 31, 2014 10:37 AM To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: RE: [mssms] Summarization - Collection in console Because it's not the same thing and having data in that view but not being accurate would make it useless. I have the same question with clients showing 29.12. as scan date, but there is inventory from today (31th), hence the question, where is that data coming from and what would update it? -R From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Garth Jones Sent: Mittwoch, 31. Dezember 2014 15:51 To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: RE: [mssms] Summarization - Collection in console Why wouldn't you use a report for this? What exactly are you trying to do? From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of sccmfun Sent: Wednesday, December 31, 2014 9:17 AM To: mssms@lists.myITforum.commailto:mssms@lists.myITforum.com Subject: [mssms] Summarization - Collection in console Does anyone know how to force summarization so you can see up-to-date info such as HW inventory scan when looking at machines in a collection. If you look at a collection of machines and select the different columns, one of them being hardware inventory, the data is outdated. I know this view is based off summarization, but don't know what the summarization schedule is or how to kick it off manually. I searched for the stored proc, but no luck. I'm also confused as the summarization for the policy requests column seems to update more frequently, but doesn't look like the hardware or other info is updated as quick. I would assume it's one stored proc that updates everything, but then wouldn't all columns update and not just the policy request? Any info on this is appreciated. Happy New Year!
RE: [mssms] Summarization - Collection in console
If I'm already in the console and I don't need 100% update data then the console is fine. But if I'm not in the console or that I need 100% up to date data them the reports will be faster/better. Doing it more often will clearly impact performance. The real issue is do you care? IMO for 2000 computer if you see any performance issues running the summarizer more than once every 24 hours then you have much bigger problems. Just my two Canadian cents. :) From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Roland Janus Sent: Wednesday, December 31, 2014 7:26 PM To: mssms@lists.myitforum.com Subject: RE: [mssms] Summarization - Collection in console I'm not saying I wouldn't use the reports, but it is easier and faster to see some basic information while I'm already in the console and the collection instead of opening a report. If I know it's a day behind, everything below may worth a look into. The same record now updated after 2 days. That probably could be speed up. We may only have max 2000 clients, doing anything more often shouldn't impact performance but make that actually useful. -R From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Garth Jones Sent: Mittwoch, 31. Dezember 2014 17:41 To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: RE: [mssms] Summarization - Collection in console I'm unclear as to why you wouldn't use reports. Report will ALWAYS be 100% update date, the console will be up to 24 hours out of date as the data is summarized, in order to allow the console to be fast. IMO you should NEVER use the console for anything except for creating collection and deploying software. It is just not as efficient as the reports. From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Roland Janus Sent: Wednesday, December 31, 2014 10:37 AM To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: RE: [mssms] Summarization - Collection in console Because it's not the same thing and having data in that view but not being accurate would make it useless. I have the same question with clients showing 29.12. as scan date, but there is inventory from today (31th), hence the question, where is that data coming from and what would update it? -R From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Garth Jones Sent: Mittwoch, 31. Dezember 2014 15:51 To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: RE: [mssms] Summarization - Collection in console Why wouldn't you use a report for this? What exactly are you trying to do? From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of sccmfun Sent: Wednesday, December 31, 2014 9:17 AM To: mssms@lists.myITforum.commailto:mssms@lists.myITforum.com Subject: [mssms] Summarization - Collection in console Does anyone know how to force summarization so you can see up-to-date info such as HW inventory scan when looking at machines in a collection. If you look at a collection of machines and select the different columns, one of them being hardware inventory, the data is outdated. I know this view is based off summarization, but don't know what the summarization schedule is or how to kick it off manually. I searched for the stored proc, but no luck. I'm also confused as the summarization for the policy requests column seems to update more frequently, but doesn't look like the hardware or other info is updated as quick. I would assume it's one stored proc that updates everything, but then wouldn't all columns update and not just the policy request? Any info on this is appreciated. Happy New Year!
RE: [mssms] Summarization - Collection in console
Hi folks, I did a deep dive into the frequency of update of HINV in the collection columns recently. While I never proved a refresh for the summarization, it was long enough that it made using those HINV dates not useful within about a week. I did discover that the Policy Request column is realtime. I tried to create a collection query that would show me Policy Request dates within x days so I could base actions such as software update only on super fresh clients. However, I have not yet found how to expose the Policy Request date in the collection column based on the WMI classes that are available in a collection query. Ivan Lindenfeld From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Garth Jones Sent: Monday, January 5, 2015 4:32 PM To: mssms@lists.myitforum.com Subject: RE: [mssms] Summarization - Collection in console Err ok but you do know that the console has more overhead to it than running reports. Plus you now have to give each user the console and therefore anytime you install a CU or R or SP release you will need to update every user. The summarizing task are not documents anywhere (to my knowledge). Since I always want my users to see the most current data, I never point them to the console and only point them to the reports, plus I'm still a firm believe that you need to keep everyone out of the console (even with RBA enabled) From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of sccmfun Sent: Wednesday, December 31, 2014 1:47 PM To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: RE: [mssms] Summarization - Collection in console We have some users who don't have access to the reports, rbac'ed them so all they have is console access. Chances are I'm going to leave it the way it is, but for my own knowledge would of liked to know how to kick it off and not wait to summarize. From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Garth Jones Sent: Wednesday, December 31, 2014 11:41 AM To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: RE: [mssms] Summarization - Collection in console I'm unclear as to why you wouldn't use reports. Report will ALWAYS be 100% update date, the console will be up to 24 hours out of date as the data is summarized, in order to allow the console to be fast. IMO you should NEVER use the console for anything except for creating collection and deploying software. It is just not as efficient as the reports. From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Roland Janus Sent: Wednesday, December 31, 2014 10:37 AM To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: RE: [mssms] Summarization - Collection in console Because it's not the same thing and having data in that view but not being accurate would make it useless. I have the same question with clients showing 29.12. as scan date, but there is inventory from today (31th), hence the question, where is that data coming from and what would update it? -R From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Garth Jones Sent: Mittwoch, 31. Dezember 2014 15:51 To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: RE: [mssms] Summarization - Collection in console Why wouldn't you use a report for this? What exactly are you trying to do? From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of sccmfun Sent: Wednesday, December 31, 2014 9:17 AM To: mssms@lists.myITforum.commailto:mssms@lists.myITforum.com Subject: [mssms] Summarization - Collection in console Does anyone know how to force summarization so you can see up-to-date info such as HW inventory scan when looking at machines in a collection. If you look at a collection of machines and select the different columns, one of them being hardware inventory, the data is outdated. I know this view is based off summarization, but don't know what the summarization schedule is or how to kick it off manually. I searched for the stored proc, but no luck. I'm also confused as the summarization for the policy requests column seems to update more frequently, but doesn't look like the hardware or other info is updated as quick. I would assume it's one stored proc that updates everything, but then wouldn't all columns update and not just the policy request? Any info on this is appreciated. Happy New Year! NOTICE: The information contained in this message is proprietary and/or confidential and may be privileged. If you are not the intended recipient of this communication, you are hereby notified to: (i)
RE: [mssms] Summarization - Collection in console
How often are you doing HW Inv? How often are you doing Heartbeat discovery? From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Lindenfeld, Ivan Sent: Monday, January 5, 2015 4:40 PM To: mssms@lists.myitforum.com Subject: RE: [mssms] Summarization - Collection in console Hi folks, I did a deep dive into the frequency of update of HINV in the collection columns recently. While I never proved a refresh for the summarization, it was long enough that it made using those HINV dates not useful within about a week. I did discover that the Policy Request column is realtime. I tried to create a collection query that would show me Policy Request dates within x days so I could base actions such as software update only on super fresh clients. However, I have not yet found how to expose the Policy Request date in the collection column based on the WMI classes that are available in a collection query. Ivan Lindenfeld From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Garth Jones Sent: Monday, January 5, 2015 4:32 PM To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: RE: [mssms] Summarization - Collection in console Err ok but you do know that the console has more overhead to it than running reports. Plus you now have to give each user the console and therefore anytime you install a CU or R or SP release you will need to update every user. The summarizing task are not documents anywhere (to my knowledge). Since I always want my users to see the most current data, I never point them to the console and only point them to the reports, plus I'm still a firm believe that you need to keep everyone out of the console (even with RBA enabled) From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of sccmfun Sent: Wednesday, December 31, 2014 1:47 PM To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: RE: [mssms] Summarization - Collection in console We have some users who don't have access to the reports, rbac'ed them so all they have is console access. Chances are I'm going to leave it the way it is, but for my own knowledge would of liked to know how to kick it off and not wait to summarize. From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Garth Jones Sent: Wednesday, December 31, 2014 11:41 AM To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: RE: [mssms] Summarization - Collection in console I'm unclear as to why you wouldn't use reports. Report will ALWAYS be 100% update date, the console will be up to 24 hours out of date as the data is summarized, in order to allow the console to be fast. IMO you should NEVER use the console for anything except for creating collection and deploying software. It is just not as efficient as the reports. From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Roland Janus Sent: Wednesday, December 31, 2014 10:37 AM To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: RE: [mssms] Summarization - Collection in console Because it's not the same thing and having data in that view but not being accurate would make it useless. I have the same question with clients showing 29.12. as scan date, but there is inventory from today (31th), hence the question, where is that data coming from and what would update it? -R From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Garth Jones Sent: Mittwoch, 31. Dezember 2014 15:51 To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: RE: [mssms] Summarization - Collection in console Why wouldn't you use a report for this? What exactly are you trying to do? From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of sccmfun Sent: Wednesday, December 31, 2014 9:17 AM To: mssms@lists.myITforum.commailto:mssms@lists.myITforum.com Subject: [mssms] Summarization - Collection in console Does anyone know how to force summarization so you can see up-to-date info such as HW inventory scan when looking at machines in a collection. If you look at a collection of machines and select the different columns, one of them being hardware inventory, the data is outdated. I know this view is based off summarization, but don't know what the summarization schedule is or how to kick it off manually. I searched for the stored proc, but no luck. I'm also confused as the summarization for the policy requests column seems to update more frequently, but doesn't look like the hardware or other info is updated as quick. I would assume it's one stored proc that
RE: [mssms] Application naming
I use Ninite and PSAppdeploy for most apps. I made a powershell script for each application that will: 1. Create a ninite offline installer 2. Create a folder to store this version which is something like Firefox32.0.2 to keep it simple 3. Copy in the stock PSappdeploy files/folders and modify for the application (including what apps cant be running, etc.) 4. Create an application with the right details for name and version 5. Distribute it as needed 6. Setup a dummy software detection script to run which is just exit 1 so if I don't fix it, it will always error out on the detection. I then manually, and if you know of a way to automate these PLEASE let me know: 1. Give it the app icon, I just have a folder full of their icons 2. Install it on a test machine, then I have a command I store in a wiki that will pull the details I need for detection such as MSI code, file version, registry information, etc. I then put that into the application's detection 3. Supersede the old version and retire the old version and move it to an old folder So I don't manually set the version ever, but it's always unique. Works really well for my uses. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Roland Janus Sent: Monday, 5 January 2015 11:07 PM To: mssms@lists.myitforum.com Subject: [mssms] Application naming How are you naming your applications? Specifically, are you using the version field or are you adding the version (also?) to the name? I ask because, because you can't have two versions of the same app name Example (made up): Name: Adobe Acrobat Reader X, Version: 10.0 Name: Adobe Acrobat Reader X, Version: 10.1 wouldn't work as name has to be unique, although the add app wizard would create copy entries, so are you adding the version to name and leave version blank or are you adding it to both? Like that: Name: Adobe Acrobat Reader X (10.0), Version: 10.0 Name: Adobe Acrobat Reader X (10.1), Version: 10.1 What about Publisher? It is actually meant like that I guess: Publisher: Adobe, Name: Acrobat Reader, Version: 10.1 You do that or a mix? -R
RE: [mssms] Application naming
For chrome you didn't. Why is that? -R -Original Message- From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of William Jackson Sent: Montag, 5. Januar 2015 16:56 To: mssms@lists.myitforum.com Subject: Re: [mssms] Application naming How are you naming your applications? Specifically, are you using the version field or are you adding the version (also?) to the name? What about Publisher? Attached is a taste of what I do. * I fill in Publisher (which, strangely, is Manufacturer when looking at a list of Applications in the console). * I include the Application name and version in the Name field, with a few exceptions. I *don't* include the version number in the Application Catalog Localized application name. * I put the version in the Version field. Java is a funny one. I use, for example, Java 8 Update 25 for the name and 8.0.250 (the version in the MSI) for the version. William
RE: [mssms] Application naming
Sometimes? Why not always? Because ARP doesn't have it, so CM also doesn't? -Original Message- From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Merenda, Kenneth Sent: Montag, 5. Januar 2015 17:22 To: mssms@lists.myitforum.com Subject: RE: [mssms] Application naming I try to match exactly the publisher, title and version as shown in Programs and Features. Since we can't have duplicate application names, sometimes I will include the version in the application title, but not in the application catalog localized application name. Kenneth Merenda -Original Message- From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of William Jackson Sent: Monday, January 5, 2015 9:56 AM To: mssms@lists.myitforum.com Subject: Re: [mssms] Application naming How are you naming your applications? Specifically, are you using the version field or are you adding the version (also?) to the name? What about Publisher? Attached is a taste of what I do. * I fill in Publisher (which, strangely, is Manufacturer when looking at a list of Applications in the console). * I include the Application name and version in the Name field, with a few exceptions. I *don't* include the version number in the Application Catalog Localized application name. * I put the version in the Version field. Java is a funny one. I use, for example, Java 8 Update 25 for the name and 8.0.250 (the version in the MSI) for the version. William
RE: [mssms] Application naming
I saw something similar before, but the MSIs arent registered like that in ARP are they? -R From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of LEROY Mathieu Sent: Montag, 5. Januar 2015 17:30 To: mssms@lists.myitforum.com Subject: RE: [mssms] Application naming Our packaging factory build MSI packages with specific naming conventions, so for best practices sake we add (most of the time :) ) them with the same name : -Message d'origine- De : listsad...@lists.myitforum.com mailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] De la part de Merenda, Kenneth Envoyé : lundi 5 janvier 2015 17:22 À : mssms@lists.myitforum.com mailto:mssms@lists.myitforum.com Objet : RE: [mssms] Application naming I try to match exactly the publisher, title and version as shown in Programs and Features. Since we can't have duplicate application names, sometimes I will include the version in the application title, but not in the application catalog localized application name. Kenneth Merenda -Original Message- From: mailto:listsad...@lists.myitforum.com listsad...@lists.myitforum.com [ mailto:listsad...@lists.myitforum.com mailto:listsad...@lists.myitforum.com] On Behalf Of William Jackson Sent: Monday, January 5, 2015 9:56 AM To: mailto:mssms@lists.myitforum.com mssms@lists.myitforum.com Subject: Re: [mssms] Application naming How are you naming your applications? Specifically, are you using the version field or are you adding the version (also?) to the name? What about Publisher? Attached is a taste of what I do. * I fill in Publisher (which, strangely, is Manufacturer when looking at a list of Applications in the console). * I include the Application name and version in the Name field, with a few exceptions. I *don't* include the version number in the Application Catalog Localized application name. * I put the version in the Version field. Java is a funny one. I use, for example, Java 8 Update 25 for the name and 8.0.250 (the version in the MSI) for the version. William
Re: [mssms] WIN32_TPM
In case anyone was following along or had thoughts of making this addition
within their environment, below is the final CM_TPM that was used. Thanks
again Sherry for all of your assistance.
// // This goes in Configuration.mof
//-
#pragma namespace (.\\root\\cimv2 file://root/cimv2)
[Union, ViewSources{select
IsActivated_InitialValue,IsEnabled_InitialValue,IsOwned_InitialValue,ManufacturerId,ManufacturerVersion,ManufacturerVersionInfo,PhysicalPresenceVersionInfo,SpecVersion
from Win32_TPM},ViewSpaces{.\\root\\cimv2\\Security\\MicrosoftTpm
file://root/cimv2/Security/MicrosoftTpm},
dynamic,Provider(MS_VIEW_INSTANCE_PROVIDER)]
class cm_tpm
{
[PropertySources{IsActivated_InitialValue}] boolean
IsActivated_InitialValue;
[PropertySources{IsEnabled_InitialValue}] boolean IsEnabled_InitialValue;
[PropertySources{IsOwned_InitialValue}] boolean IsOwned_InitialValue;
[PropertySources{ManufacturerId}] uint32 ManufacturerId;
[PropertySources{ManufacturerVersion}] string ManufacturerVersion;
[PropertySources{ManufacturerVersionInfo}] string ManufacturerVersionInfo;
[PropertySources{PhysicalPresenceVersionInfo}] string
PhysicalPresenceVersionInfo;
[PropertySources{SpecVersion},key] string SpecVersion;
};
On Wed, Dec 17, 2014 at 9:53 AM, April Cook uge...@gmail.com wrote:
Thanks for connecting all of the dots! I will check it out in my non-prod
environment :)
On Wed, Dec 17, 2014 at 9:45 AM, Sherry Kissinger
slkissin...@sbcglobal.net wrote:
Here's a mock up--completely untested; just wrote it up in the last 5
minutes...here's the basics of how I cheat to query the same wmi class that
the default already has. I use configuration.mof to copy what I want
into a I made it up class (in this case, cm_tpm, it'll end up in
root\cimv2). and then via the import (equivalent of, sms_def.mof) query
the I made-it-up class.
I'm sure you already know this, but the reason those three attributes
aren't in the default is that Vista and Server 08 simply don't have those
attributes. That's why MS doesn't have them in the default--Vista is still
supported/was supported when CM12 was first released, so the default mof is
staged to be able to pull back values available for all supported OS. so
if you happen to have any vista or server08 which currently report
win32_tpm stuff--they won't be able to report back any cm_tpm stuff (they
don't have those 3 attribs, so the wmi query fails)
// // This goes in Configuration.mof
//-
[Union, ViewSources{select SpecVersion, ManufacturerVersion,
ManufacturerVersionInfo, ManufacturerId, PhysicalPresenceVersionInfo,
IsActivated_InitialValue, IsEnabled_InitialValue, IsOwned_InitialValue from
Win32_TPM},ViewSpaces{rootCIMv2SecurityMicrosoftTpm},
dynamic,Provider(MS_VIEW_INSTANCE_PROVIDER)]
class cm_TPM
{
[PropertySources{SpecVersion},key] string SpecVersion;
[PropertySources{ManufacturerVersion}] string
ManufacturerVersion;
[PropertySources{ManufacturerVersionInfo}] string
ManufacturerVersionInfo;
[PropertySources{ManufacturerId}] uint32
ManufacturerId;
[PropertySources{PhysicalPresenceVersionInfo}] string
PhysicalPresenceVersionInfo;
[PropertySources{IsActivated_InitialValue}]boolean
IsActivated_InitialValue;
[PropertySources{IsEnabled_InitialValue}] boolean
IsEnabled_InitialValue;
[PropertySources{IsOwned_InitialValue}]boolean
IsOwned_InitialValue;
};
// // This you save as something.mof, and import into default
client agent //---
[ dynamic, provider(MS_VIEW_INSTANCE_PROVIDER),
SMS_Report (TRUE),
SMS_Group_Name (TPMCustom),
SMS_Class_ID (TPMCustom)]
class cm_TPM : SMS_Class_Template
{
[ SMS_Report (TRUE),key ]string SpecVersion;
[ SMS_Report (TRUE) ]string ManufacturerVersion;
[ SMS_Report (TRUE) ]string ManufacturerVersionInfo;
[ SMS_Report (TRUE) ]uint32 ManufacturerId;
[ SMS_Report (TRUE) ]string PhysicalPresenceVersionInfo;
[ SMS_Report (TRUE) ]boolean IsActivated_InitialValue;
[ SMS_Report (TRUE) ]boolean IsEnabled_InitialValue;
[ SMS_Report (TRUE) ]boolean IsOwned_InitialValue;
};
On Wednesday, December 17, 2014 8:29 AM, April Cook uge...@gmail.com
wrote:
I am not opposed to leaving the original WIN32_TPM, an then adding in a
TPM_Custom that contains all of the fields. If you fell like mocking I
would be appreciate that.
Otherwise, curious if others have run intot this issue and what they
chose to do?
On Wed, Dec 17, 2014 at 9:16 AM, Sherry Kissinger
slkissin...@sbcglobal.net wrote:
Well... in general I say never, ever modify any default class. What
could potentially happen (I'm not saying it would, just that I wouldn't
trust that it would not), is that some future update to ConfigMgr would
Re: [mssms] Application naming
How are you naming your applications? Specifically, are you using the version field or are you adding the version (also?) to the name? What about Publisher? Attached is a taste of what I do. * I fill in Publisher (which, strangely, is Manufacturer when looking at a list of Applications in the console). * I include the Application name and version in the Name field, with a few exceptions. I *don't* include the version number in the Application Catalog Localized application name. * I put the version in the Version field. Java is a funny one. I use, for example, Java 8 Update 25 for the name and 8.0.250 (the version in the MSI) for the version. William
RE: [mssms] SCCM 2012 reports not running for standard user
If you are not seeing any data it is most likely because of how RBA is setup. How exactly did you setup the reporting role? From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of pd...@nlh.nl.ca Sent: Monday, January 5, 2015 12:05 PM To: mssms@lists.myitforum.com Subject: [mssms] SCCM 2012 reports not running for standard user Hi, I am having an issue running reports from the SQL Server Reporting Services URL. I have two accounts, an elevated account the is part of Domain Admins and has the Full Administrator security role within SCCM 2012 and a standard user account that has no domain privileges. My standard account though is part of an AD group for SCCM reporting that I am trying to grant privileges to run reports. If I start IE with my standard account, none of the drop downs (for Collection , etc) populate. Thought if the report has no drop downs iI will get the report headign information but no data. If I start IE with my elevated account I can run reports fine. Based on Google searches, I have added the following security to the Report Viewers Security role: 1. set Read permissions to Yes for Site 2. set View Asset Intelligence to Yes for Software Titles Note: this did not fix the issue I have granted the AD group datareader permissions on the SCCM SQL Server and REportign server databases...this did not work. Just to check, I granted the group SysAdmin privileges to the databases..did not work either and have since removed. Anyone have any idea what set of permissions I am missing? Thanks and Happy New Year, Paul
