You can also run the ConfigSecurityPolicy.exe with the full path and name of your xml policy file to apply a policy. But you may have already known that...
Thanks, Ken ... From: [email protected] [mailto:[email protected]] On Behalf Of [email protected] Sent: Monday, October 07, 2013 9:15 AM To: [email protected] Subject: [mssms] RE: SCEP 2012 policy reset/force download I wish I had an easier way. It wasn't a use case I got to test during the SP1 TAP though, maybe someone else will respond. Specifying the policy file, you can even install on machines without the configmgr agent on them, you just cant manage it without the configmgr agent being present. Christopher Catlett Consultant | Detroit [cid:[email protected]] Sogeti USA Office 248-876-9738 |Fax 877.406.9647 26957 Northwestern Highway, Suite 130, Southfield, MI 48033-8456 www.us.sogeti.com<http://www.us.sogeti.com/> From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Mote, Todd Sent: Monday, October 07, 2013 11:53 AM To: [email protected]<mailto:[email protected]> Subject: [mssms] RE: SCEP 2012 policy reset/force download Yea, thought I would end up there, just didn't know if there was something to be done as an inbetween, like renamaing a folder and restarting services or something. I hadn't considered applying the policy explicitly though, so thanks for that. Todd From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of [email protected]<mailto:[email protected]> Sent: Monday, October 7, 2013 10:16 AM To: [email protected]<mailto:[email protected]> Subject: [mssms] RE: SCEP 2012 policy reset/force download Worst case you can uninstall scep and repush it. I would export the policy you want it to have, then run the below, to reinstall scep over itself. SCEPInstall.exe /policy <policy_path_and_name>.xml Christopher Catlett Consultant | Detroit [cid:[email protected]] Sogeti USA Office 248-876-9738 |Fax 877.406.9647 26957 Northwestern Highway, Suite 130, Southfield, MI 48033-8456 www.us.sogeti.com<http://www.us.sogeti.com/> From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Mote, Todd Sent: Monday, October 07, 2013 9:51 AM To: '[email protected]' Subject: [mssms] SCEP 2012 policy reset/force download I have a client that is not getting/downloading a changed SCEP policy. How do you force it to redownload and apply the new one? Everything else seems to be working fine. The clue that it's not getting the right one, because I can't look to see the name of the policy anymore since SP1, is that the old definition update location lists windows update erroneously, and windowsupdate.log keeps trying to get to windows update to update definitions. This client was getting the wrong delivery location from the policy that was applied to it, and I've fixed that, but now the client won't get the new policy and still tries to get to windows update. The client is on RFC 1918 space and can't reach windows update. How can I look at the combined policy or remove and initiate a new download? Todd
<<inline: image001.jpg>>
