looks good. Sherry Kissinger Microsoft MVP - ConfigMgr [email protected]
________________________________ From: Todd Edwards <[email protected]> To: mssms <[email protected]> Sent: Wednesday, November 6, 2013 2:03 PM Subject: Re: [mssms] SCCM Internet Explorer Homepage Report Does this look correct for the mof edit? [SMS_Report(TRUE), SMS_Group_Name("IEStartPages"), SMS_Class_ID("IEStartPages"), SMS_Namespace(FALSE), Namespace("\\\\\\\\localhost\\\\root\\\\CustomCMClasses")] class CM_IEStartPages : SMS_Class_Template { string UserDomain; string UserName; string StartPage; [key] string Tab; string DateScriptRan; }; On Wed, Nov 6, 2013 at 2:39 PM, Todd Edwards <[email protected]> wrote: What would the sql look like for the report? The scripts and mof complied worked. > > > >On Wed, Nov 6, 2013 at 10:10 AM, Sherry Kissinger <[email protected]> >wrote: > >lol... um... here. I played around last night. this seems to work. >> >> >> >>put all 3 in a source folder, renamed of course. >> >>edit wminamespaceandsecurity.vbs and replace YOURDOMAINHERE will your >>userdomain, so that your users will have rights to the new class we're going >>to make up. >> >>Package/program/advertisement will work the easiest, although you could tweak >>1 element to be a dcm; might not be worth the hassle. >>two programs. program #1 runs cscript.exe wminamespaceandsecurity.vbs as >>system, whether or not user logged in. >>program#2 runs cscript useriestartpage.vbs, as the user context, only when a >>user is logged in. >> >> >>make program #2 have 'run another program first" of the >>wminamespaceandsecurity program; only needs to run once per machine. >> >> >>Advertise Program #2 to a test collection; and then check if you do get >>root\customcmclasses, and cm_iestartpages inside your new class. >> >> >>If so, you're just a mof edit away from pulling that back. If your users do >>have multiple start pages, that'll be multiple instances; and tab = 1 would >>be their first start page, etc. etc. >> >> >> >>Sherry Kissinger >>Microsoft MVP - ConfigMgr >>[email protected] >> >> >> >>________________________________ >> From: Trevor Sullivan <[email protected]> >>To: [email protected] >>Sent: Wednesday, November 6, 2013 8:45 AM >>Subject: RE: [mssms] SCCM Internet Explorer Homepage Report >> >> >> >>Todd Miller’s idea is excellent. That would reduce the ability for end users >>to impact the system negatively overall, but still get you the information >>you need. >> >>The only part I’m rusty on is: how do you grant “Authenticated Users” access >>to only a specific “WMI element” (I’m assuming that “WMI element” means “WMI >>class” or “instance of a WMI class”)? >> >>Cheers, >>Trevor Sullivan >> >>From:[email protected] [mailto:[email protected]] >>On Behalf Of Todd Edwards >> >>Sent: Wednesday, November 6, 2013 8:31 AM >>To: mssms >>Subject: Re: [mssms] SCCM Internet Explorer Homepage Report >> >>I like both of those ideas as I am getting to much feedback from DCM. I might >>go the route of collecting the information with a script and populating it >>into a HKLM key. I will post back with the results of what I end up doing. >> >>On Tue, Nov 5, 2013 at 7:02 PM, Sherry Kissinger <[email protected]> >>wrote: >>My suggestion, similar to this, >>http://www.mnscug.org/blogs/sherry-kissinger/249-pstfinder, via inventory. >>First script to make a custom wmi location, then a second one to copy the >>hkcu value into that custom wmi, and a mof edit to pull it into the db. >>> >>>My experience with dcm and hkcu is that it works...sorta. you get too much >>>info back so finding the forest for the trees makes it harder to know the >>>answer to whatever question you were trying to get answered. >>> >>>"Miller, Todd" <[email protected]> wrote: >>>You might have to shift the data into the machine space in some way – either >>>into WMI or HKLM. >>>> >>>>You could have a startup script create a HKLM key someplace and then grant >>>>authenticated users write access to the HKLM location. Then have a logon >>>>script that would write the data into HKLM. Then a mof edit could collect >>>>the instances in the Key you created. >>>> >>>>You could also do the same idea, but with WMI entries and granting the edit >>>>rights to Authenticated Users to that particular WMI element. >>>> >>>>I asked a similar question a week or two ago – I was looking for machines >>>>where the logged in user had a “Cryptolocker” registry key in HKCU present. >>>> I never found a simple solution in DCM even though it seems like DCM >>>>should have been able to show me machines where any user had that Key path >>>>existing. I eventually gave up. The above idea is a little rube >>>>goldbergy, but I think it would work fine. >>>> >>>>From:[email protected] [mailto:[email protected]] >>>>On Behalf Of Todd Edwards >>>>Sent: Tuesday, November 05, 2013 3:49 PM >>>>To: mssms >>>>Subject: [mssms] SCCM Internet Explorer Homepage Report >>>> >>>>Is there a way for SCCM to collection the HKCU values for each users for >>>>their IE homepage? Would DCM work? I know the extending the mof wouldn't >>>>work because it is HKCU. I have a powershell script that detects the value, >>>>but I'm not sure how I could use it in SCCM. >>>> >>>>Any help would be great. >>>> >>>>Todd Edwards >>>>Application Engineer >>>>ConfigMgr MCTS 07&12 >>>> >>>> >>>> >>>>________________________________ >>>> >>>>Notice: This UI Health Care e-mail (including attachments) is covered by >>>>the Electronic Communications Privacy Act, 18 U.S.C. 2510-2521, is >>>>confidential and may be legally privileged. If you are not the intended >>>>recipient, you are hereby notified that any retention, dissemination, >>>>distribution, or copying of this communication is strictly prohibited. >>>>Please reply to the sender that you have received the message in error, >>>>then delete it. Thank you. >>>> >>>>________________________________ >>>> >>>> >>> >> >> >> >> >> >> > >
