I have working in a very unique management environment. I never thought a
request like this would come up either.


On Thu, Nov 7, 2013 at 6:41 AM, Sherry Kissinger
<[email protected]>wrote:

> I guess it depends if what you want is the possibility of when people do
> have multiple start pages, do you want a separate row for each?  or do you
> want them concatenated together (making it harder to read... but one row
> per machine)
>
> .sql attached
> .jpg attached to see what the sql looks like in my lab (I only ran the
> scripts against 2 boxes for testing; the others will of course be null)
>
> I also re-attached the scripts and .exe and the sample .mof so it's all in
> 1 email...
> Maybe I'll blog this... or maybe I should ask.. what "else" do people care
> about in the HKCU\software\internet explorer\main regkeys? anything?  I
> can't think of anything else.  But then again, I never thought anyone would
> care whether or not someone switched their home page from the company
> intranet to facebook, either.  :)
>
> Oh, and in case it wasn't clear; I don't think I mentioned it... the
> results in WMI are only as good as the last time the script ran to copy the
> start page info from HKCU into WMI.  So if this is something you want to
> keep up to date, (or management questions the results) add in the
> datescriptran so that you can see how dated the info is for that user on
> that machine.   You may or may not want to set the advert to rerun weekly
> or something--how often you re-run depends on why you care about this info.
>
> Sherry Kissinger
> Microsoft MVP - ConfigMgr
> [email protected]
>
>   ------------------------------
>  *From:* Todd Edwards <[email protected]>
> *To:* mssms <[email protected]>
> *Sent:* Wednesday, November 6, 2013 2:52 PM
>
> *Subject:* Re: [mssms] SCCM Internet Explorer Homepage Report
>
> Sherry, What should the report SQL look like?
>
>
> On Wed, Nov 6, 2013 at 3:33 PM, Sherry Kissinger <
> [email protected]> wrote:
>
> looks good.
>
> Sherry Kissinger
> Microsoft MVP - ConfigMgr
> [email protected]
>
>   ------------------------------
>  *From:* Todd Edwards <[email protected]>
> *To:* mssms <[email protected]>
> *Sent:* Wednesday, November 6, 2013 2:03 PM
>
> *Subject:* Re: [mssms] SCCM Internet Explorer Homepage Report
>
> Does this look correct for the mof edit?
>
> [SMS_Report(TRUE),
>  SMS_Group_Name("IEStartPages"),
>  SMS_Class_ID("IEStartPages"),
>  SMS_Namespace(FALSE),
>  Namespace("\\\\\\\\localhost\\\\root\\\\CustomCMClasses")]
>
> class CM_IEStartPages : SMS_Class_Template
> {
> string UserDomain;
>  string UserName;
> string StartPage;
> [key] string Tab;
>  string DateScriptRan;
> };
>
>
> On Wed, Nov 6, 2013 at 2:39 PM, Todd Edwards <[email protected]> wrote:
>
> What would the sql look like for the report? The scripts and mof complied
> worked.
>
>
> On Wed, Nov 6, 2013 at 10:10 AM, Sherry Kissinger <
> [email protected]> wrote:
>
> lol... um... here.  I played around last night.  this seems to work.
>
>
> put all 3 in a source folder, renamed of course.
> edit wminamespaceandsecurity.vbs and replace YOURDOMAINHERE will your
> userdomain, so that your users will have rights to the new class we're
> going to make up.
> Package/program/advertisement will work the easiest, although you could
> tweak 1 element to be a dcm; might not be worth the hassle.
> two programs.  program #1 runs cscript.exe wminamespaceandsecurity.vbs  as
> system, whether or not user logged in.
> program#2 runs cscript useriestartpage.vbs, as the user context, only when
> a user is logged in.
>
> make program #2 have 'run another program first" of the
> wminamespaceandsecurity program; only needs to run once per machine.
>
> Advertise Program #2 to a test collection; and then check if you do get
> root\customcmclasses, and cm_iestartpages inside your new class.
>
> If so, you're just a mof edit away from pulling that back.  If your users
> do have multiple start pages, that'll be multiple instances; and tab = 1
> would be their first start page, etc. etc.
>
>
> Sherry Kissinger
> Microsoft MVP - ConfigMgr
> [email protected]
>
>   ------------------------------
>  *From:* Trevor Sullivan <[email protected]>
> *To:* [email protected]
> *Sent:* Wednesday, November 6, 2013 8:45 AM
> *Subject:* RE: [mssms] SCCM Internet Explorer Homepage Report
>
> Todd Miller’s idea is excellent. That would reduce the ability for end
> users to impact the system negatively overall, but still get you the
> information you need.
>
> The only part I’m rusty on is: how do you grant “Authenticated Users”
> access to only a specific “WMI element” (I’m assuming that “WMI element”
> means “WMI class” or “instance of a WMI class”)?
>
> Cheers,
> Trevor Sullivan
>
> *From:* [email protected] [mailto:
> [email protected]] *On Behalf Of *Todd Edwards
>
> *Sent:* Wednesday, November 6, 2013 8:31 AM
> *To:* mssms
> *Subject:* Re: [mssms] SCCM Internet Explorer Homepage Report
>
> I like both of those ideas as I am getting to much feedback from DCM. I
> might go the route of collecting the information with a script and
> populating it into a HKLM key. I will post back with the results of what I
> end up doing.
>
> On Tue, Nov 5, 2013 at 7:02 PM, Sherry Kissinger <
> [email protected]> wrote:
>
> My suggestion, similar to this,
> http://www.mnscug.org/blogs/sherry-kissinger/249-pstfinder, via
> inventory. First script to make a custom wmi location, then a second one to
> copy the hkcu value into that custom wmi, and a mof edit to pull it into
> the db.
>
> My experience with dcm and hkcu is that it works...sorta. you get too much
> info back so finding the forest for the trees makes it harder to know the
> answer to whatever question you were trying to get answered.
>
> "Miller, Todd" <[email protected]> wrote:
>
> You might have to shift the data into the machine space in some way –
> either into WMI or HKLM.
>
> You could have a startup script create a HKLM key someplace and then grant
> authenticated users write access to the HKLM location.  Then have a logon
> script that would write the data into HKLM.  Then a mof edit could collect
> the instances in the Key you created.
>
> You could also do the same idea, but with WMI entries and granting the
> edit rights to Authenticated Users to that particular WMI element.
>
> I asked a similar question a week or two ago – I was looking for machines
> where the logged in user had a “Cryptolocker” registry key in HKCU
> present.  I never found a simple solution in DCM even though it seems like
> DCM should have been able to show me machines where any user had that Key
> path existing.  I eventually gave up.  The above idea is a little rube
> goldbergy, but I think it would work fine.
>
> *From:* [email protected] [mailto:
> [email protected]] *On Behalf Of *Todd Edwards
> *Sent:* Tuesday, November 05, 2013 3:49 PM
> *To:* mssms
> *Subject:* [mssms] SCCM Internet Explorer Homepage Report
>
> Is there a way for SCCM to collection the HKCU values for each users for
> their IE homepage? Would DCM work? I know the extending the mof wouldn't
> work because it is HKCU. I have a powershell script that detects the value,
> but I'm not sure how I could use it in SCCM.
>
> Any help would be great.
>
> Todd Edwards
> Application Engineer
> ConfigMgr MCTS 07&12
>
>
> ------------------------------
> Notice: This UI Health Care e-mail (including attachments) is covered by
> the Electronic Communications Privacy Act, 18 U.S.C. 2510-2521, is
> confidential and may be legally privileged.  If you are not the intended
> recipient, you are hereby notified that any retention, dissemination,
> distribution, or copying of this communication is strictly prohibited.
> Please reply to the sender that you have received the message in error,
> then delete it.  Thank you.
> ------------------------------
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>



Reply via email to