in addition,try this query from wbemtest select * from cm_IEstartpages? Eswar Koneti www.eskonr.com
From: [email protected] To: [email protected] Subject: RE: [mssms] SCCM Internet Explorer Homepage Report Date: Thu, 7 Nov 2013 22:24:54 +0800 yes,click on the instances,you will see the tab information and then double click the tab info to see the actual info what is needed. Eswar Koneti www.eskonr.com Date: Thu, 7 Nov 2013 09:18:28 -0500 Subject: Re: [mssms] SCCM Internet Explorer Homepage Report From: [email protected] To: [email protected] I'm getting this error in the client Inventoryagent.log: Collection: Namespace = \\localhost\root\CustomCMClasses; Query = SELECT __CLASS, __PATH, __RELPATH, FROM CM_IEStartPages; Timeout = 600 secs. InventoryAgent 11/7/2013 9:09:11 AM 13284 (0x33E4) Unknown error encountered processing an instance of class CM_IEStartPages: 80041017 InventoryAgent 11/7/2013 9:09:11 AM 13284 (0x33E4) The namespace is on the computer (see attached). Do I need to make changes to the script? On Thu, Nov 7, 2013 at 6:41 AM, Sherry Kissinger <[email protected]> wrote: I guess it depends if what you want is the possibility of when people do have multiple start pages, do you want a separate row for each? or do you want them concatenated together (making it harder to read... but one row per machine) .sql attached .jpg attached to see what the sql looks like in my lab (I only ran the scripts against 2 boxes for testing; the others will of course be null) I also re-attached the scripts and .exe and the sample .mof so it's all in 1 email... Maybe I'll blog this... or maybe I should ask.. what "else" do people care about in the HKCU\software\internet explorer\main regkeys? anything? I can't think of anything else. But then again, I never thought anyone would care whether or not someone switched their home page from the company intranet to facebook, either. :) Oh, and in case it wasn't clear; I don't think I mentioned it... the results in WMI are only as good as the last time the script ran to copy the start page info from HKCU into WMI. So if this is something you want to keep up to date, (or management questions the results) add in the datescriptran so that you can see how dated the info is for that user on that machine. You may or may not want to set the advert to rerun weekly or something--how often you re-run depends on why you care about this info. Sherry Kissinger Microsoft MVP - ConfigMgr [email protected] From: Todd Edwards <[email protected]> To: mssms <[email protected]> Sent: Wednesday, November 6, 2013 2:52 PM Subject: Re: [mssms] SCCM Internet Explorer Homepage Report Sherry, What should the report SQL look like? On Wed, Nov 6, 2013 at 3:33 PM, Sherry Kissinger <[email protected]> wrote: looks good. Sherry Kissinger Microsoft MVP - ConfigMgr [email protected] From: Todd Edwards <[email protected]> To: mssms <[email protected]> Sent: Wednesday, November 6, 2013 2:03 PM Subject: Re: [mssms] SCCM Internet Explorer Homepage Report Does this look correct for the mof edit? [SMS_Report(TRUE), SMS_Group_Name("IEStartPages"), SMS_Class_ID("IEStartPages"), SMS_Namespace(FALSE), Namespace("\\\\\\\\localhost\\\\root\\\\CustomCMClasses")] class CM_IEStartPages : SMS_Class_Template{ string UserDomain; string UserName; string StartPage; [key] string Tab; string DateScriptRan;}; On Wed, Nov 6, 2013 at 2:39 PM, Todd Edwards <[email protected]> wrote: What would the sql look like for the report? The scripts and mof complied worked. On Wed, Nov 6, 2013 at 10:10 AM, Sherry Kissinger <[email protected]> wrote: lol... um... here. I played around last night. this seems to work. put all 3 in a source folder, renamed of course. edit wminamespaceandsecurity.vbs and replace YOURDOMAINHERE will your userdomain, so that your users will have rights to the new class we're going to make up. Package/program/advertisement will work the easiest, although you could tweak 1 element to be a dcm; might not be worth the hassle. two programs. program #1 runs cscript.exe wminamespaceandsecurity.vbs as system, whether or not user logged in. program#2 runs cscript useriestartpage.vbs, as the user context, only when a user is logged in. make program #2 have 'run another program first" of the wminamespaceandsecurity program; only needs to run once per machine. Advertise Program #2 to a test collection; and then check if you do get root\customcmclasses, and cm_iestartpages inside your new class. If so, you're just a mof edit away from pulling that back. If your users do have multiple start pages, that'll be multiple instances; and tab = 1 would be their first start page, etc. etc. Sherry Kissinger Microsoft MVP - ConfigMgr [email protected] From: Trevor Sullivan <[email protected]> To: [email protected] Sent: Wednesday, November 6, 2013 8:45 AM Subject: RE: [mssms] SCCM Internet Explorer Homepage Report Todd Miller’s idea is excellent. That would reduce the ability for end users to impact the system negatively overall, but still get you the information you need. The only part I’m rusty on is: how do you grant “Authenticated Users” access to only a specific “WMI element” (I’m assuming that “WMI element” means “WMI class” or “instance of a WMI class”)? Cheers, Trevor Sullivan From: [email protected] [mailto:[email protected]] On Behalf Of Todd Edwards Sent: Wednesday, November 6, 2013 8:31 AM To: mssms Subject: Re: [mssms] SCCM Internet Explorer Homepage Report I like both of those ideas as I am getting to much feedback from DCM. I might go the route of collecting the information with a script and populating it into a HKLM key. I will post back with the results of what I end up doing. On Tue, Nov 5, 2013 at 7:02 PM, Sherry Kissinger <[email protected]> wrote: My suggestion, similar to this, http://www.mnscug.org/blogs/sherry-kissinger/249-pstfinder, via inventory. First script to make a custom wmi location, then a second one to copy the hkcu value into that custom wmi, and a mof edit to pull it into the db. My experience with dcm and hkcu is that it works...sorta. you get too much info back so finding the forest for the trees makes it harder to know the answer to whatever question you were trying to get answered. "Miller, Todd" <[email protected]> wrote: You might have to shift the data into the machine space in some way �C either into WMI or HKLM. You could have a startup script create a HKLM key someplace and then grant authenticated users write access to the HKLM location. Then have a logon script that would write the data into HKLM. Then a mof edit could collect the instances in the Key you created. You could also do the same idea, but with WMI entries and granting the edit rights to Authenticated Users to that particular WMI element. I asked a similar question a week or two ago �C I was looking for machines where the logged in user had a “Cryptolocker” registry key in HKCU present. I never found a simple solution in DCM even though it seems like DCM should have been able to show me machines where any user had that Key path existing. I eventually gave up. The above idea is a little rube goldbergy, but I think it would work fine. From: [email protected] [mailto:[email protected]] On Behalf Of Todd Edwards Sent: Tuesday, November 05, 2013 3:49 PM To: mssms Subject: [mssms] SCCM Internet Explorer Homepage Report Is there a way for SCCM to collection the HKCU values for each users for their IE homepage? Would DCM work? I know the extending the mof wouldn't work because it is HKCU. I have a powershell script that detects the value, but I'm not sure how I could use it in SCCM. Any help would be great. Todd EdwardsApplication EngineerConfigMgr MCTS 07&12 Notice: This UI Health Care e-mail (including attachments) is covered by the Electronic Communications Privacy Act, 18 U.S.C. 2510-2521, is confidential and may be legally privileged. If you are not the intended recipient, you are hereby notified that any retention, dissemination, distribution, or copying of this communication is strictly prohibited. Please reply to the sender that you have received the message in error, then delete it. Thank you.
