This could help you find out where the GPO is not enabled yet with WMI: Namespace: root\RSOP\Computer Class: RSOP_GPO Property: enabled
You could do something like:
select * from RSOP_GPO where GUIDname='{76B29D59-56B2-47C0-B839-C2E2C42B3A9D}'
and enabled = true
Just gotta find the unique ID of your GPO for auto-enrollment.
Mike D-
From: [email protected] [mailto:[email protected]] On
Behalf Of Beardsley, James
Sent: Monday, December 09, 2013 4:30 PM
To: [email protected]
Subject: [mssms] Check for existence of certificate
I'm in the process of migrating to CM12 and I keep coming across newly imaged
PC's that haven't auto-enrolled the client certificate yet. Is there a command
(Powershell, WMI, etc) that can validate whether the PC has the proper client
certificate needed to install the CM12 client? I'm working on an install script
to run as a task sequence and it'd be nice if there was a way to confirm the
cert before attempting to run ccmsetup.
Thanks,
James Beardsley | Firm Technology Group
Dixon Hughes Goodman LLP
[Description: Description: Description: cid:[email protected]]
________________________________
IRS Compliance: Any tax advice contained in this communication (including any
attachments) is not intended or written to be used, and cannot be used, for the
purpose of (i) avoiding penalties imposed under the Internal Revenue Code or
applicable state or local tax law or (ii) promoting, marketing, or recommending
to another party any transaction or matter addressed herein.
________________________________
Confidentiality Notice: This e-mail is intended only for the addressee named
above. It contains information that is privileged, confidential or otherwise
protected from use and disclosure. If you are not the intended recipient, you
are hereby notified that any review, disclosure, copying, or dissemination of
this transmission, or taking of any action in reliance on its contents, or
other use is strictly prohibited. If you have received this transmission in
error, please reply to the sender listed above immediately and permanently
delete this message from your inbox. Thank you for your cooperation.
<<inline: image003.jpg>>
