FYI . I currently have a case open with Microsoft Premier Support regarding Compliance Settings.
As of right now, it is not possible to execute a Remediation Script, when you are using an existential rule. If you are using a value-based rule, your Discovery Script must output something, in order for the Remediation Script to be executed. If your Discovery Script does not provide any output, then compliance state will be assessed correctly, however the Remediation Script will never be executed. This has been a rather frustrating experience, but at least we have a workaround until they fix the ability to use existential compliance rules with Remediation Scripts. Cheers, Trevor Sullivan Microsoft PowerShell MVP From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Shane Alexander Sent: Thursday, July 24, 2014 6:04 PM To: mssms@lists.myitforum.com Subject: RE: [mssms] SCCM 2012 - Compliance settings - Hotfix Thanks Sherry. Existential has worked ... and also proved a "non-compliant" hotfix by using a dummy KB number (KB2999999) Shane _____ Subject: RE: [mssms] SCCM 2012 - Compliance settings - Hotfix From: slkissin...@sbcglobal.net <mailto:slkissin...@sbcglobal.net> Date: Thu, 24 Jul 2014 17:51:07 -0500 To: mssms@lists.myitforum.com <mailto:mssms@lists.myitforum.com> Otherwise, yeah the value should be KB2732673 if you aren't using existential On July 24, 2014 5:23:03 PM CDT, "Atkinson, Matt" <matt.atkin...@providence.org <mailto:matt.atkin...@providence.org> > wrote: I'm far from an expert on compliance setting, but I think you should be able to switch the rule type to existential instead of value. You aren't getting a value of the hotfix ID wmi entry, you just want to check if it exists. I'll let others chime in if I'm way off with my solution, always love to learn from the ConfigMgr gurus that read the list. From: listsad...@lists.myitforum.com <mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Shane Alexander Sent: Thursday, July 24, 2014 2:33 PM To: mssms@lists.myitforum.com <mailto:mssms@lists.myitforum.com> Subject: [mssms] SCCM 2012 - Compliance settings - Hotfix Hi all, Setting up a Compliance setting Configuration item for a specific Hotfix, and not sure what to put in the "the following values" field. Info on the Configuration item below. Name :- KB2732673 Setting type :- WQL query Data type :- String WQL script info :- Namespace :- root\cimv2 Class :- Win32_QuickFixEngineering Property :- HotFixID WQL query WHERE clause :- HotFixID = 'KB2732673' On the Compliance Rules tab Name :- KB2732673 Selected setting :- KB2732673 \ KB2732673 (in the GUI I chose above) Rule type :- Value The setting must comply with the following rule :- KB2732673 (is just shown) Equals the following values :- ??????? Any ideas :-) Thanks, Shane _____ This message is intended for the sole use of the addressee, and may contain information that is privileged, confidential and exempt from disclosure under applicable law. If you are not the addressee you are hereby notified that you may not use, copy, disclose, or distribute to anyone the message or any information contained in the message. If you have received this message in error, please immediately advise the sender by reply email and delete this message. -- Sent from my Android phone with K-9 Mail. Please excuse my brevity.
