[mssms] Patching & Reboot Servers

[Brian McDonald]

Good morning,

We have been working extremely hard getting our patch compliance numbers up. We 
recently, for the first time, hit over 90% compliance for last month.

A question came up recently about scheduling reboots on servers. I decided to 
run a last reboot / uptime report against all servers in the environment. I 
found a good handful of servers that had not removed since August. And several 
servers that has not removed since last month. One suggestion brought the table 
was to schedule an automated refill for the servers to help increase our paths 
one effort.

Management is telling me they see no reason to schedule reboot as long as 
patching work. I am looking to justify this need.

I’d be interested to hear what other folks would suggest would be legitimate 
reasons for scheduled reboots. Basically they are saying SCCM how do you must 
not be working if servers aren’t getting rebooted. I have, for example, found 
some servers don’t receive patches if there are disconnected user logged into 
the server. By bouncing the server, I was able to deploy patches no problem. 
Any other use cases samples to support this would be extremely helpful.

I appreciate any help or suggestions with this.

Thanks!

Brian

Sent from my iPhone

Re: [mssms] RE: Reinstall WSUS & SUP

[Brian McDonald]

Will this show the updates that have been previously downloaded and deployed? 
After the sync...

Sent from my iPhone

> On Aug 23, 2017, at 11:05 AM, Harjit Dhaliwal <har...@uvm.edu> wrote:
> 
> No you won't have to. SUGs and Deployments will remain after an uninstall / 
> reinstall. On your first sync, I would recommend that you deselect all 
> classifications, run a sync, then select the classifications you desire, and 
> resync again.
> 
> -Harjit
> 
> -Original Message-
> From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
> On Behalf Of Brian McDonald
> Sent: Wednesday, August 23, 2017 10:29 AM
> To: mssms@lists.myitforum.com
> Subject: [mssms] Reinstall WSUS & SUP
> 
> Hello,
> 
> I have a need to reinstall WSUS and SUP. Does this mean I will have to 
> re-download and recreate all SUGs and Deployment Packages? 
> 
> Thanks,
> 
> Brian
> 
> Sent from my iPhone
> 
> 
> 
> 
> 
> 
> 

[mssms] Reinstall WSUS & SUP

[Brian McDonald]

Hello,

I have a need to reinstall WSUS and SUP. Does this mean I will have to 
re-download and recreate all SUGs and Deployment Packages? 

Thanks,

Brian

Sent from my iPhone

Re: [mssms] RE: Deployment checked off before available and deadline

[Brian McDonald]

CST and MST

Why does UTC cause this?

Sent from my iPhone

On Jul 25, 2017, at 9:41 AM, Beardsley, James 
<james.beards...@dhgllp.com<mailto:james.beards...@dhgllp.com>> wrote:


Guaranteed its UTC. I made the same mistake once.

-Original Message-
From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Sandys
Sent: Monday, July 24, 2017 10:53 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Deployment checked off before available and deadline

UTC. What time zone are your systems in?

J

-Original Message-
From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Brian McDonald
Sent: Monday, July 24, 2017 3:52 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Deployment checked off before available and deadline

Hi all,

Last week we pushed out an application that performed an agent upgrade for one 
of our security tools. The deployment was configured as required with a soft 
were available time of 5:00 pm. UTC. The deadline was configured as soon as 
possible after the software available time.

However, the deployment actually started to kick off several hours before the 
scheduled time. There is no maintenance window configured on the target 
collection.

I need some help provide an explanation as to why and how this happened. I 
reviewed some of the client log files and could see that the deployment have 
checked off in some cases six hours prior to the 5:15 PM available time. But 
this does not answer the question as to why.

Are there any settings I should be looking at in reviewing? Did I overlook 
something?

What could've caused the deployment to kick off earlier than the time I 
mentioned above based on the settings are used?

Thanks,

Brian

Sent from my iPhone









Confidentiality Notice: This e-mail is intended only for the addressee named 
above. It contains information that is privileged, confidential or otherwise 
protected from use and disclosure. If you are not the intended recipient, you 
are hereby notified that any review, disclosure, copying, or dissemination of 
this transmission, or taking of any action in reliance on its contents, or 
other use is strictly prohibited. If you have received this transmission in 
error, please reply to the sender listed above immediately and permanently 
delete this message from your inbox. Thank you for your cooperation.

[mssms] Deployment checked off before available and deadline

[Brian McDonald]

Hi all,

Last week we pushed out an application that performed an agent upgrade for one 
of our security tools. The deployment was configured as required with a soft 
were available time of 5:00 pm. UTC. The deadline was configured as soon as 
possible after the software available time.

However, the deployment actually started to kick off several hours before the 
scheduled time. There is no maintenance window configured on the target 
collection.

I need some help provide an explanation as to why and how this happened. I 
reviewed some of the client log files and could see that the deployment have 
checked off in some cases six hours prior to the 5:15 PM available time. But 
this does not answer the question as to why.

Are there any settings I should be looking at in reviewing? Did I overlook 
something?

What could've caused the deployment to kick off earlier than the time I 
mentioned above based on the settings are used?

Thanks,

Brian

Sent from my iPhone

Re: [mssms] Patch update classification

[Brian McDonald]

Cool! Is your approach different from Sherry's? I'd like to see it.

Thanks!

Sent from my iPhone

On Jul 17, 2017, at 9:45 AM, Eswar <es...@eskonr.com<mailto:es...@eskonr.com>> 
wrote:


Hi Brian,
Yes you can  get that information using sql.
I can get you that information tommrrow.

--
Regards
Eswar Koneti
www.eskonr.com<http://www.eskonr.com>
Sent from mobile device, please excuse any typo's as a result

Friday, 14 July 2017, 09:20PM +08:00 from Brian McDonald 
mcdonald...@hotmail.com<mailto:mcdonald...@hotmail.com>:

Hello,

Is there any way to report on how many software updates are 
critical/high/med/low in SCCM?

Thanks,

Brian

Sent from my iPhone

[mssms] SQL STD license with CB?

[Brian McDonald]

GM,

Does anyone know if SQL Standard is included with SCCM Current Branch?

Thanks,

Brian

Sent from my iPhone

[mssms] Software Updates Issue

[Brian McDonald]

Good morning,


I'm having some interesting issues with deploying December updates. I have 
created 1 SUG for the month of December that includes all products. Updates are 
deploying to Servers, but not Workstations. I do configure the deployment to be 
Required for all deployments (Workstations and Servers).


When I look at the Deployment under Monitoring it shows over 800 "In Progress" 
there are a few handful in Error state and a few hundred in Unknown. The In 
Progress states shows these are actually in "Non-Compliant" status. I checked 
the Deployment Package and it has been distributed to the DP successfully.


It has been reported that some users are seeing Updates in Software Center and 
they had to go in and select to download/install. Curious, why we would see 
this behavior if the deployment is set to Required?

What is the best way to troubleshoot the Non-Compliant devices and why updates 
aren't deploying?


Thanks,

Brian

[mssms] Windows Update Restart

[Brian McDonald]

All,


I have a SU deployment setup to some servers (Windows 2012 R2/2008 R2 mix). The 
deployment was setup with the Deadline Behavior is set for Software Updates 
Installation to allow updates to be deployed outside of the maintenance window. 
However, I am also suppressing the reboot.


One of the Windows Server 2012 R2 servers shows the 'Windows Update. Restart 
your computer to finish installing updates. Automatic restart will occur in 1 
day."


Will these servers be rebooted? I thought SCCM would suppress the reboot if we 
selected this option.


Thanks,


Brian

[mssms] Client Redirect script - clients still showing active in old site

[Brian McDonald]

Hey all,


I am redirecting SCCM clients to a new server using a vbs script. This process 
is working great. After clients evaluate they're populating on the new site 
server. One thing I noticed though, if I go back and look at the old site 
server, I still see the same clients I redirected showing they're active.


What policy is being used here? Do I need to manually delete the clients from 
the old site server to remove them? What is the best way to approach this?


Thanks,

Brian

[mssms] quick patch

[Brian McDonald]

All,


Can someone tell me how I can quickly patch say a new server that comes online 
(joined to the domain) that requires patches when this machine is already a 
member of a maintenance window. For example, I have servers that need to be 
patched immediately once the SCCM client is installed. However, I have a MW 
collection that is populating the collection by server name. Therefore, it 
immediately goes into the MW collection and therefore will not patch 
immediately.


Anyway to get around this?


Thanks,

Brian

[mssms] Query for servers pending reboot - software update compliance

[Brian McDonald]

Hello all,


I'm trying to take the following query and modify it specifically for SERVERS. 
Can someone help me out with what changes I need to make? Thanks you, Brian


SELECT DISTINCT vrs.ResourceID, vrs.ResourceType, 
vrs.Name0,vrs.SMS_Unique_Identifier0, 
vrs.Resource_Domain_OR_Workgr0,vrs.Client0 FROM v_r_system vrs inner join 
vSMS_Update_ComplianceStatus ucs ON ucs.machineid=vrs.resourceid WHERE 
ucs.LastEnforcementMessageID = 9

[mssms] Available Software Update behavior

[Brian McDonald]

All,


If I make a Software Update available once the user installs the update via 
Software Center does the system reboot? Or does the user have the option to 
delay the restart behavior?


Thanks,

Brian

[mssms] Re: November Security Only Update

[Brian McDonald]

This is likely the reason. I had to modify mine as well. You can see in 
wsyncmgr.log file it skips it b/c it's superseeded unless you make the SUP 
change.


So, now that the icon is in superseded status, will the update actually deploy 
from SCCM?


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Enley, Carl <cen...@arifleet.com>
Sent: Wednesday, November 9, 2016 12:58:13 PM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: November Security Only Update

Check to see if your SUP configuration is set to expire superseded updates 
immediately. I had to go in and set mine to expire them in 2 months and then 
re-sync my SUP to get the security only updates to show. I also had to go in to 
my ADR's and remove the filter on superseded=NO.

This seems like a big mess

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Heaton, Joseph@Wildlife
Sent: Wednesday, November 9, 2016 1:49 PM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: November Security Only Update

I'm not even seeing the Security Only updates, for any of the OSes.  Even with 
no filtering.  I am only seeing the Monthly rollup.  Even verified my 
categories and products.  No idea why it's not showing.

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Brian McDonald
Sent: Wednesday, November 09, 2016 9:53 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] November Security Only Update


All,



Has anyone noticed the November, 2016 Security Only Update for Windows 7 
x64-based Systems (KB197867) is showing superseded already in SCCM? I believe 
this is because the Monthly Roll-up is also published, superseding the Security 
Only update. Real nice!



Can you deploy superseded updates from SCCM? Don't know that I've ever tried. I 
typically will remove superseded updates from SUGs on a regular basis.



Thank you,

Brian

[mssms] Re: SCCM - Untrusted domain support

[Brian McDonald]

What about firewall rules between the MP/DP/SUP in the remote domain and the 
Primary Site?


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Jason Sandys <ja...@sandys.us>
Sent: Wednesday, November 9, 2016 11:04:52 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: SCCM - Untrusted domain support

There's really nothing very special about it. They need to be domain joined in 
that forest and you'll need a connection and installation account. That's truly 
it.

J

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian McDonald
Sent: Wednesday, November 9, 2016 7:42 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Re: SCCM - Untrusted domain support


Does anyone have any guidance/info/links on setting up DP/MP/SUP in untrusted 
domains? I think this is the direction I am leaning to go with supporting the 
requirements for my environment.



Thanks,

Brian


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Jason Sandys <ja...@sandys.us<mailto:ja...@sandys.us>>
Sent: Tuesday, November 8, 2016 11:29:27 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: SCCM - Untrusted domain support

Don't mix up AD domain trusts and certificate trust -- they are not the same 
thing. If you are using Microsoft enterprise CAs, they align, but that's only a 
convenience, not a hard-link or requirement.

J

-Original Message-
From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Mote, Todd
Sent: Tuesday, November 8, 2016 8:31 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: SCCM - Untrusted domain support

As far as my experience has shown me, I have three domains all untrusting of 
each other and the only way I can get all of those clients into the SCCM in our 
primary domain is by either each domain having its own CA, that you tell SCCM 
about, so it can verify the client cert chains, or issuing certificates from 
the primary domain's CA for all of the untrusted domain's clients.



-Original Message-
From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Brian McDonald
Sent: Monday, November 7, 2016 7:56 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] SCCM - Untrusted domain support

Hello,

We are in the process of severing domain trusts between our legacy domain(s) 
and new domain.

Domain A = New Domain (CM Current Branch)

Domain B = Old Legacy Domain #1 (CM 12R2 SP1)

Domain C = Old Legacy Domain # 2

Domain D = Old Legacy Domain # 3

In Domain B, I currently have SCCM 2012 R2 SP1 deployed. This environment 
supports clients in Domain A, B, C, D. As mentioned above, we will be Breaking 
domain trusts. The question I have is will I need to deploy Certs to support 
clients in these domains once the trust or broken? Are there any actions I need 
to take to support these clients once we break the trust between the domains?

Jason Sandy's responded to your previous email of mine, slightly different 
scenario that I was explaining. I'd like to know if the same rules apply here.

Eventually I will be migrating my SCCM infrastructure from Domain B to Domain 
A. Are there any other considerations I should be making as far as support with 
certificates?

Thanks,

Brian

Sent from my iPhone

[mssms] November Security Only Update

[Brian McDonald]

All,


Has anyone noticed the November, 2016 Security Only Update for Windows 7 
x64-based Systems (KB197867) is showing superseded already in SCCM? I believe 
this is because the Monthly Roll-up is also published, superseding the Security 
Only update. Real nice!


Can you deploy superseded updates from SCCM? Don't know that I've ever tried. I 
typically will remove superseded updates from SUGs on a regular basis.


Thank you,

Brian

[mssms] Re: SCCM - Untrusted domain support

[Brian McDonald]

Does anyone have any guidance/info/links on setting up DP/MP/SUP in untrusted 
domains? I think this is the direction I am leaning to go with supporting the 
requirements for my environment.


Thanks,

Brian


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Jason Sandys <ja...@sandys.us>
Sent: Tuesday, November 8, 2016 11:29:27 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: SCCM - Untrusted domain support

Don't mix up AD domain trusts and certificate trust -- they are not the same 
thing. If you are using Microsoft enterprise CAs, they align, but that's only a 
convenience, not a hard-link or requirement.

J

-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Mote, Todd
Sent: Tuesday, November 8, 2016 8:31 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: SCCM - Untrusted domain support

As far as my experience has shown me, I have three domains all untrusting of 
each other and the only way I can get all of those clients into the SCCM in our 
primary domain is by either each domain having its own CA, that you tell SCCM 
about, so it can verify the client cert chains, or issuing certificates from 
the primary domain's CA for all of the untrusted domain's clients.



-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian McDonald
Sent: Monday, November 7, 2016 7:56 PM
To: mssms@lists.myitforum.com
Subject: [mssms] SCCM - Untrusted domain support

Hello,

We are in the process of severing domain trusts between our legacy domain(s) 
and new domain.

Domain A = New Domain (CM Current Branch)

Domain B = Old Legacy Domain #1 (CM 12R2 SP1)

Domain C = Old Legacy Domain # 2

Domain D = Old Legacy Domain # 3

In Domain B, I currently have SCCM 2012 R2 SP1 deployed. This environment 
supports clients in Domain A, B, C, D. As mentioned above, we will be Breaking 
domain trusts. The question I have is will I need to deploy Certs to support 
clients in these domains once the trust or broken? Are there any actions I need 
to take to support these clients once we break the trust between the domains?

Jason Sandy's responded to your previous email of mine, slightly different 
scenario that I was explaining. I'd like to know if the same rules apply here.

Eventually I will be migrating my SCCM infrastructure from Domain B to Domain 
A. Are there any other considerations I should be making as far as support with 
certificates?

Thanks,

Brian

Sent from my iPhone

[mssms] SCCM - Untrusted domain support

[Brian McDonald]

Hello,

We are in the process of severing domain trusts between our legacy domain(s) 
and new domain.

Domain A = New Domain (CM Current Branch)

Domain B = Old Legacy Domain #1 (CM 12R2 SP1)

Domain C = Old Legacy Domain # 2

Domain D = Old Legacy Domain # 3

In Domain B, I currently have SCCM 2012 R2 SP1 deployed. This environment 
supports clients in Domain A, B, C, D. As mentioned above, we will be Breaking 
domain trusts. The question I have is will I need to deploy Certs to support 
clients in these domains once the trust or broken? Are there any actions I need 
to take to support these clients once we break the trust between the domains?

Jason Sandy's responded to your previous email of mine, slightly different 
scenario that I was explaining. I'd like to know if the same rules apply here.

Eventually I will be migrating my SCCM infrastructure from Domain B to Domain 
A. Are there any other considerations I should be making as far as support with 
certificates?

Thanks,

Brian

Sent from my iPhone

Re: [mssms] Patches in SCCM

[Brian McDonald]

Sherry,


What you have provided below would be spot-on with what I'm looking for.
How do I put this together?


Thank you!

Brian


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Sherry Kissinger <sherrylkissin...@gmail.com>
Sent: Wednesday, November 2, 2016 11:32:49 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Patches in SCCM

To me this sounds like a custom report.
Getting what CM knows for articleID is easy, in v_updateinfo

But you've added "that sccm is pulling from to patch devices".  what does that 
mean to you?
anything that CM knows about and is CAPABLE of patching (whether content is 
downloaded or not)?
those patches have to be downloaded--whether or not they are in a software 
update group and deployed?
those patches have to be in a Software Update group--which may or may not be 
deployed?
those patches have to be downloaded and in a software update group which is 
currently targeted to a specific production collection?

You need more parameters to start making a custom report.  But if all you 
really want is "list the articleids CM knows about"

select articleid from v_updateinfo where articleid is not null and articleid <> 
'' order by articleid


On Wed, Nov 2, 2016 at 9:14 AM, Brian McDonald 
<mcdonald...@hotmail.com<mailto:mcdonald...@hotmail.com>> wrote:

Hello,


Is there a way to identify what KB #s are included in the repository that SCCM 
is pulling from to patch devices? I'm looking for a report showing all of the 
individual KBs that we have in our environment. If there is an easy method to 
pull such report native or would this require a SQL query to get this 
information?


Thanks for any input on this.


Brian




--
Thank you,

Sherry Kissinger

My Parameters:  Standardize. Simplify. Automate
Blogs: http://www.mofmaster.com, http://mnscug.org/blogs/sherry-kissinger, 
http://www.smguru.org

[mssms] Patches in SCCM

[Brian McDonald]

Hello,


Is there a way to identify what KB #s are included in the repository that SCCM 
is pulling from to patch devices? I'm looking for a report showing all of the 
individual KBs that we have in our environment. If there is an easy method to 
pull such report native or would this require a SQL query to get this 
information?


Thanks for any input on this.


Brian

Re: [mssms] Migration to Current Branch in a New Domain

[Brian McDonald]

How is this going to help during SCCM OSD (New PC builds or Refreshes)?


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Todd Hemsell <hems...@gmail.com>
Sent: Tuesday, November 1, 2016 2:33:07 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Migration to Current Branch in a New Domain

Add the SMSMP into your client install command line


On Tue, Nov 1, 2016 at 2:18 PM, Brian McDonald 
<mcdonald...@hotmail.com<mailto:mcdonald...@hotmail.com>> wrote:

Yes, I am using SCCM OSD. This is the only change I've made in the environment 
and since then imaging PCs I get this error in the SMSTS.log


"Invalid MP Cert info; no signature" "No valid MP Locations are received."




From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Jason Sandys <ja...@sandys.us<mailto:ja...@sandys.us>>
Sent: Tuesday, November 1, 2016 12:27:54 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] Migration to Current Branch in a New Domain

Are you using ConfigMgr OSD? If so, then no, nothing in that process relies on 
site assignment boundaries or boundary groups.

J

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of Brian McDonald
Sent: Tuesday, November 1, 2016 10:55 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: Re: [mssms] Migration to Current Branch in a New Domain


Sorry, I meant to say having issues imaging machines from the old site server, 
not the new site server.

Does this make a difference with what you're asking?


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Sherry Kissinger 
<sherrylkissin...@gmail.com<mailto:sherrylkissin...@gmail.com>>
Sent: Tuesday, November 1, 2016 9:10:34 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: Re: [mssms] Migration to Current Branch in a New Domain

Gotta ask the question:  The new site servers do have rights to your AD 
Container, System/System Management, right?  So they can create the SMS- 
records, so that your clients can look up their MP in AD?

On Tue, Nov 1, 2016 at 8:35 AM, Brian McDonald 
<mcdonald...@hotmail.com<mailto:mcdonald...@hotmail.com>> wrote:

I setup boundaries on the new Site Server and now have an issue imaging 
machines. I also removed the Boundary Group for Site assignment from the old 
Site Server. The SMSTS.log is showing "Invalid MP Cert info; no signature" "No 
valid MP Locations are received."



Everything was working up to this point. Looks like I need to add the BG for 
Site Assignment back to the old Primary SIte?



Thanks,

Brian


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Jason Sandys <ja...@sandys.us<mailto:ja...@sandys.us>>
Sent: Thursday, October 27, 2016 2:20:10 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] Migration to Current Branch in a New Domain

Yep, that’s fine. Only site assignment boundary groups have a possibility of 
any conflict because only boundaries within boundary groups marked for site 
assignment are published to AD. Other boundaries are simply site specific data 
so there is no possibility of any type of conflict.

J

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of Brian McDonald
Sent: Thursday, October 27, 2016 11:15 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: Re: [mssms] Migration to Current Branch in a New Domain


Jason,



I appreciate your response. As long as I disable my site assignment BG in the 
old domain, I can go ahead and setup Boundaries in the new domain? Even if I'm 
doing a slow/progressed migration? I want to make sure that having boundaries 
configured on two primaries won't cause me issues supporting the old 
environment until I complete all the migration tasks.



Thanks,

Brian


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Jason Sandys <ja...@sandys.us<mailto:ja...@sandys.us>>
Sent: Thursday, Octo

Re: [mssms] Migration to Current Branch in a New Domain

[Brian McDonald]

Yes, I am using SCCM OSD. This is the only change I've made in the environment 
and since then imaging PCs I get this error in the SMSTS.log


"Invalid MP Cert info; no signature" "No valid MP Locations are received."




From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Jason Sandys <ja...@sandys.us>
Sent: Tuesday, November 1, 2016 12:27:54 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Migration to Current Branch in a New Domain

Are you using ConfigMgr OSD? If so, then no, nothing in that process relies on 
site assignment boundaries or boundary groups.

J

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian McDonald
Sent: Tuesday, November 1, 2016 10:55 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Migration to Current Branch in a New Domain


Sorry, I meant to say having issues imaging machines from the old site server, 
not the new site server.

Does this make a difference with what you're asking?


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Sherry Kissinger 
<sherrylkissin...@gmail.com<mailto:sherrylkissin...@gmail.com>>
Sent: Tuesday, November 1, 2016 9:10:34 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: Re: [mssms] Migration to Current Branch in a New Domain

Gotta ask the question:  The new site servers do have rights to your AD 
Container, System/System Management, right?  So they can create the SMS- 
records, so that your clients can look up their MP in AD?

On Tue, Nov 1, 2016 at 8:35 AM, Brian McDonald 
<mcdonald...@hotmail.com<mailto:mcdonald...@hotmail.com>> wrote:

I setup boundaries on the new Site Server and now have an issue imaging 
machines. I also removed the Boundary Group for Site assignment from the old 
Site Server. The SMSTS.log is showing "Invalid MP Cert info; no signature" "No 
valid MP Locations are received."



Everything was working up to this point. Looks like I need to add the BG for 
Site Assignment back to the old Primary SIte?



Thanks,

Brian


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Jason Sandys <ja...@sandys.us<mailto:ja...@sandys.us>>
Sent: Thursday, October 27, 2016 2:20:10 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] Migration to Current Branch in a New Domain

Yep, that’s fine. Only site assignment boundary groups have a possibility of 
any conflict because only boundaries within boundary groups marked for site 
assignment are published to AD. Other boundaries are simply site specific data 
so there is no possibility of any type of conflict.

J

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of Brian McDonald
Sent: Thursday, October 27, 2016 11:15 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: Re: [mssms] Migration to Current Branch in a New Domain


Jason,



I appreciate your response. As long as I disable my site assignment BG in the 
old domain, I can go ahead and setup Boundaries in the new domain? Even if I'm 
doing a slow/progressed migration? I want to make sure that having boundaries 
configured on two primaries won't cause me issues supporting the old 
environment until I complete all the migration tasks.



Thanks,

Brian


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Jason Sandys <ja...@sandys.us<mailto:ja...@sandys.us>>
Sent: Thursday, October 27, 2016 7:55:37 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: Re: [mssms] Migration to Current Branch in a New Domain


1)  No PKI certs are needed whatsoever. ConfigMgr doesn’t care about the 
domain membership of managed systems. All you really need if there is no trust 
is a valid network access account fo the clients in the untrusted domains to be 
able to access their DP assuming it’s not in their own domain. There really is 
almost nothing special about clients in untrusted domains or forests.

2)  Using a change site code script will only work if the information for 
the new site is published in the domain/forest that the client is in. As for 
boundaries, no problem. Just unmark all of the boundary groups in the “old” 
site for site assignment.

J

From: <listsad...@list

Re: [mssms] Migration to Current Branch in a New Domain

[Brian McDonald]

Sorry, I meant to say having issues imaging machines from the old site server, 
not the new site server.

Does this make a difference with what you're asking?


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Sherry Kissinger <sherrylkissin...@gmail.com>
Sent: Tuesday, November 1, 2016 9:10:34 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Migration to Current Branch in a New Domain

Gotta ask the question:  The new site servers do have rights to your AD 
Container, System/System Management, right?  So they can create the SMS- 
records, so that your clients can look up their MP in AD?

On Tue, Nov 1, 2016 at 8:35 AM, Brian McDonald 
<mcdonald...@hotmail.com<mailto:mcdonald...@hotmail.com>> wrote:

I setup boundaries on the new Site Server and now have an issue imaging 
machines. I also removed the Boundary Group for Site assignment from the old 
Site Server. The SMSTS.log is showing "Invalid MP Cert info; no signature" "No 
valid MP Locations are received."


Everything was working up to this point. Looks like I need to add the BG for 
Site Assignment back to the old Primary SIte?


Thanks,

Brian


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Jason Sandys <ja...@sandys.us<mailto:ja...@sandys.us>>
Sent: Thursday, October 27, 2016 2:20:10 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] Migration to Current Branch in a New Domain

Yep, that’s fine. Only site assignment boundary groups have a possibility of 
any conflict because only boundaries within boundary groups marked for site 
assignment are published to AD. Other boundaries are simply site specific data 
so there is no possibility of any type of conflict.

J

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of Brian McDonald
Sent: Thursday, October 27, 2016 11:15 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: Re: [mssms] Migration to Current Branch in a New Domain


Jason,



I appreciate your response. As long as I disable my site assignment BG in the 
old domain, I can go ahead and setup Boundaries in the new domain? Even if I'm 
doing a slow/progressed migration? I want to make sure that having boundaries 
configured on two primaries won't cause me issues supporting the old 
environment until I complete all the migration tasks.



Thanks,

Brian


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Jason Sandys <ja...@sandys.us<mailto:ja...@sandys.us>>
Sent: Thursday, October 27, 2016 7:55:37 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: Re: [mssms] Migration to Current Branch in a New Domain


1)  No PKI certs are needed whatsoever. ConfigMgr doesn’t care about the 
domain membership of managed systems. All you really need if there is no trust 
is a valid network access account fo the clients in the untrusted domains to be 
able to access their DP assuming it’s not in their own domain. There really is 
almost nothing special about clients in untrusted domains or forests.

2)  Using a change site code script will only work if the information for 
the new site is published in the domain/forest that the client is in. As for 
boundaries, no problem. Just unmark all of the boundary groups in the “old” 
site for site assignment.

J

From: <listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> 
on behalf of Brian McDonald 
<mcdonald...@hotmail.com<mailto:mcdonald...@hotmail.com>>
Reply-To: "mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>" 
<mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>
Date: Wednesday, October 26, 2016 at 10:57 PM
To: "mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>" 
<mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>
Subject: [mssms] Migration to Current Branch in a New Domain

Hello all,

I am planning a migration from SCCM 2012 R2 SP1 to Current Branch 2011. Below 
are the details.

All SCCM clients report to the VNE Site in Domain A. This is the 2012 R2 SP1 
environment.

I will be migrating worksations/servers to Site CDI, which is SCCM Current 
Branch 1511 deployed in Domain B.

All users and workstations have been migrated into Domain B. A larger 
percentage of the servers have been migrated into Domain B as well.

I have a few questions on the approach I take.

1) Wh

Re: [mssms] Migration to Current Branch in a New Domain

[Brian McDonald]

I setup boundaries on the new Site Server and now have an issue imaging 
machines. I also removed the Boundary Group for Site assignment from the old 
Site Server. The SMSTS.log is showing "Invalid MP Cert info; no signature" "No 
valid MP Locations are received."


Everything was working up to this point. Looks like I need to add the BG for 
Site Assignment back to the old Primary SIte?


Thanks,

Brian


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Jason Sandys <ja...@sandys.us>
Sent: Thursday, October 27, 2016 2:20:10 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Migration to Current Branch in a New Domain

Yep, that's fine. Only site assignment boundary groups have a possibility of 
any conflict because only boundaries within boundary groups marked for site 
assignment are published to AD. Other boundaries are simply site specific data 
so there is no possibility of any type of conflict.

J

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian McDonald
Sent: Thursday, October 27, 2016 11:15 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Migration to Current Branch in a New Domain


Jason,



I appreciate your response. As long as I disable my site assignment BG in the 
old domain, I can go ahead and setup Boundaries in the new domain? Even if I'm 
doing a slow/progressed migration? I want to make sure that having boundaries 
configured on two primaries won't cause me issues supporting the old 
environment until I complete all the migration tasks.



Thanks,

Brian


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Jason Sandys <ja...@sandys.us<mailto:ja...@sandys.us>>
Sent: Thursday, October 27, 2016 7:55:37 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: Re: [mssms] Migration to Current Branch in a New Domain


1)  No PKI certs are needed whatsoever. ConfigMgr doesn't care about the 
domain membership of managed systems. All you really need if there is no trust 
is a valid network access account fo the clients in the untrusted domains to be 
able to access their DP assuming it's not in their own domain. There really is 
almost nothing special about clients in untrusted domains or forests.

2)  Using a change site code script will only work if the information for 
the new site is published in the domain/forest that the client is in. As for 
boundaries, no problem. Just unmark all of the boundary groups in the "old" 
site for site assignment.

J

From: <listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> 
on behalf of Brian McDonald 
<mcdonald...@hotmail.com<mailto:mcdonald...@hotmail.com>>
Reply-To: "mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>" 
<mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>
Date: Wednesday, October 26, 2016 at 10:57 PM
To: "mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>" 
<mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>
Subject: [mssms] Migration to Current Branch in a New Domain

Hello all,

I am planning a migration from SCCM 2012 R2 SP1 to Current Branch 2011. Below 
are the details.

All SCCM clients report to the VNE Site in Domain A. This is the 2012 R2 SP1 
environment.

I will be migrating worksations/servers to Site CDI, which is SCCM Current 
Branch 1511 deployed in Domain B.

All users and workstations have been migrated into Domain B. A larger 
percentage of the servers have been migrated into Domain B as well.

I have a few questions on the approach I take.

1) While the majority of my servers reside in Domain B, I have quite a few yet 
in various domains, that I will need to support from Domain B SCCM environment. 
 How do I achieve this cross forest support? I imagine via certs but looking 
for some high level details on what needs to be done to make this work.

2) As far as the migration goes. Since ALL workstations reside in Domain B, I'm 
planning on using a change site code script. Is it supported to setup all the 
boundaries from Domain A in Domain B? Will this cause issues supporting clients 
from Domain A SCCM?

Any input or suggestions on the optimal approach to take would be much 
appreciated.

Thanks,




Brian

[mssms] Prevent PC from reboot during Patch Deployment

[Brian McDonald]

Hello!


I haven't had a need to do this for quite some time. Can someone tell me if 
there are any options to prevent a PC from being rebooted during patch 
deployment from ConfigMgr? I recall years ago trying to stop the SMS Agent 
Host, but I don't think that worked.


Sucks, this is a bit of an urgent request. :)


Thank you,

Brian

Re: [mssms] Migration to Current Branch in a New Domain

[Brian McDonald]

Jason,


I appreciate your response. As long as I disable my site assignment BG in the 
old domain, I can go ahead and setup Boundaries in the new domain? Even if I'm 
doing a slow/progressed migration? I want to make sure that having boundaries 
configured on two primaries won't cause me issues supporting the old 
environment until I complete all the migration tasks.


Thanks,

Brian


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Jason Sandys <ja...@sandys.us>
Sent: Thursday, October 27, 2016 7:55:37 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Migration to Current Branch in a New Domain


1)   No PKI certs are needed whatsoever. ConfigMgr doesn't care about the 
domain membership of managed systems. All you really need if there is no trust 
is a valid network access account fo the clients in the untrusted domains to be 
able to access their DP assuming it's not in their own domain. There really is 
almost nothing special about clients in untrusted domains or forests.

2)   Using a change site code script will only work if the information for 
the new site is published in the domain/forest that the client is in. As for 
boundaries, no problem. Just unmark all of the boundary groups in the "old" 
site for site assignment.

J

From: <listsad...@lists.myitforum.com> on behalf of Brian McDonald 
<mcdonald...@hotmail.com>
Reply-To: "mssms@lists.myitforum.com" <mssms@lists.myitforum.com>
Date: Wednesday, October 26, 2016 at 10:57 PM
To: "mssms@lists.myitforum.com" <mssms@lists.myitforum.com>
Subject: [mssms] Migration to Current Branch in a New Domain

Hello all,

I am planning a migration from SCCM 2012 R2 SP1 to Current Branch 2011. Below 
are the details.

All SCCM clients report to the VNE Site in Domain A. This is the 2012 R2 SP1 
environment.

I will be migrating worksations/servers to Site CDI, which is SCCM Current 
Branch 1511 deployed in Domain B.

All users and workstations have been migrated into Domain B. A larger 
percentage of the servers have been migrated into Domain B as well.

I have a few questions on the approach I take.

1) While the majority of my servers reside in Domain B, I have quite a few yet 
in various domains, that I will need to support from Domain B SCCM environment. 
 How do I achieve this cross forest support? I imagine via certs but looking 
for some high level details on what needs to be done to make this work.

2) As far as the migration goes. Since ALL workstations reside in Domain B, I'm 
planning on using a change site code script. Is it supported to setup all the 
boundaries from Domain A in Domain B? Will this cause issues supporting clients 
from Domain A SCCM?

Any input or suggestions on the optimal approach to take would be much 
appreciated.

Thanks,




Brian

[mssms] Migration to Current Branch in a New Domain

[Brian McDonald]

Hello all,

I am planning a migration from SCCM 2012 R2 SP1 to Current Branch 2011. Below 
are the details.

All SCCM clients report to the VNE Site in Domain A. This is the 2012 R2 SP1 
environment.

I will be migrating worksations/servers to Site CDI, which is SCCM Current 
Branch 1511 deployed in Domain B.

All users and workstations have been migrated into Domain B. A larger 
percentage of the servers have been migrated into Domain B as well.

I have a few questions on the approach I take.

1) While the majority of my servers reside in Domain B, I have quite a few yet 
in various domains, that I will need to support from Domain B SCCM environment. 
 How do I achieve this cross forest support? I imagine via certs but looking 
for some high level details on what needs to be done to make this work.

2) As far as the migration goes. Since ALL workstations reside in Domain B, I'm 
planning on using a change site code script. Is it supported to setup all the 
boundaries from Domain A in Domain B? Will this cause issues supporting clients 
from Domain A SCCM?

Any input or suggestions on the optimal approach to take would be much 
appreciated.

Thanks,



Brian

[mssms] HW Inventory classes (Virtual vs. Physical)

[Brian McDonald]

Good day,


Is there a difference between what HW inventory classes we can pull from say a 
Physical Server vs. a Virtual Server? I'm curious how/what information we can 
inventory is different between the two.


Thanks,

Brian

Re: RE: [EXTERNAL][mssms] Live Meeting Uninstall

[Brian McDonald]

Eswar,


I have gathered all of the product codes, but not sure how to script this. Can 
you give me an example?


Thank you,


Brian


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Eswar <es...@eskonr.com>
Sent: Monday, October 17, 2016 8:02:13 PM
To: mssms@lists.myitforum.com
Subject: Re: RE: [EXTERNAL][mssms] Live Meeting Uninstall


You can get the product ids of these different lync versions using sccm (simple 
query on v_add_remove_programs will do this) and then create batch/cmd to pipe 
all the product codes Into the script.
Script try to perform the uninstallstion on clients that has specific product 
code exist.

Msiexec /X productid /q /norestart

Adjust the parameters for msiexec accordingly.

--
Regards,
Eswar Koneti
www.eskonr.com
Sent from Mobile Device, please excuse any typo's as a result.

Tuesday, 18 October 2016, 04:53AM +08:00 from Matthew Varnado 
matthew.varn...@exeterfinance.com<mailto:matthew.varn...@exeterfinance.com>:


Simple shell script solution (untested with this product, but works for other 
products regularly)



wmic product where 'name like "%%Live Meeting%%"' call uninstall /nointeractive



note the single quotes around the logic phrase, and the double quotes around 
the search string.  Double % are used for the wildcards because if you do 
single % it tries to find a variable by that name.



This also assumes only a single version would be installed at a time.  Run 
multiple times for multiple installs (if possible), or work out a FOR loop to 
execute the command for each match found.



Another option (requiring a lot more research) is to find all the PIDS and do a 
series of msiexec /x[PID] /qn commands.









Matt Varnado |



From: 
listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Brian McDonald
Sent: Monday, October 17, 2016 2:27 PM
To: mssms@lists.myitforum.com
Subject: [EXTERNAL][mssms] Live Meeting Uninstall



Hello,



Does anyone have a method or process for uninstalling ALL versions of Microsoft 
Live Meeting. In my environment we have approximately 9 different versions of 
Live Meeting. Since the installers are all MSI based, I was hoping there would 
be an easy way to script/automate the uninstall so I would only require 1 
single package to get the job done in SCCM.



When I say multiple versions, here is what I mean:



8.0.6362.187

8.0.6362.202

8.0.6362.215

8.0.6362.223

8.0.6362.229

8.0.6362.239

8.0.6362.249

8.0.6362.254

8.0.6362.259



What would be the best way to package an uninstall script to tackle this? I 
don't want to have multiple MSI uninstall packages. Can someone provide some 
insight on to a recommended approach?



Thanks,

Brian




Confidentiality Warning: This transmission is intended only for the proper 
recipient and may contain information that is confidential and/or privileged. 
If you received this message in error or are not the intended recipient, (A) 
you are hereby notified that the dissemination, distribution or copying of this 
message is strictly prohibited, (B) please notify the sender at either the 
e-mail address or telephone number above, and (C) delete this email from your 
computer. Thank you.

[mssms] SCCM 2012 R2 support matrix

[Brian McDonald]

Hello all,


Looking for a support matrix to determine whether 2012 R2 SP1 supports Windows 
Server 2016. Can't find anything official from Microsoft. Would like to know if 
anyone can point me to a link where I can find this info. Even better for the 
entire System Center stack (SCOM, etc.)


Thanks,

Brian

Re: RE: [EXTERNAL][mssms] Live Meeting Uninstall

[Brian McDonald]

Now this sounds like exactly what I need to determine. What would this query 
look like? I'm looking for Live Meeting, not Lync.


Thanks a ton!


Brian


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Eswar <es...@eskonr.com>
Sent: Monday, October 17, 2016 8:02:13 PM
To: mssms@lists.myitforum.com
Subject: Re: RE: [EXTERNAL][mssms] Live Meeting Uninstall


You can get the product ids of these different lync versions using sccm (simple 
query on v_add_remove_programs will do this) and then create batch/cmd to pipe 
all the product codes Into the script.
Script try to perform the uninstallstion on clients that has specific product 
code exist.

Msiexec /X productid /q /norestart

Adjust the parameters for msiexec accordingly.

--
Regards,
Eswar Koneti
www.eskonr.com
Sent from Mobile Device, please excuse any typo's as a result.

Tuesday, 18 October 2016, 04:53AM +08:00 from Matthew Varnado 
matthew.varn...@exeterfinance.com<mailto:matthew.varn...@exeterfinance.com>:


Simple shell script solution (untested with this product, but works for other 
products regularly)



wmic product where 'name like "%%Live Meeting%%"' call uninstall /nointeractive



note the single quotes around the logic phrase, and the double quotes around 
the search string.  Double % are used for the wildcards because if you do 
single % it tries to find a variable by that name.



This also assumes only a single version would be installed at a time.  Run 
multiple times for multiple installs (if possible), or work out a FOR loop to 
execute the command for each match found.



Another option (requiring a lot more research) is to find all the PIDS and do a 
series of msiexec /x[PID] /qn commands.









Matt Varnado |



From: 
listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Brian McDonald
Sent: Monday, October 17, 2016 2:27 PM
To: mssms@lists.myitforum.com
Subject: [EXTERNAL][mssms] Live Meeting Uninstall



Hello,



Does anyone have a method or process for uninstalling ALL versions of Microsoft 
Live Meeting. In my environment we have approximately 9 different versions of 
Live Meeting. Since the installers are all MSI based, I was hoping there would 
be an easy way to script/automate the uninstall so I would only require 1 
single package to get the job done in SCCM.



When I say multiple versions, here is what I mean:



8.0.6362.187

8.0.6362.202

8.0.6362.215

8.0.6362.223

8.0.6362.229

8.0.6362.239

8.0.6362.249

8.0.6362.254

8.0.6362.259



What would be the best way to package an uninstall script to tackle this? I 
don't want to have multiple MSI uninstall packages. Can someone provide some 
insight on to a recommended approach?



Thanks,

Brian




Confidentiality Warning: This transmission is intended only for the proper 
recipient and may contain information that is confidential and/or privileged. 
If you received this message in error or are not the intended recipient, (A) 
you are hereby notified that the dissemination, distribution or copying of this 
message is strictly prohibited, (B) please notify the sender at either the 
e-mail address or telephone number above, and (C) delete this email from your 
computer. Thank you.

Re: [EXTERNAL][mssms] Live Meeting Uninstall

[Brian McDonald]

Jason,


Would this still work for an app, such as Live Meeting where the registry 
string is as follows:


HKEY_CURRENT_USER\Software\Microsoft\Live Meeting


Would modifying your script to use HKEY_CURRENT_USER instead of 
HKEY_LOCAL_MACHINE work?


Thanks,

Brian


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Jason Sandys <ja...@sandys.us>
Sent: Monday, October 17, 2016 4:02:32 PM
To: mssms@lists.myitforum.com
Subject: RE: [EXTERNAL][mssms] Live Meeting Uninstall

As noted in my blog post, please, please do not do this. The links are in my 
blog post on why, but in short, Win32_Product is evil.

J

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Matthew Varnado
Sent: Monday, October 17, 2016 3:54 PM
To: mssms@lists.myitforum.com
Subject: RE: [EXTERNAL][mssms] Live Meeting Uninstall

Simple shell script solution (untested with this product, but works for other 
products regularly)

wmic product where 'name like "%%Live Meeting%%"' call uninstall /nointeractive

note the single quotes around the logic phrase, and the double quotes around 
the search string.  Double % are used for the wildcards because if you do 
single % it tries to find a variable by that name.

This also assumes only a single version would be installed at a time.  Run 
multiple times for multiple installs (if possible), or work out a FOR loop to 
execute the command for each match found.

Another option (requiring a lot more research) is to find all the PIDS and do a 
series of msiexec /x[PID] /qn commands.




Matt Varnado |

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Brian McDonald
Sent: Monday, October 17, 2016 2:27 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [EXTERNAL][mssms] Live Meeting Uninstall


Hello,



Does anyone have a method or process for uninstalling ALL versions of Microsoft 
Live Meeting. In my environment we have approximately 9 different versions of 
Live Meeting. Since the installers are all MSI based, I was hoping there would 
be an easy way to script/automate the uninstall so I would only require 1 
single package to get the job done in SCCM.



When I say multiple versions, here is what I mean:


8.0.6362.187

8.0.6362.202

8.0.6362.215

8.0.6362.223

8.0.6362.229

8.0.6362.239

8.0.6362.249

8.0.6362.254

8.0.6362.259



What would be the best way to package an uninstall script to tackle this? I 
don't want to have multiple MSI uninstall packages. Can someone provide some 
insight on to a recommended approach?



Thanks,

Brian


Confidentiality Warning: This transmission is intended only for the proper 
recipient and may contain information that is confidential and/or privileged. 
If you received this message in error or are not the intended recipient, (A) 
you are hereby notified that the dissemination, distribution or copying of this 
message is strictly prohibited, (B) please notify the sender at either the 
e-mail address or telephone number above, and (C) delete this email from your 
computer. Thank you.

[mssms] Re: Live Meeting Uninstall

[Brian McDonald]

54 l USA

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian McDonald
Sent: Monday, October 17, 2016 3:27 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Live Meeting Uninstall


Hello,



Does anyone have a method or process for uninstalling ALL versions of Microsoft 
Live Meeting. In my environment we have approximately 9 different versions of 
Live Meeting. Since the installers are all MSI based, I was hoping there would 
be an easy way to script/automate the uninstall so I would only require 1 
single package to get the job done in SCCM.



When I say multiple versions, here is what I mean:


8.0.6362.187

8.0.6362.202

8.0.6362.215

8.0.6362.223

8.0.6362.229

8.0.6362.239

8.0.6362.249

8.0.6362.254

8.0.6362.259



What would be the best way to package an uninstall script to tackle this? I 
don't want to have multiple MSI uninstall packages. Can someone provide some 
insight on to a recommended approach?



Thanks,

Brian

[mssms] Live Meeting Uninstall

[Brian McDonald]

Hello,


Does anyone have a method or process for uninstalling ALL versions of Microsoft 
Live Meeting. In my environment we have approximately 9 different versions of 
Live Meeting. Since the installers are all MSI based, I was hoping there would 
be an easy way to script/automate the uninstall so I would only require 1 
single package to get the job done in SCCM.


When I say multiple versions, here is what I mean:


8.0.6362.187

8.0.6362.202

8.0.6362.215

8.0.6362.223

8.0.6362.229

8.0.6362.239

8.0.6362.249

8.0.6362.254

8.0.6362.259


What would be the best way to package an uninstall script to tackle this? I 
don't want to have multiple MSI uninstall packages. Can someone provide some 
insight on to a recommended approach?


Thanks,

Brian

[mssms] Temporarily pause deployments

[Brian McDonald]

Hello everyone,

I need to be able to ensure that workstations and servers aren't being patched 
for the next week. We are working on a production migration project. What is 
the best way to ensure workstations and servers don't get patches within the 
next week?

I do not see an option to pause or stop a deployment. I would rather not have 
to delete the deployments to the target collections. What options do I have?

Thanks,

Brian

Sent from my iPhone

[mssms] Exclude a single patch on 1 Server

[Brian McDonald]

Hello,


Is it possible to exclude a single KB on a single server? I have a patch I need 
to make sure does not install on only 1 server.


Thank you,


Brian

[mssms] Re: Uptime and Last Reboot for Servers

[Brian McDonald]

Daniel,


Can you tell me how I would go about modifying the query to use the v_r_system 
instead?


Thanks,

Brian


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Daniel Ratliff <dratl...@humana.com>
Sent: Friday, October 7, 2016 12:40:03 PM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Uptime and Last Reboot for Servers

No, I would not consider that query to be accurate. Its only querying hardware 
inventory, which in most environments is kept around for 30+ days. This means 
you still get inactive and obsolete clients. You need to tie the query to 
v_r_system_valid if you want to see legitimate clients.

Daniel Ratliff

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian McDonald
Sent: Friday, October 07, 2016 1:30 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Re: Uptime and Last Reboot for Servers


Yeah, I got it from here: http://www.scomgod.com/?p=652
SCCM Query: Uptime and Last Reboot Time | SCOM 
GOD<http://www.scomgod.com/?p=652>
www.scomgod.com<http://www.scomgod.com>
This site is a collection of tools and tips that I needed to place in the 
cloud. I have given credit where credit is due and respect all the hard work of 
those in the ...




I'm curious if the number of servers on this report should be the same number 
as servers found on other server related reports I run (e.g. patch reports)? It 
always seems like there is a discrepancy.



Brian


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Marcum, John <jmar...@bradley.com<mailto:jmar...@bradley.com>>
Sent: Friday, October 7, 2016 11:20:34 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Uptime and Last Reboot for Servers

All the quotes are messed up. Remove them and type them back in. Did you get 
this off the internet somewhere?




From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Brian McDonald
Sent: Friday, October 7, 2016 11:11 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Re: Uptime and Last Reboot for Servers

[External Email]

I'm aware I was missing the 'S' in Select in the below. Here is the FULL query 
i'm running. [??]


SELECT
cs.Name0 AS ‘ComputerName’,
DATEDIFF(HOUR, os.LastBootUpTime0, ws.LastHWScan)
AS ‘Uptime (in Hours)’,
CONVERT(VARCHAR(26), os.LastBootUpTime0, 100)
AS ‘Last Reboot Date/Time’,
CONVERT(VARCHAR(26), ws.LastHWScan, 101)
AS ‘Last Hardware Inventory’
FROM
dbo.v_GS_WORKSTATION_STATUS ws
LEFT OUTER JOIN dbo.v_GS_Operating_System os
ON ws.ResourceID = os.ResourceID
LEFT OUTER JOIN dbo.v_GS_COMPUTER_SYSTEM cs
ON cs.ResourceID = os.ResourceID
WHERE os.Caption0 LIKE ‘%server%’
ORDER BY os.LastBootUpTime0 ASC


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Brian McDonald 
<mcdonald...@hotmail.com<mailto:mcdonald...@hotmail.com>>
Sent: Friday, October 7, 2016 10:55:41 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Uptime and Last Reboot for Servers


Hello everyone,



I'm trying to determine the uptime and last reboot for servers. Below is the 
query I am trying to execute:


ELECT
cs.Name0 AS ‘ComputerName’,
DATEDIFF(HOUR, os.LastBootUpTime0, ws.LastHWScan)
AS ‘Uptime (in Hours)’,
CONVERT(VARCHAR(26), os.LastBootUpTime0, 100)
AS ‘Last Reboot Date/Time’,
CONVERT(VARCHAR(26), ws.LastHWScan, 101)
AS ‘Last Hardware Inventory’
FROM
dbo.v_GS_WORKSTATION_STATUS ws
LEFT OUTER JOIN dbo.v_GS_Operating_System os
ON ws.ResourceID = os.ResourceID
LEFT OUTER JOIN dbo.v_GS_COMPUTER_SYSTEM cs
ON cs.ResourceID = os.ResourceID
WHERE os.Caption0 LIKE ‘%server%’
ORDER BY os.LastBootUpTime0 ASC



I'm getting a syntax error,
Msg 102, Level 15, State 1, Line 2
Incorrect syntax near '‘'.



Can someone tell me what I'm doing wrong?



Thank you,



Brian





Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.



The information transmitted is intended only for the person or entity to which 
it is addressed
and may contain CONFIDENTIAL material. If you receive this material/information 
in error,
please contact the sender and delete or destroy the material/information.

[mssms] Re: Uptime and Last Reboot for Servers

[Brian McDonald]

Yeah, I got it from here: http://www.scomgod.com/?p=652

SCCM Query: Uptime and Last Reboot Time | SCOM 
GOD<http://www.scomgod.com/?p=652>
www.scomgod.com
This site is a collection of tools and tips that I needed to place in the 
cloud. I have given credit where credit is due and respect all the hard work of 
those in the ...



I'm curious if the number of servers on this report should be the same number 
as servers found on other server related reports I run (e.g. patch reports)? It 
always seems like there is a discrepancy.


Brian


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Marcum, John <jmar...@bradley.com>
Sent: Friday, October 7, 2016 11:20:34 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Uptime and Last Reboot for Servers

All the quotes are messed up. Remove them and type them back in. Did you get 
this off the internet somewhere?




From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian McDonald
Sent: Friday, October 7, 2016 11:11 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Re: Uptime and Last Reboot for Servers

[External Email]

I'm aware I was missing the 'S' in Select in the below. Here is the FULL query 
i'm running. [?]


SELECT
cs.Name0 AS 'ComputerName',
DATEDIFF(HOUR, os.LastBootUpTime0, ws.LastHWScan)
AS 'Uptime (in Hours)',
CONVERT(VARCHAR(26), os.LastBootUpTime0, 100)
AS 'Last Reboot Date/Time',
CONVERT(VARCHAR(26), ws.LastHWScan, 101)
AS 'Last Hardware Inventory'
FROM
dbo.v_GS_WORKSTATION_STATUS ws
LEFT OUTER JOIN dbo.v_GS_Operating_System os
ON ws.ResourceID = os.ResourceID
LEFT OUTER JOIN dbo.v_GS_COMPUTER_SYSTEM cs
ON cs.ResourceID = os.ResourceID
WHERE os.Caption0 LIKE '%server%'
ORDER BY os.LastBootUpTime0 ASC


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Brian McDonald 
<mcdonald...@hotmail.com<mailto:mcdonald...@hotmail.com>>
Sent: Friday, October 7, 2016 10:55:41 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Uptime and Last Reboot for Servers


Hello everyone,



I'm trying to determine the uptime and last reboot for servers. Below is the 
query I am trying to execute:


ELECT
cs.Name0 AS 'ComputerName',
DATEDIFF(HOUR, os.LastBootUpTime0, ws.LastHWScan)
AS 'Uptime (in Hours)',
CONVERT(VARCHAR(26), os.LastBootUpTime0, 100)
AS 'Last Reboot Date/Time',
CONVERT(VARCHAR(26), ws.LastHWScan, 101)
AS 'Last Hardware Inventory'
FROM
dbo.v_GS_WORKSTATION_STATUS ws
LEFT OUTER JOIN dbo.v_GS_Operating_System os
ON ws.ResourceID = os.ResourceID
LEFT OUTER JOIN dbo.v_GS_COMPUTER_SYSTEM cs
ON cs.ResourceID = os.ResourceID
WHERE os.Caption0 LIKE '%server%'
ORDER BY os.LastBootUpTime0 ASC



I'm getting a syntax error,
Msg 102, Level 15, State 1, Line 2
Incorrect syntax near '''.



Can someone tell me what I'm doing wrong?



Thank you,



Brian






Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.

[mssms] Re: Uptime and Last Reboot for Servers

[Brian McDonald]

That was it! Thanks so much everyone!


Brian


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Williams, John <jow...@qualcomm.com>
Sent: Friday, October 7, 2016 11:21:18 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Uptime and Last Reboot for Servers

I believe it is your commas (they are the newer MS Word type instead of the 
ones used in SQL) you are using. I've changed them within SQL and got this to 
work.

SELECT
cs.Name0 AS 'ComputerName',
DATEDIFF(HOUR, os.LastBootUpTime0, ws.LastHWScan)
AS 'Uptime (in Hours)',
CONVERT(VARCHAR(26), os.LastBootUpTime0, 100)
AS 'Last Reboot Date/Time',
CONVERT(VARCHAR(26), ws.LastHWScan, 101)
AS 'Last Hardware Inventory'
FROM
dbo.v_GS_WORKSTATION_STATUS ws
LEFT OUTER JOIN dbo.v_GS_Operating_System os
ON ws.ResourceID = os.ResourceID
LEFT OUTER JOIN dbo.v_GS_COMPUTER_SYSTEM cs
ON cs.ResourceID = os.ResourceID
WHERE os.Caption0 LIKE '%server%'
ORDER BY os.LastBootUpTime0 ASC


Best Regards,
John Williams

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian McDonald
Sent: Friday, October 7, 2016 9:11 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Re: Uptime and Last Reboot for Servers


I'm aware I was missing the 'S' in Select in the below. Here is the FULL query 
i'm running. [?]


SELECT
cs.Name0 AS 'ComputerName',
DATEDIFF(HOUR, os.LastBootUpTime0, ws.LastHWScan)
AS 'Uptime (in Hours)',
CONVERT(VARCHAR(26), os.LastBootUpTime0, 100)
AS 'Last Reboot Date/Time',
CONVERT(VARCHAR(26), ws.LastHWScan, 101)
AS 'Last Hardware Inventory'
FROM
dbo.v_GS_WORKSTATION_STATUS ws
LEFT OUTER JOIN dbo.v_GS_Operating_System os
ON ws.ResourceID = os.ResourceID
LEFT OUTER JOIN dbo.v_GS_COMPUTER_SYSTEM cs
ON cs.ResourceID = os.ResourceID
WHERE os.Caption0 LIKE '%server%'
ORDER BY os.LastBootUpTime0 ASC


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Brian McDonald 
<mcdonald...@hotmail.com<mailto:mcdonald...@hotmail.com>>
Sent: Friday, October 7, 2016 10:55:41 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Uptime and Last Reboot for Servers


Hello everyone,



I'm trying to determine the uptime and last reboot for servers. Below is the 
query I am trying to execute:


ELECT
cs.Name0 AS 'ComputerName',
DATEDIFF(HOUR, os.LastBootUpTime0, ws.LastHWScan)
AS 'Uptime (in Hours)',
CONVERT(VARCHAR(26), os.LastBootUpTime0, 100)
AS 'Last Reboot Date/Time',
CONVERT(VARCHAR(26), ws.LastHWScan, 101)
AS 'Last Hardware Inventory'
FROM
dbo.v_GS_WORKSTATION_STATUS ws
LEFT OUTER JOIN dbo.v_GS_Operating_System os
ON ws.ResourceID = os.ResourceID
LEFT OUTER JOIN dbo.v_GS_COMPUTER_SYSTEM cs
ON cs.ResourceID = os.ResourceID
WHERE os.Caption0 LIKE '%server%'
ORDER BY os.LastBootUpTime0 ASC



I'm getting a syntax error,
Msg 102, Level 15, State 1, Line 2
Incorrect syntax near '''.



Can someone tell me what I'm doing wrong?



Thank you,



Brian

[mssms] Uptime and Last Reboot for Servers

[Brian McDonald]

Hello everyone,


I'm trying to determine the uptime and last reboot for servers. Below is the 
query I am trying to execute:


ELECT
cs.Name0 AS 'ComputerName',
DATEDIFF(HOUR, os.LastBootUpTime0, ws.LastHWScan)
AS 'Uptime (in Hours)',
CONVERT(VARCHAR(26), os.LastBootUpTime0, 100)
AS 'Last Reboot Date/Time',
CONVERT(VARCHAR(26), ws.LastHWScan, 101)
AS 'Last Hardware Inventory'
FROM
dbo.v_GS_WORKSTATION_STATUS ws
LEFT OUTER JOIN dbo.v_GS_Operating_System os
ON ws.ResourceID = os.ResourceID
LEFT OUTER JOIN dbo.v_GS_COMPUTER_SYSTEM cs
ON cs.ResourceID = os.ResourceID
WHERE os.Caption0 LIKE '%server%'
ORDER BY os.LastBootUpTime0 ASC


I'm getting a syntax error,

Msg 102, Level 15, State 1, Line 2
Incorrect syntax near '''.


Can someone tell me what I'm doing wrong?


Thank you,


Brian

Re: [mssms] SSRS Instances

[Brian McDonald]

Easy enough. Thanks John!


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Marcum, John <jmar...@bradley.com>
Sent: Thursday, September 29, 2016 9:34:42 AM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] SSRS Instances

>From within the client agent settings, hardware inventory tab you should be 
>able to browse to the namespace on a client that has run the script and add it.
[cid:image001.png@01D21A34.B008BD30]


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian McDonald
Sent: Thursday, September 29, 2016 9:16 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] SSRS Instances

[External Email]

Sherry,



This script looks great. I do not understand this though:  "add the class to 
your hardware inventory in the appropriate client settings package" I know how 
to modify the HW inventory in the client settings, but what exactly am I 
modifying?



Any guidance on how I might set this up or links you can reference?



Thank you,



Brian


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Sherry Kissinger 
<sherrylkissin...@gmail.com<mailto:sherrylkissin...@gmail.com>>
Sent: Wednesday, September 28, 2016 4:06:40 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: Re: [mssms] SSRS Instances

Use Jason's script:  
http://blog.configmgrftw.com/sql-server-inventory-using-configmgr/
As a ConfigItem (a vbscript) targeted to your population you care about, and 
extend hardware inventory.

for me with the view I ended up with, something like this:
select s1.netbios_name0, si.*
from v_gs_sqlinstance si
join v_r_system s1 on s1.resourceid=si.resourceid
where si.InstanceType0 = 'RS'

(Because RS means "reporting services", at least I assume so.

On Wed, Sep 28, 2016 at 3:24 PM, Brian McDonald 
<mcdonald...@hotmail.com<mailto:mcdonald...@hotmail.com>> wrote:

Hey all,



I was wondering if anyone can tell me how I can get an inventory of all SSRS 
instances for all SQL Servers? Specifically, I need to know where the SSRS 
service is running.



Has anyone have any samples they can share?



Thanks,

Brian




--
Thank you,

Sherry Kissinger

My Parameters:  Standardize. Simplify. Automate
Blogs: http://www.mofmaster.com, http://mnscug.org/blogs/sherry-kissinger, 
http://www.smguru.org






Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.

Re: [mssms] SSRS Instances

[Brian McDonald]

Sherry,


This script looks great. I do not understand this though:  "add the class to 
your hardware inventory in the appropriate client settings package" I know how 
to modify the HW inventory in the client settings, but what exactly am I 
modifying?


Any guidance on how I might set this up or links you can reference?


Thank you,


Brian


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Sherry Kissinger <sherrylkissin...@gmail.com>
Sent: Wednesday, September 28, 2016 4:06:40 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] SSRS Instances

Use Jason's script:  
http://blog.configmgrftw.com/sql-server-inventory-using-configmgr/
As a ConfigItem (a vbscript) targeted to your population you care about, and 
extend hardware inventory.

for me with the view I ended up with, something like this:
select s1.netbios_name0, si.*
from v_gs_sqlinstance si
join v_r_system s1 on s1.resourceid=si.resourceid
where si.InstanceType0 = 'RS'

(Because RS means "reporting services", at least I assume so.

On Wed, Sep 28, 2016 at 3:24 PM, Brian McDonald 
<mcdonald...@hotmail.com<mailto:mcdonald...@hotmail.com>> wrote:

Hey all,


I was wondering if anyone can tell me how I can get an inventory of all SSRS 
instances for all SQL Servers? Specifically, I need to know where the SSRS 
service is running.


Has anyone have any samples they can share?


Thanks,

Brian




--
Thank you,

Sherry Kissinger

My Parameters:  Standardize. Simplify. Automate
Blogs: http://www.mofmaster.com, http://mnscug.org/blogs/sherry-kissinger, 
http://www.smguru.org

Re: [mssms] RE: MySQL

[Brian McDonald]

Nice! How do I add to this to get devices with this installed?

Brian

Sent from my iPhone

> On Sep 20, 2016, at 7:34 AM, Marcum, John <jmar...@bradley.com> wrote:
> 
> Looks like it shows in ARP. I see it when I run this:
> 
> select distinct ARPDisplayName0 from v_GS_INSTALLED_SOFTWARE where 
> ARPDisplayName0 like '%my%SQL%'
> 
> 
> 
> 
> -Original Message-
> From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
> On Behalf Of Brian McDonald
> Sent: Tuesday, September 20, 2016 7:19 AM
> To: mssms@lists.myitforum.com
> Subject: [mssms] MySQL
> 
> [This message is from outside Bradley. Exercise caution in opening 
> attachments or links.]
> 
> Good morning,
> 
> Does anyone have a query to find all devices with MySQL installed?
> 
> Thank you,
> 
> Brian
> 
> Sent from my iPhone
> 
> 
> 
> 
> Confidentiality Notice: This e-mail is from a law firm and may be protected 
> by the attorney-client or work product privileges. If you have received this 
> message in error, please notify the sender by replying to this e-mail and 
> then delete it from your computer.
> 

[mssms] MySQL

[Brian McDonald]

Good morning,

Does anyone have a query to find all devices with MySQL installed?
 
Thank you,

Brian

Sent from my iPhone

Re: [mssms] RE: Help with a few SQL queries

[Brian McDonald]

Correct


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Garth Jones <ga...@enhansoft.com>
Sent: Monday, September 12, 2016 12:25:14 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: Help with a few SQL queries

So what are the SQL view names that it created?  V_GS_ TEST_Outlook and V_GS_ 
TEST_Outlook64?



Garth Jones
Chief Architect

www.Enhansoft.com<http://www.enhansoft.com/>
[Description: Description: 
cid:image001.jpg@01CC63FB.974F4EC0]<http://www.enhansoft.com/>
Enhancing Your Business
[Description: Description: Description: Description: Description: Description: 
Description: 
cid:image004.png@01CD5E19.F3C3A110]<http://www.enhansoft.com/blog>[Description: 
Description: Description: Description: Description: Description: Description: 
cid:image005.png@01CD5E19.F3C3A110]<https://twitter.com/enhansoft>[Description: 
Description: Description: Description: Description: Description: Description: 
cid:image006.jpg@01CD5E19.F3C3A110]<http://www.facebook.com/EnhansoftInc>[Description:
 Description: Description: Description: Description: Description: Description: 
Description: Description: Description: Description: Description: Description: 
Description: Description: Enhansoft's YouTube 
Page]<http://www.youtube.com/user/Enhansoft/videos>[Description: Description: 
Description: Description: Description: Description: Description: 
cid:image007.png@01CD5E19.F3C3A110]<http://myitforum.com/myitforumwp/community/groups/enhansoft/>

Subscribe to Enhansoft's Newsletter!<http://www.enhansoft.com/register>

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian McDonald
Sent: Monday, September 12, 2016 12:53 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: Help with a few SQL queries


Yes, here is the MOF edit.


pragma namespace (".\\root\\cimv2\\SMS")
#pragma deleteclass("TEST_Outlook", NOFAIL)
[SMS_Report(FALSE),SMS_Group_Name("TEST_Outlook"),SMS_Class_ID("TEST_BM|TEST_Outlook|1.0"),
SMS_Context_1("__ProviderArchitecture=32|uint32"),
SMS_Context_2("__RequiredArchitecture=true|boolean")]
Class TEST_Outlook: SMS_Class_Template
{
[SMS_Report(FALSE),key] string KeyName;
[SMS_Report(TRUE)] String Bitness;
[SMS_Report(TRUE)] String InternetMail;
[SMS_Report(TRUE)] String MicrosoftExchangeServer;
};

#pragma namespace (".\\root\\cimv2\\SMS")
#pragma deleteclass("TEST_Outlook_64", NOFAIL)
[SMS_Report(FALSE),SMS_Group_Name("TEST_Outlook64"),SMS_Class_ID("TEST_BM|TEST_Outlook64|1.0"),
SMS_Context_1("__ProviderArchitecture=64|uint32"),
SMS_Context_2("__RequiredArchitecture=true|boolean")]
Class TEST_Outlook_64 : SMS_Class_Template
{
[SMS_Report(FALSE),key] string KeyName;
[SMS_Report(TRUE)] String Bitness;
[SMS_Report(TRUE)] String InternetMail;
[SMS_Report(TRUE)] String MicrosoftExchangeServer;
};


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Garth Jones <ga...@enhansoft.com<mailto:ga...@enhansoft.com>>
Sent: Monday, September 12, 2016 9:19:33 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] RE: Help with a few SQL queries

So did you create the MOF edit yet? Has the inventory been collected?



Garth Jones
Chief Architect

www.Enhansoft.com<http://www.enhansoft.com/>
[Description: Description: 
cid:image001.jpg@01CC63FB.974F4EC0]<http://www.enhansoft.com/>
Enhancing Your Business
[Description: Description: Description: Description: Description: Description: 
Description: 
cid:image004.png@01CD5E19.F3C3A110]<http://www.enhansoft.com/blog>[Description: 
Description: Description: Description: Description: Description: Description: 
cid:image005.png@01CD5E19.F3C3A110]<https://twitter.com/enhansoft>[Description: 
Description: Description: Description: Description: Description: Description: 
cid:image006.jpg@01CD5E19.F3C3A110]<http://www.facebook.com/EnhansoftInc>[Description:
 Description: Description: Description: Description: Description: Description: 
Description: Description: Description: Description: Description: Description: 
Description: Description: Enhansoft's YouTube 
Page]<http://www.youtube.com/user/Enhansoft/videos>[Description: Description: 
Description: Description: Description: Description: Description: 
cid:image007.png@01CD5E19.F3C3A110]<http://myitforum.com/myitforumwp/community/groups/enhansoft/>

Subscribe to Enhansoft's Newsletter!<http://www.enhansoft.com/register>

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Brian McDonald
Sent

Re: [mssms] RE: Help with a few SQL queries

[Brian McDonald]

Yes, here is the MOF edit.


pragma namespace (".\\root\\cimv2\\SMS")
#pragma deleteclass("TEST_Outlook", NOFAIL)
[SMS_Report(FALSE),SMS_Group_Name("TEST_Outlook"),SMS_Class_ID("TEST_BM|TEST_Outlook|1.0"),
SMS_Context_1("__ProviderArchitecture=32|uint32"),
SMS_Context_2("__RequiredArchitecture=true|boolean")]
Class TEST_Outlook: SMS_Class_Template
{
[SMS_Report(FALSE),key] string KeyName;
[SMS_Report(TRUE)] String Bitness;
[SMS_Report(TRUE)] String InternetMail;
[SMS_Report(TRUE)] String MicrosoftExchangeServer;
};

#pragma namespace (".\\root\\cimv2\\SMS")
#pragma deleteclass("TEST_Outlook_64", NOFAIL)
[SMS_Report(FALSE),SMS_Group_Name("TEST_Outlook64"),SMS_Class_ID("TEST_BM|TEST_Outlook64|1.0"),
SMS_Context_1("__ProviderArchitecture=64|uint32"),
SMS_Context_2("__RequiredArchitecture=true|boolean")]
Class TEST_Outlook_64 : SMS_Class_Template
{
[SMS_Report(FALSE),key] string KeyName;
[SMS_Report(TRUE)] String Bitness;
[SMS_Report(TRUE)] String InternetMail;
[SMS_Report(TRUE)] String MicrosoftExchangeServer;
};



From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Garth Jones <ga...@enhansoft.com>
Sent: Monday, September 12, 2016 9:19:33 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: Help with a few SQL queries

So did you create the MOF edit yet? Has the inventory been collected?



Garth Jones
Chief Architect

www.Enhansoft.com<http://www.enhansoft.com/>
[Description: Description: 
cid:image001.jpg@01CC63FB.974F4EC0]<http://www.enhansoft.com/>
Enhancing Your Business
[Description: Description: Description: Description: Description: Description: 
Description: 
cid:image004.png@01CD5E19.F3C3A110]<http://www.enhansoft.com/blog>[Description: 
Description: Description: Description: Description: Description: Description: 
cid:image005.png@01CD5E19.F3C3A110]<https://twitter.com/enhansoft>[Description: 
Description: Description: Description: Description: Description: Description: 
cid:image006.jpg@01CD5E19.F3C3A110]<http://www.facebook.com/EnhansoftInc>[Description:
 Description: Description: Description: Description: Description: Description: 
Description: Description: Description: Description: Description: Description: 
Description: Description: Enhansoft's YouTube 
Page]<http://www.youtube.com/user/Enhansoft/videos>[Description: Description: 
Description: Description: Description: Description: Description: 
cid:image007.png@01CD5E19.F3C3A110]<http://myitforum.com/myitforumwp/community/groups/enhansoft/>

Subscribe to Enhansoft's Newsletter!<http://www.enhansoft.com/register>

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian McDonald
Sent: Sunday, September 11, 2016 10:57 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: Help with a few SQL queries

Garth,

I used RegKeyToMof to inventory the key found in the following link:
https://www.ronnipedersen.com/2012/11/application-requirement-for-microsoft-office-32-or-64-bit/

What I'm trying to do is inventory a list of workstations that have x86 and x64 
versions of office 2013. Looking to get some help with the query.


Thanks,


Brian
Sent from my iPhone

On Sep 11, 2016, at 5:49 PM, Garth Jones 
<ga...@enhansoft.com<mailto:ga...@enhansoft.com>> wrote:
https://www.ronnipedersen.com/2012/11/application-requirement-for-microsoft-office-32-or-64-bit/

Re: [mssms] RE: Help with a few SQL queries

[Brian McDonald]

Garth,

I used RegKeyToMof to inventory the key found in the following link:
https://www.ronnipedersen.com/2012/11/application-requirement-for-microsoft-office-32-or-64-bit/

What I'm trying to do is inventory a list of workstations that have x86 and x64 
versions of office 2013. Looking to get some help with the query.

Thanks,

Brian
Sent from my iPhone

On Sep 11, 2016, at 5:49 PM, Garth Jones 
> wrote:

https://www.ronnipedersen.com/2012/11/application-requirement-for-microsoft-office-32-or-64-bit/

Re: [mssms] RE: Help with a few SQL queries

[Brian McDonald]

Todd - this is great! The one thing I need to know is which workstations have 
this. How do I add that to the query?


Thanks,

Brian


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Todd Hemsell <hems...@gmail.com>
Sent: Friday, September 2, 2016 4:17:47 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: Help with a few SQL queries

Select

ARPDisplayName0,
InstalledLocation0,
CASE When InstalledLocation0 Like '%(x86)%' Then 'x86' Else 'x64' End AS 
[DetectedArchitecture]

>From v_GS_INSTALLED_SOFTWARE

Where ARPDisplayName0 = 'Microsoft Office Professional Plus 2013'

On Fri, Sep 2, 2016 at 2:16 PM, Brian McDonald 
<mcdonald...@hotmail.com<mailto:mcdonald...@hotmail.com>> wrote:

Sorry, a bit of a newbie with this. How exactly to I pull the data? Can someone 
provide a sample query?


Thank you,

Brian


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Marcum, John <jmar...@bradley.com<mailto:jmar...@bradley.com>>
Sent: Wednesday, August 31, 2016 6:50:46 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] RE: Help with a few SQL queries

Once that key is inventoried you will have a custom view with the data you need.

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of Brian McDonald
Sent: Tuesday, August 30, 2016 2:33 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: Re: [mssms] RE: Help with a few SQL queries


This is great. Thanks John.



I'll extend the MOF key. Once I've done that, what is the best way to pull 
inventory on those clients with that particular REG key?



Thank you!



Brian


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Marcum, John <jmar...@bradley.com<mailto:jmar...@bradley.com>>
Sent: Tuesday, August 30, 2016 1:07:40 PM
To: 'mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>'
Subject: RE: [mssms] RE: Help with a few SQL queries

Guess I could have been more specific on my reply here..

I don't know of a way to get the Office bitness out of the box so if I wanted 
to know that and I wasn't using something like BDNA I'd use regkeytomof to 
inventory the key Ronni mentions in his blog. Then I'd use that in my report.



From: Marcum, John
Sent: Tuesday, August 30, 2016 1:01 PM
To: 'mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>' 
<mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>
Subject: RE: [mssms] RE: Help with a few SQL queries

May need to do something like this to find the Office architecture.

https://www.ronnipedersen.com/2012/11/application-requirement-for-microsoft-office-32-or-64-bit/





From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Brian McDonald
Sent: Tuesday, August 30, 2016 12:45 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: Re: [mssms] RE: Help with a few SQL queries

Server names for 1 and Computer names for 2.

Thank you!

Brian

On Aug 30, 2016, at 12:37 PM, Marcum, John 
<jmar...@bradley.com<mailto:jmar...@bradley.com>> wrote:
What do you want to know? Just the computer names for 1 and 2?

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Brian McDonald
Sent: Tuesday, August 30, 2016 12:25 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Help with a few SQL queries


Hello,



I need to compile a few reports. 1) List of all servers by domain 2) All Office 
2013 with x86 Architecture



Does anyone have any samples they can share for each of these?



Thanks,



Brian



Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.

Re: [mssms] RE: Help with a few SQL queries

[Brian McDonald]

Sorry, a bit of a newbie with this. How exactly to I pull the data? Can someone 
provide a sample query?


Thank you,

Brian


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Marcum, John <jmar...@bradley.com>
Sent: Wednesday, August 31, 2016 6:50:46 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: Help with a few SQL queries

Once that key is inventoried you will have a custom view with the data you need.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian McDonald
Sent: Tuesday, August 30, 2016 2:33 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: Help with a few SQL queries


This is great. Thanks John.



I'll extend the MOF key. Once I've done that, what is the best way to pull 
inventory on those clients with that particular REG key?



Thank you!



Brian


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Marcum, John <jmar...@bradley.com<mailto:jmar...@bradley.com>>
Sent: Tuesday, August 30, 2016 1:07:40 PM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] RE: Help with a few SQL queries

Guess I could have been more specific on my reply here……

I don’t know of a way to get the Office bitness out of the box so if I wanted 
to know that and I wasn’t using something like BDNA I’d use regkeytomof to 
inventory the key Ronni mentions in his blog. Then I’d use that in my report.



From: Marcum, John
Sent: Tuesday, August 30, 2016 1:01 PM
To: 'mssms@lists.myitforum.com' 
<mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>
Subject: RE: [mssms] RE: Help with a few SQL queries

May need to do something like this to find the Office architecture.

https://www.ronnipedersen.com/2012/11/application-requirement-for-microsoft-office-32-or-64-bit/





From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Brian McDonald
Sent: Tuesday, August 30, 2016 12:45 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: Re: [mssms] RE: Help with a few SQL queries

Server names for 1 and Computer names for 2.

Thank you!

Brian

On Aug 30, 2016, at 12:37 PM, Marcum, John 
<jmar...@bradley.com<mailto:jmar...@bradley.com>> wrote:
What do you want to know? Just the computer names for 1 and 2?

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Brian McDonald
Sent: Tuesday, August 30, 2016 12:25 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Help with a few SQL queries


Hello,



I need to compile a few reports. 1) List of all servers by domain 2) All Office 
2013 with x86 Architecture



Does anyone have any samples they can share for each of these?



Thanks,



Brian



Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.

[mssms] Re: Help with a few SQL queries

[Brian McDonald]

This is nice. Does it include by Architecture (x86 and x64)?


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Eswar Koneti <eswarkon...@outlook.com>
Sent: Wednesday, August 31, 2016 9:47:22 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Re: Help with a few SQL queries


For MS office versions,you can try report (Customize per needs) 
http://eskonr.com/2015/01/sccm-configmgr-2012-ssrs-report-count-ms-office-versions/

SCCM Configmgr 2012 SSRS Report Count MS Office Versions 
...<http://eskonr.com/2015/01/sccm-configmgr-2012-ssrs-report-count-ms-office-versions/>
eskonr.com
Recently , I worked on MS Office upgrade project to 2013 and before I take any 
action on this,I need to identify /get count of all MS Office Versions




and for list of servers by domain ,you can use this SQL query ( it has lot 
more) which is available in my dashboard report  
http://eskonr.com/2014/05/sccm-configmgr-2012-ssrs-dashboard-client-health-summary-report/

SCCM Configmgr 2012 SSRS Dashboard Client Health Summary 
...<http://eskonr.com/2014/05/sccm-configmgr-2012-ssrs-dashboard-client-health-summary-report/>
eskonr.com
Another Configmgr 2012 SSRS Report that brings Client Health Summary.This 
time,it will be a dashboard instead normal SSRS report.Dashboard is nice way to



select case when sys.Resource_Domain_OR_Workgr0!=' ' then 
sys.Resource_Domain_OR_Workgr0else NULL end as [Domain],
count(distinct sys.ResourceID) [Total Clients],
count(case when sys.client0=1  then '*' end) as 'Client Installed',
count(case when sys.Active0=1 then '*' end) as 'Clients Actiive',
count(case when sys.active0=0 then '*' end) as 'Clients Inactive',
count(case when sys.Obsolete0=1 then '*' end) as 'Clients Obsolete',
Count(case when  sys.Client0 is NULL then '*' else NULL end) as 'Clients 
Missing',
round((CAST(count(case when  sys.Client0 ='1' then '*' else NULL end) 
asfloat)/COUNT(sys.ResourceID ) )*100,2) as 'Success %',
round((CAST(count(case when  sys.Client0 is NULL then '*' else NULL end) 
asfloat)/COUNT(sys.ResourceID ) )*100,2) as 'Missing %'
from v_R_System sys
where  Operating_System_Name_and0 like '%server%'
group by sys.Resource_Domain_OR_Workgr0
order by 4 desc



Regards
Eswar Koneti
www.eskonr.com<http://www.eskonr.com>

From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Brian McDonald <mcdonald...@hotmail.com>
Sent: 31 August 2016 01:24:55
To: mssms@lists.myitforum.com
Subject: [mssms] Help with a few SQL queries


Hello,


I need to compile a few reports. 1) List of all servers by domain 2) All Office 
2013 with x86 Architecture


Does anyone have any samples they can share for each of these?


Thanks,


Brian

Re: [mssms] RE: Help with a few SQL queries

[Brian McDonald]

This is great. Thanks John.


I'll extend the MOF key. Once I've done that, what is the best way to pull 
inventory on those clients with that particular REG key?


Thank you!


Brian


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Marcum, John <jmar...@bradley.com>
Sent: Tuesday, August 30, 2016 1:07:40 PM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] RE: Help with a few SQL queries

Guess I could have been more specific on my reply here……

I don’t know of a way to get the Office bitness out of the box so if I wanted 
to know that and I wasn’t using something like BDNA I’d use regkeytomof to 
inventory the key Ronni mentions in his blog. Then I’d use that in my report.



From: Marcum, John
Sent: Tuesday, August 30, 2016 1:01 PM
To: 'mssms@lists.myitforum.com' <mssms@lists.myitforum.com>
Subject: RE: [mssms] RE: Help with a few SQL queries

May need to do something like this to find the Office architecture.

https://www.ronnipedersen.com/2012/11/application-requirement-for-microsoft-office-32-or-64-bit/





From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Brian McDonald
Sent: Tuesday, August 30, 2016 12:45 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: Re: [mssms] RE: Help with a few SQL queries

Server names for 1 and Computer names for 2.

Thank you!

Brian

On Aug 30, 2016, at 12:37 PM, Marcum, John 
<jmar...@bradley.com<mailto:jmar...@bradley.com>> wrote:
What do you want to know? Just the computer names for 1 and 2?

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Brian McDonald
Sent: Tuesday, August 30, 2016 12:25 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Help with a few SQL queries


Hello,



I need to compile a few reports. 1) List of all servers by domain 2) All Office 
2013 with x86 Architecture



Does anyone have any samples they can share for each of these?



Thanks,



Brian



Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.

Re: [mssms] RE: Help with a few SQL queries

[Brian McDonald]

Server names for 1 and Computer names for 2.

Thank you!

Brian

On Aug 30, 2016, at 12:37 PM, Marcum, John 
<jmar...@bradley.com<mailto:jmar...@bradley.com>> wrote:

What do you want to know? Just the computer names for 1 and 2?

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Brian McDonald
Sent: Tuesday, August 30, 2016 12:25 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Help with a few SQL queries


Hello,



I need to compile a few reports. 1) List of all servers by domain 2) All Office 
2013 with x86 Architecture



Does anyone have any samples they can share for each of these?



Thanks,



Brian



Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.

[mssms] Help with a few SQL queries

[Brian McDonald]

Hello,


I need to compile a few reports. 1) List of all servers by domain 2) All Office 
2013 with x86 Architecture


Does anyone have any samples they can share for each of these?


Thanks,


Brian

[mssms] Patch Report for all updates deployed last 12 months

[Brian McDonald]

Hello all,


Does anyone have a report they've used to get a count of both Microsoft + 3rd 
Party Updates that have been deployed EACH month for the past 12 months?


I want to be able to correlate that to our 'success' or lack there of with our 
patching/vulnerability management efforts.


Thanks,


Brian

Re: [mssms] Query for all Windows Servers (Virtual)

[Brian McDonald]

Thanks! For the physical servers, is this pulling on Windows Server too?


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Sherry Kissinger <sherrylkissin...@gmail.com>
Sent: Tuesday, July 26, 2016 10:27:59 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Query for all Windows Servers (Virtual)


select csys.manufacturer0, csys.model0, count(csys.model0) as 'Count'
from v_gs_computer_system csys
join v_gs_operating_system os on os.resourceid=csys.resourceid
where model0 like '%virtual%'
and os.caption0 like '%server%'
group by csys.manufacturer0, csys.model0
order by csys.model0





On Tue, Jul 26, 2016 at 10:05 AM, Brian McDonald 
<mcdonald...@hotmail.com<mailto:mcdonald...@hotmail.com>> wrote:

Hello,


I need to get a list of all virtual servers in my environment. I'm using the 
following query:


SELECT Manufacturer0, Model0, Count(Model0) AS 'Count'
FROM dbo.v_GS_COMPUTER_SYSTEM
GROUP BY Manufacturer0,Model0
ORDER BY Model0


I get a list of all Physical HW, but the virtual counts I'm concerned with as 
some VMs will have Windows Client OS installed. How can I modify the above 
query to only get Virtual Machines with Windows Server OS? I have some VMware, 
but predominantly Hyper-V in my environment.


Thanks,

Brian




--
Thank you,

Sherry Kissinger

My Parameters:  Standardize. Simplify. Automate
Blogs: http://www.mofmaster.com, http://mnscug.org/blogs/sherry-kissinger, 
http://www.smguru.org

[mssms] Query for all Windows Servers (Virtual)

[Brian McDonald]

Hello,


I need to get a list of all virtual servers in my environment. I'm using the 
following query:


SELECT Manufacturer0, Model0, Count(Model0) AS 'Count'
FROM dbo.v_GS_COMPUTER_SYSTEM
GROUP BY Manufacturer0,Model0
ORDER BY Model0


I get a list of all Physical HW, but the virtual counts I'm concerned with as 
some VMs will have Windows Client OS installed. How can I modify the above 
query to only get Virtual Machines with Windows Server OS? I have some VMware, 
but predominantly Hyper-V in my environment.


Thanks,

Brian

[mssms] Reporting Issue

[Brian McDonald]

Hello,


I have some users reporting issues accessing reports. We have created a 
Reporting User Only role and have assigned a Reporting User AD group 
permissions to this security role in SCCM. Users are unable to access reports 
via ConfigMgr admin console installed locally on their machines. The error is 
"The DefaultValue expression for the report parameter 'UserTokenSIDs' contains 
and error. The username or password is incorrect." The temp work around has 
been to modify the HKLM\Software\Microsoft\SMS\SMSRP\EnableRBACReporting from 1 
to 0. However, the setting will revert back to 0 after some time.


SQL Reporting Services is using the NT Service\ReportServer account. I came 
across the following and wonder if we need to switch to a domain account?


https://www.anoopcnair.com/2014/02/10/sccm-2012-r2-upgrade-breaks-ssrs-usertokensids-error/

SCCM 2012 R2 Upgrade Breaks SSRS with UserTokenSIDs 
...
www.anoopcnair.com
Follow @anoopmannur. Recently, We had a discussion in Facebook Group for SCCM 
ConfigMgr Professionals about SSRS reporting issue after upgrading from SCCM 
2012 SP1 to R2.

Thank you,

Brian

[mssms] Servers with Office installed

[Brian McDonald]

Hello,


Does anyone have a query to find any servers with MS Office installed?


Thanks,


Brian

Re: [mssms] MW and Server Restart behavior question

[Brian McDonald]

If I set it to Mandatory will this give the users the option to 
download/install from Software Center?


So, if the user applies updates, you're saying the server won't be forced to 
reboot?


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Todd Hemsell <hems...@gmail.com>
Sent: Wednesday, July 6, 2016 2:45:34 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] MW and Server Restart behavior question

set it to mandatory with a date 20 years in the future. Allow them to install 
it before if they want to. Set it to do not reboot.

Problem solved.

I do not know the answer to your question, but I can solve the problem,

On Wed, Jul 6, 2016 at 2:34 PM, Brian McDonald 
<mcdonald...@hotmail.com<mailto:mcdonald...@hotmail.com>> wrote:

Good afternoon,


I have a collection that contains PROD servers which have a weekly MW schedule 
every Sat. I setup a Software Updates Deployment to this collection with the 
following settings:


Type of Deployment: Available


Software Available time: Specific Time: 2AM


Installation Deadline: As soon as possible (this is default)


User Experience - both Deadline behavior and Device Restart behavior is greyed 
out.


My requirement is to be able to have app owners manually download/install 
updates. But, I also need to make sure that SCCM isn't forcing a reboot. A 
two-part question. 1) If Updates are in Software Center and the user 
downloads/installs will SCCM force a reboot? OR 2) will it wait for the next MW 
to reboot? I'm trying to better understand the behavior.


Thanks,


Brian

[mssms] MW and Server Restart behavior question

[Brian McDonald]

Good afternoon,


I have a collection that contains PROD servers which have a weekly MW schedule 
every Sat. I setup a Software Updates Deployment to this collection with the 
following settings:


Type of Deployment: Available


Software Available time: Specific Time: 2AM


Installation Deadline: As soon as possible (this is default)


User Experience - both Deadline behavior and Device Restart behavior is greyed 
out.


My requirement is to be able to have app owners manually download/install 
updates. But, I also need to make sure that SCCM isn't forcing a reboot. A 
two-part question. 1) If Updates are in Software Center and the user 
downloads/installs will SCCM force a reboot? OR 2) will it wait for the next MW 
to reboot? I'm trying to better understand the behavior.


Thanks,


Brian

[mssms] Odd behavior with patch compliance and report data

[Brian McDonald]

Hey all,


I ran into something I have never seen yesterday. I pulled a Status States 
Compliance Report yesterday on a Software Update Deployment and majority of the 
machines were in ESU status. This pretty much should have been the case since 
there was an issue with the deployment, I believe. However, towards the end of 
the day, I ran the same report and it was showing most of the clients were now 
compliant. I thought this was odd since most of the machines, I know for a 
fact, did not receive the deployment package. I checked it again in the 
evening, and it was once again showing the clients in ESU status.


Like I said, never seen this strange behavior before and it had me slightly 
concerned. Anyone ever experience this?


Thank you,


Brian

[mssms] Software Metering

[Brian McDonald]

If I create a new software metering rule, how long does it take before I can 
pull data/reports in SCCM?


Thank you,


Brian

[mssms] Re: Adding last logged on user to query

[Brian McDonald]

Awesome! Thanks!


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of James Massardo <jmassa...@jackhenry.com>
Sent: Wednesday, June 29, 2016 9:01:47 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Adding last logged on user to query

Looks like you need an INNER JOIN for v_R_system.



SELECT arp.DisplayName0 AS [Application Name],
  arp.Version0 AS [App Version],
  GSCS.Name0 AS [Machine Name],
   GSCS.Manufacturer0 AS [Manufacturer Name],
  GSCS.Model0 AS [Machine Model],
  RSYS.User_Name0
FROM   v_Add_Remove_Programs AS arp
INNER JOIN v_GS_COMPUTER_SYSTEM GSCS ON arp.ResourceID = GSCS.ResourceID
INNER JOIN v_R_System RSYS on ARP.ResourceID = RSYS.resourceid
WHERE (arp.DisplayName0 LIKE '%Project%')
AND DisplayName0 NOT Like '%Hotfix%'
AND DisplayName0 NOT LIKE '%Security Update%'
AND DisplayName0 NOT LIKE '%Update for%'
AND DisplayName0 NOT LIKE '%SQL Server%'
AND DisplayName0 NOT LIKE '%Service Pack%'
AND DisplayName0 NOT LIKE '%CleanProject%'
AND DisplayName0 NOT LIKE '%VisualStudio%'
AND DisplayName0 NOT LIKE '%Project MUI%'
AND DisplayName0 NOT LIKE '%Project and Item%'
AND DisplayName0 NOT LIKE '%Cloud Deployment%'
AND DisplayName0 NOT LIKE '%EasyMP%'
AND DisplayName0 NOT LIKE '%Visual Studio%'
AND DisplayName0 NOT LIKE '%PrintProjects%'


Thanks,
James Massardo

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian McDonald
Sent: Wednesday, June 29, 2016 8:24 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Adding last logged on user to query

The e-mail below is from an external source.  Please do not open attachments or 
click links from an unknown or suspicious origin.



Hello everyone,



I need some help adding the last logged on user to the following query. Can 
someone offer a little assist with adding this to the below? I've tried a few 
things but can't seem to get it to work.



Thank you,



Brian


SELECT arp.DisplayName0 AS [Application Name], arp.Version0 AS [App 
Version], v_GS_COMPUTER_SYSTEM.Name0 AS [Machine Name],
  v_GS_COMPUTER_SYSTEM.Manufacturer0 AS [Manufacturer 
Name], v_GS_COMPUTER_SYSTEM.Model0 AS [Machine Model]
FROM v_Add_Remove_Programs AS arp INNER JOIN
  v_GS_COMPUTER_SYSTEM ON arp.ResourceID = 
v_GS_COMPUTER_SYSTEM.ResourceID
WHERE (arp.DisplayName0 LIKE '%Project%')
AND DisplayName0 NOT Like '%Hotfix%'
AND DisplayName0 NOT LIKE '%Security Update%'
AND DisplayName0 NOT LIKE '%Update for%'
AND DisplayName0 NOT LIKE '%SQL Server%'
AND DisplayName0 NOT LIKE '%Service Pack%'
AND DisplayName0 NOT LIKE '%CleanProject%'
AND DisplayName0 NOT LIKE '%VisualStudio%'
AND DisplayName0 NOT LIKE '%Project MUI%'
AND DisplayName0 NOT LIKE '%Project and Item%'
AND DisplayName0 NOT LIKE '%Cloud Deployment%'
AND DisplayName0 NOT LIKE '%EasyMP%'
AND DisplayName0 NOT LIKE '%Visual Studio%'
AND DisplayName0 NOT LIKE '%PrintProjects%'



NOTICE: This electronic mail message and any files transmitted with it are 
intended
exclusively for the individual or entity to which it is addressed. The message,
together with any attachment, may contain confidential and/or privileged 
information.
Any unauthorized review, use, printing, saving, copying, disclosure or 
distribution
is strictly prohibited. If you have received this message in error, please
immediately advise the sender by reply email and delete all copies.

[mssms] Adding last logged on user to query

[Brian McDonald]

Hello everyone,


I need some help adding the last logged on user to the following query. Can 
someone offer a little assist with adding this to the below? I've tried a few 
things but can't seem to get it to work.


Thank you,


Brian

SELECT arp.DisplayName0 AS [Application Name], arp.Version0 AS [App 
Version], v_GS_COMPUTER_SYSTEM.Name0 AS [Machine Name],
  v_GS_COMPUTER_SYSTEM.Manufacturer0 AS [Manufacturer 
Name], v_GS_COMPUTER_SYSTEM.Model0 AS [Machine Model]
FROM v_Add_Remove_Programs AS arp INNER JOIN
  v_GS_COMPUTER_SYSTEM ON arp.ResourceID = 
v_GS_COMPUTER_SYSTEM.ResourceID

WHERE (arp.DisplayName0 LIKE '%Project%')

AND DisplayName0 NOT Like '%Hotfix%'

AND DisplayName0 NOT LIKE '%Security Update%'

AND DisplayName0 NOT LIKE '%Update for%'

AND DisplayName0 NOT LIKE '%SQL Server%'

AND DisplayName0 NOT LIKE '%Service Pack%'

AND DisplayName0 NOT LIKE '%CleanProject%'

AND DisplayName0 NOT LIKE '%VisualStudio%'

AND DisplayName0 NOT LIKE '%Project MUI%'

AND DisplayName0 NOT LIKE '%Project and Item%'

AND DisplayName0 NOT LIKE '%Cloud Deployment%'

AND DisplayName0 NOT LIKE '%EasyMP%'

AND DisplayName0 NOT LIKE '%Visual Studio%'

AND DisplayName0 NOT LIKE '%PrintProjects%'

[mssms] All SW Query Help

[Brian McDonald]

Hello all,


I'm trying to gather a report of all Software in Add or Remove Programs from 
SCCM. I need to identify which servers or workstations have the software 
installed. I understand this is going to generate numerous rows per computer, 
but this is what has been asked by management. Note, we are closer to 
purchasing 3rd party software to assist with the normalization of this data. 
But, for now, I have to work with what I have.


Here is the baseline query I am using:


Declare @CollID char(8)
Set @CollID = 'SMS1'
SELECT DisplayName0, Count(*) AS 'Count', Publisher0, Version0, @CollID as 
CollectionID
FROM v_Add_Remove_Programs arp
JOIN v_FullCollectionMembership fcm on arp.ResourceID=fcm.ResourceID
WHERE fcm.CollectionID = @CollID
GROUP BY DisplayName0, Publisher0, Version0
ORDER BY Publisher0, Version0


Can someone please tell me how I can modify the above query to include the 
servers or workstations that have the software installed?


Thanks,

Brian

[mssms] Query Help

[Brian McDonald]

Hello,


Management has provided me a list of applications they're researching and would 
like to know which devices have these applications have. Is there a SQL query I 
could use as a template and re-use it by modifying the DisplayName?


For example, one of the apps in question is 'AOL Toolbar'.


Can someone provide an example of a query I could use for this task? And make 
modifications to the query based on the name?


Thanks,

Brian

[mssms] Re: Stopping Windows Services before Patching solution

[Brian McDonald]

In this case there is an application server that uses SQL. There are services 
that need shut-down prior to the server rebooting or it causes issues in our 
environment.


From: listsad...@lists.myitforum.com <listsad...@lists.myitforum.com> on behalf 
of Lindenfeld, Ivan <ivan.lindenf...@fnf.com>
Sent: Monday, May 23, 2016 10:05:17 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Stopping Windows Services before Patching solution

I'm not sure I understand what you are asking.  Why do you need to shutdown 
Windows services prior to patching?

Ivan L

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian McDonald
Sent: Monday, May 23, 2016 10:40 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Stopping Windows Services before Patching solution


Hello,

Does anyone have an automated method for handling the shutdown of windows 
services prior to applying patches?



I'm looking for a way to shut down the services, then apply the patches. I 
could write a script to shutdown the services, but not sure how to setup the 
patch deployment to know when the services are shut down. Has anyone dealt with 
anything like this before?



Brian M.


NOTICE: The information contained in this message is proprietary and/or 
confidential and may be privileged. If you are not the intended recipient of 
this communication, you are hereby notified to: (i) delete the message and all 
copies; (ii) do not disclose, distribute or use the message in any manner; and 
(iii) notify the sender immediately.

[mssms] Stopping Windows Services before Patching solution

[Brian McDonald]

Hello,

Does anyone have an automated method for handling the shutdown of windows 
services prior to applying patches?


I'm looking for a way to shut down the services, then apply the patches. I 
could write a script to shutdown the services, but not sure how to setup the 
patch deployment to know when the services are shut down. Has anyone dealt with 
anything like this before?


Brian M.

Re: [mssms] SPN issue

[Brian McDonald]

The setspn on the sql services doesn't work. If I create a new service account 
is it as easy as just swapping out the SQL service and the SQL Server agent 
with the new account well I have issues restarting the service after I change 
the account? What's the best way to tackle this?

Brian

Sent from my iPhone

 On Mar 29, 2015, at 4:23 PM, Thomas Gonzalez tgonza...@tins-swtx.com wrote:
 
 Yes there would be...have you done a setspn on the SQL services? 
 
 Maybe there's one that's still using it...
 
 And if your account is using this for SQL, you should have seen the son 
 attribute.
 
 
 
 Thomas Gonzalez
 From: Brian McDonald
 Sent: ‎3/‎29/‎2015 3:17 PM
 To: mssms@lists.myitforum.com
 Subject: Re: [mssms] SPN issue
 
 It's currently running sql services in a production SCCM environment. Would 
 there be any repercussions to this?
 
 Sent from my iPhone
 
 On Mar 29, 2015, at 3:12 PM, Thomas Gonzalez tgonza...@tins-swtx.com wrote:
 
 If that service account is only for sql and not in use, I would delete it, 
 let replication work and then recreate it….
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Brian McDonald
 Sent: Sunday, March 29, 2015 2:41 PM
 To: mssms@lists.myitforum.com
 Subject: Re: [mssms] SPN issue
  
  
 Sorry, that was a typo. I entered the command as you have indicated below.
  
 ADSI Edit shows the same exact output as provided with the ldife query for 
 the computer account.
  
 servicePrincipalName: CmRcService/CMSRV01
 servicePrincipalName: CmRcService/CMSRV01.COMPANY.local
 servicePrincipalName: TERMSRV/CMSRV01
 servicePrincipalName: TERMSRV/CMSRV01.COMPANY.local
 servicePrincipalName: WSMAN/CMSRV01
 servicePrincipalName: WSMAN/CMSRV01.COMPANY.local
 servicePrincipalName: RestrictedKrbHost/CMSRV01
 servicePrincipalName: HOST/CMSRV01
 servicePrincipalName: RestrictedKrbHost/CMSRV01.COMPANY.local
 servicePrincipalName: HOST/CMSRV01.COMPANY.local
  
 However, the service account is blank with the servicePrincipalName 
 attribute. Is there a way to fix this via ADSIEdit? Still not sure why this 
 would say ‘Duplicate SPN found…”
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Brian McDonald
 Sent: Sunday, March 29, 2015 2:11 PM
 To: mssms@lists.myitforum.com
 Subject: Re: [mssms] SPN issue
  
 Thanks sir, here is the output:
 dn: CN=CMSRV01,OU=Servers,DC=COMPANY,DC=local
 changetype: add
 servicePrincipalName: CmRcService/CMSRV01
 servicePrincipalName: CmRcService/CMSRV01.COMPANY.local
 servicePrincipalName: TERMSRV/CMSRV01
 servicePrincipalName: TERMSRV/CMSRV01.COMPANY.local
 servicePrincipalName: WSMAN/CMSRV01
 servicePrincipalName: WSMAN/CMSRV01.COMPANY.local
 servicePrincipalName: RestrictedKrbHost/CMSRV01
 servicePrincipalName: HOST/CMSRV01
 servicePrincipalName: RestrictedKrbHost/CMSRV01.COMPANY.local
 servicePrincipalName: HOST/CMSRV01.COMPANY.local
  
  
 
 From: Thomas Gonzalez tgonza...@tins-swtx.com
 Date: March 29, 2015 at 12:48:06 PM CDT
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] SPN issue
 Reply-To: mssms@lists.myitforum.com
 
 Also try this ldifde -f check_SPN.txt -t 3268 -d  -l servicePrincipalName 
 -r (servicePrincipalName=HOST/mycomputer*) -p subtree
 
 Thomas Gonzalez
 From: Brian McDonald
 Sent: ‎3/‎29/‎2015 12:17 PM
 To: mssms@lists.myitforum.com
 Subject: [mssms] SPN issue
 
 
 
 
 
 
 
 
 
 Hello all,
 
 I'm experiencing an issue with registering SPNs for SQL on my CM server. The 
 commands I'm running:
 
 Setspn -a MSSQLSvc\Server:1433 Domain\cmsql
 
 Setspn -a MSSQLSvc\Server.fqdn:1433 Domain\cmsql
 
 When running the above commands I receive: Duplicate SPN found, aborting 
 operation! I noticed though it shows checking domain...and it has the cmra 
 account, which is my reporting services account.
 
 When I attempt to run setspn -l domain\cmsql it doesn't show any
 
 [The entire original message is not included.]
 

[mssms] SPN issue

[Brian McDonald]

 
 
 Hello all,
 
 I'm experiencing an issue with registering SPNs for SQL on my CM server. The 
 commands I'm running:
 
 Setspn -a MSSQLSvc\Server:1433 Domain\cmsql
 
 Setspn -a MSSQLSvc\Server.fqdn:1433 Domain\cmsql
 
 When running the above commands I receive: Duplicate SPN found, aborting 
 operation! I noticed though it shows checking domain...and it has the cmra 
 account, which is my reporting services account.
 
 When I attempt to run setspn -l domain\cmsql it doesn't show anything when it 
 searches. 
 
 If I run setspn -x it tells me found 0 group of duplicate SPNs.
 
 Does anyone have any ideas what might be the issue here?
 
 I'm trying to implement a new management point and it's telling me that the 
 SPNs have not been registered.
 
 Thanks!
 
 Brian
 

Sent from my iPhone

Re: [mssms] SPN issue

[Brian McDonald]

 Sorry, that was a typo. I entered the command as you have indicated below.
  
 ADSI Edit shows the same exact output as provided with the ldife query for 
 the computer account.
  
 servicePrincipalName: CmRcService/CMSRV01
 servicePrincipalName: CmRcService/CMSRV01.COMPANY.local
 servicePrincipalName: TERMSRV/CMSRV01
 servicePrincipalName: TERMSRV/CMSRV01.COMPANY.local
 servicePrincipalName: WSMAN/CMSRV01
 servicePrincipalName: WSMAN/CMSRV01.COMPANY.local
 servicePrincipalName: RestrictedKrbHost/CMSRV01
 servicePrincipalName: HOST/CMSRV01
 servicePrincipalName: RestrictedKrbHost/CMSRV01.COMPANY.local
 servicePrincipalName: HOST/CMSRV01.COMPANY.local
  
 However, the service account is blank with the servicePrincipalName 
 attribute. Is there a way to fix this via ADSIEdit? Still not sure why this 
 would say ‘Duplicate SPN found…”
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Brian McDonald
 Sent: Sunday, March 29, 2015 2:11 PM
 To: mssms@lists.myitforum.com
 Subject: Re: [mssms] SPN issue
  
 Thanks sir, here is the output:
 dn: CN=CMSRV01,OU=Servers,DC=COMPANY,DC=local
 changetype: add
 servicePrincipalName: CmRcService/CMSRV01
 servicePrincipalName: CmRcService/CMSRV01.COMPANY.local
 servicePrincipalName: TERMSRV/CMSRV01
 servicePrincipalName: TERMSRV/CMSRV01.COMPANY.local
 servicePrincipalName: WSMAN/CMSRV01
 servicePrincipalName: WSMAN/CMSRV01.COMPANY.local
 servicePrincipalName: RestrictedKrbHost/CMSRV01
 servicePrincipalName: HOST/CMSRV01
 servicePrincipalName: RestrictedKrbHost/CMSRV01.COMPANY.local
 servicePrincipalName: HOST/CMSRV01.COMPANY.local
  
  
 
 From: Thomas Gonzalez tgonza...@tins-swtx.com
 Date: March 29, 2015 at 12:48:06 PM CDT
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] SPN issue
 Reply-To: mssms@lists.myitforum.com
 
 Also try this ldifde -f check_SPN.txt -t 3268 -d  -l servicePrincipalName 
 -r (servicePrincipalName=HOST/mycomputer*) -p subtree
 
 Thomas Gonzalez
 From: Brian McDonald
 Sent: ‎3/‎29/‎2015 12:17 PM
 To: mssms@lists.myitforum.com
 Subject: [mssms] SPN issue
 
 
 
 
 
 
 
 Hello all,
 
 I'm experiencing an issue with registering SPNs for SQL on my CM server. The 
 commands I'm running:
 
 Setspn -a MSSQLSvc\Server:1433 Domain\cmsql
 
 Setspn -a MSSQLSvc\Server.fqdn:1433 Domain\cmsql
 
 When running the above commands I receive: Duplicate SPN found, aborting 
 operation! I noticed though it shows checking domain...and it has the cmra 
 account, which is my reporting services account.
 
 When I attempt to run setspn -l domain\cmsql it doesn't show anything when it 
 searches. 
 
 If I run setspn -x it tells me found 0 group of duplicate SPNs.
 
 Does anyone have any ideas what might be the issue here?
 
 I'm trying to implement a new management point and it's telling me that the 
 SPNs have not been registered.
 
 Thanks!
 
 Brian
 
 
 
 
 Sent from my iPhone
 
  
  
 imaged3b81e.JPG  
 Rich Coulter
 
 Senior System Administrator
 
 Brownells, Inc.
 
 200 S. Front Street, Montezuma, IA 50171
 
 Email: rich.coul...@brownells.com
 
 Phone: 641-623-5401
 
 Direct: 641-623-8018
 
 Cell:641-204-1980
 
 
 Join us on Facebook and Twitter
 
 image10d78c.JPGimage42352a.JPG
 
 imagea7a99e.JPGimage2b3f3e.JPG
 
  
 

Re: [mssms] SPN issue

[Brian McDonald]

It's currently running sql services in a production SCCM environment. Would 
there be any repercussions to this?

Sent from my iPhone

 On Mar 29, 2015, at 3:12 PM, Thomas Gonzalez tgonza...@tins-swtx.com wrote:
 
 If that service account is only for sql and not in use, I would delete it, 
 let replication work and then recreate it….
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Brian McDonald
 Sent: Sunday, March 29, 2015 2:41 PM
 To: mssms@lists.myitforum.com
 Subject: Re: [mssms] SPN issue
  
  
 Sorry, that was a typo. I entered the command as you have indicated below.
  
 ADSI Edit shows the same exact output as provided with the ldife query for 
 the computer account.
  
 servicePrincipalName: CmRcService/CMSRV01
 servicePrincipalName: CmRcService/CMSRV01.COMPANY.local
 servicePrincipalName: TERMSRV/CMSRV01
 servicePrincipalName: TERMSRV/CMSRV01.COMPANY.local
 servicePrincipalName: WSMAN/CMSRV01
 servicePrincipalName: WSMAN/CMSRV01.COMPANY.local
 servicePrincipalName: RestrictedKrbHost/CMSRV01
 servicePrincipalName: HOST/CMSRV01
 servicePrincipalName: RestrictedKrbHost/CMSRV01.COMPANY.local
 servicePrincipalName: HOST/CMSRV01.COMPANY.local
  
 However, the service account is blank with the servicePrincipalName 
 attribute. Is there a way to fix this via ADSIEdit? Still not sure why this 
 would say ‘Duplicate SPN found…”
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Brian McDonald
 Sent: Sunday, March 29, 2015 2:11 PM
 To: mssms@lists.myitforum.com
 Subject: Re: [mssms] SPN issue
  
 Thanks sir, here is the output:
 dn: CN=CMSRV01,OU=Servers,DC=COMPANY,DC=local
 changetype: add
 servicePrincipalName: CmRcService/CMSRV01
 servicePrincipalName: CmRcService/CMSRV01.COMPANY.local
 servicePrincipalName: TERMSRV/CMSRV01
 servicePrincipalName: TERMSRV/CMSRV01.COMPANY.local
 servicePrincipalName: WSMAN/CMSRV01
 servicePrincipalName: WSMAN/CMSRV01.COMPANY.local
 servicePrincipalName: RestrictedKrbHost/CMSRV01
 servicePrincipalName: HOST/CMSRV01
 servicePrincipalName: RestrictedKrbHost/CMSRV01.COMPANY.local
 servicePrincipalName: HOST/CMSRV01.COMPANY.local
  
  
 
 From: Thomas Gonzalez tgonza...@tins-swtx.com
 Date: March 29, 2015 at 12:48:06 PM CDT
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] SPN issue
 Reply-To: mssms@lists.myitforum.com
 
 Also try this ldifde -f check_SPN.txt -t 3268 -d  -l servicePrincipalName 
 -r (servicePrincipalName=HOST/mycomputer*) -p subtree
 
 Thomas Gonzalez
 From: Brian McDonald
 Sent: ‎3/‎29/‎2015 12:17 PM
 To: mssms@lists.myitforum.com
 Subject: [mssms] SPN issue
 
 
 
 
 
 
 
 
 
 Hello all,
 
 I'm experiencing an issue with registering SPNs for SQL on my CM server. The 
 commands I'm running:
 
 Setspn -a MSSQLSvc\Server:1433 Domain\cmsql
 
 Setspn -a MSSQLSvc\Server.fqdn:1433 Domain\cmsql
 
 When running the above commands I receive: Duplicate SPN found, aborting 
 operation! I noticed though it shows checking domain...and it has the cmra 
 account, which is my reporting services account.
 
 When I attempt to run setspn -l domain\cmsql it doesn't show anything when it 
 searches. 
 
 If I run setspn -x it tells me found 0 group of duplicate SPNs.
 
 Does anyone have any ideas what might be the issue here?
 
 I'm trying to implement a new management point and it's telling me that the 
 SPNs have not been registered.
 
 Thanks!
 
 Brian
 
 
 
 
 
 Sent from my iPhone
 
  
  
 imaged3b81e.JPG  
 Rich Coulter
 
 Senior System Administrator
 
 Brownells, Inc.
 
 200 S. Front Street, Montezuma, IA 50171
 
 Email: rich.coul...@brownells.com
 
 Phone: 641-623-5401
 
 Direct: 641-623-8018
 
 Cell:641-204-1980
 
 Join us on Facebook and Twitter
 
 image10d78c.JPGimage42352a.JPG
 
 imagea7a99e.JPGimage2b3f3e.JPG
 
  
 
  
 

Re: [mssms] SPN issue

[Brian McDonald]

Thanks sir, here is the output:
 dn: CN=CMSRV01,OU=Servers,DC=COMPANY,DC=local
 changetype: add
 servicePrincipalName: CmRcService/CMSRV01
 servicePrincipalName: CmRcService/CMSRV01.COMPANY.local
 servicePrincipalName: TERMSRV/CMSRV01
 servicePrincipalName: TERMSRV/CMSRV01.COMPANY.local
 servicePrincipalName: WSMAN/CMSRV01
 servicePrincipalName: WSMAN/CMSRV01.COMPANY.local
 servicePrincipalName: RestrictedKrbHost/CMSRV01
 servicePrincipalName: HOST/CMSRV01
 servicePrincipalName: RestrictedKrbHost/CMSRV01.COMPANY.local
 servicePrincipalName: HOST/CMSRV01.COMPANY.local
 
 
 
 From: Thomas Gonzalez tgonza...@tins-swtx.com
 Date: March 29, 2015 at 12:48:06 PM CDT
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] SPN issue
 Reply-To: mssms@lists.myitforum.com
 
 Also try this ldifde -f check_SPN.txt -t 3268 -d  -l servicePrincipalName 
 -r (servicePrincipalName=HOST/mycomputer*) -p subtree
 
 Thomas Gonzalez
 From: Brian McDonald
 Sent: ‎3/‎29/‎2015 12:17 PM
 To: mssms@lists.myitforum.com
 Subject: [mssms] SPN issue
 
 
 
 Hello all,
 
 I'm experiencing an issue with registering SPNs for SQL on my CM server. The 
 commands I'm running:
 
 Setspn -a MSSQLSvc\Server:1433 Domain\cmsql
 
 Setspn -a MSSQLSvc\Server.fqdn:1433 Domain\cmsql
 
 When running the above commands I receive: Duplicate SPN found, aborting 
 operation! I noticed though it shows checking domain...and it has the cmra 
 account, which is my reporting services account.
 
 When I attempt to run setspn -l domain\cmsql it doesn't show anything when it 
 searches. 
 
 If I run setspn -x it tells me found 0 group of duplicate SPNs.
 
 Does anyone have any ideas what might be the issue here?
 
 I'm trying to implement a new management point and it's telling me that the 
 SPNs have not been registered.
 
 Thanks!
 
 Brian
 
 
 Sent from my iPhone
 

Re: [mssms] HTTP and HTTPS configured site systems

[Brian McDonald]

Trying this again. Anyone?

Thanks!

Brian

Sent from my iPhone

 On Mar 23, 2015, at 7:59 AM, Brian McDonald mcdonald...@hotmail.com wrote:
 
 
 Hey all,
 
 I have a need to deploy an additional sync system in my environment to 
 support needs HTTPS support (MP/DP/SUP) for an untrusted remote forest. 
 
 This site system will reside in my internal domain along with my primary 
 site and other HTTP configured site systems. With this configuration cause 
 any issues for Intranet clients?
 
 Thanks!
 
 Brian
 
 Sent from my iPhone
 
 
 
 

[mssms] HTTP and HTTPS configured site systems

[Brian McDonald]

 
 Hey all,
 
 I have a need to deploy an additional sync system in my environment to 
 support needs HTTPS support (MP/DP/SUP) for an untrusted remote forest. 
 
 This site system will reside in my internal domain along with my primary site 
 and other HTTP configured site systems. With this configuration cause any 
 issues for Intranet clients?
 
 Thanks!
 
 Brian
 
 Sent from my iPhone

[mssms] HTTP and HTTPS configured site systems

[Brian McDonald]

Hey all,

I have a need to deploy an additional sync system in my environment to support 
needs HTTPS support (MP/DP/SUP) for an untrusted remote forest. 

This site system will reside in my internal domain along with my primary site 
and other HTTP configured site systems. With this configuration cause any 
issues for Intranet clients?

Thanks!

Brian

Sent from my iPhone

[mssms] Sccm patching in PCI?

[Brian McDonald]

Anyone using SCCM to patch servers in a PCI environment? If so, I'm curious 
what your infrastructure looks like to support this?

Thanks,

Brian

Re: [mssms] Sccm patching in PCI?

[Brian McDonald]

Open ports into PCI or out from?

Brian

Sent from my iPhone

 On Mar 19, 2015, at 1:19 PM, Daniel Ratliff dratl...@humana.com wrote:
 
 Not servers but workstations yes. Just opened 80 and 443 and patches are good.
 
 Daniel Ratliff
 
 -Original Message-
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Brian McDonald
 Sent: Thursday, March 19, 2015 2:14 PM
 To: mssms@lists.myitforum.com
 Subject: [mssms] Sccm patching in PCI?
 
 Anyone using SCCM to patch servers in a PCI environment? If so, I'm curious 
 what your infrastructure looks like to support this?
 
 Thanks,
 
 Brian
 
 
 
 
 
 
 The information transmitted is intended only for the person or entity to 
 which it is addressed
 and may contain CONFIDENTIAL material.  If you receive this 
 material/information in error,
 please contact the sender and delete or destroy the material/information.
 
 
 
 

Re: [mssms] Sccm patching in PCI?

[Brian McDonald]

Wait so the only restriction is the firewalls on the boxes?!

Sent from my iPhone

 On Mar 19, 2015, at 1:52 PM, Daniel Ratliff dratl...@humana.com wrote:
 
 From client out to server so they can download over HTTP/HTTPS. 
 
 Daniel Ratliff
 Technology Architect | Client Innovation Technologies
 
 Humana
 123 E. Main St. | Louisville, KY, 40202
 
 T 502.476.9976
 dratl...@humana.com
 
 
 -Original Message-
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Brian McDonald
 Sent: Thursday, March 19, 2015 2:47 PM
 To: mssms@lists.myitforum.com
 Subject: Re: [mssms] Sccm patching in PCI?
 
 Open ports into PCI or out from?
 
 Brian
 
 Sent from my iPhone
 
 On Mar 19, 2015, at 1:19 PM, Daniel Ratliff dratl...@humana.com wrote:
 
 Not servers but workstations yes. Just opened 80 and 443 and patches are 
 good.
 
 Daniel Ratliff
 
 -Original Message-
 From: listsad...@lists.myitforum.com 
 [mailto:listsad...@lists.myitforum.com] On Behalf Of Brian McDonald
 Sent: Thursday, March 19, 2015 2:14 PM
 To: mssms@lists.myitforum.com
 Subject: [mssms] Sccm patching in PCI?
 
 Anyone using SCCM to patch servers in a PCI environment? If so, I'm curious 
 what your infrastructure looks like to support this?
 
 Thanks,
 
 Brian
 
 
 
 
 
 
 The information transmitted is intended only for the person or entity 
 to which it is addressed and may contain CONFIDENTIAL material.  If 
 you receive this material/information in error, please contact the sender 
 and delete or destroy the material/information.
 
 
 
 
 The information transmitted is intended only for the person or entity to 
 which it is addressed
 and may contain CONFIDENTIAL material.  If you receive this 
 material/information in error,
 please contact the sender and delete or destroy the material/information.
 
 
 
 

[mssms] Permissions to SSRS reports

[Brian McDonald]

Hello,

I created a custom SSRS report and can only seem to access the report when I'm 
logged into my site server. If I'm on the network using my standard account, I 
can only access canned reports. Does anyone know how to properly assigned 
permissions for SSRS reports? Assigning them through ConfigMgr doesn't do the 
trick.

Thanks!

Brian

Re: [mssms] Servers with client installed

[Brian McDonald]

Just Server name and client version. Thanks!

Brian

Sent from my iPhone

 On Feb 17, 2015, at 3:40 PM, Murray, Mike mmur...@csuchico.edu wrote:
 
 What information do you need, just a list of the system names, or more detail?
 
 Mike
 
 
 -Original Message-
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Brian McDonald
 Sent: Tuesday, February 17, 2015 1:35 PM
 To: mssms@lists.myitforum.com
 Subject: [mssms] Servers with client installed
 
 Can anyone tell me how to create a report for all servers with the CM12 R2 
 clients installed?
 
 I do have a collection that include servers that have the R2 client installed 
 if this helps.
 
 Thanks!
 
 Brian
 
 Sent from my iPhone
 
 
 
 
 
 
 

[mssms] Servers with client installed

[Brian McDonald]

Can anyone tell me how to create a report for all servers with the CM12 R2 
clients installed?

I do have a collection that include servers that have the R2 client installed 
if this helps.

Thanks!

Brian

Sent from my iPhone

[mssms] WID or Database for WSUS?

[Brian McDonald]

What's the difference between WID and DB when configuring WSUS for SCCM? Does 
it matter which one is used?
Thanks,
Brian 

[mssms] WSUS Synch Issue

[Brian McDonald]

Hey all,
I am trying to get WSUS to synch and it continues to fail. Here is what the 
wsyncmgr.log file says:
Failed to sync update 87e13ecb-c669-43be-9e2a-01e567285031. Error: The 
Microsoft Software License Terms have not been completely downloaded 
and~~cannot be accepted. Source: 
Microsoft.UpdateServices.Internal.BaseApi.LicenseAgreement.GetById
Sync failed: Failed to sync some of the updates. Source: 
Microsoft.SystemsManagementServer.SoftwareUpdatesManagement.WsusSyncAction.WSyncAction.SyncUpdates
I've researched this error and came across the following KB: 
http://support.microsoft.com/kb/922330
However, I do not see the ExecuteSQL.exe or OSQL.exe files in the directories 
mentioned.
Has anyone seen this before? Not finding much in my research online.
Thanks,
Brian 

Re: [mssms] OT: Home Depot credit card hack

[Brian McDonald]

Anyone have any experience with this? Thanks! Brian

Sent from my iPhone

 On Sep 24, 2014, at 5:44 PM, Brian McDonald mcdonald...@hotmail.com wrote:
 
 To all who has seen this. Jus curious, could you summarize the protection or 
 steps you have taken to prevent such breaches and avoid the Target and Home 
 Depot examples? The article states Symantec Endpoint was being used. Anyone 
 know if the similar feature is available in SCEP? - Brian
 
 http://www.businessweek.com/articles/2014-09-18/home-depot-hacked-wide-open
 
 Sent from my iPhone
 

Re: [mssms] OT: Home Depot credit card hack

[Brian McDonald]

Will disabling the behavior monitoring take care of this?

Brian

Sent from my iPhone

 On Sep 25, 2014, at 9:04 AM, Nash Pherson na...@nowmicro.com wrote:
 
 Yeah, the article talking about Symantec seems really odd.  I think someone 
 is pointing to one line of a very large security recommendation document. 
 Without the full context, it seems like a typical FUD article with a sexy 
 headline.
  
 Regarding Brian’s original question, the article is saying the SEP Network 
 Threat Protection feature was not enabled.  It looks like the organization 
 wasn’t using SEP’s Firewall, which means you can’t use SEP’s NTP either.
  
 For SCEP, see the Network Inspection System as a similar feature. I’ve found 
 SCEP’s NIS to be very effective while also not giving the cumbersome number 
 of false positives seen in SEP.
  
 This article talks about how they extended behavior and network monitoring 
 with better real-time network inspection for zero-day exploits:
 http://blogs.technet.com/b/configmgrteam/archive/2013/06/24/enhancements-to-behavior-monitoring-and-network-inspection-system-in-the-microsoft-anti-malware-platform.aspx
  
 I hope that helps,
  
  
  
 Nash
  
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Tim Evans
 Sent: Thursday, September 25, 2014 8:39 AM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] OT: Home Depot credit card hack
  
 According to this:
 http://www.dailytech.com/Appalling+Negligence+DecadeOld+Windows+XPe+Holes+Led+to+Home+Depot+Hack/article36517.htm
 the solution was simply to upgrade to a more modern OS.
  
 …Tim
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Brian McDonald
 Sent: Thursday, September 25, 2014 5:55 AM
 To: mssms@lists.myitforum.com
 Subject: Re: [mssms] OT: Home Depot credit card hack
  
 Anyone have any experience with this? Thanks! Brian
 
 Sent from my iPhone
 
 On Sep 24, 2014, at 5:44 PM, Brian McDonald mcdonald...@hotmail.com wrote:
 
 To all who has seen this. Jus curious, could you summarize the protection or 
 steps you have taken to prevent such breaches and avoid the Target and Home 
 Depot examples? The article states Symantec Endpoint was being used. Anyone 
 know if the similar feature is available in SCEP? - Brian
  
 http://www.businessweek.com/articles/2014-09-18/home-depot-hacked-wide-open
  
 
 Sent from my iPhone
  
  
  
 

[mssms] OT: Home Depot credit card hack

[Brian McDonald]

To all who has seen this. Jus curious, could you summarize the protection or 
steps you have taken to prevent such breaches and avoid the Target and Home 
Depot examples? The article states Symantec Endpoint was being used. Anyone 
know if the similar feature is available in SCEP? - Brian

 http://www.businessweek.com/articles/2014-09-18/home-depot-hacked-wide-open
 

Sent from my iPhone

[mssms] Java collections

[Brian McDonald]

Hey everyone,

I'm looking for a collection query for all Java versions and one for clients 
w/o java installed. Can anyone share some samples with me?

Thanks,

Brian
  

Re: [mssms] XP-Win7 migrations using MDT 2013

[Brian McDonald]

This is for XP-Win8.1 

What about to Win7?

Brian

Sent from my iPhone

 On Aug 27, 2014, at 10:50 AM, Jimmy Martin jimmy.mar...@bmhcc.org wrote:
 
 Yes, you have to add some stuff from the adk for win8
 
 http://blogs.technet.com/b/mniehaus/archive/2014/01/09/migrating-from-windows-xp-to-windows-8-1-using-mdt-2013.aspx
 
 
 
 Jimmy Martin
 (901) 227-8209
 
 
 -Original Message-
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Brian McDonald
 Sent: Wednesday, August 27, 2014 9:45 AM
 To: mssms@lists.myitforum.com
 Subject: [mssms] XP-Win7 migrations using MDT 2013
 
 Has anyone been successful at migrating ask the clients to Windows 7 using 
 MDT 2013? Is this possible?
 
 Thanks,
 
 Brian
 
 Sent from my iPhone
 
 
 
 
 
 
 This message and any files transmitted with it may contain legally 
 privileged, confidential, or proprietary information. If you are not the 
 intended recipient of this message, you are not permitted to use, copy, or 
 forward it, in whole or in part without the express consent of the sender. 
 Please notify the sender of the error by reply email, disregard the foregoing 
 messages, and delete it immediately.
 
 P Please consider the environment before printing this email...
 
 

Re: [mssms] XP-Win7 migrations using MDT 2013

[Brian McDonald]

Hmmm... Ever run across this error?

  
 --  Applying bootable Windows PE image --
 LTI applying Windows PE
 Taking ownership of C:\bootmgr
 About to run command: takeown.exe /F C:\bootmgr
 ZTI ERROR - Unhandled error returned by LTIApply: The system cannot find the 
 file specified. (-2147024894  0x80070002)
 Command completed, return code = -2147467259
 Litetouch deployment failed, Return Code = -2147467259  0x80004005
 


It appears that the takeown command doesn’t exist in XP.  I can’t find anything 
on what to do with this takeown situation.

Brian

Sent from my iPhone

 On Aug 27, 2014, at 11:39 AM, Jimmy Martin jimmy.mar...@bmhcc.org wrote:
 
 Same doc...  the thing is the usmt that is a part of the newer tools is 
 incompatible with xp...  using the older adk files in the way Michael 
 explains makes it possible
 
 -Original Message-
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Brian McDonald
 Sent: Wednesday, August 27, 2014 11:10 AM
 To: mssms@lists.myitforum.com
 Subject: Re: [mssms] XP-Win7 migrations using MDT 2013
 
 This is for XP-Win8.1
 
 What about to Win7?
 
 Brian
 
 Sent from my iPhone
 
 On Aug 27, 2014, at 10:50 AM, Jimmy Martin jimmy.mar...@bmhcc.org wrote:
 
 Yes, you have to add some stuff from the adk for win8
 
 http://blogs.technet.com/b/mniehaus/archive/2014/01/09/migrating-from-windows-xp-to-windows-8-1-using-mdt-2013.aspx
 
 
 
 Jimmy Martin
 (901) 227-8209
 
 
 -Original Message-
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Brian McDonald
 Sent: Wednesday, August 27, 2014 9:45 AM
 To: mssms@lists.myitforum.com
 Subject: [mssms] XP-Win7 migrations using MDT 2013
 
 Has anyone been successful at migrating ask the clients to Windows 7 using 
 MDT 2013? Is this possible?
 
 Thanks,
 
 Brian
 
 Sent from my iPhone
 
 
 
 
 
 
 This message and any files transmitted with it may contain legally 
 privileged, confidential, or proprietary information. If you are not the 
 intended recipient of this message, you are not permitted to use, copy, or 
 forward it, in whole or in part without the express consent of the sender. 
 Please notify the sender of the error by reply email, disregard the 
 foregoing messages, and delete it immediately.
 
 P Please consider the environment before printing this email...
 
 
 
 
 
 
 
 This message and any files transmitted with it may contain legally 
 privileged, confidential, or proprietary information. If you are not the 
 intended recipient of this message, you are not permitted to use, copy, or 
 forward it, in whole or in part without the express consent of the sender. 
 Please notify the sender of the error by reply email, disregard the foregoing 
 messages, and delete it immediately.
 
 P Please consider the environment before printing this email...
 
 

[mssms] Apply OS image step fails

[Brian McDonald]

Hey all,

Scratching my head on this one. I have an MDT/SCCM integrated TS in an SCCM 
2012 R2 CU2 environment. In both New and Refresh deployment scenarios the TS 
fails during the Apply OS step with the following error:

Error in the Task Sequence. The system cannot find the file specified. Error: 
80070002; Source Windows

I have attempted multiple .WIM files as well as an OS installer package. 
Boundaries seem fine, NAA account seems to be working to. I can run the MDT 
Toolkit Files and Gather steps in WinPE, but when it attempts to apply the OS 
it fails. Been testing all day long with no success so thought I would try here.
Thanks,
Brian


  

[mssms] Secondary Site vs Remote DP

[Brian McDonald]

Hey all,

Looking for some general guidance or rule of thumb for when to use a Secondary 
Site vs Remote DP.

Any input would be appreciated!

Thanks,

Brian

Sent from my iPhone

[mssms] CM Intune Integration

[Brian McDonald]

Does anyone know if this requires a PKI CERT? 

Thanks!

Brian

Sent from my iPhone

[mssms] SQL behind a DMZ

[Brian McDonald]

Can anyone tell me of any valid reason why you would install SQL in a DMZ? If 
ever? What are the pros/cons?

Thanks,

Brian
  

[mssms] Security Updates not showing up in Software Center

[Brian McDonald]

Looking for ideas.

I have a Windows 7 client that I'm trying to deploy updates to. The client 
hasn't been patched since May. For some reason I cannot get updates that are 
made available to show up in Software Center. I have reviewed the 
PolicyEvaluator.log file and cannot find the corresponding Deployment ID, so 
I'm thinking the client isn't getting policies. However, if I deploy an 
application/package to the machine, It will show up in software center.

WUAHandler.log file indicates the following, Received SuccededWithErrors 
code from WUA during search. Check WindowsUpdate.log in Windows Directory.  I 
don't see any errors in the WindowsUpdate.log file.

BTW - this is the first time I've worked on getting updates implemented in my 
environment. Looking for some ideas on what I can investigate to look into this 
further.

Thanks,

Brian
  

RE: [mssms] Security Updates not showing up in Software Center

[Brian McDonald]

Confirmed. There are a ton of updates in the Deployments tab.

From: hupe...@outlook.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Security Updates not showing up in Software Center
Date: Tue, 12 Aug 2014 16:37:06 +0200

Rightclick computer object in console, properties and verify you see the 
security patches showing at the deployment tab… From: 
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian McDonald
Sent: Tuesday, August 12, 2014 4:25 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Security Updates not showing up in Software Center Looking for 
ideas.

I have a Windows 7 client that I'm trying to deploy updates to. The client 
hasn't been patched since May. For some reason I cannot get updates that are 
made available to show up in Software Center. I have reviewed the 
PolicyEvaluator.log file and cannot find the corresponding Deployment ID, so 
I'm thinking the client isn't getting policies. However, if I deploy an 
application/package to the machine, It will show up in software center.

WUAHandler.log file indicates the following, Received SuccededWithErrors 
code from WUA during search. Check WindowsUpdate.log in Windows Directory.  I 
don't see any errors in the WindowsUpdate.log file.

BTW - this is the first time I've worked on getting updates implemented in my 
environment. Looking for some ideas on what I can investigate to look into this 
further.

Thanks,

Brian 

  

RE: [mssms] Security Updates not showing up in Software Center

[Brian McDonald]

Hey Jeff - using an ADR. User Experience tab is configured, Display in 
Software Center and show all notifications

Brian

Date: Tue, 12 Aug 2014 12:28:25 -0500
Subject: Re: [mssms] Security Updates not showing up in Software Center
From: jeffrey.d.pol...@gmail.com
To: mssms@lists.myitforum.com

Was the deployment done manually or with an automatic deployment rule? Either 
way, I believe that you can sepcify how the deployment interacts with software 
center.  I am not in an environment today that has a SUP or I would check and 
confirm the exact options. . .
 Jeff

On Tue, Aug 12, 2014 at 10:02 AM, Brian McDonald mcdonald...@hotmail.com 
wrote:




Confirmed. There are a ton of updates in the Deployments tab.

From: hupe...@outlook.com
To: mssms@lists.myitforum.com

Subject: RE: [mssms] Security Updates not showing up in Software Center
Date: Tue, 12 Aug 2014 16:37:06 +0200

Rightclick computer object in console, properties and verify you see the 
security patches showing at the deployment tab…

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian McDonald

Sent: Tuesday, August 12, 2014 4:25 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Security Updates not showing up in Software Center

 
Looking for ideas.

I have a Windows 7 client that I'm trying to deploy updates to. The client 
hasn't been patched since May. For some reason I cannot get updates that are 
made available to show up in Software Center. I have reviewed the 
PolicyEvaluator.log file and cannot find the corresponding Deployment ID, so 
I'm thinking the client isn't getting policies. However, if I deploy an 
application/package to the machine, It will show up in software center.


WUAHandler.log file indicates the following, Received SuccededWithErrors 
code from WUA during search. Check WindowsUpdate.log in Windows Directory.  I 
don't see any errors in the WindowsUpdate.log file.


BTW - this is the first time I've worked on getting updates implemented in my 
environment. Looking for some ideas on what I can investigate to look into this 
further.

Thanks,

Brian

 


  







  

RE: [mssms] Security Updates not showing up in Software Center

[Brian McDonald]

: Tue, 12 Aug 2014 21:07:53 +0200

So what about the updatestore.log, updatedeployment.log….? From: 
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian McDonald
Sent: Tuesday, August 12, 2014 5:02 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Security Updates not showing up in Software Center 
Confirmed. There are a ton of updates in the Deployments tab.From: 
hupe...@outlook.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Security Updates not showing up in Software Center
Date: Tue, 12 Aug 2014 16:37:06 +0200Rightclick computer object in console, 
properties and verify you see the security patches showing at the deployment 
tab… From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Brian McDonald
Sent: Tuesday, August 12, 2014 4:25 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Security Updates not showing up in Software Center Looking for 
ideas.

I have a Windows 7 client that I'm trying to deploy updates to. The client 
hasn't been patched since May. For some reason I cannot get updates that are 
made available to show up in Software Center. I have reviewed the 
PolicyEvaluator.log file and cannot find the corresponding Deployment ID, so 
I'm thinking the client isn't getting policies. However, if I deploy an 
application/package to the machine, It will show up in software center.

WUAHandler.log file indicates the following, Received SuccededWithErrors 
code from WUA during search. Check WindowsUpdate.log in Windows Directory.  I 
don't see any errors in the WindowsUpdate.log file.

BTW - this is the first time I've worked on getting updates implemented in my 
environment. Looking for some ideas on what I can investigate to look into this 
further.

Thanks,

Brian   

  

Re: [mssms] SCCM 2007 primary site still publishing to AD

[Brian McDonald]

Are there any risks involved with the leaving it there?

Thanks,

Brian

Sent from my iPhone

 On Jul 20, 2014, at 11:37 PM, CE5AR.ABREG0 elsal...@gmail.com wrote:
 
 Yes. 
 
 It usually gets removed when SCCM is uninstall but in case is left, it's safe 
 to just delete it. 
 
 Cesar A.
 Meaning is NOT in words, but inside people! Dr. Myles Munroe
 My iPad takes half the blame for misspells.
 
 On Jul 20, 2014, at 9:01 PM, Brian McDonald mcdonald...@hotmail.com wrote:
 
 We recently discovered our recently decommissioned SCCM 2007 site server is 
 still publishing to AD. Is it safe to clean up the systems management 
 container and delete the old instances?
 
 Thanks,
 
 Brian
 

Re: [mssms] WoL dependencies

[Brian McDonald]

Awesome thanks!!

Sent from my iPhone

 On Jul 21, 2014, at 9:29 AM, Nash Pherson na...@nowmicro.com wrote:
 
  
 Ryan’s three part guide is pretty good:
  
 http://ephingadmin.com/wp/a-configmgr-admins-guide-to-wol-magic-part-one/
 http://ephingadmin.com/wp/a-configmgr-admins-guide-to-wol-magic-part-two/
 http://ephingadmin.com/wp/a-configmgr-admins-guide-to-wol-magic-packet-part-three/
  
  
  
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Brian McDonald
 Sent: Wednesday, July 16, 2014 8:42 AM
 To: mssms@lists.myitforum.com
 Subject: [mssms] WoL dependencies
  
 Hey all,
 
 I'm in the process of researching WoL setup in SCCM 2012. Appears to be 
 fairly straight forward. I'm looking for a good guide to fully understand all 
 the components and network infrastructure related dependencies to make this 
 happen.
 
 Can someone point me in the right direction?
 
 Thanks!
 
 Brian