Re: [mssms] RE: Ideas on determining where to install software
You can put multiple deployment types on a single Application. It will show up as a single entry in the app catalog - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Tue, Mar 31, 2015 at 4:03 PM, Aday, Karalene B (RCIS) karalene.a...@rcis.com wrote: We use app portal and I would rather not built 2 packages; one that installs on the c drive and one that installs on the d drive. Also I don’t want the user’s to have know which to request. I was looking for a script or a wrapper that I could build logic into so when the user’s request software they don’t need to know if they have a partition. The “script” would look for a partition if it’s there it would install on the d drive, if not it would install on the C drive. Maybe I’m not explaining what I am looking for very well….. *From:* listsad...@lists.myitforum.com [mailto: listsad...@lists.myitforum.com] *On Behalf Of *Jason Sandys *Sent:* Tuesday, March 31, 2015 3:35 PM *To:* mssms@lists.myitforum.com *Subject:* [mssms] RE: Ideas on determining where to install software Use two deployment types and a requirement that detects whether the D drive is present then. J *From:* listsad...@lists.myitforum.com [ mailto:listsad...@lists.myitforum.com listsad...@lists.myitforum.com] *On Behalf Of *Aday, Karalene B (RCIS) *Sent:* Tuesday, March 31, 2015 3:09 PM *To:* mssms@lists.myitforum.com *Subject:* [mssms] RE: Ideas on determining where to install software It was a cooperate standard we had to follow that was finally done away with. Unfortunately way to many machines to redo, they will have to be phased out slowly over time. So for now we need to find a reasonable solution. *From:* listsad...@lists.myitforum.com [ mailto:listsad...@lists.myitforum.com listsad...@lists.myitforum.com] *On Behalf Of *Jason Sandys *Sent:* Tuesday, March 31, 2015 2:36 PM *To:* mssms@lists.myitforum.com *Subject:* [mssms] RE: Ideas on determining where to install software Honestly, get rid of the systems with 2 partitions – they are pointless and cause issues. Non-standardization is the root of many/most issues in IT environments. J *From:* listsad...@lists.myitforum.com [ mailto:listsad...@lists.myitforum.com listsad...@lists.myitforum.com] *On Behalf Of *Aday, Karalene B (RCIS) *Sent:* Tuesday, March 31, 2015 1:08 PM *To:* mssms@lists.myitforum.com *Subject:* [mssms] FW: Ideas on determining where to install software Looking for some ideas. We currently have Windows 7 and Windows 8.1 in our environment. Some of the Windows 8.1 have 2 partitions some do not. Rather than package everything twice I would like to come up with a script or some type of logic to determine if the partition is present and depending on that where to install the software.Any suggestions or does anyone have a script or something else I could look at to get some ideas? Thank you!
Re: [mssms] Help with SQL for report
I beleive that v_GS_SYSTEM_ENCLOSURE_UNIQUE.AssetTag should be v_GS_SYSTEM_ENCLOSURE_UNIQUE.Tag0. vSMS_R_System.description0 also does not exist, but I am not sure which field you are looking for. These are the fields for vSMS_R_SYSTEM: [ItemKey] ,[DiscArchKey] ,[SMS_Unique_Identifier0] ,[Netbios_Name0] ,[Name0] ,[Distinguished_Name0] ,[Operating_System_Name_and0] ,[Resource_Domain_OR_Workgr0] ,[AD_Site_Name0] ,[User_Name0] ,[Client0] ,[Client_Type0] ,[Unknown0] ,[Client_Version0] ,[Community_Name0] ,[User_Domain0] ,[Previous_SMS_UUID0] ,[SMS_UUID_Change_Date0] ,[CPUType0] ,[Hardware_ID0] ,[Obsolete0] ,[Active0] ,[Creation_Date0] ,[SMBIOS_GUID0] ,[AlwaysInternet0] ,[InternetEnabled0] ,[Decommissioned0] ,[WipeStatus0] ,[AMTStatus0] ,[AMTFullVersion0] ,[IsClientAMT30Compatible0] ,[SuppressAutoProvision0] ,[Primary_Group_ID0] ,[User_Account_Control0] ,[SID0] ,[EAS_DeviceID] ,[Object_GUID0] ,[Last_Logon_Timestamp0] ,[Is_Virtual_Machine0] ,[Is_MachineChanges_Persisted0] ,[Is_Assigned_To_User0] ,[Virtual_Machine_Host_Name0] ,[rowversion] ,[AgentEdition0] ,[WTGUniqueKey] ,[Is_Write_Filter_Capable0] ,[Is_Portable_Operating_System0] ,[Is_AOAC_Capable0] ,[PublisherDeviceID] ,[operatingSystem0] ,[operatingSystemServicePac0] ,[managedBy0] ,[operatingSystemVersion0] ,[Full_Domain_Name0] ,[DeviceOwner0] ,[IsReassigned0] - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Tue, Mar 24, 2015 at 1:23 PM, Murray, Mike mmur...@csuchico.edu wrote: I’m trying to use this to create a report. When I run the report, I get: - An error has occurred during report processing. (rsProcessingAborted) Query execution failed for dataset 'DataSet1'. (rsErrorExecutingCommand) Here’s the SQL: select distinct SMS_R_System.ItemKey,SMS_G_System_PC_BIOS.SerialNumber00,v_GS_SYSTEM_ENCLOSURE_UNIQUE.AssetTag,SMS_R_System.Name0,SMS_R_System.Client_Version0,SMS_R_System.Distinguished_Name0,SMS_R_System.operatingSystem0,SMS_R_System.operatingSystemServicePac0,SMS_R_System.Last_Logon_Timestamp0,___System_WORKSTATION_STATUS3.LastHWScan,SMS_G_System_COMPUTER_SYSTEM.Manufacturer00,SMS_G_System_COMPUTER_SYSTEM.Model00,SMS_G_System_COMPUTER_SYSTEM.TotalPhysicalMemory00,SMS_G_System_OPERATING_SYSTEM.InstallDate00,SMS_G_System_OPERATING_SYSTEM.LastBootUpTime00,__ystem_SYSTEM_CONSOLE_USAGE1.TopConsoleUser00,SMS_R_System.User_Name0,SMS_R_System.User_Domain0,SMS_G_System_PC_BIOS.SMBIOSBIOSVersion00,___System_ENCRYPTABLE_VOLUME2.DriveLetter00,___System_ENCRYPTABLE_VOLUME2.ProtectionStatus00,SMS_G_System_OPERATING_SYSTEM.Description00,SMS_R_System.description0 from vSMS_R_System AS SMS_R_System LEFT OUTER JOIN System_System_OU_Name_ARR AS __mSystem_System_OU_Name_ARR0 ON SMS_R_System.ItemKey = __mSystem_System_OU_Name_ARR0.ItemKey LEFT OUTER JOIN Computer_System_DATA AS SMS_G_System_COMPUTER_SYSTEM ON SMS_G_System_COMPUTER_SYSTEM.MachineID = SMS_R_System.ItemKey LEFT OUTER JOIN Operating_System_DATA AS SMS_G_System_OPERATING_SYSTEM ON SMS_G_System_OPERATING_SYSTEM.MachineID = SMS_R_System.ItemKey LEFT OUTER JOIN PC_BIOS_DATA AS SMS_G_System_PC_BIOS ON SMS_G_System_PC_BIOS.MachineID = SMS_R_System.ItemKey LEFT OUTER JOIN SYSTEM_CONSOLE_USAGE_DATA AS __ystem_SYSTEM_CONSOLE_USAGE1 ON __ystem_SYSTEM_CONSOLE_USAGE1.MachineID = SMS_R_System.ItemKey LEFT OUTER JOIN ENCRYPTABLE_VOLUME_DATA AS ___System_ENCRYPTABLE_VOLUME2 ON ___System_ENCRYPTABLE_VOLUME2.MachineID = SMS_R_System.ItemKey LEFT OUTER JOIN WorkstationStatus_DATA AS ___System_WORKSTATION_STATUS3 ON ___System_WORKSTATION_STATUS3.MachineID = SMS_R_System.ItemKey where (SMS_R_System.Obsolete0 = N'0') order by name0 Best Regards, Mike Murray Desktop Management Coordinator - IT Support Services California State University, Chico 530.898.4357 mmur...@csuchico.edu
Re: [mssms] RE: SCCM in the lab
Did you have AD pulishing turned on for the old site? - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Fri, Mar 6, 2015 at 1:14 PM, Heaton, Joseph@Wildlife joseph.hea...@wildlife.ca.gov wrote: Ok, so strange thing happened. I actually went through the uninstall, instead of just ripping SCCM out. This also cleaned up the System Management container, as well. I did choose a different site code when installing the new SCCM, which is on a new server VM. The old VM was unjoined from the domain, and deleted from disk. I’m looking at the devices that the new SCCM has discovered, and I notice that none of them have the client (I didn’t set up client push, so this is fine). I go to push the client to the new SCCM server, then go look in Control Panel. I see that Configuration Manager is shown, so I open it up, and lo and behold, is shows that it is assigned to the OLD SCCM server and site code, which I thought I had gotten rid of. Anyone know what the heck happened, or where I can look to start investigating? Thanks, Joe *From:* listsad...@lists.myitforum.com [mailto: listsad...@lists.myitforum.com] *On Behalf Of *Daniel Ratliff *Sent:* Tuesday, March 03, 2015 1:17 PM *To:* mssms@lists.myitforum.com *Subject:* [mssms] RE: SCCM in the lab Exactly, also don’t use the same site code. *Daniel Ratliff* *From:* listsad...@lists.myitforum.com [ mailto:listsad...@lists.myitforum.com listsad...@lists.myitforum.com] *On Behalf Of *Marcum, John *Sent:* Tuesday, March 03, 2015 4:12 PM *To:* mssms@lists.myitforum.com *Subject:* [mssms] RE: SCCM in the lab I assume it's on a VM? Just delete the VM, clean out the System Management container and build a new VM with the version you want. *From:* listsad...@lists.myitforum.com [ mailto:listsad...@lists.myitforum.com listsad...@lists.myitforum.com] *On Behalf Of *Heaton, Joseph@Wildlife *Sent:* Tuesday, March 03, 2015 3:10 PM *To:* mssms@lists.myitforum.com *Subject:* [mssms] SCCM in the lab I have a lab environment, in which I had originally setup SCCM 2012 R2, on a Server 2012 box. Well, now I need to plan out and test the upgrade of our production environment, which is SCCM 2012 SP1. I want to remove SCCM from my lab environment, so that I can do a clean install of the older version. I’m getting ready to exercise my google-fu, but thought I’d ask here as well, in case someone has already done this, and has a reference that I could look at. Thanks, Joe Heaton Enterprise Server Support Information Technology Operations Branch Data and Technology Division CA Department of Fish and Wildlife 1700 9th Street, 3rd Floor Sacramento, CA 95811 Desk: (916) 323-1284 -- Confidentiality Notice: This e-mail is from a law firm and may be protected by the attorney-client or work product privileges. If you have received this message in error, please notify the sender by replying to this e-mail and then delete it from your computer. The information transmitted is intended only for the person or entity to which it is addressed and may contain CONFIDENTIAL material. If you receive this material/information in error, please contact the sender and delete or destroy the material/information.
Re: [mssms] SCCM 2012 Cummulative Updates
You can go straight to the latest. Each one is completely cumulative On Mar 5, 2015 9:59 AM, Gailfus, Nick nick.gail...@leonagroup.com wrote: We are currently running SCCM 2012 SP1 with CU 2. Can I just jump up to the latest CU or do I have to apply each one in sequence? Nick Gailfus Computer Technician p. 602.953.2933 f. 602.953.0831 nick.gail...@leonagroup.com nick.gail...@gmail.com| www.leonagroup.com
Re: [mssms] Query folder size
Yes. There are no built in reports that get that detailed. Check out the vDCMDeploymentNonCompliantRuleDetailsPerClientMachine view, specifically the DiscoveredValue filed - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Fri, Feb 20, 2015 at 9:42 AM, Beardsley, James james.beards...@dhgllp.com wrote: Good stuff. I’ll try that next. I got the CI set up like Sherry suggested and I see that its recording the folder size if I look at the compliance report on the local machine. I’m not seeing a report to view the results for more than one asset though within the SSRS reports. None of them get that detailed or so it seems. Would I have to write my own report to gather that info? *From:* listsad...@lists.myitforum.com [mailto: listsad...@lists.myitforum.com] *On Behalf Of *Jason Sandys *Sent:* Thursday, February 19, 2015 9:53 PM *To:* mssms@lists.myitforum.com *Subject:* RE: [mssms] Query folder size You could also use this: http://blog.configmgrftw.com/folder-size-inventory-using-configmgr/. Depends upon exactly what you need. J *From:* listsad...@lists.myitforum.com [ mailto:listsad...@lists.myitforum.com listsad...@lists.myitforum.com] *On Behalf Of *zan.brouss...@lpnt.net *Sent:* Thursday, February 19, 2015 6:05 PM *To:* mssms@lists.myitforum.com *Subject:* RE: [mssms] Query folder size I think this what we did. http://blog.configmgrftw.com/collecting-usmt-estimates-using-configmgr/ I think basically what it does is run’s a USMT against the machine, then stored it in the WMI and then you can report on it.. HTH, Zan *From:* listsad...@lists.myitforum.com [ mailto:listsad...@lists.myitforum.com listsad...@lists.myitforum.com] *On Behalf Of *Dwayne Allen *Sent:* Thursday, February 19, 2015 4:25 PM *To:* mssms@lists.myitforum.com *Subject:* Re: [mssms] Query folder size When I did it I was looking for iTunes media folders not on the c:\ drive. So the return value for non compliant machines was just the folder path on the noncompliant machines. No special formatting or anything needed - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Thu, Feb 19, 2015 at 4:03 PM, Beardsley, James james.beards...@dhgllp.com wrote: So when you did this, did you have wscript.echo return just the number? Or did you format it in any way? For example, have it return “19,970.44” or just “19970.44”. Any reason not to format it? I’m assuming it’s a string so I wouldn’t be able to (easily) format it on the reporting side. *From:* listsad...@lists.myitforum.com [mailto: listsad...@lists.myitforum.com] *On Behalf Of *Beardsley, James *Sent:* Thursday, February 19, 2015 4:52 PM *To:* mssms@lists.myitforum.com *Subject:* RE: [mssms] Query folder size Interesting… thanks for the ideas. I’ll play around with that. *From:* listsad...@lists.myitforum.com [ mailto:listsad...@lists.myitforum.com listsad...@lists.myitforum.com] *On Behalf Of *Sherry Kissinger *Sent:* Thursday, February 19, 2015 4:48 PM *To:* mssms@lists.myitforum.com *Subject:* Re: [mssms] Query folder size Yes, I've done exactly that before (well, not for mydocs). Where I had, on purpose, wanted everyone to be non-compliant. Just so that the results of the script that were echo'd with wscript.echo (or write-host w/posh) would show up in the DB. If you want to test it quick; just do a posh script ConfigItem where it just does a write-host hello but what means compliant is the phrase goodbye. and you'll see that the non-compliant value of hello will show up in your DB. in your case, the string that means compliant is say.. X so anything else would be wrong; and would show up in your db; the number you spit out with write-host On Thursday, February 19, 2015 3:40 PM, Dwayne Allen dwayne.al...@gmail.com wrote: You might be able to do it with a CI if you use a script (SCCM 2012). The output of the detection script actually gets written in the DB. Check out the InstancePatch field in the vDCMDeploymentNonCompliantRuleDetailsPerClientMachine view. - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Thu, Feb 19, 2015 at 3:11 PM, Beardsley, James james.beards...@dhgllp.com wrote: I’ve been asked to see if there is a way to gather the size of everyones My Documents. Is there anything within SCCM that I’m not thinking of that could do that? I’ve done this before with a package that simply runs a Powershell script that writes the folder size into a text file and then copies the text file to a central location on a network server. Then using another Powershell script, gather and combine all of the data in those txt files to one spreadsheet. Before I did that again, I wanted to see if maybe I’m overlooking a better way to get this done. A co-worker of mine started down the road of returning the folder size as an exit code and report on that but that didn’t turn out right
Re: [mssms] Query folder size
You might be able to do it with a CI if you use a script (SCCM 2012). The output of the detection script actually gets written in the DB. Check out the InstancePatch field in the vDCMDeploymentNonCompliantRuleDetailsPerClientMachine view. - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Thu, Feb 19, 2015 at 3:11 PM, Beardsley, James james.beards...@dhgllp.com wrote: I’ve been asked to see if there is a way to gather the size of everyones My Documents. Is there anything within SCCM that I’m not thinking of that could do that? I’ve done this before with a package that simply runs a Powershell script that writes the folder size into a text file and then copies the text file to a central location on a network server. Then using another Powershell script, gather and combine all of the data in those txt files to one spreadsheet. Before I did that again, I wanted to see if maybe I’m overlooking a better way to get this done. A co-worker of mine started down the road of returning the folder size as an exit code and report on that but that didn’t turn out right. Thanks, *James Beardsley |* Firm Technology Group Dixon Hughes Goodman LLP [image: cid:8644FC49-D5C9-45AE-B387-04FAFC0CC7A5] http://www.dhgllp.com/ -- *Confidentiality Notice:* This e-mail is intended only for the addressee named above. It contains information that is privileged, confidential or otherwise protected from use and disclosure. If you are not the intended recipient, you are hereby notified that any review, disclosure, copying, or dissemination of this transmission, or taking of any action in reliance on its contents, or other use is strictly prohibited. If you have received this transmission in error, please reply to the sender listed above immediately and permanently delete this message from your inbox. Thank you for your cooperation.
Re: [mssms] Query folder size
When I did it I was looking for iTunes media folders not on the c:\ drive. So the return value for non compliant machines was just the folder path on the noncompliant machines. No special formatting or anything needed - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Thu, Feb 19, 2015 at 4:03 PM, Beardsley, James james.beards...@dhgllp.com wrote: So when you did this, did you have wscript.echo return just the number? Or did you format it in any way? For example, have it return “19,970.44” or just “19970.44”. Any reason not to format it? I’m assuming it’s a string so I wouldn’t be able to (easily) format it on the reporting side. *From:* listsad...@lists.myitforum.com [mailto: listsad...@lists.myitforum.com] *On Behalf Of *Beardsley, James *Sent:* Thursday, February 19, 2015 4:52 PM *To:* mssms@lists.myitforum.com *Subject:* RE: [mssms] Query folder size Interesting… thanks for the ideas. I’ll play around with that. *From:* listsad...@lists.myitforum.com [ mailto:listsad...@lists.myitforum.com listsad...@lists.myitforum.com] *On Behalf Of *Sherry Kissinger *Sent:* Thursday, February 19, 2015 4:48 PM *To:* mssms@lists.myitforum.com *Subject:* Re: [mssms] Query folder size Yes, I've done exactly that before (well, not for mydocs). Where I had, on purpose, wanted everyone to be non-compliant. Just so that the results of the script that were echo'd with wscript.echo (or write-host w/posh) would show up in the DB. If you want to test it quick; just do a posh script ConfigItem where it just does a write-host hello but what means compliant is the phrase goodbye. and you'll see that the non-compliant value of hello will show up in your DB. in your case, the string that means compliant is say.. X so anything else would be wrong; and would show up in your db; the number you spit out with write-host On Thursday, February 19, 2015 3:40 PM, Dwayne Allen dwayne.al...@gmail.com wrote: You might be able to do it with a CI if you use a script (SCCM 2012). The output of the detection script actually gets written in the DB. Check out the InstancePatch field in the vDCMDeploymentNonCompliantRuleDetailsPerClientMachine view. - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Thu, Feb 19, 2015 at 3:11 PM, Beardsley, James james.beards...@dhgllp.com wrote: I’ve been asked to see if there is a way to gather the size of everyones My Documents. Is there anything within SCCM that I’m not thinking of that could do that? I’ve done this before with a package that simply runs a Powershell script that writes the folder size into a text file and then copies the text file to a central location on a network server. Then using another Powershell script, gather and combine all of the data in those txt files to one spreadsheet. Before I did that again, I wanted to see if maybe I’m overlooking a better way to get this done. A co-worker of mine started down the road of returning the folder size as an exit code and report on that but that didn’t turn out right. Thanks, *James Beardsley |* Firm Technology Group Dixon Hughes Goodman LLP [image: cid:8644FC49-D5C9-45AE-B387-04FAFC0CC7A5] http://www.dhgllp.com/ *Confidentiality Notice:* This e-mail is intended only for the addressee named above. It contains information that is privileged, confidential or otherwise protected from use and disclosure. If you are not the intended recipient, you are hereby notified that any review, disclosure, copying, or dissemination of this transmission, or taking of any action in reliance on its contents, or other use is strictly prohibited. If you have received this transmission in error, please reply to the sender listed above immediately and permanently delete this message from your inbox. Thank you for your cooperation. -- *Confidentiality Notice:* This e-mail is intended only for the addressee named above. It contains information that is privileged, confidential or otherwise protected from use and disclosure. If you are not the intended recipient, you are hereby notified that any review, disclosure, copying, or dissemination of this transmission, or taking of any action in reliance on its contents, or other use is strictly prohibited. If you have received this transmission in error, please reply to the sender listed above immediately and permanently delete this message from your inbox. Thank you for your cooperation. -- *Confidentiality Notice:* This e-mail is intended only for the addressee named above. It contains information that is privileged, confidential or otherwise protected from use and disclosure. If you are not the intended recipient, you are hereby notified that any review, disclosure, copying, or dissemination of this transmission, or taking of any action in reliance on its contents, or other use is strictly prohibited
Re: [mssms] RE: user notification of application install
I bet you could use status message filtering and a pretty simple powershell script to do this - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Thu, Feb 5, 2015 at 3:46 PM, Heaton, Joseph@Wildlife joseph.hea...@wildlife.ca.gov wrote: That’s what I thought. We’re not using Orchestrator, and I would imagine scripting could get pretty involved. Luckily, there’s no deadline, or even a formal request at this point, just a “Wouldn’t it be nice if?” *From:* listsad...@lists.myitforum.com [mailto: listsad...@lists.myitforum.com] *On Behalf Of *Chris Nackers *Sent:* Thursday, February 05, 2015 1:42 PM *To:* mssms@lists.myitforum.com *Subject:* [mssms] RE: user notification of application install Sure with some scripting and/or Orchestrator it would be possible. Nothing out of the box built-in to handle that type of request though. *From:* listsad...@lists.myitforum.com [ mailto:listsad...@lists.myitforum.com listsad...@lists.myitforum.com] *On Behalf Of *Heaton, Joseph@Wildlife *Sent:* Thursday, February 5, 2015 3:10 PM *To:* mssms@lists.myitforum.com *Subject:* [mssms] user notification of application install I was just asked something that sounds a bit off-the-wall to me. I know that SCCM does not have e-mail notification built-in, but the question I was asked is: Can SCCM e-mail a user notifying them that the application has been installed, as part of the deployment? There is also interest in e-mailing a user when Windows Updates have been installed, in case they’re away from their machine, so that the possibility of the machine auto-rebooting after the 2 ½ hour grace period we currently allow is minimized. We are currently on SCCM 2012 SP1, although within the next couple of months I hope to be at R2 and latest CU. Joe Heaton
Re: [mssms] Uninstall previously required programs
Or to be safer, deploy the uninstall directly to the affected computer - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Thu, Feb 5, 2015 at 12:30 PM, Gailfus, Nick nick.gail...@leonagroup.com wrote: You could stick the users in a collection with an advertisement to uninstall the software. The risk of this is if they sign into a machine that should have the software. Nick Gailfus Computer Technician p. 602.953.2933 f. 602.953.0831 nick.gail...@leonagroup.com nick.gail...@gmail.com| www.leonagroup.com On Thu, Feb 5, 2015 at 11:22 AM, Todd Hemsell hems...@gmail.com wrote: After doing this shouldn’t the user be able to uninstall the applications? no, because the deployment was mandatory, then it was gone. At no time was the deployment Optional Deploy the app to him optionally. Have him install it, then uninstall it Might need to do a policy reset on the client if you are in a hurry as the original Mandatory deployment might still be sticking to the system. On Thu, Feb 5, 2015 at 2:28 AM, Henrik Bierbum Bacher h...@pension.dk wrote: In my CM 2012 R2 setup I have a user collection based on an Active Directory security group. This collection has a required deployment of a couple of LOB applications. A user was mistakenly added to this group and had the LOB applications installed on his computer, afterwards I’ve removed him from the AD security group. When I did this I would have expected him to be able to uninstall the applications thru software center but the uninstall button is greyed out. In troubleshooting I’ve verified the he’s removed from the user collection in SCCM so the required deployment shouldn’t apply. I’ve had the user do a fresh login (to refresh the AD token) as well as running the following client actions: Application Deployment Evaluation Cycle and User Policy Retrieval Evaluation Cycle. After doing this shouldn’t the user be able to uninstall the applications? Med venlig hilsen / Kind regards Henrik Bierbum Bacher System- og supportmedarbejder Direkte: +45 3374 8046 E-mail: h...@pension.dk PensionDanmark Langelinie Allé 41 DK-2100 København Ø Telefon: +45 3374 8000 Fax: +45 3374 8080 E-mail: i...@pension.dk Web: pension.dk [image: cid:image001.png@01D04124.46A23CD0] [image: cid:image002.png@01D04124.46A23CD0] https://www.linkedin.com/company/pensiondanmark[image: cid:image003.png@01D04124.46A23CD0] https://twitter.com/pensiondanmark üTænk på miljøet, før du printer denne mail og/eller de vedhæftede dokumenter. / Please consider the impact on the environment before printing this e-mail and/or the attachment(s) -- Bemærk Denne e-mail og vedhæftede filer er alene forbeholdt den person eller enhed, som e-mailen er stilet til. E-mail og vedhæftede filer kan indeholde personlige og fortrolige oplysninger. Er du ikke den rette modtager, bedes du bemærke, at enhver udbredelse, distribution eller kopiering er forbudt. Har du modtaget denne e-mail ved en fejl, bedes du underrette afsender om det straks og derefter slette e-mail og vedhæftede filer fra dit system. Disclaimer This transmission is intended solely for the person or entity to whom it is addressed. It may contain privileged and confidential information. If you are not the intended recipient, please be notified that any dissemination, distribution or copying is strictly prohibited. If you have received this transmission by mistake, please let us know and then delete it from your system.
Re: [mssms] Pending Reboot and notification
We are in pretty much the same situation. We suippress reboots, and then
deploy a program to remind the stragglers of the need to reboot. A few
times, that program or another one have forced reboots on people when a
hard reboot is pending.
As I understand it SCCM groups reboots in HARD or SOFT. A soft reboot just
tells SCCM that the install is finished but a reboot is needed at some
point in the future to fully complete. No big deal. A hard reboot tells
SCCM that the computer is in such a state that install is finished but that
the computer is in an unstable state and no other installations can be
performed until a reboot is performed and the OS stabilizes.
If you have a required deployment that hits a deadline then SCCM must
install it, but if a hard reboot is pending then in order to perform the
install it must first reboot the PC in order to complete the previous
install. Unfortunately as far as I know there is no way to create a
required deployment that will ignore hard reboots. Once you are in that
hard reboot state it has to be resolved before anything else can happen
-
Dwayne Allen
dwayne.al...@gmail.com
(479) 310-0027
On Mon, Feb 2, 2015 at 1:13 PM, Miller, Todd todd-mil...@uiowa.edu wrote:
I suppress reboots on software updates and then I run a custom program
to notify the user and reboot the computer.
This has been working pretty well, but I recently ran into a problem with
this.
I had some computers that ended up in a “Hard Reboot was found pending”
state and on those computers, SCCM forced a reboot before it would allow my
Reboot package to run. Basically, it rebooted the client so that the
reboot checker Program could run.
What is a HARD REBOOT pending state? I have not run into that before.
Normally, my check for reboot and notify script is allowed to run even if a
client is in a pending reboot state. This Hard Reboot pending is a new one
on me. It is forcing the computer to reboot before any other package is
allowed to run- Even if I have all packages set to suppress reboot or
“program controls reboots”I suppose there is no way to tell SCCM to
ignore HARD REBOOT PENDING states and just let a package run.
Hmmm…..
ProgramID=Reboot for patches ß--This is my custom reboot notifier. It
kicked off to notify the user a reboot was needed. But before it was
allowed to run, SCCM wanted to reboot the client to get the client ready to
run it.
Raising client SDK event for class CCM_Program, instance
CCM_Program.PackageID=XXX000F9,ProgramID=Reboot for patches, actionType
1l, value , user NULL, session 4294967295l, level 0l, verbosity 30l
execmgr 2/2/2015 10:19:52 AM 7424 (0x1D00)
MTC signaled SWD execution request with program id: Reboot for patches,
package id: XXX000F9 for execution.execmgr
2/2/2015 10:19:52 AM6704 (0x1A30)
*++A Hard Reboot was found pending*. Pause MTC task :
{C07FCF2A-A85E-48D4-8E7C-A5DA125DF59E}execmgr2/2/2015
10:19:52 AM6704 (0x1A30)
Pausing the corresponding MTC task with id:
{C07FCF2A-A85E-48D4-8E7C-A5DA125DF59E} execmgr
2/2/2015 10:19:52 AM 6704 (0x1A30)
Execution Request for advert XXX20069 package XXX000F9 program Reboot for
patches *state change from Ready to Paused* execmgr 2/2/2015
10:19:52 AM6704 (0x1A30)
Raising client SDK event for class CCM_Program, instance
CCM_Program.PackageID=XXX000F9,ProgramID=Reboot for patches, actionType
1l, value , user NULL, session 4294967295l, level 0l, verbosity 30l
execmgr 2/2/2015 10:19:52 AM 6704 (0x1A30)
MTC task with id {C07FCF2A-A85E-48D4-8E7C-A5DA125DF59E}, changed state
from 4 to 6 execmgr 2/2/2015 10:19:52 AM
6704 (0x1A30)
--
Notice: This UI Health Care e-mail (including attachments) is covered by
the Electronic Communications Privacy Act, 18 U.S.C. 2510-2521, is
confidential and may be legally privileged. If you are not the intended
recipient, you are hereby notified that any retention, dissemination,
distribution, or copying of this communication is strictly prohibited.
Please reply to the sender that you have received the message in error,
then delete it. Thank you.
--
Re: [mssms] Pending Reboot and notification
Because after carefully considering all my arguments against this plan of
action management told me to do it this way anyway
-
Dwayne Allen
dwayne.al...@gmail.com
(479) 310-0027
On Mon, Feb 2, 2015 at 3:42 PM, Krueger, Jeff jkrue...@hfhs.org wrote:
Why suppress reboots at all? The computer restart setting in the client
settings can be configured to give users a warning however long you want
before the reboot will be forced.
*From:* listsad...@lists.myitforum.com [mailto:
listsad...@lists.myitforum.com] *On Behalf Of *Dwayne Allen
*Sent:* Monday, February 2, 2015 4:03 PM
*To:* mssms@lists.myitforum.com
*Subject:* Re: [mssms] Pending Reboot and notification
We are in pretty much the same situation. We suippress reboots, and then
deploy a program to remind the stragglers of the need to reboot. A few
times, that program or another one have forced reboots on people when a
hard reboot is pending.
As I understand it SCCM groups reboots in HARD or SOFT. A soft reboot
just tells SCCM that the install is finished but a reboot is needed at some
point in the future to fully complete. No big deal. A hard reboot tells
SCCM that the computer is in such a state that install is finished but that
the computer is in an unstable state and no other installations can be
performed until a reboot is performed and the OS stabilizes.
If you have a required deployment that hits a deadline then SCCM must
install it, but if a hard reboot is pending then in order to perform the
install it must first reboot the PC in order to complete the previous
install. Unfortunately as far as I know there is no way to create a
required deployment that will ignore hard reboots. Once you are in that
hard reboot state it has to be resolved before anything else can happen
-
Dwayne Allen
dwayne.al...@gmail.com
(479) 310-0027
On Mon, Feb 2, 2015 at 1:13 PM, Miller, Todd todd-mil...@uiowa.edu
wrote:
I suppress reboots on software updates and then I run a custom program
to notify the user and reboot the computer.
This has been working pretty well, but I recently ran into a problem with
this.
I had some computers that ended up in a “Hard Reboot was found pending”
state and on those computers, SCCM forced a reboot before it would allow my
Reboot package to run. Basically, it rebooted the client so that the
reboot checker Program could run.
What is a HARD REBOOT pending state? I have not run into that before.
Normally, my check for reboot and notify script is allowed to run even if a
client is in a pending reboot state. This Hard Reboot pending is a new one
on me. It is forcing the computer to reboot before any other package is
allowed to run- Even if I have all packages set to suppress reboot or
“program controls reboots”I suppose there is no way to tell SCCM to
ignore HARD REBOOT PENDING states and just let a package run.
Hmmm…..
ProgramID=Reboot for patches ß--This is my custom reboot notifier. It
kicked off to notify the user a reboot was needed. But before it was
allowed to run, SCCM wanted to reboot the client to get the client ready to
run it.
Raising client SDK event for class CCM_Program, instance
CCM_Program.PackageID=XXX000F9,ProgramID=Reboot for patches, actionType
1l, value , user NULL, session 4294967295l, level 0l, verbosity 30l
execmgr 2/2/2015 10:19:52 AM 7424 (0x1D00)
MTC signaled SWD execution request with program id: Reboot for patches,
package id: XXX000F9 for execution.execmgr
2/2/2015 10:19:52 AM6704 (0x1A30)
*++A Hard Reboot was found pending*. Pause MTC task :
{C07FCF2A-A85E-48D4-8E7C-A5DA125DF59E}execmgr2/2/2015
10:19:52 AM6704 (0x1A30)
Pausing the corresponding MTC task with id:
{C07FCF2A-A85E-48D4-8E7C-A5DA125DF59E} execmgr
2/2/2015 10:19:52 AM 6704 (0x1A30)
Execution Request for advert XXX20069 package XXX000F9 program Reboot for
patches *state change from Ready to Paused* execmgr 2/2/2015
10:19:52 AM6704 (0x1A30)
Raising client SDK event for class CCM_Program, instance
CCM_Program.PackageID=XXX000F9,ProgramID=Reboot for patches, actionType
1l, value , user NULL, session 4294967295l, level 0l, verbosity 30l
execmgr 2/2/2015 10:19:52 AM 6704 (0x1A30)
MTC task with id {C07FCF2A-A85E-48D4-8E7C-A5DA125DF59E}, changed state
from 4 to 6 execmgr 2/2/2015 10:19:52 AM
6704 (0x1A30)
--
Notice: This UI Health Care e-mail (including attachments) is covered by
the Electronic Communications Privacy Act, 18 U.S.C. 2510-2521, is
confidential and may be legally privileged. If you are not the intended
recipient, you are hereby notified that any retention, dissemination,
distribution, or copying of this communication is strictly prohibited.
Please reply to the sender that you have received the message in error
Re: [mssms] CM 2012 R2 SUP Best Practices
I think you maybe ok. One of our primary SUPs has over 20,000 clients and all of those roles outside of the RSP. It is a pretty beefy box though. - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Wed, Jan 28, 2015 at 9:07 AM, Sean Pomeroy sean.pome...@gmail.com wrote: We are in the process of planning and testing patch deployment via SCCM. A high level overview of our infrastructure is as follows: Primary in EMEA (MP, SUP, ACWP, DP, RSP, AISP) Secondary in Americas (MP, SUP, DP) Secondary in APAC (MP, SUP, DP) ~17,000 Clients (35% EMEA, 40% Americas, 20% APAC) ~2,000 Servers (45% EMEA, 45% Americas, 10% APAC) At first we will only be patching clients. But servers will follow. Right now we are only testing patching on about ~500 PCs and all is going smoothly. Once we move all clients to patching via SCCM, I am concerned our Primary is going to be over loaded. I know MS documentation suggests SUP can handle 25,000 clients when it co-exists with another role... But our Primary essentially has all roles. Should I push to stand up a separate server as a SUP in each region? Or at least in place of the SUP on our primary? Thanks, Sean
Re: [mssms] CM 2012 R2 SUP Best Practices
We did have some issues with our disk queues until we moved to SSDs so that is something you will want to keep an eye. I'm assuming you are co-locating SQL? - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Wed, Jan 28, 2015 at 10:08 AM, Sean Pomeroy sean.pome...@gmail.com wrote: @Nick, I currently have it configured with a SUP in each region. I also have two IBCM SUPs configured for Americas and EMEA. But we only have roughly ~1,500 clients internet only at any given time. @Dwayne, Our Primary is a VM on a decently equipped box. It's currently assigned 4 CPUs and 64GB of ram. And we have plenty of resources free to assign more. The only thing we don't have is dedicated Disks/SSDs. :( On Wed Jan 28 2015 at 10:37:38 AM Dwayne Allen dwayne.al...@gmail.com wrote: I think you maybe ok. One of our primary SUPs has over 20,000 clients and all of those roles outside of the RSP. It is a pretty beefy box though. - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Wed, Jan 28, 2015 at 9:07 AM, Sean Pomeroy sean.pome...@gmail.com wrote: We are in the process of planning and testing patch deployment via SCCM. A high level overview of our infrastructure is as follows: Primary in EMEA (MP, SUP, ACWP, DP, RSP, AISP) Secondary in Americas (MP, SUP, DP) Secondary in APAC (MP, SUP, DP) ~17,000 Clients (35% EMEA, 40% Americas, 20% APAC) ~2,000 Servers (45% EMEA, 45% Americas, 10% APAC) At first we will only be patching clients. But servers will follow. Right now we are only testing patching on about ~500 PCs and all is going smoothly. Once we move all clients to patching via SCCM, I am concerned our Primary is going to be over loaded. I know MS documentation suggests SUP can handle 25,000 clients when it co-exists with another role... But our Primary essentially has all roles. Should I push to stand up a separate server as a SUP in each region? Or at least in place of the SUP on our primary? Thanks, Sean
Re: [mssms] CM 2012 R2 SUP Best Practices
Actually we just ran Resource Monitor manually. We never had any kind of automated system in place specifically for disk queues. Usually that caused enough other problems that we had plenty of alerts - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Wed, Jan 28, 2015 at 1:29 PM, Sean Pomeroy sean.pome...@gmail.com wrote: That would be correct, SQL co-located. We do have an issue that whomever configured the system made one big VHD and diced it up into partitions for content, SQL and logs. Makes it a pain to expand partitions. It was dynamic too! I created separate VHDs to split up the partitions, just haven't had a big enough maintenance window to move everything yet. Maybe I should push for SSDs at the same time... Did you just use PerfMon to monitor disk queue? On Wed Jan 28 2015 at 2:20:16 PM Dwayne Allen dwayne.al...@gmail.com wrote: We did have some issues with our disk queues until we moved to SSDs so that is something you will want to keep an eye. I'm assuming you are co-locating SQL? - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Wed, Jan 28, 2015 at 10:08 AM, Sean Pomeroy sean.pome...@gmail.com wrote: @Nick, I currently have it configured with a SUP in each region. I also have two IBCM SUPs configured for Americas and EMEA. But we only have roughly ~1,500 clients internet only at any given time. @Dwayne, Our Primary is a VM on a decently equipped box. It's currently assigned 4 CPUs and 64GB of ram. And we have plenty of resources free to assign more. The only thing we don't have is dedicated Disks/SSDs. :( On Wed Jan 28 2015 at 10:37:38 AM Dwayne Allen dwayne.al...@gmail.com wrote: I think you maybe ok. One of our primary SUPs has over 20,000 clients and all of those roles outside of the RSP. It is a pretty beefy box though. - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Wed, Jan 28, 2015 at 9:07 AM, Sean Pomeroy sean.pome...@gmail.com wrote: We are in the process of planning and testing patch deployment via SCCM. A high level overview of our infrastructure is as follows: Primary in EMEA (MP, SUP, ACWP, DP, RSP, AISP) Secondary in Americas (MP, SUP, DP) Secondary in APAC (MP, SUP, DP) ~17,000 Clients (35% EMEA, 40% Americas, 20% APAC) ~2,000 Servers (45% EMEA, 45% Americas, 10% APAC) At first we will only be patching clients. But servers will follow. Right now we are only testing patching on about ~500 PCs and all is going smoothly. Once we move all clients to patching via SCCM, I am concerned our Primary is going to be over loaded. I know MS documentation suggests SUP can handle 25,000 clients when it co-exists with another role... But our Primary essentially has all roles. Should I push to stand up a separate server as a SUP in each region? Or at least in place of the SUP on our primary? Thanks, Sean
Re: [mssms] FYI, KB3000850
That was also the case with the 1st big update rollup Microsoft released for Windows 8.1\2012 R2, and will continue to be the case until they either start calling these things service packs or invent a better classification for them - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Thu, Dec 11, 2014 at 11:22 AM, Murray, Mike mmur...@csuchico.edu wrote: FYI, this patch requires more than the default maximum run time of 120 minutes. It was failing for me yesterday. I would consider bumping yours to a higher number. We went with 120, which is way more than needed, but I’m not messing around. :) Best Regards, Mike Murray Desktop Management Coordinator - IT Support Services California State University, Chico 530.898.4357 mmur...@csuchico.edu
Re: [mssms] Client Push Not Displaying Site Code
Also check out the provider log on the server
-
Dwayne Allen
dwayne.al...@gmail.com
(479) 310-0027
On Thu, Nov 20, 2014 at 9:13 AM, Eswar Koneti eswarkon...@outlook.com
wrote:
Seems like you had issues retrieving the info from sms provider. Close
the console, reopen it, check the sms admin ui log for any errors and then
try to do client push.
Are you trying it from site server or from remote console
Regards,
Eswar Koneti
www.eskonr.com
Sent from Mobile Device, excuse any typo's as a result.
--- Original Message ---
From: Lassiter, Brandon brandon.lassi...@atimetals.com
Sent: November 20, 2014 11:10 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Client Push Not Displaying Site Code
Has anyone came across this issue where no site code is display when
attempting to do a client push.
SMSAdminUI.log
[12, PID:4992][11/20/2014 08:46:00]
:Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlQueryException\r\nThe
SMS Provider reported an error.\r\n at
Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlConnectionManager.GetInstance(String
objectPath)
at
Microsoft.ConfigurationManagement.AdminConsole.Common.SitesUtilities.GetSiteObject(ConnectionManagerBase
connectionManager, String siteCode)\r\nConfigMgr Error Object:
instance of SMS_ExtendedStatus
{
Description = Error to retrive object (SiteCode)
instance, return error : 20;
ErrorCode = 1078462229;
File =
e:\\qfe\\nts\\sms\\siteserver\\sdk_provider\\smsprov\\sspsite.cpp;
Line = 381;
ObjectInfo = SiteCode;
Operation = GetObject;
ParameterInfo = SMS_Site.SiteCode=\FRG\;
ProviderName = ExtnProv;
StatusCode = 2147749889;
Thank you
Brandon
Re: [mssms] Application Not in App Catalog
I have no idea either. Let us know if you figure something out. I haven't had much luck - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Thu, Nov 20, 2014 at 3:34 PM, Jeff Poling jeffrey.d.pol...@outlook.com wrote: Well, I am still learning patience, so I went ahead and copied my application. Then I deployed that new (really the same) app as available to the same collection. The copied app now shows up in the app catalog. . . . I have no idea why that worked. . .any ideas on what logs or where I can look to see what went wrong with the original app/deployment? Thanks, Jeff -- From: dwayne.al...@gmail.com Date: Thu, 20 Nov 2014 14:04:30 -0600 Subject: Re: [mssms] Application Not in App Catalog To: mssms@lists.myitforum.com I have seen that before, assuming you've validated that your account is actually in the collection it is deployed to. :) I've waited for hours for one to show up only to finally give up and go home and then it was there in the morning. Sometimes it seems like you just have to go out an recreate the application. You can try running 'exec usp_BuildCatalogPropertyTable' from SQL If there is an DB issue rebuildling the catalog that will let you see it. But I think under heavy load it can just take a while. - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Thu, Nov 20, 2014 at 1:14 PM, Jeff Poling jeffrey.d.pol...@outlook.com wrote: Feeling a little dumb here. . .I have an application in ConfigMgr 2012 R2. Single deployment type, user experience is set to install for system whether or not a user is logged in. I deployed it to a user collection. The application is not showing in the application catalog after at least an hour. I can't find any reference to the application in the app*.log files. . . Has anyone seen this before? What am I missing? Thanks, Jeff
Re: [mssms] RE: Patch/WIM Injection
But what does that buy you over having an apply software updates step in your task sequence? - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Wed, Oct 29, 2014 at 8:40 AM, Jason Wallace jaso...@outlook.com wrote: They are deployed as the OS boots for the first time so from a security perspective it is better than having a vulnerable system on the LAN while updates are deployed. On 29 Oct 2014, at 14:08, Bradley, Matt mbrad...@quiktrip.com wrote: When you say not all updates can be injected, do you mean things like Office updates, or are there others that a person would miss? I also didn’t realize injecting the updates to the image didn’t actually install them. If they are only the installed after an OSD, then I’m even more inclined not to inject. I might image two PC’s as a test, one with the patches already installed, one with them injected, and see which one builds faster. *From:* listsad...@lists.myitforum.com [ mailto:listsad...@lists.myitforum.com listsad...@lists.myitforum.com] *On Behalf Of *Jason Sandys *Sent:* Tuesday, October 28, 2014 10:06 AM *To:* mssms@lists.myitforum.com *Subject:* [mssms] RE: Patch/WIM Injection First, not all updates can be injected into a WIM so even if you do employ image servicing, it is not sufficient to deploy a fully patched image. Thus, you really should be capturing a new image periodically no matter what – if you are using a build and capture task sequence (whether in MDT or ConfigMgr) then this is a trivial task (beware of the double reboots in ConfigMgr though L). Offline servicing in ConfigMgr has had issues (not really ConfigMgr’s fault to my knowledge but that’s beside the point) and is why some/many people shy away from using image servicing. Also note that image servicing doesn’t actually install the updates. It merely injects them into the WIM for installation during Windows Setup so it really doesn’t save you as much as you think it does in terms of time or space. J *From:* listsad...@lists.myitforum.com [ mailto:listsad...@lists.myitforum.com listsad...@lists.myitforum.com] *On Behalf Of *Bradley, Matt *Sent:* Tuesday, October 28, 2014 9:55 AM *To:* mssms@lists.myitforum.com *Subject:* [mssms] Patch/WIM Injection I’ve read that some people do not like injecting monthly patches directly into the OS WIM. Some prefer to just capture reference images. Being that a bad patch could be removed from a WIM if it was determined to be bad, I’d like to hear some feedback on why some choose to still stay away from this method, and stay with reference image capture. Thanks.
RE: [mssms] remotely kick off patching
Can someone explain to me the appeal of the Cireson app? I looked at it yesterday but it didn't look like it did anything you can't already do with Roger's Client Center tool (other than list printers). On Oct 17, 2014 8:12 AM, Rod Trent rodtr...@myitforum.com wrote: Or, Cireson’s new app. It’s free and based off Roger’s stuff. http://windowsitpro.com/configuration-manager/cireson-releases-its-first-integrated-sccm-solution-nod-roger-zanders-work *From:* listsad...@lists.myitforum.com [mailto: listsad...@lists.myitforum.com] *On Behalf Of *Rickym61 *Sent:* Friday, October 17, 2014 8:54 AM *To:* mssms@lists.myitforum.com *Subject:* Re: [mssms] remotely kick off patching How about Raoger Zander's Collection Commander for Configuration Manager 2012 https://cmcollctr.codeplex.com/ https://cmcollctr.codeplex.com/ On 17 October 2014 13:42, SCCM FUN sccm...@hotmail.com wrote: I have a request from support to be able to remotely kick off patching on multiple machines via powershell. I can't script my way out of a paper bag and my google fu is failing me today. The patching deployments are all set as required but the desktops are in maintenance windows. They can do this from software center if they RDP into the box but want the same functionality from a script that they can target to multiple machines. Thanks
Re: [mssms] right click tools
I use the ones from Now Micro. On Oct 17, 2014 8:20 AM, Mote, Todd mo...@austin.utexas.edu wrote: What’re the right click tools du jour? I have oldish ones right now and was using them just now to clear the cache on some servers, and wondered what everybody was using these days? Todd
RE: [mssms] SCCM 2012 + SUP Help
When you set up your SUP have it use the WSUS server as an upstream source instead of Microsoft On Oct 1, 2014 10:24 AM, Charles Hiland chil...@mathematica-mpr.com wrote: Jason, you are correct in saying that I want SCCM to synchronize updates from our existing WSUS machine. -Charles *From:* listsad...@lists.myitforum.com [mailto: listsad...@lists.myitforum.com] *On Behalf Of *Jason Wallace *Sent:* Wednesday, October 01, 2014 11:03 AM *To:* mssms@lists.myitforum.com *Subject:* RE: [mssms] SCCM 2012 + SUP Help Hi Charles To summarise, are you saying that you want to use SCCM for management but you DO NOT want SCCM to deploy software updates to SCCM clients? If this is the case then you simply do not enable the Software Updates policy in SCCM and clients will take WSUS settings from Group Policy or however else it is that you wish to deliver them. In this case SCCM would not be used at all and no content would reside upon your DPs If what you want to achieve is to have your internal WSUS server act as the single point of updates and then have SCCM synchronise some or all updates from this machine then again this is possible. -- From: chil...@mathematica-mpr.com To: mssms@lists.myITforum.com Date: Wed, 1 Oct 2014 10:42:45 -0400 Subject: [mssms] SCCM 2012 + SUP Help I’m looking to set up SUP on our SCCM 2012 primary server (we also have 6 DPs located in other offices). We currently have a stand-alone WSUS server that handles Windows updates for servers and clients. That being said, we don’t have the CALs to support servers via SCCM, so this setup would be strictly for workstation systems. Does anyone have any steps for setting this up? Google has plenty of results for if WSUS is going to run on the SCCM server, but what I’m trying to do is use the SCCM server to pull updates from our WSUS server. Any help is greatly appreciated. Thanks. __ *Charles Hiland*
Re: [mssms] SCCM 2012 + SUP Help
Glad to here. Those first syncs can take forever if you have a lot of products selected. When I have to sync a new one I usually plan to let it run overnight - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Wed, Oct 1, 2014 at 11:02 AM, Charles Hiland chil...@mathematica-mpr.com wrote: Updates are moving a long – I may be good from here, but will check back if I run into a wall. Thanks, all! *From:* listsad...@lists.myitforum.com [mailto: listsad...@lists.myitforum.com] *On Behalf Of *Charles Hiland *Sent:* Wednesday, October 01, 2014 11:54 AM *To:* mssms@lists.myitforum.com *Subject:* RE: [mssms] SCCM 2012 + SUP Help I’ve installed WSUS on my primary SCCM server and configured the WSUS update source to point to my current WSUS server. I’m performing a sync at the moment, but it’s taking its time… Still @ 0% and has been running for only a few minutes. I think I’m on the right track, no? *From:* listsad...@lists.myitforum.com [ mailto:listsad...@lists.myitforum.com listsad...@lists.myitforum.com] *On Behalf Of *Jason Wallace *Sent:* Wednesday, October 01, 2014 11:48 AM *To:* mssms@lists.myitforum.com *Subject:* RE: [mssms] SCCM 2012 + SUP Help This article discussed repurposing a WSUS server. Charles is wanting to retain his existing WSUS server and to synch from it. From a CM site you will still need to install WSUS and set it up as a SUP, then you will configure synchs to come from an upstream WSUS server. -- From: jb...@santabarbaraca.gov To: mssms@lists.myitforum.com Subject: RE: [mssms] SCCM 2012 + SUP Help Date: Wed, 1 Oct 2014 15:36:37 + Charles, You might want take a look this: http://social.technet.microsoft.com/Forums/en-US/1f6962ab-7f7a-4b1c-b950-1184b3babfaf/sccm-and-standalone-wsus-server-integration?forum=configmanagerdeployment *From:* listsad...@lists.myitforum.com [ mailto:listsad...@lists.myitforum.com listsad...@lists.myitforum.com] *On Behalf Of *Dwayne Allen *Sent:* Wednesday, October 01, 2014 8:31 AM *To:* mssms@lists.myitforum.com *Subject:* RE: [mssms] SCCM 2012 + SUP Help When you set up your SUP have it use the WSUS server as an upstream source instead of Microsoft On Oct 1, 2014 10:24 AM, Charles Hiland chil...@mathematica-mpr.com wrote: Jason, you are correct in saying that I want SCCM to synchronize updates from our existing WSUS machine. -Charles *From:* listsad...@lists.myitforum.com [mailto: listsad...@lists.myitforum.com] *On Behalf Of *Jason Wallace *Sent:* Wednesday, October 01, 2014 11:03 AM *To:* mssms@lists.myitforum.com *Subject:* RE: [mssms] SCCM 2012 + SUP Help Hi Charles To summarise, are you saying that you want to use SCCM for management but you DO NOT want SCCM to deploy software updates to SCCM clients? If this is the case then you simply do not enable the Software Updates policy in SCCM and clients will take WSUS settings from Group Policy or however else it is that you wish to deliver them. In this case SCCM would not be used at all and no content would reside upon your DPs If what you want to achieve is to have your internal WSUS server act as the single point of updates and then have SCCM synchronise some or all updates from this machine then again this is possible. -- From: chil...@mathematica-mpr.com To: mssms@lists.myITforum.com Date: Wed, 1 Oct 2014 10:42:45 -0400 Subject: [mssms] SCCM 2012 + SUP Help I’m looking to set up SUP on our SCCM 2012 primary server (we also have 6 DPs located in other offices). We currently have a stand-alone WSUS server that handles Windows updates for servers and clients. That being said, we don’t have the CALs to support servers via SCCM, so this setup would be strictly for workstation systems. Does anyone have any steps for setting this up? Google has plenty of results for if WSUS is going to run on the SCCM server, but what I’m trying to do is use the SCCM server to pull updates from our WSUS server. Any help is greatly appreciated. Thanks. __ *Charles Hiland*
Re: [mssms] Identifying which deployment package a software update is in
Actually, with a little help from this post http://sccmosd.blogspot.fr/2014/01/powershell-script-to-find-in-which.html I was able to come up with a pretty simple WQL query. You were right that there was an intermediate step, but it was to tie it to a contentID not an update group. Select PKG.Name from SMS_SoftwareUpdatesPackage PKG join SMS_PackagetoContent P2C on P2C.PackageID = PKG.PackageID join SMS_CItoContent C2C on C2C.ContentID = P2C.ContentID where C2C.CI_UniqueID = '$CI_UniqueID' - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Tue, Sep 16, 2014 at 10:31 AM, Daniel Ratliff dratl...@humana.com wrote: I don’t think there will be, you will need to get the SUGs the software update are in then tie that to the package. *Daniel Ratliff* *From:* listsad...@lists.myitforum.com [mailto: listsad...@lists.myitforum.com] *On Behalf Of *Dwayne Allen *Sent:* Tuesday, September 16, 2014 11:04 AM *To:* mssms@lists.myitforum.com *Subject:* [mssms] Identifying which deployment package a software update is in Does anyone have a good WQL query for tying a software update to the deployment packages it is in? I can't seem to find a class that ties them together - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 The information transmitted is intended only for the person or entity to which it is addressed and may contain CONFIDENTIAL material. If you receive this material/information in error, please contact the sender and delete or destroy the material/information.
Re: [mssms] Upgrade Order for Service Center 2012 R2
We upgraded to SCCM 2012 2 years and just now upgrade SCOM. We never had any issues. There are some things you can't do in 2007 that 2012 brings, but you can definitely monitory SCCM 2012 with SCOM 2007 - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Wed, Aug 27, 2014 at 12:43 PM, Lindenfeld, Ivan ivan.lindenf...@fnf.com wrote: We are moving toward upgrading SCCM 2012 to R2. Our SCOM team won’t be ready to upgrade before we do SCCM, which is against the order prescribed by Microsoft. I cannot see why SCCM has a dependency on SCOM being first. Anyone with experience able to enlighten me? We don’t have any connectors between SCOM and SCCM and the only relationship I can find is the management pack for SCCM. We have already upgraded SCSM and SCORCH to R2. Thank you. Ivan Lindenfeld Manager, Enterprise Deployment/SCCM Fidelity National Financial | Jacksonville, Florida -- NOTICE: The information contained in this message is proprietary and/or confidential and may be privileged. If you are not the intended recipient of this communication, you are hereby notified to: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately.
Re: [mssms] RegKeytoMOF question
My first thought is to write a script that can intelligently parse those registry entries into something consistent and insert it back into the registry and inventory that data instead. You can also do a little bit of a psuedo-inventory process with CI's because the script output is reported to the database. So you can write a script that returns a failure if the data is missing or returns the data you are looking for if it exists. I've done something similar to check and report on non-standard iTunes folders. - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Wed, Aug 27, 2014 at 4:01 PM, Murray, Mike mmur...@csuchico.edu wrote: Yes. However, I’d also like to inventory them as well if possible. I’m not 100% sure other Oracle apps don’t use this same reg key. Mike *From:* listsad...@lists.myitforum.com [mailto: listsad...@lists.myitforum.com] *On Behalf Of *Jason Wallace *Sent:* Wednesday, August 27, 2014 1:58 PM *To:* mssms@lists.myitforum.com *Subject:* Re: [mssms] RegKeytoMOF question What is the purpose? Are you looking to build a binary - if there is something here then the old client exists? If so then Compliance Settings might just be the way to go On 27 Aug 2014, at 21:38, Murray, Mike mmur...@csuchico.edu wrote: One of our Oracle guys wants me to inventory all computers that have some old Oracle client on them. The only way to find these is via registry values, there’s no ARP entries. He says these values will not be consistent, and there could be many. However, they would all reside under HKLM\Software\Wow6432Node\Oracle. Is it possible to dynamically collect everything under this key? Best Regards, Mike Murray Desktop Management Coordinator - IT Support Services California State University, Chico 530.898.4357 mmur...@csuchico.edu
Re: [mssms] Queued DTS Jobs
Dumb question. IS your DP online?
-
Dwayne Allen
dwayne.al...@gmail.com
(479) 310-0027
On Wed, Aug 27, 2014 at 3:41 PM, Jim Walker jim.wal...@paccar.com wrote:
Hey folks,
Any idea why DataTransferService might be indefinitely queuing up jobs?
Ex:
DTSJob {0ECC0FD1-96BE-43FC-9CA2-0E32019D3C09} in state 'Queued'.
Re: [mssms] How do I warn end-users before installing Java
Have you looked at the Powershell App Deployment Toolkit? It can prompt users to close active processes. https://psappdeploytoolkit.codeplex.com/ -Dwayne Allen - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Mon, Aug 25, 2014 at 9:56 AM, Jeff Gortney jeff.gort...@fivesgroup.com wrote: Everyone, I want to start pushing out Java 7 update 65 to my users. I have done this in the past by just installing he MSI but running this MSI doesn’t close IE, so the new version of Java isn’t enabled because IE is still running when Java is updated. I have figured out how to force close IE, Chrome, and Firefox before Java is updated, but how do I warn users that their browser will be closed? I looked at a task sequence but that is only useful if I am restarting the PC not force closing an application. Does anyone have any suggestions? [image: https://portal.fivesgroup.com/FIRSTspiritWeb/fivesportal/media/images_for_content/fives_1/signatures/logo_tagline.png] *Jeff GORTNEY * Systems and Network Support Specialist *— Combustion * *Fives North American Combustion Inc. * 4455 East 71st Street Cleveland, Ohio, 44105-5600* - United States* Tel: +1 216 206 5508 Fax: +1 216 641 7852 jeff.gort...@fivesgroup.com www.fivesgroup.com [image: https://portal.fivesgroup.com/FIRSTspiritWeb/fivesportal/media/images_for_content/fives_1/signatures/signature_facebook.png] https://www.facebook.com/pages/Fives/278132595611080[image: https://portal.fivesgroup.com/FIRSTspiritWeb/fivesportal/media/images_for_content/fives_1/signatures/signature_linkedin.png] http://www.linkedin.com/company/fives?trk=top_nav_home *This message and any attachments are confidential and for the sole attention of the addressees. Any unauthorized use or dissemination is prohibited.* Ce message et toutes pièces jointes sont confidentiels et à l'attention exclusive de ses destinataires.Toute utilisation ou diffusion non autorisée est interdite. *Please think about the environment before printing this e-mail.* // Merci de penser à l'environnement avant d'imprimer cet e-mail.
Re: [mssms] How do I warn end-users before installing Java
Great! Glad I could help - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Mon, Aug 25, 2014 at 4:04 PM, Jeff Gortney jeff.gort...@fivesgroup.com wrote: I just did a test deploy of Java 7 Update 65 with the Powershell App Deployment Toolkit! It works!! I have a feeling that I am now going to start using this to do all application deployment from here on out. Thanks for the suggestion! [image: https://portal.fivesgroup.com/FIRSTspiritWeb/fivesportal/media/images_for_content/fives_1/signatures/logo_tagline.png] *Jeff GORTNEY * Systems and Network Support Specialist *— Combustion * *Fives North American Combustion Inc. * 4455 East 71st Street Cleveland, Ohio, 44105-5600* - United States* Tel: +1 216 206 5508 Fax: +1 216 641 7852 jeff.gort...@fivesgroup.com www.fivesgroup.com [image: https://portal.fivesgroup.com/FIRSTspiritWeb/fivesportal/media/images_for_content/fives_1/signatures/signature_facebook.png] https://www.facebook.com/pages/Fives/278132595611080[image: https://portal.fivesgroup.com/FIRSTspiritWeb/fivesportal/media/images_for_content/fives_1/signatures/signature_linkedin.png] http://www.linkedin.com/company/fives?trk=top_nav_home *This message and any attachments are confidential and for the sole attention of the addressees. Any unauthorized use or dissemination is prohibited.* Ce message et toutes pièces jointes sont confidentiels et à l'attention exclusive de ses destinataires.Toute utilisation ou diffusion non autorisée est interdite. *Please think about the environment before printing this e-mail.* // Merci de penser à l'environnement avant d'imprimer cet e-mail. *From:* listsad...@lists.myitforum.com [mailto: listsad...@lists.myitforum.com] *On Behalf Of *Murray, Mike *Sent:* Monday, August 25, 2014 1:52 PM *To:* mssms@lists.myitforum.com *Subject:* RE: [mssms] How do I warn end-users before installing Java +1 on this. Works GREAT. *From:* listsad...@lists.myitforum.com [ mailto:listsad...@lists.myitforum.com listsad...@lists.myitforum.com] *On Behalf Of *Dwayne Allen *Sent:* Monday, August 25, 2014 8:04 AM *To:* mssms@lists.myitforum.com *Subject:* Re: [mssms] How do I warn end-users before installing Java Have you looked at the Powershell App Deployment Toolkit? It can prompt users to close active processes. https://psappdeploytoolkit.codeplex.com/ -Dwayne Allen - Dwayne Allen dwayne.al...@gmail.com (479) 310-0027 On Mon, Aug 25, 2014 at 9:56 AM, Jeff Gortney jeff.gort...@fivesgroup.com wrote: Everyone, I want to start pushing out Java 7 update 65 to my users. I have done this in the past by just installing he MSI but running this MSI doesn’t close IE, so the new version of Java isn’t enabled because IE is still running when Java is updated. I have figured out how to force close IE, Chrome, and Firefox before Java is updated, but how do I warn users that their browser will be closed? I looked at a task sequence but that is only useful if I am restarting the PC not force closing an application. Does anyone have any suggestions? [image: https://portal.fivesgroup.com/FIRSTspiritWeb/fivesportal/media/images_for_content/fives_1/signatures/logo_tagline.png] *Jeff GORTNEY * Systems and Network Support Specialist *— Combustion* *Fives North American Combustion Inc. * 4455 East 71st Street Cleveland, Ohio, 44105-5600* - United States* Tel: +1 216 206 5508 Fax: +1 216 641 7852 jeff.gort...@fivesgroup.com www.fivesgroup.com [image: https://portal.fivesgroup.com/FIRSTspiritWeb/fivesportal/media/images_for_content/fives_1/signatures/signature_facebook.png] https://www.facebook.com/pages/Fives/278132595611080[image: https://portal.fivesgroup.com/FIRSTspiritWeb/fivesportal/media/images_for_content/fives_1/signatures/signature_linkedin.png] http://www.linkedin.com/company/fives?trk=top_nav_home *This message and any attachments are confidential and for the sole attention of the addressees. Any unauthorized use or dissemination is prohibited.* Ce message et toutes pièces jointes sont confidentiels et à l'attention exclusive de ses destinataires.Toute utilisation ou diffusion non autorisée est interdite. *Please think about the environment before printing this e-mail.* // Merci de penser à l'environnement avant d'imprimer cet e-mail.
