Re: [mssms] Unsubscribe mssms

[Jason Wallace]

Not this way.

Follow the instructions on the email which you received when you joined

Sent from my iPhone

On 22 Aug 2017, at 21:14, Cochran, Colin 
> wrote:

Unsubscribe mssms

Regards,
Colin.

Colin Cochran
Senior IT Technical Specialist, Equiniti IT
T +44 01903 698518 | M +44 077383 10606 | E 
colin.coch...@equiniti.com

Equiniti Group plc, Highdown House, Yeoman Way, Worthing, West Sussex, BN99 3HH
www.equiniti.com






The information contained in this message is confidential and is intended for 
the addressee(s) only. If you are not the intended recipient of this e-mail, 
please notify the originator immediately. The unauthorised use, disclosure, 
copying or alteration of this message is strictly forbidden. Equiniti will not 
be liable for direct, special, indirect or consequential damages as a result of 
any virus being passed on, or arising from alteration of the contents of this 
message by a third party.

To find out more about Equiniti, visit our web site at http://www.equiniti.com

Equiniti Limited and Equiniti Financial Services Limited Registered Office: 
Aspect House, Spencer Road, Lancing, West Sussex, BN99 6DA. Tel: 0345 607 6838

Registered in England and Wales no. 6226088 Equiniti Limited

Registered in England and Wales no. 6208699 Equiniti Financial Services Limited 
is authorised and regulated by the Financial Conduct Authority.

Re: [mssms] TEST

[Jason Wallace]

Icles - yes

Sent from my iPhone

On 26 May 2017, at 09:49, Mawdsley R. 
> wrote:

1-2-1-2 can you hear me?

Replied to this thread yesterday saying check AHCI but I don’t think even I 
received it back..

Thank you
Rich

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Michael K Murray
Sent: 25 May 2017 17:10
To: mssms@lists.myitforum.com
Subject: RE: [mssms] m.2 and win10 OSD

It ended up being the SATA mode. It came set to RAID, once we switched to AHCI 
it was recognized.

http://www.dell.com/support/article/us/en/19/SLN301036/windows-10-install-with-nvme-ssd-and-sata-drives?lang=EN

Mike

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Morris, Spencer
Sent: Thursday, May 25, 2017 4:04 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] m.2 and win10 OSD

Mike, it sounds like you’re missing storage drivers.

Give this a try:

Put a pause right before format and partition disk - http://kjaerit.com/?p=297

Copy the two storage drivers to a usb stick - iaAHCIC.inf and iaStorAC.inf

Open up a command prompt and try to load one of the drivers then run disk part, 
whichever one makes the disk show up will be the one you will want to add to 
your boot image.



From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Mike Dougherty
Sent: Wednesday, May 24, 2017 11:55 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] m.2 and win10 OSD

m.2 is a drive form factor, not necessarily a drive "communication" type.
is the m.2 drive NVMe? or sata?

is the machine itself configured for UEFI booting? Legacy Boot/CSM support? 
SecureBoot enabled?
is there an NVMe setting in the bios/setup?
does the system/BIOS itself recognize a hard drive is attached?

the fact that diskpart doesn't list a drive in winpe when you run it indicates 
you're either missing winpe drivers/bios settings or you have bad hardware.

what version of the ADK are you running?
have you updated the drivers in your boot media recently?


On Wed, May 24, 2017 at 5:34 PM, Michael K Murray 
> wrote:
Hey folks,

We’re trying to image an OptiPlex 7050 that has a 500GB m.2 card. It gets to 
the partition step and fails, as it doesn’t recognize any disk. Running 
diskpart at a command prompt shows no disks. I’ve Googled like crazy, but only 
seem to find Windows 7 articles. We’re trying to image with Win10. Log attached.


Best Regards,

Mike Murray
Desktop Engineer/IT Consultant - IT Support Services
California State University, Chico
530.898.4357
mmur...@csuchico.edu

Remember, Chico State will NEVER ask you for your password via email!
For more information about recognizing phishing scam emails go to: 
http://www.csuchico.edu/isec/basics/spam-and-phishing.shtml





[2016 Design Firm of the Year]   [WRA 100 Years]

The information supplied in this message may be privileged, confidential and/or 
exempt from disclosure under applicable law. If you are not the intended 
recipient of this message, the sender does not intend delivery to you to waive 
any privilege or right pertaining to this message. You have no right to retain, 
disseminate, copy or disclose the material contained herein. If you have 
received this message in error, please immediately notify the sender by return 
e-mail, and delete the errant message. Thank you.
WRA_Disclaimer_v20070222a

Re: [mssms] test

[Jason Wallace]

Icles

Yes

Sent from my iPhone

On 4 May 2017, at 22:19, John Marcum 
> wrote:

Is thing on?

Re: [EXTERNAL] [mssms] Database compatibility

[Jason Wallace]

Yes, I have been there and getting this right is like night and day.  From a 
user experience perspective you'll see really horrible Software Center 
performance



From: listsad...@lists.myitforum.com  on behalf 
of Spengler, Jeff 
Sent: 21 March 2017 19:36
To: mssms@lists.myitforum.com
Subject: Re: [EXTERNAL] [mssms] Database compatibility

Take a look at this KB.
https://support.microsoft.com/en-nz/help/3196320/sql-query-times-out-or-console-slow-on-certain-configuration-manager-database-queries
SQL query times out or console slow on certain 
...
support.microsoft.com
Describes a scenario in you may experience slow Configuration Manager console 
performance or unusual SQL query timeouts for certain Configuration Manager 
database ...




SQL Server version

Supported compatibility level values

Recommended compatibility level for ConfigMgr

SQL Server 2016

130, 120, 110, 100

130

SQL Server 2014

120, 110, 100

110





From: "listsad...@lists.myitforum.com"  on 
behalf of "Heaton, Joseph@Wildlife" 
Reply-To: "mssms@lists.myitforum.com" 
Date: Tuesday, March 21, 2017 at 12:14 PM
To: "'mssms@lists.myitforum.com'" 
Subject: [EXTERNAL] [mssms] Database compatibility

CM1610
SQL 2014

My SQL Dba just came over and mentioned that my SCCM databases are in 2008 
compatibility mode.  She asked if it would be ok to change that, and I said I 
don’t know.  WSUS is installed on this server as well.  Are there any 
requirements for compatibility mode?  Also, I was told that named pipes are 
disabled.  Any reason/need to have it disabled?

Joe Heaton
Information Technology Operations Branch
Data and Technology Division
CA Department of Fish and Wildlife
1700 9th Street, 3rd Floor
Sacramento, CA  95811
Desk:  (916) 323-1284

Every Californian should conserve water.  Find out how at:
[aveOurWater_Logo]
SaveOurWater.com · 
Drought.CA.gov
California Drought Portal
drought.ca.gov
California State Climatologist: Do Not Count on El Niño to End Drought. August 
13, 2015 - State Climatologist Michael Anderson said today that California 
cannot ...


Home - Save Our Water
saveourwater.com
Conservation Lifestyle Good Habits. Californians have made great strides in 
their commitment to water conservation and are embracing wise water use as a 
daily habit.





-






This transmission may contain information that is privileged, confidential 
and/or exempt from disclosure under

applicable law.  If you are not the intended recipient, you are hereby notified 
that any disclosure, copying,

distribution, or use of the information contained herein (including any 
reliance thereon) is STRICTLY PROHIBITED. If

you received this transmission in error, please immediately contact the sender 
and destroy the material in its

entirety, whether in electronic or hard copy format.  Thank you.



-

Re: [mssms] RE: Airwatch Connect Presentation - SCCM is a dead-end?

[Jason Wallace]

Or, if he says that a soon to be ex Microsoft employee

Sent from my iPhone

> On 24 Jan 2017, at 21:08, Marcum, John  wrote:
> 
> He may be a former Microsoft employee. LOL
> 
> Typos compliments of Siri
> Sent from my iOS device
> 
> On Jan 24, 2017, at 2:47 PM, Ryan 
> > wrote:
> 
> [External Email]
> 
> Think of this logically, SCCM is THE market leader. It manages something like 
> 70% of all corporate windows computers in the world. Why would Microsoft look 
> at that cash cow and say "I'm sick of making money, let's let someone else do 
> that!"
> 
> SCCM is not going away. I'd be very interested to see if they could actually 
> track down the Microsoft employee who said that. My guess is he was misheard 
> and actually said something else.
> 
> Either way, this decision is going to be a huge one for your department that 
> will cost a LOT of money. No decision this big should be made based on 
> something someone heard from a conference from that one guy who probably 
> worked for Microsoft.
> 
> Your supervisor shouldn't be allowed to go to conferences.
> 
> On Tue, Jan 24, 2017 at 2:34 PM Daniel Ratliff 
> > wrote:
> 
> Straight from Brad Anderson, the VP at Microsoft over SCCM.
> 
> 
> 
> Great blog on #ConfigMgr by 
> MVP @pdaalmans from http://brianmadden.com 
>  . 
> #ConfigMgr here to stay and 
> strengthening!
> 
> https://twitter.com/Anderson/status/823948107532505088
> 
> 
> 
> Daniel Ratliff
> 
> 
> 
> From: listsad...@lists.myitforum.com 
> [mailto:listsad...@lists.myitforum.com]
>  On Behalf Of Marable, Mike
> Sent: Tuesday, January 24, 2017 3:11 PM
> To: mssms@lists.myitforum.com
> Subject: [mssms] Airwatch Connect Presentation - SCCM is a dead-end?
> 
> 
> 
> Okay, today my supervisor was making the case for the decision to phase out 
> SCCM.  His whole argument centers on a presentation he saw at AirWatch 
> Connect a few months back.
> 
> 
> 
> The presentation was done by a Microsoft employee and in it he stated that 
> SCCM was a dead-end product and that people should move away from it (and 
> towards AirWatch).
> 
> 
> 
> He couldn’t tell me who this presenter was, but he insists that it was a 
> Microsoft employee.
> 
> 
> 
> That doesn’t jive with what I see and hear, so I’m looking for anyone who may 
> have been to AirWatch Connect this past Fall and could shed some light onto 
> the context.  Because I am sure that the statement was taken way out of 
> context.
> 
> 
> 
> Thanks
> 
> 
> 
> Mike Marable
> 
> Microsoft Systems Engineer Lead
> 
> Enterprise Device Engineering and Management
> 
> MCPS, MCITP, MCTS, MCSA, MCSE, MS  [ 
> Profile ] [ 
> Blog ]
> 
> 
> 
> "To live is the rarest thing in the world. Most people exist, that is all."
> 
> -Oscar Wilde
> 
> 
> 
> "If we wonder often, the gift of knowledge will come."
> 
> -Arapaho Proverb
> 
> 
> 
> "Be willing to give up who you are now for what you can become."
> 
> -Unknown
> 
> 
> 
> 
> 
> 
> 
> **
> Electronic Mail is not secure, may not be read every day, and should not be 
> used for urgent or sensitive issues
> 
> 
> 
> The information transmitted is intended only for the person or entity to 
> which it is addressed
> and may contain CONFIDENTIAL material. If you receive this 
> material/information in error,
> please contact the sender and delete or destroy the material/information.
> 
> 
> 
> 
> 
> 
> 
> Confidentiality Notice: This e-mail is from a law firm and may be protected 
> by the attorney-client or work product privileges. If you have received this 
> message in error, please notify the sender by replying to this e-mail and 
> then delete it from your computer.
> 
> 
> 
> 
> 

Re: [mssms] RE: ccmexec calling http://crl.microsoft.com/pki blah blah

[Jason Wallace]

I had read his question more as to why an internal service would need to go to 
The Internet.

Sent from my iPhone

> On 14 Sep 2016, at 19:34, Nash Pherson  wrote:
> 
> That's a Certificate Revocation List. Your security folks should know what 
> that is any why it is important.
> 
> -Original Message-
> From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
> On Behalf Of Stuart Watret
> Sent: Wednesday, September 14, 2016 10:30 AM
> To:  
> Subject: [mssms] ccmexec calling http://crl.microsoft.com/pki blah blah
> 
> In a sensitive area, I’m being asked why this is happening.
> 
> Thoughts? Some kind of code/script signing check?
> 
> 
> Stuart
> 

[mssms] Cloud DP - a few niggles

[Jason Wallace]

Hi there folks

I'm just throwing out a bunch of content at a CloudDP and I wanted to ask for 
folks' experiences in this respect.

When I throw this over the wall I can see Package Xgf Manager madly uploading 
content to the cloud DP. I can see that content hitting my Azure blob storage.

I then see, however a bunch of messages in package Xfr Manager along the lines 
of

404 messages
Zero content
URL too long

Which are seemingly random

When this happens the content goes into error.  At some point in time it will 
be retried and may or may not succeed that time.

The net result is that I am sending that same content over and over again and 
seeing content cycle from error to in progress and back again.  If I watch 
applications they appear to succeed at one every 3 minutes or so.

However, at a certain time of the day (like 5am) I see lots of failures turn to 
success in a matter of 30 minutes. This looks related to my CloudDP.log file so 
it looks like there is some kind of cleanup task going on.

What is that task?
How often does it run?
How can I trigger it manually?

Ta

Sent from my iPhone

Re: [mssms] Sloooow App Catalog

[Jason Wallace]

We we had a weird one.

We are running SQL 2014 and installed in native.  We changed DB compatibility 
to 110 and the errant sproc started to behave 

Sent from my iPhone

> On 12 Sep 2016, at 16:51, Mike.Davis <mike.da...@open.ac.uk> wrote:
> 
> It was definitely supersedence in our case - we had configured each new Flash 
> version to supersede the previous versions and it was getting overloaded 
> (AppIntentEval just contained long lists of deployment types which had been 
> superseded). I've cleared out most of the supersedence entries and it seems 
> to be resolved.
> 
> Mike
> 
>> -Original Message-
>> From: listsad...@lists.myitforum.com
>> [mailto:listsad...@lists.myitforum.com] On Behalf Of Mike.Davis
>> Sent: 08 September 2016 17:21
>> To: mssms@lists.myitforum.com
>> Subject: RE: [mssms] Slw App Catalog
>> 
>> We've been having similar-sounding issues [roughly] since we upgraded to
>> 1602 - not resolved in 1607. Symptom is that an App Catalog install fails 
>> while
>> trying to evaluate requirements. Other app install actions (Software Centre,
>> required deployments) are still working, but general performance is not
>> great (despite 32GB RAM on the site server, I think 20GB max RAM for SQL
>> with 11,000 devices) - not sure if the App Catalog issues are related to 
>> overall
>> performance or separate.
>> 
>> We've found (and since mislaid) a reference to a Microsoft-recommended
>> limit to the use of supersedence and we're wondering if this processing is
>> causing the delay - no other obvious ideas at this point.
>> 
>> I'll try to confirm what you've mentioned below if I can work out how :)
>> 
>> Mike
>> 
>>> -Original Message-
>>> From: listsad...@lists.myitforum.com
>>> [mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Wallace
>>> Sent: 08 September 2016 15:06
>>> To: jaswall/edarkosarwa/magzparmenter//pradeepe
>>> <mssms@lists.myitforum.com>
>>> Subject: [mssms] Slw App Catalog
>>> 
>>> Hi folks
>>> 
>>> I have encountered a slow App Catalog and am hoping that some kind folks
>>> would be able to help me out on this please.
>>> 
>>> We are seeing timeouts and I have tracked this back to
>>> 
>>> usp_GetApplicationPropertyValuesFiltered
>>> 
>>> Which is taking 1:26 to run.
>>> 
>>> This sproc is calling respolicycollmap which in this case has 84 million 
>>> rows
>>> 
>>> Any thoughts how I can improve this perf?
>>> 
>>> Sent from my iPhone
>> 
>> -- The Open University is incorporated by Royal Charter (RC 000391), an
>> exempt charity in England & Wales and a charity registered in Scotland (SC
>> 038302). The Open University is authorised and regulated by the Financial
>> Conduct Authority.
> 
> -- The Open University is incorporated by Royal Charter (RC 000391), an 
> exempt charity in England & Wales and a charity registered in Scotland (SC 
> 038302). The Open University is authorised and regulated by the Financial 
> Conduct Authority.
> 
> 
> 
> 

[mssms] Load balancing App Catalog Website

[Jason Wallace]

Hi folks 

Does anyone know what the skinny is on load balancing app catalog website 
points,

I have 2 on adjacent systems, both working just fine but it seems that all my 
clients hop onto one and not the other.

If I drop the working server then clients will connect (eventually) to the 
second server.

1. Any way of getting them to balance evenly 
2. What's the process by which a client will flip from one to the other?

Thanks 

Sent from my iPhone

Re: [mssms] Sloooow App Catalog

[Jason Wallace]

OK

So I did a SQL trace to pick up the timing out sproc then traced the SPID  to 
find the SQL

In this estate they have a large number of apps targeting all users and I think 
that what is happening is that the SP is trying to process too much data in the 
time frame

Sent from my iPhone

> On 8 Sep 2016, at 17:27, Mike.Davis <mike.da...@open.ac.uk> wrote:
> 
> We've been having similar-sounding issues [roughly] since we upgraded to 1602 
> - not resolved in 1607. Symptom is that an App Catalog install fails while 
> trying to evaluate requirements. Other app install actions (Software Centre, 
> required deployments) are still working, but general performance is not great 
> (despite 32GB RAM on the site server, I think 20GB max RAM for SQL with 
> 11,000 devices) - not sure if the App Catalog issues are related to overall 
> performance or separate.
> 
> We've found (and since mislaid) a reference to a Microsoft-recommended limit 
> to the use of supersedence and we're wondering if this processing is causing 
> the delay - no other obvious ideas at this point.
> 
> I'll try to confirm what you've mentioned below if I can work out how :)
> 
> Mike
> 
>> -Original Message-
>> From: listsad...@lists.myitforum.com
>> [mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Wallace
>> Sent: 08 September 2016 15:06
>> To: jaswall/edarkosarwa/magzparmenter//pradeepe
>> <mssms@lists.myitforum.com>
>> Subject: [mssms] Slw App Catalog
>> 
>> Hi folks
>> 
>> I have encountered a slow App Catalog and am hoping that some kind folks
>> would be able to help me out on this please.
>> 
>> We are seeing timeouts and I have tracked this back to
>> 
>> usp_GetApplicationPropertyValuesFiltered
>> 
>> Which is taking 1:26 to run.
>> 
>> This sproc is calling respolicycollmap which in this case has 84 million rows
>> 
>> Any thoughts how I can improve this perf?
>> 
>> Sent from my iPhone
> 
> -- The Open University is incorporated by Royal Charter (RC 000391), an 
> exempt charity in England & Wales and a charity registered in Scotland (SC 
> 038302). The Open University is authorised and regulated by the Financial 
> Conduct Authority.
> 
> 
> 
> 
> 
> -- The Open University is incorporated by Royal Charter (RC 000391), an 
> exempt charity in England & Wales and a charity registered in Scotland (SC 
> 038302). The Open University is authorised and regulated by the Financial 
> Conduct Authority.
> 
> 
> 
> 

[mssms] Sloooow App Catalog

[Jason Wallace]

Hi folks

I have encountered a slow App Catalog and am hoping that some kind folks would 
be able to help me out on this please.

We are seeing timeouts and I have tracked this back to 

usp_GetApplicationPropertyValuesFiltered

Which is taking 1:26 to run.

This sproc is calling respolicycollmap which in this case has 84 million rows

Any thoughts how I can improve this perf?

Sent from my iPhone

Re: [mssms] DP selection

[Jason Wallace]

And like an idiot he realises his error.

If you have the DP and MP sharing the Default Web Site then you only have the 
ability to support HTTPS on the server when the only binding on default web 
site is HTTPS

Sent from my iPhone

> On 7 Sep 2016, at 15:51, Marcum, John <jmar...@bradley.com> wrote:
> 
> Seems like it should be the other way around:
> 
> Before a client can communicate with a site system role, the client uses 
> service location to find a site system role that supports the client's 
> protocol (HTTP or HTTPS). By default, clients use the most secure method 
> available to them:
> 
> 
> 
> -Original Message-
> From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
> On Behalf Of Jason Wallace
> Sent: Wednesday, September 7, 2016 9:19 AM
> To: jaswall/edarkosarwa/magzparmenter//pradeepe 
> <mssms@lists.myitforum.com>
> Subject: [mssms] DP selection
> 
> Hi folks
> 
> I have 2 systems both configured (as close as I can see it) identically as 
> both DP and MP. The only difference between them is that one of the systems 
> is configured as HTTPS for the MP role while the other is HTTP.
> 
> Looking at IIS logs however one of the DPs (the non HTTPS MP) is serving all 
> content while the other is not.
> 
> Would that be expected?
> 
> Sent from my iPhone
> 
> 
> 
> 
> 
> 
> Confidentiality Notice: This e-mail is from a law firm and may be protected 
> by the attorney-client or work product privileges. If you have received this 
> message in error, please notify the sender by replying to this e-mail and 
> then delete it from your computer.
> 
> 
> 
> 
> 

Re: [mssms] DP selection

[Jason Wallace]

Yes - none of my DPs are enabled for HTTPS but one is on the same box as an MP 
which is.  It is this DP which is not getting hit at all.

Sent from my iPhone

> On 7 Sep 2016, at 15:51, Marcum, John <jmar...@bradley.com> wrote:
> 
> Seems like it should be the other way around:
> 
> Before a client can communicate with a site system role, the client uses 
> service location to find a site system role that supports the client's 
> protocol (HTTP or HTTPS). By default, clients use the most secure method 
> available to them:
> 
> 
> 
> -Original Message-
> From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
> On Behalf Of Jason Wallace
> Sent: Wednesday, September 7, 2016 9:19 AM
> To: jaswall/edarkosarwa/magzparmenter//pradeepe 
> <mssms@lists.myitforum.com>
> Subject: [mssms] DP selection
> 
> Hi folks
> 
> I have 2 systems both configured (as close as I can see it) identically as 
> both DP and MP. The only difference between them is that one of the systems 
> is configured as HTTPS for the MP role while the other is HTTP.
> 
> Looking at IIS logs however one of the DPs (the non HTTPS MP) is serving all 
> content while the other is not.
> 
> Would that be expected?
> 
> Sent from my iPhone
> 
> 
> 
> 
> 
> 
> Confidentiality Notice: This e-mail is from a law firm and may be protected 
> by the attorney-client or work product privileges. If you have received this 
> message in error, please notify the sender by replying to this e-mail and 
> then delete it from your computer.
> 
> 
> 
> 
> 

[mssms] DP selection

[Jason Wallace]

Hi folks

I have 2 systems both configured (as close as I can see it) identically as both 
DP and MP. The only difference between them is that one of the systems is 
configured as HTTPS for the MP role while the other is HTTP.

Looking at IIS logs however one of the DPs (the non HTTPS MP) is serving all 
content while the other is not.

Would that be expected?

Sent from my iPhone

RE: [mssms] SCCM 2012 R2 Compliance

[Jason Wallace]

I think you'll find that this is doing an exact match so in order to be
compliant with this CI you must have BOTH administrators AND Backup
Operators.  You'd need to create a different CI just for Administrators

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Abhijeet Janwalkar
Sent: 25 March 2015 15:11
To: mssms@lists.myitforum.com
Subject: [mssms] SCCM 2012 R2 Compliance

 

Hi All,

I am trying to configure compliance with SCCM 2012 R2. We have our =company
standards which I need to create baselines for.

I used exported Baselines from SCM and imported them to SCCM to re-use the
scripts.

I am using least privilege CI and modified as per my requirement.

The issue is as per my organization standard, I can have more users than
what MS states or are currently available on the server, but it still gives
me as a non-compliant.

Here is the example.

Expression(expected)  Current
Value(on Server)  
Equals Administrators, Backup Operators   Administrators  

 

We can have administrators and backup operators as approved groups while on
the server only Administrators group is present, so the Server is compliant
but it still flags as non-compliant.

I have configured such settings in vRealize Configuration Manager, there we
had Regex Operators (| = or,  = and etc). I tried those but no luck.

Does anyone know any such thing with SCCM.  

Any help is much appreciated.

Thanks in advance.

-- 


Warm Regards,

Abhijeet Janwalkar
Blog: http://abhijeet-janwalkar.blogspot.com

 

RE: [mssms] Which of these options would cause the least impact on our site server?

[Jason Wallace]

I would imagine that it partly depends upon your design and what it is you
are querying against but setting up some tests and then running something
like  against your primary site server will give you the data that you can
use to work it out

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Atkinson, Matt T
Sent: 24 March 2015 16:06
To: mssms@lists.myitforum.com
Subject: [mssms] Which of these options would cause the least impact on our
site server?

 

Need to create 2 pretty large collections for targeting of client settings
(controlling BITS throttling). Is it more efficient to create a lot
(approximately 2000) of small collections and include them in another
collection, or is it better to create one collection with a large number of
different queries to determine membership? Trying to have the least amount
of performance impact on the site server.

 

Matt Atkinson

Client Systems Engineer

3601 Murray Blvd Ste. 175 Beaverton, OR 97005

W: 971-282-0342 C: 503-851-4620

 

 

 

  _  


This message is intended for the sole use of the addressee, and may contain
information that is privileged, confidential and exempt from disclosure
under applicable law. If you are not the addressee you are hereby notified
that you may not use, copy, disclose, or distribute to anyone the message or
any information contained in the message. If you have received this message
in error, please immediately advise the sender by reply email and delete
this message.

 

RE: [mssms] RE: Which of these options would cause the least impact on our site server?

[Jason Wallace]

Also we need to consider whether you are planning to use these queries for
anything else later.

 

I am guessing that since you are looking to configure BITS throttling then
you are likely to be building something around subnet IDs?

 

This being the case then one option would be to create a series of
collections:

 

-Denver Clients - Select * from blah where IP Address LIKE
'192.168.2%'

-Portland Clients - Select * from bla where IP Address LIKE
'192.16..3%'

 

And then make a collection

 

-Clients for BITS throttling - INCLUDE Denver Clients, INCLUDE
Portland Clients

 

At least this would allow you to use the Denver  Portland collections in
other collections too

 

Or you could as you suggest have many queries in one collection

 

Or you could use a single query and the an IS IN with a list of the subnets
that you are after

 

Or you could do something client side with a compliance and settings rule
which checks for the IP subnets and then build collections for compliance 
non-compliance, targeting your revised client settings to these collections

 

Be warned however that if you are planning to BITS throttle AND use
BranchCache then you may be sorely disappointed as BITS throttling affects
BOTH the local subnet and the remote connections (other providers' solutions
work differently)

 

HTH

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Ed Aldrich
Sent: 24 March 2015 17:25
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Which of these options would cause the least impact on
our site server?

 

Offhand I'm thinking the latter, as the addition of 2,000 collections on top
of what already exists may well hammer Collection Evaluator pretty hard
(depending on the frequency of evaluation cycle). OTOH, a single query with
...a large amount of different queries could also hammer SQL quite hard on
that collection's eval cycle... kind of a tough one to judge given what we
know thus far, like how complex are the queries? How well are the queries
optimized to minimize the SQL hit? Etc, etc...

 

Ed Aldrich | Channel Solutions Engineer | 1E

+1 (401) 924-2293

 Ent Cli Mgmt (2003-2014)

Please consider the environment before printing this e-mail

 

From: listsad...@lists.myitforum.com mailto:listsad...@lists.myitforum.com
[mailto:listsad...@lists.myitforum.com] On Behalf Of Atkinson, Matt T
Sent: Tuesday, March 24, 2015 12:06 PM
To: mssms@lists.myitforum.com mailto:mssms@lists.myitforum.com 
Subject: [mssms] Which of these options would cause the least impact on our
site server?

 

Need to create 2 pretty large collections for targeting of client settings
(controlling BITS throttling). Is it more efficient to create a lot
(approximately 2000) of small collections and include them in another
collection, or is it better to create one collection with a large number of
different queries to determine membership? Trying to have the least amount
of performance impact on the site server.

 

Matt Atkinson

Client Systems Engineer

3601 Murray Blvd Ste. 175 Beaverton, OR 97005

W: 971-282-0342 C: 503-851-4620

 

 

 

  _  


This message is intended for the sole use of the addressee, and may contain
information that is privileged, confidential and exempt from disclosure
under applicable law. If you are not the addressee you are hereby notified
that you may not use, copy, disclose, or distribute to anyone the message or
any information contained in the message. If you have received this message
in error, please immediately advise the sender by reply email and delete
this message.

 

 

  _  



Legal Notice: This email is intended only for the person(s) to whom it is
addressed. If you are not an intended recipient and have received this
message in error, please notify the sender immediately by replying to this
email or calling +44(0) 2083269015 (UK) or +1 866 592 4214 (USA). This email
and any attachments may be privileged and/or confidential. The unauthorized
use, disclosure, copying or printing of any information it contains is
strictly prohibited. The opinions expressed in this email are those of the
author and do not necessarily represent the views of 1E Ltd. Nothing in this
email will operate to bind 1E to any order or other contract.

 

RE: [mssms] Expired/Superseded updates

[Jason Wallace]

You should aim to remove them.  CM will then clean up the content stores.
We still keep the downloaded update on the site server should you then need
to deploy it

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Beardsley, James
Sent: 18 March 2015 15:33
To: mssms@lists.myitforum.com
Subject: [mssms] Expired/Superseded updates

 

When updates become either expired or superseded, do you remove them from
your deployment packages to decrease the size of the packages? Or do you
just leave them in there and remove their membership from the SUG so they
are no longer deployed? Or Both? . Or neither? 

 

Just curious what the recommendations are for this common scenario.

 

Thanks,

 

James Beardsley | Firm Technology Group

Dixon Hughes Goodman LLP

 

 http://www.dhgllp.com/ 

 

  _  

Confidentiality Notice: This e-mail is intended only for the addressee named
above. It contains information that is privileged, confidential or otherwise
protected from use and disclosure. If you are not the intended recipient,
you are hereby notified that any review, disclosure, copying, or
dissemination of this transmission, or taking of any action in reliance on
its contents, or other use is strictly prohibited. If you have received this
transmission in error, please reply to the sender listed above immediately
and permanently delete this message from your inbox. Thank you for your
cooperation.

 

[mssms] DCM for Audit Policy

[Jason Wallace]

Hi there folks

 

Wanted to just pose a QQ about CM2007, DCM  audit Policy

 

Sherry blogged
http://myitforum.com/cs2/blogs/skissinger/archive/2009/03/28/computer-gpo-po
licies-applied-mof-edit.aspx a while back and that is great however we are
wanting to simply report using DCM.  This was fine and the word Success was
returned but then the German workstations fell out of compliance because
they were returning Erfolg.  I guess that we could start adding each
language version to the One Of list but does anyone have a more intelligent
(scalable) solution?  I thought about reading direct from WMI - RSOP but
wondered if there was some kind of half-way house?

 

Thanks

Jason

Re: [mssms] RE: App catalog background transfers?

[Jason Wallace]

This is great and is the approach which I prefer. Sadly a fair number of 
customers who I encounter don't believe it.



 On 7 Mar 2015, at 03:23, ccollins9 ccolli...@gmail.com wrote:
 
 Just one another question, we decided years ago that any app that we package 
 and have a site license for, we advertise to All Users as Available and turn 
 off the notifications.  Then If they need an app, we have them click a 
 shortcut on the desktop which opens the application catalog website run by 
 SCCM. They can then pick any app to install or search for the app they want 
 while on the phone with a tech that is walking them through it. We have some 
 users that open the App icon frequently just to see if we've added any apps 
 in there for them to install.  It's a win-win because users only download 
 what they need, so keeping desktops much lighter, and it also kind of 
 empowers them a bit and they don't have to deal with going to helpdesk and 
 waiting on them.  Any app that we want on all desktops we push the 
 appropriate collection and require it.
 
 Is there a reason you wouldn't want to open up majority of your apps to be 
 installed on-demand by the users?
 
 For apps that we have specific license restraints for, like number of users, 
 we target user groups that are controlled via AD or we set the require admin 
 approval on the app.
 
 On Fri, Mar 6, 2015 at 8:07 PM, ccollins9 ccolli...@gmail.com wrote:
 One easy way to do this is to deploy the app to All Users collection as 
 available (NOT required), choose only show notifications for computer 
 restarts, then set the app to require administrator approval.  The helpdesk 
 can go into the console and approve the request, or get someone higher to do 
 it.
 
 As a side note, it's completely possible to lock down the console so 
 helpdesk can have the console to do functions without hurting anything.  
 SCCM works best this way and is designed to be used by Tier 1 up to high 
 level systems admins.  We have interns using it that don't know much about 
 IT in general, but they can only do what we allow them to do via permissions.
 
 http://blogs.technet.com/b/neilp/archive/2012/09/18/system-center-2012-configuration-application-approval-deep-dive-and-automation-part-1.aspx
 
 On Fri, Mar 6, 2015 at 7:55 PM, Atkinson, Matt T 
 matt.atkin...@providence.org wrote:
 I agree, but compared to having a tech visit in person it’s a vast 
 improvement. This is really only for one off installs that need to be done 
 infrequently and on demand, larger deployments are staged and planned out 
 much better than this.
 
  
 
 From: listsad...@lists.myitforum.com 
 [mailto:listsad...@lists.myitforum.com] On Behalf Of Sean Pomeroy
 Sent: Friday, March 06, 2015 3:31 PM
 To: mssms@lists.myitforum.com
 Subject: Re: [mssms] RE: App catalog background transfers?
 
  
 
 Maybe it's just me, but having an IT staff member remote to a PC to 
 manually initiate a software installation kind of defeats the purpose of a 
 system such as this.
 
  
 
 On Fri, Mar 6, 2015 at 6:28 PM Atkinson, Matt T 
 matt.atkin...@providence.org wrote:
 
 Sure it’s possible, but we would either have to expose the SCCM console to 
 desktop support/help desk or rely on them adding AD user accounts to AD 
 groups, then keying the collections based off of the group memberships. 
 Kind of a pain due to wait times for AD discovery and collection evaluation.
 
  
 
 From: listsad...@lists.myitforum.com 
 [mailto:listsad...@lists.myitforum.com] On Behalf Of Kent, Mark
 Sent: Friday, March 06, 2015 2:35 PM
 To: mssms@lists.myitforum.com
 Subject: [mssms] RE: App catalog background transfers?
 
  
 
 What about letting the users themselves run it from the app catalog?  You 
 can control what they see.  And require approvals as well.
 
  
 
 Mark Kent (MCP)
 
 Sr. Desktop Systems Engineer
 
 Computing  Technology Services - SUNY Buffalo State
 
  
 
 From: listsad...@lists.myitforum.com 
 [mailto:listsad...@lists.myitforum.com] On Behalf Of Atkinson, Matt T
 Sent: Friday, March 6, 2015 4:56 PM
 To: mssms@lists.myitforum.com
 Subject: [mssms] App catalog background transfers?
 
  
 
 Coming up against a problem while we are getting our service desk folks up 
 to speed with deploying software using SCCM 2012. Our original plan was to 
 have the tech connect remotely to the machine, login, launch the app 
 catalog with their credentials and start an install from the catalog. Then 
 log out, let the user log back in and continue working while the 
 application finishes downloading.
 
  
 
 This isn’t working in practice, as soon as the tech logs out, the BITS 
 transfer gets queued and won’t resume until the technician is logged in 
 again. Is there any way to work around this? It’s been frustrating running 
 against a wall trying to get a way to let our desktop support folks to 
 install apps for users. Deploying directly to the user accounts or 
 computers themselves would obviously work, but not desirable from our 

Re: [mssms] SCCM 2012 Cummulative Updates

[Jason Wallace]

Yes - but read the release notes and apply any SQL updates there too



 On 5 Mar 2015, at 16:01, Gailfus, Nick nick.gail...@leonagroup.com wrote:
 
 We are currently running SCCM 2012 SP1 with CU 2. Can I just jump up to the 
 latest CU or do I have to apply each one in sequence?
 Nick Gailfus
 Computer Technician
 p. 602.953.2933  f. 602.953.0831
 nick.gail...@leonagroup.com| www.leonagroup.com
 
 
 
 

RE: [mssms] Using SCCM 2012 for Third Party Licensing

[Jason Wallace]

Not wanting to jump on this thread too much but has anyone experience with
Eracent and mind some quick questions?

 

 

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Marcum, John
Sent: 03 March 2015 16:21
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Using SCCM 2012 for Third Party Licensing

 

I have some old blogs on doing license reclamation using it. Also if you
have SCORCH check this out, it's a cool way to do something like Shopping
for free. 

 

http://www.eupsco.nl/HowItWorks

 

We JUST bought Shopping, if I had seen this first I may have tried to use it
instead. It's looks promising.

 

 

 

 

From: listsad...@lists.myitforum.com mailto:listsad...@lists.myitforum.com
[mailto:listsad...@lists.myitforum.com] On Behalf Of Nick sullivan
Sent: Tuesday, March 03, 2015 10:19 AM
To: mssms@lists.myitforum.com mailto:mssms@lists.myitforum.com 
Subject: RE: [mssms] Using SCCM 2012 for Third Party Licensing

 

I'll check this out.  We have SCROCH but have very little knowledge in using
it.  
 
Thanks!
 

  _  

From: jmar...@babc.com mailto:jmar...@babc.com 
To: mssms@lists.myitforum.com mailto:mssms@lists.myitforum.com 
Subject: RE: [mssms] Using SCCM 2012 for Third Party Licensing
Date: Tue, 3 Mar 2015 16:12:02 +

I use BDNA Normalize for this. It works well. You can even reclaim licenses
automatically etc if you have SCROCH.

 

From: listsad...@lists.myitforum.com mailto:listsad...@lists.myitforum.com
[mailto:listsad...@lists.myitforum.com] On Behalf Of Nick sullivan
Sent: Tuesday, March 03, 2015 9:56 AM
To: mssms@lists.myitforum.com mailto:mssms@lists.myitforum.com 
Subject: [mssms] Using SCCM 2012 for Third Party Licensing

 

We are currently looking for the best third party licensing tool to
integrate with SCCM.  Anyone ever used 1E to accomplish this? Or do you have
any suggestions to accomplish this goal?
 
http://myitforum.com/myitforumwp/2012/12/19/sccm-integrated-sam-tools-appcla
rity-and-shopping-by-1e/
 
Thanks,
 
Systems Architect 

 

  _  


Confidentiality Notice: This e-mail is from a law firm and may be protected
by the attorney-client or work product privileges. If you have received this
message in error, please notify the sender by replying to this e-mail and
then delete it from your computer.

 

 

 

Re: [mssms] Servers with client installed

[Jason Wallace]

Open SMSPROV.LOG in CMTrace, refresh the collection and find the WQL/SQL 
combination.

Copy / Paste into SSRS



 On 17 Feb 2015, at 21:37, Brian McDonald mcdonald...@hotmail.com wrote:
 
 Can anyone tell me how to create a report for all servers with the CM12 R2 
 clients installed?
 
 I do have a collection that include servers that have the R2 client installed 
 if this helps.
 
 Thanks!
 
 Brian
 
 Sent from my iPhone
 
 
 

[mssms] SQL query XML

[Jason Wallace]

Hi there folks
 
I wonder if some kind soul would be able to guide me on something which I am 
trying to develop please.
 
I have a SQL query:
 
SELECTfn_AppDeploymentAssetDetails_1.MachineName, 
fn_AppDeploymentAssetDetails_1.CollectionName, 
fn_AppDeploymentAssetDetails_1.AppName, fn_AppDeploymentAssetDetails_1.DTName, 


 fn_AppDeploymentAssetDetails_1.Technology, 
fn_AppDeploymentAssetDetails_1.DeploymentIntent, 
fn_AppDeploymentAssetDetails_1.StartTime, 
fn_AppDeploymentAssetDetails_1.StatusType, 


 fn_AppDeploymentAssetDetails_1.AppStatusType, 
fn_AppDeploymentAssetDetails_1.ComplianceState, 
fn_AppDeploymentAssetDetails_1.EnforcementState, 
fn_AppDeploymentAssetDetails_1.DTResultID, 


 fn_AppDeploymentAssetDetails_1.InstalledState, 
fn_ListDeploymentTypeCIs_1.SDMPackageDigest


FROMdbo.fn_AppDeploymentAssetDetails(1033) AS 
fn_AppDeploymentAssetDetails_1 INNER JOIN


 dbo.fn_ListDeploymentTypeCIs(1033) AS 
fn_ListDeploymentTypeCIs_1 ON fn_AppDeploymentAssetDetails_1.DTCI = 
fn_ListDeploymentTypeCIs_1.CI_ID
 
which shows all of the deployments that I have and then the systems and the 
deployment type that was run.
 
 
The ask from the customer now is for the App-V applications to be able to also 
show the icons published by this deployment type and the manifest file. The 
idea then is to join this with discovery data so that we are able to show that 
the package has streamed down and when the App-V application was last run on 
this system.
 
Of course this would be great were the content not represented in XML held 
within SQL so I wonder if someone can guide on parsing the XML to build some 
rows please?
 
Thanks in advance
 
Jason
  

RE: [mssms] SQL query XML

[Jason Wallace]

That helps immensely Stephen - thank you!
 
I don't understand it but that will add to the fun.
 
Jason
 
From: stephen.leuth...@outlook.com
Subject: Re: [mssms] SQL query  XML
Date: Sat, 14 Feb 2015 09:43:03 -0600
To: mssms@lists.myitforum.com

Does this help? 
http://blogs.technet.com/b/hhoy/archive/2012/07/19/how-to-query-configuration-manager-2012-xml-data-with-sql-xquery.aspx

-Stephen
On Feb 14, 2015, at 9:29 AM, Jason Wallace jaso...@outlook.com wrote:




Hi there folks
 
I wonder if some kind soul would be able to guide me on something which I am 
trying to develop please.
 
I have a SQL query:
 
SELECTfn_AppDeploymentAssetDetails_1.MachineName, 
fn_AppDeploymentAssetDetails_1.CollectionName, 
fn_AppDeploymentAssetDetails_1.AppName, fn_AppDeploymentAssetDetails_1.DTName, 


 fn_AppDeploymentAssetDetails_1.Technology, 
fn_AppDeploymentAssetDetails_1.DeploymentIntent, 
fn_AppDeploymentAssetDetails_1.StartTime, 
fn_AppDeploymentAssetDetails_1.StatusType, 


 fn_AppDeploymentAssetDetails_1.AppStatusType, 
fn_AppDeploymentAssetDetails_1.ComplianceState, 
fn_AppDeploymentAssetDetails_1.EnforcementState, 
fn_AppDeploymentAssetDetails_1.DTResultID, 


 fn_AppDeploymentAssetDetails_1.InstalledState, 
fn_ListDeploymentTypeCIs_1.SDMPackageDigest


FROMdbo.fn_AppDeploymentAssetDetails(1033) AS 
fn_AppDeploymentAssetDetails_1 INNER JOIN


 dbo.fn_ListDeploymentTypeCIs(1033) AS 
fn_ListDeploymentTypeCIs_1 ON fn_AppDeploymentAssetDetails_1.DTCI = 
fn_ListDeploymentTypeCIs_1.CI_ID
 
which shows all of the deployments that I have and then the systems and the 
deployment type that was run.
 
 
The ask from the customer now is for the App-V applications to be able to also 
show the icons published by this deployment type and the manifest file. The 
idea then is to join this with discovery data so that we are able to show that 
the package has streamed down and when the App-V application was last run on 
this system.
 
Of course this would be great were the content not represented in XML held 
within SQL so I wonder if someone can guide on parsing the XML to build some 
rows please?
 
Thanks in advance
 
Jason
  




  

[mssms] Provider use

[Jason Wallace]

Hello folks

 

I wanted to ask a few questions around The Provider and its usage if I may
please.

 

I have a customer with a CAS and 2 PRI sites.  They have quite a complex RBA
model.  They do all management against the CAS.

 

They have 458 installed copies of the CM console and they have a fair number
of administrators.

 

Previously they had a single provider and were experiencing crashes on a
fairly regular basis.

 

Things that we have done to try and alleviate this issue:

 

-We have increased the memory and threads that the provider can use.
This helped a little

-We have introduced a second provider and again this has helped
some.  The main issue with the provider on the CAS still exists.

 

We could of course introduce a third provider and this might help but now we
are in the position where in essence we are stabbing in the dark - there
don't appear to be any good ways to get metrics on concurrent connections or
loading on the provider itself.  The only suggestion that I can make is to
run the provider in its own process and to monitor this.

 

Other things that I want to look at are to reduce the number of consoles
which are deployed in the estate.  There are a fair number of users who are
on support and they really just use remote control.  I know that this still
does make provider connections, but only to check permissions for the user
running it - does anyone have a handle upon how much less intensive this is
than calling from the console?

 

There is a project to implement SCorCH within the organisation and we'll
look to moving some of the workloads into this at some point but does anyone
have any additional ideas?

 

Thanks

 

Jason

RE: [mssms] Provider use

[Jason Wallace]

They ARE at R2 CU1

 

The consoles are, as far as we can tell consistent, yes – they are all App-V 
and we have superseded the old console with an uninstall but will check that 
out – good call.

 

With 400 plus users it’s tough to tell any specific reason but we have seen 
crashes when someone is changing the RBA model.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Daniel Ratliff
Sent: 13 February 2015 12:14
To: 'mssms@lists.myitforum.com'; 'mssms@lists.myitforum.com'
Subject: RE: [mssms] Provider use

 

Got mixed up in my emails. Thought you said your were at R2 cu1. Are the 
consoles at the same cu level as the cas?

-Original Message-
From: Jason Wallace [jaso...@outlook.com mailto:jaso...@outlook.com ]
Sent: Friday, February 13, 2015 04:41 AM Eastern Standard Time
To: mssms@lists.myitforum.com mailto:mssms@lists.myitforum.com 
Subject: [mssms] Provider use




Hello folks

 

I wanted to ask a few questions around The Provider and its usage if I may 
please.

 

I have a customer with a CAS and 2 PRI sites.  They have quite a complex RBA 
model.  They do all management against the CAS.

 

They have 458 installed copies of the CM console and they have a fair number of 
administrators.

 

Previously they had a single provider and were experiencing crashes on a fairly 
regular basis.

 

Things that we have done to try and alleviate this issue:

 

-We have increased the memory and threads that the provider can use.  
This helped a little

-We have introduced a second provider and again this has helped some.  
The main issue with the provider on the CAS still exists.

 

We could of course introduce a third provider and this might help but now we 
are in the position where in essence we are stabbing in the dark – there don’t 
appear to be any good ways to get metrics on concurrent connections or loading 
on the provider itself.  The only suggestion that I can make is to run the 
provider in its own process and to monitor this.

 

Other things that I want to look at are to reduce the number of consoles which 
are deployed in the estate.  There are a fair number of users who are on 
support and they really just use remote control.  I know that this still does 
make provider connections, but only to check permissions for the user running 
it – does anyone have a handle upon how much less intensive this is than 
calling from the console?

 

There is a project to implement SCorCH within the organisation and we’ll look 
to moving some of the workloads into this at some point but does anyone have 
any additional ideas?

 

Thanks

 

Jason



The information transmitted is intended only for the person or entity to which 
it is addressed
and may contain CONFIDENTIAL material. If you receive this material/information 
in error,
please contact the sender and delete or destroy the material/information.

 

RE: [mssms] Status Messages Reference

[Jason Wallace]

Brilliant :)

 

Now how about same for STATE messages :)

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Andreas Hammarskjöld
Sent: 20 January 2015 11:52
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Status Messages Reference

 

Thats the one. :) 

 

//A

 

From: listsad...@lists.myitforum.com mailto:listsad...@lists.myitforum.com  
[mailto:listsad...@lists.myitforum.com] On Behalf Of Russ Rimmerman
Sent: den 20 januari 2015 04:52
To: mssms@lists.myitforum.com mailto:mssms@lists.myitforum.com 
Subject: RE: [mssms] Status Messages Reference

 

Here’s a Powershell method to retrieve them 
http://blogs.technet.com/b/saudm/archive/2015/01/20/enumerating-status-message-strings-in-powershell.aspx

 

 

From: listsad...@lists.myitforum.com mailto:listsad...@lists.myitforum.com  
[mailto:listsad...@lists.myitforum.com] On Behalf Of Andreas Hammarskjöld
Sent: Sunday, January 18, 2015 1:30 PM
To: mssms@lists.myitforum.com mailto:mssms@lists.myitforum.com 
Subject: RE: [mssms] Status Messages Reference

 

Found it, I could create a small tool that sucks out all the standard MS 
messages ID’s if that would be of use to people?

 

I bet the DLL’s have a lot of old stuff in them that is not in use any more 
though, so unsure how beneficial that would be?

 

//A

http://2pintsoftware.com 

https://twitter.com/AndHammarskjold 

 

From: listsad...@lists.myitforum.com mailto:listsad...@lists.myitforum.com  
[mailto:listsad...@lists.myitforum.com] On Behalf Of Andreas Hammarskjöld
Sent: den 17 januari 2015 22:50
To: mssms@lists.myitforum.com mailto:mssms@lists.myitforum.com 
Subject: RE: [mssms] Status Messages Reference

 

Think I found a C++ reference somewhere… will have to look through the SDK 
again…

 

From: listsad...@lists.myitforum.com mailto:listsad...@lists.myitforum.com  
[mailto:listsad...@lists.myitforum.com] On Behalf Of Christopher Summers
Sent: den 17 januari 2015 16:00
To: mssms
Subject: Re: [mssms] Status Messages Reference

 

You can (pseudo code) 500..5 | custom function for GetStatusMessage which 
is the output Sherry replied with. It only outputs the description template for 
each message id though. The 2007 spreadsheet from John is all I've been able to 
find that joins the message id with the component or list the attribute types.

 

On Sat, Jan 17, 2015 at 1:57 AM, Andreas Hammarskjöld jun...@2pintsoftware.com 
mailto:jun...@2pintsoftware.com  wrote:

Wasnt there some code floating around that pulled them all out of the the 
.dlls? Seem to remember that…

 

From: listsad...@lists.myitforum.com mailto:listsad...@lists.myitforum.com  
[mailto:listsad...@lists.myitforum.com mailto:listsad...@lists.myitforum.com 
] On Behalf Of Christopher Summers
Sent: den 17 januari 2015 00:15
To: mssms
Subject: Re: [mssms] Status Messages Reference

 

Anyone know if there's any status attributes higher than 427? My db doesn't 
have but want to double check.

 

On Fri, Jan 16, 2015 at 5:53 PM, Christopher Summers ch...@csfanclub.com 
mailto:ch...@csfanclub.com  wrote:

Thank you Sherry, I'll compare it to what I pulled with Powershell. Was hoping 
to have something that includes the component as well. I'll probably finish 
having it all mapped out this weekend and I'll share the results. 

 

On Fri, Jan 16, 2015 at 4:54 PM, Sherry Kissinger slkissin...@sbcglobal.net 
mailto:slkissin...@sbcglobal.net  wrote:

The attached is from someone @Microsoft, who used the SDK and powershell, to 
create it.  For CM12 R2 CU3 

 

He confirmed it was OK to share publicly.

 

On Friday, January 16, 2015 2:05 PM, Christopher Summers ch...@csfanclub.com 
mailto:ch...@csfanclub.com  wrote:

 

Anyone have access to the full list of current status messages? Latest I've 
found is John Nelson's 2007 SP2 spreadsheet.


 

-- 

Regards,
Christopher Summers
http://www.myitforum.com/csummers311

 

 

 





 

-- 

Regards,
Christopher Summers
http://www.myitforum.com/csummers311

 





 

-- 

Regards,
Christopher Summers
http://www.myitforum.com/csummers311

 

 





 

-- 

Regards,
Christopher Summers
http://www.myitforum.com/csummers311

 

 

 

 

 

[mssms] BranchCache WS-D

[Jason Wallace]

 Hello folks
 
Have a funny little issue on a customer site and was hoping that someone with 
more networking skills than I could help out please.
 
So, when a client want to access content it goes to the content server.  
Content server returns a list of hashes.  Client issues WS-D probes to see if 
content is already on peers.
 
These probes go out via multicast which is cool.
 
Now this customer has IGMP snooping turned on which is grabbing these packets 
and the suppressing them.  Disabling snooping of course allows clients to work 
on branch cache.  The whole point of snooping however is to stop IGMP from 
flooding the network so I don't want to be in a position of suggesting that 
this is turned off.
 
This leads therefore to my asking whether there is a suggested configuration 
for switches in this way?
 
Jason
  

RE: [mssms] Microsoft Ignite hotels

[Jason Wallace]

I second that.  AirBNB is great - www.airbnb.co.uk/c/jwallace2?s=8
 
From: ph...@2pintsoftware.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Microsoft Ignite hotels
Date: Tue, 6 Jan 2015 21:26:05 +









Airbnb?
 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Rod Trent

Sent: 06 January 2015 20:33

To: mssms@lists.myitforum.com

Subject: RE: [mssms] Microsoft Ignite hotels


 
Something close by?
J
 
Most Chicago hotels, particularly the ones selected by Microsoft, are pretty 
good. You can’t go wrong with any of them. However, transportation for 
something this large is going to be a nightmare.
 If you thought Houston was tough, Chicago is going to be even more 
challenging. Get something close to the conference center unless you’re like me 
and like to stay within running distance.
 


From: 
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Ewing, Scott L

Sent: Tuesday, January 6, 2015 3:01 PM

To: mssms@lists.myitforum.com

Subject: [mssms] Microsoft Ignite hotels


 
I have been approved to attend the Microsoft Ignite conference in May. Given 
that the Hyatt Regency McCormick Place is sold out, what hotels do you 
recommend?
 
 





  

[mssms] Bonne Annee

[Jason Wallace]

Bonjour TLM

Just a brief Happy New Year message from Paris.

I am reliably informed that they have arranged fireworks and a celebratory 
parade on The Champs Élysées July 14th to honour EOL Windows 2003

Jason

[mssms] PeerDisc QQ

[Jason Wallace]

Hi folks

 

OK, dumb query of the day

 

My understanding is that BranchCache Distributed Mode is
designed to work on a subnet by subnet basis.  So, if we have a remote
office with 2 subnets on it, 192,168.10.0 and 192.168.20.0 then we are
guaranteed to have 2 cache domains (if that’s what they’re called)

 

If that’s the case then I’d expect PeerDisc to pump out
packets 255.255.255.255:3702 but it does not - 
http://technet.microsoft.com/en-us/library/dd837649(v=WS.10).aspx
says (and packet traces prove) that the DIP is 239.255.255.0:3702

 

Why are we using multicast addresses for this then?

 

Jason

  

RE: [mssms] PeerDisc QQ

[Jason Wallace]

Actually folks I think I answered my own question.  We are based on SOAP over 
UDP and that is multicast based.
 
From: jaso...@outlook.com
To: mssms@lists.myitforum.com
Subject: [mssms] PeerDisc QQ
Date: Fri, 19 Dec 2014 15:09:49 +






Hi folks

 

OK, dumb query of the day

 

My understanding is that BranchCache Distributed Mode is
designed to work on a subnet by subnet basis.  So, if we have a remote
office with 2 subnets on it, 192,168.10.0 and 192.168.20.0 then we are
guaranteed to have 2 cache domains (if that’s what they’re called)

 

If that’s the case then I’d expect PeerDisc to pump out
packets 255.255.255.255:3702 but it does not - 
http://technet.microsoft.com/en-us/library/dd837649(v=WS.10).aspx
says (and packet traces prove) that the DIP is 239.255.255.0:3702

 

Why are we using multicast addresses for this then?

 

Jason

  


  

Re: [mssms] PeerDisc QQ

[Jason Wallace]

So I have seen on a customer who has switches configured to prevent MC.

I really had never pulled the thing apart that much as until this week it 
always just worked.  It would likely be too much hassle as you said to extend 
this across multiple subnets



 On 19 Dec 2014, at 17:41, Andreas Hammarskjöld jun...@2pintsoftware.com 
 wrote:
 
 Yeah, its MC and not BC. So in theory if you want the headache you can enable 
 MC across the subnets and have one cache domain. Not worth the headache IMHO, 
 depending on link speed/clients.
  
 //A
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Jason Wallace
 Sent: den 19 december 2014 16:43
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] PeerDisc QQ
  
 Actually folks I think I answered my own question.  We are based on SOAP over 
 UDP and that is multicast based.
  
 From: jaso...@outlook.com
 To: mssms@lists.myitforum.com
 Subject: [mssms] PeerDisc QQ
 Date: Fri, 19 Dec 2014 15:09:49 +
 
 Hi folks
  
 OK, dumb query of the day
  
 My understanding is that BranchCache Distributed Mode is designed to work on 
 a subnet by subnet basis.  So, if we have a remote office with 2 subnets on 
 it, 192,168.10.0 and 192.168.20.0 then  we are guaranteed to have 2 cache 
 domains (if that’s what they’re called)
  
 If that’s the case then I’d expect PeerDisc to pump out packets 
 255.255.255.255:3702 but it does not -  
 http://technet.microsoft.com/en-us/library/dd837649(v=WS.10).aspx says (and 
 packet traces prove) that the DIP is 239.255.255.0:3702
  
 Why are we using multicast addresses for this then?
  
 Jason
  
  
  
 

Re: [mssms] PeerDisc QQ

[Jason Wallace]

Yeah! Funnily yours was my first port of call for the FAQs and I didn't see 
anything.





 On 19 Dec 2014, at 18:58, Andreas Hammarskjöld jun...@2pintsoftware.com 
 wrote:
 
 Yeah, we started building this FAQ here as well: 
 http://2pintsoftware.com/2psfaqs/ 
  
 Covers most things, but not the MC bit, might add that.
  
 //A
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Jason Wallace
 Sent: den 19 december 2014 18:45
 To: mssms@lists.myitforum.com
 Subject: Re: [mssms] PeerDisc QQ
  
 So I have seen on a customer who has switches configured to prevent MC.
  
 I really had never pulled the thing apart that much as until this week it 
 always just worked.  It would likely be too much hassle as you said to extend 
 this across multiple subnets
  
 
 
 On 19 Dec 2014, at 17:41, Andreas Hammarskjöld jun...@2pintsoftware.com 
 wrote:
 
 Yeah, its MC and not BC. So in theory if you want the headache you can enable 
 MC across the subnets and have one cache domain. Not worth the headache IMHO, 
 depending on link speed/clients.
  
 //A
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Jason Wallace
 Sent: den 19 december 2014 16:43
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] PeerDisc QQ
  
 Actually folks I think I answered my own question.  We are based on SOAP over 
 UDP and that is multicast based.
  
 From: jaso...@outlook.com
 To: mssms@lists.myitforum.com
 Subject: [mssms] PeerDisc QQ
 Date: Fri, 19 Dec 2014 15:09:49 +
 
 Hi folks
  
 OK, dumb query of the day
  
 My understanding is that BranchCache Distributed Mode is designed to work on 
 a subnet by subnet basis.  So, if we have a remote office with 2 subnets on 
 it, 192,168.10.0 and 192.168.20.0 then we are guaranteed to have 2 cache 
 domains (if that’s what they’re called)
  
 If that’s the case then I’d expect PeerDisc to pump out packets 
 255.255.255.255:3702 but it does not - 
 http://technet.microsoft.com/en-us/library/dd837649(v=WS.10).aspx says (and 
 packet traces prove) that the DIP is 239.255.255.0:3702
  
 Why are we using multicast addresses for this then?
  
 Jason
  
  
  
  
  
 

Re: [mssms] Backup failed

[Jason Wallace]

And that's it?

Can you stop the SMSEXECUTIVE service manually in Services?



 On 8 Dec 2014, at 08:12, greg franklin gregfrankli...@gmail.com wrote:
 
 Hi Experts,
 At present we are in SCCM 2007 environment. perpetually we are facing with 
 one issue since last one month...the issue is My central primary site is 
 failed to do backup. when we are checking in the smsbkup.log the log showing 
 like
 
 SMS site backup failed. 
 SMS site backup service is stopping.
 STATMSG: ID=5047 SEV=E LEV=M SOURCE=SMS Server COMP=SMS_SITE_BACKUP 
 SYS=SCM101 SITE=CM2 PID=7780 TID=15056 GMTDATE=Fri Dec 05 07:00:34.986 2014 ..
 
 your assistance would be appreciated
 
 Thanks  Regards,
 Greg franklin.
 
 

Re: [mssms] Backup failed

[Jason Wallace]

And see what happens

The by-word of all SMS Admins!

If you did it three times and the result was the same then you had a process



 On 8 Dec 2014, at 12:10, Eswar Koneti eswarkon...@outlook.com wrote:
 
 Yes you can.. Did you try stopping the sms executive services and start sms 
 backup service to start the sccm backup? 
 When you are running the backup, sms executive services will be stopped to 
 make sure no activities performed and start the services once backup finished.
 Give a try manual start of sms backup service and see what happens. 
 
 Regards, 
 Eswar Koneti
 www.eskonr.com
 Sent from Mobile Device, excuse any typo's as a result.
 
 --- Original Message ---
 
 From: greg franklin gregfrankli...@gmail.com
 Sent: December 8, 2014 7:30 PM
 To: mssms@lists.myitforum.com
 Subject: Re: [mssms] Backup failed
 
 Hi Jason,
 It's showing that
  
 SMS site backup service is stopping.
 STATMSG: ID=502 SEV=I LEV=M SOURCE=SMS Server COMP=SMS_SITE_BACKUP 
 SYS=SCM101 SITE=CM2 PID=15344 TID=12596 GMTDATE=Sun Dec 07 07:44:27.571 2014 
 ISTR0=SMS site backup ISTR1= ISTR2= ISTR3= ISTR4= ISTR5= ISTR6= 
 ISTR7= ISTR8= ISTR9= NUMATTRS=0
 SMS site backup service stopped. 
 STATMSG: ID=501 SEV=I LEV=M SOURCE=SMS Server COMP=SMS_SITE_BACKUP 
 SYS=SCM101 SITE=cm2 PID=15344 TID=12596 GMTDATE=Sun Dec 07 07:44:27.583 2014 
 ISTR0=SMS site backup ISTR1= ISTR2= ISTR3= ISTR4= ISTR5= ISTR6= 
 ISTR7= ISTR8= ISTR9= NUMATTRS=0 
 Initializing the status message reporting system... 
 The path to the Status Manager inbox is D:\Microsoft Configuration 
 Manager\inboxes\statmgr.box\statmsgs. 
 SMS_STATUS_MANAGER is not running as part of this process, the 
 SMS_EXECUTIVE to SMS_STATUS_MANAGER in-memory status message queue will not 
 be used. SMS_SITE_BACKUP 
 Registered this process as a source of SMS Server events. 
 Registered this process as a source of SMS Client events. 
 Registered this process as a source of SMS Provider events. 
 Status message reporting system initialized successfully. 
 Locale set to OS value (English_United States.1252). 
  
  
 And
  
 It is possible to me to stop the SMSEXECUTIVE service manually in Services
  
 Thanks  Regards,
 Greg Franklin
  
  
 
  
 
 On Mon, Dec 8, 2014 at 3:29 PM, Jason Wallace jaso...@outlook.com wrote:
 And that's it?
 
 Can you stop the SMSEXECUTIVE service manually in Services?
 
 
 
 On 8 Dec 2014, at 08:12, greg franklin gregfrankli...@gmail.com wrote:
 
 Hi Experts,
 At present we are in SCCM 2007 environment. perpetually we are facing with 
 one issue since last one month...the issue is My central primary site is 
 failed to do backup. when we are checking in the smsbkup.log the log showing 
 like
 
 SMS site backup failed. 
 SMS site backup service is stopping.
 STATMSG: ID=5047 SEV=E LEV=M SOURCE=SMS Server COMP=SMS_SITE_BACKUP 
 SYS=SCM101 SITE=CM2 PID=7780 TID=15056 GMTDATE=Fri Dec 05 07:00:34.986 2014 
 ..
 
 your assistance would be appreciated
 
 Thanks  Regards,
 Greg franklin.
 
 
 
 
 

Re: [mssms] pls vote it up - Console should show newer version available and allow upgrade

[Jason Wallace]

Now Niall why would anyone want this? Surely people's rigorous change control 
systems would prevent this from happening?



 On 8 Dec 2014, at 20:22, Niall Brady any...@gmail.com wrote:
 
 wow this is now the #4 most popular request on Connect for ConfigMgr, :-) :-) 
 :-)
 
 let's get some more votes to get it even more exposure !!
 
 as regards the wmi issues Michael, I think they occur for other reasons such 
 as too many applications or windows updates in the task sequence filling up 
 the small amount of memory assigned to the task sequence
 
 there was this post about it
 
 http://blogs.technet.com/b/configmgrteam/archive/2011/01/18/task-sequence-editor-too-many-steps-issue-and-solution.aspx
 
 but i believe r@ increased that limit to 10mb or more, can't recall the exact 
 figure, i haven't seen the issue much lately and it used to happen regularly,
 
 however I use the console installed locally on my desktop (windows 8.1)
 
 On Mon, Dec 8, 2014 at 9:06 PM, Michael Mott michael.m...@1e.com wrote:
 I know of some folks have wmi issues on the central\primary where TS’s are 
 edited.  Would this actually help alleviate this issue if all consoles are 
 equal perhaps?
 
  
 
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Murray, Mike
 Sent: Monday, December 08, 2014 2:30 PM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] pls vote it up - Console should show newer version 
 available and allow upgrade
 
  
 
 Done, great idea.  :)
 
  
 
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Niall Brady
 Sent: Monday, December 8, 2014 5:53 AM
 To: mssms@lists.myitforum.com
 Subject: [mssms] pls vote it up - Console should show newer version 
 available and allow upgrade
 
  
 
 please vote it up ! (see the title bar in the attached screenshot for the 
 concept)
 
 Today, you can be running a console with one version, that is not in sync 
 with what is running on the primary. The only way you'll know is if you are 
 missing features added to a newer release or if troubleshooting leads you 
 down that route. You have to check the about page in the console to verify 
 version number and compare that against what is installed on the Primary 
 site server to see if they match, what I'm proposing is an easy visual way 
 in the console to inform you when your versions don't match, and to offer 
 the ability to upgrade via a simple click,.
 
 
 public link
 
 https://connect.microsoft.com/ConfigurationManagervnext/feedback/details/1049659/dcr-show-version-incompatability-and-allow-ability-to-upgrade-console-to-match-the-primary-site-version-of-configuration-manager
 
 mvp link
 
 https://connect.microsoft.com/ConfigurationManagervnext/feedback/details/1049655/mvp-dcr-configuration-manager-console-should-alert-you-to-newer-version-availability
 
 cheers
 niall.
 
  
 
  
 
 
 
 
 Legal Notice: This email is intended only for the person(s) to whom it is 
 addressed. If you are not an intended recipient and have received this 
 message in error, please notify the sender immediately by replying to this 
 email or calling +44(0) 2083269015 (UK) or +1 866 592 4214 (USA). This email 
 and any attachments may be privileged and/or confidential. The unauthorized 
 use, disclosure, copying or printing of any information it contains is 
 strictly prohibited. The opinions expressed in this email are those of the 
 author and do not necessarily represent the views of 1E Ltd. Nothing in this 
 email will operate to bind 1E to any order or other contract.
 
 

Re: [mssms] pls vote it up - Console should show newer version available and allow upgrade

[Jason Wallace]

Sorry, forgot the smilie 



 On 8 Dec 2014, at 20:41, Niall Brady any...@gmail.com wrote:
 
 if they have rigorous change control systems in place then those same change 
 control systems should ensure that the consoles installed on peoples desktops 
 match the version on the site server they are connecting to after a site 
 upgrade has been performed,
 
 in a lot of cases, they don't, nothing is done, and the admin continues 
 his/her work not realizing that they are using a version that may lack 
 features of the primary...
 
 hence the DCR,
 
 part of the reason they don't is because while the console update is indeed 
 created by the KB, it does not automagically send it out to all 
 desktops/whatever with the console installed, and the steps needed to get it 
 out require some work by someone...
 
 I've seen emails on the MVP mailing list just this last week where issues 
 seen in the field were the direct result of the configuration manager console 
 version not matching the version on the primary, and for those reasons, I'd 
 like to see this process made easier, much like it is for other software out 
 there...
 
 chee3rs
 niall
 
 On Mon, Dec 8, 2014 at 9:29 PM, Jason Wallace jaso...@outlook.com wrote:
 Now Niall why would anyone want this? Surely people's rigorous change 
 control systems would prevent this from happening?
 
 
 
 On 8 Dec 2014, at 20:22, Niall Brady any...@gmail.com wrote:
 
 wow this is now the #4 most popular request on Connect for ConfigMgr, :-) 
 :-) :-)
 
 let's get some more votes to get it even more exposure !!
 
 as regards the wmi issues Michael, I think they occur for other reasons 
 such as too many applications or windows updates in the task sequence 
 filling up the small amount of memory assigned to the task sequence
 
 there was this post about it
 
 http://blogs.technet.com/b/configmgrteam/archive/2011/01/18/task-sequence-editor-too-many-steps-issue-and-solution.aspx
 
 but i believe r@ increased that limit to 10mb or more, can't recall the 
 exact figure, i haven't seen the issue much lately and it used to happen 
 regularly,
 
 however I use the console installed locally on my desktop (windows 8.1)
 
 On Mon, Dec 8, 2014 at 9:06 PM, Michael Mott michael.m...@1e.com wrote:
 
 I know of some folks have wmi issues on the central\primary where TS’s are 
 edited.  Would this actually help alleviate this issue if all consoles are 
 equal perhaps?
 
  
 
 From: listsad...@lists.myitforum.com 
 [mailto:listsad...@lists.myitforum.com] On Behalf Of Murray, Mike
 Sent: Monday, December 08, 2014 2:30 PM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] pls vote it up - Console should show newer version 
 available and allow upgrade
 
  
 
 Done, great idea.  :)
 
  
 
 From: listsad...@lists.myitforum.com 
 [mailto:listsad...@lists.myitforum.com] On Behalf Of Niall Brady
 Sent: Monday, December 8, 2014 5:53 AM
 To: mssms@lists.myitforum.com
 Subject: [mssms] pls vote it up - Console should show newer version 
 available and allow upgrade
 
  
 
 please vote it up ! (see the title bar in the attached screenshot for the 
 concept)
 
 Today, you can be running a console with one version, that is not in sync 
 with what is running on the primary. The only way you'll know is if you 
 are missing features added to a newer release or if troubleshooting leads 
 you down that route. You have to check the about page in the console to 
 verify version number and compare that against what is installed on the 
 Primary site server to see if they match, what I'm proposing is an easy 
 visual way in the console to inform you when your versions don't match, 
 and to offer the ability to upgrade via a simple click,.
 
 
 public link
 
 https://connect.microsoft.com/ConfigurationManagervnext/feedback/details/1049659/dcr-show-version-incompatability-and-allow-ability-to-upgrade-console-to-match-the-primary-site-version-of-configuration-manager
 
 mvp link
 
 https://connect.microsoft.com/ConfigurationManagervnext/feedback/details/1049655/mvp-dcr-configuration-manager-console-should-alert-you-to-newer-version-availability
 
 cheers
 niall.
 
  
 
  
 
 
 
 
 Legal Notice: This email is intended only for the person(s) to whom it is 
 addressed. If you are not an intended recipient and have received this 
 message in error, please notify the sender immediately by replying to this 
 email or calling +44(0) 2083269015 (UK) or +1 866 592 4214 (USA). This 
 email and any attachments may be privileged and/or confidential. The 
 unauthorized use, disclosure, copying or printing of any information it 
 contains is strictly prohibited. The opinions expressed in this email are 
 those of the author and do not necessarily represent the views of 1E Ltd. 
 Nothing in this email will operate to bind 1E to any order or other 
 contract.
 
 

Re: [mssms] RE: Distribution Bottleneck

[Jason Wallace]

Take a look at 2pint's website for Branch Cache info



 On 4 Dec 2014, at 13:57, Andreas Hammarskjöld jun...@2pintsoftware.com 
 wrote:
 
 Even better, use BranchCache since its free and works great?
  
 //Andreas
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Magnus Tveten
 Sent: den 4 december 2014 04:03
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] RE: Distribution Bottleneck
  
 AdaptivaOnesite is really good to... the way it uses the network without 
 interfering with anything.
  
 We used that to push Win7 Image (+ all the needed software packages) to 
 machines at all the different sites with very small links and not once did 
 anyone from the business find the network slow..
  
  
  
 MAGNUS TVETEN
 SERVER SUPPORT ENGINEER
 CO CITRIX/SERVER
 
 Insurance Australia Group Limited
 Lvl 1, 23 Lakeside Drive, Burwood
 Burwood East VIC 3151
 Australia
  
 T +61 3 8804 3226   M +61 411 010 460
 E magnus.tve...@iag.com.au
 www.iag.com.au
 
 PLEASE CONSIDER THE ENVIRONMENT BEFORE PRINTING THIS EMAIL.
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Marable, Mike
 Sent: Thursday, 4 December 2014 12:02 PM
 To: mssms@lists.myitforum.com
 Subject: Re: [mssms] RE: Distribution Bottleneck
  
 Perhaps, something like NomadBranch?  ;)
  
  
 From: 'Michael Mott' michael.m...@1e.com
 Reply-To: mssms@lists.myitforum.com mssms@lists.myitforum.com
 Date: Wednesday, December 3, 2014 at 6:00 PM
 To: mssms@lists.myitforum.com mssms@lists.myitforum.com
 Subject: [mssms] RE: Distribution Bottleneck
  
 Use a product that invokes the ACP.
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Schwan, Phil
 Sent: Wednesday, December 03, 2014 2:46 PM
 To: mssms@lists.myitforum.com
 Subject: [mssms] RE: Distribution Bottleneck
  
 No. Once you make it a Pull DP, it essentially becomes a sort of slaved 
 client and uses BITS for the transfers.
  
 DistMgr won’t move on to other packages until the PkgXferMgr reports back 
 that the one it’s working on is done, so one very large package like this can 
 tie everything up.
  
 Here’s a paraphrase from Todd about how the Pull DP is supposed to work:
  
 -  Pull content from source DP and do the processing of the content 
 locally
 -  DistMgr creates a snapshot and calculates the HASH
 -  PkgXferMgr sends a package info bundle (XML inside of .tar) to the 
 PullDP
 -  PullDP opens the XML and gets a list of content from the 
 DPLocation DPUrl
 -  PullDP component on the DP checks to see how many of the files are 
 already loaded
 -  PullDP component passes list of files to DTS
 -  DTS creates BITS download job
 -  CCMEXEC gets the files form BITS download location and writes them 
 to disk
 -  SMSDPProv imports the content into the Content Library
 -  PullDP creates status messages and sends to Site Server
  
 However, you can end up encountering issues with large packages timing out, 
 refreshes causing the already copied files to be deleted (meaning the whole 
 thing starts over), and so on.
  
 Among his (supported) recommendations were increasing the DistMgr thread 
 limit, increasing the query interval and timeout values, and making sure 
 you’re at R2CU3 (some of the issues have been fixed over the course of the 
 last few CUs).
  
 Hope that helps!
  
 -Phil
  
 _
 Phil Schwan | Technical Architect, Enterprise Windows Services
 Microsoft VTSP (b-phs...@microsoft.com)
 Project Leadership Associates|2000 Town Center, Suite 1900, Southfield, MI 
 48075
 Lync: 312.756.1626  Mobile: 419.262.5133
 www.projectleadership.netimage001.jpgimage002.jpg image003.jpg
 image004.jpgLead with Strategy. Leverage Technology. Deliver Results.
  
  
  
  
  
 From:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Gilmanov, Nile
 Sent: Wednesday, December 3, 2014 5:16 PM
 To: mssms@lists.myitforum.com
 Subject: [mssms] RE: Distribution Bottleneck
  
 Funny this is… After I turned it into a PULL DP, the Schedule tab 
 disappeared… aint’ that great?
  
 Guess have to reverse the changes, then back to PULL, unless there is still a 
 hidden way.
  
 Nile Gilmanov
 Systems Administrator
 Wabash National Corporation
 nile.gilma...@wabashnational.com | Office: 765.772.2691 | Mobile: 765.414.7402
  
 From:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Gilmanov, Nile
 Sent: Wednesday, December 3, 2014 5:11 PM
 To: mssms@lists.myitforum.com
 Subject: [mssms] RE: Distribution Bottleneck
  
 Well… THANK YOU! I have been checking this thread every 15 minutes!
  
 Going to put this to the test right now!
  
 Nile Gilmanov
 Systems Administrator
 Wabash National Corporation
 nile.gilma...@wabashnational.com | Office: 765.772.2691 | Mobile: 765.414.7402
  
 

Re: [mssms] Remnants after non-OSD task sequence

[Jason Wallace]

Documented on TechNet. People often simply use it to shutdown or reboot the 
system after build. It can however run a script to perform actions



 On 21 Nov 2014, at 01:03, Giroux, Eric J egir...@unum.com wrote:
 
 No, never heard of SMSTSPostAction.  Is there a blog post explaining this?
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Niall Brady
 Sent: Thursday, November 20, 2014 4:43 PM
 To: mssms@lists.myitforum.com
 Subject: Re: [mssms] Remnants after non-OSD task sequence
  
 have you tried running a script to clean them up as a SMSTSPostAction  ?
  
 On Thu, Nov 20, 2014 at 8:27 PM, Giroux, Eric J egir...@unum.com wrote:
 I’m pre-caching content using a task sequence (a few packages) to be later 
 used during another installation.  During the caching task sequence I’m doing 
 an MDT Use Toolkit and Gather to key off some of the gathered variables.  The 
 problem I’m seeing is C:\_SMSTaskSequence and C:\MININT being left on the C: 
 drive.  I thought these should be cleaned up.  Clues in smsts.log below.  
 This is with SCCM 2012 SP1 and MDT2012U1 integrated.  Manually restarting the 
 machine does not clear the folders.  I also have a couple values under 
 HKLM\SOFTWARE\Microsoft\SMS\Task Sequence that seem to be related:
  
 image001.png
  
 Execution engine result code: 0 (Success=0, Failure=1, RebootInitiated=2)
 Cleaning Up.   
 Removing Authenticator 
 Cleaning up task sequence folder
 Unable to delete file C:\_SMSTaskSequence\TSEnv.dat (0x80070005). Continuing.
 Failed to delete directory 'C:\_SMSTaskSequence'
 SetNamedSecurityInfo() failed.
 SetObjectOwner() failed. 0x80070005.   
 RemoveFile() failed for C:\_SMSTaskSequence\TSEnv.dat. 0x80070005.  
 RemoveDirectoryW failed (0x80070091) for C:\_SMSTaskSequence   
 Deleting volume ID file 
 C:\_SMSTSVolumeID.7159644d-f741-45d5-ab29-0ad8aa4771ca ...
 Deleting volume ID file 
 D:\_SMSTSVolumeID.7159644d-f741-45d5-ab29-0ad8aa4771ca ...
 Deleting volume ID file 
 G:\_SMSTSVolumeID.7159644d-f741-45d5-ab29-0ad8aa4771ca ...
 Successfully unregistered Task Sequencing Environment COM Interface. 
 Executing command line: C:\Windows\CCM\TsProgressUI.exe /Unregister 

 ==[ TsProgressUI started in process 4628 ]==  
 Unregistering COM classes  
 Shutdown complete.  
 Process completed with exit code 0   
 Successfully unregistered TS Progress UI.
 Start to cleanup TS policy   
 End TS policy cleanup 
 Task Sequence Manager ServiceMain finished execution.
 Task Sequence Manager service will be reconfigured  
 Task Sequence Manager service reconfigured successfully   
 Sending success status message  
 Set authenticator in transport
 RegQueryValueExW failed for Software\Microsoft\SMS\Task Sequence, 
 SMSTSEndProgram 
 GetTsRegValue() failed. 0x80070002.  
 End program:  
 Successfully finalized logs to SMS client log directory from 
 C:\Windows\CCM\Logs 
  
  
 Any ideas of what else needs to be done to allow these lingering folders to 
 be cleaned up?
  
 Thank You,
  
 Eric Giroux 
 Senior Infrastructure Engineer 
 Unum End User Computing
 E-mail: egir...@unum.com | Office: (207) 575-2482
 Mobile: (207) 239-5190 | Fax: (207) 575-2158
  
  
  
  
 

[mssms] Interpreting Collection Evaluation Schedule

[Jason Wallace]

Hi folks
 
I am running a SQL report to take a dump of collections in CM:
 



SELECT Collections_G.CollectionID,
Collections_G.SiteID, Collections_G.LimitToCollectionID, 
Collections_G.CollectionName,
Collections_G.ResultTableName, 


  Collections_G.CollectionComment,
Collection_Rules_SQL.SQL, Collections_G.Schedule, Collections_G.LastChangeTime,
Collections_G.SourceLocaleID, 


  Collections_G.LastRefreshRequest,
Collections_G.CollectionType, Collections_G.ISVData, Collections_G.rowversion,
Collections_G.Flags, Collections_L.BeginDate, 


  Collections_L.EvaluationStartTime,
Collections_L.LastRefreshTime, Collections_L.LastIncrementalRefreshTime,
Collections_L.LastMemberChangeTime, 


  Collections_L.CurrentStatus,
Collections_L.CurrentStatusTime, Collections_L.MemberChanges,
Collections_L.EvaluationLength, 


  Collections_L.IncrementalEvaluationStartTime,
Collections_L.IncrementalMemberChanges,
Collections_L.IncrementalEvaluationLength, 


  Collections_L.EvaluationGQStatus


FROM Collections_G INNER
JOIN


 
Collections_L ON Collections_G.CollectionID = Collections_L.CollectionID INNER
JOIN


 
Collection_Rules_SQL ON Collections_G.CollectionID =
Collection_Rules_SQL.CollectionID


 


Order by Collections_L.EvaluationLength desc
 
The output is great but the collection evaluation schedule is encoded.  What's 
the formula for getting this back into human-readable format please?
 
Jason 
  

Re: [mssms] Managing Servers in a DMZ

[Jason Wallace]

Same domain?



 On 15 Nov 2014, at 05:15, Eric Morrison eric.morri...@hotmail.com wrote:
 
 Something I’ve noticed is that clients from my internal network will attempt 
 the DMZ MP, and vice versa…
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Jason Sandys
 Sent: Friday, November 14, 2014 9:09 PM
 To: mssms@lists.myitforum.com; mssms@lists.myitforum.com
 Subject: RE: [mssms] Managing Servers in a DMZ
  
 No. This already falls into the scenario of my last paragraph as the best way 
 to do it at present.
  
 J
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Eric Morrison
 Sent: Friday, November 14, 2014 7:02 PM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] Managing Servers in a DMZ
  
 Hey Jason,
  
 Interesting response…
  
 My current environment has a separate forest/domain that is untrusted for our 
 DMZ. I have a site system server in that domain running SUP, MP, and DP to 
 manage the DMZ systems.
  
 Are you recommending to use a secondary site server in this scenario instead?
  
 Thanks,
  
 Eric Morrison
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Jason Sandys
 Sent: Friday, November 14, 2014 3:57 PM
 To: mssms@lists.myitforum.com; mssms@lists.myitforum.com
 Subject: RE: [mssms] Managing Servers in a DMZ
  
 Not really. This value is only for MPs, not SUPs. Thus, you’re still stuck. 
 The best you can do is put a secondary site in the DMZ which has a DP, SUP, 
 and DP on the secondary site server and additionally put an MP from the 
 primary into the DMZ as well. Then using the registry value, configure all of 
 the DMZ clients to use the MP in the DMZ. You should at this point also use 
 the registry value to configure all of your internal clients to use only the 
 internal MP(s).
  
 Alternatively, you could use some other method to patch systems in the DMZ  
 or maybe you could rely on the SUP failover to assign the proper SUP to the 
 systems in the DMZ (but I wouldn’t really architect a solution counting on 
 this behavior necessarily although it should and does work to my knowledge).
  
 I am not a fan of this registry value as its more or less and poor man’s hack.
  
 At this time, the best solution IMO is to use either HTTPS in the DMZ 
 (although there are few quirks with this as well) or deploy an alternate 
 domain/forest to the DMZ which will in turn dictate MP and SUP preference.
  
 J
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Mattias Benninge
 Sent: Thursday, November 13, 2014 4:46 AM
 To: mssms@lists.myitforum.com
 Subject: [mssms] Managing Servers in a DMZ
  
 I know that this have been discussed before but I want to raise the question 
 if the possibilities have been change with CU3 for 2012 R2.
  
 With CU3 we get the option to limit a client to one or more specific(s) MP.
  
  
 This cumulative update introduces a new registry entry for clients. This 
 entry will restrict which management point (MP) a client can communicate 
 with. This can be useful in environments that have multiple MPs in different 
 forests, and the clients can only communicate with a subset of them. Setting 
 the registry value to only those MPs that can be reached by the client can 
 improve overall efficiency. The new registry value is AllowedMPs, a 
 REG_MULTI_SZ (multi-string) type that is under the following subkey:
 HKEY_LOCAL_MACHINE\Software\Microsoft\CCM
  
 Does this mean that we now have a viable option for setting up an MP/DP/SUP 
 in DMZ?
  
 If this is not an option what is the recommended/supported way for managing 
 server/clients in a DMZ? What we want to do is basically patch and inventory 
 servers (workgroup) in DMZ. We have PKI and certificates on all server 
 already.
 
  
 Regards
 Mattias Benninge
 http://myitforum.com/myitforumwp/author/matbe/
  
  
  
  
  
 

Re: [mssms] Issue with OSD from a DP

[Jason Wallace]

Tried a DISKPART CLEAN on it?



 On 10 Nov 2014, at 13:17, Kevin Johnston kjohns...@halogensoftware.com 
 wrote:
 
 I have a DP in the UK. I have everything configured like I do here for my 
 deployments. I can PXE boot, I enter the TS password, then it loads some 
 files and then I get the following:
  
 image002.png
  
 Looking at the SMSTSLog on the machine, I see that there are errors related 
 to “C:\ not bootable, X: is not fixed drive” but that is all.
  
 Because I am using vPro and VNC to see the machine, I can’t copy the log file 
 here.
  
 This is a brand new out of the box machine. When I do diskpart I see the OS 
 as being letter D:
 When I boot into the machine (Dell) the OS is actually C:
 So I thought this may have something to do with it, but since this does not 
 load the UDI wizard to complete I don’t think this is an issue as the drive 
 will get wiped as part of the TS.
  
 This same machine works without issue here in the local office, so I am not 
 sure how to fix this issue. I was hoping it would load into the UDI wizard, 
 but it never makes it there.
  
  
 Thanks,
  
 Kevin Johnston
 

[mssms] SUP maintenance SQL

[Jason Wallace]

Hi folks

Have a customer who is having timeout issues with the WSUS console cleanup 
wizard and also with the PoSH scripts.

I know that what we really are doing is calling a bunch of StoredProcs but does 
anyone have pre-canned SQL which I could use as a maintenance task please?

Re: [mssms] SUP maintenance SQL

[Jason Wallace]

Thanks Ryan



 On 5 Nov 2014, at 16:47, Ryan ryan2...@gmail.com wrote:
 
 Kent wrote a great article on what to do when this happens, and he even 
 included a Powershell script from Kaido to run as a scheduled task weekly. 
 
 http://blog.coretech.dk/kea/house-of-cardsthe-configmgr-software-update-point-and-wsus/
 
 
 
 On Wed, Nov 5, 2014 at 3:44 AM, Jason Wallace jaso...@outlook.com wrote:
 Hi folks
 
 Have a customer who is having timeout issues with the WSUS console cleanup 
 wizard and also with the PoSH scripts.
 
 I know that what we really are doing is calling a bunch of StoredProcs but 
 does anyone have pre-canned SQL which I could use as a maintenance task 
 please?
 
 

Re: [mssms] SUP maintenance SQL

[Jason Wallace]

Thanks Todd



 On 5 Nov 2014, at 13:25, Todd Hemsell hems...@gmail.com wrote:
 
 USE SUSDB
 
 DECLARE @var1 INT
 
 DECLARE @msg nvarchar(100)
 
 CREATE TABLE #results (Col1 INT) INSERT INTO #results(Col1)
 
 EXEC spGetObsoleteUpdatesToCleanup
 
 DECLARE WC Cursor FOR SELECT Col1 FROM #results
 
 OPEN WC
 
 FETCH NEXT FROM WC INTO @var1 WHILE (@@FETCH_STATUS  -1)
 
 BEGIN SET @msg = 'Deleting ' + CONVERT(varchar(10), @var1) 
 RAISERROR(@msg,0,1) WITH NOWAIT
 
 EXEC spDeleteUpdate @localUpdateID=@var1
 
 FETCH NEXT FROM WC INTO @var1
 
 END
 
 CLOSE WC
 
 DEALLOCATE WC
 
 DROP TABLE #results
 
 
 On Wed, Nov 5, 2014 at 3:44 AM, Jason Wallace jaso...@outlook.com wrote:
 Hi folks
 
 Have a customer who is having timeout issues with the WSUS console cleanup 
 wizard and also with the PoSH scripts.
 
 I know that what we really are doing is calling a bunch of StoredProcs but 
 does anyone have pre-canned SQL which I could use as a maintenance task 
 please?
 
 

Re: [mssms] Test to SMS email list

[Jason Wallace]

Icles to Henry.Wilson :)



 On 4 Nov 2014, at 19:56, henry.wil...@sanofi.com wrote:
 
  
 Henry E. WILSON
 

RE: [mssms] Workstation Local Admin Password

[Jason Wallace]

You'd need to do so with a script.  Try 
http://www.bing.com/search?q=change+local+admin+password+scriptqs=nform=QBLHpq=change+local+admin+password+scriptsc=2-28sp=-1sk=cvid=d9e050a13a824500bcdff96f4c4fdcc4
 for inspiration
 
From: karalene.a...@rcis.com
To: mssms@lists.myITforum.com
Subject: [mssms] Workstation Local Admin Password
Date: Mon, 3 Nov 2014 18:52:08 +









Wondering if anyone is leveraging SCCM to change the local admin password on 
all workstations?  If so, care to share your process?
 
Thanks!
 
 
 
 
 





  

Re: [mssms] monitoring for failing CMOS batteries?

[Jason Wallace]

This info would not be available to the OS. It might be that your hardware 
vendor is able to pass this status through WMI but not hopeful



 On 30 Oct 2014, at 14:54, Jansen Morgan morgan.jan...@us.mcd.com wrote:
 
 (Cross post to the SCOM and SCCM experts. J )
  
 Hi all,
  
 We have some XP embedded devices left in the field that have failing CMOS 
 batteries.  This causes a problem because it gets stuck on a warning screen 
 after reboot.
  
 Have any of you figured out how to monitor for and alert on failing CMOS 
 batteries?
  
 Thanks,
  
 Morgan
  
 
 image001.gifMorgan Jansen | IS Project Leader | MCD / IT Restaurants | 
 McDonald's Corporation
   +1 630.623.7318 office | +1 630.247.7575 mobile | morgan.jan...@us.mcd.com
 Member of the McDonald’s Women’s Leadership Network Oak Brook Chapter 
 (WLNOBC) Communications Committee
  
 
 
 The information contained in this e-mail and any accompanying documents is 
 confidential, may be privileged, and is intended solely for the person and/or 
 entity to whom it is addressed (i.e. those identified in the To and cc 
 box). They are the property of McDonald's Corporation. Unauthorized review, 
 use, disclosure, or copying of this communication, or any part thereof, is 
 strictly prohibited and may be unlawful. If you have received this e-mail in 
 error, please return the e-mail and attachments to the sender and delete the 
 e-mail and attachments and any copy from your system. McDonald's thanks you 
 for your cooperation.
 

Re: [mssms] RE: Patch/WIM Injection

[Jason Wallace]

They are deployed as the OS boots for the first time so from a security 
perspective it is better than having a vulnerable system on the LAN while 
updates are deployed.



 On 29 Oct 2014, at 14:08, Bradley, Matt mbrad...@quiktrip.com wrote:
 
 When you say not all updates can be injected, do you mean things like Office 
 updates, or are there others that a person would miss?
  
 I also didn’t realize injecting the updates to the image didn’t actually 
 install them.  If they are only the installed after an OSD, then I’m even 
 more inclined not to inject.  I might image two PC’s as a test, one with the 
 patches already installed, one with them injected, and see which one builds 
 faster.
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Jason Sandys
 Sent: Tuesday, October 28, 2014 10:06 AM
 To: mssms@lists.myitforum.com
 Subject: [mssms] RE: Patch/WIM Injection
  
 First, not all updates can be injected into a WIM so even if you do employ 
 image servicing, it is not sufficient to deploy a fully patched image. Thus, 
 you really should be capturing a new image periodically no matter what – if 
 you are using a build and capture task sequence (whether in MDT or ConfigMgr) 
 then this is a trivial task (beware of the double reboots in ConfigMgr though 
 L).
  
 Offline servicing in ConfigMgr has had issues (not really ConfigMgr’s fault 
 to my knowledge but that’s beside the point) and is why some/many people shy 
 away from using image servicing. Also note that image servicing doesn’t 
 actually install the updates. It merely injects them into the WIM for 
 installation during Windows Setup so it really doesn’t save you as much as 
 you think it does in terms of time or space.
  
 J
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Bradley, Matt
 Sent: Tuesday, October 28, 2014 9:55 AM
 To: mssms@lists.myitforum.com
 Subject: [mssms] Patch/WIM Injection
  
 I’ve read that some people do not like injecting monthly patches directly 
 into the OS WIM.  Some prefer to just capture reference images.  Being that a 
 bad patch could be removed from a WIM if it was determined to be bad, I’d 
 like to hear some feedback on why some choose to still stay away from this 
 method, and stay with reference image capture.
  
 Thanks.
  
  
 

Re: [mssms] SCCM 2012 / MDT 2012 Update 1

[Jason Wallace]

No but you can call the SDK in WMI through a PoSH script to do it

There's a script on Technet gallery to install outstanding updates



 On 28 Oct 2014, at 16:06, sccmfun sccm...@hotmail.com wrote:
 
 The problem is once the SCCM client is installed via MDT there isn’t a step 
 like there is in SCCM OSD to Install Software Updates right now is there?
 image001.jpg
  
 The SCCM client would have to get installed via MDT, end up in my correct 
 patching collection (could take a bit) and then patch.  How do you ensure if 
 your using MDT to build the box and SCCM to install the patches that the 
 whole process happens quickly/in the right order?
  
 Since we have the build split (MDT to build)  and SCCM to patch how do you 
 ensure the box goes to the user fully patched?  We don’t want the machine to 
 be at the users’ desk for a day till it finally ends up in the right patch 
 collection and then patchs a day later. 
  
 Thanks
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Steve Whitcher
 Sent: Tuesday, October 28, 2014 9:24 AM
 To: mssms@lists.myitforum.com
 Subject: Re: [mssms] SCCM 2012 / MDT 2012 Update 1
  
 Currently, you don't use SCCM at all, just MDT stand alone, correct?
  
 As long as you keep the MDT environment separate from your SCCM environment, 
 there is nothing that would prevent the use of MDT for OSD and SCCM for 
 patching etc.  Once the OSD task sequence is done, the workstations won't 
 have anything to do with MDT anymore, and can be added clients to the SCCM 
 server without issue.  I would suggest that the MDT team look at adding a 
 step to install the SCCM client as part of their existing OSD task sequence. 
  
 On Tue, Oct 28, 2014 at 7:57 AM, sccmfun sccm...@hotmail.com wrote:
 We currently have MDT 2012 Update 1 and are in the process of designing SCCM 
 2012 R2 CU3 for our company.  The MDT team isn’t ready to go to MDT 2013 and 
 want to keep the MDT 2012 Update 1 process separate from SCCM 2012 for a few 
 months after rollout of SCCM.  Anyone have any ideas how to get machines 
 patched via SCCM when the machine is built via MDT is that possible or do I 
 need to have a separate WSUS infrastructure for the builds until there ready 
 to upgrade to MDT 2013 and integrate into SCCM 2012?  I’m assuming there is 
 no way for them to reference out WSUS/SUP points during their MDT 2012 builds?
  
 Thanks
  
  
  
  
 

Re: [mssms] Windows Update Troubles

[Jason Wallace]

Under All Software Updates add a column to the view 



 On 27 Oct 2014, at 17:41, Wilson, Patrick (Pat) 
 patrick.wil...@srpmic-nsn.gov wrote:
 
 I am trying to trouble shoot some Windows updates not applying correctly but 
 I don’t know where in SCCM 2012 to resolve the WSUS guid from the 
 UpdatesHandler log to the real update.
  
 image002.jpg
 Pat Wilson
 SRPMIC Information Technology Desktop Services
 Senior Desktop Specialist
 Desk: 480-362-7676
 Fax: 480-362-5982
  
 CONFIDENTIALITY NOTICE:  This e-mail is intended solely for the person or 
 entity to which it is addressed and may contain confidential and/or 
 privileged information.  Any review, dissemination, copying, printing, or 
 other use of the e-mail by persons or entities other than the addressee is 
 prohibited.  If you have received this e-mail in error, please contact the 
 sender or send an e-mail to the sender and immediately delete the material 
 from your computer.   Thank you.
  
  P Please consider the environment before printing this e-mail, and do so 
 only if absolutely necessary.
  
  
 

RE: [mssms] SCCM 2012 + SUP Help

[Jason Wallace]

Hi Charles
 
To summarise, are you saying that you want to use SCCM for management but you 
DO NOT want SCCM to deploy software updates to SCCM clients?  If this is the 
case then you simply do not enable the Software Updates policy in SCCM and 
clients will take WSUS settings from Group Policy or however else it is that 
you wish to deliver them.  In this case SCCM would not be used at all and no 
content would reside upon your DPs
 
If what you want to achieve is to have your internal WSUS server act as the 
single point of updates and then have SCCM synchronise some or all updates from 
this machine then again this is possible.

From: chil...@mathematica-mpr.com
To: mssms@lists.myITforum.com
Date: Wed, 1 Oct 2014 10:42:45 -0400
Subject: [mssms] SCCM 2012 + SUP Help

I’m looking to set up SUP on our SCCM 2012 primary server (we also have 6 DPs 
located in other offices).  We currently have a stand-alone WSUS server that 
handles Windows updates for servers and clients.  That being said, we don’t 
have the CALs to support servers via SCCM, so this setup would be strictly for 
workstation systems.  Does anyone have any steps for setting this up?  Google 
has plenty of results for if WSUS is going to run on the SCCM server, but what 
I’m trying to do is use the SCCM server to pull updates from our WSUS server. 
Any help is greatly appreciated. Thanks. __
Charles Hiland

 

  

Re: [mssms] Enhanced Mitigation Experience Toolkit (EMET)

[Jason Wallace]

I have

Although the client did not want it configured - was purely an exercise to tick 
a box



 On 25 Sep 2014, at 18:50, Lutz, Ken kl...@spokanecounty.org wrote:
 
 Has anyone deployed this to the enterprise yet?  I’m just starting to look at 
 this and was wondering what issues people may be seeing with this product.
  
 Are you just using the ‘recommended settings’ or did you create some custom 
 profiles?  If you created custom profiles what sort of things did you 
 add/delete/change?
  
 Thanks…
  
 Ken Lutz
 Senior Systems Administrator
 Information Systems Department
 Spokane County
 815 N. Jefferson
 Spokane, Washington  99260
 image001.png
  
  
 

[mssms] App Model - avoid client cache

[Jason Wallace]

Hi there folks
 
I have an issue with a customer who is implementing a VDI solution based around 
CM12R2CU1 (at the moment).
 
They have a lot of applications which are available to the computer and appear 
in Software Center for the user to choose to install.  This therefore is 
APPMODEL data.
 
When we select an application it is downloaded into client cache of course and 
installed from there.
 
In the instance of this customer some users have more than 5GB of content which 
they want to deploy.  When they do of course they fill the client cache and 
that content remains for 24 hours.
 
Now one solution would be for us to dynamically increase the client cache size 
when we deploy an application and then shrink (and clear) the cache but they 
don't want to do this (storage is expensive).  Ideally I'd like to have 
something like run from DP but for App Model.
 
Suggestions appreciated
 
Jason
  

RE: [mssms] App Model - avoid client cache

[Jason Wallace]

Because we are using AppModel.  Run from DP is Package Model
 
From: dratl...@humana.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] App Model - avoid client cache
Date: Tue, 23 Sep 2014 14:17:59 +









Why aren’t you running from the DP? Are you just asking how you tell it to?
 

Daniel Ratliff

 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Jason Wallace

Sent: Tuesday, September 23, 2014 10:12 AM

To: mssms@lists.myitforum.com

Subject: [mssms] App Model - avoid client cache


 

Hi there folks

 

I have an issue with a customer who is implementing a VDI solution based around 
CM12R2CU1 (at the moment).

 

They have a lot of applications which are available to the computer and appear 
in Software Center for the user to choose to install.  This therefore is 
APPMODEL data.

 

When we select an application it is downloaded into client cache of course and 
installed from there.

 

In the instance of this customer some users have more than 5GB of content which 
they want to deploy.  When they do of course they fill the client cache and 
that content remains for 24 hours.

 

Now one solution would be for us to dynamically increase the client cache size 
when we deploy an application and then shrink (and clear) the cache but they 
don't want to do this (storage is expensive).  Ideally I'd like to have 
something like run from DP but
 for App Model.

 

Suggestions appreciated

 

Jason

 


The information transmitted is intended only for the person or entity to which 
it is addressed

and may contain CONFIDENTIAL material.  If you receive this 
material/information in error,

please contact the sender and delete or destroy the material/information.





  

RE: [mssms] App Model - avoid client cache

[Jason Wallace]

Yes, but that is an App-V application.  Bizarrely they have decided NOT to 
stream App-V apps from DP but to stream these apps into the image which they 
PVS.  This means that on first run all systems see all apps but then CM comes 
along and uninstalls the ones not valid for the system.
 
The apps which they are publishing to Software Center are .MSI and .EXE based 
thick client installers for applications which cannot be App-V'd
 
From: dratl...@humana.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] App Model - avoid client cache
Date: Tue, 23 Sep 2014 14:20:57 +









To stream from DP the settings are in the Deployment properties. See an example 
below.

 

 

Daniel Ratliff

 


From: Daniel Ratliff


Sent: Tuesday, September 23, 2014 10:18 AM

To: mssms@lists.myitforum.com

Subject: RE: [mssms] App Model - avoid client cache


 
Why aren’t you running from the DP? Are you just asking how you tell it to?
 

Daniel Ratliff

 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Jason Wallace

Sent: Tuesday, September 23, 2014 10:12 AM

To: mssms@lists.myitforum.com

Subject: [mssms] App Model - avoid client cache


 

Hi there folks

 

I have an issue with a customer who is implementing a VDI solution based around 
CM12R2CU1 (at the moment).

 

They have a lot of applications which are available to the computer and appear 
in Software Center for the user to choose to install.  This therefore is 
APPMODEL data.

 

When we select an application it is downloaded into client cache of course and 
installed from there.

 

In the instance of this customer some users have more than 5GB of content which 
they want to deploy.  When they do of course they fill the client cache and 
that content remains for 24 hours.

 

Now one solution would be for us to dynamically increase the client cache size 
when we deploy an application and then shrink (and clear) the cache but they 
don't want to do this (storage is expensive).  Ideally I'd like to have 
something like run from DP but
 for App Model.

 

Suggestions appreciated

 

Jason

 


The information transmitted is intended only for the person or entity to which 
it is addressed

and may contain CONFIDENTIAL material.  If you receive this 
material/information in error,

please contact the sender and delete or destroy the material/information.





  

RE: [mssms] App Model - avoid client cache

[Jason Wallace]

DO - NOT - GET - ME - STARTED
 
All of your points are MUCH better than what they have and are all solutions 
that they have rejected.  To top it all the original SCCM design was on RTM and 
no mention was made of VDI at that point yet we get the Well, you people 
designed it comment.
 
Jason
 
From: jmar...@babc.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] App Model - avoid client cache
Date: Tue, 23 Sep 2014 14:33:00 +









That's just yucky! LOL…. Why aren't they deploying the App-V apps to the users? 
Better yet, why aren't they deploying all apps to the users?
 
Or deploy the app-v apps to XenApp servers and let CM deploy the XA apps to the 
users.
 
 
 
 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Jason Wallace

Sent: Tuesday, September 23, 2014 9:29 AM

To: mssms@lists.myitforum.com

Subject: RE: [mssms] App Model - avoid client cache


 

Yes, but that is an App-V application.  Bizarrely they have decided NOT to 
stream App-V apps from DP but to stream these apps into the image which they 
PVS.  This means that on first run
 all systems see all apps but then CM comes along and uninstalls the ones not 
valid for the system.

 

The apps which they are publishing to Software Center are .MSI and .EXE based 
thick client installers for applications which cannot be App-V'd

 




From:
dratl...@humana.com

To: mssms@lists.myitforum.com

Subject: RE: [mssms] App Model - avoid client cache

Date: Tue, 23 Sep 2014 14:20:57 +

To stream from DP the settings are in the Deployment properties. See an example 
below.

 

 

Daniel Ratliff

 


From: Daniel Ratliff


Sent: Tuesday, September 23, 2014 10:18 AM

To: mssms@lists.myitforum.com

Subject: RE: [mssms] App Model - avoid client cache


 
Why aren’t you running from the DP? Are you just asking how you tell it to?
 

Daniel Ratliff

 


From:
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Jason Wallace

Sent: Tuesday, September 23, 2014 10:12 AM

To: mssms@lists.myitforum.com

Subject: [mssms] App Model - avoid client cache


 

Hi there folks

 

I have an issue with a customer who is implementing a VDI solution based around 
CM12R2CU1 (at the moment).

 

They have a lot of applications which are available to the computer and appear 
in Software Center for the user to choose to install.  This therefore is 
APPMODEL data.

 

When we select an application it is downloaded into client cache of course and 
installed from there.

 

In the instance of this customer some users have more than 5GB of content which 
they want to deploy.  When they do of course they fill the client cache and 
that content remains for 24 hours.

 

Now one solution would be for us to dynamically increase the client cache size 
when we deploy an application and then shrink (and clear) the cache but they 
don't want to do this (storage is expensive).  Ideally I'd like to have 
something like run from DP but
 for App Model.

 

Suggestions appreciated

 

Jason

 



The information transmitted is intended only for the person or entity to which 
it is addressed

and may contain CONFIDENTIAL material. If you receive this material/information 
in error,

please contact the sender and delete or destroy the material/information.


 





Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.






Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.








  

Re: [mssms] App Model - avoid client cache

[Jason Wallace]

Hi Paul

One hefty PVS image is what they do have and that in itself present some 
problems.

The whole app is streamed into the cache on startup however to enable all that 
content to be deduped at the NetApp and to save the iOPs associated with 
dragging that content down to the clients.

I agree that we absolutely need to have something to allow icons to appear (at 
the least) on startup.

Daniel's right about a DCR on this but I think that would be a pain to 
programme, quite simply because the content has to be reconstructed somewhere 
from the Content Library - we can do that on a share at the DP or in the client 
cache



 On 23 Sep 2014, at 15:46, Paul Winstanley pwinstan...@gmail.com wrote:
 
 Jason - Are these persistent VDI's as this would be a real mess in a 
 non-persistent environment? 
 On the App-V side, personally - until ConfigMgr sorts out publishing at 
 startup rather than on policy run - I would cache all App-V FB0 to the master 
 image rather than the whole app and then stream from DP with SCS switched on. 
 Otherwise you are going to have one hefty gold image.
 
 On Tue, Sep 23, 2014 at 3:38 PM, Daniel Ratliff dratl...@humana.com wrote:
 Jason you are right, it doesn’t look like you can run non-App-V apps from 
 the DP. They must be downloaded and ran locally. Sounds like another DCR.
 
  
 
 Daniel Ratliff
 
  
 
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Marcum, John
 Sent: Tuesday, September 23, 2014 10:33 AM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] App Model - avoid client cache
 
  
 
 That's just yucky! LOL…. Why aren't they deploying the App-V apps to the 
 users? Better yet, why aren't they deploying all apps to the users?
 
  
 
 Or deploy the app-v apps to XenApp servers and let CM deploy the XA apps to 
 the users.
 
  
 
  
 
  
 
  
 
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Jason Wallace
 Sent: Tuesday, September 23, 2014 9:29 AM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] App Model - avoid client cache
 
  
 
 Yes, but that is an App-V application.  Bizarrely they have decided NOT to 
 stream App-V apps from DP but to stream these apps into the image which they 
 PVS.  This means that on first run all systems see all apps but then CM 
 comes along and uninstalls the ones not valid for the system.
  
 The apps which they are publishing to Software Center are .MSI and .EXE 
 based thick client installers for applications which cannot be App-V'd
  
 
 From: dratl...@humana.com
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] App Model - avoid client cache
 Date: Tue, 23 Sep 2014 14:20:57 +
 
 To stream from DP the settings are in the Deployment properties. See an 
 example below.
 
  
 
 image001.png
 
  
 
 Daniel Ratliff
 
  
 
 From: Daniel Ratliff 
 Sent: Tuesday, September 23, 2014 10:18 AM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] App Model - avoid client cache
 
  
 
 Why aren’t you running from the DP? Are you just asking how you tell it to?
 
  
 
 Daniel Ratliff
 
  
 
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Jason Wallace
 Sent: Tuesday, September 23, 2014 10:12 AM
 To: mssms@lists.myitforum.com
 Subject: [mssms] App Model - avoid client cache
 
  
 
 Hi there folks
  
 I have an issue with a customer who is implementing a VDI solution based 
 around CM12R2CU1 (at the moment).
  
 They have a lot of applications which are available to the computer and 
 appear in Software Center for the user to choose to install.  This therefore 
 is APPMODEL data.
  
 When we select an application it is downloaded into client cache of course 
 and installed from there.
  
 In the instance of this customer some users have more than 5GB of content 
 which they want to deploy.  When they do of course they fill the client 
 cache and that content remains for 24 hours.
  
 Now one solution would be for us to dynamically increase the client cache 
 size when we deploy an application and then shrink (and clear) the cache but 
 they don't want to do this (storage is expensive).  Ideally I'd like to have 
 something like run from DP but for App Model.
  
 Suggestions appreciated
  
 Jason
 
  
 
 
 The information transmitted is intended only for the person or entity to 
 which it is addressed
 and may contain CONFIDENTIAL material. If you receive this 
 material/information in error,
 please contact the sender and delete or destroy the material/information.
 
  
 
 
 Confidentiality Notice: This e-mail is from a law firm and may be protected 
 by the attorney-client or work product privileges. If you have received this 
 message in error, please notify the sender by replying to this e-mail and 
 then delete it from your computer.
 
  
 
 
 Confidentiality Notice: This e-mail is from a law firm and may be protected 
 by the attorney-client or work product privileges. If you have received

Re: [mssms] App Model - avoid client cache

[Jason Wallace]

Hi Kim

These are persistent VDIs (again, don't get me started) so no profile



 On 23 Sep 2014, at 17:27, Kim Oppalfens kim.oppalf...@oscc.be wrote:
 
 Jason,
 
 Are you using roaming profiles at all?
 Or are you reinstalling at every logon?
 
 Have a customer with similar setup and would love to compare notes.
 
 Sent from my Windows Phone
 From: Jason Wallace
 Sent: ‎23/‎09/‎2014 18:03
 To: mssms@lists.myitforum.com
 Subject: Re: [mssms] App Model - avoid client cache
 
 Hi Paul
 
 One hefty PVS image is what they do have and that in itself present some 
 problems.
 
 The whole app is streamed into the cache on startup however to enable all 
 that content to be deduped at the NetApp and to save the iOPs associated with 
 dragging that content down to the clients.
 
 I agree that we absolutely need to have something to allow icons to appear 
 (at the least) on startup.
 
 Daniel's right about a DCR on this but I think that would be a pain to 
 programme, quite simply because the content has to be reconstructed somewhere 
 from the Content Library - we can do that on a share at the DP or in the 
 client cache
 
 
 
 On 23 Sep 2014, at 15:46, Paul Winstanley pwinstan...@gmail.com wrote:
 
 Jason - Are these persistent VDI's as this would be a real mess in a 
 non-persistent environment? 
 On the App-V side, personally - until ConfigMgr sorts out publishing at 
 startup rather than on policy run - I would cache all App-V FB0 to the 
 master image rather than the whole app and then stream from DP with SCS 
 switched on. Otherwise you are going to have one hefty gold image.
 
 On Tue, Sep 23, 2014 at 3:38 PM, Daniel Ratliff dratl...@humana.com wrote:
 Jason you are right, it doesn’t look like you can run non-App-V apps from 
 the DP. They must be downloaded and ran locally. Sounds like another DCR.
 
  
 
 Daniel Ratliff
 
  
 
 From: listsad...@lists.myitforum.com 
 [mailto:listsad...@lists.myitforum.com] On Behalf Of Marcum, John
 Sent: Tuesday, September 23, 2014 10:33 AM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] App Model - avoid client cache
 
  
 
 That's just yucky! LOL…. Why aren't they deploying the App-V apps to the 
 users? Better yet, why aren't they deploying all apps to the users?
 
  
 
 Or deploy the app-v apps to XenApp servers and let CM deploy the XA apps to 
 the users.
 
  
 
  
 
  
 
  
 
 From: listsad...@lists.myitforum.com 
 [mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Wallace
 Sent: Tuesday, September 23, 2014 9:29 AM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] App Model - avoid client cache
 
  
 
 Yes, but that is an App-V application.  Bizarrely they have decided NOT to 
 stream App-V apps from DP but to stream these apps into the image which 
 they PVS.  This means that on first run all systems see all apps but then 
 CM comes along and uninstalls the ones not valid for the system.
  
 The apps which they are publishing to Software Center are .MSI and .EXE 
 based thick client installers for applications which cannot be App-V'd
  
 
 From: dratl...@humana.com
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] App Model - avoid client cache
 Date: Tue, 23 Sep 2014 14:20:57 +
 
 To stream from DP the settings are in the Deployment properties. See an 
 example below.
 
  
 
 image001.png
 
  
 
 Daniel Ratliff
 
  
 
 From: Daniel Ratliff 
 Sent: Tuesday, September 23, 2014 10:18 AM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] App Model - avoid client cache
 
  
 
 Why aren’t you running from the DP? Are you just asking how you tell it to?
 
  
 
 Daniel Ratliff
 
  
 
 From: listsad...@lists.myitforum.com 
 [mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Wallace
 Sent: Tuesday, September 23, 2014 10:12 AM
 To: mssms@lists.myitforum.com
 Subject: [mssms] App Model - avoid client cache
 
  
 
 Hi there folks
  
 I have an issue with a customer who is implementing a VDI solution based 
 around CM12R2CU1 (at the moment).
  
 They have a lot of applications which are available to the computer and 
 appear in Software Center for the user to choose to install.  This 
 therefore is APPMODEL data.
  
 When we select an application it is downloaded into client cache of course 
 and installed from there.
  
 In the instance of this customer some users have more than 5GB of content 
 which they want to deploy.  When they do of course they fill the client 
 cache and that content remains for 24 hours.
  
 Now one solution would be for us to dynamically increase the client cache 
 size when we deploy an application and then shrink (and clear) the cache 
 but they don't want to do this (storage is expensive).  Ideally I'd like to 
 have something like run from DP but for App Model.
  
 Suggestions appreciated
  
 Jason
 
  
 
 
 The information transmitted is intended only for the person or entity to 
 which it is addressed
 and may contain CONFIDENTIAL material. If you receive this 
 material/information in error,
 please contact

RE: [mssms] ConfigMgr 2012 R2 OSD + PXE :: IP Helper vs. DHCP Options

[Jason Wallace]

John
 
Thank you for correcting me on the support level of DHCP options.
 
I suspect John that as an MVP you will have access to the documentation which 
states Furthermore
the use of DHCP Options to control PXE requests in Configuration Manager 2012
is not supported by Microsoft. Therefore the recommended and supported method
of PXE booting client PCs that are on a different subnet than the DHCP or
WDS/PXE Service Point servers is the use of IP Helpers.
I happened to be reviewing the document yesterday and the words not supported 
by Microsoft struck me I suppose that you could argue that were you to have an 
environment running WDS on Server 2008 where you never had any UEFI involvement 
then yes, Microsoft would support you.  I am quite sure that regardless of the 
above I am sure that you would still be supported since we all know that not 
supported actually means not tested Jason 
From: ja...@sandys.us
To: mssms@lists.myitforum.com
Subject: RE: [mssms] ConfigMgr 2012 R2 OSD + PXE :: IP Helper vs. DHCP Options
Date: Fri, 19 Sep 2014 14:18:24 +









Supported or not supported (by Microsoft) doesn’t really matter here though 
because Microsoft products have nothing to do with most of the PXE process – 
it’s almost entirely in the hands of the NIC to do the
 right thing. If something truly breaks down, it’s either the NIC’s fault or 
the network’s. The DHCP server can play a small role here, but ultimately, that 
role is truly insignificant as it’s still up to the NIC to determine what to do 
and then to do it. If
 the NIC does the wrong thing, there is no way to really troubleshoot it either 
and your only real recourse is to call the NIC vendor. There are NICs out there 
that some of us have encountered that simply refuse to do the right thing – 
these are pretty rare
 now days, but they do exist. With iphelpers, you simply have to watch the 
traffic if something weird is going on because it’s not up to the NIC anymore.
 
Experience has shown that iphelpers simply work better and as pointed out, with 
UEFI and architecture restrictions, DHCP cannot get the job done because it can 
only handle a single architecture.

 
J
 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Marcum, John

Sent: Friday, September 19, 2014 7:13 AM

To: mssms@lists.myitforum.com

Subject: RE: [mssms] ConfigMgr 2012 R2 OSD + PXE :: IP Helper vs. DHCP Options


 
DHCP options are supported. 

 


From:
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Jason Wallace

Sent: Thursday, September 18, 2014 6:20 PM

To: mssms@lists.myitforum.com

Subject: Re: [mssms] ConfigMgr 2012 R2 OSD + PXE :: IP Helper vs. DHCP Options


 

IP helpers is supported and recommended. DHCP is not and is not




On 19 Sep 2014, at 00:14, Trevor Sullivan tsul...@gmail.com wrote:



Over the past years that I have worked with Configuration Manager, I have 
learned to use IP helpers instead of DHCP options, to point client systems to a 
Windows Deployment Services (WDS) / PXE service. I have personally experienced 
multiple
 instances at customer sites, just over the past year, where DHCP options have 
simply not worked as expected, and caused erroneous error messages during PXE 
boot. As soon as we implement IP helpers, everything “just works.”
 
I am interested in gathering feedback from people on this mailing list to 
confirm or deny my current understanding on this topic. Do you use DHCP options 
or IP helper to point clients to the WDS/PXE service? Have you had a negative 
experience
 using one or the other?
 
Cheers,
Trevor Sullivan
Microsoft PowerShell MVP
image001.png
 
 


 





Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.
 





Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.
 





  

Re: [mssms] ConfigMgr 2012 R2 OSD + PXE :: IP Helper vs. DHCP Options

[Jason Wallace]

IP helpers is supported and recommended. DHCP is not and is not



 On 19 Sep 2014, at 00:14, Trevor Sullivan tsul...@gmail.com wrote:
 
 Over the past years that I have worked with Configuration Manager, I have 
 learned to use IP helpers instead of DHCP options, to point client systems to 
 a Windows Deployment Services (WDS) / PXE service. I have personally 
 experienced multiple instances at customer sites, just over the past year, 
 where DHCP options have simply not worked as expected, and caused erroneous 
 error messages during PXE boot. As soon as we implement IP helpers, 
 everything “just works.”
  
 I am interested in gathering feedback from people on this mailing list to 
 confirm or deny my current understanding on this topic. Do you use DHCP 
 options or IP helper to point clients to the WDS/PXE service? Have you had a 
 negative experience using one or the other?
  
 Cheers,
 Trevor Sullivan
 Microsoft PowerShell MVP
 image001.png
  
 

Re: [mssms] Migration Job Error

[Jason Wallace]

Does content not associated with OSD migrate?

Are these in the same or different forests?

 On 12 Sep 2014, at 20:30, HS SYS Admin hssysad...@gmail.com wrote:
 
 We are attempting to migrate OS and Boot images from SCCM 2007 to SCCM 2012 
 using migration jobs but we get the attached error in the migmctrl.log on the 
 CAS when it runs.. any ideas?
 
 
 
 MigrationError.JPG

Re: [mssms] Ack! Just accidentally deleted a task sequence!

[Jason Wallace]

There is a blog somewhere (sorry, on train) where every time a TS is modified a 
copy is taken to a known folder.

It is worth implementing this

 On 10 Sep 2014, at 00:15, Daniel Ratliff dratl...@humana.com wrote:
 
 More painful options then...go find smsts.log from a build and parse for all 
 steps package ids and conditions and recreate.
 
 Maybe there is a view in the db with the sequence xml, but not sure where to 
 look first. Sine deletion table?
 
 -Original Message-
 From: Murray, Mike [mmur...@csuchico.edu]
 Sent: Tuesday, September 09, 2014 07:03 PM Eastern Standard Time
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] Ack! Just accidentally deleted a task sequence!
 
 Nope.  :(
 
  
 
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Daniel Ratliff
 Sent: Tuesday, September 9, 2014 3:59 PM
 To: 'mssms@lists.myitforum.com'; 'mssms@lists.myitforum.com'
 Subject: RE: [mssms] Ack! Just accidentally deleted a task sequence!
 
  
 
 Have multiple sites the changes haven't replicated to yet? Connect to those 
 and export.
 
 -Original Message-
 From: Daniel Ratliff [dratl...@humana.com]
 Sent: Tuesday, September 09, 2014 06:57 PM Eastern Standard Time
 To: 'mssms@lists.myitforum.com'; 'mssms@lists.myitforum.com'
 Subject: RE: [mssms] Ack! Just accidentally deleted a task sequence!
 
 Did you take backups/exports?
 
 -Original Message-
 From: Murray, Mike [mmur...@csuchico.edu]
 Sent: Tuesday, September 09, 2014 06:51 PM Eastern Standard Time
 To: mssms@lists.myitforum.com
 Subject: [mssms] Ack! Just accidentally deleted a task sequence!
 
 
 
 I just accidentally deleted my Win8 build  capture TS. Is there a quick way 
 to restore this?
 
  
 
  
 
 Best Regards,
 
  
 
 Mike Murray
 
 Desktop Management Coordinator - IT Support Services
 
 California State University, Chico
 
 530.898.4357
 mmur...@csuchico.edu
 
  
 
 
 
 The information transmitted is intended only for the person or entity to 
 which it is addressed
 and may contain CONFIDENTIAL material. If you receive this 
 material/information in error,
 please contact the sender and delete or destroy the material/information.
 
 
 The information transmitted is intended only for the person or entity to 
 which it is addressed
 and may contain CONFIDENTIAL material. If you receive this 
 material/information in error,
 please contact the sender and delete or destroy the material/information.
 
  
 
 
 
 The information transmitted is intended only for the person or entity to 
 which it is addressed
 and may contain CONFIDENTIAL material. If you receive this 
 material/information in error,
 please contact the sender and delete or destroy the material/information.
 

Re: [mssms] Multiple SUP in SCCM 2012 R2

[Jason Wallace]

From a pure SCCM perspective if you have a single site then SCCM will simply 
respond to a location service request and send the client to a SUP with no 
consideration of your network.

This means that you are likely to have your SUPs located in the centre.  Once 
clients have scanned the results will be reported to the MP and then updates 
deployed from a DP (this time with concern given to bandwidth)

As far as the clients pulling down the catalog this will be over HTTP 8530 - is 
this something you can control with QOS?

As far as managing the bandwidth

 On 10 Sep 2014, at 07:03, Raghav, Abhishek abhishek.rag...@blackrock.com 
 wrote:
 
 We have multiple SUPs installed/configured in single SCCM 2012 R2 site. We 
 recently has issue where SCCM clients started scanning and exhausted WAN link.
  
 I am looking for a way for clients to use local SUP for scanning. We can use 
 F5 with some common name, which will redirect clients to local SUP IP 
 address. The challenge is configuring SCCM client with common name.
  
 Can we use GPO to set WSUS common URL on all clients? Will SCCM not override 
 this GPO setting?
  
 I actually tried setting this up manually in client’s registry and even WMI, 
 but every time I initiate scan, SCCM client sends WSUS location request and 
 configure it with one of the SUP name/URL.
  
 Thanks,
 Abhi
 THIS MESSAGE AND ANY ATTACHMENTS ARE CONFIDENTIAL, PROPRIETARY, AND MAY BE 
 PRIVILEGED. If this message was misdirected, BlackRock, Inc. and its 
 subsidiaries, (BlackRock) does not waive any confidentiality or privilege. 
 If you are not the intended recipient, please notify us immediately and 
 destroy the message without disclosing its contents to anyone. Any 
 distribution, use or copying of this e-mail or the information it contains by 
 other than an intended recipient is unauthorized. The views and opinions 
 expressed in this e-mail message are the author's own and may not reflect the 
 views and opinions of BlackRock, unless the author is authorized by BlackRock 
 to express such views or opinions on its behalf. All email sent to or from 
 this address is subject to electronic storage and review by BlackRock. 
 Although BlackRock operates anti-virus programs, it does not accept 
 responsibility for any damage whatsoever caused by viruses being passed.
 
 

RE: [mssms] Ack! Just accidentally deleted a task sequence!

[Jason Wallace]

Thanks John
 
That's the one.  I had not gotten round to looking for it again.  Perhaps I'll 
use this as a spur to (once again) try and get organised with OneNote
 
From: jmar...@babc.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Ack! Just accidentally deleted a task sequence!
Date: Wed, 10 Sep 2014 13:43:33 +









It's Maik's blog. Very well worth the 10 min it takes to setup.
 
http://myitforum.com/cs2/blogs/maikkoster/archive/2011/05/12/versioning-monitoring-sccm-task-sequences.aspx

 
 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Jason Wallace

Sent: Wednesday, September 10, 2014 1:26 AM

To: mssms@lists.myitforum.com

Subject: Re: [mssms] Ack! Just accidentally deleted a task sequence!


 

There is a blog somewhere (sorry, on train) where every time a TS is modified a 
copy is taken to a known folder.


 


It is worth implementing this




On 10 Sep 2014, at 00:15, Daniel Ratliff dratl...@humana.com wrote:



More painful options then...go find smsts.log from a build and parse for all 
steps package ids and conditions and recreate.



Maybe there is a view in the db with the sequence xml, but not sure where to 
look first. Sine deletion table?



-Original Message-

From: Murray, Mike [mmur...@csuchico.edu]

Sent: Tuesday, September 09, 2014 07:03 PM Eastern Standard Time

To: mssms@lists.myitforum.com

Subject: RE: [mssms] Ack! Just accidentally deleted a task sequence!







Nope.  :(
 


From:
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Daniel Ratliff

Sent: Tuesday, September 9, 2014 3:59 PM

To: 'mssms@lists.myitforum.com'; 'mssms@lists.myitforum.com'

Subject: RE: [mssms] Ack! Just accidentally deleted a task sequence!


 
Have multiple sites the changes haven't replicated to yet? Connect to those and 
export.



-Original Message-

From: Daniel Ratliff [dratl...@humana.com]

Sent: Tuesday, September 09, 2014 06:57 PM Eastern Standard Time

To: 'mssms@lists.myitforum.com'; 'mssms@lists.myitforum.com'

Subject: RE: [mssms] Ack! Just accidentally deleted a task sequence!



Did you take backups/exports?



-Original Message-

From: Murray, Mike [mmur...@csuchico.edu]

Sent: Tuesday, September 09, 2014 06:51 PM Eastern Standard Time

To: mssms@lists.myitforum.com

Subject: [mssms] Ack! Just accidentally deleted a task sequence!




I just accidentally deleted my Win8 build  capture TS. Is there a quick way to 
restore this?
 
 
Best Regards,
 
Mike Murray
Desktop Management Coordinator - IT Support Services
California State University, Chico
530.898.4357

mmur...@csuchico.edu
 




The information transmitted is intended only for the person or entity to which 
it is addressed

and may contain CONFIDENTIAL material. If you receive this material/information 
in error,

please contact the sender and delete or destroy the material/information.





The information transmitted is intended only for the person or entity to which 
it is addressed

and may contain CONFIDENTIAL material. If you receive this material/information 
in error,

please contact the sender and delete or destroy the material/information.
 





The information transmitted is intended only for the person or entity to which 
it is addressed

and may contain CONFIDENTIAL material. If you receive this material/information 
in error,

please contact the sender and delete or destroy the material/information.


 





Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.






Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.





  

RE: [mssms] Re: You have subscribed to mssms@lists.myITforum.com

[Jason Wallace]

 
 
Date: Fri, 5 Sep 2014 10:07:00 -0400
Subject: [mssms] Re: You have subscribed to mssms@lists.myITforum.com
From: lateefk...@gmail.com
To: mssms@lists.myitforum.com

Unsubscribe mssms 

On Thu, Oct 31, 2013 at 7:42 PM, mssms@lists.myITforum.com 
mssms@lists.myitforum.com wrote:
Welcome to the myITforum.com SMS Email Discussion list!



Please retain this email, as it contains commands for working with this list.  
To utilize the following commands, simply send an email to 
comm...@lists.myitforum.com and input the command into the BODY text of the 
email.



Help - Replies to the email with basic instructions on using List Serv Commands.



Help mssms - Replies to the email with the contents of the Help E-Mail for that 
list.



List - Replies to the email with a list of all available lists.



Subscribe mssms - Adds your email address to the subscribers list of the 
mailing list.



Unsubscribe mssms - Removes your email address from the subscribers list for 
the mailing list.



Set mode digest mssms - Sets your email address to receive emails in digest 
mode, which will send all messages for the list combined into one email at 
regular intervals.



Set mode standard mssms - Sets your email address to receive emails in standard 
mode (the default), which will send messages one at a time to your email 
account.



The email Address to use for posting to this list is: mssms@lists.myITforum.com



Please NOTE:  Due to the way Lotus Notes renders HTML email, if you use the 
Lotus Notes product for your email services you will need to post in TEXT 
format only.







  

[mssms] Software Center slowness

[Jason Wallace]

Hi fellas
 
I have an issue with a customer who is reporting that SC takes some time to 
populate when a user logs on.  One of the things which they would find 
acceptable is that after logon the SC icon did not appear until the policy had 
refreshed.
 
I wonder if anyone has encountered this and implemented something similar 
please?

Jason
  

RE: [mssms] Software Center slowness

[Jason Wallace]

Shaves a minute or so off.  No, it's nothing to do with other autostart 
services - it's an optimised build
 
From: jaub...@norwoodmedical.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Software Center slowness
Date: Thu, 4 Sep 2014 14:36:10 +









How fast is it when you move the service from autostart delayed to just 
autostart?
 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Jason Sandys

Sent: Thursday, September 4, 2014 10:33 AM

To: mssms@lists.myitforum.com

Subject: RE: [mssms] Software Center slowness


 
Assuming the long on is immediately after a reboot, then this is normal and 
expected because the client agent service is set to delayed start which means 
it’s
 probably not even started yet. There’s no built-in mechanism to hide, remove, 
re-add icons based upon service availability. The best answer here is to 
provide the info and instruct them to be patient.
 
J
 


From:
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Jason Wallace

Sent: Thursday, September 4, 2014 6:02 AM

To: mssms@lists.myitforum.com

Subject: [mssms] Software Center slowness


 

Hi fellas

 

I have an issue with a customer who is reporting that SC takes some time to 
populate when a user logs on.  One of the things which they would find 
acceptable is that after logon the SC icon did not appear until the policy had 
refreshed.

 

I wonder if anyone has encountered this and implemented something similar 
please?



Jason

 
 





  

Re: [mssms] RegKeytoMOF question

[Jason Wallace]

What is the purpose? Are you looking to build a binary - if there is something 
here then the old client exists?

If so then Compliance  Settings might just be the way to go 

 On 27 Aug 2014, at 21:38, Murray, Mike mmur...@csuchico.edu wrote:
 
 One of our Oracle guys wants me to inventory all computers that have some old 
 Oracle client on them. The only way to find these is via registry values, 
 there’s no ARP entries. He says these values will not be consistent, and 
 there could be many. However, they would all reside under 
 HKLM\Software\Wow6432Node\Oracle. Is it possible to dynamically collect 
 everything under this key?
  
  
 Best Regards,
  
 Mike Murray
 Desktop Management Coordinator - IT Support Services
 California State University, Chico
 530.898.4357
 mmur...@csuchico.edu
  
 

Re: [mssms] CM Intune Integration

[Jason Wallace]

In order to integrate with Intune you will need a cert to authenticate with 
Intune. You will also need an Apple cert if you wish to manage Ixxx devices and 
a verisign cert for Windows ones.

You do not need an internal CA

 On 22 Aug 2014, at 13:16, Brian McDonald mcdonald...@hotmail.com wrote:
 
 Does anyone know if this requires a PKI CERT? 
 
 Thanks!
 
 Brian
 
 Sent from my iPhone
 
 
 

Re: [mssms] cancel software updates restart

[Jason Wallace]

Hi there

Sorry about the unplanned reboot.

Something which you may wish to consider in future is always suppressing 
reboots as a default!

While at first glance this seems like a dumber than dumb idea you'll find that 
Santos Martinez has a very good blog post about using Compliance and Settings 
to check systems for outstanding reboots.  Using this you can build collections 
to either work with users / server owners to schedule reboots as required

 On 18 Aug 2014, at 21:42, Timothy Ransom timothy.ran...@gdol.ga.gov wrote:
 
 Tried all but countdown persists.
  
 I was on with Microsoft support when countdown started and he said there is 
 no way to stop it, but I was hopeful for a workaround.
  
 Sent out emails and ready to take my lumps for unscheduled reboot.
  
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Taxter, Latisha
 Sent: Monday, August 18, 2014 3:35 PM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] cancel software updates restart
  
 Interesting.. good to know.
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Daniel Ratliff
 Sent: Monday, August 18, 2014 12:30 PM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] cancel software updates restart
  
 Here you go.
  
 Daniel Ratliff
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Daniel Ratliff
 Sent: Monday, August 18, 2014 3:27 PM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] cancel software updates restart
  
 Neither of these options work when the shutdown was initiated from ConfigMgr.
  
 There was a big thread on this list a few months back about it. I’ll see if I 
 can find it.
  
 Daniel Ratliff
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Taxter, Latisha
 Sent: Monday, August 18, 2014 3:24 PM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] cancel software updates restart
  
 Once a shutdown has been initiated, these two will have no effect on it.  The 
 system has already been issued a shutdown with a time.  Only option is to 
 abort the shutdown with a shutdown /a
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of elsalvoz
 Sent: Monday, August 18, 2014 12:19 PM
 To: mssms@lists.myitforum.com
 Subject: Re: [mssms] cancel software updates restart
  
 Stop ccmexec and wuau services
 
 Cesar
 
 On Aug 18, 2014 11:42 AM, Timothy Ransom timothy.ran...@gdol.ga.gov wrote:
 Help – I have an important server that has started a countdown to restart 
 after installing security updates.
  
 Is there a way to stop the restart?
  
 
 **
 GDOL CONFIDENTIALITY NOTICE: This transmission may contain confidential 
 information protected by state or federal law. The information is intended 
 only for use consistent with the state business discussed in this 
 transmission. If you are not the intended recipient, you are hereby notified 
 that any disclosure, copying, distribution, or the taking of any action based 
 on the contents is strictly prohibited. If you have received this 
 transmission in error, please delete this email and notify the sender 
 immediately. Your cooperation is appreciated.
 **
  
  
  
 
 The information transmitted is intended only for the person or entity to 
 which it is addressed
 and may contain CONFIDENTIAL material. If you receive this 
 material/information in error,
 please contact the sender and delete or destroy the material/information.
  
 
 The information transmitted is intended only for the person or entity to 
 which it is addressed
 and may contain CONFIDENTIAL material. If you receive this 
 material/information in error,
 please contact the sender and delete or destroy the material/information.
  
  
 
 
 **
 GDOL CONFIDENTIALITY NOTICE: This transmission may contain confidential 
 information protected by state or federal law. The information is intended 
 only for use consistent with the state business discussed in this 
 transmission. If you are not the intended recipient, you are hereby notified 
 that any disclosure, copying, distribution, or the taking of any action based 
 on the contents is strictly prohibited. If you have received this 
 transmission in error, please delete this email and notify the sender 
 immediately. Your cooperation is appreciated.
 **
 

Re: [mssms] Configuring bits throttling

[Jason Wallace]

Daniel

While considering BITS throttling is a great idea may I ask whether you have 
considered using BranchCache in this scenario?  In this case you would likely 
download the content to a remote office only once or twice and then serve it 
locally.

Another scenario which can work well with updates - sometimes a remote office 
will have a direct Internet connection which is less slow than that which CORP 
supplies. In this environment you can set updated to download direct from WUMU 
while still deploying the catalog through CM

 On 14 Aug 2014, at 08:18, Corkill, Daniel danielcork...@logan.qld.gov.au 
 wrote:
 
 I have a number of WAN sites that are on links ranging from 512k to 1.5m; 
 each site has a handful of computers and no DPs. When I deploy monthly 
 updates and these clients begin downloading them, I’m obviously concerned 
 about effecting the links. I’m looking into BITS throttling via custom client 
 settings but I’m unsure what I should actually limit the bandwidth to. Does 
 anyone have any guidance on how I can determine the fastest speed I can set 
 before I start effecting links?
  
 Daniel.
 
 
 *
 This email, including any attachment, is confidential to the intended 
 recipient.  It may also be privileged and may be subject to copyright.  If 
 you have received this email in error, please notify the sender immediately 
 and delete all copies of the email.  Any confidentiality or privilege is not 
 waived.  Neither the Council nor the sender warrant that this email does not 
 contain any viruses or other unsolicited items.
 
 This email is an informal Council communication.  The Council only accepts 
 responsibility for information sent under official letterhead and duly signed 
 by, or on behalf of, the Chief Executive Officer.
 
 Privacy Collection Notice
 Logan City Council may collect your personal information, e.g. name, 
 residential address, phone number etc, in order to conduct its business 
 and/or meet its statutory obligations. The information will only be accessed 
 by employees and/or Councillors of Logan City Council for Council business 
 related activities only. If your personal information will be passed onto a 
 third party, Council will advise you of this disclosure, the purpose of the 
 disclosure and reason why. Your information will not be given to any other 
 person or agency unless you have given us permission or we are required by 
 law.
 
 
 

Re: [mssms] Configuring bits throttling

[Jason Wallace]

Personally I prefer to do so through CM CIs than GPOs - sorry, on vacation and 
away from my notes 

 On 14 Aug 2014, at 14:21, Corkill, Daniel danielcork...@logan.qld.gov.au 
 wrote:
 
 I might look into the branch cache option. Are there any recommended guides 
 for configuring this?
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Jason Wallace
 Sent: Thursday, 14 August 2014 7:03 PM
 To: mssms@lists.myitforum.com
 Subject: Re: [mssms] Configuring bits throttling
  
 Daniel
  
 While considering BITS throttling is a great idea may I ask whether you have 
 considered using BranchCache in this scenario?  In this case you would likely 
 download the content to a remote office only once or twice and then serve it 
 locally.
  
 Another scenario which can work well with updates - sometimes a remote office 
 will have a direct Internet connection which is less slow than that which 
 CORP supplies. In this environment you can set updated to download direct 
 from WUMU while still deploying the catalog through CM
 
 On 14 Aug 2014, at 08:18, Corkill, Daniel danielcork...@logan.qld.gov.au 
 wrote:
 
 I have a number of WAN sites that are on links ranging from 512k to 1.5m; 
 each site has a handful of computers and no DPs. When I deploy monthly 
 updates and these clients begin downloading them, I’m obviously concerned 
 about effecting the links. I’m looking into BITS throttling via custom client 
 settings but I’m unsure what I should actually limit the bandwidth to. Does 
 anyone have any guidance on how I can determine the fastest speed I can set 
 before I start effecting links?
  
 Daniel.
  
  
 *
 This email, including any attachment, is confidential to the intended 
 recipient.  It may also be privileged and may be subject to copyright.  If 
 you have received this email in error, please notify the sender immediately 
 and delete all copies of the email.  Any confidentiality or privilege is not 
 waived.  Neither the Council nor the sender warrant that this email does not 
 contain any viruses or other unsolicited items.
  
 This email is an informal Council communication.  The Council only accepts 
 responsibility for information sent under official letterhead and duly signed 
 by, or on behalf of, the Chief Executive Officer.
  
 Privacy Collection Notice
 Logan City Council may collect your personal information, e.g. name, 
 residential address, phone number etc, in order to conduct its business 
 and/or meet its statutory obligations. The information will only be accessed 
 by employees and/or Councillors of Logan City Council for Council business 
 related activities only. If your personal information will be passed onto a 
 third party, Council will advise you of this disclosure, the purpose of the 
 disclosure and reason why. Your information will not be given to any other 
 person or agency unless you have given us permission or we are required by 
 law.
  
  
 
  
 
 
 *
 This email, including any attachment, is confidential to the intended 
 recipient.  It may also be privileged and may be subject to copyright.  If 
 you have received this email in error, please notify the sender immediately 
 and delete all copies of the email.  Any confidentiality or privilege is not 
 waived.  Neither the Council nor the sender warrant that this email does not 
 contain any viruses or other unsolicited items.
 
 This email is an informal Council communication.  The Council only accepts 
 responsibility for information sent under official letterhead and duly signed 
 by, or on behalf of, the Chief Executive Officer.
 
 Privacy Collection Notice
 Logan City Council may collect your personal information, e.g. name, 
 residential address, phone number etc, in order to conduct its business 
 and/or meet its statutory obligations. The information will only be accessed 
 by employees and/or Councillors of Logan City Council for Council business 
 related activities only. If your personal information will be passed onto a 
 third party, Council will advise you of this disclosure, the purpose of the 
 disclosure and reason why. Your information will not be given to any other 
 person or agency unless you have given us permission or we are required by 
 law.
 
 
 

Re: [mssms] RE: SCCM 2012 R2 Client Install Issue

[Jason Wallace]

Then do you have something nasty interfering with disk access? This often has 
the letters McAfee nearby

 On 5 Aug 2014, at 16:33, King, Jason jkin...@hfhs.org wrote:
 
 I checked that and it has well over 400gb Free
  
  
 image001.png
  
  
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 
 . . . . . . . . . . . . . . . . . . . 
 
 Jason King | Solutions Design Team
 
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of James Massardo
 Sent: Tuesday, August 5, 2014 9:32 AM
 To: mssms@lists.myitforum.com
 Subject: [mssms] RE: SCCM 2012 R2 Client Install Issue
  
 This might have something to do with it.
  
 (errorCode=GetLastError()) == ERROR_DISK_FULL, HRESULT=80070005 
 (e:\nts_sccm_release\sms\setup\ccmsetup\ccmsetup.cpp,6932)
 ccmsetup8/4/2014 5:21:20 PM   5644 (0x160C)
  
 Thanks,
 James Massardo
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of King, Jason
 Sent: Tuesday, August 5, 2014 8:22 AM
 To: mssms@lists.myitforum.com
 Subject: [mssms] SCCM 2012 R2 Client Install Issue
  
 Has anyone else had this issue with client installs.  I have several clients 
 that I cannot get the client to install.  I have tried with client push or 
 copying the client local with several command line options.  When I attempt 
 to install the client it gives me an error in the CCMSETUP.log.   Download 
 Update: A recoverable error has occurred.  A retry attempt will be made.  
 Does this continually.   When I have copied the client locally and just tried 
 to run ccmsetup without any command line options I get an error This 
 operating system does not contain the correct version of BITS. BITS 2.5 or 
 later is required.  These are windows 7 machines and I have verified that the 
 version of bits is well above 2.5 and installed.   I have added the logs to 
 this email for your viewing pleasure.  Any help is greatly appreciated.  
  
 …..
 
 Jason King | Solutions Design Team
 
 
 Please consider the environment before printing this email.
 
  
  
 
 CONFIDENTIALITY NOTICE: This email contains information from the sender that 
 may be CONFIDENTIAL, LEGALLY PRIVILEGED, PROPRIETARY or otherwise protected 
 from disclosure. This email is intended for use only by the person or entity 
 to whom it is addressed. If you are not the intended recipient, any use, 
 disclosure, copying, distribution, printing, or any action taken in reliance 
 on the contents of this email, is strictly prohibited. If you received this 
 email in error, please contact the sending party by reply email, delete the 
 email from your computer system and shred any paper copies.
 
 Note to Patients: There are a number of risks you should consider before 
 using e-mail to communicate with us. See our Privacy  Security page on 
 www.henryford.com for more detailed information as well as information 
 concerning MyChart, our new patient portal. If you do not believe that our 
 policy gives you the privacy and security protection you need, do not send 
 e-mail or Internet communications to us.
  
 NOTICE: This electronic mail message and any files transmitted with it are 
 intended
 exclusively for the individual or entity to which it is addressed. The 
 message, 
 together with any attachment, may contain confidential and/or privileged 
 information.
 Any unauthorized review, use, printing, saving, copying, disclosure or 
 distribution 
 is strictly prohibited. If you have received this message in error, please 
 immediately advise the sender by reply email and delete all copies.
 
  
 

Re: [mssms] RE: Cross domain ConfigMgr Support

[Jason Wallace]

If it is performance as designed then you'll likely get the same response. You 
might get some way by raising a DCR but if use of HTTPS is the answer then that 
sounds like a reasonably easy fix

 On 5 Aug 2014, at 16:31, Daniel Ratliff dratl...@humana.com wrote:
 
 Hopefully we get a better answer. Will let you know.
  
 Daniel Ratliff
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Krueger, Jeff
 Sent: Tuesday, August 05, 2014 10:19 AM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] RE: Cross domain ConfigMgr Support
  
 Yep exact same thing we saw, it tries first to talk to the HTTPS MP and would 
 not fail over, and PE would error out because it couldn’t download policy.  
 MS  support told us that was by design and we’d have to use a static boot 
 image or put a cert in our boot images.
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Daniel Ratliff
 Sent: Tuesday, August 5, 2014 9:59 AM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] RE: Cross domain ConfigMgr Support
  
 Ours is expected behavior too, except for one piece. Once it tries to hit the 
 DMZ MPs and failed, it should rollover to the HTTP MPs internally, but it’s 
 not.
  
 Daniel Ratliff
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Krueger, Jeff
 Sent: Tuesday, August 05, 2014 9:44 AM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] RE: Cross domain ConfigMgr Support
  
 We had a case open with Microsoft for the same issue, was told that it was 
 expected behavior.  So we’re using static boot images, which ultimately is 
 not a huge issue for us (only a single primary) but still annoying.
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Daniel Ratliff
 Sent: Tuesday, August 5, 2014 9:30 AM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] RE: Cross domain ConfigMgr Support
  
 We have a case open with Microsoft for this exact issue.
  
 Having separate boot disks for all of our primaries is not an option. I think 
 we may end up just making all our MPs HTTPS.
  
 Daniel Ratliff
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of CE5AR.ABREG0
 Sent: Tuesday, August 05, 2014 9:26 AM
 To: mssms@lists.myitforum.com
 Subject: Re: [mssms] RE: Cross domain ConfigMgr Support
  
 Sorry for highjacking the thread a little bit. 
  
 If you do bare metal OSD with dynamic boot disk, make sure you do additional 
 testing. 
  
 Behavior we have seen. When there is only one HTTPS MP, during WINPE client 
 will try contacting it first because it will be at the top of the list due to 
 preference and the client will not be able to download policies and display 
 any TSs. We are currently dealing with this issue. 
  
 Unless we are missing something, the only way to get around this issue, it is 
 not to make the boot disk dynamic but when you have a CAS and multiple 
 primaries/domains you need to have one per primary. 
  
 Fun stuff, I hope it helps or get input from others. 
 
 Cesar A.
 Meaning is NOT in words, but inside people! Dr. Myles Munroe
 My iPad takes half the blame for misspells.
 
 On Aug 5, 2014, at 4:21 AM, David O'Brien obrien.da...@outlook.com wrote:
 
 Just to add, never cut your clients in a secondary site off from the primary 
 site. Even if you have a management point in your secondary, upon 
 registration, the client will always talk to a primary site's management 
 point. No matter what command line parameters you're using to point it 
 somewhere else.
 I had to learn that recently, you can't completely separate networks.
 
 Cheers
 David
 
 Sent from my Windows Phone
 From: Robert Marshall
 Sent: ‎5/‎08/‎2014 8:29 PM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] RE: Cross domain ConfigMgr Support
 
 Just to add further … the MP and SUP roles are not location aware, so once 
 you’ve got a site system with an MP and\or SUP into the DMZ you need to pay 
 some thought to controlling DMZ devices attempts to access CORP roles, and 
 the reverse from CORP to DMZ.
  
 The ConfigMgr agent could treat all those MP’s equal when performing 
 selection, you say you’ve got the forest split up into multiple domains, well 
 the ConfigMgr agent will select an MP based on Forest\Domain\Security Realm 
 (HTTP\HTTPS), so you may have a form of location ‘bounding’ in place for the 
 MP roles already.
  
 If you didn’t have that bounding taking place due to your Active Directory 
 design then you’d traditionally go with a Secondary Site server in the DMZ, 
 so as to ‘bound’ the MP and SUP usage, but this scenario has a drawback in 
 that your DMZ based devices will have to have a relationship with your 
 Primary Site servers Management Point(s), as well as the Proxy Management 
 Point, and that you can only put one of each role onto a Secondary so there 
 is no high availability options, either 

Re: [mssms] Help with task sequence variable logic

[Jason Wallace]

Write a small vbscript to dump the first two characters to a task sequence 
variable and then query it

 On 31 Jul 2014, at 17:47, Murray, Mike mmur...@csuchico.edu wrote:
 
 I have a couple of steps in our TS that I want to execute for one set of 
 computers based on their naming convention, and another set of steps for 
 another set of computers with a different naming convention. The two naming 
 conventions start with:
  
 QL-
 RS-
  
 If I use the argument under options, task sequence variable OSDComputerName 
 greater than or equal to “QL-%”, both naming conventions match the 
 requirement, and I don’t want that. If I just use equals, it doesn’t work at 
 all.
  
 Is there some other way to work this logic?
  
  
 Best Regards,
  
 Mike Murray
 Desktop Management Coordinator - IT Support Services
 California State University, Chico
 530.898.4357
 mmur...@csuchico.edu
  
 

RE: [mssms] Build TS complete status should be emailed

[Jason Wallace]

Lots using Scorch to do it.  For example
 
http://www.techygeekshome.co.uk/2013/04/email-notification-at-end-of-sccm-osd.html
 
 From: hun@outlook.com
 Subject: [mssms] Build TS complete status should be emailed
 Date: Tue, 15 Jul 2014 15:27:29 +0530
 To: mssms@lists.myitforum.com
 
 Got a requirement that after build success or failure there should be an 
 email sent to the local build engineer with the status.
 
 Has any one already done this???
 
 
 Sent from iPhonesorry for typos
 
 
 
  

RE: [mssms] SCCM collection creation by script

[Jason Wallace]

Hi there Steve
 
Thanks for that!  That is precisely what we DO have and it works really well 
indeed.
 
I have an engineer sat there however going through a list of several hundred IP 
subnets and creating this collection.  The list that we built was in itself 
built from a simple DISTINCT selection of default gateways from hardware 
inventory.
 
I was hoping to go a little further and script the extract from HW inventory 
and then cycle through this list, creating collections based upon the default 
gateways
 
Jason
 
From: ste...@hosking.com.au
To: mssms@lists.myitforum.com
Subject: Re: [mssms] SCCM collection creation by script
Date: Fri, 11 Jul 2014 06:16:35 +







Hi Jason,
try this:select 
SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client
 from SMS_R_System inner join SMS_G_System_NETWORK_ADAPTER_CONFIGURATION on 
SMS_G_System_NETWORK_ADAPTER_CONFIGURATION.ResourceID = SMS_R_System.ResourceId 
where SMS_G_System_NETWORK_ADAPTER_CONFIGURATION.DefaultIPGateway = x.x.x.x
Just change the x.x.x.x to the default Gateway Address.
Cheers
Steve

From: Jason Wallace
Sent: ‎Friday‎, ‎11‎ ‎July‎ ‎2014 ‎3‎:‎50‎ ‎PM
To: mssms@lists.myitforum.com
Hi folks
 
A dumb question for this morning but . . . 
 
I am in the midst of a 2007 - 2012 migration.  We want to move devices over by 
IP subnet as there are a large number of branch offices.
 
I wonder whether someone has a magic script that can allow us to read the 
default gateway from hardware inventory and then create a series of collections 
on that please?
 
Thanks
  







  

Re: [mssms] CM 2012 Role in DMZ

[Jason Wallace]

By default?

There's no supported way to change this 

 On 4 Jul 2014, at 12:01, David O'Brien obrien.da...@outlook.com wrote:
 
 MPs are NOT location aware, by default. MP selection has nothing to do with 
 boundaries, at least not if we’re talking about Primary Sites only. It’s a 
 different thing with Secondary Sites, there boundary groups come into play.
  
 So, of course, what Robert says is true here ;)
  
 Cheers
 David
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of jeff.carr...@wellsfargo.com
 Sent: Friday, July 4, 2014 8:53 PM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] CM 2012 Role in DMZ
  
 Is that true even if you have the boundaries and boundary groups set up for 
 the site(s)?  Clients from other sites would still hit other MPs on the other 
 sites even though they’re not assign to the group they belong to?
  
  
  
  
 JEFF CARREON
  
  
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Robert Marshall
 Sent: Friday, July 04, 2014 4:29 AM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] CM 2012 Role in DMZ
  
 If you’ve got a full blown MP in your DMZ I know a way to make the Clients in 
 the DMZ only use that MP, and not any MP
  
 Keep in mind Clients will use any MP in the hierarchy based on 
 Forest\Domain\Security Realm, time of day and wind direction and maybe 
 depends on what shirt John Marcum is wearing at that particular moment, 
 really J
  
 Robert
  
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of Jason Wallace
 Sent: 03 July 2014 06:31
 To: mssms@lists.myitforum.com
 Subject: Re: [mssms] CM 2012 Role in DMZ
  
 You'll need to have an account on that machine which is a local admin. You'll 
 use this account for CM to be able to deploy the services.
  
 You will need to establish comms so that the site server can deploy to the 
 DMZ machine. You'll likely want to configure site server initiated 
 communications. This will cause the site server to poll the MP for inbox 
 files rather than these being pushed through the firewall.
  
 For the SUP you will need to implement HTTPS (and should anyhow for other 
 services)
  
 Regarding the MP you will need to provide access to the database. You can do 
 this either by opening up the firewall, placing a replica in the DMZ or 
 moving the MP behind the firewall and having some kind of proxy going on.
  
 For the catalog - not sure
 
 On 3 Jul 2014, at 06:08, Roney George ronaldo.geo...@live.com wrote:
 
 Hi,
  
 I am planning for installing a MP, SUP, DP and App Catalog Role on a server 
 in DMZ.
  
 Are there in How to document how this can be achieved on CM 2012 R2 , SQL 
 2012 R2 , and Roles are installed on Server 2012.
  
  
  
  
  
  
 

RE: [mssms] RE: Reboot servers pending a reboot prior to updates

[Jason Wallace]

Hi John
 
If you are looking for devices with a pending reboot then 
http://blogs.technet.com/b/smartinez/archive/2014/06/27/reboot-pending-report-how-to-create-the-report.aspx
 would offer you an end to end solution for any reboots pending
 
Jason
 
From: jaub...@norwoodmedical.com
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Reboot servers pending a reboot prior to updates
Date: Wed, 2 Jul 2014 11:09:25 +









Mine isn’t as complex as this, but it only checks for pending reboots from 
Windows Update.  It wouldn’t be hard to add the other pending reboot location 
in there as well.
 
$reboot
=Test-Path 
'hklm:SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto 
Update\RebootRequired'
 
if ($reboot
-eq 'True'){Restart-Computer
localhost -force}ELSE {}

 
 
This is the command I push out to use it.  I ran into issues with 32 vs. 64 bit 
powershell and hitting different parts of registry.
 
%systemroot%\sysnative\windowspowershell\v1.0\powershell.exe -executionpolicy 
unrestricted .\NeedReboot.ps1
 
 
 
 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Corkill, Daniel

Sent: Wednesday, July 2, 2014 2:32 AM

To: mssms@lists.myitforum.com

Subject: [mssms] Reboot servers pending a reboot prior to updates


 
I want to advertise a script to servers during our maintenance window, 30mins 
prior to the updates deadline, that will check for reboots pending on the box 
and if there are any, reboot it.
 
I’ve found the get-rebootpending PS script here:

http://gallery.technet.microsoft.com/scriptcenter/Get-PendingReboot-Query-bdb79542#content
 but it’s unclear to me whether this will pickup reboots pending from new 
device installs, which is important to us. Someone asks for this functionality 
in the comments
 but it’s never subsequently mentioned. There also doesn’t appear to be anyway 
to use this script to trigger a reboot if one is pending.
 
Is anyone else using something similar?
 
Daniel.
 
 
 
 
*
This email, including any attachment, is confidential to the intended 
recipient.  It may also be privileged and may be subject to copyright.  If you 
have received this email in error, please notify the sender immediately and 
delete all copies of the email.  Any confidentiality or privilege is not 
waived.  Neither the Council nor the sender warrant that this email does not 
contain any viruses or other unsolicited items.
 
This email is an informal Council communication.  The Council only accepts 
responsibility for information sent under official letterhead and duly signed 
by, or on behalf of, the Chief Executive Officer.
 
Privacy Collection Notice
Logan City Council may collect your personal information, e.g. name, 
residential address, phone number etc, in order to conduct its business and/or 
meet its statutory obligations. The information will only be accessed by 
employees and/or Councillors of Logan City Council for Council business related 
activities only. If your personal information will be passed onto a third 
party, Council will advise you of this disclosure, the purpose of the 
disclosure and reason why. Your information will not be given to any other 
person or agency unless you have given us permission or we are required by law.
 
 
 





  

RE: [mssms] What version of WinPE is in SCCM 2012 R2?

[Jason Wallace]

And to tell which version of the 8.1 ADK you are using, look in the source 
folder for a patches folder (might be called updates, but I don't have the 
files on my system)
 
From: dratl...@humana.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] What version of WinPE is in SCCM 2012 R2?
Date: Wed, 2 Jul 2014 13:58:36 +









If you are using the Windows 8.1 ADK, its WinPE 5.0.

 
If you are using the Windows 8.1 Update ADK, its WinPE 5.1.

 

Daniel Ratliff

 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of John Aubrey

Sent: Wednesday, July 02, 2014 9:55 AM

To: 'mssms@lists.myitforum.com'

Subject: RE: [mssms] What version of WinPE is in SCCM 2012 R2?


 
Mine reads 6.3.9600.1684
 
From:
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Todd Hemsell

Sent: Wednesday, July 2, 2014 9:55 AM

To: mssms@lists.myitforum.com

Subject: [mssms] What version of WinPE is in SCCM 2012 R2?
 

What version of WinPE is in SCCM 2012 R2?

 
 


The information transmitted is intended only for the person or entity to which 
it is addressed

and may contain CONFIDENTIAL material.  If you receive this 
material/information in error,

please contact the sender and delete or destroy the material/information.





  

Re: [mssms] CM 2012 Role in DMZ

[Jason Wallace]

You'll need to have an account on that machine which is a local admin. You'll 
use this account for CM to be able to deploy the services.

You will need to establish comms so that the site server can deploy to the DMZ 
machine. You'll likely want to configure site server initiated communications. 
This will cause the site server to poll the MP for inbox files rather than 
these being pushed through the firewall.

For the SUP you will need to implement HTTPS (and should anyhow for other 
services)

Regarding the MP you will need to provide access to the database. You can do 
this either by opening up the firewall, placing a replica in the DMZ or moving 
the MP behind the firewall and having some kind of proxy going on.

For the catalog - not sure

 On 3 Jul 2014, at 06:08, Roney George ronaldo.geo...@live.com wrote:
 
 Hi,
 
 I am planning for installing a MP, SUP, DP and App Catalog Role on a server 
 in DMZ.
 
 Are there in How to document how this can be achieved on CM 2012 R2 , SQL 
 2012 R2 , and Roles are installed on Server 2012.
 
 
 

RE: [mssms] Management Points finally tamed

[Jason Wallace]

For my part Rob I think that this was an oversight in the product and I would 
hope that this functionality will be introduced in short measure
 
What are the commercials on this?  Are you planning to charge for this and if 
so, how much?
 
From: rob...@sulla.co.uk
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Management Points finally tamed
Date: Tue, 1 Jul 2014 10:25:14 +0100

Thanks all, I may be an MVP, I may have been doing this since SMS 1.x came out, 
I might “get“ Wally Meads sense of humour about Notepad and actually understand 
his reasoning, but I am JUST LIKE YOU! Some are indifferent about MP usage, I 
think to turn a blind eye to it and assume the Global Network will tolerate all 
kinds of noise is just plain wrong. I said this the very first day I was 
introduced to the new MP concepts in CM12 RTM in Redmond, and I’ve been an 
advocate for change ever since. It should not be assumed that adding noise to 
the line is okay, it is not, and if it is added it should only be so because it 
cannot be controlled. I’m sure a lot of you have had to tell the customer that 
this is uncontrollable, you’ve heard the disappointment from the customer, and 
the resignation that there’s nothing that can be done, you’ve probably designed 
to have the MP’s at the Core of the network and put up with the many hops 
Clients make around the Global Network to reach them, well now something can be 
done about it, you can put an MP right next to your Clients and make them use I 
100% of the time. You no longer need to tell customers that the product’s 
Management Points simply cannot be tamed, they can, as is evident from 
LocationAware, and, something not taken into account yet, the constant and very 
noisy Notification Channel is now localised as well. I’ve always disliked 
telling customers that I “can’t do that” with the most power Enterprise Systems 
Management solution out there. This was, is a gap in the product. I’ve just 
filled it. The Management Point story was always a weak point in the 
implementation, now we have options. I’m very much interested in your opinions 
and thoughts on the above. Robert From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Anoop C Nair
Sent: 01 July 2014 02:30
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Management Points finally tamed Super. 
This is what we were expecting from Microsoft but I don't think they can 
include this feature very soon :) 
kudos to Rob.
I'll get in touch with you offline for a demo :)
Regards
Anoop
On 30 Jun 2014 22:28, Robert Marshall rob...@sulla.co.uk wrote:I have a 
small announcement for the list, please excuse the commercial aspect of it. 
LocationAware, the product I’ve been working on for the last few months is now 
ready for release. http://www.smsmarshall.com/Pages/LocationAware.aspx I’m 
announcing it here as it introduces a new design element into ConfigMgr 2012 
SP1 and R2 Hierarchies that will be of interest to all Hierarchy architects. 
You can now totally control Management Point usage within a Hierarchy. Robert 
Marshall – ECM MVP  

  

Re: [mssms] Working on SCCM 2012 R2 - Newbie

[Jason Wallace]

Have you created a boundary  a boundary group?

 On 24 Jun 2014, at 19:17, Matthew W. Ross mr...@ephrataschools.org wrote:
 
 Good Morning. I'm new to System Center, and have been pointed to this list 
 for questions.
 
 I am attempting to evaluate SCCM 2012 R2 for our use at our school district. 
 
 For my evaluation, I have procured a Dell PE R410 server with 16 Gigabytes of 
 ram and 450GB of Raid10 storage. I've installed the MS SQL server and 
 Configuration Manager 2012 R2 on the server, and everything is installed in 
 evaluation mode.
 
 I've gotten to the point where I want to try to install some software as a 
 test. I've setup a client group that includes a single Windows 7 pc. The SCCM 
 client has installed, and I can see it on the remote PC. I have created two 
 packages to install: Google Chrome (the MSI for enterprises) and Evince (a 
 very small PDF viewer).
 
 Both I've deployed both. Neither is installing. On the SCCM side, I see 
 Client check passed/Active in the deployment status, and it doesn't seem to 
 be going any further.
 
 On the Windows 7 client side, I see nothing in the System Center Software 
 Center. I do see the following when I run bitsadmin /list /allusers:
 
 {2B906031-A2DE-412F-808E-3C3E9DACD447} 'WU Client Download' TRANSFERRED 1 / 1 
 521496 / 521496
 {B1A60D86-6C0B-4490-9375-EBF8EC6DCAEF} 'WU Client Download' TRANSFERRED 1 / 1 
 610584 / 610584
 {7E0E9B88-ABDC-4E20-A5B8-9372CD4AF347} 
 'DMRCBitsJob_780dc1c9-4d57-42a9-af61-fbf535dc618e.devicemetadata-ms' 
 TRANSFERRED 1 / 1 84124 / 84124
 {A663AC99-CED6-47A3-A366-D4463A24383E} 
 'DMRCBitsJob_89cf5ebe-8cd2-42e2-b99a-49b90cd7e8bf.devicemetadata-ms' 
 TRANSFERRED 1 / 1 925510 / 925510
 {2FC9BD23-222D-4F74-A241-26F223A8CD26} 'soxe.definitions' TRANSFERRED 1 / 1 
 40026 / 40026
 Listed 5 job(s).
 
 I'm not sure where to go from here. Any idea where I could look to see where 
 the problem is?
 
 
 --Matt Ross
 Ephrata School District
 
 

RE: [mssms] Report of Content Validation Failures?

[Jason Wallace]

A report like this one?
 
http://www.danrichings.com/?p=166
 
From: lists...@faqshop.com
To: mssms@lists.myitforum.com
Subject: [mssms] Report of Content Validation Failures?
Date: Tue, 17 Jun 2014 17:40:36 +0100

Hi all, before I attempt to reinvent the wheel, I was just wondering if anyone 
had already created a Report in ConfigMgr 2012 to show any DPs where Content 
Validation has failed and the affected Packages/ Apps? Many thanks and kind 
regards,Cliff   

  

RE: [mssms] Report of Content Validation Failures?

[Jason Wallace]

Don't thank me - not my work, but it is nice isn't it.
 
Just a quick note Cliff, although you'll likely know this - if the hash errors 
then you need to redistribute the content to the DP
 
Also you can run SMSDPMON with a parameter of the package-ID at any DP - useful 
if you need to run through all the content for a certain task sequence for 
example.
 
Date: Tue, 17 Jun 2014 12:56:15 -0500
Subject: Re: [mssms] Report of Content Validation Failures?
From: hems...@gmail.com
To: mssms@lists.myitforum.com

I like that better than mine for a report. thanks.

On Tue, Jun 17, 2014 at 12:15 PM, Jason Wallace jaso...@outlook.com wrote:




A report like this one?
 
http://www.danrichings.com/?p=166
 
From: lists...@faqshop.com

To: mssms@lists.myitforum.com
Subject: [mssms] Report of Content Validation Failures?
Date: Tue, 17 Jun 2014 17:40:36 +0100

Hi all,

 
before I attempt to reinvent the wheel, I was just wondering if anyone had 
already created a Report in ConfigMgr 2012 to show any DPs where Content 
Validation has failed and the affected Packages/ Apps?
 

Many thanks and kind regards,
Cliff 
 
 


  







  

RE: [mssms] Adding fonts to your base image or deploying using SCCM

[Jason Wallace]

http://www.cloudtec.ch/blog/tech/install-font-command-line-script-windows-7.html
 
From: kjohns...@halogensoftware.com
To: mssms@lists.myitforum.com
Subject: [mssms] Adding fonts to your base image or deploying using SCCM
Date: Wed, 11 Jun 2014 12:45:53 +









Does anyone have a good way to ensure that when building a base image and 
adding fonts will be available for all users?
 
I have some corporate fonts (20) that when I install in the base image as 
Administrator do not install when a user logs on. I am thinking maybe I should 
look into copyProfile?
 
The second challenge I have is trying to install it for the other 600 computers 
that do not have the fonts. I found a few scripts online and I have tried them, 
but they break when pushing in SCCM (user deploy)
 
Any ideas?
 
Thanks,
 
Kevin
 
 





  

RE: [mssms] Permissions to run SQL Stored Procedures to extract data from the Site Database?

[Jason Wallace]

Yes, I also responded in kind elsewhere.  Also (for info) pointed to using 
Excel directly on the database 
http://blogs.technet.com/b/manageabilityguys/archive/2013/04/11/mms-2013-udb-338-additional-content.aspx
 was an excellent MMS session on this
 
Date: Mon, 2 Jun 2014 08:40:01 -0700
From: slkissin...@sbcglobal.net
Subject: Re: [mssms] Permissions to run SQL Stored Procedures to extract data 
from the Site Database?
To: mssms@lists.myitforum.com

This may be devil's advocate... but is this CM?  and that database is the CM 
database?  If so, what's the blocker to use SRS, creating a report with 
whatever it is you need to dump, and in SRS scheduling that to run and export 
the results in CSV to a share somewhere? (or email it to some poor admin) 
Sherry Kissinger On Monday, June 2, 2014 9:58 AM, Cliff
 Hobbs cl...@faqshop.com wrote:


 Hi all,  I need to create some Scheduled Tasks on a remote server that will 
run some SQL Stored Procedures on the Site Database Server in order to dump 
some data out to *.CSV files.  A Service Account to run these Scheduled Tasks 
has been created but I’m not overly sure what permissions are required on the 
SQL side to get this to work.  Ideally I’d like to keep the permissions to a 
minimum (i.e. they can run the stored procedures against the relevant tables 
and that’s it), rather than just granting blank admin access.  Hoping someone 
has done this before and can advise me please to save me trying to reverse 
engineer this.  Many thanks in advance.  Kind regards,Cliff 



  

  

RE: [mssms] Permissions to run SQL Stored Procedures to extract data from the Site Database?

[Jason Wallace]

That'd be the only way to do it (and of course only reading the views)
 
It seems, however to be reengineering what the SCCM product already offers - 
SSRS is expressly designed to access the views and deliver that content in the 
required format and also with the scheduling requested.
 
From: tsul...@gmail.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Permissions to run SQL Stored Procedures to extract data 
from the Site Database?
Date: Mon, 2 Jun 2014 11:47:26 -0500

Why not create the stored procedures in a separate database, so as to ensure 
portability, and avoid changes to the ConfigMgr database? Then, simply grant 
the service account the following permissions: 1.   db_datareader role (on 
the ConfigMgr database)2.   Execute (on stored procedures in the external 
database) Cheers,Trevor SullivanMicrosoft PowerShell MVP From: 
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jason Wallace
Sent: Monday, June 2, 2014 10:48 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Permissions to run SQL Stored Procedures to extract data 
from the Site Database? Yes, I also responded in kind elsewhere.  Also (for 
info) pointed to using Excel directly on the database 
http://blogs.technet.com/b/manageabilityguys/archive/2013/04/11/mms-2013-udb-338-additional-content.aspx
 was an excellent MMS session on this
 Date: Mon, 2 Jun 2014 08:40:01 -0700
From: slkissin...@sbcglobal.net
Subject: Re: [mssms] Permissions to run SQL Stored Procedures to extract data 
from the Site Database?
To: mssms@lists.myitforum.comThis may be devil's advocate... but is this CM?  
and that database is the CM database?  If so, what's the blocker to use SRS, 
creating a report with whatever it is you need to dump, and in SRS scheduling 
that to run and export the results in CSV to a share somewhere? (or email it to 
some poor admin)  Sherry KissingerOn Monday, June 2, 2014 9:58 AM, Cliff Hobbs 
cl...@faqshop.com wrote: Hi all, I need to create some Scheduled Tasks on a 
remote server that will run some SQL Stored Procedures on the Site Database 
Server in order to dump some data out to *.CSV files. A Service Account to run 
these Scheduled Tasks has been created but I’m not overly sure what permissions 
are required on the SQL side to get this to work. Ideally I’d like to keep the 
permissions to a minimum (i.e. they can run the stored procedures against the 
relevant tables and that’s it), rather than just granting blank admin access. 
Hoping someone has done this before and can advise me please to save me trying 
to reverse engineer this. Many thanks in advance. Kind regards,Cliff

  

RE: [mssms] Permissions to run SQL Stored Procedures to extract data from the Site Database?

[Jason Wallace]

So these are pre-exisiting stored procedures created where - in the SCCM 
database?  They were created by Remedy themselves?  Any word in their 
documentation on this?
 
From: lists...@faqshop.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Permissions to run SQL Stored Procedures to extract data 
from the Site Database?
Date: Mon, 2 Jun 2014 20:30:12 +0100

Thanks for all the replies (x2 Jason ;-) Yes this is CM12 SP1 and the reason 
for doing this (sorry should have said), is to have the Scheduled Tasks run to 
dump the data into the CSVs from where they can be imported to Remedy.  I’m 
inheriting this solution – agree it’s not the most elegant but my brief is 
purely to get it working which it isn’t at the moment as seems to be 
permission-related (if I run the Scheduled Task as my Admin account works fine, 
but not when they use the Service Account they’ve created).  Sure I could clone 
my admin account but that would give the Service Account too many permissions 
and access to things it shouldn’t have. Many thanks and kind regards,Cliff 
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jason Wallace
Sent: 02 Jun 2014 16:48
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Permissions to run SQL Stored Procedures to extract data 
from the Site Database? Yes, I also responded in kind elsewhere.  Also (for 
info) pointed to using Excel directly on the database 
http://blogs.technet.com/b/manageabilityguys/archive/2013/04/11/mms-2013-udb-338-additional-content.aspx
 was an excellent MMS session on this
 Date: Mon, 2 Jun 2014 08:40:01 -0700
From: slkissin...@sbcglobal.net
Subject: Re: [mssms] Permissions to run SQL Stored Procedures to extract data 
from the Site Database?
To: mssms@lists.myitforum.comThis may be devil's advocate... but is this CM?  
and that database is the CM database?  If so, what's the blocker to use SRS, 
creating a report with whatever it is you need to dump, and in SRS scheduling 
that to run and export the results in CSV to a share somewhere? (or email it to 
some poor admin)  Sherry KissingerOn Monday, June 2, 2014 9:58 AM, Cliff Hobbs 
cl...@faqshop.com wrote: Hi all, I need to create some Scheduled Tasks on a 
remote server that will run some SQL Stored Procedures on the Site Database 
Server in order to dump some data out to *.CSV files. A Service Account to run 
these Scheduled Tasks has been created but I’m not overly sure what permissions 
are required on the SQL side to get this to work. Ideally I’d like to keep the 
permissions to a minimum (i.e. they can run the stored procedures against the 
relevant tables and that’s it), rather than just granting blank admin access. 
Hoping someone has done this before and can advise me please to save me trying 
to reverse engineer this. Many thanks in advance. Kind regards,Cliff

  

RE: [mssms] Permissions to run SQL Stored Procedures to extract data from the Site Database?

[Jason Wallace]

Oh, and what is the message that SQL is giving out?  
 
Msg 229 - error on select . . .  .?
 
Have you checked the ownership chains on the stored procedure and the views 
that it is accessing?
 
Oh, and if these are someone else's stored procedure have you any clue as to 
whether they are accessing the views - I bet they aren't
 
From: lists...@faqshop.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Permissions to run SQL Stored Procedures to extract data 
from the Site Database?
Date: Mon, 2 Jun 2014 20:30:12 +0100

Thanks for all the replies (x2 Jason ;-) Yes this is CM12 SP1 and the reason 
for doing this (sorry should have said), is to have the Scheduled Tasks run to 
dump the data into the CSVs from where they can be imported to Remedy.  I’m 
inheriting this solution – agree it’s not the most elegant but my brief is 
purely to get it working which it isn’t at the moment as seems to be 
permission-related (if I run the Scheduled Task as my Admin account works fine, 
but not when they use the Service Account they’ve created).  Sure I could clone 
my admin account but that would give the Service Account too many permissions 
and access to things it shouldn’t have. Many thanks and kind regards,Cliff 
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jason Wallace
Sent: 02 Jun 2014 16:48
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Permissions to run SQL Stored Procedures to extract data 
from the Site Database? Yes, I also responded in kind elsewhere.  Also (for 
info) pointed to using Excel directly on the database 
http://blogs.technet.com/b/manageabilityguys/archive/2013/04/11/mms-2013-udb-338-additional-content.aspx
 was an excellent MMS session on this
 Date: Mon, 2 Jun 2014 08:40:01 -0700
From: slkissin...@sbcglobal.net
Subject: Re: [mssms] Permissions to run SQL Stored Procedures to extract data 
from the Site Database?
To: mssms@lists.myitforum.comThis may be devil's advocate... but is this CM?  
and that database is the CM database?  If so, what's the blocker to use SRS, 
creating a report with whatever it is you need to dump, and in SRS scheduling 
that to run and export the results in CSV to a share somewhere? (or email it to 
some poor admin)  Sherry KissingerOn Monday, June 2, 2014 9:58 AM, Cliff Hobbs 
cl...@faqshop.com wrote: Hi all, I need to create some Scheduled Tasks on a 
remote server that will run some SQL Stored Procedures on the Site Database 
Server in order to dump some data out to *.CSV files. A Service Account to run 
these Scheduled Tasks has been created but I’m not overly sure what permissions 
are required on the SQL side to get this to work. Ideally I’d like to keep the 
permissions to a minimum (i.e. they can run the stored procedures against the 
relevant tables and that’s it), rather than just granting blank admin access. 
Hoping someone has done this before and can advise me please to save me trying 
to reverse engineer this. Many thanks in advance. Kind regards,Cliff

  

Re: [mssms] RE: Emory IT accidentally deploys Windows 7 to everything

[Jason Wallace]

Or I guess that people could use the features which exist in the product such 
as security scopes and security roles.

They could also do things like run a check via WMI or TSVs that a system is 
valid to have the TS run on it.

 On 17 May 2014, at 15:35, Miller, Todd todd-mil...@uiowa.edu wrote:
 
 This happens enough that you have to start wondering if the software could be 
 improved in some way to help prevent it.
 
 Maybe there should be alerts or limits or a wizard that summarizes any change 
 that affects a deployment or target collection.
 
 Like when you click OK, maybe there would be a This change will result in 
  systems receiving Package/Application  with a mandatory time 
 of 12:20AM or something like that.
 
 The trouble is, you would need to do that every time you modify a collection 
 too and that takes some computational time. - maybe that is computer in the 
 background and you get this warning when you enable the deployment? Wouldn't 
 it be nice if there was an option to create all deployments as disabled and 
 then you had to enable them, and when enabling them you could see or were 
 told how many systems are affected.
 
 You could also automatically disable advertisements when the underlying 
 collection query was modified.  So the advertisement would need to be 
 reenabled after reviewing how that change affected the deployment.
 
 You know how your DVR shows what programs are going to be recorded over the 
 next couple of days/weeks?  Wouldn't it be great if SCCM showed a list like 
 that of pending packages,  deadlines, the target collection, the number of 
 affected machines, and the time?
 
 With these kinds of events, there definitely is an established need to make 
 the SCCM product harder to make unintentional blunders and easier to see what 
 it is doing/going to do and when.
 
 Often with these kinds of things there is a long chain of events that lead to 
 an unanticipated result.  The worst part is that those machines that were 
 ruined over night, SCCM probably knew it was going to happen all day long 
 and could have warned the Admin if there was just a interface that computed 
 what advertisements were pending, how many machines are affected etc  I 
 certainly would get more use from something like that than being able to 
 manage iOS/MacOS/Linux/AntiVirus definitions/Android Apps/etc.  Maybe SCCM 
 v.Next can focus on doing core competencies better rather than extending the 
 product into areas few care about. 
 
 I dunno, I just don't think all or even half the blame falls on the guy that 
 clicked OK.   I certainly feel a great deal of empathy for him.  While this 
 has never happened to me, it has sometimes been a recurring theme in bad 
 dreams/nightmares. 
 
 
 
 From: listsad...@lists.myitforum.com [listsad...@lists.myitforum.com] on 
 behalf of JONES, RICK J [rj7...@att.com]
 Sent: Friday, May 16, 2014 5:33 PM
 To: mssms@lists.myitforum.com
 Subject: RE: [mssms] RE: Emory IT accidentally deploys Windows 7 to everything
 
 EVERY person in IT has an OCM (Oh Crap Moment) that they remember or changed 
 them.  If a new tech haven't had their OCM yet, I tend to lock down access 
 and not trust because the OCM has a higher chance of happen in my environment.
 
 And yes, I had my OCM, it changed how I add logging and build a back out to 
 my scripts.
 
 Rick J. Jones 
 Wireless from ATT
 Domestic Desktop Application Management
 D: (425) 288-6240 
 C: (206) 419-1104
 From: Murray, Mike
 Sent: ‎5/‎16/‎2014 4:22 PM
 To: mssms@lists.myitforum.com
 Subject: [mssms] RE: Emory IT accidentally deploys Windows 7 to everything
 
 Wow ouch. So there's an opening at Emory?
 
 -Original Message-
 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
 On Behalf Of William Jackson
 Sent: Friday, May 16, 2014 12:32 PM
 To: mssms@lists.myitforum.com
 Subject: [mssms] Emory IT accidentally deploys Windows 7 to everything
 
 I'm thankful that I do not work over there.
 
 A Windows 7 deployment image was accidentally sent to all Windows machines, 
 including laptops, desktops, and even servers. This image started with a 
 repartition / reformat set of tasks. As soon as the accident was discovered, 
 the SCCM server was powered off – however, by that time, the SCCM server 
 itself had been repartitioned and reformatted.
 
 http://it.emory.edu/windows7-incident/
 
 William
 
 
 
 
 
 
 Notice: This UI Health Care e-mail (including attachments) is covered by the 
 Electronic Communications Privacy Act, 18 U.S.C. 2510-2521, is confidential 
 and may be legally privileged.  If you are not the intended recipient, you 
 are hereby notified that any retention, dissemination, distribution, or 
 copying of this communication is strictly prohibited.  Please reply to the 
 sender that you have received the message in error, then delete it.  Thank 
 you.
 

Re: [mssms] ztidrivers.wsf - similar

[Jason Wallace]

When you say unknown do you mean not needed? As in you are deploying to a VM 
and know the drivers that should be going on?

Would devcon do it for you?

 On 14 May 2014, at 16:37, Hun boy hun@outlook.com wrote:
 
 Am looking for a script or a command that will remove all the unknown drivers 
 from system and try to get scanned I have presaged the drivers in a 
 standard location So that once it scans it will install properly.
 
 
 As I don't have mdt control can't use it the ztidrivers.wsf at my client 
 infra...
 
 Searching for this lot but no help on bing and google
 
 Sent from iPhonesorry for typos 
 
 
 

[mssms] CCMEVALTASK issue

[Jason Wallace]

Hi there folks
 
I have an issue with CCMEVAL and CCMEVALTASK which I would appreciate some 
input on please.
 
I have a number of Windows XP (yes, I know) systems.  On these Task Scheduler 
is disabled.
 
Of course this means that CCMEVAL is not going to run so we run it through an 
advertisement.  When we do that however all of the XP systems report an error 
back to the console.
 
Checking the clients it seems that CCMEVAL itself runs through the checks in 
its XML file and reports no significant issues but it's CCMEVALTASK which then 
kicks off and throws an error, masking any errors in the console.
 
Yes, the obvious thing is to enable Task Scheduler but that cannot be done on 
the XP estate so I am wondering if we can somehow prevent the check on the Task 
Scheduler component?
 
Thanks
  

RE: [mssms] CCMEVALTASK issue

[Jason Wallace]

Hi Sherry
 
Thanks for your answer.  I wholly agree with EVERY-SINGLE-WORD and also the 
sentiment behind it.
 
The reason that I care is that it is yet another reason for the customer to 
beat up on CM.  Sadly the majority of the client estate is Windows XP and 
Client Status - Client Check is skewed as a result.
 
What is preventing Task Scheduler is the security team.  Yes, I know the irony 
of a security team allowing an un-patchable OS to run but that's life
 
Jason
 
Date: Thu, 8 May 2014 05:53:55 -0700
From: slkissin...@sbcglobal.net
Subject: Re: [mssms] CCMEVALTASK issue
To: mssms@lists.myitforum.com

I don't have a solution for you... but more of a who cares answer.  :) 
reasons not to care about the failed status on the advert:1) It's xp anyway.  
(so... no one is supposed to care anymore)2) uh, the advert ran.  Let's pretend 
that means the client is at least healthy enough to do that.3) Failures or 
remediations as a result of the ccmeval are reported up differently--and never 
by advert status anyway--so... look at THOSE reports about what may or may not 
be working right regarding the elements that ccmeval is doing.4) It's XP.  If 
someone is MAKING you care about it, tell them if they want you to care about 
the advert status as a result of a ccmeval
 run (which is slightly ridiculous just typing it), you require that task 
scheduler be automatic and running.  Period, end of discussion.5) what's 
stopping and disabling it?  a gpo?  well... there's this lovely thing in 
classic packages (or a task sequence for example) to run something else first.  
something like a vbscript to change it to automatic... and start it.  then 
ccmeval runs and it'll be ok.  so... who cares if the task scheduler is then 
stopped and disabled 90 minutes later.  You win! (for 89 minutes).6) (again, 
because I think it's the relevant point):  It's xp.  Get rid of it. Sherry 
Kissinger

From: Jason Sandys ja...@sandys.us
 To: mssms@lists.myitforum.com mssms@lists.myitforum.com 
 Sent: Thursday, May 8, 2014 7:37 AM
 Subject: RE: [mssms] CCMEVALTASK issue
   


 




Technically, you should be able to edit the xml file and remove the check. 



although, the whole point of running ccmeval using task scheduler is so that 
the client agent or its dependencies can be checked and fixed --that can't 
happen when it's being run by the client agent itself so it doesn't really make 
sense to do it as an advert.
 For example, if WMI is broken on the client, how will the deployment ever run 
to fix it?





Who's idea was it to disable the task scheduler? Let me guess, it was done in 
the name of security? Misguided are most security folks (quote from Yoda).





J




From: listsad...@lists.myitforum.com listsad...@lists.myitforum.com on behalf 
of Jason Wallace jaso...@outlook.com

Sent: Thursday, May 8, 2014 4:40 AM

To: mssms@lists.myitforum.com

Subject: [mssms] CCMEVALTASK issue
 


Hi there folks

 

I have an issue with CCMEVAL and CCMEVALTASK which I would appreciate some 
input on please.

 

I have a number of Windows XP (yes, I know) systems.  On these Task Scheduler 
is disabled.

 

Of course this means that CCMEVAL is not going to run so we run it through an 
advertisement.  When we do that however all of the XP systems report an error 
back to the console.

 

Checking the clients it seems that CCMEVAL itself runs through the checks in 
its XML file and reports no significant issues but it's CCMEVALTASK which then 
kicks off and throws an error, masking any errors in the console.

 

Yes, the obvious thing is to enable Task Scheduler but that cannot be done on 
the XP estate so I am wondering if we can somehow prevent the check on the Task 
Scheduler component?

 

Thanks















  

RE: [mssms] CCMEVALTASK issue

[Jason Wallace]

Hi there Jason
 
Yes, my first response was to try and edit CCMEVAL.XML to prevent it looking at 
Task Scheduler but that's not the case.  Neither this XML file nor the 
CCMEvalReport.XML file have any Task Scheduler section.
 
What is chucking the error is CCMEVALTASK and not CCMEVAL - in this case a 
failed attempt to remediate a failed health check
 
Jason
 
From: ja...@sandys.us
To: mssms@lists.myitforum.com
Subject: RE: [mssms] CCMEVALTASK issue
Date: Thu, 8 May 2014 12:37:29 +








Technically, you should be able to edit the xml file and remove the check. 





although, the whole point of running ccmeval using task scheduler is so that 
the client agent or its dependencies can be checked and fixed --that can't 
happen when it's being run by the client agent itself so it doesn't really make 
sense to do it as an advert.
 For example, if WMI is broken on the client, how will the deployment ever run 
to fix it?







Who's idea was it to disable the task scheduler? Let me guess, it was done in 
the name of security? Misguided are most security folks (quote from Yoda).







J





From: listsad...@lists.myitforum.com listsad...@lists.myitforum.com on behalf 
of Jason Wallace jaso...@outlook.com

Sent: Thursday, May 8, 2014 4:40 AM

To: mssms@lists.myitforum.com

Subject: [mssms] CCMEVALTASK issue
 


Hi there folks

 

I have an issue with CCMEVAL and CCMEVALTASK which I would appreciate some 
input on please.

 

I have a number of Windows XP (yes, I know) systems.  On these Task Scheduler 
is disabled.

 

Of course this means that CCMEVAL is not going to run so we run it through an 
advertisement.  When we do that however all of the XP systems report an error 
back to the console.

 

Checking the clients it seems that CCMEVAL itself runs through the checks in 
its XML file and reports no significant issues but it's CCMEVALTASK which then 
kicks off and throws an error, masking any errors in the console.

 

Yes, the obvious thing is to enable Task Scheduler but that cannot be done on 
the XP estate so I am wondering if we can somehow prevent the check on the Task 
Scheduler component?

 

Thanks











  

Re: [mssms] Fwd: [MDT-OSD] XP-Win7 migration with CM12r2

[Jason Wallace]

You'll need to go back to WAIK for the boot image 

 On 8 May 2014, at 13:33, Brian McDonald mcdonald...@hotmail.com wrote:
 
 Trying my luck here! :)
 
 Brian
 
 Sent from my iPhone
 
 Begin forwarded message:
 
 From: Brian McDonald mcdonald...@hotmail.com
 Date: May 8, 2014 at 5:09:35 AM CDT
 To: mdt...@lists.myitforum.com
 Subject: [MDT-OSD] XP-Win7 migration with CM12r2
 Reply-To: mdt...@lists.myitforum.com
 
 Hey all,
 
 I have an SCCM 2012 R2 environment and have a couple hundred XP devices that 
 need to be refreshed to Win7. 
 
 I have ADK 8.1 installed, but it appears the requirements to perform an 
 in-place migration would include USMT 4.0 and the WinPE version from the ADK 
 8.0. Can someone please confirm this and are there any other requirements 
 needed to use USMT with hardlinks in this scenario?
 
 Thanks,
 
 Brian
 
 Sent from my iPhone
 
 

RE: [mssms] SMS 2003 win 7

[Jason Wallace]

None of this is supported and I would seriously doubt that Win 7 is deployable 
through SMS 2003.
 
There are so many reasons why you would want to move to a more modern 
implementation
 
 From: hun@outlook.com
 Subject: [mssms] SMS 2003 win 7
 Date: Tue, 6 May 2014 16:01:39 +0530
 To: mssms@lists.myitforum.com
 
 Sorry to ask a non-supported question but looking for a answer from experts.. 
 For yes or no
 
 
 We have sms 2003 with sp3 OSD feature pack want to deploy windows 7 and 8 can 
 this possible ??? With SMS 2003 ??
 
 Sent from iPhonesorry for typos