[mssms] RE: Script to launch SW Install on SCCM Client

[Marable, Mike]

Good morning Vasu.

Johan wrote up a blog posting about this feature available in SCCM 1706.

https://deploymentresearch.com/Research/Post/650/Command-line-options-for-Software-Center

I hope this helps.

Mike


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Miriyala, Vasu
Sent: Thursday, January 04, 2018 8:26 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Script to launch SW Install on SCCM Client

Hi Experts,

Post SCCM deploys a software optionally to a client, we would like to send a 
link to end user over email that allows him click to launch application install 
(Lync as example in this case). Is there a way to find this command or any 
suggestions to achieve this ?

We chose this method of link over instructions in email like Go to > Control 
Panel > Software Center > Applications Tab so on...as its more end user friendly

[cid:image002.jpg@01D38537.5D4BA390]
Thanks, Vasu
This message contains information that may be privileged or confidential and is 
the property of the Capgemini Group. It is intended only for the person to whom 
it is addressed. If you are not the intended recipient, you are not authorized 
to read, print, retain, copy, disseminate, distribute, or use this message or 
any part thereof. If you receive this message in error, please notify the 
sender immediately and delete all copies of this message.

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] How long does an average In Place Upgrade take?

[Marable, Mike]

We do some basic “housekeeping” at the end of the upgrade but we’re still in 
the sub-70 minute range.

For encryption we’re using BitLocker.

Mike


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Meluso, Anthony
Sent: Wednesday, December 27, 2017 3:49 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] How long does an average In Place Upgrade take?

Going from 1703 to 1709 takes me about 40 mn to 60mn.  I know going from 1607 
to either 1703 or 1709 took me longer but not three hours.  We just use 
bitlocker here.


Take care,

Anthony Meluso
Network and Computer System Administrator
Passaic Valley Regional High School
100 East Main St.
Little Falls, NJ 07424
973-890-2500 x2501
http://www.pvhs.k12.nj.us

On Wed, Dec 27, 2017 at 3:39 PM, Melin, Cordell (BAC/LAC) 
> wrote:
Curious to know how long your average In Place Upgrade takes. . .

In Place to 1607 took us 50 mn (no disk encryption) but now to 1709 it is over 
3 hours (McAfee DE).




**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] Re: Help with nested task sequences

[Marable, Mike]

Long shot but does your BIOs upgrade sequence have a boot image assigned to it?

From: listsad...@lists.myitforum.com  on behalf 
of Mike Murray 
Sent: Friday, December 22, 2017 6:10:01 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Help with nested task sequences

Good afternoon,

Running CB1710. I’m trying to set up a task sequence to be used in other task 
sequences. In this case, one for upgrading BIOS. When I add the Run Task 
Sequence step and browse for a TS, there are none to choose from. Is there 
something special I need to do with the task sequence I want to use to make it 
available?

[cid:image001.png@01D37B36.EF601BE0]


Best Regards,

Mike Murray
Desktop Engineer/IT Consultant - IT Support Services
California State University, Chico
530.898.4357
mmur...@csuchico.edu

Remember, Chico State will NEVER ask you for your password via email!
For more information about recognizing phishing scam emails go to: 
http://www.csuchico.edu/isec/basics/spam-and-phishing.shtml


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] Upgrading Config Mgr

[Marable, Mike]

The SCCM team worked with our TAM to get an SCCM PFE to come up with the safest 
solution for getting off of this cluster.  Trust me, I’m watching a train of 
SCCM releases roll by with numerous features I would love to take advantage of. 
 But I’m not on the SCCM architect team, so my OSD opinions and wants are 
irrelevant.  ☺

Mike

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Dam, Bryan
Sent: Tuesday, December 19, 2017 9:50 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Upgrading Config Mgr

Yea, we’ve just done that twice in the last two months to get to SQL 2016 
without any problems on the ConfigMan side of things.  I mean … what’s your 
disaster recovery plan if you can’t reliably restore the database to a new 
server?
  Bryan

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Sandys
Sent: Tuesday, December 19, 2017 9:28 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] Upgrading Config Mgr

I don’t your PFE and I don’t know all of the details involved here, but based 
on what has been written below, no way. Also, be skeptical of anyone who simply 
says “best practice” as that typically implies they don’t actually know any 
technical details and are blindly following some generic recommendation that 
doesn’t take your environment, requirements, and circumstances into account.

J

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Robert Spinelli
Sent: Tuesday, December 19, 2017 8:47 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] Upgrading Config Mgr

Yeah, this seems weird to me.  Full disclosure I haven’t done much with SQL 
clusters and SCCM so maybe there is something I’m missing.

I know if you want to use another SQL server for SCCM you can perform a site 
reset and use the option to point to a new SQL server (I’ve done this in the 
past no issue).

  *   
https://blogs.technet.microsoft.com/configurationmgr/2013/04/02/how-to-move-the-configmgr-2012-site-database-to-a-new-sql-server/<https://urldefense.proofpoint.com/v2/url?u=https-3A__blogs.technet.microsoft.com_configurationmgr_2013_04_02_how-2Dto-2Dmove-2Dthe-2Dconfigmgr-2D2012-2Dsite-2Ddatabase-2Dto-2Da-2Dnew-2Dsql-2Dserver_=DwMGaQ=NjgxpSSi0c1nSHFRGItzyA=KWpqtEEfXhZfmzEhpZYWbkTAjRbCjXuhffs_frSMo9A=ozn2BwzQIe6knWoPqegcq0Av_PpC1VKkd_dBpAh7pi8=xEG-vDqEF-CQX_s5TvsHF8VKEqBzGxrImP18-j_fgzU=>

Maybe others on the email list can chime in and maybe they know if there is 
some gotcha with a SQL cluster that I’m unaware of.

Rob

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Monday, December 18, 2017 11:32 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] Upgrading Config Mgr

The Microsoft PFE for SCCM said that it is Microsoft’s best practice to do a 
side-by-side migration as opposed to doing something like a backup and restore 
of the SQL database to a new cluster.

Our SQL team wanted to do a simple backup and restore to the new cluster, but 
we burned some Premier hours and the PFE advised us that doing that risked 
corrupting the entire database and forcing us into a site recovery.  He said 
the only way to properly do it was the migration.  He said we could try the 
backup/restore but that the success rate for that was not good.

So we’re spending months doing a side-by-side migration.

Mike



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Robert Spinelli
Sent: Monday, December 18, 2017 2:11 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] Upgrading Config Mgr

You must have something else going on with your site.  It doesn’t make sense 
you would need to do site by site over just moving to new SQL cluster.  If your 
saying you’re doing it up to clean old crap that’s different.

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Friday, December 15, 2017 7:12 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] Upgrading Config Mgr

Same here.  We would never be able to just click “go” without a vetted plan in 
place and change management involved.  With 35K clients we are by no means a 
large organization, but if something were to go sideways in the upgrade and we 
skipped the planning and control, there wouldn’t be enough time to update 
resumes once they came for us.

On top of that there are other factors to figure in before you click “go”.  For 
example, in our case we are going to

RE: [mssms] Upgrading Config Mgr

[Marable, Mike]

The Microsoft PFE for SCCM said that it is Microsoft’s best practice to do a 
side-by-side migration as opposed to doing something like a backup and restore 
of the SQL database to a new cluster.

Our SQL team wanted to do a simple backup and restore to the new cluster, but 
we burned some Premier hours and the PFE advised us that doing that risked 
corrupting the entire database and forcing us into a site recovery.  He said 
the only way to properly do it was the migration.  He said we could try the 
backup/restore but that the success rate for that was not good.

So we’re spending months doing a side-by-side migration.

Mike



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Robert Spinelli
Sent: Monday, December 18, 2017 2:11 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Upgrading Config Mgr

You must have something else going on with your site.  It doesn’t make sense 
you would need to do site by site over just moving to new SQL cluster.  If your 
saying you’re doing it up to clean old crap that’s different.

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Friday, December 15, 2017 7:12 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] Upgrading Config Mgr

Same here.  We would never be able to just click “go” without a vetted plan in 
place and change management involved.  With 35K clients we are by no means a 
large organization, but if something were to go sideways in the upgrade and we 
skipped the planning and control, there wouldn’t be enough time to update 
resumes once they came for us.

On top of that there are other factors to figure in before you click “go”.  For 
example, in our case we are going to have to do a side-by-side site migration 
because our SQL cluster is no longer supported (hardware is out of warranty).  
Best practices from the Microsoft PFE was to do a site migration as opposed to 
attempting to just moving the database to a new cluster.  So we’re going to 
spend a great deal of time migrating content, collections, sequences, etc. to 
the new site servers, test and validate it all, then start migrating clients.

Then we can click “go” and upgrade the new site to 18xx.

Mike

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Mawdsley R.
Sent: Friday, December 15, 2017 3:55 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] Upgrading Config Mgr

It’s the same here.. and, I’d hope everywhere have some form of change control. 
 Although it obviously depends on how big the shop is.

I think everyone who has been through a failed upgrade at some point in time, 
is always slightly more weary of the potential for downtime.

Personally, I’ll upgrade my Dev environment a week or so after its out in Fast 
Ring.. then Prod a few weeks after its general release.  But I’ll submit a 
change, and communicate its upcoming upgrade to all relevant teams long before 
and in the build up to it being done.

Rich Mawdsley

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Heaton, Joseph@Wildlife
Sent: 14 December 2017 16:35
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] Upgrading Config Mgr

My organization requires a more formal plan for any updates.  And it goes 
through a weekly approval board, so I still have to line everything up nicely.  
I got the go-ahead to upgrade ADK today, but the server updates haven’t gone to 
the approval board yet.

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Stuart Watret
Sent: Wednesday, December 13, 2017 12:19 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: Re: [mssms] Upgrading Config Mgr

You must be using lots of new features if you need a plan :) :)
Run the pre-requ check that would tell you if 1702 to 1706 will work (it will)

With quarterly updates I wouldn’t spend to long planning !

Backup and press go…….


Stuart


On 12 Dec 2017, at 18:07, Heaton, Joseph@Wildlife 
<joseph.hea...@wildlife.ca.gov<mailto:joseph.hea...@wildlife.ca.gov>> wrote:

I am currently running 1702.  I’ve written up my plans and method for upgrading 
to 1706, but over the weekend 1710 showed up in my availables.  I have seen 
some really cool stuff coming with 1710, but is it still too soon for 
production?  Can I upgrade from 1702 directly to 1710?

Joe Heaton
Information Technology Operations Branch
Data and Technology Division
CA Department of Fish and Wildlife
1700 9th Street, 3rd Floor
Sacramento, CA  95811
Desk:  916-323-1284





***

RE: [mssms] Upgrading Config Mgr

[Marable, Mike]

Same here.  We would never be able to just click “go” without a vetted plan in 
place and change management involved.  With 35K clients we are by no means a 
large organization, but if something were to go sideways in the upgrade and we 
skipped the planning and control, there wouldn’t be enough time to update 
resumes once they came for us.

On top of that there are other factors to figure in before you click “go”.  For 
example, in our case we are going to have to do a side-by-side site migration 
because our SQL cluster is no longer supported (hardware is out of warranty).  
Best practices from the Microsoft PFE was to do a site migration as opposed to 
attempting to just moving the database to a new cluster.  So we’re going to 
spend a great deal of time migrating content, collections, sequences, etc. to 
the new site servers, test and validate it all, then start migrating clients.

Then we can click “go” and upgrade the new site to 18xx.

Mike

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Mawdsley R.
Sent: Friday, December 15, 2017 3:55 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Upgrading Config Mgr

It’s the same here.. and, I’d hope everywhere have some form of change control. 
 Although it obviously depends on how big the shop is.

I think everyone who has been through a failed upgrade at some point in time, 
is always slightly more weary of the potential for downtime.

Personally, I’ll upgrade my Dev environment a week or so after its out in Fast 
Ring.. then Prod a few weeks after its general release.  But I’ll submit a 
change, and communicate its upcoming upgrade to all relevant teams long before 
and in the build up to it being done.

Rich Mawdsley

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Heaton, Joseph@Wildlife
Sent: 14 December 2017 16:35
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Upgrading Config Mgr

My organization requires a more formal plan for any updates.  And it goes 
through a weekly approval board, so I still have to line everything up nicely.  
I got the go-ahead to upgrade ADK today, but the server updates haven’t gone to 
the approval board yet.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Stuart Watret
Sent: Wednesday, December 13, 2017 12:19 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Upgrading Config Mgr

You must be using lots of new features if you need a plan :) :)
Run the pre-requ check that would tell you if 1702 to 1706 will work (it will)

With quarterly updates I wouldn’t spend to long planning !

Backup and press go…….


Stuart


On 12 Dec 2017, at 18:07, Heaton, Joseph@Wildlife 
> wrote:

I am currently running 1702.  I’ve written up my plans and method for upgrading 
to 1706, but over the weekend 1710 showed up in my availables.  I have seen 
some really cool stuff coming with 1710, but is it still too soon for 
production?  Can I upgrade from 1702 directly to 1710?

Joe Heaton
Information Technology Operations Branch
Data and Technology Division
CA Department of Fish and Wildlife
1700 9th Street, 3rd Floor
Sacramento, CA  95811
Desk:  916-323-1284




**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] RE: set Adobe Reader DC as default pdf reader

[Marable, Mike]

Thanks Paul!

This will help me out for sure.  I see a few of the pitfalls I’m struggling 
with mentioned in the article.

Thanks
Mike




From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Paul Winstanley
Sent: Wednesday, October 25, 2017 9:53 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: set Adobe Reader DC as default pdf reader

MS has released an article about this issue recently as well 
https://blogs.technet.microsoft.com/windowsinternals/2017/10/25/windows-10-how-to-configure-file-associations-for-it-pros/

On Mon, Oct 23, 2017 at 7:15 PM, Timothy Ransom 
> wrote:
I have tried all suggestions and only the one from Daniel below worked for me.

Computer Configuration / Administrative Templates / Windows Components/File 
Explorer
"Do not show the 'new application installed' notification" = "Enabled"

This prevented any new prompts with the Adobe Reader DC rollout; and leaves the 
default pdf reader as it was before.

Thanks.



From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] 
On Behalf Of John Marcum
Sent: Friday, October 6, 2017 12:13 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: set Adobe Reader DC as default pdf reader

I am trying to solve this same challenge for a customer. The same thing happen 
to the default browser I am selecting.



Sensitivity: Internal use only
From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Thomas Gonzalez
Sent: Wednesday, October 4, 2017 7:59 AM
To: mssms@lists.myitforum.com

Subject: RE: [mssms] RE: set Adobe Reader DC as default pdf reader

Correct, the only issue we have seen so far is, we have appsense in place and 
when the system syncs, the association xml reverts, so we had to edit what 
appsense was sync’n. so far, we have not had issues with the custom.xml. (knock 
on wood)

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Daniel Ratliff
Sent: Wednesday, October 4, 2017 7:40 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: set Adobe Reader DC as default pdf reader

Doesn’t that force it though, so the user can’t change it?

Daniel Ratliff

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Thomas Gonzalez
Sent: Wednesday, October 4, 2017 8:30 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: set Adobe Reader DC as default pdf reader

We use a custom.xml association that sets the reader as default. The location 
to place this xml is under %windir%\system32 and set the default association 
configuration file via local policy under computer configuration – 
administrative templates – windows components – file explorer

Value is “ set a default associations configuration file” and define the path 
%windir%\system32\custom.xml

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Daniel Ratliff
Sent: Wednesday, October 4, 2017 5:57 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: set Adobe Reader DC as default pdf reader

Looks like we are on Adobe Reader DC 2015 (15.006.30352).

Daniel Ratliff


From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Paul Winstanley
Sent: Tuesday, October 3, 2017 6:44 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: set Adobe Reader DC as default pdf reader

I've had it work once and never again. Are you using latest releases of Adobe 
Daniel?

On 3 Oct 2017 22:30, "Daniel Ratliff" 
> wrote:
No issues here using DISM with the apply associations.

https://technet.microsoft.com/en-us/library/hh825038.aspx

Daniel Ratliff

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] 
On Behalf Of Timothy Ransom
Sent: Tuesday, October 3, 2017 4:55 PM
To: mssms@lists.myitforum.com
Subject: [mssms] set Adobe Reader DC as default pdf reader


Hi,

I am preparing to upgrade all users to Adobe Reader DC but unable to set it as 
default pdf reader for existing users on Windows 10.
I have tried several different approaches but they only work for new users - 
existing users still default to Edge.

Has anyone been able to deploy Adobe Reader DC and set it as default pdf reader 
for existing users on Windows 10?

Thanks,

RE: [mssms] RE: set Adobe Reader DC as default pdf reader

[Marable, Mike]

Yeah, that would make the assignments mandatory and prevent users from changing 
them.

In the case of PDFs, what if a user is responsible for editing PDFs and has 
Acrobat Pro installed?  The PDF association would be forced to Reader instead 
of Acrobat Pro.


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Paul Winstanley
Sent: Wednesday, October 4, 2017 8:43 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: set Adobe Reader DC as default pdf reader

But this makes it mandatory?

On Wed, Oct 4, 2017 at 1:30 PM, Thomas Gonzalez 
> wrote:
We use a custom.xml association that sets the reader as default. The location 
to place this xml is under %windir%\system32 and set the default association 
configuration file via local policy under computer configuration – 
administrative templates – windows components – file explorer

Value is “ set a default associations configuration file” and define the path 
%windir%\system32\custom.xml

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] 
On Behalf Of Daniel Ratliff
Sent: Wednesday, October 4, 2017 5:57 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: set Adobe Reader DC as default pdf reader

Looks like we are on Adobe Reader DC 2015 (15.006.30352).

Daniel Ratliff


From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Paul Winstanley
Sent: Tuesday, October 3, 2017 6:44 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: set Adobe Reader DC as default pdf reader

I've had it work once and never again. Are you using latest releases of Adobe 
Daniel?

On 3 Oct 2017 22:30, "Daniel Ratliff" 
> wrote:
No issues here using DISM with the apply associations.

https://technet.microsoft.com/en-us/library/hh825038.aspx

Daniel Ratliff

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] 
On Behalf Of Timothy Ransom
Sent: Tuesday, October 3, 2017 4:55 PM
To: mssms@lists.myitforum.com
Subject: [mssms] set Adobe Reader DC as default pdf reader


Hi,

I am preparing to upgrade all users to Adobe Reader DC but unable to set it as 
default pdf reader for existing users on Windows 10.
I have tried several different approaches but they only work for new users - 
existing users still default to Edge.

Has anyone been able to deploy Adobe Reader DC and set it as default pdf reader 
for existing users on Windows 10?

Thanks,
Tim



  Timothy Ransom
  System Administrator II

  Georgia Department of Labor
  Central Office
  223 Courtland St #400 

  Atlanta, Georgia 30303 


  Office 

 404 232 7542
  timothy.ran...@gdol.ga.gov



[cid:image003.gif@01D1964B.6F88E090]

[cid:image004.gif@01D1964B.6F88E090]

[cid:image005.gif@01D1964B.6F88E090]

[cid:image006.gif@01D1964B.6F88E090]

[cid:image007.gif@01D1964B.6F88E090]

[cid:image008.gif@01D1964B.6F88E090]

[cid:image009.gif@01D1964B.6F88E090]

[cid:image010.gif@01D1964B.6F88E090]

[cid:image011.gif@01D1964B.6F88E090]

[cid:image012.gif@01D1964B.6F88E090]





*** GEORGIA DEPARTMENT OF LABOR ***
   ** CONFIDENTIALITY NOTICE **

This transmission may contain confidential information protected by state or 
federal law.
The information is intended only for use consistent with the state business 
discussed in this transmission.
If you are not the intended recipient, you are hereby notified that any 
disclosure, copying, distribution, 

[mssms] Re: Windows 10 in place upgrade referencing drivers

[Marable, Mike]

Yes. I have it working in our upgrade sequence.

How about in the morning I’ll send you the details on how I have it set up?

From: listsad...@lists.myitforum.com  on behalf 
of Ortega, Clint 
Sent: Thursday, September 21, 2017 6:02:02 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Windows 10 in place upgrade referencing drivers

Hey all,
I’m hoping I can get some clairification on using drivers for specific models 
during in place upgrade.  We are having constant failures during the IPU, 
coming back with generic errors.  Our error logs showed the following:

2017-09-13 11:13:44, Error MOUPG  
CSetupManager::GetDUSetupResults(5268): Result = 0x80070490
2017-09-13 11:13:44, Info  MOUPG  ImageExit: Initializing 
SetupResult: [0x80070003]
2017-09-13 11:13:44, Info  MOUPG  ImageExit: Initializing 
Extended:[0x30003]
2017-09-13 11:13:44, Info  MOUPG  ImageExit: Initializing 
Scenario:[1]
2017-09-13 11:13:44, Info  MOUPG  ImageExit: Initializing Mode: 
   [2]
2017-09-13 11:13:44, Info  MOUPG  ImageExit: Initializing 
Target:  [C]
2017-09-13 11:13:44, Info  MOUPG  ImageExit: Initializing SQM:  
   [TRUE]
2017-09-13 11:13:44, Info  MOUPG  ImageExit: Initializing 
PostReboot:  [FALSE]

The SetupResult code 0x80070003 translates to E_PATH_NOT_FOUND. And the 
Extended code, points to a problem during phase 3 (0x3 - 
SP_EXECUTION_FIRST_BOOT) installing updates (0x0003 - 
SP_EXECUTION_OP_INSTALL_UPDATES).  Just above the exit codes, I noticed this.

2017-09-13 11:13:44, Info  MOUPG  SetupManager: User-provided 
driver install path [%Drivers01%] does not exist.
2017-09-13 11:13:44, Error MOUPG  
CSetupManager::CopyUserProvidedFiles(2361): Result = 0x80070003[gle=0x0002]
2017-09-13 11:13:44, Error MOUPG  
CSetupManager::ExecuteInstallMode(719): Result = 0x80070003[gle=0x0002]
2017-09-13 11:13:44, Error MOUPG  
CSetupManager::ExecuteDownlevelMode(396): Result = 0x80070003[gle=0x0002]
2017-09-13 11:13:44, Info  MOUPG  Setup phase change: 
[SetupPhaseUnpack] -> [SetupPhaseError]
2017-09-13 11:13:44, Info  MOUPG  
SetupManager::OpenOrCreateTask: Creating new task [Exit].

This provided another clue as to what happed during the upgrade.  It looks like 
a driver installation path was provided and didn’t exist.  I then checked the 
command line used to start the upgrade and found this.  This is the beginning 
of the setupact.log which lists parameters for this setup session.

2017-09-13 11:13:33, Info  MOUPG  SetupHost::Initialize
2017-09-13 11:13:33, Info  MOUPG  SetupHost::Initialize: 
ModulePath = [C:\$WINDOWS.~BT\Sources]
2017-09-13 11:13:33, Info  MOUPG  SetupHost::Initialize: 
WorkingPath= [C:\$WINDOWS.~BT\Sources]
2017-09-13 11:13:33, Info  MOUPG  SetupHost::Initialize: 
LoggingPath= [C:\$WINDOWS.~BT\Sources\Panther]
2017-09-13 11:13:33, Info  MOUPG  SetupHost::Initialize: 
MediaPath  = [C:\_SMSTaskSequence\Packages\PS100782]
2017-09-13 11:13:33, Info  MOUPG  SetupHost::Initialize: 
InstallFilePath= 
[C:\_SMSTaskSequence\Packages\PS100782\Sources\Install.wim]
2017-09-13 11:13:33, Info  MOUPG  SetupHost::Initialize: 
WinReFilePath  = []
2017-09-13 11:13:33, Info  MOUPG  SetupHost::Initialize: 
ServicingStackFilePath = []
2017-09-13 11:13:33, Info  MOUPG  SetupHost::Initialize: 
CmdLine= [/Install /Media /Quiet /ProcessId 6168 /InstallFile 
"C:\_SMSTaskSequence\Packages\PS100782\Sources\Install.wim" "/ImageIndex" "1" 
"/auto" "Upgrade" "/noreboot" "/postoobe" 
"C:\WINDOWS\SMSTSPostUpgrade\SetupComplete.cmd" "/postrollback" 
"C:\WINDOWS\SMSTSPostUpgrade\SetupRollback.cmd" "/installdrivers" "%Drivers01%" 
"/DynamicUpdate" "Disable" "/compat" "IgnoreWarning" /MediaPath 
"C:\_SMSTaskSequence\Packages\PS100782" /SuccessId 
eb141139-4cc1-4e64-9546-ef4c4eb536df]
2017-09-13 11:13:33, Info  MOUPG  SetupHost::Initialize: Mode   
= [0x2]
2017-09-13 11:13:33, Info  MOUPG  SetupHost::Initialize: 
Scenario   = [0x1]
2017-09-13 11:13:33, Info  MOUPG  SetupHost::Initialize: Flags  
= [0x805]
2017-09-13 11:13:33, Info  MOUPG  SetupHost: Setup build 
version is: 10.0.14393.693 (rs1_release.161220-1747)
2017-09-13 11:13:33, Info  CONX   Host OS version: 
6.1.7601.1130 Service Pack 1 (1.0) Platform 0x2, SuiteMask 0x100, ProdType 0x1
2017-09-13 11:13:33, Info  CONX   Source OS: Host SKU Info: 
Edition = 'Enterprise', Edition Type = 

[mssms] RE: Kaby Lake detection in SCCM+MDT Windows 7 OSD task sequence?

[Marable, Mike]

I use a WMI query to identify the CPU generation.

"Select Name from Win32_Processor where Name Like '%-7%'"

[cid:image001.png@01D332AB.E0B71E50]

Mike

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Fast, David D.
Sent: Thursday, September 21, 2017 7:21 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Kaby Lake detection in SCCM+MDT Windows 7 OSD task sequence?

Is there a way to detect Kaby Lake (Intel 7th generation) processors in an OSD 
task sequence?  Our organization has recently begun ordering the Dell Optiplex 
3050 and Latitude 5480 models, both of which are available to us with either 
Sky Lake (Intel 6th gen, Win7 compatible) or Kaby Lake (7th gen, W10 only) 
processors.  I need to be able to detect if a W7 OSD task sequence is being 
selected for a Kaby Lake system and so prevent the W7 task sequence from 
running.

Thanks,

David

The information transmitted is intended only for the person or entity to which 
it is addressed and may contain confidential and/or privileged material. Any 
review, retransmission, dissemination or other use of, or taking of any action 
in reliance upon this information by persons or entities other than the 
intended recipient is prohibited. If you received this in error, please contact 
the sender and delete the material from any computer.

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

Re: [mssms] RE: Recovery Key required after SecureBoot

[Marable, Mike]

Good idea, Paul.
It seems HP is notorious for TPM issues that are fixed with BIOs updates.  We 
had some 600 G2s that were giving us fits with BitLocker recovery until HP 
released an updated BIOs revision.

Mike


From: <listsad...@lists.myitforum.com> on behalf of "pwinstan...@gmail.com" 
<pwinstan...@gmail.com>
Reply-To: "mssms@lists.myitforum.com" <mssms@lists.myitforum.com>
Date: Monday, July 31, 2017 at 6:28 PM
To: "mssms@lists.myitforum.com" <mssms@lists.myitforum.com>
Subject: RE: [mssms] RE: Recovery Key required after SecureBoot

Try updating your bios to latest version

On 29 Jul 2017 00:36, "nick aquino" 
<nick.aqu...@hotmail.com<mailto:nick.aqu...@hotmail.com>> wrote:
No, not dense at all. Makes sense... but it is at win10 at this stage of the 
TS. I'll have to check the Tpm 2.0 settings on monday. There may be something 
there. These are the older models that are not happy. The 850g3 and 800g2 are 
working as expected.
Thanks Mike.

-Nick-


Sent from my Verizon 4G LTE smartphone


 Original message 
From: "Marable, Mike" <mmara...@med.umich.edu<mailto:mmara...@med.umich.edu>>
Date: 7/28/17 16:23 (GMT-05:00)
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Recovery Key required after SecureBoot
Nick,

Are these being imaged as Win7?

SecureBoot is completely incompatible with Windows 7.  That alone could be 
tripping the recovery key request.

I’ve been finding it doesn’t take much to trip the key request.  I had a Dell 
XPS that was in Legacy BIOs mode and TPM 2.0, but Dell listed that combo as 
being unsupported and it was tripping the recovery key at every reboot.  Once I 
switched to UEFI + TPM 2.0 it ran smooth.

It's been a long day (I’ve been here since 5am) so forgive me if I’m just being 
dense and missing the obvious.

Thanks
Mike



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of nick aquino
Sent: Friday, July 28, 2017 2:05 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Recovery Key required after SecureBoot

Hi all,
Building out a Windows 10 1703 in-place upgrade task sequence for HP Models 
running Windows 7.  I’ve run into a few issues with these, one of them being 
that when I turn on SecureBoot, bitlocker recovery key is required after I 
re-enable bitlocker.  Here are my steps:


  1.  Disable bitlocker
  2.  Upgrade Operating system

 *   This reboots on its own

  1.  Added another restart to fix an issue with the TS Progress bar

 *   (conditional steps to disable bitlocker if, for some reason, it’s 
enabled again)

  1.  Restart into WinPE
  2.  Convert from MBR to GPT
  3.  Configure BIOS with UEFI and Secure Boot
  4.  Restart into Default OS
  5.  Enable bitlocker
  6.  Restart again into Main OS

After Step 9 restarts, we’re presented with the bitlocker recovery screen.  We 
enter the recovery key, boot up, disable bitlocker, restart, enable bitlocker 
and it’s fine.

If I perform all of the same steps but without enabling SecureBoot, we do not 
have an issue.  As soon as I enable secure boot (even if bitlocker is disabled 
before I restart into the firmware), once bitlocker enables, the recovery key 
is required upon the next restart.

Caveat: This only happens on the models that have legacy boot and secure boot 
separated into two settings in the BIOS.  The models that have it all in one 
step (i.e. “Legacy boot disabled and SecureBoot enabled”), those do not have 
the issue at all.

I hope this write-up makes sense and someone has a workaround.

-Nick-



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues




**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: Recovery Key required after SecureBoot

[Marable, Mike]

Nick,

Are these being imaged as Win7?

SecureBoot is completely incompatible with Windows 7.  That alone could be 
tripping the recovery key request.

I've been finding it doesn't take much to trip the key request.  I had a Dell 
XPS that was in Legacy BIOs mode and TPM 2.0, but Dell listed that combo as 
being unsupported and it was tripping the recovery key at every reboot.  Once I 
switched to UEFI + TPM 2.0 it ran smooth.

It's been a long day (I've been here since 5am) so forgive me if I'm just being 
dense and missing the obvious.

Thanks
Mike



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of nick aquino
Sent: Friday, July 28, 2017 2:05 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Recovery Key required after SecureBoot

Hi all,
Building out a Windows 10 1703 in-place upgrade task sequence for HP Models 
running Windows 7.  I've run into a few issues with these, one of them being 
that when I turn on SecureBoot, bitlocker recovery key is required after I 
re-enable bitlocker.  Here are my steps:


  1.  Disable bitlocker
  2.  Upgrade Operating system
 *   This reboots on its own
  3.  Added another restart to fix an issue with the TS Progress bar
 *   (conditional steps to disable bitlocker if, for some reason, it's 
enabled again)
  4.  Restart into WinPE
  5.  Convert from MBR to GPT
  6.  Configure BIOS with UEFI and Secure Boot
  7.  Restart into Default OS
  8.  Enable bitlocker
  9.  Restart again into Main OS

After Step 9 restarts, we're presented with the bitlocker recovery screen.  We 
enter the recovery key, boot up, disable bitlocker, restart, enable bitlocker 
and it's fine.

If I perform all of the same steps but without enabling SecureBoot, we do not 
have an issue.  As soon as I enable secure boot (even if bitlocker is disabled 
before I restart into the firmware), once bitlocker enables, the recovery key 
is required upon the next restart.

Caveat: This only happens on the models that have legacy boot and secure boot 
separated into two settings in the BIOS.  The models that have it all in one 
step (i.e. "Legacy boot disabled and SecureBoot enabled"), those do not have 
the issue at all.

I hope this write-up makes sense and someone has a workaround.

-Nick-


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: Windows 10 1703 Start Menu Problem

[Marable, Mike]

There was a CU that addressed that I believe (the "Something went wrong").  It 
might have been the May CU for 1703.

I also heard that there were one or possibly 2 unattend settings you could use 
to avoid that.

Sorry, I haven't touched my 1703 work in weeks.  I think it might have been 
Johan that wrote about it?

Mike



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Underwood, Bob
Sent: Monday, July 24, 2017 3:11 PM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Windows 10 1703 Start Menu Problem

We're seeing some (but not all) of the same start menu behavior on 1703.  
Essentially, we'll see some of those same "corrupt" tiles in the start menu on 
first logon, but they'll disappear after one or two more logons.  One caveat... 
we're not using group policy to control the settings.  Instead, we're using 
this script during deployment:

http://www.scconfigmgr.com/2016/03/01/remove-built-in-apps-when-creating-a-windows-10-reference-image/

(We were using the Niehaus script, but decided that a whitelist approach might 
be easier to maintain than a blacklist version... time will tell.)

We're also seeing a vague (and skippable) "something went wrong" message after 
the deployment completes.  I've not yet had time to investigate either of the 
above... kind of hoping they'll both go away when 1703 gets to CBB (or whatever 
they're calling it these days).



From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Johns, Damon (DoJ)
Sent: Thursday, July 20, 2017 10:28 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Windows 10 1703 Start Menu Problem

Hi Everyone,

This is a little off topic however a colleague of mine is having a problem with 
his Windows 10 1703 deployment and the start menu.

He's posted to the Microsoft forums here:

https://social.technet.microsoft.com/Forums/en-US/f59ec1ce-005d-4339-b5b2-b49044ee9aed/problem-with-windows-10-1703-start-menu-using-group-policy?forum=win10itprosetup

If anyone can offer some suggestions or assistance he would be very 
appreciative.

Cheers
Damon



CONFIDENTIALITY NOTICE AND DISCLAIMER
The information in this transmission may be confidential and/or protected by 
legal professional privilege, and is intended only for the person or persons to 
whom it is addressed. If you are not such a person, you are warned that any 
disclosure, copying or dissemination of the information is unauthorised. If you 
have received the transmission in error, please immediately contact this office 
by telephone, fax or email, to inform us of the error and to enable 
arrangements to be made for the destruction of the transmission, or its return 
at our cost. No liability is accepted for any unauthorised use of the 
information contained in this transmission.

[CONFIDENTIALITY AND PRIVACY NOTICE] Information transmitted by this email is 
proprietary to Medtronic and is intended for use only by the individual or 
entity to which it is addressed, and may contain information that is private, 
privileged, confidential or exempt from disclosure under applicable law. If you 
are not the intended recipient or it appears that this mail has been forwarded 
to you without proper authority, you are notified that any use or dissemination 
of this information in any manner is strictly prohibited. In such cases, please 
delete this mail from your records. To view this notice in other languages you 
can either select the following link or manually copy and paste the link into 
the address bar of a web browser: http://emaildisclaimer.medtronic.com

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: Weird OSD issues

[Marable, Mike]

My first thought was boundaries.  The package content not being found is the 
same symptom I ran into when I never set up the boundary groups properly.  Once 
I assigned the server the OSD sequences ran smoothly.

In my case the machine came up in a boundary group that didn't have the site 
assignment server defined, so it couldn't find anything.  Once I assigned the 
site server to the group things snapped into place.

Just a thought.

Mike



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Fast, David D.
Sent: Wednesday, July 19, 2017 6:08 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Weird OSD issues


I have two office locations where SCCM OSD does not run.  In the first 
location, the OSD process errors out immediately with "An error occurred while 
retrieving policy for this computer  (0x80004005)".  Examining the smsts.log 
file, there are entries for "Failed to get client identity (80004005)", 
"SyncTimeWithMP() failed. 80004005" and "Failed to get time information from 
MP: http://oursccmserver.ourdomain.com.;  We have verified that the system time 
is correct, the system period is correct, a valid IP address is obtained and we 
can ping the SCCM server both by IP and by FQDN.  This issue is repeatable on 
multiple systems.

In the second location, the tech can get as far as selecting a task sequence, 
but when the dependency check runs it errors out that it cannot find the USMT 
package on the DP.  I have redistributed the USMT package to the DP several 
times and even removed the package from the DP and then redistributed.  
Examining the package content on the DP itself shows that the package is 
getting distributed/redistributed and the timestamp information updates 
accordingly.  This issue is also repeatable on multiple systems.

Any ideas on what to do next for either of these issues?  We have over 100 
other locations where OSD runs without issue.

Thanks,

David



The information transmitted is intended only for the person or entity to which 
it is addressed and may contain confidential and/or privileged material. Any 
review, retransmission, dissemination or other use of, or taking of any action 
in reliance upon this information by persons or entities other than the 
intended recipient is prohibited. If you received this in error, please contact 
the sender and delete the material from any computer.

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] 1703 sample SCCM task sequence

[Marable, Mike]

Johan has a pretty good blog post on doing this.

https://deploymentresearch.com/Research/Post/533/Improving-the-ConfigMgr-Inplace-Upgrade-Task-Sequence

I used his original post (he’s updated it since) when I started putting 
together our in-place upgrade sequence.

Mike


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Kevin Ray
Sent: Tuesday, July 18, 2017 10:05 PM
To: mssms 
Subject: [mssms] 1703 sample SCCM task sequence

Hi All,

looking to upgrade  build to 1703 using upgrade TS method. Any sample TS or 
blog with steps

thanks
Kevin



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

Re: [mssms] Windows 10 Servicing

[Marable, Mike]

No problem Kevin.  I hope it helps.



From: <listsad...@lists.myitforum.com> on behalf of Kevin Ray 
<kevinalive...@gmail.com>
Reply-To: "mssms@lists.myitforum.com" <mssms@lists.myitforum.com>
Date: Thursday, July 13, 2017 at 11:03 AM
To: "mssms@lists.myitforum.com" <mssms@lists.myitforum.com>
Subject: Re: [mssms] Windows 10 Servicing

Yes,  thanks Mike for taking time and writing with detailed

On Thu, Jul 13, 2017 at 10:47 AM, Ed Aldrich 
<ed.aldr...@1e.com<mailto:ed.aldr...@1e.com>> wrote:
Nice, concise explanation

[d]
Ed Aldrich | Technology Enablement Lead
www.1e.com/mms<http://www.1e.com/mms>
Mobile: (401) 924-2293<tel:(401)%20924-2293>
ed.aldr...@1e.com<mailto:ed.aldr...@1e.com> | www.1e.com<http://www.1e.com/>

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of Marable, Mike
Sent: Thursday, July 13, 2017 10:12 AM
To: mssms <mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>
Subject: RE: [mssms] Windows 10 Servicing

No, you didn’t miss anything at all.

Each Windows 10 build is first released as Current Branch.  That is when it is 
make publicly available.  That is the first listing for that version in the 
table.  It just shows that it was first released on August 2, 2016.

Next, after about 4 months Microsoft will declare it ready for business and it 
will then be considered Current Branch for Business (CBB).  That is the second 
listing in the table.  It shows that 1607 reached the CBB milestone on November 
29, 2016.

Now, 1607 was a special build.  Build 1607 (the Anniversary Update) also 
included a new Long-Term Servicing Branch (LTSB) release.  That is the third 
and final entry in the table.  That LTSB version was released on August 2, 2016.

LTSB is a special version of Windows 10 for use in very specific scenarios.  
You really are only concerned with the CB and CBB entries in the table.

So the latest version of Windows 10 is build 1703.  You can see in the table 
that it was release on April 11th.  It has not reached the milestone where 
Microsoft decides that it is ready for widespread deployment in corporate 
environments (the CBB milestone), so that is why there is only the one entry 
for 1703.  Pretty soon though build 1703 will reach that milestone and the 
table will be updated with that info.

I hope that helps to clear things up.

Mike



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Kevin Ray
Sent: Thursday, July 13, 2017 9:51 AM
To: mssms <mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>
Subject: Re: [mssms] Windows 10 Servicing

Thanks Mike,
also when saw below for all CB,CBB,CTSB also showing same Windows 10.0.14393. 
Did i missing anything


[nline image 1]

do we have any step by step upgrade task sequence blog please!!

On Thu, Jul 13, 2017 at 7:52 AM, Marable, Mike 
<mmara...@med.umich.edu<mailto:mmara...@med.umich.edu>> wrote:
Here is the Windows 10 build number info from TechNet for future use.

https://technet.microsoft.com/en-us/windows/release-info.aspx

14393 is build 1607


1)  The latest build (1703) is version 15063

2)  Yes, you would get the latest builds from Microsoft

3)  Yes, in fact you are going to be doing that going forward since Windows 
10 needs to be kept on a current build

4)  Personally, I would use an upgrade task sequence as opposed to the 
automated servicing to upgrade your clients to new builds.  The task sequence 
just offers you so much more control over the process.

Mike



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of Kevin Ray
Sent: Thursday, July 13, 2017 7:40 AM
To: mssms <mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>
Subject: [mssms] Windows 10 Servicing

Hi All,

I'm new to Windows 10 Servicing plans.

I prepared the Windows 10 Image and deployed  on some machine.Now realized the  
Windows 10 Servicing.When i check in SCCM Service Plan Dashboard most of the 
machines 98% machines showing as expires soon.Most of them are ready for 
release .(CB)

when i checked the windows 10 version is  "Windows 10.0.14393".

So my questions

1) what is the latest build
2) do i get the latest build from Microsoft .So that i can directly deploy that 
image(im assuming )
3) can i upgraded to latest build which i have already deployed
4) any other things i need to consider for this

i'm with 1703 SCCM version


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues




***

RE: [mssms] Windows 10 Servicing

[Marable, Mike]

No, you didn’t miss anything at all.

Each Windows 10 build is first released as Current Branch.  That is when it is 
make publicly available.  That is the first listing for that version in the 
table.  It just shows that it was first released on August 2, 2016.

Next, after about 4 months Microsoft will declare it ready for business and it 
will then be considered Current Branch for Business (CBB).  That is the second 
listing in the table.  It shows that 1607 reached the CBB milestone on November 
29, 2016.

Now, 1607 was a special build.  Build 1607 (the Anniversary Update) also 
included a new Long-Term Servicing Branch (LTSB) release.  That is the third 
and final entry in the table.  That LTSB version was released on August 2, 2016.

LTSB is a special version of Windows 10 for use in very specific scenarios.  
You really are only concerned with the CB and CBB entries in the table.

So the latest version of Windows 10 is build 1703.  You can see in the table 
that it was release on April 11th.  It has not reached the milestone where 
Microsoft decides that it is ready for widespread deployment in corporate 
environments (the CBB milestone), so that is why there is only the one entry 
for 1703.  Pretty soon though build 1703 will reach that milestone and the 
table will be updated with that info.

I hope that helps to clear things up.

Mike



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Kevin Ray
Sent: Thursday, July 13, 2017 9:51 AM
To: mssms <mssms@lists.myitforum.com>
Subject: Re: [mssms] Windows 10 Servicing

Thanks Mike,
also when saw below for all CB,CBB,CTSB also showing same Windows 10.0.14393. 
Did i missing anything


[Inline image 1]

do we have any step by step upgrade task sequence blog please!!

On Thu, Jul 13, 2017 at 7:52 AM, Marable, Mike 
<mmara...@med.umich.edu<mailto:mmara...@med.umich.edu>> wrote:
Here is the Windows 10 build number info from TechNet for future use.

https://technet.microsoft.com/en-us/windows/release-info.aspx

14393 is build 1607


1)  The latest build (1703) is version 15063

2)  Yes, you would get the latest builds from Microsoft

3)  Yes, in fact you are going to be doing that going forward since Windows 
10 needs to be kept on a current build

4)  Personally, I would use an upgrade task sequence as opposed to the 
automated servicing to upgrade your clients to new builds.  The task sequence 
just offers you so much more control over the process.

Mike



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of Kevin Ray
Sent: Thursday, July 13, 2017 7:40 AM
To: mssms <mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>
Subject: [mssms] Windows 10 Servicing

Hi All,

I'm new to Windows 10 Servicing plans.

I prepared the Windows 10 Image and deployed  on some machine.Now realized the  
Windows 10 Servicing.When i check in SCCM Service Plan Dashboard most of the 
machines 98% machines showing as expires soon.Most of them are ready for 
release .(CB)

when i checked the windows 10 version is  "Windows 10.0.14393".

So my questions

1) what is the latest build
2) do i get the latest build from Microsoft .So that i can directly deploy that 
image(im assuming )
3) can i upgraded to latest build which i have already deployed
4) any other things i need to consider for this

i'm with 1703 SCCM version


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] Windows 10 Servicing

[Marable, Mike]

Here is the Windows 10 build number info from TechNet for future use.

https://technet.microsoft.com/en-us/windows/release-info.aspx

14393 is build 1607


1)  The latest build (1703) is version 15063

2)  Yes, you would get the latest builds from Microsoft

3)  Yes, in fact you are going to be doing that going forward since Windows 
10 needs to be kept on a current build

4)  Personally, I would use an upgrade task sequence as opposed to the 
automated servicing to upgrade your clients to new builds.  The task sequence 
just offers you so much more control over the process.

Mike



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Kevin Ray
Sent: Thursday, July 13, 2017 7:40 AM
To: mssms 
Subject: [mssms] Windows 10 Servicing

Hi All,

I'm new to Windows 10 Servicing plans.

I prepared the Windows 10 Image and deployed  on some machine.Now realized the  
Windows 10 Servicing.When i check in SCCM Service Plan Dashboard most of the 
machines 98% machines showing as expires soon.Most of them are ready for 
release .(CB)

when i checked the windows 10 version is  "Windows 10.0.14393".

So my questions

1) what is the latest build
2) do i get the latest build from Microsoft .So that i can directly deploy that 
image(im assuming )
3) can i upgraded to latest build which i have already deployed
4) any other things i need to consider for this

i'm with 1703 SCCM version

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] MDT 8443 and FIPS

[Marable, Mike]

We are still using MDT 2013 U2 and had to disable FIPS compliancy for hashing 
to address the FIPS bug in that version.

Our security team wants to enable FIPS so I wanted to know if MDT 8443 is FIPS 
compliant.

Thanks

Mike Marable
Microsoft Systems Engineer Lead
Enterprise Device Engineering and Management
MCPS, MCITP, MCTS, MCSA, MCSE, MS  [ 
Profile ] [ 
Blog ]

"'I failed' is ten times more of a man than someone who says, 'What if?'."
-Greg Plitt

"Live as if you were to die tomorrow. Learn as if you were to live forever."
-Mahatma Gandhi

"Know yourself and you will win all battles."
-Sun Tzu



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

Re: [mssms] SCCM Design query for small number of machines

[Marable, Mike]

Very true Paul.  I forgot Kevin was asking about workstation DPs as well.

You also don’t necessarily need to use server-class hardware.  You can use a 
workstation-class desktop.  That is something that we are looking at for some 
of our remote sites (50-200 clients).  Take and HP z-series workstation, 
install Server 2016 on it and configure it as a DP.

Mike




From: <listsad...@lists.myitforum.com> on behalf of "pwinstan...@gmail.com" 
<pwinstan...@gmail.com>
Reply-To: "mssms@lists.myitforum.com" <mssms@lists.myitforum.com>
Date: Monday, July 10, 2017 at 11:08 AM
To: "mssms@lists.myitforum.com" <mssms@lists.myitforum.com>
Subject: Re: [mssms] SCCM Design query for small number of machines

However workstation Dp won't allow PXE but you can use boot media.


On Mon, 10 Jul 2017 at 12:00, Marable, Mike 
<mmara...@med.umich.edu<mailto:mmara...@med.umich.edu>> wrote:
Good morning Kevin,

Personally I would put a DP in the remote sites.  You have a decent number of 
machines in each location so pulling content across the WAN for everything 
probably would not be the best way of utilizing that connection.

If you are going to be doing OSD in those locations having a DP with the 
content locally is going to be your best bet.  Otherwise trying to PXE boot 
across the Pacific Ocean, while sounding cool, probably would be a painful 
experience.

Thanks
Mike


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of Kevin Ray
Sent: Sunday, July 9, 2017 10:06 PM
To: mssms <mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>
Subject: Re: [mssms] SCCM Design query for small number of machines

Any help

On Fri, Jul 7, 2017 at 9:35 AM, Kevin Ray 
<kevinalive...@gmail.com<mailto:kevinalive...@gmail.com>> wrote:
Hi Team,

i have a sccm infra in across the globe ..USA (500 machines), Japan (300), 
Korea(50-300) ,Canada(100-300)

so WAN speed is 10 MBPS from other offices to Head quaters USA.

as of now SCCM infra is Standalone primary server...

so if i want to manage the other regions, should I just install the Standard DP 
is fine in all locations ?

I want to use the features are Inventory,Patching, OSD (with PXE and 
USB),Complience management,app/package deployment..

Also If i dont want the PXE based OSD.. Can i go with workstation DP ? (any 
technet document for this like Workstation DP is supprted)

I'm with SCCM 1610.


Thanks
Kevin




**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] SCCM Design query for small number of machines

[Marable, Mike]

Good morning Kevin,

Personally I would put a DP in the remote sites.  You have a decent number of 
machines in each location so pulling content across the WAN for everything 
probably would not be the best way of utilizing that connection.

If you are going to be doing OSD in those locations having a DP with the 
content locally is going to be your best bet.  Otherwise trying to PXE boot 
across the Pacific Ocean, while sounding cool, probably would be a painful 
experience.

Thanks
Mike


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Kevin Ray
Sent: Sunday, July 9, 2017 10:06 PM
To: mssms 
Subject: Re: [mssms] SCCM Design query for small number of machines

Any help

On Fri, Jul 7, 2017 at 9:35 AM, Kevin Ray 
> wrote:
Hi Team,

i have a sccm infra in across the globe ..USA (500 machines), Japan (300), 
Korea(50-300) ,Canada(100-300)

so WAN speed is 10 MBPS from other offices to Head quaters USA.

as of now SCCM infra is Standalone primary server...

so if i want to manage the other regions, should I just install the Standard DP 
is fine in all locations ?

I want to use the features are Inventory,Patching, OSD (with PXE and 
USB),Complience management,app/package deployment..

Also If i dont want the PXE based OSD.. Can i go with workstation DP ? (any 
technet document for this like Workstation DP is supprted)

I'm with SCCM 1610.


Thanks
Kevin



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: Question about PoSh Remove-CMPackage

[Marable, Mike]

It looks like Remove-CMContentDistribution is that I'm looking for.

https://docs.microsoft.com/en-us/powershell/sccm/configurationmanager/vlatest/remove-cmcontentdistribution


I just need to track what kind of package (i.e. driver, package, boot image, 
etc.) and use the appropriate parameter.

Mike


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marable, Mike
Sent: Wednesday, July 5, 2017 1:48 PM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Question about PoSh Remove-CMPackage

This part makes me believe that it will remove it from the DPs, but I'm trying 
to be sure before I turn the script loose.

System Center 2012 Configuration Manager cannot delete a package from a 
distribution point if a user has locked a network file.

Thanks
Mike


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Erno, Cynthia M (ITS)
Sent: Wednesday, July 5, 2017 1:33 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Question about PoSh Remove-CMPackage

Detailed Description
The Remove-CMPackage cmdlet removes a package in Microsoft System Center 2012 
SP1 Configuration Manager. You can delete a package from the site where it was 
created. System Center 2012 Configuration Manager cannot delete a package from 
a distribution point if a user has locked a network file.
When you remove a package, System Center 2012 Configuration Manager removes it 
from the database. If the package was sent to child sites, System Center 2012 
Configuration Manager removes the package information at those child sites. If 
a compressed version of source files for the package exists, System Center 2012
Configuration Manager deletes the compressed file from the site server.


Does that help?


Cynthia Erno

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Wednesday, July 05, 2017 1:23 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Question about PoSh Remove-CMPackage


ATTENTION: This email came from an external source. Do not open attachments or 
click on links from unknown senders or unexpected emails.

I want to know if the cmdlet Remove-CMPackage will pull the content off of the 
DPs as part of removing the package, or will is just delete it from the console 
and leave the content orphaned on the DPs?

Thanks

Mike Marable
Microsoft Systems Engineer Lead
Enterprise Device Engineering and Management
MCPS, MCITP, MCTS, MCSA, MCSE, MS  [ 
Profile<http://www.mycertprofile.com/Profile/5319166625> ] [ 
Blog<http://thesystemsmonkey.wordpress.com/> ]

"My great concern is not whether you have failed, but whether you are content 
with failure."
-Abraham Lincoln

"What would life be if we had no courage to attempt anything?"
-Vincent van Gogh

"Only those who dare to fail greatly can ever achieve greatly."
-Robert F. Kennedy




**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: Question about PoSh Remove-CMPackage

[Marable, Mike]

This part makes me believe that it will remove it from the DPs, but I'm trying 
to be sure before I turn the script loose.

System Center 2012 Configuration Manager cannot delete a package from a 
distribution point if a user has locked a network file.

Thanks
Mike


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Erno, Cynthia M (ITS)
Sent: Wednesday, July 5, 2017 1:33 PM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Question about PoSh Remove-CMPackage

Detailed Description
The Remove-CMPackage cmdlet removes a package in Microsoft System Center 2012 
SP1 Configuration Manager. You can delete a package from the site where it was 
created. System Center 2012 Configuration Manager cannot delete a package from 
a distribution point if a user has locked a network file.
When you remove a package, System Center 2012 Configuration Manager removes it 
from the database. If the package was sent to child sites, System Center 2012 
Configuration Manager removes the package information at those child sites. If 
a compressed version of source files for the package exists, System Center 2012
Configuration Manager deletes the compressed file from the site server.


Does that help?


Cynthia Erno

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Wednesday, July 05, 2017 1:23 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Question about PoSh Remove-CMPackage


ATTENTION: This email came from an external source. Do not open attachments or 
click on links from unknown senders or unexpected emails.

I want to know if the cmdlet Remove-CMPackage will pull the content off of the 
DPs as part of removing the package, or will is just delete it from the console 
and leave the content orphaned on the DPs?

Thanks

Mike Marable
Microsoft Systems Engineer Lead
Enterprise Device Engineering and Management
MCPS, MCITP, MCTS, MCSA, MCSE, MS  [ 
Profile<http://www.mycertprofile.com/Profile/5319166625> ] [ 
Blog<http://thesystemsmonkey.wordpress.com/> ]

"My great concern is not whether you have failed, but whether you are content 
with failure."
-Abraham Lincoln

"What would life be if we had no courage to attempt anything?"
-Vincent van Gogh

"Only those who dare to fail greatly can ever achieve greatly."
-Robert F. Kennedy




**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] Question about PoSh Remove-CMPackage

[Marable, Mike]

I want to know if the cmdlet Remove-CMPackage will pull the content off of the 
DPs as part of removing the package, or will is just delete it from the console 
and leave the content orphaned on the DPs?

Thanks

Mike Marable
Microsoft Systems Engineer Lead
Enterprise Device Engineering and Management
MCPS, MCITP, MCTS, MCSA, MCSE, MS  [ 
Profile ] [ 
Blog ]

"My great concern is not whether you have failed, but whether you are content 
with failure."
-Abraham Lincoln

"What would life be if we had no courage to attempt anything?"
-Vincent van Gogh

"Only those who dare to fail greatly can ever achieve greatly."
-Robert F. Kennedy



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: Hardware Inventory

[Marable, Mike]

We have about 35,000 machines and we're running hardware inventory every 10 
hours.

Mike



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Mead, Renae (DTMB)
Sent: Friday, June 23, 2017 8:55 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Hardware Inventory

I'm curious how often everyone is running hardware inventory? We have about 
50,000 machines in our environment running hardware and software inventory 
every 4 days. We are getting rid of our asset management system and upper 
management wants ConfigMgr to replace it.

Thanks,
Renae Mead
DTMB IS OA Enterprise Services
mea...@michigan.gov
(517) 636-0761 Office
(517) 388-2737 Mobile


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

Re: [mssms] RE: Delta Download Startup Issues

[Marable, Mike]

Seeing how I prattled on about release schedules for production, then it will 
probably be TP1706 released tomorrow.  That’s usually how my luck goes.


From: <listsad...@lists.myitforum.com> on behalf of "pwinstan...@gmail.com" 
<pwinstan...@gmail.com>
Reply-To: "mssms@lists.myitforum.com" <mssms@lists.myitforum.com>
Date: Thursday, June 22, 2017 at 11:22 AM
To: "mssms@lists.myitforum.com" <mssms@lists.myitforum.com>
Subject: Re: [mssms] RE: Delta Download Startup Issues

Yep but Tp1706 is the one due friday?

On Thu, Jun 22, 2017 at 4:14 PM, Marable, Mike 
<mmara...@med.umich.edu<mailto:mmara...@med.umich.edu>> wrote:
It’s a gamble.  I think that SCCM will have production releases in February, 
June and October.  That’s just based on something I think Aaron said at MMS 
last month about SCCM sticking to a 3x year release plan and not following the 
2x releases of Windows 10.  I think it was Aaron, or maybe it was Michael 
Niehaus.  I’m just thinking that Microsoft is trying to get onto a predictable 
schedule with releases so that businesses can start planning ahead in 
anticipation of the releases.

That’s a lot of thinking on my part, I know.

Anyway, June could be the production release.



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of Paul Winstanley
Sent: Thursday, June 22, 2017 10:47 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: Re: [mssms] RE: Delta Download Startup Issues

That's a TP release though isn't it Phil?

On Thu, Jun 22, 2017 at 3:15 PM, Phil Wilcock 
<ph...@2pintsoftware.com<mailto:ph...@2pintsoftware.com>> wrote:
Yep, don’t bother just yet. We’re informed that there are significant 
improvements arriving in 1706. And it is Friday tomorrow 

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of Enley, Carl
Sent: 22 June 2017 14:56
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Delta Download Startup Issues

IMHO Express files in SCCM are not ready for primetime at this point, I 
wouldn’t bother. It literally takes 4 hours to download the W10 cumulative with 
Express updates enabled. My patch package grew from 13GB to nearly 44GB in size.

With that said I assume you are on the latest 1703 client ? 5.00.8498.xxx ?

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Beardsley, James
Sent: Thursday, June 22, 2017 9:23 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Delta Download Startup Issues

I’m having trouble implementing express updates for some reason. The “task” is 
not starting on any of my machines. Anyone have a solution to this?

This 
post<https://social.technet.microsoft.com/Forums/windows/en-US/ea82257f-5016-4ef5-9f58-e3cbfb4c4a40/express-updates-port?forum=ConfigMgrCompliance>
 on TechNet forums indicates that the machine must have the April 2017 patches 
installed. This particular machine where I took this screenshot has all of the 
latest cumulative updates installed already so I don’t know what update I could 
be missing.

[cid:image001.png@01D2EB4F.A39EE910]



Confidentiality Notice: This e-mail is intended only for the addressee named 
above. It contains information that is privileged, confidential or otherwise 
protected from use and disclosure. If you are not the intended recipient, you 
are hereby notified that any review, disclosure, copying, or dissemination of 
this transmission, or taking of any action in reliance on its contents, or 
other use is strictly prohibited. If you have received this transmission in 
error, please reply to the sender listed above immediately and permanently 
delete this message from your inbox. Thank you for your cooperation.






**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues




**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] RE: Delta Download Startup Issues

[Marable, Mike]

It’s a gamble.  I think that SCCM will have production releases in February, 
June and October.  That’s just based on something I think Aaron said at MMS 
last month about SCCM sticking to a 3x year release plan and not following the 
2x releases of Windows 10.  I think it was Aaron, or maybe it was Michael 
Niehaus.  I’m just thinking that Microsoft is trying to get onto a predictable 
schedule with releases so that businesses can start planning ahead in 
anticipation of the releases.

That’s a lot of thinking on my part, I know.

Anyway, June could be the production release.



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Paul Winstanley
Sent: Thursday, June 22, 2017 10:47 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: Delta Download Startup Issues

That's a TP release though isn't it Phil?

On Thu, Jun 22, 2017 at 3:15 PM, Phil Wilcock 
> wrote:
Yep, don’t bother just yet. We’re informed that there are significant 
improvements arriving in 1706. And it is Friday tomorrow 

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] 
On Behalf Of Enley, Carl
Sent: 22 June 2017 14:56
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Delta Download Startup Issues

IMHO Express files in SCCM are not ready for primetime at this point, I 
wouldn’t bother. It literally takes 4 hours to download the W10 cumulative with 
Express updates enabled. My patch package grew from 13GB to nearly 44GB in size.

With that said I assume you are on the latest 1703 client ? 5.00.8498.xxx ?

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Beardsley, James
Sent: Thursday, June 22, 2017 9:23 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Delta Download Startup Issues

I’m having trouble implementing express updates for some reason. The “task” is 
not starting on any of my machines. Anyone have a solution to this?

This 
post
 on TechNet forums indicates that the machine must have the April 2017 patches 
installed. This particular machine where I took this screenshot has all of the 
latest cumulative updates installed already so I don’t know what update I could 
be missing.

[cid:image001.png@01D2EB48.AB397D90]



Confidentiality Notice: This e-mail is intended only for the addressee named 
above. It contains information that is privileged, confidential or otherwise 
protected from use and disclosure. If you are not the intended recipient, you 
are hereby notified that any review, disclosure, copying, or dissemination of 
this transmission, or taking of any action in reliance on its contents, or 
other use is strictly prohibited. If you have received this transmission in 
error, please reply to the sender listed above immediately and permanently 
delete this message from your inbox. Thank you for your cooperation.





**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: Windows 10 In Place Upgrade with Staged Content

[Marable, Mike]

You're actually going to want to use the variable %Drivers01%.

SCCM treats the staged content variables just like it does with the variables 
for installing multiple applications or packages.  The name you specify is 
really just a prefix and SCCM will assign the first one to that name and 
appends "01" to the name (hence %Drivers01%).

Depending on how many models you may be supporting, there's a more flexible way 
of doing this.  I'm using it in our Windows 10 bare metal builds as well as the 
in-place upgrade sequences.

Kim Oppalfens wrote about dynamically identifying which driver package to use 
and setting the variable SCCM feeds into the executable used in that "Download 
Package Content" step.  He also presented it at MMS earlier this month.
http://www.oscc.be/sccm/osd/The-holy-grail-of-ConfigMgr-diver-management,-or-whatever-you-want-to-call-it/

Or if you want to leverage a web service you can use this:
http://www.scconfigmgr.com/2017/03/29/modern-driver-management-using-web-services-during-osd-with-configmgr/

With this you don't have to have multiple "Download Package Content" steps with 
WMI queries or TS variable logic controlling which package is downloaded to 
which model.  Like I said, I use and it's wonderful.  It also takes the driver 
packages out from being directly referenced by the task sequence, so you can 
update them or add new ones without taking an outage or requiring updates to 
the task sequence.  That's been a life saver for me.  Since we're absorbing the 
Med School they have all sorts of models that differ from the standardized 
models we have in the health system.

Hope this helps.

Mike


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Ortega, Clint
Sent: Tuesday, May 30, 2017 4:50 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Windows 10 In Place Upgrade with Staged Content

Hey all,

I'm using some documentation I found online for including staged content in the 
task sequence, for a Win10 upgrade.  I'm not confident it's completely right 
though.  Has anyone successfully referenced stage content in their upgrade 
attempt, or is anyone able to spot where my variables are incorrect.  I'm 
getting an error: 0x8024200D at upgrade stage.

[cid:image001.jpg@01D2D988.E2171970][cid:image002.jpg@01D2D988.E2171970]
Thanks,
Clint Ortega
Client Device Engineer I
CHRISTUS Health
Information Management
469-282-0295
clint.ort...@christushealth.org

Nothing makes an Engineer more productive, than the "Last Minute"


CONFIDENTIALITY NOTICE:  Confidential information, such as identifiable patient 
health information or business information, is subject to protection under 
state and federal law.  If you are not the intended recipient of this message, 
you may not disclose, print, copy or disseminate this information.  If you have 
received this in error, please reply and notify the sender (only) and delete 
the message.  Unauthorized interception of this e-mail is a violation of 
federal criminal law.

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [External] [mssms] RE: Driver management - opinions?

[Marable, Mike]

Actually, it works fairly well for non-conforming models.  That's exactly the 
situation we are in.  The hospital I work for has a very controlled process for 
acquiring hardware.  All the models are known, limited and configured 
identically.  We're absorbing the medical school where they have been allowed 
to purchase freely what-ever they please.

What I've done is to create packages of drivers for known models just like the 
article says.  For the "dummy" package I use a package that contains just those 
network and MSD drivers that I need to get WinPE (v 10) to function (to be able 
to access the network and the hard drive).  If a driver package specific for 
that model cannot be found, it falls back on the same set of drivers that 
allowed WinPE to function.  That generally gets any non-conformist machine 
through the build.  The tech building the machine may have to download and 
manually add drivers for video and other components post-build.  We have a 
process for them to provide feedback so that I can continue to create model 
specific packages of drivers when needed.

Mike

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Miller, Todd
Sent: Wednesday, April 19, 2017 10:54 AM
To: mssms@lists.myitforum.com
Subject: RE: [External] [mssms] RE: Driver management - opinions?

Is it unclear to me what you do about non-conforming computer models in this 
method.  With no drivers loaded into Configmgr directly, there is no "chaos 
theory" for unsupported models to fall back to.
This seems like it would work perfectly for a perfectly managed organization, 
but my reality is a bit more dystopian.  We have 20,000 computers and 90% of 
them fall into less than 20 models but the remaining 2000 computers cover over 
200 more models.  And that is after trying very hard  and being very resistant 
to folks purchasing non-conforming models.  I see you are also at an EDU - so I 
imagine your make/model list has similarly long tail.

How could this method be enhanced to support the unsupported?


BIOS updating is mentioned in the comments of that blog post and that seems 
pretty intriguing.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Murray, Mike
Sent: Tuesday, April 18, 2017 4:59 PM
To: mssms@lists.myitforum.com
Subject: [External] [mssms] RE: Driver management - opinions?

Biggety Bump

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Murray, Mike
Sent: Monday, April 17, 2017 4:22 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Driver management - opinions?

We're thinking of testing the tool linked below. Anyone have experience with 
it? Are there any other tools you prefer that can accomplish similar?

http://www.scconfigmgr.com/2017/03/29/modern-driver-management-using-web-services-during-osd-with-configmgr/


Best Regards,

Mike Murray
Desktop Engineer/IT Consultant - IT Support Services
California State University, Chico
530.898.4357
mmur...@csuchico.edu

Remember, Chico State will NEVER ask you for your password via email!
For more information about recognizing phishing scam emails go to: 
http://www.csuchico.edu/isec/basics/spam-and-phishing.shtml





Notice: This UI Health Care e-mail (including attachments) is covered by the 
Electronic Communications Privacy Act, 18 U.S.C. 2510-2521 and is intended only 
for the use of the individual or entity to which it is addressed, and may 
contain information that is privileged, confidential, and exempt from 
disclosure under applicable law. If you are not the intended recipient, any 
dissemination, distribution or copying of this communication is strictly 
prohibited. If you have received this communication in error, please notify the 
sender immediately and delete or destroy all copies of the original message and 
attachments thereto. Email sent to or from UI Health Care may be retained as 
required by law or regulation. Thank you.


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: Opinions Local Admin

[Marable, Mike]

Rebuild the machine.  The desktop managers decided it was “easier” to just 
rebuild the machine than manually join it to the domain.  The most common 
reason for a machine getting knocked out of the domain is because the 
right-hand wasn’t talking to the left-hand and someone build a second machine 
with the same computer name.

Short sighted in my opinion but what do I know?  I’m just an engineer.  ;-)

Mike


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Daniel Ratliff
Sent: Tuesday, April 11, 2017 2:26 PM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Opinions Local Admin

What do you do for domain join issues, where local accounts are the only option?

Daniel Ratliff

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Tuesday, April 11, 2017 2:15 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Opinions Local Admin

We actually developed a utility that ran as a service to create a unique 
password for each machine and change it every day.  The algorithm factored in 
the name of the computer and the date when generating the password.

If we ever needed to use the password we had a corresponding tool that would 
calculate out what the password for a given machine was for the day.

We ran with that for at least 10 years or so, then about 2 years ago we just 
used Group Policy to disable all local accounts.

For a while we were thinking about LAPS, but opted for disabling the local 
accounts.

Mike


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Burke, John
Sent: Tuesday, April 11, 2017 1:37 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Opinions Local Admin

Hi,

We are talking about creating unique local admin passwords for our systems (vs 
changing it regularly).  I’m wondering how many folks actually create unique 
local admin passwords vs just changing it regularly?


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues


The information transmitted is intended only for the person or entity to which 
it is addressed
and may contain CONFIDENTIAL material. If you receive this material/information 
in error,
please contact the sender and delete or destroy the material/information.

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] Windows 7 Start menu and Task bar customization

[Marable, Mike]

Are you talking specifically deploying your Start Menu and Taskbar layouts as 
part of your Windows 7 OS deployment?

You will need to script the pinning of items.

Here is a blog that the DeploymentGuys wrote.  It’s a bit old, but it explains 
it well.
https://blogs.technet.microsoft.com/deploymentguys/2009/04/08/pin-items-to-the-start-menu-or-windows-7-taskbar-via-script/

-Mike


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Kevin Ray
Sent: Wednesday, April 5, 2017 2:11 PM
To: mssms 
Subject: Re: [mssms] Windows 7 Start menu and Task bar customization

Looking for Windows 7

On Wed, Apr 5, 2017 at 1:28 PM, Melin, Cordell (BAC/LAC) 
> wrote:
https://technet.microsoft.com/itpro/windows/configure/customize-and-export-start-layout

Cordell Melin
From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] 
On Behalf Of Kevin Ray
Sent: April 5, 2017 1:09 PM
To: mssms >
Subject: [mssms] Windows 7 Start menu and Task bar customization

Hi Team

For widnows 7 i have reference machine where i have configured all desired 
startmenu and Taskbar pin icons.. Looking for script or any method where i can 
deploy using task sequence in image




**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] Maintenance Windows & Restart Behavior

[Marable, Mike]

Well, we have the agreements as to when we can deploy software, essentially 
after hours.  We don’t use Maintenance Windows for them, we just set up a 
deployment to run as a specific time (maybe 11:00 pm for example) and fire it 
off.  We will divide up the deployment into multiple days.  Typically we’ll do 
a 3 day with maybe 10% of the intended machines on day 1, 25% on day 2 and the 
remainder on day 3.

Mike

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Adam Juelich
Sent: Wednesday, March 29, 2017 4:07 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Maintenance Windows & Restart Behavior

Thanks, Mike.

So you guys strictly use Windows Embedded?  If you have traditional clients, 
how do you manage them differently?

On Wed, Mar 29, 2017 at 2:27 PM, Marable, Mike 
<mmara...@med.umich.edu<mailto:mmara...@med.umich.edu>> wrote:
Hi Adam,


1.   Maintenance Windows

a.   We use these only on our embedded devices and not on traditional 
clients.  We have a window set once a week (like 2 am on Sunday mornings) so 
that SCCM turns off the write filter on the device, runs our deployments and 
then re-enables the write filter.

2.   Restart Behavior / Communications

a.   We actually have written our own utility to handle reboots.  It allows 
us to display a message to the end user, countdown timer, users can delay the 
reboot, we can have it check for running executables before attempting to 
reboot, etc.

b.   We have agreements in place with critical areas, such as emergency 
rooms, and other 24hour clinics to limit reboots to specific days and times.  
Otherwise the understanding with the users is that we will do our deployments 
and maintenance outside of business hours.  Combine that with our reboot tool 
and the users are pretty happy.

We do use WOL very heavily.  Different clinics have varying office hours/days 
and we have collections set up to wake machines up about 15 minutes before the 
beginning of business for them.  We’ve been very successful with that.  The WOL 
issues that we have run into in the past have usually been attributed to either 
mis-configured BIOs settings or users hard-powering off machines.

Mike



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of Adam Juelich
Sent: Wednesday, March 29, 2017 2:55 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Maintenance Windows & Restart Behavior

Hello Everyone,

This isn't as much of a question as much as a poll on how people are doing 
this.  I know everyone is in charge of different environments, different 
sizing, and other complex variables.  I'd like to know what settings you 
specify for the following items:


  1.  Maintenance Windows

 *   What are your MW for Windows Clients?
 *   Do you usually just do it for 'Restarts' or 'Installs' as well?
 *   Are you leveraging WoL and/or AMT?
 *   If so, what is your success rate?

  1.  Restart Behavior

 *   What do you specify for the two Client Notifications?

  1.  Communication

 *   How have you communicated this to end-users?  It's obviously a 
delicate balance between security and end-user convenience.  Every environment 
is different but I'm curious.

Anything else that I missed in this realm, I would appreciate knowing!

Thanks!


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] Maintenance Windows & Restart Behavior

[Marable, Mike]

Hi Adam,


1.   Maintenance Windows

a.   We use these only on our embedded devices and not on traditional 
clients.  We have a window set once a week (like 2 am on Sunday mornings) so 
that SCCM turns off the write filter on the device, runs our deployments and 
then re-enables the write filter.

2.   Restart Behavior / Communications

a.   We actually have written our own utility to handle reboots.  It allows 
us to display a message to the end user, countdown timer, users can delay the 
reboot, we can have it check for running executables before attempting to 
reboot, etc.

b.   We have agreements in place with critical areas, such as emergency 
rooms, and other 24hour clinics to limit reboots to specific days and times.  
Otherwise the understanding with the users is that we will do our deployments 
and maintenance outside of business hours.  Combine that with our reboot tool 
and the users are pretty happy.

We do use WOL very heavily.  Different clinics have varying office hours/days 
and we have collections set up to wake machines up about 15 minutes before the 
beginning of business for them.  We’ve been very successful with that.  The WOL 
issues that we have run into in the past have usually been attributed to either 
mis-configured BIOs settings or users hard-powering off machines.

Mike



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Adam Juelich
Sent: Wednesday, March 29, 2017 2:55 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Maintenance Windows & Restart Behavior

Hello Everyone,

This isn't as much of a question as much as a poll on how people are doing 
this.  I know everyone is in charge of different environments, different 
sizing, and other complex variables.  I'd like to know what settings you 
specify for the following items:


  1.  Maintenance Windows

 *   What are your MW for Windows Clients?
 *   Do you usually just do it for 'Restarts' or 'Installs' as well?
 *   Are you leveraging WoL and/or AMT?
 *   If so, what is your success rate?

  1.  Restart Behavior

 *   What do you specify for the two Client Notifications?

  1.  Communication

 *   How have you communicated this to end-users?  It's obviously a 
delicate balance between security and end-user convenience.  Every environment 
is different but I'm curious.

Anything else that I missed in this realm, I would appreciate knowing!

Thanks!

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: Reimaging a Dell that has UEFI enabled - fails

[Marable, Mike]

Are you encrypting the drive at all?

Mike


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Kevin Johnston
Sent: Friday, March 24, 2017 6:46 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Reimaging a Dell that has UEFI enabled - fails

We have a brand new out of the box Dell E7270 Latitude. The machine comes with 
UEFI already configured and we are imaging it with Windows 10.

We PXE boot the machine, go through our SCCM task sequences to image the 
machine and everything appears to be great.

We take this same machine we just imaged, remove it from SCCM and go to reimage 
this machine and right after we choose our Win10 Task Sequence we get the 
following message every time:

"The task sequence was unable to locate a logical drive. The hard disk will 
need to be partitioned and formatted. Click OK to continue or Cancel to exit 
the task sequence"

We have a bunch of older machines, that we do a BIOS to UEFI (which works fine) 
TS then image the machine same as above but again, when we want to reimage the 
same machine we get that same error each time.

What we have done in the past is before we have to put in our SCCM TS password, 
we hit F8 and do a diskpart manually to wipe the disk, but this seems counter 
intuitive as the task sequence should be able to wipe the drive anyways as part 
of the task sequence.
Plus when we do this, it does not seem to image properly after words meaning it 
fails each time.

Has anyone seen this issue before? Is there something different we need to add 
to our TS in order for this to work?

Thanks,

KEVIN JOHNSTON


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] windows 10 OS Build Licence question

[Marable, Mike]

Yes, if you use a MAK key then that is where you can set it during the build.



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Kevin Ray
Sent: Friday, March 10, 2017 11:40 AM
To: mssms 
Subject: Re: [mssms] windows 10 OS Build Licence question

thanks for the information

 if i don't want to setup a KMS server, If my sales people provide the MAK 
Key(from Microsoft they will get it i hope)..

in below Task sequence step at "Applying windows Settings" do i need to 
provide.. .. So this 1 single MAK will get activated to all my machines (yes 
based my company purchased license count )  or  any other things do i need to 
do if i don't want to go for KMS?

[Inline image 1]

On Fri, Mar 10, 2017 at 10:51 AM, Kent, Mark 
> wrote:
If you have a volume version it will prefer to get a license from a KMS server 
that you will have to setup in our environment.  Once you have the KMS server 
setup, there is nothing you need to do.  The OS will seek out a KMS server for 
activation and when found, will do everything automagically.

If you do not have a volume license, or do not feel like setting up a KMS 
server, you will need MAK key.  With that you can either manually put in the 
MAK key or use it during a task sequence deployment, if you are using SCCM or 
MDT for deployment, you can populate the key field and it will install the key 
during deployment.

Mark Kent
Manager, Client Systems Engineering
Technology Support Services
Resources for Information, Technology and Education (RITE)
http://rite.buffalostate.edu

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] 
On Behalf Of Kevin Ray
Sent: Friday, March 10, 2017 10:36 AM
To: mssms >
Subject: [mssms] windows 10 OS Build Licence question

Hi All,

I'm new to License part. I have done is Got the Windows ISO from My sales team 
who has downloaded from Microsoft website...

Then i have taken the ISO and did the customization and deployed for pre-pilot 
machines..

showing as Windows is not activated...

So How it will get activated .. I would like to know more about on this.. is 
their any thing I need to machine in image preparation ? or we should some  
server in my environment to activate it ?




**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] Adding Customized Branding /Tattoo to Image

[Marable, Mike]

Okay, that’s easy to do.

First, of course you need to decide what specific information you want to store 
in the Registry and where you want to store it.  I would store it under 
HKLM\System so you don’t have to deal with Registry redirection between 32bit 
and 64bit builds.

Second, once you know what you want to track you can start to look at how you 
can collect that data.  For example, if you want the name of the build task 
sequence you can look to the task sequence variables “_SMSTSPackageName” and 
the sequence ID “_SMSTSPackageID”.  SCCM already collects that and does the 
work for you.  Other things you will need to collect yourself with a script, 
such as the start date/time and finish date/time, username of the tech 
building, and assign them to your own task sequence variables.

Finally, at the end of the build you would write the task sequence variables to 
the Registry and you’re done.

That is how we do it.

Mike




From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Kevin Ray
Sent: Wednesday, March 8, 2017 2:11 PM
To: mssms <mssms@lists.myitforum.com>
Subject: Re: [mssms] Adding Customized Branding /Tattoo to Image

Yes Mike

On Wed, Mar 8, 2017 at 1:56 PM, Marable, Mike 
<mmara...@med.umich.edu<mailto:mmara...@med.umich.edu>> wrote:
Hi Kevin,

Are you looking to write keys into the Registry to track things like when the 
machine was built, the task sequence name and ID?

Something like this:

[cid:image001.png@01D29817.B6B5C040]



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of Kevin Ray
Sent: Wednesday, March 8, 2017 1:25 PM
To: mssms <mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>
Subject: Re: [mssms] Adding Customized Branding /Tattoo to Image

any help

On Tue, Mar 7, 2017 at 11:08 AM, Kevin Ray 
<kevinalive...@gmail.com<mailto:kevinalive...@gmail.com>> wrote:
Hi All,

I have captured my windows10 image(.wim file) with MDT includes custum all 
required applications.

I would like to do further more enhancement while depploying in SCCM with 
adding Custumized Branding /Tatto

Like Custumed registry where it should capture basic things like installation 
date,time,user,Task sequence ID,Build number etc.

Any help for quick references /guide




**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] Adding Customized Branding /Tattoo to Image

[Marable, Mike]

Hi Kevin,

Are you looking to write keys into the Registry to track things like when the 
machine was built, the task sequence name and ID?

Something like this:

[cid:image002.png@01D29812.79D6CFC0]



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Kevin Ray
Sent: Wednesday, March 8, 2017 1:25 PM
To: mssms 
Subject: Re: [mssms] Adding Customized Branding /Tattoo to Image

any help

On Tue, Mar 7, 2017 at 11:08 AM, Kevin Ray 
> wrote:
Hi All,

I have captured my windows10 image(.wim file) with MDT includes custum all 
required applications.

I would like to do further more enhancement while depploying in SCCM with 
adding Custumized Branding /Tatto

Like Custumed registry where it should capture basic things like installation 
date,time,user,Task sequence ID,Build number etc.

Any help for quick references /guide



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

Re: [mssms] OSD builds required to ask machine names

[Marable, Mike]

With UI++ you could create a pull-down list of OUs for the person building the 
machine to select from.

From: <listsad...@lists.myitforum.com> on behalf of Kevin Ray 
<kevinalive...@gmail.com>
Reply-To: "mssms@lists.myitforum.com" <mssms@lists.myitforum.com>
Date: Sunday, March 5, 2017 at 2:40 PM
To: "mssms@lists.myitforum.com" <mssms@lists.myitforum.com>
Subject: Re: [mssms] OSD builds required to ask machine names

Thanks Mike.Its seems to be cool without adding much efforts.. How about if 
want to provide AD OU option to choose for user.. How i can do that  ?any help 
please

On Sun, Mar 5, 2017 at 9:44 AM, Marable, Mike 
<mmara...@med.umich.edu<mailto:mmara...@med.umich.edu>> wrote:
You can do this very easily actually.  You just need to populate the variables, 
and you have several options for doing that.

Niall wrote a posting a while back that you can use to get things started.
https://www.windows-noob.com/forums/topic/5542-how-can-i-easily-prompt-for-a-computer-name-in-configuration-manager-2012/

It’s not fancy but it’s simple and an excellent way to start.  I’d start with 
this first.

Of course, you can write a simple HTA to prompt or even better you can try UI++ 
(http://home.configmgrftw.com/uiplusplus/ ).  This is an excellent tool for 
prompting for user input during a task sequence.

If it were me, I’d start with Niall’s method first.  It’s simple and very easy 
to implement.  Then after that’s working tackling UI++ to replace the 
collection variable prompts with a GUI front-end with UI++.

Mike



From: <listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> 
on behalf of Kevin Ray <kevinalive...@gmail.com<mailto:kevinalive...@gmail.com>>
Reply-To: "mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>" 
<mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>
Date: Sunday, March 5, 2017 at 7:55 AM
To: "mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>" 
<mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>
Subject: [mssms] OSD builds required to ask machine names

Hi All

I have created a task sequence for unknown supports .machines are created 
successfully.

Now i would go further my requirement , for same task sequence(not used MDT 
integration. But if requires i can integrete it) while starting the image its 
requires to ask for user to provide the machine_name and AD OU name

I hope we can achieve this UDI wizard,but can any one please guild me for any 
step by step example please or any otherway




**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues




**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

Re: [mssms] OSD builds required to ask machine names

[Marable, Mike]

You can do this very easily actually.  You just need to populate the variables, 
and you have several options for doing that.

Niall wrote a posting a while back that you can use to get things started.
https://www.windows-noob.com/forums/topic/5542-how-can-i-easily-prompt-for-a-computer-name-in-configuration-manager-2012/

It’s not fancy but it’s simple and an excellent way to start.  I’d start with 
this first.

Of course, you can write a simple HTA to prompt or even better you can try UI++ 
(http://home.configmgrftw.com/uiplusplus/ ).  This is an excellent tool for 
prompting for user input during a task sequence.

If it were me, I’d start with Niall’s method first.  It’s simple and very easy 
to implement.  Then after that’s working tackling UI++ to replace the 
collection variable prompts with a GUI front-end with UI++.

Mike



From:  on behalf of Kevin Ray 

Reply-To: "mssms@lists.myitforum.com" 
Date: Sunday, March 5, 2017 at 7:55 AM
To: "mssms@lists.myitforum.com" 
Subject: [mssms] OSD builds required to ask machine names

Hi All

I have created a task sequence for unknown supports .machines are created 
successfully.

Now i would go further my requirement , for same task sequence(not used MDT 
integration. But if requires i can integrete it) while starting the image its 
requires to ask for user to provide the machine_name and AD OU name

I hope we can achieve this UDI wizard,but can any one please guild me for any 
step by step example please or any otherway




**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] Airwatch Connect Presentation - SCCM is a dead-end?

[Marable, Mike]

Okay, today my supervisor was making the case for the decision to phase out 
SCCM.  His whole argument centers on a presentation he saw at AirWatch Connect 
a few months back.

The presentation was done by a Microsoft employee and in it he stated that SCCM 
was a dead-end product and that people should move away from it (and towards 
AirWatch).

He couldn't tell me who this presenter was, but he insists that it was a 
Microsoft employee.

That doesn't jive with what I see and hear, so I'm looking for anyone who may 
have been to AirWatch Connect this past Fall and could shed some light onto the 
context.  Because I am sure that the statement was taken way out of context.

Thanks

Mike Marable
Microsoft Systems Engineer Lead
Enterprise Device Engineering and Management
MCPS, MCITP, MCTS, MCSA, MCSE, MS  [ 
Profile ] [ 
Blog ]

"To live is the rarest thing in the world. Most people exist, that is all."
-Oscar Wilde

"If we wonder often, the gift of knowledge will come."
-Arapaho Proverb

"Be willing to give up who you are now for what you can become."
-Unknown



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: OSD - WinPE Boot Problem Error "RegOpenKeyexW"

[Marable, Mike]

Bumped it up to 4GB and it still failed.

From: Marable, Mike
Sent: Thursday, January 05, 2017 7:09 AM
To: 'mssms@lists.myitforum.com' <mssms@lists.myitforum.com>
Subject: RE: OSD - WinPE Boot Problem Error "RegOpenKeyexW"

I've assigned 1GB to each of the VMs.  I'll try bumping it up.



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Andreas Hammarskjöld
Sent: Thursday, January 05, 2017 3:33 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: OSD - WinPE Boot Problem Error "RegOpenKeyexW"

How much RAM are you giving these machines?

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: den 5 januari 2017 03:01
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] OSD - WinPE Boot Problem Error "RegOpenKeyexW"

I built up an SCCM lab of virtual machines on a Windows 10 client Hyper-V host 
to work with Nickolaj's new OSD frontend.  I'm running TechPreview 1612 with 
ADK 1607.

I created a basic OSD task sequence to make sure everything worked before I 
started on the frontend.  I PXE boot either a Gen1 or Gen2 VM it will get as 
far as starting the networking and then reboots.

I was able to pop a command window with F8 and catch it before it rebooted.  
I've attached a screenshot of the SMSTS log at the point of failure.

It complains that it was unsuccessful opening "HKLM\Software\Microsoft\SMS\Task 
Sequence".  I open Regedit and the SMS key doesn't exist.

Everything I've done is "out of the box" and I haven't done any customizations. 
 Searching has turned up some people getting this on physical machines and 
often it was corrected by adding the network driver to the WinPE boot image.  
In my case this is all in Hyper-V so the drivers are native.

Any ideas?

Thanks

Mike Marable
Microsoft Systems Engineer Lead
Enterprise Device Engineering and Management
MCPS, MCITP, MCTS, MCSA, MCSE, MS  [ 
Profile<http://www.mycertprofile.com/Profile/5319166625> ] [ 
Blog<http://thesystemsmonkey.wordpress.com/> ]

"Courage is being scared to death but saddling up anyway."
-John Wayne

"Empty your mind, be formless. Shapeless, like water. If you put water into a 
cup, it becomes the cup. You put water into a bottle and it becomes the bottle. 
You put it in a teapot, it becomes the teapot. Now, water can flow or it can 
crash. Be water, my friend. "
-Bruce Lee

"A goal is not always meant to be reached, it often serves simply as something 
to aim at."
-Bruce Lee




**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: OSD - WinPE Boot Problem Error "RegOpenKeyexW"

[Marable, Mike]

I've assigned 1GB to each of the VMs.  I'll try bumping it up.



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Andreas Hammarskjöld
Sent: Thursday, January 05, 2017 3:33 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: OSD - WinPE Boot Problem Error "RegOpenKeyexW"

How much RAM are you giving these machines?

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: den 5 januari 2017 03:01
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] OSD - WinPE Boot Problem Error "RegOpenKeyexW"

I built up an SCCM lab of virtual machines on a Windows 10 client Hyper-V host 
to work with Nickolaj's new OSD frontend.  I'm running TechPreview 1612 with 
ADK 1607.

I created a basic OSD task sequence to make sure everything worked before I 
started on the frontend.  I PXE boot either a Gen1 or Gen2 VM it will get as 
far as starting the networking and then reboots.

I was able to pop a command window with F8 and catch it before it rebooted.  
I've attached a screenshot of the SMSTS log at the point of failure.

It complains that it was unsuccessful opening "HKLM\Software\Microsoft\SMS\Task 
Sequence".  I open Regedit and the SMS key doesn't exist.

Everything I've done is "out of the box" and I haven't done any customizations. 
 Searching has turned up some people getting this on physical machines and 
often it was corrected by adding the network driver to the WinPE boot image.  
In my case this is all in Hyper-V so the drivers are native.

Any ideas?

Thanks

Mike Marable
Microsoft Systems Engineer Lead
Enterprise Device Engineering and Management
MCPS, MCITP, MCTS, MCSA, MCSE, MS  [ 
Profile<http://www.mycertprofile.com/Profile/5319166625> ] [ 
Blog<http://thesystemsmonkey.wordpress.com/> ]

"Courage is being scared to death but saddling up anyway."
-John Wayne

"Empty your mind, be formless. Shapeless, like water. If you put water into a 
cup, it becomes the cup. You put water into a bottle and it becomes the bottle. 
You put it in a teapot, it becomes the teapot. Now, water can flow or it can 
crash. Be water, my friend. "
-Bruce Lee

"A goal is not always meant to be reached, it often serves simply as something 
to aim at."
-Bruce Lee




**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: OSD - WinPE Boot Problem Error "RegOpenKeyexW"

[Marable, Mike]

The Gen1 VMs are using legacy NICs while the Gen2s are using the native NICs.



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Gerry Hampson
Sent: Thursday, January 05, 2017 5:33 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: OSD - WinPE Boot Problem Error "RegOpenKeyexW"

You have to add a legacy NIC to be able to PXE boot Hyper-V VMs.

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Andreas Hammarskjöld
Sent: 05 January 2017 08:33
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: OSD - WinPE Boot Problem Error "RegOpenKeyexW"

How much RAM are you giving these machines?

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: den 5 januari 2017 03:01
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] OSD - WinPE Boot Problem Error "RegOpenKeyexW"

I built up an SCCM lab of virtual machines on a Windows 10 client Hyper-V host 
to work with Nickolaj's new OSD frontend.  I'm running TechPreview 1612 with 
ADK 1607.

I created a basic OSD task sequence to make sure everything worked before I 
started on the frontend.  I PXE boot either a Gen1 or Gen2 VM it will get as 
far as starting the networking and then reboots.

I was able to pop a command window with F8 and catch it before it rebooted.  
I've attached a screenshot of the SMSTS log at the point of failure.

It complains that it was unsuccessful opening "HKLM\Software\Microsoft\SMS\Task 
Sequence".  I open Regedit and the SMS key doesn't exist.

Everything I've done is "out of the box" and I haven't done any customizations. 
 Searching has turned up some people getting this on physical machines and 
often it was corrected by adding the network driver to the WinPE boot image.  
In my case this is all in Hyper-V so the drivers are native.

Any ideas?

Thanks

Mike Marable
Microsoft Systems Engineer Lead
Enterprise Device Engineering and Management
MCPS, MCITP, MCTS, MCSA, MCSE, MS  [ 
Profile<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.mycertprofile.com%2FProfile%2F5319166625=01%7C01%7Cgerry.hampson%40ergogroup.ie%7C6a06a993ed164d27a0c908d43555a7ac%7C8569ca5f57e64cf2ae3c63d83fc633e9%7C1=RFI0qB0bs2fduA%2BHRmmMfJBHXPayvlU6oxVo8M7a6e0%3D=0>
 ] [ 
Blog<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fthesystemsmonkey.wordpress.com%2F=01%7C01%7Cgerry.hampson%40ergogroup.ie%7C6a06a993ed164d27a0c908d43555a7ac%7C8569ca5f57e64cf2ae3c63d83fc633e9%7C1=50I08rMLqmnk%2FvXi9LIoQIMCYxmL1sQr0%2Bx%2BbMbmCos%3D=0>
 ]

"Courage is being scared to death but saddling up anyway."
-John Wayne

"Empty your mind, be formless. Shapeless, like water. If you put water into a 
cup, it becomes the cup. You put water into a bottle and it becomes the bottle. 
You put it in a teapot, it becomes the teapot. Now, water can flow or it can 
crash. Be water, my friend. "
-Bruce Lee

"A goal is not always meant to be reached, it often serves simply as something 
to aim at."
-Bruce Lee




**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

Re: [mssms] probably the wrong SKU or architecture· 0xC1900204

[Marable, Mike]

I ran into a similar failure to this when Paul Winstanley was doing a live blog 
about in-place upgrades to Windows 10.

http://wmug.co.uk/wmug/b/pwin/archive/2015/03/31/live-blog-windows-10-build-9926-to-build-10041

The problem I ran into was that the SKU for Windows 8.1 Enterprise Evaluation 
is “EntepriseEval”, while the Windows 10 Enterprise Eval SKU is just 
“Enterprise”.  That triggered the SKU mismatch, but I had a different error 
code bubble up.

What I had to do was to download the full versions and it worked.

Mike

From:  on behalf of Kevin Ray 

Reply-To: "mssms@lists.myitforum.com" 
Date: Tuesday, December 27, 2016 at 10:04 PM
To: "mssms@lists.myitforum.com" 
Subject: [mssms] probably the wrong SKU or architecture· 0xC1900204

All,

In My lab environment I'm just playing with Windows 10 In place upgrade..

I have windows 8.1 Enterprise Evaluation version  On top of that with SCCM 
Trying to deploy windows 10 Evaluation Version ..Task sequence Failed with  
0xC1900204.

What exactly it means
Migration choice (auto upgrade) not available (probably the wrong SKU or 
architecture)· 0xC1900204
So evaluation version it wont support  ?

Kevin


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: Windows 10 in-place upgrade not retaining / setting appropriate region and language

[Marable, Mike]

I found this TechNet forum post where someone had to add the language settings 
into their in-place upgrade from Windows 7 to 10.

https://social.technet.microsoft.com/Forums/en-US/b237efb5-5f5a-4084-b0ec-6df2aee2d10b/sccm-1511-inplace-upgrade-to-windows-10-language-pack-installation?forum=ConfigMgrCBOSD

Mike

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marable, Mike
Sent: Thursday, December 8, 2016 7:25 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Windows 10 in-place upgrade not retaining / setting 
appropriate region and language

I believe that you have to in the task sequence set it to use any non-US 
language.  I've never worked with language packs before but I remember it 
coming up from time to time as a limitation of the upgrade process.

Here are some blogs that mention it:
http://www.scconfigmgr.com/2015/10/26/deploy-windows-10-enterprise-using-in-place-upgrade/

http://deploymentresearch.com/Research/Post/453/Windows-10-Upgrade-Limitations

I know somewhere I've seen in a presentation an upgrade task sequence that had 
steps in place to handle changing the language.  Johan comes to mind but it may 
have been Niall at MMS last Spring.

I dug up the PowerPoint from the Windows 10 Servicing presentation at MMS.  
This slide kind of hints at it.

[cid:image001.jpg@01D25127.9D933390]

The Servicing Plan just runs the straight upgrade and reverts the language, but 
when using the Task Sequence you can include them (as a separate action).

I'm sorry, this probably isn't much help.  I'll keep looking for anything I can 
find on adding the language pack during the upgrade.  It is not handled 
automatically during the upgrade process, that much I believe.

Mike




From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Johns, Damon (DoJ)
Sent: Wednesday, December 7, 2016 9:14 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Windows 10 in-place upgrade not retaining / setting 
appropriate region and language

Hi everyone,

I'm hoping someone can help with a solution to an issue that we are seeing with 
our in-place upgrade task sequence going from Windows 7 x64 to Windows 10 1607 
x64. Where using Configuration Manger 1606 Update 1 with the "Upgrade and 
operating system from an upgrade package" Task Sequence template.

We are seeing the default region set to United States and the default display 
language set the English (United States) when we perform an in-place upgrade on 
an existing Windows 7 PC. The Windows 7 PC has a region of Australia and a 
default language set to English (Australia).

I've injected the language pack and relevant language pack components offline 
into the Windows 10 1607 install.wim. When I log on to a freshly upgraded PC I 
can set the region and language to the right  settings manually without any 
issue.

It appears that it's not being set because there is no unattend.xml / 
customsetting.ini specified anywhere in the in-place upgrade task sequence to 
tell it to change the region and default language. I would expect that the 
process would look at what is already set in the Windows 7 OS and then migrate 
that choice, however that doesn't appear to be the case.

If we deploy a standard Windows 10 x64 1607 TS to build a PC we are seeing the 
correct region and language pack settings.

If we do a refresh (wipe and load) from Windows 7 x64 to Windows 10 1607 x64 we 
are seeing the correct region and language pack settings.

What are other people doing to address setting a region and language for the 
in-place upgrade scenario? I don't need assistance installing language packs, 
rather assistance in the best way to change the region and default display 
language.

Cheers
Damon



CONFIDENTIALITY NOTICE AND DISCLAIMER
The information in this transmission may be confidential and/or protected by 
legal professional privilege, and is intended only for the person or persons to 
whom it is addressed. If you are not such a person, you are warned that any 
disclosure, copying or dissemination of the information is unauthorised. If you 
have received the transmission in error, please immediately contact this office 
by telephone, fax or email, to inform us of the error and to enable 
arrangements to be made for the destruction of the transmission, or its return 
at our cost. No liability is accepted for any unauthorised use of the 
information contained in this transmission.


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: Windows 10 in-place upgrade not retaining / setting appropriate region and language

[Marable, Mike]

I believe that you have to in the task sequence set it to use any non-US 
language.  I've never worked with language packs before but I remember it 
coming up from time to time as a limitation of the upgrade process.

Here are some blogs that mention it:
http://www.scconfigmgr.com/2015/10/26/deploy-windows-10-enterprise-using-in-place-upgrade/

http://deploymentresearch.com/Research/Post/453/Windows-10-Upgrade-Limitations

I know somewhere I've seen in a presentation an upgrade task sequence that had 
steps in place to handle changing the language.  Johan comes to mind but it may 
have been Niall at MMS last Spring.

I dug up the PowerPoint from the Windows 10 Servicing presentation at MMS.  
This slide kind of hints at it.

[cid:image002.jpg@01D25124.378A51D0]

The Servicing Plan just runs the straight upgrade and reverts the language, but 
when using the Task Sequence you can include them (as a separate action).

I'm sorry, this probably isn't much help.  I'll keep looking for anything I can 
find on adding the language pack during the upgrade.  It is not handled 
automatically during the upgrade process, that much I believe.

Mike




From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Johns, Damon (DoJ)
Sent: Wednesday, December 7, 2016 9:14 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Windows 10 in-place upgrade not retaining / setting 
appropriate region and language

Hi everyone,

I'm hoping someone can help with a solution to an issue that we are seeing with 
our in-place upgrade task sequence going from Windows 7 x64 to Windows 10 1607 
x64. Where using Configuration Manger 1606 Update 1 with the "Upgrade and 
operating system from an upgrade package" Task Sequence template.

We are seeing the default region set to United States and the default display 
language set the English (United States) when we perform an in-place upgrade on 
an existing Windows 7 PC. The Windows 7 PC has a region of Australia and a 
default language set to English (Australia).

I've injected the language pack and relevant language pack components offline 
into the Windows 10 1607 install.wim. When I log on to a freshly upgraded PC I 
can set the region and language to the right  settings manually without any 
issue.

It appears that it's not being set because there is no unattend.xml / 
customsetting.ini specified anywhere in the in-place upgrade task sequence to 
tell it to change the region and default language. I would expect that the 
process would look at what is already set in the Windows 7 OS and then migrate 
that choice, however that doesn't appear to be the case.

If we deploy a standard Windows 10 x64 1607 TS to build a PC we are seeing the 
correct region and language pack settings.

If we do a refresh (wipe and load) from Windows 7 x64 to Windows 10 1607 x64 we 
are seeing the correct region and language pack settings.

What are other people doing to address setting a region and language for the 
in-place upgrade scenario? I don't need assistance installing language packs, 
rather assistance in the best way to change the region and default display 
language.

Cheers
Damon



CONFIDENTIALITY NOTICE AND DISCLAIMER
The information in this transmission may be confidential and/or protected by 
legal professional privilege, and is intended only for the person or persons to 
whom it is addressed. If you are not such a person, you are warned that any 
disclosure, copying or dissemination of the information is unauthorised. If you 
have received the transmission in error, please immediately contact this office 
by telephone, fax or email, to inform us of the error and to enable 
arrangements to be made for the destruction of the transmission, or its return 
at our cost. No liability is accepted for any unauthorised use of the 
information contained in this transmission.

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] RE: Deployment review process?

[Marable, Mike]

Well, in our case we start with a QA group that tests to ensure that the 
software does not affect our business critical, core applications.  We're a 
hospital so we make sure that any application that will be going out does not 
break our key patient care applications.

Once an application has passed that QA it goes out to a subset of users 
identified by the "owners" of the app.  The "owners" are usually the people 
that requested the application in the first place and varies from one app to 
another.  These users perform user acceptance testing.  Their responsibility it 
to make sure that the application functions correctly and does what it is 
supposed to do.

Once the "owners" sign off, depending on the number of intended users we'll do 
a pilot and then a multi-day deployment of the application.

Mike


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jeff Poling
Sent: Tuesday, November 29, 2016 10:59 AM
To: Daniel Ratliff ; mssms@lists.myitforum.com
Subject: RE: [mssms] RE: Deployment review process?

What do you do for QA of the software deployed via SCCM?

Thanks,

Jeff

Sent from my Windows 10 phone

From: Daniel Ratliff
Sent: Tuesday, November 29, 2016 8:27 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Deployment review process?

We have a robust software certification process. The operational teams 
basically have a rule, if it's not certified, it doesn't get installed.

Some installs require our Security teams approval before each install.

Some installs have special approvers like a license manager or the IT Owner of 
that application.

We are slowly working towards all installs using the PSADT and SCCM as well.

Daniel Ratliff

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jeff Poling
Sent: Monday, November 28, 2016 6:09 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Deployment review process?

Curious what processes others have in place for reviewing applications before 
deploying them in the environment?

Thanks,

Jeff

Sent from my Windows 10 phone



The information transmitted is intended only for the person or entity to which 
it is addressed
and may contain CONFIDENTIAL material. If you receive this material/information 
in error,
please contact the sender and delete or destroy the material/information.

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

Re: [mssms] SCCM 2016 - Does SCCM 2016 Released ?

[Marable, Mike]

SCCM “2016” has been out now for some time.  Microsoft has dropped the 
year/version from its name though.  It has been out now for about a year.

SCCM “2016” was released as Configuration Manager 1511.  Just like Windows 10 
there will be (and have been) updated builds.  For SCCM, 1602 was released in 
February and 1606 released in June.

Mike


From:  on behalf of S ConfigMgr 

Reply-To: "mssms@lists.myitforum.com" 
Date: Sunday, October 9, 2016 at 1:19 PM
To: "mssms@lists.myitforum.com" 
Subject: [mssms] SCCM 2016 - Does SCCM 2016 Released ?

Does SCCM 2016 Released ?

or it will called as CM 1606 ?

--
Thanks,
ED


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: IP Helpers for PXE

[Marable, Mike]

“As for PXE and UEFI, I followed Andreas Hammarskjöld’s white paper on 
configuring MS DHCP to boot either BIOS or UEFI depending on how the client is 
set to boot.  
http://2pintsoftware.com/whitepaper-using-dhcp-uefi-bios-pxe-booting/  It 
wasn’t too bad to set up and it works.”

+1

We are in the process of implementing this here.  We are in the same boat as 
you, Todd.  The Server group PXE boots their servers to their own 
infrastructure and we PXE boot ours to SCCM.  All we can do it submit tickets 
to the Networking group to make changes.

They did balk when we asked to make the switch to IP Helpers (they have several 
hundred routers to configure).  Instead they’re reconfiguring each DHCP scope 
using Andreas’ guide.

Mike



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Mote, Todd
Sent: Friday, October 07, 2016 9:23 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: IP Helpers for PXE

IP helpers assume, however, that you have a homogeneous client base and that 
EVERYTHING wants to PXE to the same deployment server.  Here, I have no control 
over any of the hundreds of networks but through submitting a ticket to the 
Networking group, so when WDS first came out we opted to submit just the one 
ticket to Networking to change the IP helper on specific networks to point to 
the MS DHCP server we had, and then control options 66 and 67 in each scope and 
sometimes each IP with reservations.  Admittedly, most of what I PXE are 
servers for deployment, Linux and Windows, some to Cobbler, some to SCCM and 
some to WDS.  Having it this way provides the most flexibility for that.  A 
Windows BIOS client can occupy the IP next to a Windows UEFI client, next to a 
Linux client.

As for PXE and UEFI, I followed Andreas Hammarskjöld’s white paper on 
configuring MS DHCP to boot either BIOS or UEFI depending on how the client is 
set to boot.  
http://2pintsoftware.com/whitepaper-using-dhcp-uefi-bios-pxe-booting/  It 
wasn’t too bad to set up and it works.

Todd


From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marcum, John
Sent: Friday, October 7, 2016 7:51 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: IP Helpers for PXE

Don’t use DHCP options, set the helpers on the routers. I didn’t have to do 
anything different to make UEFI work.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Merenda, Kenneth
Sent: Friday, October 7, 2016 7:43 AM
To: mssms@lists.myitforum.com
Subject: [mssms] IP Helpers for PXE

[External Email]
I have a large environment where the DHCP server and WDS server are not always 
on the same subnet as the clients.  In this case, what IP helpers are needed 
for PXE of both UEFI and BIOS devices?

Currently, we’re using option 66 pointing to the WDS server (SCCM DP), and 67 
pointing to SMSBoot\x86\wdsnbp.com.  It seems to me that 67 would cause a 
problem for UEFI, but I’m hesitant to change.  Right now, PXE works for BIOS 
but not UEFI, and I don’t want to break BIOS support just to get UEFI working.

SCCM is environment 2012 R2 SP1 CU1 on Server 2008 R2.  Thanks, in advance.

-
Kenneth Merenda




Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: IP Helpers for PXE

[Marable, Mike]

The IP helper (also called a DHCP Relay Agent, or Relay Agent) is a setting on 
the router that points to the PXE/WDS server.

Right now you will have on your routers a Relay Agent that points to your DHCP 
server (unless you have DHCP servers on all of your networks).  That Relay 
Agent directs your clients to the proper DHCP server to obtain an IP address.

You would add a second Relay Agent that directs your clients to your PXE/WDS 
server.  You would then remove options 66 and 67 from your DHCP server.  This 
way when a remote client attempts to PXE boot, the relay agent sends that to 
both your DHCP server (so it can obtain an IP address) as well as to the 
PXE/WDS server to process the PXE request.

There is nothing special that has to be configured on the Relay Agent to make 
it work for UEFI and/or BIOs.  You could think of it as you’re moving option 66 
from your DHCP server to your router.

That’s the basics of how it works.

Mike

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Merenda, Kenneth
Sent: Friday, October 07, 2016 8:43 AM
To: mssms@lists.myitforum.com
Subject: [mssms] IP Helpers for PXE

I have a large environment where the DHCP server and WDS server are not always 
on the same subnet as the clients.  In this case, what IP helpers are needed 
for PXE of both UEFI and BIOS devices?

Currently, we’re using option 66 pointing to the WDS server (SCCM DP), and 67 
pointing to SMSBoot\x86\wdsnbp.com.  It seems to me that 67 would cause a 
problem for UEFI, but I’m hesitant to change.  Right now, PXE works for BIOS 
but not UEFI, and I don’t want to break BIOS support just to get UEFI working.

SCCM is environment 2012 R2 SP1 CU1 on Server 2008 R2.  Thanks, in advance.

-
Kenneth Merenda


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: UEFI PXE Across Router

[Marable, Mike]

Maybe I'll give that a shot.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jason Sandys
Sent: Monday, October 3, 2016 10:19 AM
To: mssms@lists.myitforum.com; mdt...@lists.myitforum.com
Subject: [MDT-OSD] RE: UEFI PXE Across Router

Dump RRAS, use VyOS.

J

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Monday, October 3, 2016 6:33 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>; 
mdt...@lists.myitforum.com<mailto:mdt...@lists.myitforum.com>
Subject: [mssms] RE: UEFI PXE Across Router

Todd / Andreas,

No luck at all with either tip.

I must have stuffed something when setting up the Windows RRAS for routing.  My 
eval key on that VM is going to expire in the next few weeks so maybe I should 
start clean.

Thanks
Mike

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Mote, Todd
Sent: Saturday, October 1, 2016 12:28 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>; 
mdt...@lists.myitforum.com<mailto:mdt...@lists.myitforum.com>
Subject: [mssms] RE: UEFI PXE Across Router

I followed Andreas' white paper and can UEFI PXE boot across routers to 
specific IPs using reservations and dhcp options.  It works great.  before 
anybody admonishes me for using options over iphelpers, options serve my needs 
better.  It's a mix of OSes on each subnet, not everybody lives in the same 
neighborhood here.  All of our hosts are on disparate networks and all boot 
desperate OSes.  I need the control per IP to boot to cobbler for linux, WDS 
for non-SCCM devices and SCCM for SCCM devices.  Options let me do that.

The only thing I'll say about it though, is that the errors through the UEFI 
process leave a lot to be desired.  It's the same on screen error whether 
you're missing a boot wim (x86 and x64) as it is if you don't have a TS 
advertised to the device.

I can control the Class down to one IP like I've done here.

[cid:image001.jpg@01D21D8A.FB2A9550]

In this scope when a client gets 109 it will be able to UEFI PXE.  And only 
109.  I set a reservation for a specific host to have 109 and then I can UEFI 
PXE boot just that one host on this one scope.  It crosses routers and ESX host 
networks.  Works quite well.

Todd

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Andreas Hammarskjöld
Sent: Friday, September 30, 2016 3:23 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>; 
mdt...@lists.myitforum.com<mailto:mdt...@lists.myitforum.com>
Subject: [mssms] RE: UEFI PXE Across Router

Are you sure of that it's not using DHCP scopes? I would expect that behavior 
if using DHCP scopes and you haven't got the option #60 set in the the DHCP 
scope as there is a bug in the Windows loaders.

//A

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: den 30 september 2016 14:26
To: mdt...@lists.myitforum.com<mailto:mdt...@lists.myitforum.com>; 
mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] UEFI PXE Across Router

I'm setting up a ConfigMgr lab in Hyper-V and testing my OSD task sequence.

I can PXE boot both Gen1 (BIOs) and Gen2 (UEFI) VMs that are on the same subnet 
as my primary site server and PXE enabled DP.  So far, so good.

I use a VM running Windows Server with RRAS as a router between the "main" 
subnet and a second subnet that represents a remote office.  I have a DHCP 
Relay Agent defined that points to my DHCP server as well as the IP address of 
my PXE enabled DP.

I can successfully PXE boot a Gen1 (BIOs) machine on this remote subnet, but 
Gen2 (UEFI) machines eventually time out.

In the SMSPXE log on the DP I can see that the request to PXE reached the DP 
but nothing seems to be reaching back to the client.

If I move the Gen2 VM from the "remote" subnet to the "main" subnet (where the 
servers all reside) then it will successfully PXE boot.  It just will not PXE 
boot across the router.

I am not using DHCP scope options.  I am only using the DHCP Relay Agent within 
RRAS.

A Gen1 VM will PXE across the router successfully, but a Gen2 will time out.

Both Gen1 and Gen2 VMs successfully PXE boot if they are on the same subnet as 
the servers.

Any ideas?  I feel like I'm just missing something simple.

Thanks

Mike Marable
Microsoft Systems Engineer Lead
Enterprise Device Engineering and Management
MCPS, MCITP, MCTS, MCSA, MCSE, MS  [ 
Profile<http://www.mycertprofile.com/Profile/5319166625> ] [ 
Blog<http://thesystemsmonkey.wordpress.com/> ]

"The whole po

[mssms] RE: UEFI PXE Across Router

[Marable, Mike]

Todd / Andreas,

No luck at all with either tip.

I must have stuffed something when setting up the Windows RRAS for routing.  My 
eval key on that VM is going to expire in the next few weeks so maybe I should 
start clean.

Thanks
Mike

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Mote, Todd
Sent: Saturday, October 1, 2016 12:28 AM
To: mssms@lists.myitforum.com; mdt...@lists.myitforum.com
Subject: [mssms] RE: UEFI PXE Across Router

I followed Andreas' white paper and can UEFI PXE boot across routers to 
specific IPs using reservations and dhcp options.  It works great.  before 
anybody admonishes me for using options over iphelpers, options serve my needs 
better.  It's a mix of OSes on each subnet, not everybody lives in the same 
neighborhood here.  All of our hosts are on disparate networks and all boot 
desperate OSes.  I need the control per IP to boot to cobbler for linux, WDS 
for non-SCCM devices and SCCM for SCCM devices.  Options let me do that.

The only thing I'll say about it though, is that the errors through the UEFI 
process leave a lot to be desired.  It's the same on screen error whether 
you're missing a boot wim (x86 and x64) as it is if you don't have a TS 
advertised to the device.

I can control the Class down to one IP like I've done here.

[cid:image001.png@01D21D48.52E006B0]

In this scope when a client gets 109 it will be able to UEFI PXE.  And only 
109.  I set a reservation for a specific host to have 109 and then I can UEFI 
PXE boot just that one host on this one scope.  It crosses routers and ESX host 
networks.  Works quite well.

Todd

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Andreas Hammarskjöld
Sent: Friday, September 30, 2016 3:23 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>; 
mdt...@lists.myitforum.com<mailto:mdt...@lists.myitforum.com>
Subject: [mssms] RE: UEFI PXE Across Router

Are you sure of that it's not using DHCP scopes? I would expect that behavior 
if using DHCP scopes and you haven't got the option #60 set in the the DHCP 
scope as there is a bug in the Windows loaders.

//A

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: den 30 september 2016 14:26
To: mdt...@lists.myitforum.com<mailto:mdt...@lists.myitforum.com>; 
mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] UEFI PXE Across Router

I'm setting up a ConfigMgr lab in Hyper-V and testing my OSD task sequence.

I can PXE boot both Gen1 (BIOs) and Gen2 (UEFI) VMs that are on the same subnet 
as my primary site server and PXE enabled DP.  So far, so good.

I use a VM running Windows Server with RRAS as a router between the "main" 
subnet and a second subnet that represents a remote office.  I have a DHCP 
Relay Agent defined that points to my DHCP server as well as the IP address of 
my PXE enabled DP.

I can successfully PXE boot a Gen1 (BIOs) machine on this remote subnet, but 
Gen2 (UEFI) machines eventually time out.

In the SMSPXE log on the DP I can see that the request to PXE reached the DP 
but nothing seems to be reaching back to the client.

If I move the Gen2 VM from the "remote" subnet to the "main" subnet (where the 
servers all reside) then it will successfully PXE boot.  It just will not PXE 
boot across the router.

I am not using DHCP scope options.  I am only using the DHCP Relay Agent within 
RRAS.

A Gen1 VM will PXE across the router successfully, but a Gen2 will time out.

Both Gen1 and Gen2 VMs successfully PXE boot if they are on the same subnet as 
the servers.

Any ideas?  I feel like I'm just missing something simple.

Thanks

Mike Marable
Microsoft Systems Engineer Lead
Enterprise Device Engineering and Management
MCPS, MCITP, MCTS, MCSA, MCSE, MS  [ 
Profile<http://www.mycertprofile.com/Profile/5319166625> ] [ 
Blog<http://thesystemsmonkey.wordpress.com/> ]

"The whole point of racing is to charge all the time."
-Gilles Villeneuve

"If you don't fail, then you're not even trying."
-Denzel Washington

"Other people's opinions of you do not have to become your reality."
-Les Brown



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] UEFI PXE Across Router

[Marable, Mike]

I'm setting up a ConfigMgr lab in Hyper-V and testing my OSD task sequence.

I can PXE boot both Gen1 (BIOs) and Gen2 (UEFI) VMs that are on the same subnet 
as my primary site server and PXE enabled DP.  So far, so good.

I use a VM running Windows Server with RRAS as a router between the "main" 
subnet and a second subnet that represents a remote office.  I have a DHCP 
Relay Agent defined that points to my DHCP server as well as the IP address of 
my PXE enabled DP.

I can successfully PXE boot a Gen1 (BIOs) machine on this remote subnet, but 
Gen2 (UEFI) machines eventually time out.

In the SMSPXE log on the DP I can see that the request to PXE reached the DP 
but nothing seems to be reaching back to the client.

If I move the Gen2 VM from the "remote" subnet to the "main" subnet (where the 
servers all reside) then it will successfully PXE boot.  It just will not PXE 
boot across the router.

I am not using DHCP scope options.  I am only using the DHCP Relay Agent within 
RRAS.

A Gen1 VM will PXE across the router successfully, but a Gen2 will time out.

Both Gen1 and Gen2 VMs successfully PXE boot if they are on the same subnet as 
the servers.

Any ideas?  I feel like I'm just missing something simple.

Thanks

Mike Marable
Microsoft Systems Engineer Lead
Enterprise Device Engineering and Management
MCPS, MCITP, MCTS, MCSA, MCSE, MS  [ 
Profile ] [ 
Blog ]

"The whole point of racing is to charge all the time."
-Gilles Villeneuve

"If you don't fail, then you're not even trying."
-Denzel Washington

"Other people's opinions of you do not have to become your reality."
-Les Brown


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] Horrible food at Ignite

[Marable, Mike]

Very good points, Michael.

The complaints I’ve been hearing about this year’s Ignite are the similar to 
some of those from last year’s event.  Food and crowd management seem to be the 
top concerns.  I have not heard a single complaint about the content.

Even though this is a Microsoft event, there are 2 different companies working 
here.  The content coming from Microsoft, and the infrastructure provided by 
the venue.

The issues that are top on the list are tied to the venue and the company 
managing the venue.  For example, the venue management company spells out the 
options for the food and Microsoft has to pick from what is available.  I 
believe that those are easy to address, especially if this is going to be the 
long term home for Ignite.  As Microsoft and the venue company build a 
relationship, the powers at Microsoft can sit down with the powers from the 
venue and hash out how to do better next year.

Last year there were a number of complaints about transportation (having to 
wait 40+ minutes for buses) and I heard several about rude staff from the venue 
(like security staff).  I have not heard these same complaints this year.  So 
even with changing cities (and I would imagine the companies managing the 
venues) issues from last year were addressed.

I know I for one would not want to be involved in planning an event for 25,000+ 
people.  I cannot begin to imaging the logistic nightmares.  Personally, if the 
biggest complaint is the food, I think that the event was a success.

That’s my long-winded version of, “Yeah!  You tell `em, Michael!”  ☺





From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Michael Niehaus
Sent: Friday, September 30, 2016 1:12 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Horrible food at Ignite

Personally, I think this is the best Microsoft event that we’ve had in a long 
time.  If you judge a conference by its food rather than what you learn, then I 
think your priorities are messed up.  As was discussed in various places, 
feeding 23,000 people is rather challenging.  I did have the lunch today, it 
was OK – not great, but it also was “grab and go” so I could eat while sitting 
in front of the biggest, longest screen I’ve ever seen, which was live 
streaming 8 sessions at once.

Two keynotes on the first day got all the “marketing” out of the way (and the 
keynotes themselves got good reviews with very high attendance), there was a 
completely overwhelming amount of technical information shared, and there was a 
significant presence with external (and uncensored) speakers, MVPs and 
otherwise, with nearly all 300- and 400-level content.  (We really don’t like 
doing 200-level content for IT pros, we consider that “prerequisite knowledge.”)

We still have some work to do on the social aspects of this, figuring out 
effective ways to get people of common interests together.  We had a lot of fun 
with the “ask us (almost) anything” sessions, there was a lot of great 
conversations with the product group members manning the booths, and a dizzying 
number of 1:1 customer meetings with everyone from me all the way up to our 
CEO.  And I answered questions in pretty much every place imaginable – in the 
airport, in my hotel, in restaurants, on the MARTA trains, even in the 
restroom.  (C’mon guys, respect some boundaries ☺)

If you don’t hear much from us next week, it’s because we’re still recovering.

-MTN

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Todd Hemsell
Sent: Thursday, September 29, 2016 1:00 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Horrible food at Ignite

"So, the bigger the event, the worse the quality?"
No only in food, but also in quality of content and the depth of the content. 
The only people big events like that work out for are vendors and Microsoft.
MS employees have to take off less time from work to go to the event.
Marketing can plan everything for a single event. They prep the slide decks in 
advance and then decide you will read them. It is just marketing content and 
you are basically a fool if you paid for it.
This is all about being good for Microsoft, not the customer. They stopped 
caring about the customer a long time ago. Now it is all about recurring 
payments and their bottom line.
You see this with support, big fixes (or lack thereof), crappy events, missing 
kb articles, and a push towards the cloud and recurring payments. Even the way 
they fix their broken products is now being driven by what is best for them 
(monolithic updates)
They got rid of the solution accelerator team because they no longer care about 
adding value to their products, they just care about their bottom line and 
trying to be apple.
Their enterprise operating system even pushes down advertising against your 
will.
Just blows my mind anyone would give them money to listen 

RE: [mssms] Horrible food at Ignite

[Marable, Mike]

Jumping on the bandwagon...

There is nothing worse than having to wait in line to be severed.  The anxiety 
of waiting for it to happen.  And then for it to take so long to be severed.  
Must be dull blades or something.

Sorry.  :)

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Erno, Cynthia M (ITS)
Sent: Thursday, September 29, 2016 11:10 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Horrible food at Ignite

If you can "sever" it out of his hands :) :) :)
Sorry Garth, but you did you use the word severed instead of served.. 3x.

Cynthia Erno

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Heaton, Joseph@Wildlife
Sent: Thursday, September 29, 2016 10:31 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Horrible food at Ignite


ATTENTION: This email came from an external source. Do not open attachments or 
click on links from unknown senders or unexpected emails.

Mmm, peach cobbler.  I'd be happy to take yours off your hands, Garth, since 
you're watching your weight. ;)

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Garth Jones
Sent: Thursday, September 29, 2016 3:39 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Horrible food at Ignite

I'm just providing the details that I was told as to why we have lunch boxes vs 
hot food. Like you I prefer hot food but it does mean that you have to wait in 
line to be severed.

This question was not who wanted lunch boxes, the issue was how long it took to 
be severed. Even thought I go to the vendor food hall, it always seen to take 5 
minutes before you could make it to the food table before getting severed. Then 
it would take a bit longer to slowly make you way to the other end. If anything 
ran out you would wait until they replaced it. This year there has been no 
waiting to grab a lunch box.

Again my understanding is that the cost is exactly the same for MS for the 
lunch boxes, and the quality is much higher than your normal lunch boxed. I 
would agree that these lunch boxes are a lot high quality than normal lunch 
boxes. When do you see cut fresh fruit in a lunch box and a peach cobbler?

Don't get me wrong, I want a hot lunch. All I'm doing is giving another 
prospective on things.

Food waste will happen with both lunch boxes and catered food, I agree that it 
will be less with catered. But on the plus side, I'm trying to watch my weight, 
so a box lunch, will help keep me in check. :)

BTW, I was also told that the boxes are recycled however because they are a 
hard plastic, I wouldn't be surprised if they are washed and reused.

BBTW, I was talking @RicksterCDN about this on Sunday night this is the only 
reason why I know any of this. He is a good guy and if you can catch him or 
Joey, I'm sure that they will give you more details about this.


From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Roland Janus
Sent: September 28, 2016 1:49 PM
To: mssms@lists.myitforum.com
Subject: AW: [mssms] Horrible food at Ignite

How many actually asked for the lunch boxes instead of warm and proper cooked 
food?
The majority prefers  that over a cooked meal?
I have a hard time believing that and I never waited that long.
But it certainly is cheaper for MS, but I do think we pay enough to get 
something better regardless
Maybe I'm just spoiled with real bread (coming from Europe) and not that piece 
of tasteless foam used.
And then that dry chicken. B.

Not even talking about how many half used boxes go into the garbage.


Von: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] Im Auftrag von Garth Jones
Gesendet: Mittwoch, 28. September 2016 17:20
An: mssms@lists.myitforum.com
Betreff: RE: [mssms] Horrible food at Ignite

So I talked to the team about this and the Lunch boxes was the feed back that 
they got form last ignite. People didn't want to wait for 20-30 minutes to get 
food. They wanted to get in and out in 5 minutes so that they can talk to 
friends, office, family during the breaks.

So what they did was if they spent $30 on hot food per person, they turned 
around bought lunch that cost $30/each, this way you get better food and can 
get in and out within a few minutes. Therefore you don't have to wait in line 
for you food nearly as long...


Right, wrong... I'm just says that is why we have lunch boxes..



From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Roland Janus
Sent: September 27, 2016 12:21 PM
To: mssms@lists.myitforum.com

Re: [mssms] Modify Source of all Applications

[Marable, Mike]

Nickolaj Andersen wrote a utility to modify the source location.  It works 
really well.

http://www.scconfigmgr.com/2015/08/26/configmgr-content-source-update-tool-1-0-0/



From:  on behalf of "Marcum, John" 

Reply-To: "mssms@lists.myitforum.com" 
Date: Wednesday, September 28, 2016 at 3:57 PM
To: "mssms@lists.myitforum.com" 
Subject: [mssms] Modify Source of all Applications

Has anyone used this or does anyone have something else that works? 
https://blogs.technet.microsoft.com/configmgrdogs/2013/05/08/package-application-source-modification-scripts/
 When I run this script nothing happens. It just says executing script and it 
sits at a prompt XXX:






Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] Horrible food at Ignite

[Marable, Mike]

No, it’s already a 12+ hour drive for me!
Move it to Vegas and I’m hosed!


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marcum, John
Sent: Tuesday, September 27, 2016 2:35 PM
To: SMS 
Subject: RE: [mssms] Horrible food at Ignite

Ah man! No more Vegas??? We need to get MMS moved to vegas!

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of 
rodtr...@myitforum.com
Sent: Tuesday, September 27, 2016 1:31 PM
To: SMS >
Subject: RE: [mssms] Horrible food at Ignite

[External Email]
If you just want/need System Center topics, MMS still exists:  
https://mmsmoa.com/

If you work with more than just System Center, check out ITDC. ITDC 2016 is in 
2 weeks, but 2017 will be moving to San Francisco.


From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Roland Janus
Sent: Tuesday, September 27, 2016 2:23 PM
To: mssms@lists.myitforum.com
Subject: AW: [mssms] Horrible food at Ignite

Yeah, 23000, well, another reason why I probably don’t want to attend Ignite 
anymore, it just got to big.
I miss MMS.

So, I guess I go outside to get something decent.

-Roland

Von: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] Im Auftrag von 
rodtr...@myitforum.com
Gesendet: Dienstag, 27. September 2016 19:14
An: SMS >
Betreff: RE: [mssms] Horrible food at Ignite

There were only around 10k in Houston.

This is over twice that number. Plus, there’s a LOT of eateries in the downtown 
area. You don’t have to eat conference food like you did being stuck at the 
event center in Chicago last year. MSFT counts on offloading meals every year, 
which is why they spend a lot of cycles promoting local restaurants.

Consider, too, that Microsoft doesn’t intend to make money off the conference. 
This is free marketing for them, so they’ll save costs where they can.  Makes a 
lot of sense for a conference this size.


From: roland.ja...@hispeed.ch 
[mailto:roland.ja...@hispeed.ch]
Sent: Tuesday, September 27, 2016 12:52 PM
To: rodtr...@myitforum.com
Subject: AW: [mssms] Horrible food at Ignite

Nah, I don't and they managed in Houston, the last one i visited before.
I do think I pay enough.

Gesendet von meinem Windows 10 Phone

Von: rodtr...@myitforum.com
Gesendet: Dienstag, 27. September 2016 12:46
An: SMS
Betreff: RE: [mssms] Horrible food at Ignite

You sort of have to expect that. Its difficult and costly to serve food to 23k.


Rod Trent
[ConnectionsSpeakerSignature_2016_Enterprise-Mgmt-Mobility-n-Security]

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Roland Janus
Sent: Tuesday, September 27, 2016 12:21 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Horrible food at Ignite

I’m kind of surprised that there are not a zillion comments about the horrible 
food we get at Ignite.

Cold sandwiches? Seriously and like the same every day?
I’ve good better food on any airplane and it’s warm.

That is just not acceptable.

-R




Sent from Mail for Windows 10





Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: Removing Win10 packages for OSD

[Marable, Mike]

I run it during the deployment task sequence.

I try not to do too much with my reference image to keep things simple.

Mike


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Bradley, Matt
Sent: Thursday, September 22, 2016 12:41 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Removing Win10 packages for OSD

Of the various scripts I've seen out there that people use to remove unwanted 
appx packages from their Windows 10 deployments...is there a best time to do 
that?  Should I run the removal script against my WIM that I'm going to capture 
from a golden image, or should I be running the script during the task 
sequence?  The first sounds like it would build the machine faster, but I'm 
wondering if the packages get reset during OSD requiring the removal script to 
be ran anyway?


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] Microsoft set to change Windows patching in a disasterous way

[Marable, Mike]

I totally agree.  In fact yesterday we had to pull off a security update 
because it "broke" an app.  So instead of the vendor fixing their app, we're 
going to allow a potential security threat?

In my opinion I think this is a good thing.  Give me just a single patch each 
month so I don't have to worry about 5 this month, 2 the month before, 7 the 
prior month...

Aaron Czechowski talked about this at MMS this last Spring.
[cid:image001.jpg@01D1F790.2EC94A30]

Like Andreas said, "Just my 2 cents."

Mike



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Andreas Hammarskjöld
Sent: Tuesday, August 16, 2016 2:54 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Microsoft set to change Windows patching in a disasterous 
way

This is very understandable and typicaly the way of "as-a-service" solutions 
work, regardless of vendor. Doing it any other way would be too costly & time 
consuming. I think we should be happy that MS is even considering non security 
fixes for these operating systems!

I think part of it is also to create an even bigger haystack to hide the 
needles in for the security updates to delay the re-engineers finding the 
actual issues from the patches that MS releases.

One thing is sure, as ConfigMgr does support delta downloads of these patches 
yet it will be a large file per month to download to each location. So people 
that haven't started looking at ways to peer-to-peer this should do that... 
fast. With Win10 this is a 1GB DL per month per PC and counting.

As per the not secure vs functionality, it's the same as the idiots not 
vaccinating their kids as they think they might get whatever from it. Go to 
your vendor and tell them to fix the app. If they don't, switch app.

Unless you want to go Linux/Mac side, but thinking you have more control there 
makes me laugh.

Just my 2 cents.

//A

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Murray, Mike
Sent: den 16 augusti 2016 01:29
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Microsoft set to change Windows patching in a disasterous 
way

I've been told "get used to it" on the patch management list. Not good enough. 
I think this is ridiculous.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Roland Janus
Sent: Monday, August 15, 2016 4:08 PM
To: mssms@lists.myitforum.com
Subject: AW: [mssms] Microsoft set to change Windows patching in a disasterous 
way

1+

If they include such updates, like 3170455 which we also excluded, that's 
certainly going the mess up things..

Von: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] Im Auftrag von Miller, Todd
Gesendet: Montag, 15. August 2016 22:42
An: mssms@lists.myitforum.com
Betreff: [mssms] Microsoft set to change Windows patching in a disasterous way

https://blogs.technet.microsoft.com/windowsitpro/2016/08/15/further-simplifying-servicing-model-for-windows-7-and-windows-8-1/

Wow, this could be a disaster.

We have had 4 or 5 cases in the last 12 months where we have had to delay the 
installation of a security update so that applications could be modified to 
work with updates.  In a couple of cases, one ongoing, Microsoft has released a 
security update, then acknowledged a bug in that update and released a fix 
several months later.  We currently have KB3170455 denied in our environment 
because it breaks point - and -print driver installation.  In the new world, I 
will need to decide which is worse - no security updates for 3 months, or break 
printing for all non-admin users.  Currently I can decide to pull or hold an 
individual patch, but it looks like that option is being removed from Windows 7 
and 8. This comes at a time where it seems like patch quality has hit a 
rough patch, making this decision more troubling.


Notice: This UI Health Care e-mail (including attachments) is covered by the 
Electronic Communications Privacy Act, 18 U.S.C. 2510-2521 and is intended only 
for the use of the individual or entity to which it is addressed, and may 
contain information that is privileged, confidential, and exempt from 
disclosure under applicable law. If you are not the intended recipient, any 
dissemination, distribution or copying of this communication is strictly 
prohibited. If you have received this communication in error, please notify the 
sender immediately and delete or destroy all copies of the original message and 
attachments thereto. Email sent to or from UI Health Care may be retained as 
required by law or regulation. Thank you.





**
Electronic Mail is not secure, 

RE: [mssms] W10 v1607 - new ADMX's ?

[Marable, Mike]

Not yet, but I'm downloading them now and will be putting in the request to add 
them to our domain.

Mike


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Shane Alexander
Sent: Monday, August 15, 2016 3:53 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] W10 v1607 - new ADMX's ?

Thanks Michael.


Can see this link was updated August 5th, gather that because it also says 
Server 2016 then this is for v1607 ?

Administrative Templates (.admx) for Windows 10 and Windows Server 2016
https://www.microsoft.com/en-us/download/details.aspx?id=53430


Has anyone downloaded, extracted, and put these ADMX's/ADML's in their Central 
Store yet ?
(over-written existing)

Any issues ?


Cheers,

Shane



From: michael.nieh...@microsoft.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] W10 v1607 - new ADMX's ?
Date: Wed, 3 Aug 2016 16:47:18 +
The spreadsheet with all the policy details can be downloaded from:

https://www.microsoft.com/en-us/download/details.aspx?id=25250

The updated ADMX files will be available as a separate download within the next 
couple of weeks.  Until then you can copy the files from 
C:\Windows\PolicyDefintions on a Windows 10 1607 client.  But Adam's suggestion 
is good, compare first.  And keep a backup of the old files, just in case.

Thanks,
-Michael

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Adam Juelich
Sent: Wednesday, August 3, 2016 5:21 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] W10 v1607 - new ADMX's ?

You can probably copy them to the Central Store but make sure you open up a few 
GPOs afterwards to see if they renamed any of the ADMX's.  With 1511 there were 
many ADMXs that did the same thing, they were just renamed for 1511.  You just 
have to find the older conflict and delete that ADMX and ADML and then you are 
good.

I'd be curious if we have more of those this time


On Tue, Aug 2, 2016 at 10:40 PM, Shane Alexander 
> wrote:
Wondering if anyone knows about an impending release of new download for Group 
Policy ADMX's for v1607 ?

Can see from an new v1607 install, locally there are many "new" ADMX's ... just 
not sure if should copy these to GP Central Store yet.



 Directory of C:\Windows\PolicyDefinitions
17/07/2016  12:23 AM 4,717 ActiveXInstallService.admx
17/07/2016  12:23 AM 4,714 AddRemovePrograms.admx
16/07/2016  09:43 PM 1,157 AllowBuildPreview.admx
17/07/2016  12:23 AM 5,203 AppCompat.admx
16/07/2016  09:42 PM22,504 AppPrivacy.admx
17/07/2016  12:24 AM33,319 appv.admx
17/07/2016  12:23 AM 4,152 AppxPackageManager.admx
16/07/2016  09:43 PM 3,975 AppXRuntime.admx
17/07/2016  12:22 AM 5,965 AttachmentManager.admx
16/07/2016  09:43 PM 1,337 AuditSettings.admx
16/07/2016  09:43 PM 3,391 AutoPlay.admx
16/07/2016  09:42 PM 2,129 AVSValidationGP.admx
16/07/2016  09:43 PM 3,674 Biometrics.admx
17/07/2016  12:23 AM56,679 Bits.admx
16/07/2016  09:43 PM 2,278 Camera.admx
16/07/2016  09:43 PM 1,749 CEIPEnable.admx
16/07/2016  09:43 PM 1,838 CipherSuiteOrder.admx
16/07/2016  09:43 PM 3,903 CloudContent.admx
16/07/2016  09:43 PM 1,329 COM.admx
17/07/2016  12:23 AM13,967 Conf.admx
16/07/2016  09:43 PM 2,600 ControlPanel.admx
17/07/2016  12:23 AM14,538 ControlPanelDisplay.admx
16/07/2016  09:43 PM 1,293 Cpls.admx
16/07/2016  09:43 PM 4,025 CredentialProviders.admx
17/07/2016  12:24 AM12,182 CredSsp.admx
16/07/2016  09:43 PM 2,254 CredUI.admx
16/07/2016  09:43 PM 2,141 CtrlAltDel.admx
16/07/2016  09:43 PM 3,857 DataCollection.admx
16/07/2016  09:43 PM 2,437 DCOM.admx
16/07/2016  09:42 PM 8,943 DeliveryOptimization.admx
17/07/2016  12:24 AM13,734 Desktop.admx
16/07/2016  09:43 PM 1,778 DeviceCompat.admx
16/07/2016  09:43 PM 1,581 DeviceCredential.admx
16/07/2016  09:43 PM 3,710 DeviceGuard.admx
17/07/2016  12:23 AM13,015 DeviceInstallation.admx
16/07/2016  09:43 PM 2,391 DeviceRedirection.admx
17/07/2016  12:23 AM 7,554 DeviceSetup.admx
16/07/2016  09:43 PM 1,093 DFS.admx
16/07/2016  09:43 PM 1,992 DigitalLocker.admx
16/07/2016  09:43 PM 3,034 DiskDiagnostic.admx
16/07/2016  09:43 PM 2,758 DiskNVCache.admx
17/07/2016  12:24 AM 6,123 DiskQuota.admx
16/07/2016  09:43 PM   989 DistributedLinkTracking.admx
17/07/2016  12:23 

Re: [mssms] RE: Problems applying GPOs with Windows 10?

[Marable, Mike]

No, no progress on our end.  We still need 2 reboots to get all the GPOs 
applied.

Unfortunately, we’ve been buried and unable to open a case with Microsoft on 
the problem.  I can confirm that the problem exists in Win10 CB at least up 
through 1511.  I have not tried 1607 yet in our environment.

Mike



From: <listsad...@lists.myitforum.com> on behalf of Steve Whitcher 
<st...@whitcher.org>
Reply-To: "mssms@lists.myitforum.com" <mssms@lists.myitforum.com>
Date: Thursday, August 11, 2016 at 8:28 AM
To: "mssms@lists.myitforum.com" <mssms@lists.myitforum.com>
Subject: Re: [mssms] RE: Problems applying GPOs with Windows 10?

Did anyone ever make any progress on this, or are you all still just working 
around the issue and rebooting an extra time to apply GPO's?

On Mon, Sep 14, 2015 at 2:37 PM, Russ Rimmerman 
<russ.rimmer...@microsoft.com<mailto:russ.rimmer...@microsoft.com>> wrote:
Yes, I think a support case is likely appropriate, was just sharing the answer 
to Todd’s question about a UserVoice for Windows OS.

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of Daniel Ratliff
Sent: Thursday, September 10, 2015 8:55 AM

To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Problems applying GPOs with Windows 10?

How is this a feature suggestion and not a bug? GPO taking two reboots to apply 
is a pretty big issue for us.

Would a support case be more appropriate?

Daniel Ratliff

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Russ Rimmerman
Sent: Thursday, September 10, 2015 12:43 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Problems applying GPOs with Windows 10?

https://windows.uservoice.com/forums/265757-windows-feature-suggestions

I believe just http://windows.uservoice.com will also take you there as well

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Mote, Todd
Sent: Wednesday, September 9, 2015 8:14 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Problems applying GPOs with Windows 10?

What can we do about it?  Where is appropriate to file this?  How can we get 
this some visibility? I don’t think there’s a Connect site for Windows is 
there?  Uservoice?

Todd

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Johns, Damon (DoJ)
Sent: Wednesday, September 9, 2015 5:51 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Problems applying GPOs with Windows 10?

Yes can confirm that same behaviour in my domain – workstations require at 
least 2 restarts before all the Group Policy objects are applied to my Windows 
10 instances – it was quite noticeable as the branding GPO hadn’t applied after 
my OSD Task Sequence completed even with the SMSTSPostAction set to do a 
restart.

Cheers
Damon

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Wednesday, 9 September 2015 9:42 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Problems applying GPOs with Windows 10?

Has anyone else had problems with GPO processing on Windows 10?

I’m currently working on the Windows 10 replacement for one of our Windows 7 
products and consistently I’m seeing GPOs not applying in a timely fashion (in 
particular the AppLocker policies).  Once the machine is built I have to reboot 
it a second time to get all the policies in place.  The Windows 7 equivalent 
never had this problem.

Here is what I’m dealing with.  I have a single task sequence that will build 
using either Windows 10 or Windows 7 depending on a task sequence variable.  So 
the builds run through the same exact steps.  They are placed in OUs with 
identical GPOs applied.  I originally was setting the SMSTSPostAction variable 
to do a “shutdown –r –t 0” to reboot the machine at the end of the build.

On a Windows 7 build the machine comes up with all GPOs processed.  It has the 
proper wallpaper and all the restrictions are in place.

On a Windows 10 build the machine comes up and it has the wrong wallpaper and 
none of the restrictions are in place.  I have to reboot it a second time and 
only then does it come up properly.

Trying to resolve this I’ve set up a clunky hack at the end of my task 
sequence.  SMSTSPostAction calls a batch file.  This batch file calls a 
PowerShell script.  The PoSh script sleeps for 30 seconds to allow the batch 
file to exit, return control back to the TS and

[mssms] RE: ConfigMgr 1511 PXE Boot Selection

[Marable, Mike]

Yeah, that's how that rogue CM100024 ended up on the PXE DP.

I deleted the boot package for CM100024 so it doesn't exist within SCCM now.

I've verified that the only 2 boot images in the SMSImages folder on the PXE DP 
are the production 32bit and the new development 64bit.
[cid:image004.png@01D1F212.4762B780]

Restarted WDS.

PXE booted a machine:
[cid:image003.jpg@01D1F212.4A45B330]

And it still thinks it started from that other package.
[cid:image006.png@01D1F212.2A49FC80]

I'm about to give up.  There has to be something rattling around in the CM 
database at this point.  That package doesn't exist now.

I'll try refreshing the new boot image on the DPs and try a new task sequence.

Mike



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Andreas Hammarskjöld
Sent: Tuesday, August 9, 2016 3:25 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

Remember, you have to fiddle with the checkbox for the "distribute this image 
to PXE points" and not the regular assign/unassign package to DP. Have been 
waiting for content on PXE DP's a few times before realizing that.

//A

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: den 9 augusti 2016 04:59
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

That's my next step.  In the morning I'll delete that rogue boot image from 
SCCM and give it a try.

I was going to try it this afternoon but got pulled off on a production problem.

Thanks
Mike

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Sandys
Sent: Monday, August 8, 2016 2:27 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

Have you deleted the boot image altogether?

What happens if you create a new TS? Does that boot image ID still show up?

J

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Monday, August 8, 2016 1:10 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

No, we have never used that boot image.  It's not assigned to any task 
sequences and is no longer on any of the DPs ore the PXE server.

It is not the image that the system is booting from either.  As the system is 
booting below the progress bar it shows CM1008BE which matches what the SMSTS 
log shows as loading.

I was really hoping that removing that boot image was going to fix the problem.


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Sandys
Sent: Monday, August 8, 2016 1:31 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

That's the boot image being delivered though (based on the log snippet provided 
earlier). Are there any task sequences deployed at all with that boot image 
assigned?

J

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Monday, August 8, 2016 11:29 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

That turned out to be a rogue boot image on the PXE server.

I've pulled that one off so the only boot images on the server are the original 
32bit., ADK 8.1 production image and the 64bit, ADK1511 development image.  I 
then restarted the WDS service and thought I was home free.

I still get SCCM staging the 64bit ADK 1511 boot image.  The log still 
references the CM124 (the rogue boot image).  So I pulled that boot image 
off of all the DPs.  Restarted WDS and tried again but it still staged the boot 
image and still referenced the CM100024 package.



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Sandys
Sent: Monday, August 8, 2016 11:10 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

What is CM100024?

Have you tried updating the boot image on the DP?

J

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Monday, August 8, 2016 9:48 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

Unfortunately is just states that they don't match.

At the start of SMSTS log is shows th

[mssms] RE: ConfigMgr 1511 PXE Boot Selection

[Marable, Mike]

That's my next step.  In the morning I'll delete that rogue boot image from 
SCCM and give it a try.

I was going to try it this afternoon but got pulled off on a production problem.

Thanks
Mike

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jason Sandys
Sent: Monday, August 8, 2016 2:27 PM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

Have you deleted the boot image altogether?

What happens if you create a new TS? Does that boot image ID still show up?

J

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Monday, August 8, 2016 1:10 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

No, we have never used that boot image.  It's not assigned to any task 
sequences and is no longer on any of the DPs ore the PXE server.

It is not the image that the system is booting from either.  As the system is 
booting below the progress bar it shows CM1008BE which matches what the SMSTS 
log shows as loading.

I was really hoping that removing that boot image was going to fix the problem.


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Sandys
Sent: Monday, August 8, 2016 1:31 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

That's the boot image being delivered though (based on the log snippet provided 
earlier). Are there any task sequences deployed at all with that boot image 
assigned?

J

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Monday, August 8, 2016 11:29 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

That turned out to be a rogue boot image on the PXE server.

I've pulled that one off so the only boot images on the server are the original 
32bit., ADK 8.1 production image and the 64bit, ADK1511 development image.  I 
then restarted the WDS service and thought I was home free.

I still get SCCM staging the 64bit ADK 1511 boot image.  The log still 
references the CM124 (the rogue boot image).  So I pulled that boot image 
off of all the DPs.  Restarted WDS and tried again but it still staged the boot 
image and still referenced the CM100024 package.



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Sandys
Sent: Monday, August 8, 2016 11:10 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

What is CM100024?

Have you tried updating the boot image on the DP?

J

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Monday, August 8, 2016 9:48 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

Unfortunately is just states that they don't match.

At the start of SMSTS log is shows that it PXE booted from the proper boot 
image:
[cid:image001.png@01D1F1C8.6784E190]


Yet after selecting the development task sequence it just claims that they do 
not match:
[cid:image002.png@01D1F1C8.6784E190]

There's no explanation as to why SCCM felt that they did not match.



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Sandys
Sent: Monday, August 8, 2016 10:03 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

Check smsts.log. It will tell you why it is essentially re-staging the boot 
image. Typically this only happens with media when the version of the boot 
image on the media doesn't match the version on the DP but as note, smsts.log 
should clearly reflect what's going on.

J

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Sunday, August 7, 2016 9:49 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] ConfigMgr 1511 PXE Boot Selection

I'm trying to sort out what's going on with our PXE server now that we've 
upgraded to 1511 and why it's behaving differently from what I'm reading.

We've recently upgraded our 2012 R2 environment to 1511.  We have not yet 
upgraded to 1602 or 1606.  That is in the works.

First some quick background.  We have a single PXE enabled DP.  On that we have 
the original, production boot image that 

[mssms] RE: ConfigMgr 1511 PXE Boot Selection

[Marable, Mike]

No, we have never used that boot image.  It's not assigned to any task 
sequences and is no longer on any of the DPs ore the PXE server.

It is not the image that the system is booting from either.  As the system is 
booting below the progress bar it shows CM1008BE which matches what the SMSTS 
log shows as loading.

I was really hoping that removing that boot image was going to fix the problem.


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jason Sandys
Sent: Monday, August 8, 2016 1:31 PM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

That's the boot image being delivered though (based on the log snippet provided 
earlier). Are there any task sequences deployed at all with that boot image 
assigned?

J

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Monday, August 8, 2016 11:29 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

That turned out to be a rogue boot image on the PXE server.

I've pulled that one off so the only boot images on the server are the original 
32bit., ADK 8.1 production image and the 64bit, ADK1511 development image.  I 
then restarted the WDS service and thought I was home free.

I still get SCCM staging the 64bit ADK 1511 boot image.  The log still 
references the CM124 (the rogue boot image).  So I pulled that boot image 
off of all the DPs.  Restarted WDS and tried again but it still staged the boot 
image and still referenced the CM100024 package.



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Sandys
Sent: Monday, August 8, 2016 11:10 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

What is CM100024?

Have you tried updating the boot image on the DP?

J

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Monday, August 8, 2016 9:48 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

Unfortunately is just states that they don't match.

At the start of SMSTS log is shows that it PXE booted from the proper boot 
image:
[cid:image001.png@01D1F17E.85164EA0]


Yet after selecting the development task sequence it just claims that they do 
not match:
[cid:image002.png@01D1F17E.85164EA0]

There's no explanation as to why SCCM felt that they did not match.



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Sandys
Sent: Monday, August 8, 2016 10:03 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

Check smsts.log. It will tell you why it is essentially re-staging the boot 
image. Typically this only happens with media when the version of the boot 
image on the media doesn't match the version on the DP but as note, smsts.log 
should clearly reflect what's going on.

J

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Sunday, August 7, 2016 9:49 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] ConfigMgr 1511 PXE Boot Selection

I'm trying to sort out what's going on with our PXE server now that we've 
upgraded to 1511 and why it's behaving differently from what I'm reading.

We've recently upgraded our 2012 R2 environment to 1511.  We have not yet 
upgraded to 1602 or 1606.  That is in the works.

First some quick background.  We have a single PXE enabled DP.  On that we have 
the original, production boot image that we've been using for ages.  Let's call 
it "BootImage1".  This image is a 32bit boot image based on ADK 8.1.  It is the 
boot image assigned to our production build task sequence which is advertised 
to "All Systems".

After upgrading to 1511 we began development of a new build and it uses a new 
64bit boot image based on ADK 1511.  Let's call that one "BootImage2".  This 
development build is only advertised to a development collection.

Now, when we PXE boot any production machine SCCM offers up BootImage1 since 
that is the only one available through the deployment to All Systems.  So far, 
so good.

The problem is when we PXE boot one of the machines being used in development 
of the new build.  Since they are members of both the "All Systems" collection 
(with the production build deployed) and the "Development Build" collection 
(with our development build deployed), SCCM h

[mssms] RE: ConfigMgr 1511 PXE Boot Selection

[Marable, Mike]

That turned out to be a rogue boot image on the PXE server.

I've pulled that one off so the only boot images on the server are the original 
32bit., ADK 8.1 production image and the 64bit, ADK1511 development image.  I 
then restarted the WDS service and thought I was home free.

I still get SCCM staging the 64bit ADK 1511 boot image.  The log still 
references the CM124 (the rogue boot image).  So I pulled that boot image 
off of all the DPs.  Restarted WDS and tried again but it still staged the boot 
image and still referenced the CM100024 package.



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jason Sandys
Sent: Monday, August 8, 2016 11:10 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

What is CM100024?

Have you tried updating the boot image on the DP?

J

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Monday, August 8, 2016 9:48 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

Unfortunately is just states that they don't match.

At the start of SMSTS log is shows that it PXE booted from the proper boot 
image:
[cid:image001.png@01D1F170.7D9F5440]


Yet after selecting the development task sequence it just claims that they do 
not match:
[cid:image002.png@01D1F170.7D9F5440]

There's no explanation as to why SCCM felt that they did not match.



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Sandys
Sent: Monday, August 8, 2016 10:03 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

Check smsts.log. It will tell you why it is essentially re-staging the boot 
image. Typically this only happens with media when the version of the boot 
image on the media doesn't match the version on the DP but as note, smsts.log 
should clearly reflect what's going on.

J

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Sunday, August 7, 2016 9:49 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] ConfigMgr 1511 PXE Boot Selection

I'm trying to sort out what's going on with our PXE server now that we've 
upgraded to 1511 and why it's behaving differently from what I'm reading.

We've recently upgraded our 2012 R2 environment to 1511.  We have not yet 
upgraded to 1602 or 1606.  That is in the works.

First some quick background.  We have a single PXE enabled DP.  On that we have 
the original, production boot image that we've been using for ages.  Let's call 
it "BootImage1".  This image is a 32bit boot image based on ADK 8.1.  It is the 
boot image assigned to our production build task sequence which is advertised 
to "All Systems".

After upgrading to 1511 we began development of a new build and it uses a new 
64bit boot image based on ADK 1511.  Let's call that one "BootImage2".  This 
development build is only advertised to a development collection.

Now, when we PXE boot any production machine SCCM offers up BootImage1 since 
that is the only one available through the deployment to All Systems.  So far, 
so good.

The problem is when we PXE boot one of the machines being used in development 
of the new build.  Since they are members of both the "All Systems" collection 
(with the production build deployed) and the "Development Build" collection 
(with our development build deployed), SCCM has to decide which of the 2 
available boot images to offer.  Since BootImage2 is the most recent, or 
"newest" on the PXE server it is offered.  Again, so far so good.

Now from what I've read, if the boot image that the machine uses matches the 
one that is assigned to the selected task sequence, then the task sequence will 
just start.  Granted what I've found was written for 2007 and 2012.  What we're 
seeing is that even though the machine booted using BootImage2 and we select 
the DEV build (with BootImage2 assigned), SCCM stages BootImage2 and then 
reboots the system.  When the system reboots it then automatically begins the 
selected task sequence.  SCCM ignores what boot image was used to boot the 
system.

It's a bit annoying and I'm sure that once we go production with this new build 
and pull the older BootImage1 out of the environment things will be smooth.  
The bigger problem is that with this new build we are 1) making the switch to 
BitLocker for encryption and 2) now going to support UEFI systems.  Prior to 
the Networking team getting the DHCP options sorted we were booting from USB 
media.  Now when we go to rebuild a BitLockered UEFI machine SCCM attempts

[mssms] RE: ConfigMgr 1511 PXE Boot Selection

[Marable, Mike]

Unfortunately is just states that they don't match.

At the start of SMSTS log is shows that it PXE booted from the proper boot 
image:
[cid:image001.png@01D1F162.110081F0]


Yet after selecting the development task sequence it just claims that they do 
not match:
[cid:image002.png@01D1F162.110081F0]

There's no explanation as to why SCCM felt that they did not match.



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jason Sandys
Sent: Monday, August 8, 2016 10:03 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: ConfigMgr 1511 PXE Boot Selection

Check smsts.log. It will tell you why it is essentially re-staging the boot 
image. Typically this only happens with media when the version of the boot 
image on the media doesn't match the version on the DP but as note, smsts.log 
should clearly reflect what's going on.

J

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Sunday, August 7, 2016 9:49 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] ConfigMgr 1511 PXE Boot Selection

I'm trying to sort out what's going on with our PXE server now that we've 
upgraded to 1511 and why it's behaving differently from what I'm reading.

We've recently upgraded our 2012 R2 environment to 1511.  We have not yet 
upgraded to 1602 or 1606.  That is in the works.

First some quick background.  We have a single PXE enabled DP.  On that we have 
the original, production boot image that we've been using for ages.  Let's call 
it "BootImage1".  This image is a 32bit boot image based on ADK 8.1.  It is the 
boot image assigned to our production build task sequence which is advertised 
to "All Systems".

After upgrading to 1511 we began development of a new build and it uses a new 
64bit boot image based on ADK 1511.  Let's call that one "BootImage2".  This 
development build is only advertised to a development collection.

Now, when we PXE boot any production machine SCCM offers up BootImage1 since 
that is the only one available through the deployment to All Systems.  So far, 
so good.

The problem is when we PXE boot one of the machines being used in development 
of the new build.  Since they are members of both the "All Systems" collection 
(with the production build deployed) and the "Development Build" collection 
(with our development build deployed), SCCM has to decide which of the 2 
available boot images to offer.  Since BootImage2 is the most recent, or 
"newest" on the PXE server it is offered.  Again, so far so good.

Now from what I've read, if the boot image that the machine uses matches the 
one that is assigned to the selected task sequence, then the task sequence will 
just start.  Granted what I've found was written for 2007 and 2012.  What we're 
seeing is that even though the machine booted using BootImage2 and we select 
the DEV build (with BootImage2 assigned), SCCM stages BootImage2 and then 
reboots the system.  When the system reboots it then automatically begins the 
selected task sequence.  SCCM ignores what boot image was used to boot the 
system.

It's a bit annoying and I'm sure that once we go production with this new build 
and pull the older BootImage1 out of the environment things will be smooth.  
The bigger problem is that with this new build we are 1) making the switch to 
BitLocker for encryption and 2) now going to support UEFI systems.  Prior to 
the Networking team getting the DHCP options sorted we were booting from USB 
media.  Now when we go to rebuild a BitLockered UEFI machine SCCM attempts to 
stage BootImage2 but the only partition visible is the OS partition, but that 
is encrypted by BitLocker.  Since the partition will not be available to boot 
from then the staging fails.  We have to boot from USB boot media which doesn't 
trigger the boot image staging, or clean the disk of partitions and PXE boot.

I don't understand why SCCM does not recognize that the development machine 
booted from the proper boot image, but instead stages the same boot image and 
reboots?  Has something changed in 1511 and how the PXE boot selection process 
is being handled?  Or is there just something I'm missing or something we may 
have configured wrong?

Thanks

Mike Marable
Microsoft Systems Engineer Lead
Enterprise Device Engineering and Management
MCPS, MCITP, MCTS, MCSA, MCSE, MS  
[Profile<http://www.mycertprofile.com/Profile/5319166625>] 
[Blog<http://thesystemsmonkey.wordpress.com/>]

"Every great dream begins with a dreamer.  Always remember,  you have within  
you the strength, the patience, and the passion to reach for the stars to 
change the world."
-Harriet Tubman

"The two most important days in your life are the day you are bor

[mssms] ConfigMgr 1511 PXE Boot Selection

[Marable, Mike]

I'm trying to sort out what's going on with our PXE server now that we've 
upgraded to 1511 and why it's behaving differently from what I'm reading.

We've recently upgraded our 2012 R2 environment to 1511.  We have not yet 
upgraded to 1602 or 1606.  That is in the works.

First some quick background.  We have a single PXE enabled DP.  On that we have 
the original, production boot image that we've been using for ages.  Let's call 
it "BootImage1".  This image is a 32bit boot image based on ADK 8.1.  It is the 
boot image assigned to our production build task sequence which is advertised 
to "All Systems".

After upgrading to 1511 we began development of a new build and it uses a new 
64bit boot image based on ADK 1511.  Let's call that one "BootImage2".  This 
development build is only advertised to a development collection.

Now, when we PXE boot any production machine SCCM offers up BootImage1 since 
that is the only one available through the deployment to All Systems.  So far, 
so good.

The problem is when we PXE boot one of the machines being used in development 
of the new build.  Since they are members of both the "All Systems" collection 
(with the production build deployed) and the "Development Build" collection 
(with our development build deployed), SCCM has to decide which of the 2 
available boot images to offer.  Since BootImage2 is the most recent, or 
"newest" on the PXE server it is offered.  Again, so far so good.

Now from what I've read, if the boot image that the machine uses matches the 
one that is assigned to the selected task sequence, then the task sequence will 
just start.  Granted what I've found was written for 2007 and 2012.  What we're 
seeing is that even though the machine booted using BootImage2 and we select 
the DEV build (with BootImage2 assigned), SCCM stages BootImage2 and then 
reboots the system.  When the system reboots it then automatically begins the 
selected task sequence.  SCCM ignores what boot image was used to boot the 
system.

It's a bit annoying and I'm sure that once we go production with this new build 
and pull the older BootImage1 out of the environment things will be smooth.  
The bigger problem is that with this new build we are 1) making the switch to 
BitLocker for encryption and 2) now going to support UEFI systems.  Prior to 
the Networking team getting the DHCP options sorted we were booting from USB 
media.  Now when we go to rebuild a BitLockered UEFI machine SCCM attempts to 
stage BootImage2 but the only partition visible is the OS partition, but that 
is encrypted by BitLocker.  Since the partition will not be available to boot 
from then the staging fails.  We have to boot from USB boot media which doesn't 
trigger the boot image staging, or clean the disk of partitions and PXE boot.

I don't understand why SCCM does not recognize that the development machine 
booted from the proper boot image, but instead stages the same boot image and 
reboots?  Has something changed in 1511 and how the PXE boot selection process 
is being handled?  Or is there just something I'm missing or something we may 
have configured wrong?

Thanks

Mike Marable
Microsoft Systems Engineer Lead
Enterprise Device Engineering and Management
MCPS, MCITP, MCTS, MCSA, MCSE, MS  
[Profile] 
[Blog]

"Every great dream begins with a dreamer.  Always remember,  you have within  
you the strength, the patience, and the passion to reach for the stars to 
change the world."
-Harriet Tubman

"The two most important days in your life are the day you are born and the day 
you find out why."
-Mark Twain

"If it was easy everybody would do it."
-Eric Thomas




**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: Problems Downloading ConfigMgr 1606 - Fixed

[Marable, Mike]

I finally got it working.

I shut down the server and booted it up into WinPE.  There I deleted the CAB 
file and the extracted directory for the failed 1606 download from the 
EasySetupPayload folder.  Booted up the server normally and ConfigMgr was able 
to successfully download the 1606 update.

Why?
I don't know.  But it is working now.

Thanks
Mike

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marable, Mike
Sent: Wednesday, August 3, 2016 8:45 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Problems Downloading ConfigMgr 1606

I've finished bringing up a development ConfigMgr environment.  Started with 
1511 and upgraded to 1602 smoothly.  Now the 1606 upgrade is stuck 
"downloading".

According to the dmpdownloader log it downloads and extracts the CAB file 
successfully:
"File C:\Program Files\Microsoft Configuration 
Manager\EasySetupPayload\c63b412d..cab has been extracted with 0" (I'm 
hoping that means with a return code of 0)

That is immediately followed by these messages:
Check if there is redist to download for update, c63b412d
Download redist for update c63b412d
ERROR: Failed to download redist for c63b412d... with command  /RedistUrl 
http://go.microsoft.com/fwlink/?LinkID=746986 /LnManifestUrl 
http://go.microsoft.com/fwlink/?LinkID=746984 /RedistVersion 112015 /NoUI  
"\\\EasySetupPayload\c63b412d-7c4b-4c0d-be8c-18fb35b2ff79\redist"
 .

This last error message contains a few URLs, the one listed following the 
/RedistUrl leads to "ConfigMgr.Manifest.cab".  I can drop that URL into a web 
browser and it downloads the cab without any problems.  The other URL points to 
"ConfigMgr.LN.Manifest.cab" and again it downloads fine when I put it into a 
browser.

I've been fighting with this since last night.  I left it alone for overnight 
and it doesn't seem to get past this failure.  I've tried restarting the 
SMS_Executive service.  I've tried the PoSh script to move it to the fast ring. 
 I've tried rebooting.  Nothing seems to help.

Any tips for getting around this?

Mike Marable
Microsoft Systems Engineer Lead
Enterprise Device Engineering and Management
MCPS, MCITP, MCTS, MCSA, MCSE, MS  
[Profile<http://www.mycertprofile.com/Profile/5319166625>] 
[Blog<http://thesystemsmonkey.wordpress.com/>]

"The whole point of racing is to charge all the time."
-Gilles Villeneuve

"Unless you try to do something beyond what you have already mastered, you will 
never grow."
-Ralph Waldo Emerson

"The greatest glory in living lies not in never falling, but in rising every 
time we fall."
-Ralph Waldo Emerson





**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] Problems Downloading ConfigMgr 1606

[Marable, Mike]

I've finished bringing up a development ConfigMgr environment.  Started with 
1511 and upgraded to 1602 smoothly.  Now the 1606 upgrade is stuck 
"downloading".

According to the dmpdownloader log it downloads and extracts the CAB file 
successfully:
"File C:\Program Files\Microsoft Configuration 
Manager\EasySetupPayload\c63b412d..cab has been extracted with 0" (I'm 
hoping that means with a return code of 0)

That is immediately followed by these messages:
Check if there is redist to download for update, c63b412d
Download redist for update c63b412d
ERROR: Failed to download redist for c63b412d... with command  /RedistUrl 
http://go.microsoft.com/fwlink/?LinkID=746986 /LnManifestUrl 
http://go.microsoft.com/fwlink/?LinkID=746984 /RedistVersion 112015 /NoUI  
"\\\EasySetupPayload\c63b412d-7c4b-4c0d-be8c-18fb35b2ff79\redist" .

This last error message contains a few URLs, the one listed following the 
/RedistUrl leads to "ConfigMgr.Manifest.cab".  I can drop that URL into a web 
browser and it downloads the cab without any problems.  The other URL points to 
"ConfigMgr.LN.Manifest.cab" and again it downloads fine when I put it into a 
browser.

I've been fighting with this since last night.  I left it alone for overnight 
and it doesn't seem to get past this failure.  I've tried restarting the 
SMS_Executive service.  I've tried the PoSh script to move it to the fast ring. 
 I've tried rebooting.  Nothing seems to help.

Any tips for getting around this?

Mike Marable
Microsoft Systems Engineer Lead
Enterprise Device Engineering and Management
MCPS, MCITP, MCTS, MCSA, MCSE, MS  
[Profile] 
[Blog]

"The whole point of racing is to charge all the time."
-Gilles Villeneuve

"Unless you try to do something beyond what you have already mastered, you will 
never grow."
-Ralph Waldo Emerson

"The greatest glory in living lies not in never falling, but in rising every 
time we fall."
-Ralph Waldo Emerson




**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: Windows 10 Branch / Build number in BGInfo

[Marable, Mike]

You'll probably need to do a custom script that returns the value.

Using the Win32_OperatingSystem class you can pull the Version.

PowerShell:
PS C:\> (Get-WmiObject -ComputerName $env:computername -Class 
Win32_OperatingSystem).Version
10.0.10586


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Fast, David D.
Sent: Wednesday, July 27, 2016 3:10 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Windows 10 Branch / Build number in BGInfo

Anyone know of a way to get BGInfo to display the Windows 10 branch info (i.e., 
1511, 160x) or build number (10240, 10586, etc)?

Thanks,

David


The information transmitted is intended only for the person or entity to which 
it is addressed and may contain confidential and/or privileged material. Any 
review, retransmission, dissemination or other use of, or taking of any action 
in reliance upon this information by persons or entities other than the 
intended recipient is prohibited. If you received this in error, please contact 
the sender and delete the material from any computer.

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: Does OSDApplyOS.exe log anywhere?

[Marable, Mike]

No, we’re a DDPE shop but that isn’t in play here.  We’re not doing whole disk 
encryption and the encryption sweep doesn’t happen until after the build is 
complete.

While adjusting the Power Profile in PE helped a little, what seems to be 
showing great promise is moving to the 1511 ADK/WinPE (from the RTM version).

I took the 1511 boot WIMs and applied the fix from Microsoft.  Using those seem 
to eliminate the problem completely in testing.

Mike

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Atkinson, Wade A
Sent: Thursday, July 21, 2016 10:29 AM
To: mdt...@lists.myitforum.com; mssms@lists.myitforum.com
Subject: [MDT-OSD] RE: Does OSDApplyOS.exe log anywhere?

You don’t have any integrated drivers for 3rd party encryption or other file 
level filter drivers in your WinPE do you?

I have a ticket open with Dell’s DDPE department for a similar issue.  
Basically the filter driver is causing a slowdown per file, so the download of 
the WIM is fine, one file, but when extracts the 1000s of files on the disk it 
really slows things down.

Wade

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Saturday, June 11, 2016 10:39 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>; 
mdt...@lists.myitforum.com<mailto:mdt...@lists.myitforum.com>
Subject: [MDT-OSD] Does OSDApplyOS.exe log anywhere?

I’m trying to troubleshoot some slow performance when applying the image during 
an OS deployment since upgrading our site to SCCM 1511.

The WIM file is downloaded rapidly from the Distribution Points to the local 
cache, but when SCCM begins applying it to the hard drive it seems to slow way 
down.  Below is the SMSTS log of a sample machine.  It took a little over 20 
minutes to apply the ~6GB image and this was on an SSD.  I have seen it take 
well over a few hours for the image to apply (again on an SSD), so while the 20 
minutes in this log may not seem too bad, there is definitely a problem I need 
to get sorted out.

Is there any logging that would show what is happening between the two 
highlighted log entries?


[cid:image001.png@01D1E343.75B6C000]

 Thanks

Mike Marable
Microsoft Systems Engineer Lead
Enterprise Device Engineering and Management
MCPS, MCITP, MCTS, MCSA, MCSE, MS  
[Profile<http://www.mycertprofile.com/Profile/5319166625>] 
[Blog<http://thesystemsmonkey.wordpress.com/>]

“Impossible is just a big word thrown around by small men who find it easier to 
live in the world they've been given than to explore the power they have to 
change it. Impossible is not a fact. It's an opinion. Impossible is not a 
declaration. It's a dare. Impossible is potential. Impossible is temporary. 
Impossible is nothing.”
- Muhammad Ali

“Only those who risk going too far can possibly find out how far one can go.”
- T.S. Eliot



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues
This communication is the property of CenturyLink and may contain confidential 
or privileged information. Unauthorized use of this communication is strictly 
prohibited and may be unlawful. If you have received this communication in 
error, please immediately notify the sender by reply e-mail and destroy all 
copies of the communication and any attachments.
**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] RE: SCCM OSD task sequence - W10 with OS and DATA partitions

[Marable, Mike]

I think Joe is channeling his inner poet.  ;-)

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Joe Sestrich
Sent: Thursday, July 21, 2016 7:29 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: SCCM OSD task sequence - W10 with OS and DATA 
partitions

30 gb will fill up in about a week and second partitions will cause you no end 
of grief

Sent from my iPhone

On Jul 20, 2016, at 8:49 PM, Jason Sandys 
> wrote:
Why, oh why? Do you like causing pain? 30GB is not nearly enough anymore more 
an OS volume and having 2 volumes on anything but a server will cause you 
endless pain in the future and provide zero benefits.

J

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Fast, David D.
Sent: Wednesday, July 20, 2016 3:36 PM
To: mssms@lists.myitforum.com
Subject: [mssms] SCCM OSD task sequence - W10 with OS and DATA partitions

I am trying to create a bare metal / wipe and load task sequence for SCCM OSD 
of Windows 10 for deployment to systems with Legacy BIOS/MBR.  I need to 
configure the OSDrive partition for a set size of 30GB, with all remaining 
space assigned to an NTFS data partition.  How do I need to configure the 
partition settings in the task sequence?  I have a task sequence that runs all 
the way through to completion with no errors, but when the system gets rebooted 
there is “no operating system found”.

Thanks,

David



The information transmitted is intended only for the person or entity to which 
it is addressed and may contain confidential and/or privileged material. Any 
review, retransmission, dissemination or other use of, or taking of any action 
in reliance upon this information by persons or entities other than the 
intended recipient is prohibited. If you received this in error, please contact 
the sender and delete the material from any computer.



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] RE: SCCM OSD task sequence - W10 with OS and DATA partitions

[Marable, Mike]

Here is what we used to use.

Format and Partition Disk
[cid:image001.png@01D1E321.375442F0]
We would use an 80GB partition for the OS and applications.  That was starting 
to come up sort as some of our larger applications became even larger.  So I 
don’t think 30GB is ever going to work.  Personally, if it were me, I would use 
at least 100GB for the OS partition, at least.  In our environment we started 
to install applications on the Data partition simply because the OS partition 
wasn’t big enough.  Our decision to go with 80GB 7+ years ago wasn’t enough any 
longer.

In the properties of the OS-APPS partition we would specify a variable for SCCM 
to track the drive letter. Just like Andrew said in his email.
[cid:image002.png@01D1E321.375442F0]

Finally, in the Apply Operating System action we specified to apply the image 
to the drive stored in that variable (just like Andrew).
[cid:image003.png@01D1E322.9F983280]

Again though, it was a lot of headaches to maintain dual partitions.  It 
required a lot of special code on our part to “handle” it in our task sequence. 
 For example, since the goal of the dual partition was that the users’ folders 
were redirected on a rebuild we would leave that partition untouched.  So, that 
meant we could not repartition the drive (or we would lose all the users’ 
data).  We had to put all sorts of checks and conditions and custom scripts 
that would allow the tech building the machine the option to reparation the 
drive, turning on/off USMT backups, backing up only application settings off of 
the C drive while ignoring D, manually formatting the C drive… It goes on and 
on.

Using just a single partition simplified it for us.  Every build repartitions 
the disk and the tech just has to decide if they want to use USMT to migrate 
data and settings.  No special scripts to handle one partition or the other.

Hope this helps.

Mike



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marable, Mike
Sent: Thursday, July 21, 2016 6:32 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: SCCM OSD task sequence - W10 with OS and DATA 
partitions

It is true.  I can tell you from experience that multipartitions can be a 
headache.  I only recently was able to convince work to go back to a single 
partition and it simplifies our build so much.

I’ll be in the office shortly, so I can send you what we were doing if that 
will help.

From: <listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> 
on behalf of Andreas Hammarskjöld 
<jun...@2pintsoftware.com<mailto:jun...@2pintsoftware.com>>
Reply-To: "mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>" 
<mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>
Date: Thursday, July 21, 2016 at 2:38 AM
To: "mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>" 
<mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>
Subject: [mssms] RE: SCCM OSD task sequence - W10 with OS and DATA partitions

+11 the rest of the world stopped with multipart after NT4! The some people 
didn’t get the memo and continued for a while with 2000/XP.

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Sandys
Sent: den 21 juli 2016 02:50
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: SCCM OSD task sequence - W10 with OS and DATA partitions

Why, oh why? Do you like causing pain? 30GB is not nearly enough anymore more 
an OS volume and having 2 volumes on anything but a server will cause you 
endless pain in the future and provide zero benefits.

J

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Fast, David D.
Sent: Wednesday, July 20, 2016 3:36 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] SCCM OSD task sequence - W10 with OS and DATA partitions

I am trying to create a bare metal / wipe and load task sequence for SCCM OSD 
of Windows 10 for deployment to systems with Legacy BIOS/MBR.  I need to 
configure the OSDrive partition for a set size of 30GB, with all remaining 
space assigned to an NTFS data partition.  How do I need to configure the 
partition settings in the task sequence?  I have a task sequence that runs all 
the way through to completion with no errors, but when the system gets rebooted 
there is “no operating system found”.

Thanks,

David



The information transmitted is intended only for the person or entity to which 
it is addressed and may contain confidential and/or privileged material. Any 
review, retransmission, dissemination or other use of, or taking of any action 
in reliance upon this information by persons or entities other than the 
intended recipient i

Re: [mssms] RE: SCCM OSD task sequence - W10 with OS and DATA partitions

[Marable, Mike]

It is true.  I can tell you from experience that multipartitions can be a 
headache.  I only recently was able to convince work to go back to a single 
partition and it simplifies our build so much.

I’ll be in the office shortly, so I can send you what we were doing if that 
will help.

From:  on behalf of Andreas Hammarskjöld 

Reply-To: "mssms@lists.myitforum.com" 
Date: Thursday, July 21, 2016 at 2:38 AM
To: "mssms@lists.myitforum.com" 
Subject: [mssms] RE: SCCM OSD task sequence - W10 with OS and DATA partitions

+11 the rest of the world stopped with multipart after NT4! The some people 
didn’t get the memo and continued for a while with 2000/XP.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jason Sandys
Sent: den 21 juli 2016 02:50
To: mssms@lists.myitforum.com
Subject: [mssms] RE: SCCM OSD task sequence - W10 with OS and DATA partitions

Why, oh why? Do you like causing pain? 30GB is not nearly enough anymore more 
an OS volume and having 2 volumes on anything but a server will cause you 
endless pain in the future and provide zero benefits.

J

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Fast, David D.
Sent: Wednesday, July 20, 2016 3:36 PM
To: mssms@lists.myitforum.com
Subject: [mssms] SCCM OSD task sequence - W10 with OS and DATA partitions

I am trying to create a bare metal / wipe and load task sequence for SCCM OSD 
of Windows 10 for deployment to systems with Legacy BIOS/MBR.  I need to 
configure the OSDrive partition for a set size of 30GB, with all remaining 
space assigned to an NTFS data partition.  How do I need to configure the 
partition settings in the task sequence?  I have a task sequence that runs all 
the way through to completion with no errors, but when the system gets rebooted 
there is “no operating system found”.

Thanks,

David



The information transmitted is intended only for the person or entity to which 
it is addressed and may contain confidential and/or privileged material. Any 
review, retransmission, dissemination or other use of, or taking of any action 
in reliance upon this information by persons or entities other than the 
intended recipient is prohibited. If you received this in error, please contact 
the sender and delete the material from any computer.



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: SCCM OSD task sequence - W10 with OS and DATA partitions

[Marable, Mike]

How do you have your format and partition action configured now?

We've just moved away from a similar setup. I'll dig out an older sequence to 
get some screenshots this evening if it will help. 

From: listsad...@lists.myitforum.com [listsad...@lists.myitforum.com] on behalf 
of Fast, David D. [david.f...@sedgwickcms.com]
Sent: Wednesday, July 20, 2016 3:36 PM
To: mssms@lists.myitforum.com
Subject: [mssms] SCCM OSD task sequence - W10 with OS and DATA partitions

I am trying to create a bare metal / wipe and load task sequence for SCCM OSD 
of Windows 10 for deployment to systems with Legacy BIOS/MBR.  I need to 
configure the OSDrive partition for a set size of 30GB, with all remaining 
space assigned to an NTFS data partition.  How do I need to configure the 
partition settings in the task sequence?  I have a task sequence that runs all 
the way through to completion with no errors, but when the system gets rebooted 
there is “no operating system found”.

Thanks,

David



The information transmitted is intended only for the person or entity to which 
it is addressed and may contain confidential and/or privileged material. Any 
review, retransmission, dissemination or other use of, or taking of any action 
in reliance upon this information by persons or entities other than the 
intended recipient is prohibited. If you received this in error, please contact 
the sender and delete the material from any computer.

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

Re: [mssms] Lenovo "Deployment Recipe Cards"

[Marable, Mike]

They’re actively adding content.  When I first checked after Steve’s email came 
in there was only Win7 and Win10 for most of the models.  Now I see Win7-32bit 
and 8.1 as well.

The content is growing quickly.

Hey, Dell and HP, this is really good info.  Hint  Hint….  ;-)

From:  on behalf of "dratl...@humana.com" 

Reply-To: "mssms@lists.myitforum.com" 
Date: Thursday, July 14, 2016 at 1:59 PM
To: "mssms@lists.myitforum.com" 
Subject: RE: [mssms] Lenovo "Deployment Recipe Cards"

Good on Lenovo!

Finally some SysAdmin stuff.

These links are in the bottom of the PDFs as well, pretty useful.

Current Drivers & HW Apps: http://lnv.gy/1KyVFbG
Provide Feedback: http://lnv.gy/1gxAqyK

Daniel Ratliff

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Steve Whitcher
Sent: Thursday, July 14, 2016 12:26 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Lenovo "Deployment Recipe Cards"

I just came across these by accident, and since they look moderately useful I 
thought I'd share them here.  Lenovo has been offering downloadable SCCM driver 
packs for a year or two.  Apparently they've also started putting together 1 
page PDF documents for various models with some quick reference info useful for 
working with them in SCCM.  These "Deployment Recipe Cards" are found at:

https://support.lenovo.com/us/en/documents/ht104042

Each PDF has info like

  *   the "Machine Type"
  *   example queries to use to build a collection based on the model number or 
bios
  *   links to the model specific SCCM driver packs both WinPE and full windows
  *   a list of "Hardware Apps" that are needed, with links to each, and the 
silent install commands for each
  *   other miscellaneous info & links under "special instructions"
It looks like the links in the PDF even point to the 'current' version of a 
given driver, and not whatever exact version was available at the time the pdf 
was created, so that's helpful.  Unfortunately, the X1 Carbon (20FB) model that 
I've been working with recently doesn't seem to have one of these documents 
yet, but I'm glad to see the effort they're putting into these at least, and 
hope that they continue.


Steve Whitcher
@neighborgeek
www.neighborgeek.com





The information transmitted is intended only for the person or entity to which 
it is addressed
and may contain CONFIDENTIAL material. If you receive this material/information 
in error,
please contact the sender and delete or destroy the material/information.
**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] SCCM Current Branch

[Marable, Mike]

+1

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jason Sandys
Sent: Tuesday, July 5, 2016 9:39 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] SCCM Current Branch

It’s never truly been broken. There are just a lot of caveats due to how the 
upgrades are/were published in WSUS along with things that the in-place upgrade 
scenario from a Windows perspective simply doesn’t handle gracefully (or at 
all). If you any actual control over the process, then an upgrade task sequence 
that enables you to do additional things is the way to go; examples include 
(but are not limited to) removing built-in store apps, dealing with third-party 
disk encryption or AV, injecting drivers, adding languages.

Thus, it is completely possible to use the built-in servicing successfully but 
in most corporate environments, due to the variety and complexity involved, the 
simplistic fire and forget upgrade is just not sufficient to handle all of 
these caveats.

I don’t think Microsoft has any explicit recommendation here at all. They’ve 
provided multiple technically viable paths and it’s up to you to choose which 
is best for your organization.

J

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Brian Illner
Sent: Tuesday, July 5, 2016 8:26 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] SCCM Current Branch

Is the Windows 10 Servicing feature still broken within SCCM?

Last instruction I had read from MS was to deploy the Win10 upgrades via the 
standard Software Updates, and not attempt the Servicing Plans yet.

BRIAN ILLNER | Canal Insurance Company
864.250.9227
864.679.2537 Fax
Visit canalinsurance.com for news and information.
[cid:image001.jpg@01D1D6B0.8B228AE0]
[cid:image002.jpg@01D1D6B0.8B228AE0]
WARNING:  As the information in this transmittal (including attachments, if 
any) may contain confidential, proprietary, or business trade secret 
information, it should only be reviewed by those who are the intended 
recipients.  Unless you are an intended recipient, any review, use, disclosure, 
distribution or copying of this transmittal (or any attachments) is strictly 
prohibited.   If you have received this transmittal in error, please notify me 
immediately by reply email and destroy all copies of the transmittal.  While 
Canal believes this transmittal to be free of virus or other defect, it is the 
responsibility of the recipient to ensure that it is virus free and no 
responsibility is accepted by Canal (or its subsidiaries and affiliates) for 
any loss or damage arising therefrom.
From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Juelich, Adam
Sent: Tuesday, July 5, 2016 8:54 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] SCCM Current Branch

CB is 1602, and the TP release is 1606 I believe.


---

Adam Juelich

Pulaski Community School District

Client Management Specialist

920-822-6075

On Tue, Jul 5, 2016 at 7:12 AM, David Jones 
> wrote:
Right now, what is the Current Branch and what is the latest 'in between for 
the bleeding edge folks' release?






The Pulaski Community School District does not discriminate on the basis of any 
characteristic protected under State or Federal law.



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [External] [mssms] RE: [MDT-OSD] Does OSDApplyOS.exe log anywhere?

[Marable, Mike]

Very true. 
Right now I kick in the High Performance setting immediately prior to applying 
the image. That seems to be the one noticable slowdown. I think I'll keep it at 
that and not add the setting throughout. It's a good point, Andreas. It's 
better to be safe than sorry. 

From: listsad...@lists.myitforum.com [listsad...@lists.myitforum.com] on behalf 
of Andreas Hammarskjöld [jun...@2pintsoftware.com]
Sent: Wednesday, June 15, 2016 4:03 AM
To: mssms@lists.myitforum.com
Subject: RE: [External] [mssms] RE: [MDT-OSD] Does OSDApplyOS.exe log anywhere?

Win10 PE has powercfg.exe so it’s a one liner in the TS for peeps not using PS 
in their images.

Be aware though that WinPE might be missing pieces to detect that the CPU gets 
too warm and you might run into BSOD’s.

//A

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marable, Mike
Sent: den 15 juni 2016 04:39
To: mssms@lists.myitforum.com
Subject: Re: [External] [mssms] RE: [MDT-OSD] Does OSDApplyOS.exe log anywhere?

This might be handy.  Maybe I’ll give that a try too.  The end result is the 
same, but the one-liner is a little “clearer” than the GUID for when others 
have to work on the task sequence.



From: <listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> 
on behalf of "Bradley, Matt" 
<mbrad...@quiktrip.com<mailto:mbrad...@quiktrip.com>>
Reply-To: "mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>" 
<mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>
Date: Tuesday, June 14, 2016 at 3:56 PM
To: "mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>" 
<mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>
Subject: RE: [External] [mssms] RE: [MDT-OSD] Does OSDApplyOS.exe log anywhere?

A person further down on that page in the comments section said he was able to 
get the same power change benefits by using a one line PowerShell command:

(gwmi -NS rootcimv2power -Class win32_PowerPlan -Filter "ElementName ='High 
Performance'").Activate()

He placed it in different parts of the task sequence and reduced him image time 
significantly.

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Tuesday, June 14, 2016 10:14 AM
To: mdt...@lists.myitforum.com<mailto:mdt...@lists.myitforum.com>; 
mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [External] [mssms] RE: [MDT-OSD] Does OSDApplyOS.exe log anywhere?

That seemed to do the trick!  I’m testing it side by side with two machines and 
the decompression/application of the image flew on the machine where I used 
this hack.

Thanks Keith!  I owe  you one!!


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Keith Garner (Hotmail)
Sent: Monday, June 13, 2016 11:51 AM
To: mdt...@lists.myitforum.com<mailto:mdt...@lists.myitforum.com>; 
mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [MDT-OSD] Does OSDApplyOS.exe log anywhere?

You might try the Power Management hack for WinPE:

https://blogs.technet.microsoft.com/deploymentguys/2015/03/26/reducing-windows-deployment-time-using-power-management/

That won’t speed up the NIC, or the SSD, but it will speed up the processor, 
which in this case is processing the decompression from the WIM file.


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Saturday, June 11, 2016 8:39 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>; 
mdt...@lists.myitforum.com<mailto:mdt...@lists.myitforum.com>
Subject: [MDT-OSD] Does OSDApplyOS.exe log anywhere?

I’m trying to troubleshoot some slow performance when applying the image during 
an OS deployment since upgrading our site to SCCM 1511.

The WIM file is downloaded rapidly from the Distribution Points to the local 
cache, but when SCCM begins applying it to the hard drive it seems to slow way 
down.  Below is the SMSTS log of a sample machine.  It took a little over 20 
minutes to apply the ~6GB image and this was on an SSD.  I have seen it take 
well over a few hours for the image to apply (again on an SSD), so while the 20 
minutes in this log may not seem too bad, there is definitely a problem I need 
to get sorted out.

Is there any logging that would show what is happening between the two 
highlighted log entries?


[cid:image001.png@01D1C6EC.D04920D0]

 Thanks

Mike Marable
Microsoft Systems Engineer Lead
Enterprise Device Engineering and Management
MCPS, MCITP, MCTS, MCSA, MCSE, MS  
[Profile<http://www.mycertprofile.com/Profile/5319166625>] 
[Blog<http://thesystemsmonkey.wordpress.com/>

Re: [External] [mssms] RE: [MDT-OSD] Does OSDApplyOS.exe log anywhere?

[Marable, Mike]

This might be handy.  Maybe I’ll give that a try too.  The end result is the 
same, but the one-liner is a little “clearer” than the GUID for when others 
have to work on the task sequence.



From: <listsad...@lists.myitforum.com> on behalf of "Bradley, Matt" 
<mbrad...@quiktrip.com>
Reply-To: "mssms@lists.myitforum.com" <mssms@lists.myitforum.com>
Date: Tuesday, June 14, 2016 at 3:56 PM
To: "mssms@lists.myitforum.com" <mssms@lists.myitforum.com>
Subject: RE: [External] [mssms] RE: [MDT-OSD] Does OSDApplyOS.exe log anywhere?

A person further down on that page in the comments section said he was able to 
get the same power change benefits by using a one line PowerShell command:

(gwmi -NS rootcimv2power -Class win32_PowerPlan -Filter "ElementName ='High 
Performance'").Activate()

He placed it in different parts of the task sequence and reduced him image time 
significantly.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marable, Mike
Sent: Tuesday, June 14, 2016 10:14 AM
To: mdt...@lists.myitforum.com; mssms@lists.myitforum.com
Subject: [External] [mssms] RE: [MDT-OSD] Does OSDApplyOS.exe log anywhere?

That seemed to do the trick!  I’m testing it side by side with two machines and 
the decompression/application of the image flew on the machine where I used 
this hack.

Thanks Keith!  I owe  you one!!


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Keith Garner (Hotmail)
Sent: Monday, June 13, 2016 11:51 AM
To: mdt...@lists.myitforum.com<mailto:mdt...@lists.myitforum.com>; 
mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [MDT-OSD] Does OSDApplyOS.exe log anywhere?

You might try the Power Management hack for WinPE:

https://blogs.technet.microsoft.com/deploymentguys/2015/03/26/reducing-windows-deployment-time-using-power-management/

That won’t speed up the NIC, or the SSD, but it will speed up the processor, 
which in this case is processing the decompression from the WIM file.


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Saturday, June 11, 2016 8:39 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>; 
mdt...@lists.myitforum.com<mailto:mdt...@lists.myitforum.com>
Subject: [MDT-OSD] Does OSDApplyOS.exe log anywhere?

I’m trying to troubleshoot some slow performance when applying the image during 
an OS deployment since upgrading our site to SCCM 1511.

The WIM file is downloaded rapidly from the Distribution Points to the local 
cache, but when SCCM begins applying it to the hard drive it seems to slow way 
down.  Below is the SMSTS log of a sample machine.  It took a little over 20 
minutes to apply the ~6GB image and this was on an SSD.  I have seen it take 
well over a few hours for the image to apply (again on an SSD), so while the 20 
minutes in this log may not seem too bad, there is definitely a problem I need 
to get sorted out.

Is there any logging that would show what is happening between the two 
highlighted log entries?


[cid:image001.png@01D1C68D.895EB9F0]

 Thanks

Mike Marable
Microsoft Systems Engineer Lead
Enterprise Device Engineering and Management
MCPS, MCITP, MCTS, MCSA, MCSE, MS  
[Profile<http://www.mycertprofile.com/Profile/5319166625>] 
[Blog<http://thesystemsmonkey.wordpress.com/>]

“Impossible is just a big word thrown around by small men who find it easier to 
live in the world they've been given than to explore the power they have to 
change it. Impossible is not a fact. It's an opinion. Impossible is not a 
declaration. It's a dare. Impossible is potential. Impossible is temporary. 
Impossible is nothing.”
- Muhammad Ali

“Only those who risk going too far can possibly find out how far one can go.”
- T.S. Eliot



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: [MDT-OSD] Does OSDApplyOS.exe log anywhere?

[Marable, Mike]

That seemed to do the trick!  I’m testing it side by side with two machines and 
the decompression/application of the image flew on the machine where I used 
this hack.

Thanks Keith!  I owe  you one!!


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Keith Garner (Hotmail)
Sent: Monday, June 13, 2016 11:51 AM
To: mdt...@lists.myitforum.com; mssms@lists.myitforum.com
Subject: RE: [MDT-OSD] Does OSDApplyOS.exe log anywhere?

You might try the Power Management hack for WinPE:

https://blogs.technet.microsoft.com/deploymentguys/2015/03/26/reducing-windows-deployment-time-using-power-management/

That won’t speed up the NIC, or the SSD, but it will speed up the processor, 
which in this case is processing the decompression from the WIM file.


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Saturday, June 11, 2016 8:39 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>; 
mdt...@lists.myitforum.com<mailto:mdt...@lists.myitforum.com>
Subject: [MDT-OSD] Does OSDApplyOS.exe log anywhere?

I’m trying to troubleshoot some slow performance when applying the image during 
an OS deployment since upgrading our site to SCCM 1511.

The WIM file is downloaded rapidly from the Distribution Points to the local 
cache, but when SCCM begins applying it to the hard drive it seems to slow way 
down.  Below is the SMSTS log of a sample machine.  It took a little over 20 
minutes to apply the ~6GB image and this was on an SSD.  I have seen it take 
well over a few hours for the image to apply (again on an SSD), so while the 20 
minutes in this log may not seem too bad, there is definitely a problem I need 
to get sorted out.

Is there any logging that would show what is happening between the two 
highlighted log entries?


[cid:image001.png@01D1C62D.D03BC120]

 Thanks

Mike Marable
Microsoft Systems Engineer Lead
Enterprise Device Engineering and Management
MCPS, MCITP, MCTS, MCSA, MCSE, MS  
[Profile<http://www.mycertprofile.com/Profile/5319166625>] 
[Blog<http://thesystemsmonkey.wordpress.com/>]

“Impossible is just a big word thrown around by small men who find it easier to 
live in the world they've been given than to explore the power they have to 
change it. Impossible is not a fact. It's an opinion. Impossible is not a 
declaration. It's a dare. Impossible is potential. Impossible is temporary. 
Impossible is nothing.”
- Muhammad Ali

“Only those who risk going too far can possibly find out how far one can go.”
- T.S. Eliot



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues
**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: Guidance on provisioning drivers in Windows 10 upgrade task sequence?

[Marable, Mike]

It sounds like you are talking about Johan's post., "Improving the ConfigMgr 
Inplace-Upgrade Task Sequence"

http://deploymentresearch.com/Research/Post/533/Improving-the-ConfigMgr-Inplace-Upgrade-Task-Sequence

Hope this helps.
Mike



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of RJ Subscriber
Sent: Monday, June 13, 2016 10:03 PM
To: SCCM List 
Subject: [mssms] Guidance on provisioning drivers in Windows 10 upgrade task 
sequence?


Hi, I believe there was some guidance posted recently about provisioning 
drivers in the upgrade step for Win10 upgrading using SCCM but I can't find the 
link.  Can the author please post that assistance again?  It was very helpful 
in advising how to use the compatibility scan and the related TS variable 
SMSTSOSUpgradeActionReturnCode, etc.



Thank you!

Russell

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] Does OSDApplyOS.exe log anywhere?

[Marable, Mike]

I’m trying to troubleshoot some slow performance when applying the image during 
an OS deployment since upgrading our site to SCCM 1511.

The WIM file is downloaded rapidly from the Distribution Points to the local 
cache, but when SCCM begins applying it to the hard drive it seems to slow way 
down.  Below is the SMSTS log of a sample machine.  It took a little over 20 
minutes to apply the ~6GB image and this was on an SSD.  I have seen it take 
well over a few hours for the image to apply (again on an SSD), so while the 20 
minutes in this log may not seem too bad, there is definitely a problem I need 
to get sorted out.

Is there any logging that would show what is happening between the two 
highlighted log entries?


[cid:image001.png@01D1C43A.698A65C0]

 Thanks

Mike Marable
Microsoft Systems Engineer Lead
Enterprise Device Engineering and Management
MCPS, MCITP, MCTS, MCSA, MCSE, MS  
[Profile] 
[Blog]

“Impossible is just a big word thrown around by small men who find it easier to 
live in the world they've been given than to explore the power they have to 
change it. Impossible is not a fact. It's an opinion. Impossible is not a 
declaration. It's a dare. Impossible is potential. Impossible is temporary. 
Impossible is nothing.”
- Muhammad Ali

“Only those who risk going too far can possibly find out how far one can go.”
- T.S. Eliot


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] SCCM 1511 OSD - Applying Image Agonizingly Slow

[Marable, Mike]

We've recently completed upgrading our SCCM environment to 1511 (plus MDT 2013 
U2 and ADK 10-RTM).  I'm finding that during an OS deployment applying the 
image is incredibly slow.  The WIM file downloads very quickly from the DP to 
the local SCCM cache, but when it is then applied from there it slows to a 
crawl.

In fact, I have seen times when it just stalls out and never completes.

This didn't happen when we were running 2012 R2 with MDT 2013 and ADK 8.1.

Anyone else experience this?

Mike Marable
Microsoft Systems Engineer Lead
Enterprise Device Engineering and Management
MCPS, MCITP, MCTS, MCSA, MCSE, MS  
[Profile] 
[Blog]

"You've got to fight the fear because fear ain't bigger than you."
 - Eric Thomas

"When you were born, you cried and the world rejoiced.
Live your life so that when you die, the world cries and you rejoice."
 - White Elk


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] Add Users To Multiple Collections

[Marable, Mike]

If you are using SCCM 2012 and are going to be adding a user to the same set of 
user collections you could do this:

$UID = (Get-CMUser -Name Neptune\Bob (Bob)).ResourceID
Add-CMUserCollectionDirectMembershipRule -CollectionName Collection1 
-ResourceId $UID
Add-CMUserCollectionDirectMembershipRule -CollectionName Collection2 
-ResourceId $UID
Add-CMUserCollectionDirectMembershipRule -CollectionName Collection3 
-ResourceId $UID
Add-CMUserCollectionDirectMembershipRule -CollectionName Collection4 
-ResourceId $UID

I may be over simplifying it, but this should get you started.

Mike

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marable, Mike
Sent: Tuesday, April 07, 2015 7:46 AM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] Add Users To Multiple Collections

Suzzi,

Are you looking to add a user to the same set of collections each time?  For 
example, whenever a new employee starts their user ID would be added to these 4 
specific collections?

Mike


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Suzzi Williams
Sent: Tuesday, April 07, 2015 6:21 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Add Users To Multiple Collections

Hi guys

I have seen lots of scripts to add computers or users to collections. I am 
looking for a script to add a single user to multiple collections, has any one 
seen something like this? or has some one got one?

Thanks

Suz x


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] Add Users To Multiple Collections

[Marable, Mike]

Suzzi,

Are you looking to add a user to the same set of collections each time?  For 
example, whenever a new employee starts their user ID would be added to these 4 
specific collections?

Mike


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Suzzi Williams
Sent: Tuesday, April 07, 2015 6:21 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Add Users To Multiple Collections

Hi guys

I have seen lots of scripts to add computers or users to collections. I am 
looking for a script to add a single user to multiple collections, has any one 
seen something like this? or has some one got one?

Thanks

Suz x

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] Return Codes - PowerShell - SCCM 2012

[Marable, Mike]

The app returns a 15 when it successfully installs?

How is it being deployed?  If you have a wrapper script that could receive the 
RC=15 from the application's installer and then return a 0 back to SCCM.

Mike

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Robert Spinelli
Sent: Tuesday, April 07, 2015 11:33 AM
To: mssms
Subject: [mssms] Return Codes - PowerShell - SCCM 2012

Anyone know how to modify/add return codes for a deployment type?  If we have 
an app that needs return code 15 = Success (no reboot) is that something that I 
can set via PowerShell?  I can't seem to find how to do this.

Thanks

Rob

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

Re: [mssms] RE: Exclude VPN computers from Task Sequence application deployment.

[Marable, Mike]

Daniel is right, the collections would not be able to keep pace with users 
roaming.

Depending on how your network is set up you could put a check for the IP 
address at the start of your task sequence.  If the client falls in the range 
of your VPN connected addresses you could exit out of the sequence.

We do something similar in our build task sequence.  In our situation we have a 
number of remote sites with slow WAN connections.  We have a script that takes 
the client’s IP address and looks it up in a table to identify if it is in one 
of these “slow” sites and if so which one.  We then take actions based upon 
that.  In our case leveraging NomadBranch in those sites.

Mike



From: Gannon, Todd todd.gan...@cbh.com.aumailto:todd.gan...@cbh.com.au
Reply-To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com 
mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Date: Wednesday, April 1, 2015 at 9:09 PM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com 
mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] RE: Exclude VPN computers from Task Sequence application 
deployment.

Thanks for that.
So are you saying putting conditions on the first step of the ts?

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Daniel Ratliff
Sent: Thursday, 2 April 2015 8:21 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] RE: Exclude VPN computers from Task Sequence application 
deployment.

If your environment is anything like ours, the collections wont keep up with 
the roaming clients. I would control this entirely at the local level, put some 
checks in your task sequence and slowly hit all the machines as they come on 
and off the network.

Daniel Ratliff

From:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Gannon, Todd
Sent: Wednesday, April 1, 2015 7:57 PM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] Exclude VPN computers from Task Sequence application 
deployment.

Hello – In a few week’s time I will be deploying a new application to all 
computers in our organisation via a task sequence, and I would like to exclude 
vpn connected computers from receiving the deployment until they are in the 
office and connected via lan/wlan due to the fact that there is likely to be a 
reboot in the ts, amongst other things.
Without modifying current boundary set up, has anyone configured this 
successfully before? I was thinking that I could create a collection based on 
the vpn ip subnets and exclude this collection from the deployment collection 
but am open for advise if anyone has a better idea? Thanks Todd :)


The information transmitted is intended only for the person or entity to which 
it is addressed
and may contain CONFIDENTIAL material. If you receive this material/information 
in error,
please contact the sender and delete or destroy the material/information.


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

Re: [mssms] RE: #ConfigMgr: Automation from Zero to Hero

[Marable, Mike]

Yeah, nice bold cover.  Should attract a lot of attention.

From: dratl...@humana.commailto:dratl...@humana.com 
dratl...@humana.commailto:dratl...@humana.com
Reply-To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com 
mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Date: Friday, March 27, 2015 at 8:12 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com 
mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] RE: #ConfigMgr: Automation from Zero to Hero

Nice cover!

Daniel Ratliff

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Raphael Perez
Sent: Friday, March 27, 2015 8:00 AM
To: MyITForum SMS/SCCM 
(mssms@lists.myitforum.commailto:mssms@lists.myitforum.com)
Subject: [mssms] #ConfigMgr: Automation from Zero to Hero

Hi All,

Great day today as I just finished writing and reviewing my ConfigMgr 
Automation book, it should be available in a couple of months. I submitted it 
to get preview printed so, now it is time to relax for couple of weeks in a 
nice beach in Brazil :)

A small post and a book cover here http://bit.ly/1EIEH7n


[cid:image001.jpg@01CFAD78.336EE4A0]

[cid:image002.png@01CFAD78.336EE4A0]


Raphael Perez
System Center Specialist  | Microsoft MVP
E-mail:raph...@rflsystems.co.ukmailto:raph...@rflsystems.co.uk
SIP: raph...@rflsystems.co.uksip:raph...@rflsystems.co.uk

MCP, MCSA Security, MCSE Security, MCTS, MCITP, MCT
www.rflsystems.co.ukhttp://www.rflsystems.co.uk/ | 
www.thedesktopteam.com/raphaelhttp://www.thedesktopteam.com/raphael|SystemCenter.cohttp://www.systemcenter.co/





The information transmitted is intended only for the person or entity to which 
it is addressed
and may contain CONFIDENTIAL material. If you receive this material/information 
in error,
please contact the sender and delete or destroy the material/information.

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] Splitting Domain and SCCM

[Marable, Mike]

You could migrate as much as possible between the two sites.  We do that to 
move things between our development and production sites.

The package sources will need to be cleaned up but you can use PowerShell to do 
that easily enough.

I’m not positive just what can and cannot be migrated.

The other problem will be the package IDs will all be from the original site.

It won’t be the prettiest but it will at least get you going.

Mike



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Todd Hemsell
Sent: Monday, March 16, 2015 11:42 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Splitting Domain and SCCM

Our company is splitting up so I need to create a new SCCM server and copy all 
of the applications over to it.

Also need to migrate SCEP polices and such.

I am planning on using PS to export and import the applications. Was wondering 
what the other opinions might be?

/Todd

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: UEFI/GPT on Windows 7

[Marable, Mike]

We’re the same way.  Legacy BIOs for us as well.  We do get systems from HP 
that have UEFI turned on and the techs have to manually switch back to BIOs to 
build.

Like John, we need to get rolling on supporting  UEFI here soon.



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of John Aubrey
Sent: Thursday, March 05, 2015 2:18 PM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: UEFI/GPT on Windows 7

Everything is legacy BIOS for us.  We do have a few touchscreen kiosk type 
systems that are UEFI.  Those were hand done by the IT minions with Windows 8.1 
disc. Probably need to start the ball rolling on UEFI.  I think our Dell’s we 
but ship with Legacy, not 100% sure.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Underwood, Bob
Sent: Thursday, March 5, 2015 1:36 PM
To: mssms@lists.myitforum.com
Subject: [mssms] UEFI/GPT on Windows 7

Hey folks –

Just an informal survey… what is your approach for systems running in UEFI mode 
in your environments?  (Do you allow your process to deploy in whatever mode 
the machine is in?  Do you force a particular mode?)  And related to that, what 
about GPT formatted system disks?

With Windows 8, we standardized on UEFI/GPT for all deployments, but have stuck 
to Legacy BIOS for Windows 7 deployments.  To ease the (eventual) transition to 
Windows 10, we’re considering making the switch to UEFI for Windows 7 on 
Broadwell going forward.  Just wanted to get a sense for what others are doing 
and what (if any) problems you’ve encountered with things like drivers and 
other standard processes.

Thanks!


[CONFIDENTIALITY AND PRIVACY NOTICE] Information transmitted by this email is 
proprietary to Medtronic and is intended for use only by the individual or 
entity to which it is addressed, and may contain information that is private, 
privileged, confidential or exempt from disclosure under applicable law. If you 
are not the intended recipient or it appears that this mail has been forwarded 
to you without proper authority, you are notified that any use or dissemination 
of this information in any manner is strictly prohibited. In such cases, please 
delete this mail from your records. To view this notice in other languages you 
can either select the following link or manually copy and paste the link into 
the address bar of a web browser: http://emaildisclaimer.medtronic.com


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

Re: [mssms] RE: (OT) Vendor list for Ignite?

[Marable, Mike]

For me the biggest fear is access to the technology.  Right now I have free and 
unlimited access to Configuration Manager.  I can download the evaluation 
software and build as many labs as I need.

Once I burn an Intune evaluation (and I haven’t tried yet so fear of the 
unknown…) can I sign up for another eval using my same email of do will I need 
to set up throw away email accounts to sign up using? If in the future having 
access to Azure and Intune subscriptions is a requirement that will become a 
barrier to those of us who do not have access to it.

It could become a world of the “haves” and the “have nots”.  If you’re a “have 
not” then you’re unable to learn the technologies and quickly become obsolete.

That is what worries me.

Mike


From: David O'Brien obrien.da...@outlook.commailto:obrien.da...@outlook.com
Reply-To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com 
mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Date: Friday, February 27, 2015 at 8:28 PM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com 
mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

What exactly is the scary bit here? (since I'm being quoted...)

Sent from my Windows Phone

From: Daniel Ratliffmailto:dratl...@humana.com
Sent: 28/02/2015 6:53 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?


A scary thought on Twitter this morning from Peter Egerton.



https://twitter.com/david_obrien/status/571068420298420225



Host the #configmgrhttps://twitter.com/hashtag/configmgr?src=hash site on 
Azure / Cloud and just have a DP on site. Would that be a bad thing?



Daniel Ratliff



From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Bill Bernat
Sent: Friday, February 27, 2015 2:09 PM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: Re: [mssms] RE: (OT) Vendor list for Ignite?



It’s a fascinating topic. Here’s a recent take from Brad Anderson: 
http://redmondmag.com/articles/2015/02/23/system-center-configuration-manager-future.aspx.



-billb



From: Andreas Hammarskjöld 
jun...@2pintsoftware.commailto:jun...@2pintsoftware.com
Reply-To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com 
mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Date: Friday, February 27, 2015 at 10:58 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com 
mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?



But also remember what wise men say: “One does not just migrate 20 years of 
code in to Mordor… sorry the Cloud”



MS focuses primarily on the Cloud right now, but we all know were few people 
actually use it. Does Intune even cover 1% of the ConfigMgr install base? And I 
am not talking purchased or licensed, I am talking about deployed.



So MS faces the options to put in a few years to make Intune better with zero 
new stuff in ConfigMgr, which will make existing customer base angry, making 
future sells harder. Alternative is to do a split where some like 70% goes 
towards the Cloud and 30% to keep customer happy enough. But that won’t make 
the “market” people as they want a good story and strong figures on cloud and 
market share in that. The lack of ConfigMgr sessions at these events since 
there are very few new features, i.e. not so much dev time for our friend 
ConfigMgr.



In my previous role at my old company I was in exactly the same spot as MS. I 
had to develop new things for the cloud, and still maintain good ol’ “slow 
moving software”. It’s not an easy game. MS will make most mistake’s again with 
Intune as they did with ConfigMgr, because people are like that. Writing new 
code generates bugs, period, since developers are human. So it will be slower 
than they think, and when no new stuff comes to existing platform owners they 
will start not to renew Enterprise deals since there is a lack of roadmap, 
people will raise hell internally. And then God knows what will happen.



So basically, Microsoft has to develop a kick-ass Intune with the same feature 
set that it took them 20 years to put into ConfigMgr + more. And this they have 
to do in a very short timeframe before losing new or existing customers. I 
think I recall that ConfigMgr 2012 was 9 million lines of code and the test 
tools had 4.5 million, so to finish in 5 years time they have to check in more 
than 12000 perfect lines of code each day. You do the math! :)



Anyhow, my 2 cents after having 2Pints! So conditions do apply, now off to 
pester mr Arwidmark and Mikael Nyström on Twitter!



//A



From:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Ed Aldrich
Sent: den 27 februari 2015 19:28
To: 

RE: [mssms] Mdt with sccm

[Marable, Mike]

Yes you can.  There are a number of ways to accomplish this.  You can run a 
simple script out of your task sequence that prompts for a computer name all 
the way up to a web front-end.

Here are some options to get you started:

http://www.windows-noob.com/forums/index.php?/topic/5542-how-can-i-easily-prompt-for-a-computer-name-in-configuration-manager-2012/

https://social.technet.microsoft.com/Forums/en-US/387fc73b-9362-4a27-ac0e-8291da76ab75/sccm-2012-prompt-for-user-name-and-computer-name-during-osd-deployment?forum=configmgrsetup

http://www.scconfigmgr.com/2013/10/02/prompt-for-computer-name-during-osd-with-powershell/
 


Mike


-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Hun boy
Sent: Friday, February 20, 2015 12:49 PM
To: Sms
Subject: [mssms] Mdt with sccm

Can I achieve if my target computer bios doesn't have serial number during OS 
deployment a wizard OR a popup should prompt to enter computer name...

Currently computers are getting name based on serial number of system... 
however few systems do not have bios entry and we wanted to give manually same 
as asset physical number as computer name manually...

Can it possible does any one done this with Sccm or with mdt??? Kindly share 
the same...

Sent from iPhonesorry for typos



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] RE: (OT) Vendor list for Ignite?

[Marable, Mike]

I have to second that.  My request was turned down because I couldn't show any 
value in going.  The promise/hope of adding more System Center sessions didn't 
justify the cost so the request was denied.

Unfortunately at this point it's too late.  I wish the final session catalog 
had been completed long ago.  If I could have shown management something 
concrete like the sessions I wanted to attend and how they would benefit the 
team it might have been different.

Mike



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Phil Wilcock
Sent: Thursday, February 19, 2015 1:08 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

That may be true - but even the ConfigMgr sessions that have been announced are 
99% level 300 or lower, so not much in depth.

And it's February! - Ignite is in May and they still haven't firmed up the 
sessions? I don't think so..

If you're planning to attend conferences as part of your training most folks 
need to know well in advance what's on so that they can get authorization and 
book hotels etc. or consider other conferences

Just go to MMS :)

Phil

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Harjit Dhaliwal
Sent: 19 February 2015 16:44
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: (OT) Vendor list for Ignite?

I think you are being a little swift with your assumptions.  The full session 
catalog has not been completed and Ignite has mentioned that they are going to 
be adding much more to the catalog including System Center stuff.  There are 
quite a few of us from the ConfigMgr community who will be attending the 
conference.

-Harjit
On 2/19/2015 11:36 AM, Andreas Hammarskjöld wrote:
Hey Ivan,

If you are looking for ConfigMgr integration Ignite might not be your best 
place to hunt. The total lack of ConfigMgr sessions have led to the ConfigMgr 
community already renamed the conference MS Ignore (for several reasons).

Might change, although unlikely, but damage is already done.

//A

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Troy Martin
Sent: den 19 februari 2015 17:24
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] RE: (OT) Vendor list for Ignite?

Hey Ivan,

Have them stop by the 1E booth.  In the meantime, check out our site - 
http://www.1e.com/appclarity-software-asset-management/


Thanks :)

Troy L. Martin | Product Manager, Endpoint Automation
Provision software, not infrastructure
US Mobile: +1 (678) 898-6147
UK Phone : +44 208 326 9141
troy.mar...@1e.commailto:troy.mar...@1e.com | www.1e.comhttp://www.1e.com/

[cid:image003.png@01D0422A.F408EE30]http://www.1e.com/  [Blog_Bling_Connect] 
http://ignite.microsoft.com/
[cid:image010.png@01D0422A.F408EE30]https://www.facebook.com/1Eglobal[cid:image011.png@01D0422A.F408EE30]https://twitter.com/1E_Global/[cid:image012.png@01D0422A.F408EE30]http://www.linkedin.com/company/1e[cid:image013.png@01D0422A.F408EE30]http://www.1e.com/blogs/index.php[cid:image014.png@01D0422A.F408EE30]http://blogs.1e.com/feed/[cid:image015.png@01D0422A.F408EE30]https://plus.google.com/+1EGlobal/posts

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Lindenfeld, Ivan
Sent: Thursday, February 19, 2015 10:57 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] (OT) Vendor list for Ignite?

I have a colleague in the ITAM space wanting to shop but needs to make sure 
hunting will be rich.  We don't see a vendor list on the Ignite web site.

It would go a long way toward justifying the trip.

Thanks for any pointers.

Ivan Lindenfeld


NOTICE: The information contained in this message is proprietary and/or 
confidential and may be privileged. If you are not the intended recipient of 
this communication, you are hereby notified to: (i) delete the message and all 
copies; (ii) do not disclose, distribute or use the message in any manner; and 
(iii) notify the sender immediately.





Legal Notice: This email is intended only for the person(s) to whom it is 
addressed. If you are not an intended recipient and have received this message 
in error, please notify the sender immediately by replying to this email or 
calling +44(0) 2083269015 (UK) or +1 866 592 4214 (USA). This email and any 
attachments may be privileged and/or confidential. The unauthorized use, 
disclosure, copying or printing of any information it contains is strictly 
prohibited. The opinions expressed in this email are those of the author and do 
not necessarily represent the views of 1E Ltd. Nothing in this email will 
operate to bind 1E to any order or other contract.





**
Electronic Mail is not secure, may 

[mssms] RE: (OT) Vendor list for Ignite?

[Marable, Mike]

+1



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Andreas Hammarskjöld
Sent: Thursday, February 19, 2015 11:37 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: (OT) Vendor list for Ignite?

Hey Ivan,

If you are looking for ConfigMgr integration Ignite might not be your best 
place to hunt. The total lack of ConfigMgr sessions have led to the ConfigMgr 
community already renamed the conference MS Ignore (for several reasons).

Might change, although unlikely, but damage is already done.

//A

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Troy Martin
Sent: den 19 februari 2015 17:24
To: mssms@lists.myitforum.com
Subject: [mssms] RE: (OT) Vendor list for Ignite?

Hey Ivan,

Have them stop by the 1E booth.  In the meantime, check out our site - 
http://www.1e.com/appclarity-software-asset-management/


Thanks :)

Troy L. Martin | Product Manager, Endpoint Automation
Provision software, not infrastructure
US Mobile: +1 (678) 898-6147
UK Phone : +44 208 326 9141
troy.mar...@1e.commailto:troy.mar...@1e.com | www.1e.comhttp://www.1e.com/

[cid:image003.png@01D0422A.F408EE30]http://www.1e.com/  [Blog_Bling_Connect] 
http://ignite.microsoft.com/
[cid:image010.png@01D0422A.F408EE30]https://www.facebook.com/1Eglobal[cid:image011.png@01D0422A.F408EE30]https://twitter.com/1E_Global/[cid:image012.png@01D0422A.F408EE30]http://www.linkedin.com/company/1e[cid:image013.png@01D0422A.F408EE30]http://www.1e.com/blogs/index.php[cid:image014.png@01D0422A.F408EE30]http://blogs.1e.com/feed/[cid:image015.png@01D0422A.F408EE30]https://plus.google.com/+1EGlobal/posts

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Lindenfeld, Ivan
Sent: Thursday, February 19, 2015 10:57 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] (OT) Vendor list for Ignite?

I have a colleague in the ITAM space wanting to shop but needs to make sure 
hunting will be rich.  We don't see a vendor list on the Ignite web site.

It would go a long way toward justifying the trip.

Thanks for any pointers.

Ivan Lindenfeld


NOTICE: The information contained in this message is proprietary and/or 
confidential and may be privileged. If you are not the intended recipient of 
this communication, you are hereby notified to: (i) delete the message and all 
copies; (ii) do not disclose, distribute or use the message in any manner; and 
(iii) notify the sender immediately.





Legal Notice: This email is intended only for the person(s) to whom it is 
addressed. If you are not an intended recipient and have received this message 
in error, please notify the sender immediately by replying to this email or 
calling +44(0) 2083269015 (UK) or +1 866 592 4214 (USA). This email and any 
attachments may be privileged and/or confidential. The unauthorized use, 
disclosure, copying or printing of any information it contains is strictly 
prohibited. The opinions expressed in this email are those of the author and do 
not necessarily represent the views of 1E Ltd. Nothing in this email will 
operate to bind 1E to any order or other contract.


**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

[mssms] RE: vmware build

[Marable, Mike]

What version of VMWare are you using?

If you have the option of Windows 7 for the guest OS then you should be good.  
The key hardware is the NIC, which if you select Win7 as the guest OS VMWare 
will use a standard Intel NIC (a default driver included with Windows).

You can get by without the VMWare Tools.  It will work.  You won't have the 
integration services but it'll work.  There's no harm in adding an install of 
the tools.  But it all depends on what you're looking to accomplish.  If you're 
using VMs for basic build testing then (in my opinion) don't worry about 
integrating the VMWare Tools.  On the other hand, if you're building production 
VMs perhaps in ESX then I would add the tools and install it as an application.

What drivers are you currently trying to install when it blows up?



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of David McSpadden
Sent: Thursday, February 5, 2015 12:13 PM
To: mssms@lists.myitforum.com
Subject: [mssms] vmware build

Trying to go through Windows-noob instructions and I have a vmware instead of 
hyper-v workstation (For a windows732bit) build.  Do I need to dump the vmware 
tools to a source for the device drivers?
It looks like in the smsts log that I am blowing up when it is trying to 
install device drivers.


This e-mail and any files transmitted with it are property of Indiana Members 
Credit Union, are confidential, and are intended solely for the use of the 
individual or entity to whom this e-mail is addressed. If you are not one of 
the named recipient(s) or otherwise have reason to believe that you have 
received this message in error, please notify the sender and delete this 
message immediately from your computer. Any other use, retention, 
dissemination, forwarding, printing, or copying of this email is strictly 
prohibited.


Please consider the environment before printing this email.

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] Vm create with desired NIC model

[Marable, Mike]

No.  Typically a virtualization product like VMWare or Hyper-V will just have a 
pre-defined network card model.  Usually it's some flavor of an Intel network 
card because often the drivers would be included in the default drivers 
included in the OS.

So, you couldn't create a VM with a virtualized Broadcom network card to try to 
mirror what your physical devices have. 

Mike



-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Hun boy
Sent: Wednesday, February 4, 2015 12:46 AM
To: Sms
Subject: [mssms] Vm create with desired NIC model

Can I create a VM with my desired network card model ?? And deploy OSD ?

Sent from iPhonesorry for typos



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] CM Powershell provider not available in current PS-session

[Marable, Mike]

I had a similar thing with some lab build scripts.  Once the primary server was 
built I had to open the admin console first before any of the SCCM PoSh cmdlets 
would work.  Almost like it had to be initialized first.

Mike



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Andreas Hammarskjöld
Sent: Monday, February 2, 2015 6:34 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] CM Powershell provider not available in current PS-session

Hi Roland,

You are probably running into the same issue that had me going nuts for a 
while. If you launch the admin console for that user before trying out the 
script it runs OK right?

//A

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Roland Janus
Sent: den 2 februari 2015 10:00
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] CM Powershell provider not available in current PS-session

I use PS to install all pre-reqs and CM itself, all working fine
The problem is that the CM cmdlets don't work because the current PS-session 
doesn't know about the CM provider:

Get-psdrive -psprovider cmsite
returns nothing, hence I can't use Set-location either

That's just for the current session, any new session works fine.
That didn't show before since I had to invoke new x86 sessions to run those 
CM-cmdlets anyway, but with R2CU2 the cmdlets are native x64, so I could use 
the same original session.
But that one doesn't know about the provider. I guess it's similar to 
env-variables in a CMD, where new values are unknown to the current cmd.

Is there a way to let that session know about the change, like a 
reload/refresh everything?
Or is there another way to use the cmdlets in that session anyway?

-roland



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] Can a Task Sequence determine if the client is in a slow boundary?

[Marable, Mike]

We had to use a script to sort it out.  We have a number of slow site 
boundaries, all IP range based.

What we have done is to export out the boundaries into a CSV with starting 
address, ending address and name.  During the task sequence we run a script 
that takes the IP address of the machine and looks it up within the CSV file.  
If it find that its IP address falls within one of the boundaries we set a task 
sequence variable that we can key off of showing that it is inside a slow 
boundary.

There may be more elegant ways of doing it but it works for us.

Mike



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Roland Janus
Sent: Thursday, January 22, 2015 9:17 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Can a Task Sequence determine if the client is in a slow 
boundary?

Bump?


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Roland Janus
Sent: Mittwoch, 21. Januar 2015 15:03
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] Can a Task Sequence determine if the client is in a slow 
boundary?

You guys have an idea on that?
Does a running TS provide somewhere if it is running using a slow boundary?

-Roland



**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

Re: [mssms] RE: Tracking down Device Collection

[Marable, Mike]

PowerShell could help too.

Sorry I'm working from memory but I think it would be something like:

Get-CMDeviceCollection -Name name of your collection


Sent from my iPhone

On Jan 22, 2015, at 10:45 AM, Daniel Ratliff 
dratl...@humana.commailto:dratl...@humana.com wrote:

Click All Subfolders in the top left when you click in the search box.

Daniel Ratliff

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Bradley, Matt
Sent: Thursday, January 22, 2015 10:30 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] Tracking down Device Collection

Am I crazy, or is there just no way to search ALL device collections by name?  
I went to create a device collection and it says it already exists, yet I can’t 
find it in any of my folders.  I can’t seem to find a way to search by name, 
other than searching against my present view.



The information transmitted is intended only for the person or entity to which 
it is addressed
and may contain CONFIDENTIAL material. If you receive this material/information 
in error,
please contact the sender and delete or destroy the material/information.

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues 

RE: [mssms] Can a Task Sequence determine if the client is in a slow boundary?

[Marable, Mike]

No, it was all tied to Nomad.

If a machine was found to be in a slow site boundary that would trigger all of 
the Nomad actions (installing the client in WinPE, pre-caching content, using 
Peer Backup Assistant, etc.)

If the script found that the IP address of the machine fell within one of the 
IP ranges of our slow boundaries we would set a task sequence variable 
SlowSite to TRUE.  Then all of the Nomad related actions would key off of 
that variable.

Mike



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Daniel Ratliff
Sent: Thursday, January 22, 2015 9:26 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Can a Task Sequence determine if the client is in a slow 
boundary?

What did you do in the TS? Kill it?

Daniel Ratliff

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Thursday, January 22, 2015 9:23 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] Can a Task Sequence determine if the client is in a slow 
boundary?

We had to use a script to sort it out.  We have a number of slow site 
boundaries, all IP range based.

What we have done is to export out the boundaries into a CSV with starting 
address, ending address and name.  During the task sequence we run a script 
that takes the IP address of the machine and looks it up within the CSV file.  
If it find that its IP address falls within one of the boundaries we set a task 
sequence variable that we can key off of showing that it is inside a slow 
boundary.

There may be more elegant ways of doing it but it works for us.

Mike



From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Roland Janus
Sent: Thursday, January 22, 2015 9:17 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] Can a Task Sequence determine if the client is in a slow 
boundary?

Bump?


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Roland Janus
Sent: Mittwoch, 21. Januar 2015 15:03
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] Can a Task Sequence determine if the client is in a slow 
boundary?

You guys have an idea on that?
Does a running TS provide somewhere if it is running using a slow boundary?

-Roland




**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues


The information transmitted is intended only for the person or entity to which 
it is addressed
and may contain CONFIDENTIAL material. If you receive this material/information 
in error,
please contact the sender and delete or destroy the material/information.

**
Electronic Mail is not secure, may not be read every day, and should not be 
used for urgent or sensitive issues