Re: [mssms] April 2017 - Microsoft security updates?

[s kissel]

Microsoft does not recommend turning off upgrades in SCCM environments at this 
point since that will expire all of the upgrades in SCCM environments until the 
upgrades classification is rechecked and resynced. If you really need to get 
the updates synced, you can attempt this but note that it will affect current 
deployments of updates in that classification.
If you have a “WSUS only” environment, unchecking the upgrades classification 
temporarily will not cause issues to current deployments.

Otherwise the recommendation is to retry syncs again at a later time as several 
that failed initially have gone through after a wait.



From: listsad...@lists.myitforum.com  on behalf 
of Andre Vrankovic 
Sent: Tuesday, April 11, 2017 6:08:38 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] April 2017 - Microsoft security updates?

Had the same issue, disabling the upgrade classification has worked for us.

On Wed, Apr 12, 2017 at 7:15 AM, HELMS, DAVID C 
mailto:dahe...@scana.com>> wrote:
Thanks.  I also see that Microsoft is no longer doing the monthly bulletins but 
now using a Security Updates portal.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] 
On Behalf Of Steve Whitcher
Sent: Tuesday, April 11, 2017 4:49 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] April 2017 - Microsoft security updates?

***This is an EXTERNAL email. Please do not click on a link or open any 
attachments unless you are confident it is from a trusted source.


http://myitforum.com/myitforumwp/2017/04/11/errors-during-wsus-update-synchronization-for-april-2017-updates/


On Tue, Apr 11, 2017 at 3:32 PM, HELMS, DAVID C 
mailto:dahe...@scana.com>> wrote:
Has Microsoft released the security updates for April 2017?  Not seeing the 
April 2017 Security bulletin talking about what is being released.

[mssms] Re: SQL Server Tcp is enabled and set to Static port

[s kissel]

Is the SQL Browser service started?


From: listsad...@lists.myitforum.com  on behalf 
of Duncan McAlynn 
Sent: Wednesday, January 4, 2017 12:55:28 PM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: SQL Server Tcp is enabled and set to Static port

See my last bullet item in the Configuration.

Duncan McAlynn, Solutions Director, Americas
HEAT Software
M: +1.512.391.9111 | 
duncan.mcal...@heatsoftware.com
HEAT Software |  490 N McCarthy Blvd. Suite 100 | Milpitas, CA 95035

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Kamerman, Sol
Sent: Wednesday, January 04, 2017 12:51
To: mssms@lists.myitforum.com
Subject: [mssms] RE: SQL Server Tcp is enabled and set to Static port

One more thing... When I had this setup, I had to make the SCCM server object 
an ADMINISTRATOR on the SQL box.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Duncan McAlynn
Sent: Wednesday, January 4, 2017 12:32 PM
To: mssms@lists.myitforum.com
Subject: [mssms] SQL Server Tcp is enabled and set to Static port

I'm about to go mental over this one! Any help would be greatly appreciated, 
y'all! Thanks in advance.

Configuration:

  *   New CB1606 site installation on CM01
  *   Remote SQL 2014 default instance on SQL01
  *   Both servers are Windows Server 2012 R2. (Fully patched)
  *   *ALL* SQL IPs are enabled and configured for port 1433
  *   Setup executed as a Domain Admin
  *   CM01$ is local admin on SQL01 and SysAdmin in SQL

Issue:
This prerequisite checker fails on the SQL validation. The exact error message 
is: "Configuration Manager primary site and central administration site require 
SQL Server Tcp is enabled and set to Static port."

Relative Log Entries from ConfigMgrPreReq.log:
?<01-04-2017 10:47:35> SQL01.patchlink.corp;SQL Server version;Passed
?<01-04-2017 10:47:35> ERROR:Can not get sql instance regkey.
?<01-04-2017 10:47:35> ERROR:Failed to get Sql edition, Sql 
Server:SQL01.patchlink.corp, instance:.
?<01-04-2017 10:47:35> SQL01.patchlink.corp;SQL Server Edition;Passed
?<01-04-2017 10:47:35> INFO: Checking Tcp is enabled to Static port, SQL 
Server:SQL01.patchlink.corp, Instance:.
?<01-04-2017 10:47:35> ERROR: SQL TCP is not enabled.
?<01-04-2017 10:47:35> SQL01.patchlink.corp;SQL Server Tcp Port;Error;  
  Configuration Manager primary site and central administration site require 
SQL Server Tcp is enabled and set to Static port.
?<01-04-2017 10:47:35> INFO: Checking if SQL Server memory is limited.
?<01-04-2017 10:47:35> WARN: SQL Server memory is set to unlimited.
?<01-04-2017 10:47:35> SQL01.patchlink.corp;Configuration for SQL Server 
memory usage;Warning;SQL Server is configured for unlimited memory 
usage. You should configure SQL Server memory to have a maximum limit.
?<01-04-2017 10:47:35> INFO: Checking if SQL Server memory is configured to 
reserve minimum memory.
?<01-04-2017 10:47:35> INFO: Installing the central administration site or 
primary site, requires SQL Server to reserve a minimum of 8 gigabytes (GB) of 
memory.
?<01-04-2017 10:47:35> WARN: SQL Server minimum memory is 8 MB.
?<01-04-2017 10:47:35> SQL01.patchlink.corp;SQL Server process memory 
allocation;Warning;Configuration Manager requires SQL Server to reserve 
a minimum of 8 gigabytes (GB) of memory for the central administration site and 
primary site and a minimum of 4 gigabytes (GB) for the secondary site. This 
memory is reserved by using the Minimum server memory setting under Server 
Memory Options and is configured by using SQL Server Management Studio. For 
more information about how to set a fixed amount of memory, see 
http://go.microsoft.com/fwlink/p/?LinkId=233759.
?<01-04-2017 10:47:35> SQL01.patchlink.corp;Case-insensitive collation on 
SQL Server;Passed
?<01-04-2017 10:47:35> INFO: Check Machine FQDN: .
?<01-04-2017 10:47:35> INFO: getaddrinfo returned success.
?<01-04-2017 10:47:35> SQL01.patchlink.corp;Validate FQDN of SQL Server 
Computer;Passed
?<01-04-2017 10:47:35> INFO:CheckSupportedFQDNFormat 
?<01-04-2017 10:47:35> INFO: NetBIOS 
?<01-04-2017 10:47:35> SQL01.patchlink.corp;Primary FQDN;Passed


Duncan McAlynn, Solutions Director, Americas
HEAT Software
M: +1.512.391.9111 | 
duncan.mcal...@heatsoftware.com
HEAT Software |  490 N McCarthy Blvd. Suite 100 | Milpitas, CA 95035

RE: [mssms] RE: SCCM 2012 - 1606 Upgrade - Package folder slow

[s kissel]

Is the performance issue just with SQL Replication between Site Servers? Or is 
it more systemic than that?
By chance do you have any links with more info?
Regards-S

From: philsch...@hotmail.com
To: mssms@lists.myitforum.com
Subject: [mssms] RE: SCCM 2012 - 1606 Upgrade - Package folder slow
Date: Mon, 19 Sep 2016 15:51:39 +









What version of SQL?  IIRC, there are known performance issues with SQL 
2014/2016 and SCCM 1606.  You’ll want to set the DB compatibility level to SQL 
2012 using the following (where CM_XXX is your SCCM database):
 
ALTER DATABASE CM_XXX
SET COMPATIBILITY_LEVEL = 110;
GO
 
-Phil
 
 
 



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Robert Spinelli

Sent: Monday, September 19, 2016 11:23 AM

To: mssms@lists.myitforum.com

Subject: [mssms] SCCM 2012 - 1606 Upgrade - Package folder slow


 
We upgraded from SCCM 2012 – 1606 this weekend and now when you go into the 
packages root node its taking 3-4 minutes to return the default 1000 packages 
list.  When we had 2012 it took maybe 10 seconds to return them.  Anyone else 
see
 this when they upgraded?
 
We were planning on doing 1606 Rollup 1 also but ran into replication issues 
between the CAS and 3 primaries.  I hate having a CAS but since 2012 only 
supported 100k we had to go with it.  I know SCCM CB supports 175k clients per 
primary
 now so maybe one day we can collapse everything to 1 primary but that’s not 
going to happen for a while.
 
Thanks
 
Rob
 





  

RE: [mssms] SQL errors in AD Discovery component logs after 1606 update

[s kissel]

Not sure what you mean by upgrade again. Both of us experienced the problem, it 
appears to be a bug introduced into 1606 that was not there in R2 or 1511 or 
1602. Everything was successful. The only way I'd be able to upgrade again is 
spin up a new VM as I didn't snap the CM VM prior to upgrading as it's my lab, 
and I have another 1602.
Regards,-S

From: hems...@gmail.com
Date: Tue, 2 Aug 2016 11:21:23 -0500
Subject: Re: [mssms] SQL errors in AD Discovery component logs after 1606 update
To: mssms@lists.myitforum.com

can you run the upgrade again? One of the procs did not update correctly.
On Fri, Jul 29, 2016 at 5:35 PM, s kissel  wrote:



Could be a bug.
 
This appears first:
*** [42000][102][Microsoft][SQL Server Native Client 11.0][SQL Server]Incorrect 
syntax near '='. SMS_AD_SYSTEM_DISCOVERY_AGENT 7/29/2016 5:15:01 PM 8824 
(0x2278)

And then the actual red error:
ERROR: LogDiscoveryStatsDetail - Failed to update ADDiscoveryStatsDetail table 
SMS_AD_SYSTEM_DISCOVERY_AGENT 7/29/2016 5:15:01 PM 8824 (0x2278)
 
I also tested in an R2 SP1 instance and did not see the problem.
 
Regards
-S

 
From: st...@whitcher.org
Date: Fri, 29 Jul 2016 09:55:48 -0500
Subject: Re: [mssms] SQL errors in AD Discovery component logs after 1606 update
To: mssms@lists.myitforum.com

Any chance someone with a working lab environment on 1606 would be willing to 
try reproducing this?  (I know, I know, I should have one.  It's on my list to 
get back to someday, but we've been short staffed for a while now and I haven't 
had the time for rebuilding our lab environment.)  It shouldn't take much.  
Just Add an apostrophe to the name of an OU containing computers and/or 
security groups, and check for the errors after an AD Group Discovery or System 
Discovery cycle runs.  

I can go through and remove apostrophes in AD, but I'm hesitant to start 
renaming OU's without knowing for sure that is the problem.
On Wed, Jul 27, 2016 at 12:14 PM, Steve Whitcher  wrote:
I noticed today that I've got a couple of components with warnings appearing 
repeatedly in the logs, beginning just after I installed the 1606 update.  The 
components with warnings are:
SMS_AD_SYSTEM_DISCOVERY_AGENTSMS_AD_SECURITY_GROUP_DISCOVERY_AGENT
Both components show the first message below, while the second message only 
appears for the security group discovery agent.
Message ID 619Microsoft SQL Server reported SQL message 102, severity 15: 
[42000][102][Microsoft][SQL Server Native Client 11.0][SQL Server]Incorrect 
syntax near 's'.Please refer to your Configuration Manager documentation, 
SQL Server documentation, or the Microsoft Knowledge Base for further 
troubleshooting information.

Message ID 619Microsoft SQL Server reported SQL message 105, severity 15: 
[42000][105][Microsoft][SQL Server Native Client 11.0][SQL Server]Unclosed 
quotation mark after the character string '  '.Please refer to your 
Configuration Manager documentation, SQL Server documentation, or the Microsoft 
Knowledge Base for further troubleshooting information.

A quick search leads me to this article, which indicates an apostrophe 
somewhere is causing the error.  I'm going to start digging through collections 
that have been modified recently to see if an apostrophe might have been added 
somewhere, but the timing and the fact that it's a different component showing 
the error makes me doubt I'll find anything there.  
I know that we have at least 1 OU with an apostrophe in the name.  (I didn't 
name the OU, it pre-dates me.)  Since this started right after the server came 
back up from the upgrade, I wonder if anything was changed with AD discovery in 
1606 that would cause an apostrophe in AD to suddenly be an issue. . . 

Steve







  







  

RE: [mssms] SQL errors in AD Discovery component logs after 1606 update

[s kissel]

Could be a bug.
 
This appears first:
*** [42000][102][Microsoft][SQL Server Native Client 11.0][SQL Server]Incorrect 
syntax near '='. SMS_AD_SYSTEM_DISCOVERY_AGENT 7/29/2016 5:15:01 PM 8824 
(0x2278)

And then the actual red error:
ERROR: LogDiscoveryStatsDetail - Failed to update ADDiscoveryStatsDetail table 
SMS_AD_SYSTEM_DISCOVERY_AGENT 7/29/2016 5:15:01 PM 8824 (0x2278)
 
I also tested in an R2 SP1 instance and did not see the problem.
 
Regards
-S

 
From: st...@whitcher.org
Date: Fri, 29 Jul 2016 09:55:48 -0500
Subject: Re: [mssms] SQL errors in AD Discovery component logs after 1606 update
To: mssms@lists.myitforum.com

Any chance someone with a working lab environment on 1606 would be willing to 
try reproducing this?  (I know, I know, I should have one.  It's on my list to 
get back to someday, but we've been short staffed for a while now and I haven't 
had the time for rebuilding our lab environment.)  It shouldn't take much.  
Just Add an apostrophe to the name of an OU containing computers and/or 
security groups, and check for the errors after an AD Group Discovery or System 
Discovery cycle runs.  

I can go through and remove apostrophes in AD, but I'm hesitant to start 
renaming OU's without knowing for sure that is the problem.
On Wed, Jul 27, 2016 at 12:14 PM, Steve Whitcher  wrote:
I noticed today that I've got a couple of components with warnings appearing 
repeatedly in the logs, beginning just after I installed the 1606 update.  The 
components with warnings are:
SMS_AD_SYSTEM_DISCOVERY_AGENTSMS_AD_SECURITY_GROUP_DISCOVERY_AGENT
Both components show the first message below, while the second message only 
appears for the security group discovery agent.
Message ID 619Microsoft SQL Server reported SQL message 102, severity 15: 
[42000][102][Microsoft][SQL Server Native Client 11.0][SQL Server]Incorrect 
syntax near 's'.Please refer to your Configuration Manager documentation, 
SQL Server documentation, or the Microsoft Knowledge Base for further 
troubleshooting information.

Message ID 619Microsoft SQL Server reported SQL message 105, severity 15: 
[42000][105][Microsoft][SQL Server Native Client 11.0][SQL Server]Unclosed 
quotation mark after the character string '  '.Please refer to your 
Configuration Manager documentation, SQL Server documentation, or the Microsoft 
Knowledge Base for further troubleshooting information.

A quick search leads me to this article, which indicates an apostrophe 
somewhere is causing the error.  I'm going to start digging through collections 
that have been modified recently to see if an apostrophe might have been added 
somewhere, but the timing and the fact that it's a different component showing 
the error makes me doubt I'll find anything there.  
I know that we have at least 1 OU with an apostrophe in the name.  (I didn't 
name the OU, it pre-dates me.)  Since this started right after the server came 
back up from the upgrade, I wonder if anything was changed with AD discovery in 
1606 that would cause an apostrophe in AD to suddenly be an issue. . . 

Steve







  

RE: [mssms] RE: Multiple SCCM Consoles on Same System?

[s kissel]

If necessary, it's probably best to have the main one installed locally on 
workstation, and use RDP to access other consoles. Another possibility would be 
to use RemoteApp if your terminal services licensing allows.
Regards,-S

From: sherrylkissin...@gmail.com
Date: Mon, 11 Jul 2016 11:55:25 -0500
Subject: Re: [mssms] RE: Multiple SCCM Consoles on Same System?
To: mssms@lists.myitforum.com

I'll say this:  You probably "can", as in installing them the installations 
will allow you to do so; if you pick different installation folders.  But 
here's some experience on why you likely don't ever want to do that.  
On 1 system, which was used exclusively to host the console for a select group 
of people, when we upgraded from CM07 to CM12, the 07 and 12 consoles were 
installed in different locations, and the 07 console retired/uninstalled a few 
months later.  It "worked".  Remember this is before powershell cmdlets.  
However... it "working" also meant that remnants of the 07 installation were 
forever after mixed into elements of the cm12 console.  Every once in a while, 
launching the console it would try to connect to the (now defunct/doesn't 
exist) old cm07 server.  and every once in a while things just wouldn't be 
right.  We tried combing through regkeys, wmi, and settings files.  Never did 
quite find where the remnants were sticking around.  We'd think we'd find 
it--clean it or put in the new server name, and a few days/weeks later some 
other admin would get a confusing launch again.
Caveat: sure, maybe things have changed... but I would be paranoid.  Now that 
you have powershell cmdlets--do you want even the faintest chance that "oh, I 
meant to target the current branch environment... but the cmdlet hit the cm12r2 
environment, oops, sorry about that".
So even though it might "work"; you might find days/weeks later that there's 
something goofy.  I wouldn't do it.
On Mon, Jul 11, 2016 at 10:31 AM, Smith, Robert F (ES & CSO) 
 wrote:








I don’t believe so. 
 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of andrew.ber...@everestre.com

Sent: Monday, July 11, 2016 11:20 AM

To: mssms@lists.myitforum.com

Subject: EXT :[mssms] RE: Multiple SCCM Consoles on Same System?


 
Bump… anyone?
 


From: 
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of andrew.ber...@everestre.com

Sent: Friday, July 8, 2016 3:36 PM

To: mssms@lists.myitforum.com

Subject: [mssms] Multiple SCCM Consoles on Same System?


 
Greetings All,
 
Is it possible to install both the SCCM 2012 R2 console and the SCCM Current 
Branch console on a single system?
 
Thanks in advance,
 
Andrew
 





This e-mail is intended only for the person or entity to whom it is addressed 
and may contain information that is privileged, confidential, or otherwise 
protected from disclosure. If you are not the intended recipient, or an 
employee or agent responsible for
 delivering this message to the intended recipient, you are notified that any 
disclosure, copying, distribution, or the taking of any action in reliance on 
the contents of this message is prohibited. If you have received this e-mail in 
error, please contact
 the sender immediately and delete the original message and all copies from 
your system. Statements and representations made in this message are not 
necessarily that of the Company.
 
 





This e-mail is intended only for the person or entity to whom it is addressed 
and may contain information that is privileged, confidential, or otherwise 
protected from disclosure. If you are not the intended recipient, or an 
employee or agent responsible for
 delivering this message to the intended recipient, you are notified that any 
disclosure, copying, distribution, or the taking of any action in reliance on 
the contents of this message is prohibited. If you have received this e-mail in 
error, please contact
 the sender immediately and delete the original message and all copies from 
your system. Statements and representations made in this message are not 
necessarily that of the Company.
 








-- 
Thank you,

Sherry Kissinger
My Parameters:  Standardize. Simplify. Automate
Blogs: http://www.mofmaster.com, http://mnscug.org/blogs/sherry-kissinger, 
http://www.smguru.org



  

RE: [mssms] RE: Available Task Sequence Not Showing After A Successful Run

[s kissel]

Have you tried this on any other machines? Perhaps it's just a WMI issue with 
this particular system.

From: andrew.cr...@itnetx.ch
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: Available Task Sequence Not Showing After A Successful 
Run
Date: Fri, 27 May 2016 12:55:31 +









What happens if you “reset policy” rather than uninstall/install?
 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Mawdsley R.

Sent: 27 May 2016 13:45

To: mssms@lists.myitforum.com

Subject: RE: [mssms] RE: Available Task Sequence Not Showing After A Successful 
Run


 
Strange!
 
Repair resulting in the same..  However an uninstall/install of the client has 
instantly made it show up.  It’s as ‘Installed’ which is fine, because it is.. 
but still, there was clearly
 something saying ‘don’t show this’…
 
I’m going to run it again and see if it’s there afterwards or not..
 
Rich Mawdsley
 


From: 
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Roland Janus

Sent: 27 May 2016 11:07

To: mssms@lists.myitforum.com

Subject: AW: [mssms] RE: Available Task Sequence Not Showing After A Successful 
Run


 
We do refresh and still see the deployment afterwards (on 1511).
What happens if you de-install/repair the client?
 


Von: 
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
Im Auftrag von Mawdsley R.

Gesendet: Freitag, 27. Mai 2016 10:41

An: mssms@lists.myitforum.com

Betreff: RE: [mssms] RE: Available Task Sequence Not Showing After A Successful 
Run


 
Yes I can see it deployed under that clients properties.
 
And yes, using Client Center Tool, I can see the advertisement to the machine…
 
Seems there’s a bug somewhere..  Anyone else able to test?
 

Thankyou
Rich
-
Rich Mawdsley
Software & Desktop Services
iSolutions
University of Southampton
-

 


From: 
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Roland Janus

Sent: 26 May 2016 23:53

To: mssms@lists.myitforum.com

Subject: AW: [mssms] RE: Available Task Sequence Not Showing After A Successful 
Run


 
I guess you see the deployment in the client properties?
 
Use client center tool from R Zander to check if there is some info about it in 
WMI.
 
-Roland
 
 


Von: 
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
Im Auftrag von Mawdsley R.

Gesendet: Donnerstag, 26. Mai 2016 16:15

An: mssms@lists.myitforum.com

Betreff: [mssms] RE: Available Task Sequence Not Showing After A Successful Run


 
No, this Task Sequence would run a refresh scenario, which is what it ran the 
first time around successfully.
 
Just the single record of it in SCCM.
 
It’s very odd :-/.
 


From: 
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Andrew Craig

Sent: 26 May 2016 14:21

To: mssms@lists.myitforum.com

Subject: [mssms] RE: Available Task Sequence Not Showing After A Successful Run


 
Did you OSD from bare metal? Do you have any duplicate records for this machine 
in Devices?
 


From: 
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Mawdsley R.

Sent: 26 May 2016 14:57

To: mssms@lists.myitforum.com

Subject: [mssms] RE: Available Task Sequence Not Showing After A Successful Run


 
Yes, that’s checked by default on Available task sequences..  Only on Required 
do you have the option to change it.
 


From: 
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Andrew Craig

Sent: 26 May 2016 13:32

To: mssms@lists.myitforum.com

Subject: [mssms] RE: Available Task Sequence Not Showing After A Successful Run


 
Have you checked the Deployment Settings are set to Allow Users to run 
independently of assignment?

 


From: 
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Mawdsley R.

Sent: 26 May 2016 14:16

To: mssms@lists.myitforum.com

Subject: [mssms] RE: Available Task Sequence Not Showing After A Successful Run


 
Yes, everything else is showing up fine, and I’ve since deployed something else 
to it also which worked as expected.
 
This machine is a direct rule in the collection.  Other machines in the 
collection which are yet to run the TS, can also see it in software center.
 
It’s as if its saying ‘Well, I’ve already run that once fine, so you won’t want 
to do it again, I’ll hide it.”
 

Thankyou
Rich Mawdsley
 

 


From: 
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Schwan, Phil

Sent: 26 May 2016 13:00

To: mssms@lists.myitforum.com

Subject: [mssms] RE: Available Task Sequence Not Showing After A Successful Run


 
Couple questions: Are other deployed items (Apps, etc.) appearing in Software 
Center?  What are the collection rules for the collection to which the TS is 
deployed?
 
-Phil
 
_

RE: [mssms] Cisco Anyconnect

[s kissel]

In the past, I think I've stopped the service, imported the new .xml file, then 
restarted the system, or something along those lines to import new VPN 
profiles. Also, I think the AnyConnect concentrators have a way of pushing the 
latest profiles out to Windows clients that connect.
Regards,-S

From: rshug...@mii.com
To: mssms@lists.myitforum.com
Subject: [mssms] Cisco Anyconnect
Date: Tue, 24 Mar 2015 16:55:40 +










Hi:
In looking at the linked Technet article
https://technet.microsoft.com/en-us/library/dn261200.aspx
I’m seeing that SCCM 2012R2 only supports VPN profiles for Cisco AnyConnect 
VPNs for IOS, and not Windows.  Does anyone know just why this is, MS would 
support a VPN profile on IOS but not their own OS, and is there a way to work 
around this with the Anyconnect
client?
Thanks.
Ryan
 
Ryan Shugart
LAN Administrator
MiTek USA, MiTek Denver
314-851-7414
 



MiTek Holdings, Inc., 2011-2014, All Rights Reserved 
    
This communication (including any attachments) contains information which is 
confidential and may also be privileged. It is for the exclusive use of the 
intended
recipient(s). If you are not the intended recipient(s), please note that any 
distribution, copying, or use of this communication or the information in it is 
strictly prohibited. If you have received this communication in error, please 
notify the sender immediately
and then destroy any copies of it. 





  

RE: [mssms] DP Rate Limit column

[s kissel]

Correct. The tab disappears, but the Rate Limits column still shows YES for 
both pull and non-pull DPs.

From: sccmlist-mikedzikow...@outlook.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] DP Rate Limit column
Date: Tue, 16 Dec 2014 15:36:10 +




Yup the rate limit tab, disappears for PullDPs:
 
   
Mike D-
 
From: sean.pome...@gmail.com
Date: Tue, 16 Dec 2014 00:15:53 +
Subject: Re: [mssms] DP Rate Limit column
To: mssms@lists.myitforum.com

>From what I have seen, the rate limit column says yes as soon as the dp role 
>is installed on the box. I believe it disappears if you make the dp a pull 
>box. 

So maybe its an indication as to whether the dp supports rate limits?

If you need to know which DPs have rate limits enabled, I have a powershell 
script I can dig up. 

On Mon, Dec 15, 2014, 18:29 s kissel  wrote:



Can someone explain this, or is this a bug?:
1) Create a Site Server with DP role, ensuring that default schedule and rate 
limits are set/unchanged, and that it is NOT a pull DP. Can be a fallback 
source or not, doesn't matter.2) Go to Administration --> Overview --> 
Distribution Points.3) Right-click on Column headings and select "Rate Limits" 
from drop-down so that it is selected (checked)4) Review newly created DP has 
Rate Limits = YES. Go to Properties of DP and see that it has default/unlimited 
schedule. 5) Write email to mssms email distro questioning sanity.
Thoughts?
-S


  


  

RE: [mssms] DP Rate Limit column

[s kissel]

Regardless of whether or not the DP is a pull DP, the rate limit column will 
still be equal to YES.
The script might be useful, but it doesn't explain the inherent, default 
behavior of SCCM at this point yet. I imagine the script would be in conflict 
with what the GUI actually indicates.
I've confirmed this in SP1 as well as  R2 CU3.
Regards,-S

From: sean.pome...@gmail.com
Date: Tue, 16 Dec 2014 00:15:53 +
Subject: Re: [mssms] DP Rate Limit column
To: mssms@lists.myitforum.com

>From what I have seen, the rate limit column says yes as soon as the dp role 
>is installed on the box. I believe it disappears if you make the dp a pull 
>box. 

So maybe its an indication as to whether the dp supports rate limits?

If you need to know which DPs have rate limits enabled, I have a powershell 
script I can dig up. 

On Mon, Dec 15, 2014, 18:29 s kissel  wrote:



Can someone explain this, or is this a bug?:
1) Create a Site Server with DP role, ensuring that default schedule and rate 
limits are set/unchanged, and that it is NOT a pull DP. Can be a fallback 
source or not, doesn't matter.2) Go to Administration --> Overview --> 
Distribution Points.3) Right-click on Column headings and select "Rate Limits" 
from drop-down so that it is selected (checked)4) Review newly created DP has 
Rate Limits = YES. Go to Properties of DP and see that it has default/unlimited 
schedule. 5) Write email to mssms email distro questioning sanity.
Thoughts?
-S


  

[mssms] DP Rate Limit column

[s kissel]

Can someone explain this, or is this a bug?:
1) Create a Site Server with DP role, ensuring that default schedule and rate 
limits are set/unchanged, and that it is NOT a pull DP. Can be a fallback 
source or not, doesn't matter.2) Go to Administration --> Overview --> 
Distribution Points.3) Right-click on Column headings and select "Rate Limits" 
from drop-down so that it is selected (checked)4) Review newly created DP has 
Rate Limits = YES. Go to Properties of DP and see that it has default/unlimited 
schedule. 5) Write email to mssms email distro questioning sanity.
Thoughts?
-S

RE: [mssms] Patching web servers behind F5

[s kissel]

David, 
I think this would be very valuable for those of us who do use clusters and 
want the extra sense of security in knowing that we're less at risk for 
downtime and data loss. I look forward to seeing the blog!
Regards,-S

From: obrien.da...@outlook.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Patching web servers behind F5
Date: Sat, 22 Nov 2014 07:56:18 +1100

Hi Casey, You either do it manually, do some complex thing with multiple 
collections and maintenance windows and task sequences with some logic or you 
do some orchestration.I’ve just done the latter for a SQL Always On cluster 
(which I might blog about soon), where I enumerate all the nodes, disable 
failover and so on, and then put them into a collection, force the patching, 
reboot the machines, check if everything is ok and after that move on to the 
next cluster node.That’s all Powershell! ConfigMgr can’t really do it on its 
own. CheersDavid From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Casey Robertson
Sent: Saturday, 22 November 2014 4:26 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Patching web servers behind F5 Morning all, Done lots of 
patching with SCCM before but not in an environment of lots of web servers load 
balanced behind  F5’s.  I see an old-ish Orchestrator integration for F5 to do 
things like enumerate servers in the pool, take servers in and out etc.  But in 
reality, how do you folks handle this in production environments?  We can’t 
just have the web servers all bouncing at once and have to take the F5 into 
account.   Any thoughts, tools or processes you’ve used would be great.  Right 
now our NOC literally uses WSUS and logs into each server individually, removes 
it from the F5, patches it, reboots and then adds to F5…take forever. Thanks, 
Casey RobertsonSystems EngineerW 619.878.9099E 
casey.robert...@mindbodyonline.com MINDBODY, Inc.4051 Broad Street, Suite 
220San Luis Obispo, CA 93401 

  

RE: [mssms] ADR and Dynamic Deployment Packages

[s kissel]

 updates 
that have been downloaded

o  
Deletes the Software Update Group created by the ADR

o  
Verifies all the updates are downloaded, if an update wasn’t downloaded, it 
will modify/run the ADR again

o  
Validates the SU Package is on all DPs (does this based on DP Group)

o  
Adds updates to existing SU Group or creates a new SU Group if a new month

§ 
If it creates a new group, it will also create the required deployments
 
 
Customizations for your environment:
Lines 110-114 – These lines create the deployments for a newly create group, we 
create 2 deployments…you can modify as needed to fit your deployment strategy
Lines 125 & 128 – Modify Package Source path as needed
Line 163 - there are a couple of strings that would need to be modified, needs 
the site server and site code for your environment
Line 178 – Name of the DP group that includes all of the distribution points
Line 180 – Name of the ADR you want to use
 
 
The script also includes a –Review parameter that allows you just see the 
updates that would be deployed.  It will also do some simple logging, creates a 
log
 file in the same dir the script is run from.  Feel free to use any/all of the 
script, I have been using it for 7-8 months and it has worked great for me, but 
as always, I recommend testing in your environment!!
 
 
 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of s kissel

Sent: Tuesday, October 28, 2014 11:50 AM

To: mssms@lists.myitforum.com

Subject: RE: [mssms] ADR and Dynamic Deployment Packages


 

Scott, 

 


That sounds like what we're looking for. Care to strip any proprietary info out 
of the script (Host names, etc.) and share? Have you blogged it? If not, you 
should! Sounds like there are
 at least two other folks in this thread who would be interested in something 
of this sort and have so far come up without a solution. 


 


Regards,


-S




From:
scott_wilb...@ctsinc.biz

To: mssms@lists.myitforum.com

Subject: RE: [mssms] ADR and Dynamic Deployment Packages

Date: Tue, 28 Oct 2014 16:33:42 +

We have separate SU Group and packages for each month and couldn’t get the ADR 
process to handle this out of the box.  I wrote a PowerShell script to handle
 all of it.  It will create a new package and modify the ADR to use the new 
package, and then invoke the ADR.  I also wanted more control over which 
updates get flagged when the ADR runs, so the script will also modify the 
search criteria each time it runs.
 


From:
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of s kissel

Sent: Monday, October 27, 2014 3:27 PM

To: mssms@lists.myitforum.com

Subject: [mssms] ADR and Dynamic Deployment Packages


 

Hi - Suppose you had an ADR that created a new SU Group every month. You can 
set the ADR up to download the updates into a new SU package, or a previously 
created one. However, suppose you
 wanted the ADR to create a new SU package each month, using variables such as 
%Month% or something along those lines. Is this even possible? 

 


The main driver for this is that with 160 DPs spread worldwide and some with 
very, very low bandwidth available, it's become increasingly difficult to push 
6 and 9 GB packages across WAN
 links repeatedly, and even more so as a few new DPs are stood up every month. 


 


Regards, 


-S


 

**

Note: 

The information contained in this message may be privileged and confidential 
and 

protected from disclosure.  If the reader of this message is not the intended  

recipient, or an employee or agent responsible for delivering this message to  

the intended recipient, you are hereby notified that any dissemination,  

distribution or copying of this communication is strictly prohibited. If you  

have received this communication in error, please notify us immediately by  

replying to the message and deleting it from your computer. 

**



 

**

Note: 

The information contained in this message may be privileged and confidential 
and 

protected from disclosure.  If the reader of this message is not the intended  

recipient, or an employee or agent responsible for delivering this message to  

the intended recipient, you are hereby notified that any dissemination,   

distribution or copying of this communication is strictly prohibited. If you  

have received this communication in error, please notify us immediately by  

replying to the message and deleting it from your computer. 

**







  


Param (
[Parameter(ParameterSetName='Revie

Re: [mssms] ADR and Dynamic Deployment Packages

[s kissel]

Thank you for this! It might take me a bit to test it out in our dev 
environment as some other things have come up to take precedence recently. But 
I'll definitely check it out further at the next available opportunity.

Regards,
-S



> On Oct 28, 2014, at 1:20 PM, Wilbers, Scott  wrote:
> 
> I don’t have a blog…but I can sure share with this group.  I have attached 2 
> files, one is the PowerShell script and the other is a text file that the 
> script uses for controlling the updates that get automatically deployed. 
>  
> Some notes about how I have things set up before I go into what all the 
> script does:
> · For Software Update Groups/Packages, I have one group per month for 
> the current year, and then consolidate older updates from previous years into 
> a single group, i.e. “2013-All”
> o   Packages are created using this same standard but are prefixed with  
> “Software Updates -”, i.e “Software Updates – 2013-All” or “Software Updates 
> – 2014-09”
> · I created an ADR ahead of time that the script utilizes, these 
> settings will need to be configured:
> o   General Tab
> §  Collection – Doesn’t matter, I set mine to an empty collection b/c I 
> delete the group/deployment that is created when the ADR runs
> §  Add to an existing Software Update Group
> o   Deployment Settings Tab
> §  Automatically deploy all software updates found by this rule and approve 
> any license agreements
> o   Evaluation Schedule
> §  Do not run this rule automatically
> o   Software Updates Tab
> §  Can be set to anything, script will overwrite
> o   Deployment Package Tab
> §  Set to any existing package, script will overwrite
>  
>  
> Now, this is what the script does…
> · Loops through all the existing SU groups that start with “20”, so 
> it gets all the standard monthly groups, and then looks for any required 
> updates released during the relevant month/year
> o   If SU Group doesn’t exist for current month, it will then look for 
> updates for the current month
> o   I also have some other non-standard groups for SQL SPs and such that I 
> didn’t want included in the normal monthly updates, so they are ignored by 
> this script
> · For each group, it will then search for updates that meet this 
> criteria using WMI (SMS_SoftwareUpdate class):
> o   IsDeployed=0 AND IsSuperseded=0 AND IsExpired=0 AND NumMissing > 0
> o   DatePosted matches the Year and/or Month of the Group being processed
> · When updates are found that need to be deployed:
> o   Verify that required package exists, if not it will create a new package
> o   Modify ADR to use the appropriate package
> o   Modify ADR to use the appropriate Search Criteria
> §  Required > 1
> §  Superseded = No
> §  Title – it will add each Update the script found to the Title search 
> crieteria
> oRun the ADR (using ConfigMgr cmdlet 
> “Invoke-CMSoftwareUpdateAutoDeploymentRule”)
> o   Waits for the ADR to complete and will logs/write-host the number of 
> updates that have been downloaded
> o   Deletes the Software Update Group created by the ADR
> o   Verifies all the updates are downloaded, if an update wasn’t downloaded, 
> it will modify/run the ADR again
> o   Validates the SU Package is on all DPs (does this based on DP Group)
> o   Adds updates to existing SU Group or creates a new SU Group if a new month
> §  If it creates a new group, it will also create the required deployments
>  
>  
> Customizations for your environment:
> Lines 110-114 – These lines create the deployments for a newly create group, 
> we create 2 deployments…you can modify as needed to fit your deployment 
> strategy
> Lines 125 & 128 – Modify Package Source path as needed
> Line 163 - there are a couple of strings that would need to be modified, 
> needs the site server and site code for your environment
> Line 178 – Name of the DP group that includes all of the distribution points
> Line 180 – Name of the ADR you want to use
>  
>  
> The script also includes a –Review parameter that allows you just see the 
> updates that would be deployed.  It will also do some simple logging, creates 
> a log file in the same dir the script is run from.  Feel free to use any/all 
> of the script, I have been using it for 7-8 months and it has worked great 
> for me, but as always, I recommend testing in your environment!!
>  
>  
>  
> From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
> On Behalf Of s kissel
> Sent: Tuesday, October 28, 2014 11:50 AM
> To: mssms@lists.myitforum.com
> Subject: RE: [mssms] ADR and Dynamic Deployment Packages
>  
> Scott, 
>  
> That sounds like what we're looking for. Care to strip an

RE: [mssms] ADR and Dynamic Deployment Packages

[s kissel]

Scott, 
That sounds like what we're looking for. Care to strip any proprietary info out 
of the script (Host names, etc.) and share? Have you blogged it? If not, you 
should! Sounds like there are at least two other folks in this thread who would 
be interested in something of this sort and have so far come up without a 
solution. 
Regards,-S

From: scott_wilb...@ctsinc.biz
To: mssms@lists.myitforum.com
Subject: RE: [mssms] ADR and Dynamic Deployment Packages
Date: Tue, 28 Oct 2014 16:33:42 +









We have separate SU Group and packages for each month and couldn’t get the ADR 
process to handle this out of the box.  I wrote a PowerShell script to handle
 all of it.  It will create a new package and modify the ADR to use the new 
package, and then invoke the ADR.  I also wanted more control over which 
updates get flagged when the ADR runs, so the script will also modify the 
search criteria each time it runs.
 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of s kissel

Sent: Monday, October 27, 2014 3:27 PM

To: mssms@lists.myitforum.com

Subject: [mssms] ADR and Dynamic Deployment Packages


 

Hi - Suppose you had an ADR that created a new SU Group every month. You can 
set the ADR up to download the updates into a new SU package, or a previously 
created one. However, suppose you
 wanted the ADR to create a new SU package each month, using variables such as 
%Month% or something along those lines. Is this even possible? 

 


The main driver for this is that with 160 DPs spread worldwide and some with 
very, very low bandwidth available, it's become increasingly difficult to push 
6 and 9 GB packages across WAN
 links repeatedly, and even more so as a few new DPs are stood up every month. 


 


Regards, 


-S


 

**

Note: 

The information contained in this message may be privileged and confidential 
and 

protected from disclosure.  If the reader of this message is not the intended  

recipient, or an employee or agent responsible for delivering this message to  

the intended recipient, you are hereby notified that any dissemination,   

distribution or copying of this communication is strictly prohibited. If you  

have received this communication in error, please notify us immediately by  

replying to the message and deleting it from your computer. 

**




  

[mssms] ADR and Dynamic Deployment Packages

[s kissel]

Hi - Suppose you had an ADR that created a new SU Group every month. You can 
set the ADR up to download the updates into a new SU package, or a previously 
created one. However, suppose you wanted the ADR to create a new SU package 
each month, using variables such as %Month% or something along those lines. Is 
this even possible? 
The main driver for this is that with 160 DPs spread worldwide and some with 
very, very low bandwidth available, it's become increasingly difficult to push 
6 and 9 GB packages across WAN links repeatedly, and even more so as a few new 
DPs are stood up every month. 
Regards, -S   

RE: [mssms] what's the deal with the configuration manager client package?

[s kissel]

Hi - I don't think it's necessary to create another client package from 
definition - That might have been a 2007 thing.
The Configuration Manager Client Upgrade package is also pre-defined, and can 
be deployed to systems to upgrade them from say SP1 to R2, for example, and 
where applicable. 
As for the OSD task sequence indicating that it can't find the client package, 
have you tried to update the content on the distribution points? This might 
also be helpful, if you run into not being able to distribute the client 
package:http://social.technet.microsoft.com/Forums/en-US/11df0f63-d146-434d-91f3-c4e826fee92c/redistribute-configuration-manager-client-upgrade-package-xxx3?forum=configmanagermigration
-S

From: rshug...@mii.com
To: mssms@lists.myitforum.com
Subject: [mssms] what's the deal with the configuration manager client package?
Date: Wed, 6 Aug 2014 16:47:44 +










Hi:
So we’re getting errors in our OSD task sequences saying the task 
sequence can’t find the files needed for the Configuration Manager Client 
Package.  We do have such a package available, it appears to have been created 
when SCCM was set up but
I really can’t change any of the options for this package.  In doing some web 
research I’m finding this is by design for some reason, and you’re supposed to 
create a new Configuration Manager client package from definition.  So I guess 
two questions.  First,
what’s the point of the Configuration Manager Client Package in the first place 
if you can’t do anything with it, and if you’re supposed to create a new 
Configuration Manager Client Package from definition how is that done?  I have 
definitions for Device Management
Client Transfer and Configuration Manager Client Upgrade.  Should I use the 
Configuration Manager Client Upgrade definition?
Thanks a lot for any help, finding this very confusing.
Ryan
 
Ryan Shugart
LAN Administrator
MiTek USA, MiTek Denver
314-851-7414
 



MiTek Holdings, Inc., 2011-2014, All Rights Reserved 
    
This communication (including any attachments) contains information which is 
confidential and may also be privileged. It is for the exclusive use of the 
intended
recipient(s). If you are not the intended recipient(s), please note that any 
distribution, copying, or use of this communication or the information in it is 
strictly prohibited. If you have received this communication in error, please 
notify the sender immediately
and then destroy any copies of it. 





  

RE: [mssms] Reinstall Required Software

[s kissel]

Doh, that was it! It did reinstall. Thanks Chris and John!

From: chris.bruc...@bankatfirst.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Reinstall Required Software
Date: Mon, 7 Jul 2014 17:06:59 +









Have you ran an application deployment evaluation cycle? That should trigger 
the reinstallation.
 

Thanks,
Chris Brucker

 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of s kissel

Sent: Monday, July 7, 2014 1:04 PM

To: mssms@lists.myitforum.com

Subject: RE: [mssms] Reinstall Required Software


 

In theory, it should work that way, but I don't see it happening. As a test, 
I've uninstalled the application from Programs and Features, then ran a 
hardware and software inventory, then
 a while later ran a machine policy retrieval. Still the application is not 
reinstalled. 

 


The app is an msi and it's detection method is the MSI product code. I've 
searched the registry on the test machine, and the product code is not listed 
there anywhere.


 


Does this need to be a CI before it's automatically reinstalled?




From:
jaub...@norwoodmedical.com

To: mssms@lists.myitforum.com

Subject: RE: [mssms] Reinstall Required Software

Date: Mon, 7 Jul 2014 14:57:02 +

If you create an application, instead of a package, it is smart enough to know 
if it’s installed or not.  There is the detect method that determines if the
 application is installed or not. If you deploy the application to a collection 
and make it required, it will install and if it gets detected as no longer 
installed, then it will rerun the installer.  
 


From:
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of s kissel

Sent: Monday, July 7, 2014 10:52 AM

To: mssms@lists.myitforum.com

Subject: [mssms] Reinstall Required Software


 

Hello - What is the recommended way to reinstall a required application? If 
deployed normally, and the software is installed, the Software Center does not 
give the ability to reinstall (or
 uninstall) required software via the interface. Thus, if someone uninstalls 
the software from Programs and Features, how can the reinstall occur, as SCCM 
still thinks the software is installed?

 


Regards,


-S


 

 



 


The information contained in this message from First Financial Bancorp or its 
affiliates and any attachments are confidential.  It is not intended for 
transmission to, or receipt by, anyone other than the addressee(s), or a person 
authorized to deliver it to the named addressee(s).  If you have received this 
message in error, you are prohibited from copying, distributing or using the 
information.  Please contact the sender immediately by return email and delete 
the original message.





  

RE: [mssms] Reinstall Required Software

[s kissel]

In theory, it should work that way, but I don't see it happening. As a test, 
I've uninstalled the application from Programs and Features, then ran a 
hardware and software inventory, then a while later ran a machine policy 
retrieval. Still the application is not reinstalled. 
The app is an msi and it's detection method is the MSI product code. I've 
searched the registry on the test machine, and the product code is not listed 
there anywhere.
Does this need to be a CI before it's automatically reinstalled?

From: jaub...@norwoodmedical.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Reinstall Required Software
Date: Mon, 7 Jul 2014 14:57:02 +









If you create an application, instead of a package, it is smart enough to know 
if it’s installed or not.  There is the detect method that determines if the
 application is installed or not. If you deploy the application to a collection 
and make it required, it will install and if it gets detected as no longer 
installed, then it will rerun the installer.  
 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of s kissel

Sent: Monday, July 7, 2014 10:52 AM

To: mssms@lists.myitforum.com

Subject: [mssms] Reinstall Required Software


 

Hello - What is the recommended way to reinstall a required application? If 
deployed normally, and the software is installed, the Software Center does not 
give the ability to reinstall (or
 uninstall) required software via the interface. Thus, if someone uninstalls 
the software from Programs and Features, how can the reinstall occur, as SCCM 
still thinks the software is installed?

 


Regards,


-S


 





  

[mssms] Reinstall Required Software

[s kissel]

Hello - What is the recommended way to reinstall a required application? If 
deployed normally, and the software is installed, the Software Center does not 
give the ability to reinstall (or uninstall) required software via the 
interface. Thus, if someone uninstalls the software from Programs and Features, 
how can the reinstall occur, as SCCM still thinks the software is installed?
Regards,-S

RE: [mssms] User Device Affinity after imaging

[s kissel]

Yes, trying to do only the primary device. But it doesn't appear that packages 
have the requirement to install on primary devices like applications do. 
Thanks,-S

From: dratl...@humana.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] User Device Affinity after imaging
Date: Fri, 30 May 2014 15:06:38 +









Are you only deploying to user’s primary devices? If not, UDA shouldn’t matter, 
user policy is separate from UDA.

 

Daniel Ratliff

 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of s kissel

Sent: Friday, May 30, 2014 11:03 AM

To: mssms@lists.myitforum.com

Subject: [mssms] User Device Affinity after imaging


 

Current Scenario (this will change in time so...):

Machine is imaged with MDT.


SCCM 2012 client gets installed.


Current User Device Affinity settings are 240 minutes / 5 days (let me know if 
I should change this)


 


Now we need to deploy packages to user groups say 8 hours after imaging. Hoping 
to use UDA for this. Is this possible in an automated fashion with the current 
settings, or will we need to
 manually specify the affinity before the user/device will receive the package 
8 hours later?


 


Thanks all, 


-S


 


 


The information transmitted is intended only for the person or entity to which 
it is addressed

and may contain CONFIDENTIAL material.  If you receive this 
material/information in error,

please contact the sender and delete or destroy the material/information.





  

[mssms] User Device Affinity after imaging

[s kissel]

Current Scenario (this will change in time so...):Machine is imaged with 
MDT.SCCM 2012 client gets installed.Current User Device Affinity settings are 
240 minutes / 5 days (let me know if I should change this)
Now we need to deploy packages to user groups say 8 hours after imaging. Hoping 
to use UDA for this. Is this possible in an automated fashion with the current 
settings, or will we need to manually specify the affinity before the 
user/device will receive the package 8 hours later?
Thanks all, -S
  

[mssms] Scripts for Configuration export

[s kissel]

Hey all,

Is there a script or collection of scripts that can export the configuration of 
a configmgr environment, whether 2007 or 2012? Basically looking for a way to 
report on the site(s) and their settings, packages, advertisements, boundaries, 
maintenance settings, client and collection settings, etc. kind of like a rap, 
but not. 

Thanks,
-S
  

RE: [mssms] SUP in untrusted domain

[s kissel]

Interesting. Thanks for the tip. I'll have the team give it a try. 
FWIW, I've used the "existing account" with the same Site Server Installation 
account for MP and DP setups in other untrusted domains without fail, so I'm 
not sure that using "new account" will work, unless it works a bit differently 
for the SUP than for the other two.
Thanks,-S

Subject: Re: [mssms] SUP in untrusted domain
From: elsal...@gmail.com
Date: Sun, 13 Apr 2014 08:33:09 -0700
To: mssms@lists.myitforum.com

Let me add. Even if we had used the same accounts before, if we picked existing 
account selection it would always fail. BTW, always do 'new user' when running 
the wizard, selecting existing user never worked for us. 

Cesar A.Meaning is NOT in words, but inside people! Dr. Myles MunroeMy iPad 
takes half the blame for misspells.
On Apr 13, 2014, at 3:39 AM, Jason Wallace  wrote:

OK can we just check that the username and password which you have registered 
at the SCCM server side is the username and password for the untrusted domain 
or the local admin of the machine due to become a SUP
On 11 Apr 2014, at 15:21, "s kissel"  wrote:




Thanks for that! I applied the hotfix, but it was not able to solve the problem.
Regards,-S

Date: Thu, 10 Apr 2014 12:02:20 -0700
Subject: Re: [mssms] SUP in untrusted domain
From: elsal...@gmail.com
To: mssms@lists.myitforum.com

Found it. KB2522623. Test, maybe different issue than ours 


On Apr 10, 2014 11:58 AM, "elsalvoz"  wrote:

We were encountering the same issue and had to install a hotfix on the systems 
in all of our non-trusted domains to fix it. It is due to Kerberos. 

I will find the kb when I get back to the office. 
On Apr 10, 2014 11:19 AM, "s kissel"  wrote:





Hey all, 
Trying to setup a SUP in an untrusted domain, but getting error in WSUSCtrl.log 
indicating:System.Data.SqlClient.SqlException (0x80131904): Login failed. The 
login is from an untrusted domain and cannot be used with Windows 
authentication.~~ 


The site server has an MP and DP, both setup with a site server installation 
account.When setting up the SUP, used the same site server installation 
account, set WSUS to 8530 as per other SUPs in hierarchy, "selected Allow 
intranet-only client communications," no proxy. Have tried with the checkbox 
"Use credentials to connect to the WSUS server" enabled and deselected. When 
enabled, I used the same site server installation account which I believe is 
dbo on the wsus database back at the primary - In either case, the error above 
is the same


What am I missing?
Thanks,-S 










  










  

RE: [mssms] SUP in untrusted domain

[s kissel]

Yes, it is the correct username and password, as the DP installed successfully 
using the Site Server Installation account. The account is an administrator on 
the machine that is due to become a SUP. However, I am unable to make the 
machine account of the machine due to become a SUP on the Primary Site Server 
since that domain trusts the domain that the Primary is in, but not the other 
way around, but I'm not sure that matters.

From: jaso...@outlook.com
Date: Sun, 13 Apr 2014 12:39:30 +0200
Subject: Re: [mssms] SUP in untrusted domain
To: mssms@lists.myitforum.com

OK can we just check that the username and password which you have registered 
at the SCCM server side is the username and password for the untrusted domain 
or the local admin of the machine due to become a SUP
On 11 Apr 2014, at 15:21, "s kissel"  wrote:




Thanks for that! I applied the hotfix, but it was not able to solve the problem.
Regards,-S

Date: Thu, 10 Apr 2014 12:02:20 -0700
Subject: Re: [mssms] SUP in untrusted domain
From: elsal...@gmail.com
To: mssms@lists.myitforum.com

Found it. KB2522623. Test, maybe different issue than ours 


On Apr 10, 2014 11:58 AM, "elsalvoz"  wrote:

We were encountering the same issue and had to install a hotfix on the systems 
in all of our non-trusted domains to fix it. It is due to Kerberos. 

I will find the kb when I get back to the office. 
On Apr 10, 2014 11:19 AM, "s kissel"  wrote:





Hey all, 
Trying to setup a SUP in an untrusted domain, but getting error in WSUSCtrl.log 
indicating:System.Data.SqlClient.SqlException (0x80131904): Login failed. The 
login is from an untrusted domain and cannot be used with Windows 
authentication.~~ 


The site server has an MP and DP, both setup with a site server installation 
account.When setting up the SUP, used the same site server installation 
account, set WSUS to 8530 as per other SUPs in hierarchy, "selected Allow 
intranet-only client communications," no proxy. Have tried with the checkbox 
"Use credentials to connect to the WSUS server" enabled and deselected. When 
enabled, I used the same site server installation account which I believe is 
dbo on the wsus database back at the primary - In either case, the error above 
is the same


What am I missing?
Thanks,-S 










  





  

RE: [mssms] sccm client installation issues

[s kissel]

Have you tried putting in RESETKEYINFORMATION=TRUE in your install 
routine?http://technet.microsoft.com/en-us/library/gg699356.aspx

From: tgonza...@tins-swtx.com
To: mssms@lists.myitforum.com
Subject: [mssms] sccm client installation issues
Date: Sat, 12 Apr 2014 14:40:23 -0500

I’m sort stuck between a rock and tree…I’ve recently (1 month ago) upgraded to 
R2 (sccm2012) new hardware / vm. The DB is on a SQL cluster and the application 
resides on a VM (win2012). So everything is good, clients reporting in, the old 
2012 RTM has been decommed. I now have one single primary and ip address 
range’s, our AD Sites / Services boundaries are set with /8 and I had issues. 
So I went with ranges rather than allowing the boundaries to be created and 
added into the single group. I currently have over 11k objects discovered via 
(network / heartbeat / ad system); of those 11K I have 3700 (windows –client / 
server) and 900 (macintosh) and 3800 (mobile / tablet). Pretty good numbers. So 
one item I’m noticing on a few systems that are outside the US primarily in 
EMEA / HKG / Syd, is that they have the old RTM site code. I’ve done some spot 
checking within the schema, the old site code is not published, DNS is good, 
the new R2 server has rights to publish and the new site code is presented. Now 
on some of the client the ccmsetup log shows the following: The MP set to the 
new server and the return code of 0, which is an indication of success 
installation. However, within the locationservices.log I’m seeing a “failed to 
retireve DNS service record using _mssms_mp_(old sitecode).tcp_child domain, 
DNS returned error 9003” Not sure what is generating that since the system -> 
systemmanagement has no record of the old site code at the forest / domain / 
child domain level. Has anyone seen this before, I’ve done everything by even 
doing a manual (psexec remote execution of ccmsetup /uninstall) rebooted the 
resource and then executed a auto install as well as manual and still fails. 
Thanks  Thomas

  

RE: [mssms] SUP in untrusted domain

[s kissel]

Thanks for that! I applied the hotfix, but it was not able to solve the problem.
Regards,-S

Date: Thu, 10 Apr 2014 12:02:20 -0700
Subject: Re: [mssms] SUP in untrusted domain
From: elsal...@gmail.com
To: mssms@lists.myitforum.com

Found it. KB2522623. Test, maybe different issue than ours 


On Apr 10, 2014 11:58 AM, "elsalvoz"  wrote:

We were encountering the same issue and had to install a hotfix on the systems 
in all of our non-trusted domains to fix it. It is due to Kerberos. 

I will find the kb when I get back to the office. 
On Apr 10, 2014 11:19 AM, "s kissel"  wrote:





Hey all, 
Trying to setup a SUP in an untrusted domain, but getting error in WSUSCtrl.log 
indicating:System.Data.SqlClient.SqlException (0x80131904): Login failed. The 
login is from an untrusted domain and cannot be used with Windows 
authentication.~~ 


The site server has an MP and DP, both setup with a site server installation 
account.When setting up the SUP, used the same site server installation 
account, set WSUS to 8530 as per other SUPs in hierarchy, "selected Allow 
intranet-only client communications," no proxy. Have tried with the checkbox 
"Use credentials to connect to the WSUS server" enabled and deselected. When 
enabled, I used the same site server installation account which I believe is 
dbo on the wsus database back at the primary - In either case, the error above 
is the same


What am I missing?
Thanks,-S 










  

[mssms] SUP in untrusted domain

[s kissel]

Hey all, 
Trying to setup a SUP in an untrusted domain, but getting error in WSUSCtrl.log 
indicating:System.Data.SqlClient.SqlException (0x80131904): Login failed. The 
login is from an untrusted domain and cannot be used with Windows 
authentication.~~ 
The site server has an MP and DP, both setup with a site server installation 
account.When setting up the SUP, used the same site server installation 
account, set WSUS to 8530 as per other SUPs in hierarchy, "selected Allow 
intranet-only client communications," no proxy. Have tried with the checkbox 
"Use credentials to connect to the WSUS server" enabled and deselected. When 
enabled, I used the same site server installation account which I believe is 
dbo on the wsus database back at the primary - In either case, the error above 
is the same
What am I missing?
Thanks,-S 

RE: [mssms] smsexec.exe high memory utilization

[s kissel]

Actually much higher. When they start getting above 1500...

From: rj7...@att.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] smsexec.exe high memory utilization
Date: Fri, 28 Mar 2014 21:22:48 +









I assume the thread count would be something like over 150?  Running about 
130’s right now, but the system hasn’t gotten back into the funky mode yet.
 

Rick J. Jones


Wireless from AT&T

Domestic Desktop Application Management

D: (425) 288-6240 

C: (206) 419-1104 

 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of s kissel

Sent: Friday, March 28, 2014 10:15 AM

To: mssms@lists.myitforum.com

Subject: RE: [mssms] smsexec.exe high memory utilization


 

Check your thread count. If unusually high, it might be because of the port 
10123 notification communication bug that is confirmed by CSS. Hotfix not yet 
released
 for it though.




From:
hun@outlook.com

Subject: Re: [mssms] smsexec.exe high memory utilization

Date: Fri, 28 Mar 2014 22:40:36 +0530

To: mssms@lists.myitforum.com

Any backlogs ???



Sent from iPhonesorry for typos 




On 28-Mar-2014, at 10:40 pm, "JONES, RICK J"  wrote:




It seems that about when we applied March security patches that our SCCM 2012 
R2 Primary sites smsexec.exe gradually consumes all available memory.
 
Has anyone else been experiencing this issue?
 
Rick J. Jones


Wireless from AT&T

Domestic Desktop Application Management

D: (425) 288-6240 

C: (206) 419-1104 
 

 


 


 





  

RE: [mssms] CU1 available...

[s kissel]

For #1 yes:Look under the section called:"The following fixes are also included 
in this cumulative update for Operating System Deployment."

From: bogdan.r...@live.com
To: mssms@lists.myitforum.com
Subject: Re: [mssms] CU1 available...
Date: Fri, 28 Mar 2014 20:44:50 +0200









Hi,
 
Two questions please:
 
1. This CU1 also include KB2905002 or KB2910552 ?
 
2. Installing CU1, in case of migration scenarios, USMT 8.1 brings back 
support for Windows XP now ?
 
Thank you.
 


 

From: Rod Trent 
Sent: Friday, March 28, 2014 4:58 PM
To: mssms@lists.myitforum.com 
Subject: [mssms] CU1 available...
 


Also, includes new PowerShell functionality and 
fixes…
 
http://windowsitpro.com/configuration-manager/cu1-system-center-configuration-manager-2012-r2-released
 

 


  

RE: [mssms] SQL views for reporting on location of objects in ConfigMgr 2012 console

[s kissel]

You can join vSMS_Folders and vFolderMembers in combination with packages. 
Probably can do the same with Collections and Applications.

From: jkrue...@hfhs.org
To: mssms@lists.myitforum.com
Subject: [mssms] SQL views for reporting on location of objects in ConfigMgr 
2012 console
Date: Fri, 28 Mar 2014 17:27:32 +









Hey does anyone know if there are SQL views that will have the hierarchy of 
container node IDs for objects like collections, packages, applications etc?  
I’d like to build a report to show which folder an item is located in.  For 
example
 in 2007 there was a view for collections v_CollectToSubCollect which gave the 
parent collection to each sub collection.
 
Jeff Krueger
IT - Endpoint Design Services
Henry Ford Health System
jkrue...@hfhs.org
248.853.4466
 






CONFIDENTIALITY NOTICE: This email contains information from the sender that 
may be CONFIDENTIAL, LEGALLY PRIVILEGED, PROPRIETARY or otherwise protected 
from disclosure. This email is intended for use only by the person or entity to 
whom it is addressed. If
 you are not the intended recipient, any use, disclosure, copying, 
distribution, printing, or any action taken in reliance on the contents of this 
email, is strictly prohibited. If you received this email in error, please 
contact the sending party by reply
 email, delete the email from your computer system and shred any paper copies.



Note to Patients: There are a number of risks you should consider before using 
e-mail to communicate with us. See our Privacy & Security page on 
www.henryford.com for more detailed information as well as information 
concerning MyChart, our new patient portal.
 If you do not believe that our policy gives you the privacy and security 
protection you need, do not send e-mail or Internet communications to us.




  

RE: [mssms] smsexec.exe high memory utilization

[s kissel]

Check your thread count. If unusually high, it might be because of the port 
10123 notification communication bug that is confirmed by CSS. Hotfix not yet 
released for it though.

From: hun@outlook.com
Subject: Re: [mssms] smsexec.exe high memory utilization
Date: Fri, 28 Mar 2014 22:40:36 +0530
To: mssms@lists.myitforum.com

Any backlogs ???

Sent from iPhonesorry for typos 
On 28-Mar-2014, at 10:40 pm, "JONES, RICK J"  wrote:









It seems that about when we applied March security patches that our SCCM 2012 
R2 Primary sites smsexec.exe gradually consumes all available memory.
 
Has anyone else been experiencing this issue?
 
Rick J. Jones


Wireless from AT&T

Domestic Desktop Application Management

D: (425) 288-6240 

C: (206) 419-1104 
 








  

[mssms] Pull DP Question

[s kissel]

In 2012 R2, when setting up a Pull DP, I only have the option to select the 
Primary Site or other DPs as the source. Why am I unable to select a Secondary 
Site? Would a Secondary Site be available as a source if the DP was a part of 
the Secondary Site rather than a Primary Site?
Thanks,-S 

RE: [mssms] Change Port 10123

[s kissel]

That has already been done. We tuned port 10123 off there and specified 80 and 
443. No firewalls anywhere. Some clients, particularly in untrusted domains 
make a query for policy and never get a response. Clients see the correct MP 
and are approved. Presumably they aren't able to get the policy that they can't 
talk on port 10123 anymore. I'm wondering if it's a value I can change in WMI, 
and it's not the client computer online status.

Thanks,
-S

From: jmar...@babc.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Change Port 10123
Date: Thu, 6 Mar 2014 21:09:26 +









Configure the client notification port.

By default, client notification communication uses TCP port 10123. In the 
Configuration Manager console, click
Administration, Expand Site Configuration, click Sites, open
Properties dialog, from here you can configure the TCP port value in the 
Ports tab. You might have to configure the firewall on the management point, 
clients, and any intervening firewalls to allow communication over this new 
port. However, client notification can fall back to using HTTP and HTTPS.


 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of s kissel

Sent: Thursday, March 06, 2014 2:41 PM

To: mssms@lists.myitforum.com

Subject: [mssms] Change Port 10123


 

Hi 

 


So there may be a bug with port 10123 in that it opens a connection to the 
server, and when it doesn't get a response, it leaves the connection open. 
Naturally, it should fall back to port
 80 or 443, but the open connections raise the handle count on ccmexec to often 
well over 20,000 threads, rendering the client essentially useless without 
stopping the service remotely. We have a case open with CSS on this now, but 
suffice to say, there are
 no firewalls between the clients and servers that have this issue, and it 
mainly happens on Server 2003 systems and VMWare systems.


 


So we turned off port 10123. However, it appears that some of the clients now 
request policy but never download any, even after reinstalling the client. We 
are thinking that is because they
 believe they are still supposed to talk on port 10123 still since they never 
received the policy that that port is now blocked. I queried the registry to 
see if there was port 10123 in there anywhere but was not able to find it. 
Thus, it must be in WMI. Does
 anyone off the top of their head know where to find this in WMI? I started 
poking around in the Root\CCM\Policy, but haven't found it yet. 


 


Any ideas?


 


Thanks,


-S


 





Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.






Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.






  

[mssms] Change Port 10123

[s kissel]

Hi
So there may be a bug with port 10123 in that it opens a connection to the 
server, and when it doesn't get a response, it leaves the connection open. 
Naturally, it should fall back to port 80 or 443, but the open connections 
raise the handle count on ccmexec to often well over 20,000 threads, rendering 
the client essentially useless without stopping the service remotely. We have a 
case open with CSS on this now, but suffice to say, there are no firewalls 
between the clients and servers that have this issue, and it mainly happens on 
Server 2003 systems and VMWare systems.
So we turned off port 10123. However, it appears that some of the clients now 
request policy but never download any, even after reinstalling the client. We 
are thinking that is because they believe they are still supposed to talk on 
port 10123 still since they never received the policy that that port is now 
blocked. I queried the registry to see if there was port 10123 in there 
anywhere but was not able to find it. Thus, it must be in WMI. Does anyone off 
the top of their head know where to find this in WMI? I started poking around 
in the Root\CCM\Policy, but haven't found it yet. 
Any ideas?
Thanks,-S 

RE: [mssms] Deleting Orphaned DP

[s kissel]

That's the cleanest way I know. Does the DP also have a management point on it? 
As a test, I removed the DP role from a site system in my lab, got some errors, 
but cannot remove the site server itself since it also had an mp on it, and 
it's looking for some confirmation that the mp role is removed before it 
relinquishes control of the Component Server role. 
However, the component server role is not installed if the site server is just 
a DP. I can re-establish network connectivity with the VM, let it remove the 
Component Server so I can remove the site system, and then can push the DP back 
to the VM, disable network connectivity, remove the DP role and test again for 
you if you'd like?
-S
From: cbar...@penskeautomotive.com
To: mssms@lists.myitforum.com
Date: Tue, 4 Mar 2014 16:53:20 -0500
Subject: RE: [mssms] Deleting Orphaned DP

Nothing cleaner than that? Doesn’t it retry continuously to try and contact the 
DP?  Chris Barnes Senior Technical Specialist Penske Automotive Group, 
Inc.Desk:  (248) 648-2528Cell: (248) 767-4415 PENSKECARS.COM  From: 
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of s kissel
Sent: Tuesday, March 4, 2014 4:50 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deleting Orphaned DP Admin workspace, sites and servers, 
find dp, select delete. Wait a few, then rebuild.From: 
cbar...@penskeautomotive.com
To: mssms@lists.myitforum.com
Date: Tue, 4 Mar 2014 16:24:52 -0500
Subject: [mssms] Deleting Orphaned DPI have a server that crapped out at a 
remote site that was running the DP role that I will need to rebuild.  Does 
anyone have a quick and easy way to delete a DP out of SCCM 2012R2? My googling 
so far has only yielded stuff for 2007.   Chris Barnes Senior Technical 
Specialist Penske Automotive Group, Inc.Desk:  (248) 648-2528Cell: (248) 
767-4415 PENSKECARS.COM   Penske Automotive Group and its affiliates will never 
sell or rent your email address in violation of applicable law. This email and 
any files transmitted with it are confidential and intended solely for use of 
the individual or entity to whom they are addressed. Please delete all copies 
if you are not the intended recipient. 

  


<>

RE: [mssms] Deleting Orphaned DP

[s kissel]

Admin workspace, sites and servers, find dp, select delete. Wait a few, then 
rebuild.

From: cbar...@penskeautomotive.com
To: mssms@lists.myitforum.com
Date: Tue, 4 Mar 2014 16:24:52 -0500
Subject: [mssms] Deleting Orphaned DP









I have a server that crapped out at a remote site that was running the DP role 
that I will need to rebuild.

 
Does anyone have a quick and easy way to delete a DP out of SCCM 2012R2? My 
googling so far has only yielded stuff for 2007.

 

 
Chris Barnes
 
Senior Technical Specialist 
Penske Automotive Group, Inc.
Desk:  (248) 648-2528
Cell: (248) 767-4415
 

PENSKECARS.COM
 

 




Penske Automotive Group and its affiliates will never sell or rent your email 
address in violation of applicable law. This email and any files transmitted 
with it are confidential and intended solely for use of the individual
 or entity to whom they are addressed. Please delete all copies if you are not 
the intended recipient.







  


<>

RE: [mssms] SW Updates in SCCM 2012

[s kissel]

I would actually highly recommend NOT going with a yearly package. You can end 
up with 5-10 gigs worth of patches passed around an environment, and when you 
have something like 80 secondaries and another 100 distribution points, pushing 
that size package around every month will deplete your sending resources for 
other packages very quickly. While it's a bit more management to have a 
monthly, or even quarterly package, it scales a lot better in terms of your WAN 
and far off resources being able to handle it better. Furthermore, if some of 
the content is missing (either a language didn't get downloaded or your clients 
in a distant region are complaining that the updates are stuck in a downloading 
state) it is a lot easier to find the problematic update, fix it, and then 
redistribute a small say 100-200 MB software update package than a couple gig 
one. 
-S

From: surajit.mukher...@fisglobal.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] SW Updates in SCCM 2012
Date: Wed, 26 Feb 2014 09:02:31 +









Better to go with yearly package. 
 
Whenever monthly patches are relased by MS those can be downloaded and kept 
into that package. Doing this method all your clients including new builds will 
be benefited to have minimum one year patches from MS and that would cover up 
most
 of the vulnerabilities. Thank You.
 
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of JRIT

Sent: Wednesday, February 26, 2014 2:09 PM

To: mssms@lists.myitforum.com

Subject: [mssms] SW Updates in SCCM 2012
 


Folks,



Is there a best (or common) practice to create packages for SW Updates? I mean, 
how many packages is common to have, one per month

, or one for each semester, per year?



Any tips around this?



Thank you,

 



_

The information contained in this message is proprietary and/or confidential. 
If you are not the intended recipient, please: (i) delete the message and all 
copies; (ii) do not disclose, distribute or use the message in any manner; and 
(iii) notify the sender immediately. In addition, please be aware that any 
message addressed to our domain is subject to archiving and review by persons 
other than the intended recipient. Thank you.





  

[mssms] Multicast Question

[s kissel]

Hopefully a quick question - In SCCM 2012 R2, if you've already distributed a 
package to a DP, and later you come around and select "Allow this package to be 
transferred via multicast (WinPE only)" setting, do you need to redistribute 
the package to all DPs, or does the change get acknowledged on the fly by the 
WinPE clients?
Thanks!-S 

RE: [mssms] A big uh-oh!

[s kissel]

Yes, it is R2.

From: obrien.da...@outlook.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] A big uh-oh!
Date: Tue, 11 Feb 2014 17:07:46 +0100




It's not R2, right?

---
David
http://www.david-obrien.net


From: sakis...@outlook.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] A big uh-oh!
Date: Tue, 11 Feb 2014 10:00:39 -0600




If there is a way to cancel all distributions of a particular package, I could 
run that about 60 times, and that would help us out greatly.

Date: Tue, 11 Feb 2014 09:30:28 -0600
Subject: Re: [mssms] A big uh-oh!
From: ryan2...@gmail.com
To: mssms@lists.myitforum.com

I meant use a script to cancel all distributions. There is a method in 
SMS_DistributionPoint called CancelDistribution which could be used to cancel 
all in progress distributions.
I don't know of any way to target it based on date the content was pushed, but 
you could easily target all in progress content on a single DP.


On Tue, Feb 11, 2014 at 8:33 AM, s kissel  wrote:




Ryan, 
That works in R2, but it's a slow, manual process. There is an easy way to 
remove content from multiple DPs (the messy part if they are currently in 
progress sending), but not really any way to cancel content distribution 
progress to multiple DPs quickly and cleanly from within the console. Also, I 
wouldn't want to cancel all in progress distributions, just most of them.

Regards-S

Date: Mon, 10 Feb 2014 15:13:29 -0600
Subject: Re: [mssms] A big uh-oh!
From: ryan2...@gmail.com

To: mssms@lists.myitforum.com

Under Content Status, if you view status on one of the packages can you cancel 
it?  Or were you saying that is messy?  I can write a script which will cancel 
all in progress distributions. 





On Mon, Feb 10, 2014 at 2:47 PM, s kissel  wrote:





Looking for some ideas to cleanly handle this:A script got ran that was 
supposed to deploy a number of packages to a single DP in SCCM 2012. 
Unfortunately, the script was not thoroughly tested and/or was used in a 
production environment and ended up pushing every single package to every 
single Secondary Site and DP in the environment - and this is a lot on a lot!


Fortunately, it twas not I who ran this nonesense, so my hide is safe :)
However, knowing that SCCM can sometimes be temperamental, and having seen 
first-hand how a DP can react when you stop deploying a package that is still 
pushing to it and the WMI traces it can leave behind, is it safer to just ride 
this one out for the next week and a half? Or is there a quick and easy way, 
without getting on SCCM's bad side and ultimately having to rebuild sites, to 
stop the content flow gracefully?


Regards,-S







  







  


  


  


<>

RE: [mssms] A big uh-oh!

[s kissel]

If there is a way to cancel all distributions of a particular package, I could 
run that about 60 times, and that would help us out greatly.

Date: Tue, 11 Feb 2014 09:30:28 -0600
Subject: Re: [mssms] A big uh-oh!
From: ryan2...@gmail.com
To: mssms@lists.myitforum.com

I meant use a script to cancel all distributions. There is a method in 
SMS_DistributionPoint called CancelDistribution which could be used to cancel 
all in progress distributions.
I don't know of any way to target it based on date the content was pushed, but 
you could easily target all in progress content on a single DP.


On Tue, Feb 11, 2014 at 8:33 AM, s kissel  wrote:




Ryan, 
That works in R2, but it's a slow, manual process. There is an easy way to 
remove content from multiple DPs (the messy part if they are currently in 
progress sending), but not really any way to cancel content distribution 
progress to multiple DPs quickly and cleanly from within the console. Also, I 
wouldn't want to cancel all in progress distributions, just most of them.

Regards-S

Date: Mon, 10 Feb 2014 15:13:29 -0600
Subject: Re: [mssms] A big uh-oh!
From: ryan2...@gmail.com

To: mssms@lists.myitforum.com

Under Content Status, if you view status on one of the packages can you cancel 
it?  Or were you saying that is messy?  I can write a script which will cancel 
all in progress distributions. 





On Mon, Feb 10, 2014 at 2:47 PM, s kissel  wrote:





Looking for some ideas to cleanly handle this:A script got ran that was 
supposed to deploy a number of packages to a single DP in SCCM 2012. 
Unfortunately, the script was not thoroughly tested and/or was used in a 
production environment and ended up pushing every single package to every 
single Secondary Site and DP in the environment - and this is a lot on a lot!


Fortunately, it twas not I who ran this nonesense, so my hide is safe :)
However, knowing that SCCM can sometimes be temperamental, and having seen 
first-hand how a DP can react when you stop deploying a package that is still 
pushing to it and the WMI traces it can leave behind, is it safer to just ride 
this one out for the next week and a half? Or is there a quick and easy way, 
without getting on SCCM's bad side and ultimately having to rebuild sites, to 
stop the content flow gracefully?


Regards,-S







  







  


<>

RE: [mssms] A big uh-oh!

[s kissel]

Ryan, 
That works in R2, but it's a slow, manual process. There is an easy way to 
remove content from multiple DPs (the messy part if they are currently in 
progress sending), but not really any way to cancel content distribution 
progress to multiple DPs quickly and cleanly from within the console. Also, I 
wouldn't want to cancel all in progress distributions, just most of them.
Regards-S

Date: Mon, 10 Feb 2014 15:13:29 -0600
Subject: Re: [mssms] A big uh-oh!
From: ryan2...@gmail.com
To: mssms@lists.myitforum.com

Under Content Status, if you view status on one of the packages can you cancel 
it?  Or were you saying that is messy?  I can write a script which will cancel 
all in progress distributions. 




On Mon, Feb 10, 2014 at 2:47 PM, s kissel  wrote:




Looking for some ideas to cleanly handle this:A script got ran that was 
supposed to deploy a number of packages to a single DP in SCCM 2012. 
Unfortunately, the script was not thoroughly tested and/or was used in a 
production environment and ended up pushing every single package to every 
single Secondary Site and DP in the environment - and this is a lot on a lot!

Fortunately, it twas not I who ran this nonesense, so my hide is safe :)
However, knowing that SCCM can sometimes be temperamental, and having seen 
first-hand how a DP can react when you stop deploying a package that is still 
pushing to it and the WMI traces it can leave behind, is it safer to just ride 
this one out for the next week and a half? Or is there a quick and easy way, 
without getting on SCCM's bad side and ultimately having to rebuild sites, to 
stop the content flow gracefully?

Regards,-S







  


<>

[mssms] A big uh-oh!

[s kissel]

Looking for some ideas to cleanly handle this:A script got ran that was 
supposed to deploy a number of packages to a single DP in SCCM 2012. 
Unfortunately, the script was not thoroughly tested and/or was used in a 
production environment and ended up pushing every single package to every 
single Secondary Site and DP in the environment - and this is a lot on a lot!
Fortunately, it twas not I who ran this nonesense, so my hide is safe :)
However, knowing that SCCM can sometimes be temperamental, and having seen 
first-hand how a DP can react when you stop deploying a package that is still 
pushing to it and the WMI traces it can leave behind, is it safer to just ride 
this one out for the next week and a half? Or is there a quick and easy way, 
without getting on SCCM's bad side and ultimately having to rebuild sites, to 
stop the content flow gracefully?
Regards,-S

RE: [mssms] How to change purpose of an existing deployment from Available to Required

[s kissel]

No, unfortunately not. It doesn't change in R2 either. You can always create 
new deployment though. 
-S

From: sew...@unum.com
To: mssms@lists.myitforum.com
Date: Wed, 5 Feb 2014 14:20:32 -0500
Subject: [mssms] How to change purpose of an existing deployment from Available 
to Required

We are running System Center 2012 Configuration Manager SP1 CU3.  Is there any 
way to change the purpose of an existing deployment from Available to Required? 
   

  


<>

RE: [mssms] Business Hours and MWs as related to patching servers

[s kissel]

Thanks Jason. Just needed that extra clarification. *sighs at bogus blogger 
info*

From: ja...@sandys.us
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Business Hours and MWs as related to patching servers
Date: Wed, 5 Feb 2014 19:06:24 +










That blog post is completely wrong. As mentioned, once a deadline hits, the 
business hours are not used.

 

It's a super easy test though to verify in your own mind. In fact, you've 
already got business hours, they are set by default on all client agents. Has 
this ever stopped you from deploying anything required?

 

J





From: listsad...@lists.myitforum.com  on behalf 
of s kissel 

Sent: Wednesday, February 5, 2014 12:48 PM

To: mssms@lists.myitforum.com

Subject: RE: [mssms] Business Hours and MWs as related to patching servers
 


Jason, 



Thank you for the reply. I understand that they are different and how MWs work. 
I've also read over that blog several times. In fact, CSS even referred the 
client to it.



However, the following blog has an opposing view on it, and thus the question 
as to who is right?:
http://nuttyrat.blogspot.com/2013/07/sccm-2012-maintenance-windows-and.html
Paragraph's 3 and 4.



I'm more inclined to believe the product team over another blogger (who 
hopefully isn't posting wrong information), but in regards to a few thousand 
production servers, this is a question that needs a crystal clear answer. 



Thanks,
-S





From: ja...@sandys.us

To: mssms@lists.myitforum.com

Subject: RE: [mssms] Business Hours and MWs as related to patching servers

Date: Wed, 5 Feb 2014 18:27:57 +





Business hours and maintenance windows are two completely different things. 

 

MWs restrict when things can run and can only be set on the ConfigMgr server 
side. MWs also only come into play after a deadline is reached when a 
deployment thus becomes mandatory.

 

BHs cause things to run automatically before a deadline is reached based on a 
user's preference. They in no way restrict when deployments are executed and 
once a deadline is reached, BH's are not considered at all.

 

There's a great blog post from the product Team (Dave Randall specifically) on 
this that goes into more details:

http://blogs.technet.com/b/server-cloud/archive/2012/03/28/business-hours-vs-maintenance-windows-with-system-center-2012-configuration-manager.aspx

 

J





From: listsad...@lists.myitforum.com  on behalf 
of s kissel 

Sent: Wednesday, February 5, 2014 10:26 AM

To: mssms@lists.myitforum.com

Subject: [mssms] Business Hours and MWs as related to patching servers
 


Environment is SCCM 2012 R2. Client has a couple thousand servers spread out 
through various patch collections having a maintenance window for each 
collection, but the maintenance window is different from collection to 
collection. Furthermore,
 the server owners are able to move their servers from one MW collection to 
another using a web interface, but that shouldn't be overly related.



Knowing how MWs work and that they work the same as in CM07, what's to stop a 
server owner from entering the Software Center and setting their business hours 
From 12:00 AM through 12:00 AM for all days, AND checking the box 
"Automatically install or uninstall
 required software and restart the computer only outside of the specified 
business hours? Would that mean that the server would never get patched. Is 
this an accurate assumption, or am I missing something?



I realize there are powershell and vb scripts that can set the business hours, 
but am curious how others are patching servers and dealing with the business 
hours.



Thanks,
-S




















  

RE: [mssms] Business Hours and MWs as related to patching servers

[s kissel]

Jason, 
Thank you for the reply. I understand that they are different and how MWs work. 
I've also read over that blog several times. In fact, CSS even referred the 
client to it.
However, the following blog has an opposing view on it, and thus the question 
as to who is 
right?:http://nuttyrat.blogspot.com/2013/07/sccm-2012-maintenance-windows-and.htmlParagraph's
 3 and 4.
I'm more inclined to believe the product team over another blogger (who 
hopefully isn't posting wrong information), but in regards to a few thousand 
production servers, this is a question that needs a crystal clear answer. 
Thanks,-S

From: ja...@sandys.us
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Business Hours and MWs as related to patching servers
Date: Wed, 5 Feb 2014 18:27:57 +










Business hours and maintenance windows are two completely different things. 

 

MWs restrict when things can run and can only be set on the ConfigMgr server 
side. MWs also only come into play after a deadline is reached when a 
deployment thus becomes mandatory.

 

BHs cause things to run automatically before a deadline is reached based on a 
user's preference. They in no way restrict when deployments are executed and 
once a deadline is reached, BH's are not considered at all.

 

There's a great blog post from the product Team (Dave Randall specifically) on 
this that goes into more details:

http://blogs.technet.com/b/server-cloud/archive/2012/03/28/business-hours-vs-maintenance-windows-with-system-center-2012-configuration-manager.aspx

 

J





From: listsad...@lists.myitforum.com  on behalf 
of s kissel 

Sent: Wednesday, February 5, 2014 10:26 AM

To: mssms@lists.myitforum.com

Subject: [mssms] Business Hours and MWs as related to patching servers
 


Environment is SCCM 2012 R2. Client has a couple thousand servers spread out 
through various patch collections having a maintenance window for each 
collection, but the maintenance window is different from collection to 
collection. Furthermore,
 the server owners are able to move their servers from one MW collection to 
another using a web interface, but that shouldn't be overly related.



Knowing how MWs work and that they work the same as in CM07, what's to stop a 
server owner from entering the Software Center and setting their business hours 
From 12:00 AM through 12:00 AM for all days, AND checking the box 
"Automatically install or uninstall
 required software and restart the computer only outside of the specified 
business hours? Would that mean that the server would never get patched. Is 
this an accurate assumption, or am I missing something?



I realize there are powershell and vb scripts that can set the business hours, 
but am curious how others are patching servers and dealing with the business 
hours.



Thanks,
-S










  

[mssms] Business Hours and MWs as related to patching servers

[s kissel]

Environment is SCCM 2012 R2. Client has a couple thousand servers spread out 
through various patch collections having a maintenance window for each 
collection, but the maintenance window is different from collection to 
collection. Furthermore, the server owners are able to move their servers from 
one MW collection to another using a web interface, but that shouldn't be 
overly related.
Knowing how MWs work and that they work the same as in CM07, what's to stop a 
server owner from entering the Software Center and setting their business hours 
From 12:00 AM through 12:00 AM for all days, AND checking the box 
"Automatically install or uninstall required software and restart the computer 
only outside of the specified business hours? Would that mean that the server 
would never get patched. Is this an accurate assumption, or am I missing 
something?
I realize there are powershell and vb scripts that can set the business hours, 
but am curious how others are patching servers and dealing with the business 
hours.
Thanks,-S 

[mssms] Cannot insert duplicate key in object 'dbo.PkgStatus_G'.

[s kissel]

Hi all, 
Receiving this error on one of the secondary sites in the hierarchy. Not much 
appearing in the way of Google hits for this, other than possibly updating the 
DB, unsupported of course. The key does already exist in the DB, but I'm not 
sure why it's only happening for this particular package on this particular 
secondary. All other secondaries and all other packages are fine. SCCM 2012 R2, 
and the Secondary has SQL Server 2012 SP1 installed, like all the other 
Secondary Site servers.
I've tried all the simple ones like refreshing package, removing package from 
site, wait a day, reapply, as well as rebooting, and even using 
extractcontent.exe, but so far nothing has worked.
Any ideas?
Cheers.   

[mssms] HP Z820 imaging with CM12 R2

[s kissel]

Hi - Anyone had any luck with this model with CM 2012 R2?
The problem that we're experiencing is that after the WIM image is applied and 
after the machine reboots, it should begin the mini-setup phase.  What happens 
instead though is it is in the process of updating the system settings and 
updating the registry, but never reaches the actual device enumeration phase 
(i.e. where shows the percentage complete during mini-setup).  At this point, 
it gets a BSOD (stop 0x0067 config initialization failed).
In this scenario, we only have the LSI driver for the mass storage controller, 
the chipset driver and NIC driver as part of the package for testing purposes.  
If we remove NIC driver from the equation, this error does not occur and 
mini-setup runs, however, the NIC won’t be resolved in the device manager, so 
after mini-setup runs successfully and the machine reboots in preparation to 
install the SCCM client, it will run into a BITS 2.5 or later required message 
along with not being able to contact the AD site.  We have tried the NIC driver 
for the “Intel(R) 82579LM” adapter from both HP’s site and Intel’s site and 
with different version releases, but they all run into the BSOD issue.
Currently, we are utilizing an x86 WinPE 5 boot image, but will try an x64 
WinPE 5 boot image today if time.  These machines do not have a problem when 
deployed to from SCCM 2007 and they also worked in SCCM 2012 prior to the SCCM 
2012 R2, ADK 8.1 and WinPE5 upgrade.  
If you need me to provide additional details, please let me know. 
Thanks,-S 

RE: [mssms] Migrate RDL reports

[s kissel]

I've had good luck with this 
tool:http://blog.coretech.dk/kea/migrate-reports-from-sccm-2007-to-sccm-2012-sp1/
It will work in moving any RDL from one SSRS server to another, so disregard 
the 2007 to 2012 part.

Date: Thu, 9 Jan 2014 21:02:54 -0200
Subject: [mssms] Migrate RDL reports
From: pedrosp27bra...@gmail.com
To: mssms@lists.myitforum.com

If I create a Report in my LAB environment how can I migrate the RDL file to my 
production environment? Is there a better way to do that? I want to migrate 40 
custom reports. Need I change dataset config for each report? :(




  

RE: [mssms] Web Reports & IE 11

[s kissel]

You may also want to check that the logged in user has the security roles 
assigned to them of Read and Run Report for the various pieces that could 
populate those drop-downs, such as Collection, Users, Configuration Item, 
Package, etc.
-S

From: rodtr...@myitforum.com
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Web Reports & IE 11
Date: Thu, 12 Dec 2013 19:13:02 +







Did you try compatibility mode?

Sent from Lenovo Tablet 2
From: Aday, Karalene B   (RCIS)
Sent: ‎Thursday‎, ‎December‎ ‎12‎, ‎2013 ‎2‎:‎02‎ ‎PM
To: SMS


Good Afternoon!
 
I am running windows 8.1 and IE 11, when I open SCCM 2012 web reports the page 
comes up with the reports but when you go into a report that has a drop down 
for you to choose an option it is not populated with any data.
 
When I do the same thing on other versions of IE everything works great.  Does 
anyone else have a solution they can offer? 

 
Thank you!
 










  

[mssms] RE: Shared DPs missing from Source Hierarchy after R2 Upgrade

[s kissel]

Non-Issue. They started appearing 5-6 hours after re-initializing site 
migrations and even doing forced "Gather Data Now" operations, refreshes, 
closing and reopening the console, etc.. "Slow Moving Software" is still 
relevant :)

From: sakis...@outlook.com
To: mssms@lists.myitforum.com
Subject: Shared DPs missing from Source Hierarchy after R2 Upgrade
Date: Thu, 21 Nov 2013 12:45:17 -0600




Hey all, 
Anyone run into this before and/or can think of a solution?
ScenarioSCCM 2007 SP2 R3 set as Source Hierarchy for SCCM 2012 SP1 CU3 site. 
Decide to upgrade to SCCM 2012 R2Stop data gathering on central and all primary 
SCCM 2007 Source Hierarchy sites (the R2 installer won't continue if you don't 
do this)Install R2 on the CASInstall Hotfix KB2905002 on the CASConfigure site 
credentials for central and all primary SCCM 2007 sites, checking the "Enable 
distribution-point sharing for this source site", and resume data 
gatheringViewing the Shared Distribution Points tab for all primary SCCM 2007 
source hierarchy sites is now empty - these values were there before.
One huge plus is that software distributions still seem to occur from those 
shared distribution points that no longer appear, but seeing them listed would 
put minds at ease. The primary sites have not yet been upgraded - would that 
make a difference?
-S  
  

[mssms] Automating Migration Jobs

[s kissel]

Hi
Does anyone have a tool or script to automate migration jobs from SCCM 2007 to 
SCCM 2012? Specifically, I'm looking for a way to migrate new or updated 
objects (packages) only from SCCM 2007 to SCCM 2012 on a daily or twice-daily 
basis and overwrite existing objects if they exist. The reason for this is that 
there are a lot package changes occurring in SCCM 2007 during the migration, 
and creating a migration job daily seems like an opportunity for automation.
Thanks!   

RE: [mssms] RE: SCCM 2012 Professional Services Recommendation

[s kissel]

I'd also recommend Sogeti.

From: christopher.catl...@us.sogeti.com
To: mssms@lists.myitforum.com
Subject: [mssms] RE: SCCM 2012 Professional Services Recommendation
Date: Wed, 6 Nov 2013 18:43:39 +









Shameless Plug,
 
We do that ;)
 

Christopher Catlett
Consultant
| Detroit

 
Sogeti USA
Office 248-876-9738 |Fax 877.406.9647

26957 Northwestern Highway, Suite 130, Southfield, MI 48033-8456
www.us.sogeti.com

 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Jimmy Martin

Sent: Wednesday, November 06, 2013 12:07 PM

To: mssms@lists.myitforum.com

Subject: [mssms] RE: SCCM 2012 Professional Services Recommendation


 
We used CDW during our upgrade and were pleased with them. 

 
If you have a Microsoft agreement you may have access to a healthcheck for sccm 
from them
 


From:
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Bruckner, Ian

Sent: Wednesday, November 06, 2013 10:56 AM

To: mssms@lists.myitforum.com

Subject: [mssms] SCCM 2012 Professional Services Recommendation


 
Do you have a recommendation for a provider of professional services for SCCM 
2012?
 
My organization would like a professional review of our architecture plans.
 
Thanks,
 
Ian Bruckner
IT Automation Specialist
Infrastructure, Operations, and Networking
Illinois State University
 

   http://at.illinoisstate.edu/
 
Like us on Facebook
 
 

This message and any files transmitted with it may contain legally privileged, 
confidential, or proprietary information. If you are not the intended recipient 
of this message, you are not permitted to use, copy, or forward it, in whole or 
in part without
 the express consent of the sender. Please notify the sender of the error by 
reply email, disregard the foregoing messages, and delete it immediately.

 
P
Please consider the environment before printing this email...

 

 





  


<><>

[mssms] Upgrade Assessment Tool

[s kissel]

Has anyone else installed and used the Upgrade Assessment Tool with SCCM 2012 
SP1 and experience problems straight away? As with the Application 
Compatibility Toolkit Connector for SCCM 2007, this seems to be a half-baked, 
poorly tested add-on with minimal documentation, thus leading to hours of 
architecture and administrator time resolving presumably easily fixable details.
Specifically, I've had to do the following modifications in order to get the 
synchronization process and reports to work properly:Allow execute permission 
on the sp_UATCreateTempTable, sp_UATGetUniqueDevices, sp_UATMergeTable stored 
procedures.Modify the stored procedure sp_UATCreateTempTable per 
recommendations in this thread: 
http://social.technet.microsoft.com/Forums/en-US/80e7f5b5-1893-497a-ac37-3df9e789cf28/upgrade-assessment-tool-sync-issues?forum=configmanagergeneralAllow
 Insert, Update, Delete, and Select permissions on UAT_Application, 
UAT_Application_Report, UAT_Deployment_OS, UAT_Machine, 
UAT_Machine_Installed_App, UAT_MachineS, UAT_MachineS_Installed_App, and 
UAT_OS_System_Requirement tables.Modify the datasets in the "Application status 
for computers in a specific collection", "Hardware device status for computers 
in a specific collection", and "Operating system requirement status for 
computers in a specific collection" reports to use the original queries which 
used the correct FCM alias rather than MAM, MDS, or MSR aliases respectively.
Thoughts?
At least the reporting on column MyRating64 appears to work correctly now, so 
that's a minor plus over the ACT Connector :)
-S

[mssms] Task Sequence Site Assignment

[s kissel]

Hi All - Wanted to see what options there may be for assigning a site code 
based upon ADSite that the client is in during a TS. Client has 3 site codes 
which pertain to 3 primaries (which roll up to a CAS). Since the Setup Windows 
and ConfigMgr task runs while still in WinPE, and the machine will not be 
joined to the domain at that time until after the reboot when the mini-setup 
runs, would there be any issue with setting SMSSITECODE in the command line to 
one of the three site codes, and then assign the proper site code a bit later 
with a VBScript that checks the ADSite of the client? What alternatives, if 
any, exist?
Thanks!   

RE: [mssms] Collections won't update my AD groups

[s kissel]

Does it appear if you try:select 
SMS_R_USERGROUP.ResourceID,SMS_R_USERGROUP.ResourceType,SMS_R_USERGROUP.Name,SMS_R_USERGROUP.UniqueUsergroupName,SMS_R_USERGROUP.WindowsNTDomain
 from SMS_R_UserGroup where SMS_R_UserGroup.UniqueUsergroupName = 
"MYDOMAIN\\SW_Office_2013_Uninstall"

From: mcdonald...@hotmail.com
To: mssms@lists.myitforum.com
Subject: [mssms] Collections won't update my AD groups
Date: Thu, 17 Oct 2013 08:40:56 -0500




I am attempting to create 2 collections for my Microsoft Office 2013 
installation.

In AD, I have created the following domain local security groups:

SW_Office_2013_Uninstall
SW_Office_2013_Install

In ConfigMgr, I have created two collections with the same naming convention.

Here is the query I'm using:

select 
SMS_R_USERGROUP.ResourceID,SMS_R_USERGROUP.ResourceType,SMS_R_USERGROUP.Name,SMS_R_USERGROUP.UniqueUsergroupName,SMS_R_USERGROUP.WindowsNTDomain
 from SMS_R_UserGroup where SMS_R_UserGroup.Name = 
"MYDOMAIN\\SW_Office_2013_Uninstall"

I then ran a full discovery on the AD Group Discovery, then updated my 
collection memberships. 

I cannot get the AD groups to show in my member count properly. If I go to edit 
the query and select value I do not see the AD groups I created in the list.

Are there any specific logs or anything I should be looking at to investigate 
this further?

Thank you,

Brian
  


  

RE: [mssms] CU3, agent installation issue

[s kissel]

Here's the resolution that worked... It's almost too simple, don't laugh :)
ccmsetup.exe SMSSITECODE=Auto 
PATCH=\\SERVERNAME\FOLDER\configmgr2012ac-sp1-kb2882125-x64.msp
-S

From: sakis...@outlook.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] CU3, agent installation issue
Date: Thu, 3 Oct 2013 16:38:13 -0500




That's great if it's a primary. :) However,  the Remove Role option is greyed 
out for the Management Point on Secondary site servers. I haven't yet found a 
way to make it work.
-S

From: agca...@ufl.edu
To: mssms@lists.myitforum.com
Subject: RE: [mssms] CU3, agent installation issue
Date: Thu, 3 Oct 2013 19:56:51 +









We are seeing this as well in our test environment and have opened a case with 
Microsoft.  Our initial findings are that this occurs when you attempt to 
install
 the SCCM client on a server which also host the management point role.  We 
were able to work around the issue (as proof of concept) by first removing the 
management point role from a server, then installing the client and 
reinstalling the management point
 role.
 
I still have another MP that is broken awaiting a fix from Microsoft and will 
update the list with the resolution.
 
Thanks,
 
-Andrew
 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Roland Janus

Sent: Wednesday, October 2, 2013 5:06 PM

To: mssms@lists.myitforum.com

Subject: RE: [mssms] CU3, agent installation issue


 
So busted you’re saying and waiting for a fix
J
 
Good to know, tell us when you get something. I’m not opening a case now.
 
-roland
 
 


From:
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of s kissel

Sent: Mittwoch, 2. Oktober 2013 22:47

To: mssms@lists.myitforum.com

Subject: RE: [mssms] CU3, agent installation issue


 

Contacted Premier and there was another case with the same issue opened before 
me. For them, the solution was to uninstall CU3, install the client, then 
install CU3 Site Server
 hotfix. Did you get that to work for you by chance? They will need to build a 
lab and test for me, which may take some time.

 


In my case, Server 2012, CU3 appears in "View Installed Updates", but the 
Uninstall icon/link is missing. The icon/link appears for other updates, 
however. So I attempted to
 uninstall it by doing msiexec /x CM12-SP1CU3-KB2882125-X64-ENU.msi, and while 
that removed it from the list of installed updates, the error was still 
occurring when attempting to install the client. At this point, it may be 
easier to rebuild the server, but
 it would be nice to get a resolution out in the CM community as there appears 
to only be a handful of users experiencing this at the moment.


 


Scott




From:
roland.ja...@hispeed.ch

To: mssms@lists.myitforum.com

Subject: RE: [mssms] CU3, agent installation issue

Date: Wed, 2 Oct 2013 21:57:31 +0200

Yeap, premier is likely what you need now, you can’t go back.
We haven’t anything in prod (that means CM12 in general
J ), so I’ve just delayed CU3 for now.
 
-Roland
 
 


From:
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of s kissel

Sent: Mittwoch, 2. Oktober 2013 15:33

To: mssms@lists.myitforum.com

Subject: RE: [mssms] CU3, agent installation issue


 

I'm not sure not using CU3 is a solution at this point since it is deployed 
across the CAS, three primaries, and multiple secondary sites in the hierarchy 
already. Only the CAS
 and three primaries and one secondary don't have the client installed at this 
time, and it was on that single secondary that I discovered the issue. I 
generally like to have everything on the same version as much as possible, so 
that there is less chance of
 database anomalies or corruption later on down the line. :)

 


Is the best course of action at this point to contact Premier Support, or are 
there resources on this mailing list who can submit this is a DCR?


 


Thanks,


Scott




From:
roland.ja...@hispeed.ch

To: mssms@lists.myitforum.com

Subject: RE: [mssms] CU3, agent installation issue

Date: Wed, 2 Oct 2013 09:30:58 +0200

That is the issue I’ve seen and what Daniel wanted to test to confirm
You just confirmed the bug
J
 
My only solution was to not use CU3 at all
 
-R
 


From:
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of s kissel

Sent: Mittwoch, 2. Oktober 2013 05:57

To: mssms@lists.myitforum.com

Subject: RE: [mssms] CU3, agent installation issue


 

Hi – Sorry to just be jumping in this conversation and pasting the archive 
thread below (new subscriber). However, I too am experiencing the issue and am 
wondering
 what solution, if any, there is currently.
 
Ccmsetup.log:
[snip]
File C:\Windows\ccmsetup\{59A0EA77-D28C-4286-83A6-04BB57B9CDD6}\client.msi 
installation failed. Error text: ExitCode: 1603
Action: CcmRegisterHostingConfiguration.
ErrorMessages:
Setup was unable to register the CCM_Se

[mssms] Applications not appearing in Application Catalog

[s kissel]

Both problem and resolution contained within. I'll blog about this later, but 
figured I'd throw it out there for you all now...
Problem: After migrating from SCCM 2007 to SCCM 2012, only a few applications 
are appearing in the Application Catalog. Expect to see 100+. All are 
user-based deployments, and everything as far as the package and program and 
deployment look fine. User collections contain a single AD group which contains 
the users of that are allowed to receive the application. 
Environment: CAS and three primaries. AD Forest Discovery is enabled on the 
CAS, and and all other AD discoveries (other than Forest Discovery) is enabled 
on one of the primaries.
Troubleshooting: After looking high and low for days, the only thing that stood 
out was that for those applications that appeared in the Application Catalog, 
the properties of the User in the form of DomainName\AD_Application_Group 
contained the following:Agent Name: 
"SMS_AD_SECURITY_GROUP_DISCOVERY_AGENT"Agent Site: "PR1"Those applications that 
were not appearing in the Application Catalog had either the User properties 
above and the User properties shown below, or just the one below:Agent Name: 
"SMS_AD_SECURITY_GROUP_DISCOVERY_AGENT", "SMS_MIGRATION_MANAGER"Agent Site: 
"PR1", "CAS"
Resolution:Remove all Users in the form of DomainName\AD_Application_Group for 
which the Agent Site had both the primary and the CAS site codes listed. Then 
run a full Active Directory Group Discovery. Once that is complete, update 
collection membership on all affected User collections. All the removed Users 
are rediscovered and no longer contain SMS_MIGRATION_MANAGER in the Agent Name, 
nor CAS in the Agent Site. Review the Application Catalog and notice all of the 
expected application now appear available.
Root Cause: ??? - I suspect it's because one of the collection migrations was 
ran on the CAS as opposed to the Primary? Anyone know for sure?
Cheers!   

RE: [mssms] CU3, agent installation issue

[s kissel]

That's great if it's a primary. :) However,  the Remove Role option is greyed 
out for the Management Point on Secondary site servers. I haven't yet found a 
way to make it work.
-S

From: agca...@ufl.edu
To: mssms@lists.myitforum.com
Subject: RE: [mssms] CU3, agent installation issue
Date: Thu, 3 Oct 2013 19:56:51 +









We are seeing this as well in our test environment and have opened a case with 
Microsoft.  Our initial findings are that this occurs when you attempt to 
install
 the SCCM client on a server which also host the management point role.  We 
were able to work around the issue (as proof of concept) by first removing the 
management point role from a server, then installing the client and 
reinstalling the management point
 role.
 
I still have another MP that is broken awaiting a fix from Microsoft and will 
update the list with the resolution.
 
Thanks,
 
-Andrew
 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Roland Janus

Sent: Wednesday, October 2, 2013 5:06 PM

To: mssms@lists.myitforum.com

Subject: RE: [mssms] CU3, agent installation issue


 
So busted you’re saying and waiting for a fix
J
 
Good to know, tell us when you get something. I’m not opening a case now.
 
-roland
 
 


From:
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of s kissel

Sent: Mittwoch, 2. Oktober 2013 22:47

To: mssms@lists.myitforum.com

Subject: RE: [mssms] CU3, agent installation issue


 

Contacted Premier and there was another case with the same issue opened before 
me. For them, the solution was to uninstall CU3, install the client, then 
install CU3 Site Server
 hotfix. Did you get that to work for you by chance? They will need to build a 
lab and test for me, which may take some time.

 


In my case, Server 2012, CU3 appears in "View Installed Updates", but the 
Uninstall icon/link is missing. The icon/link appears for other updates, 
however. So I attempted to
 uninstall it by doing msiexec /x CM12-SP1CU3-KB2882125-X64-ENU.msi, and while 
that removed it from the list of installed updates, the error was still 
occurring when attempting to install the client. At this point, it may be 
easier to rebuild the server, but
 it would be nice to get a resolution out in the CM community as there appears 
to only be a handful of users experiencing this at the moment.


 


Scott




From:
roland.ja...@hispeed.ch

To: mssms@lists.myitforum.com

Subject: RE: [mssms] CU3, agent installation issue

Date: Wed, 2 Oct 2013 21:57:31 +0200

Yeap, premier is likely what you need now, you can’t go back.
We haven’t anything in prod (that means CM12 in general
J ), so I’ve just delayed CU3 for now.
 
-Roland
 
 


From:
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of s kissel

Sent: Mittwoch, 2. Oktober 2013 15:33

To: mssms@lists.myitforum.com

Subject: RE: [mssms] CU3, agent installation issue


 

I'm not sure not using CU3 is a solution at this point since it is deployed 
across the CAS, three primaries, and multiple secondary sites in the hierarchy 
already. Only the CAS
 and three primaries and one secondary don't have the client installed at this 
time, and it was on that single secondary that I discovered the issue. I 
generally like to have everything on the same version as much as possible, so 
that there is less chance of
 database anomalies or corruption later on down the line. :)

 


Is the best course of action at this point to contact Premier Support, or are 
there resources on this mailing list who can submit this is a DCR?


 


Thanks,


Scott




From:
roland.ja...@hispeed.ch

To: mssms@lists.myitforum.com

Subject: RE: [mssms] CU3, agent installation issue

Date: Wed, 2 Oct 2013 09:30:58 +0200

That is the issue I’ve seen and what Daniel wanted to test to confirm
You just confirmed the bug
J
 
My only solution was to not use CU3 at all
 
-R
 


From:
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of s kissel

Sent: Mittwoch, 2. Oktober 2013 05:57

To: mssms@lists.myitforum.com

Subject: RE: [mssms] CU3, agent installation issue


 

Hi – Sorry to just be jumping in this conversation and pasting the archive 
thread below (new subscriber). However, I too am experiencing the issue and am 
wondering
 what solution, if any, there is currently.
 
Ccmsetup.log:
[snip]
File C:\Windows\ccmsetup\{59A0EA77-D28C-4286-83A6-04BB57B9CDD6}\client.msi 
installation failed. Error text: ExitCode: 1603
Action: CcmRegisterHostingConfiguration.
ErrorMessages:
Setup was unable to register the CCM_Service_HostingConfiguration endpoint
The error code is 80041002
 
Pertinent client.msi.log:
[snip]
MSI (s) (34:2C) [04:38:19:759]: Executing op: 
CustomActionSchedule(Action=CcmRegisterHostingConfiguration,ActionType=3073,Source=BinaryData,Target=CcmRegisterHostingConfiguration,CustomActionData=5.00.7000.
5.00.9000.
)
MSI (

RE: [mssms] CU3, agent installation issue

[s kissel]

Contacted Premier and there was another case with the same issue opened before 
me. For them, the solution was to uninstall CU3, install the client, then 
install CU3 Site Server hotfix. Did you get that to work for you by chance? 
They will need to build a lab and test for me, which may take some time.
In my case, Server 2012, CU3 appears in "View Installed Updates", but the 
Uninstall icon/link is missing. The icon/link appears for other updates, 
however. So I attempted to uninstall it by doing msiexec /x 
CM12-SP1CU3-KB2882125-X64-ENU.msi, and while that removed it from the list of 
installed updates, the error was still occurring when attempting to install the 
client. At this point, it may be easier to rebuild the server, but it would be 
nice to get a resolution out in the CM community as there appears to only be a 
handful of users experiencing this at the moment.
Scott

From: roland.ja...@hispeed.ch
To: mssms@lists.myitforum.com
Subject: RE: [mssms] CU3, agent installation issue
Date: Wed, 2 Oct 2013 21:57:31 +0200

Yeap, premier is likely what you need now, you can’t go back.We haven’t 
anything in prod (that means CM12 in general J ), so I’ve just delayed CU3 for 
now. -Roland  From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of s kissel
Sent: Mittwoch, 2. Oktober 2013 15:33
To: mssms@lists.myitforum.com
Subject: RE: [mssms] CU3, agent installation issue I'm not sure not using CU3 
is a solution at this point since it is deployed across the CAS, three 
primaries, and multiple secondary sites in the hierarchy already. Only the CAS 
and three primaries and one secondary don't have the client installed at this 
time, and it was on that single secondary that I discovered the issue. I 
generally like to have everything on the same version as much as possible, so 
that there is less chance of database anomalies or corruption later on down the 
line. :) Is the best course of action at this point to contact Premier Support, 
or are there resources on this mailing list who can submit this is a DCR? 
Thanks,ScottFrom: roland.ja...@hispeed.ch
To: mssms@lists.myitforum.com
Subject: RE: [mssms] CU3, agent installation issue
Date: Wed, 2 Oct 2013 09:30:58 +0200That is the issue I’ve seen and what Daniel 
wanted to test to confirmYou just confirmed the bug J My only solution was to 
not use CU3 at all -R From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of s kissel
Sent: Mittwoch, 2. Oktober 2013 05:57
To: mssms@lists.myitforum.com
Subject: RE: [mssms] CU3, agent installation issue Hi – Sorry to just be 
jumping in this conversation and pasting the archive thread below (new 
subscriber). However, I too am experiencing the issue and am wondering what 
solution, if any, there is currently. Ccmsetup.log:[snip]File 
C:\Windows\ccmsetup\{59A0EA77-D28C-4286-83A6-04BB57B9CDD6}\client.msi 
installation failed. Error text: ExitCode: 1603Action: 
CcmRegisterHostingConfiguration.ErrorMessages:Setup was unable to register the 
CCM_Service_HostingConfiguration endpointThe error code is 80041002 Pertinent 
client.msi.log:[snip]MSI (s) (34:2C) [04:38:19:759]: Executing op: 
CustomActionSchedule(Action=CcmRegisterHostingConfiguration,ActionType=3073,Source=BinaryData,Target=CcmRegisterHostingConfiguration,CustomActionData=5.00.7000.5.00.9000.)MSI
 (s) (34:2C) [04:38:19:759]: Creating MSIHANDLE (10971) of type 790536 for 
thread 5932MSI (s) (34:30) [04:38:19:775]: Invoking remote custom action. DLL: 
C:\Windows\Installer\MSI10AE.tmp, Entrypoint: 
CcmRegisterHostingConfigurationMSI (s) (34!10) [04:38:19:775]: Creating 
MSIHANDLE (10972) of type 790531 for thread 4368MSI (s) (34!10) [04:38:19:775]: 
Closing MSIHANDLE (10972) of type 790531 for thread 4368MSI (s) (34!10) 
[04:38:19:775]: Creating MSIHANDLE (10973) of type 790531 for thread 4368MSI 
(s) (34!10) [04:38:19:775]: Creating MSIHANDLE (10974) of type 790531 for 
thread 4368MSI (s) (34!10) [04:38:19:775]: Closing MSIHANDLE (10974) of type 
790531 for thread 4368MSI (s) (34!10) [04:38:19:775]: Creating MSIHANDLE 
(10975) of type 790531 for thread 4368[4:38:19] Registering Hosting 
Configuration.MSI (s) (34!10) [04:38:19:775]: Closing MSIHANDLE (10975) of type 
790531 for thread 4368[4:38:19] @@ERR:25150MSI (s) (34!10) [04:38:19:775]: 
Product: Configuration Manager Client -- Error 25150. Setup was unable to 
register the CCM_Service_HostingConfiguration endpointThe error code is 
80041002MSI (s) (34!10) [04:38:19:775]: Closing MSIHANDLE (10973) of type 
790531 for thread 4368Error 25150. Setup was unable to register the 
CCM_Service_HostingConfiguration endpointThe error code is 80041002[snip]  
Restating in summary what is below, as well as my own findings, this occurs 
when attempting to install the ConfigMgr 2012 client on a ConfigMgr 2012 Site 
Server that already has the CU3 hotfix KB2882125 installed. However, if the 
client is installed on the site server

RE: [mssms] CU3, agent installation issue

[s kissel]

I'm not sure not using CU3 is a solution at this point since it is deployed 
across the CAS, three primaries, and multiple secondary sites in the hierarchy 
already. Only the CAS and three primaries and one secondary don't have the 
client installed at this time, and it was on that single secondary that I 
discovered the issue. I generally like to have everything on the same version 
as much as possible, so that there is less chance of database anomalies or 
corruption later on down the line. :)
Is the best course of action at this point to contact Premier Support, or are 
there resources on this mailing list who can submit this is a DCR?
Thanks,Scott

From: roland.ja...@hispeed.ch
To: mssms@lists.myitforum.com
Subject: RE: [mssms] CU3, agent installation issue
Date: Wed, 2 Oct 2013 09:30:58 +0200

That is the issue I’ve seen and what Daniel wanted to test to confirmYou just 
confirmed the bug J My only solution was to not use CU3 at all -R  From: 
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of s kissel
Sent: Mittwoch, 2. Oktober 2013 05:57
To: mssms@lists.myitforum.com
Subject: RE: [mssms] CU3, agent installation issue Hi – Sorry to just be 
jumping in this conversation and pasting the archive thread below (new 
subscriber). However, I too am experiencing the issue and am wondering what 
solution, if any, there is currently. Ccmsetup.log:[snip]File 
C:\Windows\ccmsetup\{59A0EA77-D28C-4286-83A6-04BB57B9CDD6}\client.msi 
installation failed. Error text: ExitCode: 1603Action: 
CcmRegisterHostingConfiguration.ErrorMessages:Setup was unable to register the 
CCM_Service_HostingConfiguration endpointThe error code is 80041002 Pertinent 
client.msi.log:[snip]MSI (s) (34:2C) [04:38:19:759]: Executing op: 
CustomActionSchedule(Action=CcmRegisterHostingConfiguration,ActionType=3073,Source=BinaryData,Target=CcmRegisterHostingConfiguration,CustomActionData=5.00.7000.5.00.9000.)MSI
 (s) (34:2C) [04:38:19:759]: Creating MSIHANDLE (10971) of type 790536 for 
thread 5932MSI (s) (34:30) [04:38:19:775]: Invoking remote custom action. DLL: 
C:\Windows\Installer\MSI10AE.tmp, Entrypoint: 
CcmRegisterHostingConfigurationMSI (s) (34!10) [04:38:19:775]: Creating 
MSIHANDLE (10972) of type 790531 for thread 4368MSI (s) (34!10) [04:38:19:775]: 
Closing MSIHANDLE (10972) of type 790531 for thread 4368MSI (s) (34!10) 
[04:38:19:775]: Creating MSIHANDLE (10973) of type 790531 for thread 4368MSI 
(s) (34!10) [04:38:19:775]: Creating MSIHANDLE (10974) of type 790531 for 
thread 4368MSI (s) (34!10) [04:38:19:775]: Closing MSIHANDLE (10974) of type 
790531 for thread 4368MSI (s) (34!10) [04:38:19:775]: Creating MSIHANDLE 
(10975) of type 790531 for thread 4368[4:38:19] Registering Hosting 
Configuration.MSI (s) (34!10) [04:38:19:775]: Closing MSIHANDLE (10975) of type 
790531 for thread 4368[4:38:19] @@ERR:25150MSI (s) (34!10) [04:38:19:775]: 
Product: Configuration Manager Client -- Error 25150. Setup was unable to 
register the CCM_Service_HostingConfiguration endpointThe error code is 
80041002MSI (s) (34!10) [04:38:19:775]: Closing MSIHANDLE (10973) of type 
790531 for thread 4368Error 25150. Setup was unable to register the 
CCM_Service_HostingConfiguration endpointThe error code is 80041002[snip]  
Restating in summary what is below, as well as my own findings, this occurs 
when attempting to install the ConfigMgr 2012 client on a ConfigMgr 2012 Site 
Server that already has the CU3 hotfix KB2882125 installed. However, if the 
client is installed on the site server before the CU3 Site Server hotfix is 
installed, there are no issues. I’ve uninstalled the CU3 Site Server hotfix and 
tried to install the client, but the same errors occur. I’ve also tried to 
install the CU2 Site Server hotfix, but it indicated that the CU3 hotfix was 
already installed (even though it no longer appears in “View Installed 
Updates”), presumably because the uninstall didn’t properly clean out the 
database.  Any thoughts?Thanks!   

  

RE: [mssms] CU3, agent installation issue

[s kissel]

Hi – Sorry to just be jumping in this conversation and pasting
the archive thread below (new subscriber). However, I too am experiencing the
issue and am wondering what solution, if any, there is currently.

 

Ccmsetup.log:

[snip]

File
C:\Windows\ccmsetup\{59A0EA77-D28C-4286-83A6-04BB57B9CDD6}\client.msi
installation failed. Error text: ExitCode: 1603

Action: CcmRegisterHostingConfiguration.

ErrorMessages:

Setup was unable to register the
CCM_Service_HostingConfiguration endpoint

The error code is 80041002

 

Pertinent client.msi.log:

[snip]

MSI (s) (34:2C) [04:38:19:759]: Executing op:
CustomActionSchedule(Action=CcmRegisterHostingConfiguration,ActionType=3073,Source=BinaryData,Target=CcmRegisterHostingConfiguration,CustomActionData=5.00.7000.

5.00.9000.

)

MSI (s) (34:2C) [04:38:19:759]: Creating MSIHANDLE (10971) of type
790536 for thread 5932

MSI (s) (34:30) [04:38:19:775]: Invoking remote custom action.
DLL: C:\Windows\Installer\MSI10AE.tmp, Entrypoint:
CcmRegisterHostingConfiguration

MSI (s) (34!10) [04:38:19:775]: Creating MSIHANDLE (10972) of
type 790531 for thread 4368

MSI (s) (34!10) [04:38:19:775]: Closing MSIHANDLE (10972) of
type 790531 for thread 4368

MSI (s) (34!10) [04:38:19:775]: Creating MSIHANDLE (10973) of
type 790531 for thread 4368

MSI (s) (34!10) [04:38:19:775]: Creating MSIHANDLE (10974) of
type 790531 for thread 4368

MSI (s) (34!10) [04:38:19:775]: Closing MSIHANDLE (10974) of
type 790531 for thread 4368

MSI (s) (34!10) [04:38:19:775]: Creating MSIHANDLE (10975) of
type 790531 for thread 4368

[4:38:19] Registering Hosting Configuration.

MSI (s) (34!10) [04:38:19:775]: Closing MSIHANDLE (10975) of
type 790531 for thread 4368

[4:38:19] @@ERR:25150

MSI (s) (34!10) [04:38:19:775]: Product: Configuration Manager
Client -- Error 25150. Setup was unable to register the
CCM_Service_HostingConfiguration endpoint

The error code is 80041002

MSI (s) (34!10) [04:38:19:775]: Closing MSIHANDLE (10973) of
type 790531 for thread 4368

Error 25150. Setup was unable to register the
CCM_Service_HostingConfiguration endpoint

The error code is 80041002

[snip]

 

 

Restating in summary what is below, as well as my own findings,
this occurs when attempting to install the ConfigMgr 2012 client on a ConfigMgr
2012 Site Server that already has the CU3 hotfix KB2882125 installed. However,
if the client is installed on the site server before the CU3 Site Server hotfix
is installed, there are no issues. I’ve uninstalled the CU3 Site Server hotfix
and tried to install the client, but the same errors occur. I’ve also tried to
install the CU2 Site Server hotfix, but it indicated that the CU3 hotfix was
already installed (even though it no longer appears in “View Installed 
Updates”),
presumably because the uninstall didn’t properly clean out the database. 

 

Any thoughts?

Thanks!