[mssms] RE: Defender Application Control

[Aaron Czechowski]

Dune is our resident expert on this, but he’s not on the list. I’ll proxy for 
him. 

First question: Windows client build and SCCM version

Second question: did they have any applocker rules/policy set up before 
targeting WDAC?

If yes to the second, they should try booting the machine from USB, decrypting 
the OS drive if necessary, deleting %WINDIR%\System32\Applocker\*.applocker and 
restart the machine.

If machine restart is healthy then the problem is applocker, if not then the 
problem is code integrity.

If that is the case I would want to see their 
%WINDIR%\CCM\logs\DeviceGuardHandler.log


From: listsad...@lists.myitforum.com  On Behalf 
Of John Aubrey
Sent: Thursday, 1 February, 2018 10:17
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Defender Application Control

Agreed.  I was assuming that Microsoft’s Intelligent Security Graph would be 
smart enough to allow Microsoft’s EXE that are required to run windows to run 
by default.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Heaton, Joseph@Wildlife
Sent: Thursday, February 1, 2018 11:21 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Defender Application Control

Well, if it blocks notepad, it has no way to read the text file.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of John Aubrey
Sent: Thursday, February 1, 2018 5:22 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Defender Application Control

Has anyone used Defender Application Control policy in SCCM yet?  I have a 
basic policy with the “Authorize software that is trusted by the Intelligent 
Security Graph” option enabled.  Once my test PC checks in, notepad doesn’t 
work and if I reboot, the system is bricked and won’t boot.  Says it can’t 
access a txt file that is used for event logs.  I would have thought the 
Intelligent Security Graph option would at least let Windows boot….

RE: [mssms] RE: Confused - Spectre / Meltdown

[Aaron Czechowski]

An update. The KB will be revised. The memory management registry keys are for 
enabling protections on server only; they are not required on the client. You 
don't generally need to modify these registry keys on client OS.

Also, we released a configuration baseline with Microsoft-signed content to 
help verify: 
https://gallery.technet.microsoft.com/Speculation-Execution-Side-1483f621
We'll update our blog soon

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Dam, Bryan
Sent: Tuesday, 9 January, 2018 14:45
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: Confused - Spectre / Meltdown

My testing this afternoon would seem to confirm that the Memory Management keys 
are not needed on Windows 10.  At least as far as the detection script is to be 
trusted.  The result of the script was the same whether the keys didn't exist 
(the initial state) or if they were set to enabled.  If you specifically set 
them to disabled then the script reported the device vulnerable.


   Bryan

From: listsad...@lists.myitforum.com [listsad...@lists.myitforum.com] on behalf 
of Adam Juelich [acjuel...@gmail.com]
Sent: Tuesday, January 09, 2018 12:06 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: Confused - Spectre / Meltdown
Workstation:

  1.  Registry Key set by A/V (or manually set based on A/V guidance)
  2.  Windows Update
  3.  BIOS/Firmware Update from vendor
Server:

  1.  Registry Key set by A/V (or manually set based on A/V guidance)
  2.  Window Update
  3.  Push Registry Keys (2 needed, the third is for Hypver-V Hosts - I believe)

 *   Test and monitor performance impact

  1.  BIOS/Firmware Update from vendor

That is my understanding thus far...

Good thing we have nothing else to do ;-)


On Tue, Jan 9, 2018 at 10:48 AM, Brian Illner 
> wrote:
My understanding was that those keys were just for the ServerOS?

I have a Dell laptop that I completed all the tasks for and it does not have 
the memory management keys and yet it shows as all green in SpeculationControl?

Come on MS, your information is changing hourly as each team contradicts the 
other

BRIAN ILLNER | Canal Insurance Company
864.250.9227
864.679.2537 Fax

[cid:image001.jpg@01D38A2A.18D777F0]

Visit 
canalinsurance.com
 for news and information.

[cid:image002.jpg@01D38A2A.18D777F0]
WARNING:  As the information in this transmittal (including attachments, if 
any) may contain confidential, proprietary, or business trade secret 
information, it should only be reviewed by those who are the intended 
recipients.  Unless you are an intended recipient, any review, use, disclosure, 
distribution or copying of this transmittal (or any attachments) is strictly 
prohibited.   If you have received this transmittal in error, please notify me 
immediately by reply email and destroy all copies of the transmittal.  While 
Canal believes this transmittal to be free of virus or other defect, it is the 
responsibility of the recipient to ensure that it is virus free and no 
responsibility is accepted by Canal (or its subsidiaries and affiliates) for 
any loss or damage arising therefrom.
From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] 
On Behalf Of Kent, Mark
Sent: Tuesday, January 9, 2018 11:00 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Confused - Spectre / Meltdown

Yeah I see them at the bottom of 

RE: [mssms] RE: Spectre/Meltdown patch breaks ConfigMgr/SQL?

[Aaron Czechowski]

.   If you have received this transmittal in error, please notify me 
immediately by reply email and destroy all copies of the transmittal.  While 
Canal believes this transmittal to be free of virus or other defect, it is the 
responsibility of the recipient to ensure that it is virus free and no 
responsibility is accepted by Canal (or its subsidiaries and affiliates) for 
any loss or damage arising therefrom.
From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of Rod Trent
Sent: Tuesday, January 9, 2018 8:23 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] RE: Spectre/Meltdown patch breaks ConfigMgr/SQL?

Setting that registry works in some situations – but not all.

There’s a master list of supported AV software:

http://myitforum.com/myitforumwp/2018/01/09/the-master-list-of-antivirus-compatibility-with-microsofts-meltdownspectre-patches/<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmyitforum.com%2Fmyitforumwp%2F2018%2F01%2F09%2Fthe-master-list-of-antivirus-compatibility-with-microsofts-meltdownspectre-patches%2F=02%7C01%7Caaron.czechowski%40microsoft.com%7Cb6568b861fa04c0248a108d5578ec2b4%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636511193046468345=DYjatMwJrMc8BzLwxClWYA7ZPRt9JBlK4yD8mKdvFq8%3D=0>

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Brian Illner
Sent: Tuesday, January 9, 2018 8:13 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] RE: Spectre/Meltdown patch breaks ConfigMgr/SQL?

Aaron – If setting that registry key is now mandatory for the time being for 
the security updates to install, how does that affect OS offline updates 
servicing in MDT and CM? Broken I assume without manually editing the WIM first 
for the key?

https://support.microsoft.com/en-us/help/4072699/january-3-2018-windows-security-updates-and-antivirus-software<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F4072699%2Fjanuary-3-2018-windows-security-updates-and-antivirus-software=02%7C01%7Caaron.czechowski%40microsoft.com%7Cb6568b861fa04c0248a108d5578ec2b4%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636511193046468345=5fH1lQEmg2Mwfskz3oPJadeu3Sh%2Fia%2FMlKJ2nO1c9XQ%3D=0>



BRIAN ILLNER | Canal Insurance Company
864.250.9227<tel:(864)%20250-9227>
864.679.2537<tel:(864)%20679-2537> Fax

[cid:image004.jpg@01D38938.E278FC70]

Visit 
canalinsurance.com<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fcanalinsurance.com=02%7C01%7Caaron.czechowski%40microsoft.com%7Cb6568b861fa04c0248a108d5578ec2b4%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636511193046478354=oRCoc15MxODNXzLa4kJOlo5m%2F3Q8EtpB0bRiNuuItes%3D=0>
 for news and information.

[cid:image005.jpg@01D38938.E278FC70]<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fcanal-insurance-company=02%7C01%7Caaron.czechowski%40microsoft.com%7Cb6568b861fa04c0248a108d5578ec2b4%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636511193046478354=Xl3J%2F78GFAabvwM%2FX24y6iWQZqLdhBg9SYfQD8iifgI%3D=0>
WARNING:  As the information in this transmittal (including attachments, if 
any) may contain confidential, proprietary, or business trade secret 
information, it should only be reviewed by those who are the intended 
recipients.  Unless you are an intended recipient, any review, use, disclosure, 
distribution or copying of this transmittal (or any attachments) is strictly 
prohibited.   If you have received this transmittal in error, please notify me 
immediately by reply email and destroy all copies of the transmittal.  While 
Canal believes this transmittal to be free of virus or other defect, it is the 
responsibility of the recipient to ensure that it is virus free and no 
responsibility is accepted by Canal (or its subsidiaries and affiliates) for 
any loss or damage arising therefrom.
From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Aaron Czechowski
Sent: Monday, January 8, 2018 8:40 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] RE: Spectre/Meltdown patch breaks ConfigMgr/SQL?

We just published a blog post with a piece on SQL (in Config Manager 
infrastructure section): 
https://blogs.technet.microsoft.com/configurationmgr/2018/01/08/additional-guidance-to-mitigate-speculative-execution-side-channel-vulnerabilities/<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fblogs.technet.microsoft.com%2Fconfigurationmgr%2F2018%2F01%2F08%2Fadditional-guidance-to-mitigate-speculative-execution-side-channel-vulnerabilities%2F=02%7C01%7Caaron.czechowski%40microsoft.com%7Cb6

[mssms] RE: Confused - Spectre / Meltdown

[Aaron Czechowski]

Yeah, I'm checking on this.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Robert Spinelli
Sent: Tuesday, 9 January, 2018 10:43
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Confused - Spectre / Meltdown

I agree, something isn't right.  I'm 99% sure those registry keys weren't in 
the article last week for workstation OS.

Rod, you got some pull with MS, ask them what the deal is.. hah.

Rob

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian Illner
Sent: Tuesday, January 9, 2018 11:48 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Confused - Spectre / Meltdown

My understanding was that those keys were just for the ServerOS?

I have a Dell laptop that I completed all the tasks for and it does not have 
the memory management keys and yet it shows as all green in SpeculationControl?

Come on MS, your information is changing hourly as each team contradicts the 
other

BRIAN ILLNER | Canal Insurance Company
864.250.9227
864.679.2537 Fax

[cid:image001.jpg@01D3894F.92DC01F0]

Visit 
canalinsurance.com
 for news and information.

[cid:image002.jpg@01D3894F.92DC01F0]
WARNING:  As the information in this transmittal (including attachments, if 
any) may contain confidential, proprietary, or business trade secret 
information, it should only be reviewed by those who are the intended 
recipients.  Unless you are an intended recipient, any review, use, disclosure, 
distribution or copying of this transmittal (or any attachments) is strictly 
prohibited.   If you have received this transmittal in error, please notify me 
immediately by reply email and destroy all copies of the transmittal.  While 
Canal believes this transmittal to be free of virus or other defect, it is the 
responsibility of the recipient to ensure that it is virus free and no 
responsibility is accepted by Canal (or its subsidiaries and affiliates) for 
any loss or damage arising therefrom.
From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Kent, Mark
Sent: Tuesday, January 9, 2018 11:00 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Confused - Spectre / Meltdown

Yeah I see them at the bottom of 
https://support.microsoft.com/en-us/help/4073119/protect-against-speculative-execution-side-channel-vulnerabilities-in

And they don't really say what they are for.

Keep refreshing the page, wait for an edit :)

Mark Kent
Manager, Client Systems Engineering
Technology Support Services
Resources for Information, Technology and Education (RITE)
http://rite.buffalostate.edu

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of SCCM FUN
Sent: Tuesday, January 9, 2018 10:02 AM
To: mssms@lists.myITforum.com
Subject: [mssms] Confused - Spectre / Meltdown

Can anyone confirm the following?

Workstation/Servers - both need the AV key in order to do any patching going 
forward

Workstation
At one point in the MS article for workstation patching (4073119) I could of 
sworn there wasn't anything about having to making registry settings (except 
for AV) but now it looks like they added 2 registry keys.  Were these 2 reg 
keys always in the KB/needed?

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session 
Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 0 /f
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session 
Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 3 /f

Server
3 reg keys need to be added for the server patch to 

RE: [mssms] RE: Spectre/Meltdown patch breaks ConfigMgr/SQL?

[Aaron Czechowski]

We just published a blog post with a piece on SQL (in Config Manager 
infrastructure section): 
https://blogs.technet.microsoft.com/configurationmgr/2018/01/08/additional-guidance-to-mitigate-speculative-execution-side-channel-vulnerabilities/

Let me know if you have any further questions/comments.

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Sherry Kissinger
Sent: Monday, 8 January, 2018 11:52
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: Spectre/Meltdown patch breaks ConfigMgr/SQL?

Have you read through this yet:  
https://support.microsoft.com/en-us/help/4073225/guidance-for-sql-server
  ?
Keeping in mind that's the SQL recommendation, and there isn't (as far as I 
know), specific guidance from the ConfigMgr team regarding the SQL instances 
used for ConfigMgr.

My (probably incorrect) take on it...It doesn't matter WHAT version of SQL 16 
you have.  the first SQL 16 version which addresses the vulnerability is CU7 
for SP1.  So if you are at SQL 16 SP1 No CU, you would want to apply CU7--if 
your scenario fits one of the scenarios outlined in the guidance, AND you don't 
care about what the ConfigMgr team has-yet-to-publish for guidance so that you 
do not break your ConfigMgr SQL instance from working correctly.  If you are 
still using SQL 16 no SP, you'd update to SP1, and apply CU7.  That's my likely 
INCORRECT interpretation.  But that's why I'm just waiting for more info, and 
not trying to guess anything.

I personally plan on just "wait for more info" regarding ConfigMgr SQL 
information, from the ConfigMgr Team.

On Mon, Jan 8, 2018 at 12:39 PM, Brian Illner 
> wrote:
Could someone explain the SQL updates please?

There’s SQL 2016 SP1 CU7 and SQL 2016 SP1 GDR

I get that we download the Security Update for CU7 if we have that particular 
cumulative update installed, but what if its CU4 or CU5?

Do we use the GDR update? Or is that only for SQL 2016 SP1 that have had NO CU 
applied at all?

BRIAN ILLNER | Canal Insurance Company
864.250.9227
864.679.2537 Fax

Error! Filename not specified.

Visit 
canalinsurance.com
 for news and information.

Error! Filename not 
specified.
WARNING:  As the information in this transmittal (including attachments, if 
any) may contain confidential, proprietary, or business trade secret 
information, it should only be reviewed by those who are the intended 
recipients.  Unless you are an intended recipient, any review, use, disclosure, 
distribution or copying of this transmittal (or any attachments) is strictly 
prohibited.   If you have received this transmittal in error, please notify me 
immediately by reply email and destroy all copies of the transmittal.  While 
Canal believes this transmittal to be free of virus or other defect, it is the 
responsibility of the recipient to ensure that it is virus free and no 
responsibility is accepted by Canal (or its subsidiaries and affiliates) for 
any loss or damage arising therefrom.
From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] 
On Behalf Of Sherry Kissinger
Sent: Monday, January 8, 2018 10:46 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: Spectre/Meltdown patch breaks ConfigMgr/SQL?

Based on how I 'interpreted' that tweet, it was specific regarding the SQL 
patch.  In my case, the one I would care about is SQL 16 SP1, the CU7 
(Cumulative Update 7).  ConfigMgr requires "CLR" to be enabled in order to 
function.  Additionally, the majority of environments except for a super small 
ones where they might only have ONE server with all roles--almost everyone has 
at least a MP, DP, or SUP role server elsewhere.  Depending on the 
configuration of those other servers, they likely leverage a SQL 'thing' called 
Linked Servers.  CU7 also modifies Linked server configuration.

So just wait on 

RE: [mssms] 1709 ADK and Secure Boot

[Aaron Czechowski]

I haven’t heard of or seen such issues. Did you restart the systems on which 
you upgraded the ADK?

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Johns, Damon (DoJ)
Sent: Friday, 27 October, 2017 14:07
To: mssms@lists.myitforum.com
Subject: RE: [mssms] 1709 ADK and Secure Boot

I have the 1709 ADK installed with ConfigMgr 1706 – no issues at all with 
secure boot enabled and building PC’s.

Cheers
Damon

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Meluso, Anthony
Sent: Saturday, 28 October 2017 5:42 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] 1709 ADK and Secure Boot

Classic Microsoft.  Forgetting what they broke last time in the new version.


Take care,

Anthony Meluso
Network and Computer System Administrator
Passaic Valley Regional High School
100 East Main St.
Little Falls, NJ 07424
973-890-2500 x2501
http://www.pvhs.k12.nj.us

On Fri, Oct 27, 2017 at 2:01 PM, ODONNELL Aaron M 
> 
wrote:
Has the issue installing the Win10 ADK on computers with secure boot enabled 
still not been fixed in the 1709 ADK? So far I haven’t been able to install it 
on several PCs now that have it enabled, and they all fail trying to install 
wimmount.sys just like 1703 did.


Thanks,

Aaron O’Donnell
ODOT Information Systems
503-986-4332
[email flying-t]







CONFIDENTIALITY NOTICE AND DISCLAIMER
The information in this transmission may be confidential and/or protected by 
legal professional privilege, and is intended only for the person or persons to 
whom it is addressed. If you are not such a person, you are warned that any 
disclosure, copying or dissemination of the information is unauthorised. If you 
have received the transmission in error, please immediately contact this office 
by telephone, fax or email, to inform us of the error and to enable 
arrangements to be made for the destruction of the transmission, or its return 
at our cost. No liability is accepted for any unauthorised use of the 
information contained in this transmission.

RE: [mssms] RE: "SCCM CMG+CDP" Combo versus building SCCM Servers in Azure

[Aaron Czechowski]

CMG is Standard A2 right now, as PaaS 

We’re investigating making that more flexible in the future

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jason Sandys
Sent: Thursday, 5 October, 2017 20:05
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: "SCCM CMG+CDP" Combo versus building SCCM Servers in 
Azure

That’s not actually correct. CMG uses an A4 VM in IaaS.

The main reason to use a CMG is pure simplicity and maintenance as you don’t 
have to maintain that VM at all. Not sure what roles and functionalities that 
you’d want above what a CMG offers.

J

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Thelen, Chris
Sent: Thursday, October 5, 2017 5:50 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: "SCCM CMG+CDP" Combo versus building SCCM Servers in 
Azure

Hi Vasu,

I can’t speak to the costs of the CMG/CDP setup as I never look at the bill.  
But the CMG/CDP are not actual Azure VMs, they are just blobs, so the CMG/CDP 
combo will be cheaper due to no charges for the VM.  It’s just storage and 
bandwidth.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Miriyala, Vasu
Sent: Thursday, October 5, 2017 2:25 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: "SCCM CMG+CDP" Combo versus building SCCM Servers in 
Azure

Thanks Chris, Paul

Curious to know main difference between building our own MP/SUP, DP in Azure 
(Iaas), versus this offering of CMG+CDP (PaaS) in terms of cost, setup and 
maintenance… these three parameters ?

  1.  Would both of them cost same for same # of clients supported, # amount of 
data transfers ? I mean as long we can build our own servers on which we can 
build more roles, more functionalities, better control… what factors would 
attract us to go for this combo
  2.  I see from Chris, setup & maintenance would be much easier in CMG+CDP 
versus setting up own servers. Just want to confirm again setting up our own 
servers in Azure is more cumbersome and combo is easier !

--Vasu


From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Paul Winstanley
Sent: Wednesday, October 4, 2017 6:58 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: "SCCM CMG+CDP" Combo versus building SCCM Servers in 
Azure

Vasu,

Since 1702 CMG has a limit of 6k connections (it's stated in here search for 6k 
- 
https://docs.microsoft.com/en-us/sccm/core/clients/manage/plan-cloud-management-gateway).
 Of course these are simultaneous connections as well. They are not hard limits 
but MS recommends working within them to avoid affecting role performance.

MS also recommends standing up 2 x CMG servers for resilience therefore 12k 
simultaneous clients for that solution.



On Wed, Oct 4, 2017 at 1:40 PM, Thelen, Chris 
> wrote:
We are using the CMG+CDP combo here and its working out pretty good.  We used 
the CMD/CDP to replace the internet facing MP and DP that we had setup in our 
DMZ.

There are security issues with having DMZ servers for IBCM.  It required open 
ports to our internal network, roughly 10-20 open ports to just do computer 
based deployments and the MP.  If you want to do user based deployments, then 
you would need to open up RPC dynamic ports which is not a small number.  Using 
the Azure cloud services, we only have 2 ports open, 80 and 443 and we get the 
same functionality as our DMZ servers, but still only doing computer based 
deployments.  I believe MSFT is working on adding user based deployments to the 
cloud DP.

Using the CMP, it doesn’t show up as an actual MP in SCCM.  It’s more of a MP 
Proxy that clients go through to talk to the actual MP.  The CMP and CDP both 
work very well and require a lot less maintenance than on prem DMZ IBCM servers.
As for moving SCCM to the cloud, keep in mind that you do have to pay for 
outbound data.  So if you do a lot of software pushes, that can add up very 
quickly.


From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] 
On Behalf Of Miriyala, Vasu
Sent: Wednesday, October 4, 2017 3:18 AM
To: mssms@lists.myitforum.com
Subject: [mssms] "SCCM CMG+CDP" Combo versus building SCCM Servers in Azure

Hi Experts,

We plan to move SCCM servers (CAS, PS etc. Mgmt roles 

RE: [mssms] RE: "SCCM CMG+CDP" Combo versus building SCCM Servers in Azure

[Aaron Czechowski]

A few more points to add:

Moving SCCM to Azure for IaaS, clients still need to connect and communicate. 
Think of IaaS as just extending your datacenter into Azure. Would you still 
want to expose that raw to the Internet? Probably not. So this in itself does 
not help the client roaming scenario.

As Paul mentioned CMG scale is a soft limit at 6,000 per VM as of 1702, with a 
maximum of 16 VMs per CMG instance, and you can have multiple instances of the 
service in the same or separate Azure datacenters.  Also note that is 
simultaneous connections through the gateway – client policy traffic is 
generally randomized anyway, so you’ll need to fudge factor for that as well.

In terms of cost comparison – if you can quantify the cost of an on-prem server 
in your DMZ for IBCM MP, SUP, DP (and all of the associated costs), then you 
can do a clear comparison with the price of the service in Azure. If you can’t 
quantify the on-prem cost, it’s harder to compare. (I trust that our friends in 
Azure have done this cost comparison and price the VMs and storage and data 
transfer accordingly.)

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Paul Winstanley
Sent: Wednesday, 4 October, 2017 06:28
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: "SCCM CMG+CDP" Combo versus building SCCM Servers in 
Azure

Vasu,

Since 1702 CMG has a limit of 6k connections (it's stated in here search for 6k 
- 
https://docs.microsoft.com/en-us/sccm/core/clients/manage/plan-cloud-management-gateway).
 Of course these are simultaneous connections as well. They are not hard limits 
but MS recommends working within them to avoid affecting role performance.

MS also recommends standing up 2 x CMG servers for resilience therefore 12k 
simultaneous clients for that solution.



On Wed, Oct 4, 2017 at 1:40 PM, Thelen, Chris 
> wrote:
We are using the CMG+CDP combo here and its working out pretty good.  We used 
the CMD/CDP to replace the internet facing MP and DP that we had setup in our 
DMZ.

There are security issues with having DMZ servers for IBCM.  It required open 
ports to our internal network, roughly 10-20 open ports to just do computer 
based deployments and the MP.  If you want to do user based deployments, then 
you would need to open up RPC dynamic ports which is not a small number.  Using 
the Azure cloud services, we only have 2 ports open, 80 and 443 and we get the 
same functionality as our DMZ servers, but still only doing computer based 
deployments.  I believe MSFT is working on adding user based deployments to the 
cloud DP.

Using the CMP, it doesn’t show up as an actual MP in SCCM.  It’s more of a MP 
Proxy that clients go through to talk to the actual MP.  The CMP and CDP both 
work very well and require a lot less maintenance than on prem DMZ IBCM servers.
As for moving SCCM to the cloud, keep in mind that you do have to pay for 
outbound data.  So if you do a lot of software pushes, that can add up very 
quickly.


From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] 
On Behalf Of Miriyala, Vasu
Sent: Wednesday, October 4, 2017 3:18 AM
To: mssms@lists.myitforum.com
Subject: [mssms] "SCCM CMG+CDP" Combo versus building SCCM Servers in Azure

Hi Experts,

We plan to move SCCM servers (CAS, PS etc. Mgmt roles not DP) to Azure, sort of 
an IaaS way. Another consideration we have is, to utilize SCCCM PaaS offerings 
that is SCCM Configuration Management gateway and Cloud Distribution Point, 
together to serve internet clients

Goal is to adoption of cloud and be contemporary leveraging cutting edge techs 
like cloud, per leadership thoughts. Half of the client bases being roaming, we 
serve majority even if we chose CMG+CDP combo from cloud itself.


  1.  Does it still value adding and useful to move maximum SCCM server foot 
print…versus leveraging cloud offerings of CMG+CDP combo (I know primary isn’t 
there on combo yet)
  2.  Recommended to do away IBCM Internet exposed roles we have now, with 
CMG+CDP combo…so we don’t need to maintain overheads, DMZ, and all that stuff
  3.  CMG and/or CDP has limit of 4K users...is it a soft limit where beyond 
also a possible or hard limit where it doesn’t accept more connections
  4.  Tough question though…do you think it will be cost effective for 
enterprise to buy one instance that has limit of 4K users only…. In comparison 
with in house IBCM servers which can cater to many
  

RE: [mssms] 25 years of SMS

[Aaron Czechowski]

Video and post these stories! 
http://aka.ms/ConfigMgr25


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Lindenfeld, Ivan
Sent: Friday, 29 September, 2017 11:24
To: mssms@lists.myitforum.com
Subject: RE: [mssms] 25 years of SMS

Lots of smiles watching that video.  I learned that I don’t shudder anymore at 
the reminder of SMS 2.0 RTM or SP1.

ConfigMgr street cred: Upgraded a 1.1 instance to 1.2 in about 1996/7.  Never 
stopped.  Although I admit I don’t own CM personally anymore here, but my team 
does!  Ah, management!

Ivan Lindenfeld





From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Nemec, Dale
Sent: Friday, September 29, 2017 2:05 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] 25 years of SMS

I started with SMS 2.0 SP2 around 1998 here at Tektronix and have been keeping 
SMS -> SCCM going along here at Tektronix ever since.  It’s been quite the ride 
and I’m looking forward to where things are going next!

Dale Nemec | Global Architecture & Technology Ops (ESS) | Tektronix

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Rod Trent
Sent: Friday, September 29, 2017 10:44 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] 25 years of SMS

That would be a good topic.

I’ll start…

Started with SMS 1.0 in 1994. Worked for Deloitte in Cincinnati. Rolled it out 
to the local office, and then eventually the entire firm.


From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of John Marcum
Sent: Friday, September 29, 2017 12:30 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] 25 years of SMS

What year did you start Ed?



Sensitivity: Internal use only
From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Ed Aldrich
Sent: Thursday, September 28, 2017 9:36 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] 25 years of SMS

Trust me! It was indeed a wild time in those early days!!!

[Ed]
Ed Aldrich | Technology Enablement Lead
Mobile: (401) 924-2293

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of John Aubrey
Sent: Thursday, September 28, 2017 9:05 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] 25 years of SMS

Thought it was great.  I didn’t really get into the console side and managing 
SCCM until 2009.  Sounds like I missed out on most of the early years of fun.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Rickym61
Sent: Thursday, September 28, 2017 5:15 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] 25 years of SMS

Brilliant video, looking forward to part 2.

On 27 September 2017 at 23:20, Anthony Meluso 
> wrote:
Watched that last night. A wonderful video.

On Wed, Sep 27, 2017 at 6:14 PM -0400, "Mike Murray" 
> wrote:
https://www.youtube.com/watch?v=rnhnZTrSZzI#action=share


Best Regards,

Mike Murray
Desktop Engineer/IT Consultant - IT Support Services
California State University, Chico
530.898.4357
mmur...@csuchico.edu

Remember, Chico State will NEVER ask you for your password via email!
For more information about recognizing phishing scam emails go to: 
http://www.csuchico.edu/isec/basics/spam-and-phishing.shtml

RE: [mssms] Cloud Management Gateway

[Aaron Czechowski]

Two separate things. 
You can put SCCM site roles in Azure IaaS (infrastructure as a service) where 
you create and manage the VM, just think of using Azure like another datacenter 
for your company. That’s the link you shared below.
CMG and CDP use Azure PaaS (platform as a service) – SCCM creates the service 
in your Azure subscription but the VMs are completely managed, you should not 
need to access them. (there are some troubleshooting instances where it 
happens…kind of like saying when doing updates in SCCM you should never need to 
go into the WSUS console.)

Hope that helps

Aaron

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of SCCM Admin
Sent: Wednesday, 9 August, 2017 09:52
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Cloud Management Gateway

https://docs.microsoft.com/en-us/sccm/core/understand/configuration-manager-on-azure#networking

On Wed, Aug 9, 2017 at 11:43 AM, Nemec, Dale 
> wrote:
My CMG’s are not domain joined and are working as expected.

Do you have a link to the documentation that you are following/referencing?

Dale Nemec | Global Architecture & Technology Ops (ESS) | Tektronix

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] 
On Behalf Of SCCM Admin
Sent: Tuesday, August 8, 2017 4:24 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Cloud Management Gateway

We submitted our plans to implement CMG and after speaking with security they 
had issues with securing our site server in Azure since it has to be domain 
joined.

Could we put that server in another trusted domain and apply a trust between 
the two.

Also is there that much of a security threat to having a server in Azure as 
apposed on premises?



Please be advised that this email may contain confidential information. If you 
are not the intended recipient, please notify us by email by replying to the 
sender and delete this message. The sender disclaims that the content of this 
email constitutes an offer to enter into, or the acceptance of, any agreement; 
provided that the foregoing does not invalidate the binding effect of any 
digital or other electronic reproduction of a manual signature that is included 
in any attachment.

RE: [mssms] Managing a Surface Hub with ConfigMgr

[Aaron Czechowski]

Correct, currently the full client cannot be used on the Surface Hub, but you 
can use the SCCM on-prem MDM feature.
We’re also talking with the Surface Hub team about future manageability 
improvements.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Corkill, Daniel
Sent: Sunday, 5 March, 2017 20:49
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Managing a Surface Hub with ConfigMgr

Thanks. I’ve just read that thread on the mssms archive (apologies; should’ve 
done a search in the first place). So it seems the ConfigMgr client is out – 
odd for an on-prem enterprise device. We do however use Intune for our mobile 
devices so I’ll go ahead and use that.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Adam Juelich
Sent: Monday, 6 March 2017 10:12 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Managing a Surface Hub with ConfigMgr

Someone else asked this same question a month or so ago.  I don't think it was 
ever resolved.  He was unable to utilize the ConfigMgr Client on it.

On Sun, Mar 5, 2017 at 4:49 PM, Corkill, Daniel 
> wrote:
Can this be done? In the documentation it only talks about using MDM or 
ConfigMgr w/ Intune. Can I install the ConfigMgr client on this thing and 
manage it normally?

Daniel.




*

The contents of this email message and any attachments are intended only for 
the addressee and may be confidential, private or the subject of copyright. If 
you have received this email in error please notify Logan City Council, by 
replying to the sender or calling +61 7 3412 3412  
and delete all copies of the e-mail and any attachments.



To view Logan City Council's Privacy Collection Notice, please visit 
www.logan.qld.gov.au
 or click on the following link 
http://www.logan.qld.gov.au/home/terms-of-use.










*

The contents of this email message and any attachments are intended only for 
the addressee and may be confidential, private or the subject of copyright. If 
you have received this email in error please notify Logan City Council, by 
replying to the sender or calling +61 7 3412 3412  and delete all copies of the 
e-mail and any attachments.



To view Logan City Council's Privacy Collection Notice, please visit 
www.logan.qld.gov.au or click on the following link 
http://www.logan.qld.gov.au/home/terms-of-use.

RE: [mssms] SCCM 2012 R2 support matrix

[Aaron Czechowski]

Two clarifying comments.

Server 2016 = Redstone server = Win10 1607. As we’ve stated in other places, we 
only support Win10 LTSB 2015 and the first two builds of Win10 CB with SCCM 
2012, which does NOT include 1607. Therefore, no plans at this time to support 
Server 2016 with SCCM 2012.

As for SCCM 1606 and Server 2016, the same guidance as before regarding Server 
Core holds true for Server 2016:
https://docs.microsoft.com/en-us/sccm/core/plan-design/configs/supported-operating-systems-for-site-system-servers#the-server-core-installation-of-windows-server-2012-r2

I think John’s response is pulled from that link.

Aaron

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marcum, John
Sent: Thursday, 20 October, 2016 05:45
To: mssms@lists.myitforum.com
Subject: RE: [mssms] SCCM 2012 R2 support matrix

Site systems are not supported on Server Core installations of any operating 
system. An exception to this are that Server Core installations are supported 
for distribution point site system role, without PXE or multicast support.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Corkill, Daniel
Sent: Thursday, October 20, 2016 1:40 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] SCCM 2012 R2 support matrix

[External Email]
I too am interested to know if a 1606 site server on Server 2016 needs the gui 
or whether it can run on core. Anyone know? I’m assuming because it has a 
console it’ll need a gui.

Daniel.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Eric Morrison
Sent: Wednesday, 19 October 2016 7:16 AM
To: Sherry Kissinger 
>; 
mssms@lists.myitforum.com
Subject: RE: [mssms] SCCM 2012 R2 support matrix

I may have missed it, but I don’t see if any roles are supported on Core. Do 
they all have to run desktop experience? For 2016?

Thanks,

Eric

Sent from 
Mail
 for Windows 10

From: Sherry Kissinger
Sent: Tuesday, October 18, 2016 4:06 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] SCCM 2012 R2 support matrix

https://docs.microsoft.com/en-us/sccm/core/plan-design/configs/supported-operating-systems-for-site-system-servers

For ConfigMgr Current Branch 1606; Server 2016 is certified.

but you asked about cm12:  
https://technet.microsoft.com/en-us/library/gg682077.aspx
and Server 2016 isn't listed there under the heading of "Operating System 
Requirements for Site Servers, Database Servers, and the SMS Provider"  so I 
would say no, server 2016 isn't certified for cm2012.  Upgrade to Current 
Branch...and then it is.  :)

Unless what you meant was... "as a CLIENT, can a server that happens to be a CM 
2012 client communicate with my CM2012 infrastructure, which is running on 
Server 12 xx or Server 08 xx"  then on that same link, under "Operating System 
Requirements for Configuration Manager Client Installation" ... server 2016 is 
also NOT listed--but in my previous experience that doesn't mean it won't work 
for "most things".  Just means (likely) that you won't see it as a choice in 
some settings where you pick things like "applicable to... "

On Tue, Oct 18, 2016 at 3:20 PM, Adam Juelich 
> wrote:
As far as I remember, I don't even believe ConfigMgr CB1606 has been certified 
to run on Server 2016.  I highly doubt that will happen for the iterations of 
ConfigMgr 2012.

On Tue, Oct 18, 2016 at 3:10 PM, Brian McDonald 
> wrote:

Hello all,



Looking for a support matrix to determine whether 2012 R2 SP1 supports Windows 
Server 2016. Can't find anything official from Microsoft. Would like to know if 

[mssms] RE: Microsoft, please standardize on a single image management tool

[Aaron Czechowski]

"publicly state their dedication"

See 
https://blogs.technet.microsoft.com/msdeployment/2015/12/22/mdt-2013-update-2-now-available/


Q: Is this the last release of MDT?

No, we will continue to iterate and invest in the product.

I'm the PM for MDT (among other things), and seem to be asked a variation of 
question every couple of months.

MDT is not going away; our current plan includes continued investment. Not at 
the same level as SCCM (MDT is free, SCCM is licensed, so level of investment 
will follow accordingly), but we do continue to work on it. In fact, you'll see 
an update (mostly bug fix) to it coming soon.

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Wolf, Daniel
Sent: Monday, 17 October, 2016 10:48
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Microsoft, please standardize on a single image management 
tool

Thank you for making this Daniel.

>From what I've heard in rumors, it sounds like Microsoft does not really 
>dedicate resources to MDT.

I'd like them to publicly state their dedication to this tool, its team, and 
layout a roadmap or vision for us as Windows administrators going forward.

I spent years of my life lost in the forest because MDT didn't seem like it was 
Microsoft's go-to place for solving my problems. I've learned, and I've gone 
through the pain of implementing it with our specific requirements, but it 
would have been encouraging to see it enhanced further.

Daniel Wolf

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Daniel Ratliff
Sent: Monday, October 17, 2016 11:54 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Microsoft, please standardize on a single image management tool

https://www.change.org/p/microsoft-microsoft-please-standardize-on-a-single-image-management-solution?recruiter=10885997_source=share_for_starters_medium=copyLink

We feel a lot of pain from this, and Johan agrees this is a good idea. If you 
do to, please consider signing.

Daniel Ratliff


The information transmitted is intended only for the person or entity to which 
it is addressed
and may contain CONFIDENTIAL material. If you receive this material/information 
in error,
please contact the sender and delete or destroy the material/information.

[mssms] RE: Microsoft, please standardize on a single image management tool

[Aaron Czechowski]

Ok...I'll bite. :)
I get what you're saying, and I'm really interested to see how this petition 
progresses, but my personal opinion is that this is like asking Stanley to 
standardize on how to join together building materials. Do I use a hammer and 
nail, nailgun, screwdriver and screw (Phillips or flathead or Torx), screw gun 
and screw, staples, or glue/epoxy? They all achieve the same end goal, but they 
are different tools for different circumstances, and you should use the right 
tool for the right job.

A few specific comments. As ya'll know, we're working on more clearly 
differentiating MDT and SCCM - that won't happen overnight, but it's on our 
roadmap.

Windows has already deprecated the imaging component of ICD: see the note at 
the top of 
https://msdn.microsoft.com/en-us/library/windows/hardware/dn916113(v=vs.85).aspx.

Does anyone really use WDS for image management? Or just the Windows PXE server?

As for the others...heard. I assume NSIB is what probably pushed you over the 
edge? I wish we had a better story for Nano Server in SCCM, but without the 
ability to install the client, or manage via MDM, there's not much value in 
hacking together some deployment story if the long-term management does not 
exist. That's a bigger discussion we're having with the server team.

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Daniel Ratliff
Sent: Monday, 17 October, 2016 09:54
To: mssms@lists.myitforum.com
Subject: [mssms] Microsoft, please standardize on a single image management tool

https://www.change.org/p/microsoft-microsoft-please-standardize-on-a-single-image-management-solution?recruiter=10885997_source=share_for_starters_medium=copyLink

We feel a lot of pain from this, and Johan agrees this is a good idea. If you 
do to, please consider signing.

Daniel Ratliff


The information transmitted is intended only for the person or entity to which 
it is addressed
and may contain CONFIDENTIAL material. If you receive this material/information 
in error,
please contact the sender and delete or destroy the material/information.

RE: [mssms] RE: ccmexec calling http://crl.microsoft.com/pki blah blah

[Aaron Czechowski]

http://social.technet.microsoft.com/wiki/contents/articles/2303.understanding-access-to-microsoft-certificate-revocation-list.aspx


-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jason Wallace
Sent: Wednesday, 14 September, 2016 11:47
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: ccmexec calling http://crl.microsoft.com/pki blah blah

I had read his question more as to why an internal service would need to go to 
The Internet.

Sent from my iPhone

> On 14 Sep 2016, at 19:34, Nash Pherson  wrote:
> 
> That's a Certificate Revocation List. Your security folks should know what 
> that is any why it is important.
> 
> -Original Message-
> From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] 
> On Behalf Of Stuart Watret
> Sent: Wednesday, September 14, 2016 10:30 AM
> To:  
> Subject: [mssms] ccmexec calling 
> https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fcrl.microsoft.com%2fpki=02%7c01%7caaron.czechowski%40microsoft.com%7c5db55a7e7d654471231f08d3dcd0647e%7c72f988bf86f141af91ab2d7cd011db47%7c1%7c0%7c636094760010992837=QJMrMvn2YH4VfEWrZB4RF3zTJqOC7mEHz5kBCDrsLwY%3d
>  blah blah
> 
> In a sensitive area, I’m being asked why this is happening.
> 
> Thoughts? Some kind of code/script signing check?
> 
> 
> Stuart
> 

RE: [mssms] SCCM Current Branch

[Aaron Czechowski]

ROTFL
I just look forward to 2020…we need to adjust our cycles that year to ship in 
March, July and December.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Ryan
Sent: Friday, 8 July, 2016 17:14
To: mssms@lists.myitforum.com
Subject: Re: [mssms] SCCM Current Branch

The version numbers are based on dates, so you can quickly see what order they 
are in.
1602 = February 2016
1511 = November 2015
If the version comes with "TP" that means it is a preview and not production.
When Microsoft talks to us about version 8811, it'll be November, 2088.
Though I don't think Microsoft thought this through. What do we do after 9912? 
Is this SCCM's Y2K?
#FutureAaronProblems

On Fri, Jul 8, 2016 at 8:10 AM Aaron Czechowski 
<aaron.czechow...@microsoft.com<mailto:aaron.czechow...@microsoft.com>> wrote:
https://technet.microsoft.com/en-US/library/mt607046.aspx<https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2ftechnet.microsoft.com%2fen-US%2flibrary%2fmt607046.aspx=01%7c01%7caaron.czechowski%40microsoft.com%7cdf46a2da126b45a0b9a208d3a7758f9b%7c72f988bf86f141af91ab2d7cd011db47%7c1=rSV7QjYmmQo06IBE7690%2bHe7ZwM56T7bW7HXnytG6DI%3d>

The following versions of Configuration Manager are available as a baseline, an 
update, or both:
Version

Availability date

Baseline

in-console update

1511
5.00.8325.1000

12/8/2015

Yes

No

1602
5.00.8355.1000

3/11/2016

No

Yes



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of Hun boy
Sent: Friday, 8 July, 2016 06:52

To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: Re: [mssms] SCCM Current Branch


Sorry,



if i hijack this thread.



If MS keep changing the numbers like 1606, 1511 is there any ms link that 
tells what is current version and previous versions ?


Thanks & Regards,
Hunboy
564-1888


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
<listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>> on 
behalf of Lindenfeld, Ivan 
<ivan.lindenf...@fnf.com<mailto:ivan.lindenf...@fnf.com>>
Sent: Thursday, July 7, 2016 7:53 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] SCCM Current Branch


I interpret the public data as:



CM 1606 = Windows 10 Anniversary Edition release

CM later this year = Server 2016 release



So we get two more Current Branches this year, for three total.



No inside info, not an MVP.  YMMV.  Objects in this mirror are closer than they 
appear.



Ivan Lindenfeld



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Shane Alexander
Sent: Thursday, July 7, 2016 9:53 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] SCCM Current Branch



"there will also be a full production 1606 release" ... (you must know more 
than us) ...

... I personally think that 1606 will be too old, still buggy and not complete, 
to be CB, however MS do need to lock down code.
Reviewing some random timelines published ...

FAQ: System Center Configuration Manager (Current Branch)

Learn about the Microsoft Configuration Manager current branch model and how it 
works with the Windows 10 servicing model

https://blogs.technet.microsoft.com/enterprisemobility/2016/06/24/faq-system-center-configuration-manager-current-branch/<https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2fblogs.technet.microsoft.com%2fenterprisemobility%2f2016%2f06%2f24%2ffaq-system-center-configuration-manager-current-branch%2f=01%7c01%7caaron.czechowski%40microsoft.com%7cf59df493e9704941e30d08d3a71ebb45%7c72f988bf86f141af91ab2d7cd011db47%7c1=4gh06U9ZWQFBc0d4RgNM5F8OuRBG4x80ANBGrghAMRc%3d>
[https://msdnshared.blob.core.windows.net/media/2016/06/ConfigMgrFAQ2new.jpg]<https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2fblogs.technet.microsoft.com%2fenterprisemobility%2f2016%2f06%2f24%2ffaq-system-center-configuration-manager-current-branch%2f=01%7c01%7caaron.czechowski%40microsoft.com%7cf59df493e9704941e30d08d3a71ebb45%7c72f988bf86f141af91ab2d7cd011db47%7c1=4gh06U9ZWQFBc0d4RgNM5F8OuRBG4x80ANBGrghAMRc%3d>

FAQ: System Center Configuration Manager (Current Branch 
...<https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2fblogs.technet.microsoft.com%2fenterprisemobility%2f2016%2f06%2f24%2ffaq-system-center-configuration-manager-current-branch%2f=01%7c01%7caaron.czechowski%40microsoft.com%7cf59df493e9704941e30d08d3a71ebb45%7c72f988bf86f141af91ab2d7cd011db47%7c1=4gh06U9ZWQFBc0d4RgNM5F8OuRBG4x80ANBGrghAMRc%3d>
blogs.technet.microsoft.com<https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fblogs.technet.microsoft.

RE: [mssms] SCCM Current Branch

[Aaron Czechowski]

https://technet.microsoft.com/en-US/library/mt607046.aspx

The following versions of Configuration Manager are available as a baseline, an 
update, or both:
Version

Availability date

Baseline

in-console update

1511
5.00.8325.1000

12/8/2015

Yes

No

1602
5.00.8355.1000

3/11/2016

No

Yes



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Hun boy
Sent: Friday, 8 July, 2016 06:52
To: mssms@lists.myitforum.com
Subject: Re: [mssms] SCCM Current Branch


Sorry,



if i hijack this thread.



If MS keep changing the numbers like 1606, 1511 is there any ms link that 
tells what is current version and previous versions ?


Thanks & Regards,
Hunboy
564-1888


From: listsad...@lists.myitforum.com 
> on 
behalf of Lindenfeld, Ivan 
>
Sent: Thursday, July 7, 2016 7:53 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] SCCM Current Branch


I interpret the public data as:



CM 1606 = Windows 10 Anniversary Edition release

CM later this year = Server 2016 release



So we get two more Current Branches this year, for three total.



No inside info, not an MVP.  YMMV.  Objects in this mirror are closer than they 
appear.



Ivan Lindenfeld



From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Shane Alexander
Sent: Thursday, July 7, 2016 9:53 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] SCCM Current Branch



"there will also be a full production 1606 release" ... (you must know more 
than us) ...

... I personally think that 1606 will be too old, still buggy and not complete, 
to be CB, however MS do need to lock down code.
Reviewing some random timelines published ...

FAQ: System Center Configuration Manager (Current Branch)

Learn about the Microsoft Configuration Manager current branch model and how it 
works with the Windows 10 servicing model

https://blogs.technet.microsoft.com/enterprisemobility/2016/06/24/faq-system-center-configuration-manager-current-branch/
[https://msdnshared.blob.core.windows.net/media/2016/06/ConfigMgrFAQ2new.jpg]

FAQ: System Center Configuration Manager (Current Branch 
...
blogs.technet.microsoft.com
In December 2015, we made some major changes to System Center Configuration 
Manager (ConfigMgr) when we introduced our current branch model. This new model 
...




Will Microsoft release a ConfigMgr product update in alignment with System 
Center 2016?

Yes, there will be a release of ConfigMgr that aligns with the release of 
Windows Server 2016 and System Center 2016. We'll share more details on this 
release in the near future.


Is v1606 ready, really, for CB release.  Cos WS 2106 & SC 2016 are not ready.

At least we know when W10 next release will be available ... August 2.  That's 
when I think we'll know about other important matters like new GPO's/ADMX's for 
W10 and also the ConfigMgr branch to support all of this.  MS teams not always 
in lock-step.

My 2.1 cents  :-)



Shane




From: ja...@sandys.us
To: mssms@lists.myitforum.com
Subject: RE: [mssms] SCCM Current Branch
Date: Tue, 5 Jul 2016 13:11:06 +

Adam is correct. It's important to denote the TP releases as such because there 
will also be a full production 1606 release (just like there was a TP and a 
full production 1602 release also). So the TP should be TP1606 otherwise we'll 
all go completely bonkers trying to keep the two separated.



J



From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of 

RE: [mssms] SCCM Current Branch

[Aaron Czechowski]

At least as of 1602 I don’t think you can deploy the Win10 upgrade via 
traditional software updates. Your options are task sequence (for greater 
control but with more manual work) or servicing plan (less manual work but not 
as flexible yet).

Go watch the MVA that Wally and I did a while back: 
https://mva.microsoft.com/en-US/training-courses/deploying-windows-10-using-system-center-configuration-manager-16311

I expanded on this during MMS session (with Dune & Niall), which unfortunately 
wasn’t recorded or the slides published (unless you attended MMS and then look 
up my session, “Windows 10 Servicing with Configuration Manager”), but here’s 
the key slide from the MVA:
[cid:image003.png@01D1D78A.88D4A130]
And the important thing to note is that like a lot of what we’re doing with 
SCCM current branch, it’s very much iterative. So instead of just not using a 
new feature, please try it out in a lab or pilot, and then give us feedback so 
that we can improve it. As you can see from the slide above, we already have a 
number of things in the works (and are working closely with the Windows, WU and 
WSUS teams on this topic as well).



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Brian Illner
Sent: Wednesday, 6 July, 2016 09:07
To: mssms@lists.myitforum.com
Subject: RE: [mssms] SCCM Current Branch

The MS recommendation was within the Config Mgr program in Microsoft Connect. I 
cannot find the specific feedback/bug post at the moment.

BRIAN ILLNER | Canal Insurance Company
864.250.9227
864.679.2537 Fax
Visit 
canalinsurance.com
 for news and information.
[cid:image001.jpg@01D1D789.EDBB9500]
[cid:image002.jpg@01D1D789.EDBB9500]
WARNING:  As the information in this transmittal (including attachments, if 
any) may contain confidential, proprietary, or business trade secret 
information, it should only be reviewed by those who are the intended 
recipients.  Unless you are an intended recipient, any review, use, disclosure, 
distribution or copying of this transmittal (or any attachments) is strictly 
prohibited.   If you have received this transmittal in error, please notify me 
immediately by reply email and destroy all copies of the transmittal.  While 
Canal believes this transmittal to be free of virus or other defect, it is the 
responsibility of the recipient to ensure that it is virus free and no 
responsibility is accepted by Canal (or its subsidiaries and affiliates) for 
any loss or damage arising therefrom.
From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marable, Mike
Sent: Tuesday, July 5, 2016 11:30 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] SCCM Current Branch

+1

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Sandys
Sent: Tuesday, July 5, 2016 9:39 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] SCCM Current Branch

It’s never truly been broken. There are just a lot of caveats due to how the 
upgrades are/were published in WSUS along with things that the in-place upgrade 
scenario from a Windows perspective simply doesn’t handle gracefully (or at 
all). If you any actual control over the process, then an upgrade task sequence 
that enables you to do additional things is the way to go; examples include 
(but are not limited to) removing built-in store apps, dealing with third-party 
disk encryption or AV, injecting drivers, adding languages.

Thus, it is completely possible to use the built-in servicing successfully but 
in most corporate environments, due to the variety and complexity involved, the 
simplistic fire and forget upgrade is just not sufficient to handle all of 
these caveats.

I don’t think Microsoft has any explicit recommendation here at all. They’ve 
provided multiple technically viable paths and it’s up to you to choose which 
is best for your organization.

J

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Brian Illner
Sent: Tuesday, July 5, 2016 8:26 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] SCCM Current Branch

Is the Windows 10 Servicing feature still broken within SCCM?

Last instruction I had read from MS was to 

RE: [mssms] Support lifecycle information for Current Branch

[Aaron Czechowski]

https://technet.microsoft.com/en-us/library/mt613198.aspx
The WSUS Administration Console is required on the Configuration Manager site 
server when the software update point is on a remote site system server and 
WSUS is not already installed on the site server.
[System_CAPS_important]Important

The WSUS version on the site server must be the same as the WSUS version 
running on the software update points.



As for the lifecycle info…work in progress. :| Bureaucracy is the best 
explanation. A revised blog may be available soon, and we’re trying to get the 
support lifecycle page updated. But can confirm Jason (as usual) is spot on: 
12-month support per build.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jason Sandys
Sent: Monday, 6 June, 2016 09:43
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Support lifecycle information for Current Branch

There is, I just don’t know where, sorry. I’ve seen it, just don’t have a link 
off hand anywhere. I know I’ve heard of support cases around this also where 
the customer was told that unless all of the WSUS versions match, CSS wouldn’t 
continue troubleshooting the issue. As noted, it may appear to work (or may 
even completely work), it’s just not supported so YMMV.

J

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Mawdsley R.
Sent: Monday, June 6, 2016 9:54 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Support lifecycle information for Current Branch

Jason, has there been recent documentation to say this is unsupported?

I have two 10k+ client environments running this exact scenario, and it works 
absolutely fine.

Back when I originally upgraded them to CB 1511, there was nothing to suggest 1 
this would not work, and 2 it’s in anyway unsupported.

I completely agree that the preference should be to upgrade the Site Server 
from 2008 to a 2012 R2 one however.. especially by year end.  But, if timescale 
and business needs don’t suit that, the above works fine.

Rich

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Sandys
Sent: 06 June 2016 14:46
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Support lifecycle information for Current Branch

@Rich No, that won’t be supported because the site server needs to have the 
WSUS SDK on it which must match the WSUS version on the SUPs. It may work 
technically, but won’t be supported.

@Daniel I’ve not seen any issues with “mismatching self-signed certs”. Sorry I 
didn’t read the thread so not sure what that even means. Servicing isn’t 
necessarily a huge deal for most/many folks because they do not plan of using 
it but will instead use task sequences to upgrade their Win 10 builds to 
another Win 10 build as it offers more control and overall functionality. 
Although, you won’t get anything unexpected with servicing – it works using the 
same mechanisms as Software Updates and thus you need to perform explicit 
configuration for it to do anything.

J

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Mawdsley R.
Sent: Monday, June 6, 2016 3:16 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Support lifecycle information for Current Branch

Just to confirm this..

Your site server can be 2008 R2 and you can fully support Win 10 servicing by 
installing the Software Update Point on a separate, 2012 R2 server.

Thankyou
Rich Mawdsley

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Corkill, Daniel
Sent: 06 June 2016 04:59
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Support lifecycle information for Current Branch

Appreciate the response Jason. I forgot I’ll need WSUS 4 for the servicing! The 
priority for me at the moment is to get 1511/1602 because a) management are 
pushing hard to have the capability to deploy Win10; and b) We’re currently on 
CM 2012 SP1 which goes EOL in just over a month.

I won’t delay the move to a 2012 R2 server long – it’d be 1-2 months after the 
in-place upgrade. I plan on your recommended method of doing a site recovery 
but was spooked last week when David Baldwin replied in another thread that 
he’s experienced issues upgrading clients after moving to another site server 
due to mismatching self-signed certs. Have you seen this at all?

Regarding the servicing, until I get to a 2012 R2 site server and have proper 
control I don’t want any unexpected upgrades, ie. The anniversary update. My 
assumption is that since WSUS 3.0 doesn’t support servicing I won’t have to 
worry about that.

Daniel.

From: 

RE: [mssms] RE: (OT) Vendor list for Ignite?

[Aaron Czechowski]

What a coincidence, we were just talking about “slow moving software” in this 
morning’s Shiproom….

To reiterate Michael’s comments, our marketing team is working on this, even 
talking with BradAnd, and as I hear have until 2/27 to publish. The list I’ve 
seen so far includes three additional sessions specific to ConfigMgr – and 
we’re doing what we can to get more added. At least one of those will be 300+ 
level (I’m the content owner – unfortunately just don’t know yet whether I’ll 
be presenting it…).

Honestly, this is all awesome feedback. I’ve shared some of your comments 
verbatim with marketing and leadership so that they understand your 
frustrations. I definitely can’t promise that will change anything in the next 
several months, but I hope helps inform strategy decisions in the future. And 
please don’t let this put any damper on the discussion – it’s why I’ve been on 
this list for so many years. ☺

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Sherry Kissinger
Sent: Thursday, February 19, 2015 11:03 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: (OT) Vendor list for Ignite?

Nash, don't be dissin' SMS
er... SCCM
er... ConfigMgr
er... oh, what's your name today?



On Thursday, February 19, 2015 12:56 PM, Nash Pherson na...@nowmicro.com 
wrote:

ConfigMgr is being renamed “exasperating and sometimes downright obnoxious”?

Microsoft EaSDO: For all your systems management needs.


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Rod Trent
Sent: Thursday, February 19, 2015 12:45 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

Product name just hasn’t changed yet. ☺

If you want a more accurate name, look at what Microsoft calls the MVPs in that 
area.

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Eric Groff
Sent: Thursday, February 19, 2015 1:39 PM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

What's in a name?

Microsoft System Center Configuration Manager

Sent from my Windows Phone
From: Rod Trentmailto:rodtr...@myitforum.com
Sent: ‎2/‎19/‎2015 12:13
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?
More will be added for System Center and Server. That much is true.

However, when I was told that, I was also told that Configuration Manager is 
not really considered to be part of System Center any longer. So, don’t expect 
many more ConfigMgr sessions to post. There’s clear reasons behind this.

Also consider that Ignite now uses a sort of aged “editorial calendar” method 
for sessions. Microsoft has the decks with the proper messaging, and then the 
Ignite teams will source the speakers they believe fit the decks best. I’ll 
leave it at that.

I almost, *almost*, went off on a soapbox tangent for both preceding 
paragraphs. But, you all are smart enough to figure it out.

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Troy Martin
Sent: Thursday, February 19, 2015 12:45 PM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

As of Saturday, 5 ConfigMgr sessions - http://bit.ly/1Etbsab


Troy L. Martin | Product Manager, Endpoint Automation
Provision software, not infrastructure
US Mobile: +1 (678) 898-6147
UK Phone : +44 208 326 9141
troy.mar...@1e.commailto:troy.mar...@1e.com | www.1e.comhttp://www.1e.com/

[cid:image003.png@01D0422A.F408EE30]http://www.1e.com/  [Blog_Bling_Connect] 
http://ignite.microsoft.com/
[cid:image010.png@01D0422A.F408EE30]https://www.facebook.com/1Eglobal[cid:image011.png@01D0422A.F408EE30]https://twitter.com/1E_Global/[cid:image012.png@01D0422A.F408EE30]http://www.linkedin.com/company/1e[cid:image013.png@01D0422A.F408EE30]http://www.1e.com/blogs/index.php[cid:image014.png@01D0422A.F408EE30]http://blogs.1e.com/feed/[cid:image015.png@01D0422A.F408EE30]https://plus.google.com/+1EGlobal/posts

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Harjit Dhaliwal
Sent: Thursday, February 19, 2015 11:44 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: Re: [mssms] RE: (OT) Vendor list for Ignite?

I think you are being a little swift with your assumptions.  The full session 
catalog has not been completed and Ignite has mentioned that they are going to 
be adding much more to the catalog including System Center stuff.  There are 
quite a few of us from the ConfigMgr community who will be attending the 
conference.

-Harjit
On 2/19/2015 11:36 AM, Andreas Hammarskjöld wrote:
Hey Ivan,

If you are looking for ConfigMgr integration Ignite might not be your best 
place to hunt. 

[mssms] RE: driver package mayhem

[Aaron Czechowski]

Could one of you do me a huge favor and file this on Connect? I’m compiling a 
list of these sort of oddities into a bucket of things to potentially do in the 
future to improve the product. ☺

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Timothy Ransom
Sent: Friday, January 9, 2015 7:21 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: driver package mayhem

Here is an option from Microsoft support that I use.

In Driver package properties\Data Access:
Select Copy the content in this package to a package share on DPs.
Additional disk space is required on DPs if you select this option.


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Stuart Watret
Sent: Friday, January 09, 2015 9:44 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Re: driver package mayhem


so i did the trick of adding the blank text file to each directory in the 
source folders, then reimported.



this has worked, and some kind soul wrote a batch file for the purpose, still 
such an irritation, in what is a mature product.



thanks all



PUSHD %~dp0

@ECHO OFF

for /f tokens=* %%G IN ('dir /ad /b /s') DO (

echo.  %%G\%~n0.txt

)

POPD​





Stuart Watret

Offshore - IT Ltd


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com on 
behalf of Chris Carbone 
chris.carb...@fairmountsantrol.commailto:chris.carb...@fairmountsantrol.com
Sent: 09 January 2015 14:15
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] RE: driver package mayhem

I have also seen this numerous times. Usually what fixes this is if you add the 
ini field under drivers and delete any duplicate ini names and THEN create a 
driver package the 0 byte size issue goes away. Good luck, this can be an 
aggravating problem.

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Stuart Watret
Sent: Friday, January 09, 2015 5:26 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] driver package mayhem


​TS was failing, tracked down to 7 driver packages with 0 bytes in size.



Seen this before, thought you just updated dp's and off you go, no dice.



So I have deleted all the driver packages, and the package folders (they were 
blank too)



Re-creating a new driver pack for the hp 6005, wizard, says yes, package folder 
is empty.



DriverCat log says, this driver has already been imported for each inf it finds.



Stuck - what now, I'd delete the drivers (under drivers) but some are shared 
with other models that work.



Is there a route forward, or ditch them all and start again...



Stuart Watret

Offshore - IT Ltd

This electronic mail transmission may contain confidential information intended 
only for the use of the individual(s) identified as addressee(s). If you are 
not the intended recipient, you are hereby notified that any disclosure, 
copying, distribution or the taking of any action in reliance on the contents 
of this electronic mail transmission is strictly prohibited. If you have 
received this transmission in error, please notify me by telephone immediately.



**
GDOL CONFIDENTIALITY NOTICE: This transmission may contain confidential 
information protected by state or federal law. The information is intended only 
for use consistent with the state business discussed in this transmission. If 
you are not the intended recipient, you are hereby notified that any 
disclosure, copying, distribution, or the taking of any action based on the 
contents is strictly prohibited. If you have received this transmission in 
error, please delete this email and notify the sender immediately. Your 
cooperation is appreciated.
**

[mssms] RE: SCEP client for Yosemite

[Aaron Czechowski]

Soon...

The usual: release + 90 days. Yosemite released on 10/16, so at least by 1/16.

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Darin Nelson
Sent: Tuesday, December 2, 2014 1:39 PM
To: mssms@lists.myitforum.com
Subject: [mssms] SCEP client for Yosemite

Anyone know when they expect an SCEP client that will install on the Mac 
Yosemite OS X?


-
Darin Nelson
Information Technology Specialist
Anoka Ramsey Community College
Office of Information Technology - Cambridge Campus
300 Spirit River Dr. S
Cambridge, MN 55008
P: 763.433.1824 - F: 763.433.1911

RE: [mssms] Windows 10 In-Place upgrade. ConfigMgr client fails to install

[Aaron Czechowski]

Hi Paul –
Yeah, that was one option I was considering as a workaround; it should work. ☺ 
Can’t guarantee it though, haven’t tried it.

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Paul Winstanley
Sent: Monday, November 17, 2014 4:45 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Windows 10 In-Place upgrade. ConfigMgr client fails to 
install

Aaron,

Not really my area here but I'm thinking can PowerShell be used to re-write the 
Install path in the TCF file? You could then add in another step to the TS to 
copy down the patch package into an area locally on the device and point the 
TCF to this area?

On Fri, Nov 14, 2014 at 10:10 PM, Paul Winstanley 
pwinstan...@gmail.commailto:pwinstan...@gmail.com wrote:
Thanks Aaron. I know I can work around this for now. Definitely keep the thread 
up to date with any news. That would be great.

On Fri, Nov 14, 2014 at 10:03 PM, Aaron Czechowski 
aaron.czechow...@microsoft.commailto:aaron.czechow...@microsoft.com wrote:
Hi Paul –
We’re actually currently investigating this very issue that came in from 
Windows TAP. The original parameters are coming from the .TCF that’s cached on 
the machine, but then the MSP is no longer where it was originally. This could 
also impact clients that have issues and get a repair triggered by the client 
health task. I know there’s some guidance out there on how to address patches, 
but unfortunately if the patch is placed in a temporary folder (the client 
cache, the task sequence working directory, even C:\Windows\Temp potentially) 
then it may not or won’t be available when needed later.

Again, we’re still working on this, so not much else to share right now. Will 
try to keep this thread posted.

Aaron



From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Paul Winstanley
Sent: Friday, November 14, 2014 7:07 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: Re: [mssms] Windows 10 In-Place upgrade. ConfigMgr client fails to 
install

Ok my rebuilt upgrade is working fine. This is without the patch switch being 
used in the original TS.

Are the original install parameters stored in the registry or a file in the 
ccmsetup folder? The reinstall must be calling these up. I'll take a look later.

On Fri, Nov 14, 2014 at 2:32 PM, Paul Winstanley 
pwinstan...@gmail.commailto:pwinstan...@gmail.com wrote:
That's cool Mike. I'm just throwing it out there to see if any one experiencing 
the same thing. I could opt out and point my patch switch to a share but I know 
that's pretty lame and most of us push this down to the TS.

I'm currently running a build without the patch switch included. I'm sure this 
will be fine...not a fix though.

On Fri, Nov 14, 2014 at 2:21 PM, Marable, Mike 
mmara...@med.umich.edumailto:mmara...@med.umich.edu wrote:
Duh!

Sorry, I have just been so out of it.

My original TS to build the Win7 does not have any patches.  I’m hoping to get 
some free time either this evening or over the weekend to try the in-place 
upgrade using the new build.  I’ll had the same hotfix to my Win7 sequence and 
see what I get.

Sorry about that.


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Paul Winstanley
Sent: Friday, November 14, 2014 9:09 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: Re: [mssms] Windows 10 In-Place upgrade. ConfigMgr client fails to 
install

Yes Mike this is the process I am undertaking.

Post O/S upgrade setupcomplete.cmd is run and the following command is executed 
to remediate the client.

'Create-LogEntry CCMREPAIR...

$process = Start-Process $env:WinDir\ccmsetup\ccmsetup.exe 
-ArgumentList /remediate:client -Wait -NoNewWindow -PassThru

Create-LogEntry Return code: $($process.ExitCode)'

I'm not sure where it's grabbing the -arguementlist /remediate:client  
details from but it seems to be including details from the original install, 
which includes the patch.



On Fri, Nov 14, 2014 at 1:53 PM, Marable, Mike 
mmara...@med.umich.edumailto:mmara...@med.umich.edu wrote:
I knew I should have taken today off to work on the new build!

Are you doing this “in-place” upgrade:
http://blogs.technet.com/b/configmgrteam/archive/2014/10/29/how-to-upgrade-to-win-10-using-the-task-sequence-in-sc-2012-r2-configmgr.aspx

I used the sequence from that posting a while back and didn’t have to 
re-install or repair the client.

Mike Marable
Application Programmer/Analyst Lead
Enterprise Device Engineering and Management
MCTS, MCITP, MCSA, MS 
[Profilehttps://www.mcpvirtualbusinesscard.com/VBCServer/MikeMarable/profile] 
[Bloghttp://thesystemsmonkey.wordpress.com/]

The difficult we do at once. The impossible takes

RE: [mssms] Windows 10 In-Place upgrade. ConfigMgr client fails to install

[Aaron Czechowski]

Hi Paul –
We’re actually currently investigating this very issue that came in from 
Windows TAP. The original parameters are coming from the .TCF that’s cached on 
the machine, but then the MSP is no longer where it was originally. This could 
also impact clients that have issues and get a repair triggered by the client 
health task. I know there’s some guidance out there on how to address patches, 
but unfortunately if the patch is placed in a temporary folder (the client 
cache, the task sequence working directory, even C:\Windows\Temp potentially) 
then it may not or won’t be available when needed later.

Again, we’re still working on this, so not much else to share right now. Will 
try to keep this thread posted.

Aaron



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Paul Winstanley
Sent: Friday, November 14, 2014 7:07 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Windows 10 In-Place upgrade. ConfigMgr client fails to 
install

Ok my rebuilt upgrade is working fine. This is without the patch switch being 
used in the original TS.

Are the original install parameters stored in the registry or a file in the 
ccmsetup folder? The reinstall must be calling these up. I'll take a look later.

On Fri, Nov 14, 2014 at 2:32 PM, Paul Winstanley 
pwinstan...@gmail.commailto:pwinstan...@gmail.com wrote:
That's cool Mike. I'm just throwing it out there to see if any one experiencing 
the same thing. I could opt out and point my patch switch to a share but I know 
that's pretty lame and most of us push this down to the TS.

I'm currently running a build without the patch switch included. I'm sure this 
will be fine...not a fix though.

On Fri, Nov 14, 2014 at 2:21 PM, Marable, Mike 
mmara...@med.umich.edumailto:mmara...@med.umich.edu wrote:
Duh!

Sorry, I have just been so out of it.

My original TS to build the Win7 does not have any patches.  I’m hoping to get 
some free time either this evening or over the weekend to try the in-place 
upgrade using the new build.  I’ll had the same hotfix to my Win7 sequence and 
see what I get.

Sorry about that.


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Paul Winstanley
Sent: Friday, November 14, 2014 9:09 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: Re: [mssms] Windows 10 In-Place upgrade. ConfigMgr client fails to 
install

Yes Mike this is the process I am undertaking.

Post O/S upgrade setupcomplete.cmd is run and the following command is executed 
to remediate the client.

'Create-LogEntry CCMREPAIR...

$process = Start-Process $env:WinDir\ccmsetup\ccmsetup.exe 
-ArgumentList /remediate:client -Wait -NoNewWindow -PassThru

Create-LogEntry Return code: $($process.ExitCode)'

I'm not sure where it's grabbing the -arguementlist /remediate:client  
details from but it seems to be including details from the original install, 
which includes the patch.



On Fri, Nov 14, 2014 at 1:53 PM, Marable, Mike 
mmara...@med.umich.edumailto:mmara...@med.umich.edu wrote:
I knew I should have taken today off to work on the new build!

Are you doing this “in-place” upgrade:
http://blogs.technet.com/b/configmgrteam/archive/2014/10/29/how-to-upgrade-to-win-10-using-the-task-sequence-in-sc-2012-r2-configmgr.aspx

I used the sequence from that posting a while back and didn’t have to 
re-install or repair the client.

Mike Marable
Application Programmer/Analyst Lead
Enterprise Device Engineering and Management
MCTS, MCITP, MCSA, MS 
[Profilehttps://www.mcpvirtualbusinesscard.com/VBCServer/MikeMarable/profile] 
[Bloghttp://thesystemsmonkey.wordpress.com/]

The difficult we do at once. The impossible takes a little longer.
-US Army Corps of Engineers

It is better to have less thunder in the mouth and more lightning in the hand.
-Apache Proverb

I will rise when I have fallen.

Unless you try to do something beyond what you have already mastered, you will 
never grow.
-Ralph Waldo Emerson



From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Paul Winstanley
Sent: Friday, November 14, 2014 8:23 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] Windows 10 In-Place upgrade. ConfigMgr client fails to install

I'm currently seeing the following behaviour when running an In-Place upgrade 
to Win 10 in my client.msi log.

Client MSI

'This update package could not be opened. Verify that the update package exists 
and that you can access it, or contact the application vendor to verify that 
this is a valid Windows Installer update package.'

In the ccmsetup.log it is using the following syntax to run the install:

MSI PROPERTIES are  REINSTALL=ALL REINSTALLMODE=vmous  INSTALL=ALL 

[mssms] RE: Non-Admin Users cannot save changes in SCEP

[Aaron Czechowski]

Does the behavior change if there is not currently a scan in progress? (If the 
agent is idle)

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Gilmanov, Nile
Sent: Thursday, October 16, 2014 10:01 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Non-Admin Users cannot save changes in SCEP

E.g. per policy I give them rights to change CPU% during scanning and choose a 
Scheduled Scan time. But my non-admin users cannot save changes.

See attached screenshot. (if attachment didn’t load. Window Title: System 
Center Endpoint Protection, Body: Access is denied, click help for more 
information about the problem, Support information: Error Code 0x80070005)
Looks like some kind of access that needs to be granted to my limited users in 
order to manage their SCCM given rights to SCEP.

[cid:image001.jpg@01CFE940.23C7A920]

Thanks for any ideas guys,
Nile

RE: [mssms] SSD and SMSTSMPListRequestTimeout

[Aaron Czechowski]

We do have a bug already tagged for this – I’ll followup with doc team. No 
worries if you’ve already emailed smsdocs, just add me to the thread.

And the value is in seconds, default is 60.

Thanks

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Nash Pherson
Sent: Tuesday, September 16, 2014 1:03 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] SSD and SMSTSMPListRequestTimeout

Email @smsd...@microsoft.com to point this out.  I’ve emailed them about this a 
couple months back, but they only fixed one of the entries.  They need units 
and what the default value is.


Nash

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Andrew Craig
Sent: Tuesday, September 16, 2014 12:38 PM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] SSD and SMSTSMPListRequestTimeout

Also, I can’t find in technet what the available units are, seconds or minutes. 
Default is 1 minute but then is the default value 60 or 1? Other similar 
timeout variables are in seconds and clearly stated in technet so I presume 
also seconds, but it just does not say that on the tin.

I am hoping it is seconds as I have it to 120 for now ☺

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Andrew Craig
Sent: 16 September 2014 21:31
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] SSD and SMSTSMPListRequestTimeout

Hi All,

Does anyone have a good working value for this variable? All I heard last time 
was “more than the default 1 minute” and that leaves pretty much a lot of 
options.

Before I start testing and testing and cutting down gradually, as I have a bit 
of a rush, just thought someone might have a success story?

Thanks
Andrew

RE: [mssms] Task sequence with recovery partition we

[Aaron Czechowski]

Bill blogged about this recently, even automated with PowerShell :)  
http://www.billamoore.com/2014/03/13/powershell-automating-push-button-reset-configuration-manager/

He also includes a link to the core TechNet article on the topic: 
http://technet.microsoft.com/en-us/library/hh824917.aspx

Enjoy

Aaron


-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Todd Hemsell
Sent: Tuesday, June 3, 2014 2:18 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Task sequence with recovery partition we

yes.

make prestaged media.
shrink the existing partition
create a new partition
hide it
copy prestaged media to it

some other tricky stuff to be able to boot to it.

I was able to reimage a machine in under 7 minutes doing that.

On Tue, Jun 3, 2014 at 12:54 PM, Hun boy hun@outlook.com wrote:
 Has any one created or documented a process / steps where we can deploy 
 windows 7/8 and at the same time the system will also have a recovery 
 partition So that users can rebuild there own when there is no 
 connectivity to sccm server .  Am actually looking this entire process to 
 have in a task sequence So that my remote office users can deploy their 
 own...by pressing F8 option

 Can this be done earlier any one 

 Sent from iPhonesorry for typos

[mssms] RE: HOTFIX: A command-line action that has a linked package doesn't start in ConfigMgr 2012 OSD

[Aaron Czechowski]

Hi Daniel -
I think this hotfix is specific to SP1, although the issue does occur in R2 as 
well. Sustained engineering is already tracking a fix for R2 (but don't ask me 
when, I don't know). The following is the key log entry in execmgr.log:

ContentProgressEx invalid request GUID handle

The following Connect item lists some options to workaround: 
https://connect.microsoft.com/ConfigurationManagervnext/feedback/details/813943/pfe-client-stuck-at-0-downloading-for-swdist-based-task-sequences.
 I think switching to download on demand is another workaround.

Aaron

p.s. is this the issue we discussed at TechEd?

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Daniel Ratliff
Sent: Tuesday, May 27, 2014 12:49 PM
To: mssms@lists.myitforum.com
Subject: [mssms] HOTFIX: A command-line action that has a linked package 
doesn't start in ConfigMgr 2012 OSD

FYI

The issue is that a Task Sequence (TS) doesn't start as expected in System 
Center 2012 Configuration Manager (ConfigMgr 2012). This issue occurs if the 
Run Command Line Action sequence step has a link to a package, and the 
deployment for the task sequence has the Download all contents locally before 
starting task sequence configuration applied to it. This problem occurs only if 
multiple task sequences include the same package and the package has a larger 
source size.

http://blogs.technet.com/b/configurationmgr/archive/2014/05/27/hotfix-a-command-line-action-that-has-a-linked-package-doesn-39-t-start-in-system-center-2012-configuration-manager.aspx

http://support.microsoft.com/kb/2961924

Hoping to get clarification on whether this only affects SP1 or is R2 affected 
as well.

Daniel Ratliff


The information transmitted is intended only for the person or entity to which 
it is addressed
and may contain CONFIDENTIAL material. If you receive this material/information 
in error,
please contact the sender and delete or destroy the material/information.

Re: [mssms] wtgcreator.exe option: /enableBootRedirect

[Aaron Czechowski]

Haha… oops. I saw GPO and stopped reading. ☹

Sent from Microsoft Surface

From: Roland Janusmailto:roland.ja...@hispeed.ch
Sent: ‎Thursday‎, ‎April‎ ‎3‎, ‎2014 ‎1‎:‎19‎ ‎AM
To: mssmsmailto:mssms@lists.myitforum.com

That’s what I wrote ☺

-roland


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Aaron Czechowski
Sent: Donnerstag, 3. April 2014 04:51
To: mssms@lists.myitforum.com
Subject: RE: [mssms] wtgcreator.exe option: /enableBootRedirect

It maps to the Windows 8 control panel, “Windows To Go Startup Options” – see 
attached. You can get here by searching Control Panel for “Windows To Go”, it 
shows up under the Devices and Printers category.

Aaron

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Roland Janus
Sent: Wednesday, April 2, 2014 8:20 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] wtgcreator.exe option: /enableBootRedirect

It’s also GPO controllable and locally trough “change the windows to go startup 
options”, so I guess a registry key at the end.


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Roland Janus
Sent: Mittwoch, 2. April 2014 16:30
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] wtgcreator.exe option: /enableBootRedirect

That makes perfect sense.
I’ve looked quickly at the boot entry on a win 8 host. Nothing obvious.
I guess it changed something on the host itself then.

Anyone with any details?

How could this be scripted without using that exe?

Thanks, roland




From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Schwan, Phil
Sent: Mittwoch, 2. April 2014 16:19
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] wtgcreator.exe option: /enableBootRedirect

If I understand it correctly, when a WTG boot key is configured with that 
option, if the workstation doesn’t have USB set before HDD in the boot order 
but the HDD is booting Windows 8, the Win8 will recognize that the WTG device 
is present and instead defer to it to boot (I still haven’t discovered yet how 
exactly that’s accomplished; it must be native to Win8 because it can’t rely on 
any modifications to the local boot manager/loader).

AFAIK, the enableBootRedirect only applies to Win8x host machines; with Win7 
you still have to have USB before HDD in the boot order to have it 
automatically boot into WTG.

-Phil
_
Phil Schwan | Technical Architect, Enterprise Windows Services
Project Leadership Associates | 2000 Town Center, Suite 1900, Southfield, MI 
48075
Lync: 312.756.1626  Mobile: 419.262.5133
www.projectleadership.nethttp://www.projectleadership.net/
[Description: Description: Description: Arrow email]Lead with Strategy. 
Leverage Technology. Deliver Results.
[linkedin_logo-19x20]http://www.linkedin.com/in/philschwan[Twitter-Logo1-20x20]https://twitter.com/philschwan
 [wordpress-logo3] http://myitforum.com/myitforumwp/author/philschwan




From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Roland Janus
Sent: Wednesday, April 2, 2014 10:05 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] wtgcreator.exe option: /enableBootRedirect

What is that option technically doing?

-Roland






PRIVILEGED AND CONFIDENTIAL. This email and any files transmitted with it are 
privileged and confidential and intended solely for the use of the individual 
or entity to whom they are addressed. If you have received this email in error 
please notify the sender. If you are not the named addressee you should not 
disseminate, distribute or copy this e-mail or any of its attachments.







inline: image001.jpginline: image002.jpginline: image003.jpginline: image004.jpg

RE: [mssms] wtgcreator.exe option: /enableBootRedirect

[Aaron Czechowski]

It maps to the Windows 8 control panel, Windows To Go Startup Options - see 
attached. You can get here by searching Control Panel for Windows To Go, it 
shows up under the Devices and Printers category.

Aaron

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Roland Janus
Sent: Wednesday, April 2, 2014 8:20 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] wtgcreator.exe option: /enableBootRedirect

It's also GPO controllable and locally trough change the windows to go startup 
options, so I guess a registry key at the end.


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Roland Janus
Sent: Mittwoch, 2. April 2014 16:30
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] wtgcreator.exe option: /enableBootRedirect

That makes perfect sense.
I've looked quickly at the boot entry on a win 8 host. Nothing obvious.
I guess it changed something on the host itself then.

Anyone with any details?

How could this be scripted without using that exe?

Thanks, roland




From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Schwan, Phil
Sent: Mittwoch, 2. April 2014 16:19
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] wtgcreator.exe option: /enableBootRedirect

If I understand it correctly, when a WTG boot key is configured with that 
option, if the workstation doesn't have USB set before HDD in the boot order 
but the HDD is booting Windows 8, the Win8 will recognize that the WTG device 
is present and instead defer to it to boot (I still haven't discovered yet how 
exactly that's accomplished; it must be native to Win8 because it can't rely on 
any modifications to the local boot manager/loader).

AFAIK, the enableBootRedirect only applies to Win8x host machines; with Win7 
you still have to have USB before HDD in the boot order to have it 
automatically boot into WTG.

-Phil
_
Phil Schwan | Technical Architect, Enterprise Windows Services
Project Leadership Associates | 2000 Town Center, Suite 1900, Southfield, MI 
48075
Lync: 312.756.1626  Mobile: 419.262.5133
www.projectleadership.nethttp://www.projectleadership.net/
[Description: Description: Description: Arrow email]Lead with Strategy. 
Leverage Technology. Deliver Results.
[linkedin_logo-19x20]http://www.linkedin.com/in/philschwan[Twitter-Logo1-20x20]https://twitter.com/philschwan
 [wordpress-logo3] http://myitforum.com/myitforumwp/author/philschwan




From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Roland Janus
Sent: Wednesday, April 2, 2014 10:05 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] wtgcreator.exe option: /enableBootRedirect

What is that option technically doing?

-Roland






PRIVILEGED AND CONFIDENTIAL. This email and any files transmitted with it are 
privileged and confidential and intended solely for the use of the individual 
or entity to whom they are addressed. If you have received this email in error 
please notify the sender. If you are not the named addressee you should not 
disseminate, distribute or copy this e-mail or any of its attachments.







inline: image001.jpginline: image002.jpginline: image003.jpginline: image004.jpgattachment: Windows To Go Startup Options.png

RE: [mssms] machine fails to join domain

[Aaron Czechowski]

Funny, this came up internally last week as well when one of our testers hit 
the exact same issue. We confirmed it's by design with unattended domain join, 
you can't specify a container, just an OU. If you want it to join the computers 
container, don't specify anything. We did file a UI bug so that we can better 
filter the list that's provided so that it's only OUs.

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Johns, Damon (DoJ)
Sent: Tuesday, March 25, 2014 1:25 PM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] machine fails to join domain

I'm pretty sure you can't use a container in a domain join step with Config 
Mgr. Had a similar problem from memory years ago with 2007.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jeremy Sihassen
Sent: Wednesday, 26 March 2014 4:09 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] machine fails to join domain

What did you insert in your SCCM Task Sequence for the Domain OU?

If you want to build computers and that they enter the Default Computers 
container then this box should be empty and you shouldn't select any OU.

2014-03-25 15:21 GMT+01:00 Stephen Owen 
sre...@gmail.commailto:sre...@gmail.com:
Looks like this is the root cause.  Try using an OU instead.

On Tue, Mar 25, 2014 at 9:24 AM, Hun boy 
hun@outlook.commailto:hun@outlook.com wrote:
The default one is CN Not the OU


Sent from iPhonesorry for typos

On 25-Mar-2014, at 6:53 pm, Stephen Owen 
sre...@gmail.commailto:sre...@gmail.com wrote:
Shouldn't that be OU=Computers,DC=Comany,DC=Com?  You're using CN, which Im 
not sure is suported.

On Tue, Mar 25, 2014 at 9:19 AM, Stephen Owen 
sre...@gmail.commailto:sre...@gmail.com wrote:
Some environments will not allow you to domjoin and create a new object at the 
same time.  Can you check with your AD team and see if thats the case?

Also, make sure you have the right OU specified.

On Tue, Mar 25, 2014 at 9:14 AM, Brian McDonald 
mcdonald...@hotmail.commailto:mcdonald...@hotmail.com wrote:
The netsetup.log file shows the following:
03/24/2014 13:43:47:786 NetpCreateComputerObjectInDs: NetpGetComputerObjectDn 
failed: 0x2
03/24/2014 13:43:47:786 NetpProvisionComputerAccount: LDAP creation failed: 0x2

The thing that is interesting is that it doesn't like the OU I am specifying. 
In fact, it doesn't think it's an OU. Does the joindomain process not working 
with the default Computers OU in AD?

03/24/2014 17:09:56:364 NetpGetComputerObjectDn: Specified path 
'CN=Computers,DC=MyCOMPANY,DC=com' is not an OU

Thanks,
Brian

From: dratl...@humana.commailto:dratl...@humana.com
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com; 
mdt...@lists.myitforum.commailto:mdt...@lists.myitforum.com; 
mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] machine fails to join domain
Date: Mon, 24 Mar 2014 21:15:08 +


Take a look at setupact.log and setuperr.log in the ccm folder.

-Daniel Ratliff

-Original Message-
From: Brian McDonald [mcdonald...@hotmail.commailto:mcdonald...@hotmail.com]
Sent: Monday, March 24, 2014 05:06 PM Eastern Standard Time
To: mdt...@lists.myitforum.commailto:mdt...@lists.myitforum.com; 
mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] machine fails to join domain
I am attempting to join a bare metal machine to the domain using an SCCM 2012 
R2 TS. The machine fails to join to the domain. The NIC driver is injecting 
properly as part of the installation process. The SMSTS.log doesn't tell me 
much other than the fact that the Apply Network Settings step executed.

In our previous SCCM 2007 environment we always had to create the computer 
object in the domain before imaging. That was the only way we could make t join 
during OS deployment process. Is this mandatory?

I have a service account setup to join PCs to the domain. I have validated the 
password and permissions.

Am I missing something here? Seems nuts to have to put the computer in AD 
before machines will join to the domain as part of OSD.

I appreciate any input.

Thanks,

Brian


The information transmitted is intended only for the person or entity to which 
it is addressed
and may contain CONFIDENTIAL material. If you receive this material/information 
in error,
please contact the sender and delete or destroy the material/information.












CONFIDENTIALITY NOTICE AND DISCLAIMER
The information in this transmission may be confidential and/or protected by 
legal professional privilege, and is intended only for the person or persons to 
whom it is addressed. If you are not such a person, you are warned that any 
disclosure, copying or dissemination of the information is unauthorised. If you 
have received the transmission in error, please immediately contact this office 
by telephone, fax or email, to inform us of the 

RE: [mssms] Applications with no source files in task sequences

[Aaron Czechowski]

Do you deploy this outside of the task sequence as well? Otherwise I’m 
wondering why not just use a series of run command line steps to call the 
appropriate script.

Could you do me a favor and file this on Connect, perhaps attach some 
screenshots of the app/dt properties? (Not making any guarantees we’ll fix it, 
but would like something to track it ☺)

Thanks

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Matt Wilkinson
Sent: Friday, February 28, 2014 12:45 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Applications with no source files in task sequences

It Sophos antivirus. It runs a script which starts the setup. I wanted it to be 
a application rather than a package as I want to target different deployment 
types based on OU. I didn’t see the point in any content as the location of the 
shares is accessible to the system account.

From: Aaron Czechowski [mailto:aaron.czechow...@microsoft.com]
Sent: 28 February 2014 01:06
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] Applications with no source files in task sequences

Hi Matt –
Out of curiosity, can you provide more detail on the app that doesn’t have 
content?

Thanks

Aaron


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Matt Wilkinson
Sent: Thursday, February 27, 2014 2:01 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] Applications with no source files in task sequences

Yeah I’ve had to do that

From: Tuomo Leppänen [mailto:tuomo.leppa...@kinnula.fi]
Sent: 27 February 2014 09:17
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: Re: [mssms] Applications with no source files in task sequences

Do you have anything in the content setting of the deploymen type?

How about adding an empty folder for the content?

-T
On 27.2.2014 10:58, Matt Wilkinson wrote:
Hi
I have an application that has no source files. When I add it to a task 
sequence I get this error when editing the task sequence and the 2nd when 
deploying it. If I remove the application then deploy the ts and add the 
application its fine. Anybody come across this before or how to avoid it?

_
This email has been scanned by the MessageLabs Email Security System on behalf
of Leeds College of Building.
For more information please visit http://www.symanteccloud.com
_


_
This email has been scanned by the MessageLabs Email Security System on behalf
of Leeds College of Building.
For more information please visit http://www.symanteccloud.com
_


_
This email has been scanned by the MessageLabs Email Security System on behalf
of Leeds College of Building.
For more information please visit http://www.symanteccloud.com
_


_
This email has been scanned by the MessageLabs Email Security System on behalf
of Leeds College of Building.
For more information please visit http://www.symanteccloud.com
_


_
This email has been scanned by the MessageLabs Email Security System on behalf
of Leeds College of Building.
For more information please visit http://www.symanteccloud.com
_

RE: [mssms] Applications with no source files in task sequences

[Aaron Czechowski]

Hi Matt –
Out of curiosity, can you provide more detail on the app that doesn’t have 
content?

Thanks

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Matt Wilkinson
Sent: Thursday, February 27, 2014 2:01 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Applications with no source files in task sequences

Yeah I’ve had to do that

From: Tuomo Leppänen [mailto:tuomo.leppa...@kinnula.fi]
Sent: 27 February 2014 09:17
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Applications with no source files in task sequences

Do you have anything in the content setting of the deploymen type?

How about adding an empty folder for the content?

-T
On 27.2.2014 10:58, Matt Wilkinson wrote:
Hi
I have an application that has no source files. When I add it to a task 
sequence I get this error when editing the task sequence and the 2nd when 
deploying it. If I remove the application then deploy the ts and add the 
application its fine. Anybody come across this before or how to avoid it?

_
This email has been scanned by the MessageLabs Email Security System on behalf
of Leeds College of Building.
For more information please visit http://www.symanteccloud.com
_


_
This email has been scanned by the MessageLabs Email Security System on behalf
of Leeds College of Building.
For more information please visit http://www.symanteccloud.com
_


_
This email has been scanned by the MessageLabs Email Security System on behalf
of Leeds College of Building.
For more information please visit http://www.symanteccloud.com
_

RE: [MDT-OSD] ConfigMgr 2012 :: Windows Server 2012 Foundation OSD

[Aaron Czechowski]

Sounds remarkably similar to a question I got yesterday from our doc team - did 
you also ping smsdocs? :)

Looking at http://technet.microsoft.com/en-us/library/jj679892.aspx:

Because Windows Server 2012 Foundation comes pre-installed with your server 
hardware, you do not need to separately obtain and then install the hardware 
and operating system.

So there's that.

If it's just Windows, then the client should work on it, but I'm not sure 
whether it's anything we tested. (I'm not authoritative on that, so don't quote 
me regarding client support. :)) As for OS Deployment, I know we don't test 
with it, so it will likely fall into the bucket of SKUs that are not supported 
for OSD. That doesn't mean it doesn't work, just not anything we've tried, so 
YMMV.

I know doc team is aware of it, so there may be an update to those articles in 
the future.

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Trevor Sullivan
Sent: Monday, February 17, 2014 7:46 AM
To: mssms@lists.myitforum.com; mdt...@lists.myitforum.com
Subject: [MDT-OSD] ConfigMgr 2012 :: Windows Server 2012 Foundation OSD

Hey folks,

The ConfigMgr documentation only seems to mention Windows Server 2012 
Foundation in the context of not being supported as a host operating system for 
a ConfigMgr Site System. Does anyone know if Windows Server 2012 Foundation is 
supported as: 1) a ConfigMgr 2012 client agent, and 2) a deployable ConfigMgr 
OSD OS?

TechNet - Supported Operating Systems and Hard Disk Configurations for 
Operating System 
Deploymenthttp://technet.microsoft.com/en-us/library/hh801866.aspx
TechNet - Operating System Requirements for Configuration Manager Client 
Installationhttp://technet.microsoft.com/en-us/library/c1e93ef9-761f-4f60-8372-df9bf5009be0#BKMK_SupConfigClientOS

Cheers,
Trevor Sullivan

[mssms] RE: [MDT-OSD] ConfigMgr 2012 :: Windows Server 2012 Foundation OSD

[Aaron Czechowski]

Sounds remarkably similar to a question I got yesterday from our doc team - did 
you also ping smsdocs? :)

Looking at http://technet.microsoft.com/en-us/library/jj679892.aspx:

Because Windows Server 2012 Foundation comes pre-installed with your server 
hardware, you do not need to separately obtain and then install the hardware 
and operating system.

So there's that.

If it's just Windows, then the client should work on it, but I'm not sure 
whether it's anything we tested. (I'm not authoritative on that, so don't quote 
me regarding client support. :)) As for OS Deployment, I know we don't test 
with it, so it will likely fall into the bucket of SKUs that are not supported 
for OSD. That doesn't mean it doesn't work, just not anything we've tried, so 
YMMV.

I know doc team is aware of it, so there may be an update to those articles in 
the future.

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Trevor Sullivan
Sent: Monday, February 17, 2014 7:46 AM
To: mssms@lists.myitforum.com; mdt...@lists.myitforum.com
Subject: [MDT-OSD] ConfigMgr 2012 :: Windows Server 2012 Foundation OSD

Hey folks,

The ConfigMgr documentation only seems to mention Windows Server 2012 
Foundation in the context of not being supported as a host operating system for 
a ConfigMgr Site System. Does anyone know if Windows Server 2012 Foundation is 
supported as: 1) a ConfigMgr 2012 client agent, and 2) a deployable ConfigMgr 
OSD OS?

TechNet - Supported Operating Systems and Hard Disk Configurations for 
Operating System 
Deploymenthttp://technet.microsoft.com/en-us/library/hh801866.aspx
TechNet - Operating System Requirements for Configuration Manager Client 
Installationhttp://technet.microsoft.com/en-us/library/c1e93ef9-761f-4f60-8372-df9bf5009be0#BKMK_SupConfigClientOS

Cheers,
Trevor Sullivan

RE: [mssms] UEFI systems - multiple Windows Boot Loader entries

[Aaron Czechowski]

Hi Jason -
I'm unfortunately not too knowledgeable on that myself. I know a support 
engineer was looking into the same thing, but also got hung up with how to 
automate it. Is this something you see frequently on deployed end-user systems, 
or is it just during testing?

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jason Wallace
Sent: Tuesday, December 17, 2013 8:52 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] UEFI systems - multiple Windows Boot Loader entries

Hi there Aaron - that is kind of where I am looking right now.  We could of 
course query the BIOS using manufacturer code but as BCDEDIT is generic then it 
would seem to make sense to use this tool.  The problem then of course is that 
any solution seems to revolve around creating a text file, parsing it and then 
doing something with the result.  It would be nice to find some more 
intelligent way of working with this data.

I know that someone did mention that boot methods change on Surface devices and 
I wonder what form that takes?  We have had some systems that seemed to boot 
back into Legacy but these were HP desktops with scores (yes, really) of 
Windows Boot Loader references.

Jason

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Aaron Czechowski
Sent: 17 December 2013 17:36
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] UEFI systems - multiple Windows Boot Loader entries

It can occur with a Hyper-V Gen2 VM or Surface as well. Some investigation 
occurred and I think the outcome was an issue with Windows setup. One customer 
raised performance concerns, but I think that's anecdotal and not proven to be 
related. I think the general belief is that this should not cause any serious 
issues. Outside of a test environment where a specific system is refreshed 
multiple times, I would not expect to see this done more than once or twice on 
a given system.

As you said below, easy enough to script in the task sequence, but I think the 
challenge is determining which ones to whack.

Aaron


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Wallace
Sent: Tuesday, December 17, 2013 7:50 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] UEFI systems - multiple Windows Boot Loader entries

:)

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Niall Brady
Sent: 17 December 2013 15:14
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: Re: [mssms] UEFI systems - multiple Windows Boot Loader entries

i just havnt got round to it yet, feel free to be the one

On Tue, Dec 17, 2013 at 3:05 PM, Jason Wallace 
jaso...@outlook.commailto:jaso...@outlook.com wrote:
And there was me hoping that you'd say Oh, that's easy - go here . . .  :)

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Niall Brady
Sent: 17 December 2013 14:57

To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: Re: [mssms] UEFI systems - multiple Windows Boot Loader entries

if you do come up with a solution Jason make sure to blog it please

On Tue, Dec 17, 2013 at 2:50 PM, Jason Wallace 
jaso...@outlook.commailto:jaso...@outlook.com wrote:
Thanks Niall  Rob

Both of those are fab.  Now to work out how to automate that for a task sequence

Jason

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Niall Brady
Sent: 17 December 2013 14:43
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: Re: [mssms] UEFI systems - multiple Windows Boot Loader entries

how about

http://jeff.squarecontrol.com/archives/184

On Tue, Dec 17, 2013 at 1:33 PM, Robert Marshall 
rob...@sulla.co.ukmailto:rob...@sulla.co.uk wrote:
BCDEDIT /DELETE ?

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Jason Wallace
Sent: 17 December 2013 08:48
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] UEFI systems - multiple Windows Boot Loader entries

Hello folks

Noticed that on our HP UEFI based systems in the lab now have multiple entries 
for Windows Boot Manager as we rebuild them.  I know this is a HP related issue 
rather than CM but any suggestions for removing these entries please?

The usual suspects of reload defaults and disable  enable UEFI do not help

Jason

RE: [mssms] Ultra slow download speed of WIM file with WinPE5.0 - ConfigMgr2012R2/MDT2013

[Aaron Czechowski]

FYI, I know there is at least one case open with Microsoft Support on this. 
Lots of variables come into play, so hard to narrow down to what might be the 
issue. When doing speed test comparisons or standalone tests, make sure you're 
doing HTTP transfers. In one instance someone was comparing the task sequence 
content download in WinPE (HTTP) to a straight-forward SMB robocopy - not the 
same.

Also re a question from original message - using an older WinPE version (e.g., 
4) to deploy a newer version of Windows (e.g., 8.1) is not supported. It's 
backwards compatible two version, but not forward compatible. Might still 
technically work - YMMV.

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Johns, Damon (DoJ)
Sent: Wednesday, October 23, 2013 1:52 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Ultra slow download speed of WIM file with WinPE5.0 - 
ConfigMgr2012R2/MDT2013

How are you testing the data transfer rate? I only ask as mine also seems slow 
and I want to confirm.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Daniel Olsson
Sent: Thursday, 24 October 2013 6:20 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Ultra slow download speed of WIM file with WinPE5.0 - 
ConfigMgr2012R2/MDT2013

I can reproduce the problem in my lab with VMware Workstation 10 internally 
between CM host and client so there is no network equipment to configure I this 
cenario.

// Daniel

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Stephen Owen
Sent: den 23 oktober 2013 21:12
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: Re: [mssms] Ultra slow download speed of WIM file with WinPE5.0 - 
ConfigMgr2012R2/MDT2013

Is there any sort of bandwidth compression device at play here?  I've seen 
issues like this come up from misconfigured Riverbed bandwidth compression 
devices before.

On Wed, Oct 23, 2013 at 2:49 PM, Daniel Olsson 
daniel.ols...@addpro.semailto:daniel.ols...@addpro.se wrote:
I am experiencing Ultra slow download speed (28Mbit) of  the WIM file with 
WinPE 5 - ConfigMgr2012R2/MDT2013 during deployment of Windows 8.1
If I change the TS to use an WinPE4.0 Bootimage instead the the speed goes up 
to 700Mbit.
(Is it supported to use WinPE4.0 for deploying Win8.1.. as a temp workaround 
right now?)

I have seen it on 2 different customers and in my internal lab using
Server2012/CM12R2/MDT2013/WinPE 5 (VMware workstation in my lab and VMware ESX 
4.1u1 at the customers site)

Anyone have a suggestion in this issue ?

It seems to be discussed here aswell with no solution yet ?
http://social.technet.microsoft.com/Forums/en-US/4c72ae27-198f-4751-b0d6-340a11b52bd4/insanely-slow-os-download-in-2012-r2-winpe?forum=configmanagerosd

Regards
Daniel Olsson









CONFIDENTIALITY NOTICE AND DISCLAIMER
The information in this transmission may be confidential and/or protected by 
legal professional privilege, and is intended only for the person or persons to 
whom it is addressed. If you are not such a person, you are warned that any 
disclosure, copying or dissemination of the information is unauthorised. If you 
have received the transmission in error, please immediately contact this office 
by telephone, fax or email, to inform us of the error and to enable 
arrangements to be made for the destruction of the transmission, or its return 
at our cost. No liability is accepted for any unauthorised use of the 
information contained in this transmission.

RE: [mssms] How fast are SSDs?

[Aaron Czechowski]

The variable should have the same behavior on that step regardless of its use. 
You say you don’t see it retrying but that you haven’t upgraded to R2 yet?

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Craig Andrew (OIZ)
Sent: Tuesday, October 22, 2013 12:29 AM
To: mssms@lists.myitforum.com
Subject: AW: [mssms] How fast are SSDs?

Hi Aaron,

Thanks for the info. Can you say that this variable works when using install 
applications from dynamic variables? When you install a single app from the 
install app step then there is a default retry which this tsvariable says it 
leverages, but when using variables I don’t see the app retrying, it fails 
straight away.

Ps. Havent upgraded to r2 yet, so havent tested. I have heard of a couple of 
issues when upgrading, like the wds thread here and a very prominent sccm guru 
who told me after upgrading that he couldn’t install the r2 client agent… I 
need to follow up on that last one.

Andrew

Von: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] Im 
Auftrag von Aaron Czechowski
Gesendet: Dienstag, 22. Oktober 2013 07:41
An: mssms@lists.myitforum.com
Betreff: RE: [mssms] How fast are SSDs?

That’s a fair assessment. We spent a lot of time looking at the issue, and it’s 
not a simple matter. If folks are still hitting this issue and using R2, adjust 
this variable to something larger than one minute.

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Andre Vrankovic
Sent: Monday, October 21, 2013 10:08 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] How fast are SSDs?

Thanks for the link.

Okay.

So that is setting a timeout for the application before it retries, rather than 
just failing like it did pre R2. If it still isn’t working for people they 
might need to set it to more than the default which is 1 minute. Would have 
been nice if they fixed the issue with locationservices rather than patch the 
application installation operation, seems like a workaround similar to the ping 
wait rather than a true fix. Unless I’ve got that wrong?

Dre.
From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Aaron Czechowski
Sent: Tuesday, 22 October 2013 2:52 PM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] How fast are SSDs?

The extent of the documentation on it is what Craig pasted below (from 
http://technet.microsoft.com/en-us/library/hh273375.aspx).

And no recommended value, you’ll need to determine what’s appropriate for your 
environment. Too many variables to provide a specific value for general use.

Aaron


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Andre Vrankovic
Sent: Monday, October 21, 2013 8:25 PM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] How fast are SSDs?

Is there some documentation around the variable? Do you set it at the 
collection?

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Johan Arwidmark
Sent: Tuesday, 22 October 2013 9:05 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] How fast are SSDs?

What’s the recommended setting for SSD’s?

/ Johan

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Aaron Czechowski
Sent: den 21 oktober 2013 23:42
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] How fast are SSDs?

Bob, are you using the new SMSTSMPListRequestTimeout variable? This is the 
“fix” in R2.

Craig, this variable should apply in your scenario as well.

Aaron



From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Underwood, Bob
Sent: Monday, October 21, 2013 11:50 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] How fast are SSDs?

Has anyone seen evidence that this might indeed have been fixed in R2?

From what we’re seeing here, it’s still an issue.


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Johan Arwidmark
Sent: Thursday, October 17, 2013 6:10 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] How fast are SSDs?

That’s a known issue. I have been told it’s addressed in R2, but I haven’t 
tested yet.

Keep the pause for now ☺

/ Johan


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Craig Andrew (OIZ)
Sent: den 17 oktober 2013 05:02
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] How fast are SSDs?

Hi All

RE: [mssms] How fast are SSDs?

[Aaron Czechowski]

The extent of the documentation on it is what Craig pasted below (from 
http://technet.microsoft.com/en-us/library/hh273375.aspx).

And no recommended value, you’ll need to determine what’s appropriate for your 
environment. Too many variables to provide a specific value for general use.

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Andre Vrankovic
Sent: Monday, October 21, 2013 8:25 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] How fast are SSDs?

Is there some documentation around the variable? Do you set it at the 
collection?

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Johan Arwidmark
Sent: Tuesday, 22 October 2013 9:05 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] How fast are SSDs?

What’s the recommended setting for SSD’s?

/ Johan

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Aaron Czechowski
Sent: den 21 oktober 2013 23:42
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] How fast are SSDs?

Bob, are you using the new SMSTSMPListRequestTimeout variable? This is the 
“fix” in R2.

Craig, this variable should apply in your scenario as well.

Aaron



From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Underwood, Bob
Sent: Monday, October 21, 2013 11:50 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] How fast are SSDs?

Has anyone seen evidence that this might indeed have been fixed in R2?

From what we’re seeing here, it’s still an issue.


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Johan Arwidmark
Sent: Thursday, October 17, 2013 6:10 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] How fast are SSDs?

That’s a known issue. I have been told it’s addressed in R2, but I haven’t 
tested yet.

Keep the pause for now ☺

/ Johan


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Craig Andrew (OIZ)
Sent: den 17 oktober 2013 05:02
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] How fast are SSDs?

Hi All,

Thought i would share something with you all. We are using ConfigMgr2012 to 
build Win7 OSD. Now we have just received machines with SSD and the download 
time and boot time is so fast that after the Install Updates step the OS 
reboots and starts up the OS and the TSEngine so quickly that the domain has 
not had time to react and verify the machine account. The next step, install 
Applications, fails because the client cannot get the site information from AD 
and subsequently gets nothing from location request and cannot download 
anything. After putting in a wait step before the applications step the build 
runs through without problem.

You are only ever as fast as the slowest component.

Looking at built in TS variables, if it was just an application install step 
then this might help: SMSTSMPListRequestTimeout: For System Center 2012 R2 
Configuration Manager only:

Use this variable to specify how much time a task sequence waits before it 
retries to install an application after it fails to retrieve the management 
point list from location services. By default, the task sequence waits one 
minute before it retries the step. This variable is applicable only to the 
Install Application task sequence step.
But our step is install applications from list of variables and this appears 
not to retry any application, rather it fails immediately.  The wait step is 
just a quick fix, I am looking at variables and retry settings, and possible a 
script that checks availability of the domain before continuing. Maybe this TS 
variable will work with install from variable.

Andrew



[CONFIDENTIALITY AND PRIVACY NOTICE] Information transmitted by this email is 
proprietary to Medtronic and is intended for use only by the individual or 
entity to which it is addressed, and may contain information that is private, 
privileged, confidential or exempt from disclosure under applicable law. If you 
are not the intended recipient or it appears that this mail has been forwarded 
to you without proper authority, you are notified that any use or dissemination 
of this information in any manner is strictly prohibited. In such cases, please 
delete this mail from your records. To view this notice in other languages you 
can either select the following link or manually copy and paste the link into 
the address bar of a web browser: http://emaildisclaimer.medtronic.com




This message is for the designate recipient only and may contain confidential

RE: [mssms] How fast are SSDs?

[Aaron Czechowski]

That’s a fair assessment. We spent a lot of time looking at the issue, and it’s 
not a simple matter. If folks are still hitting this issue and using R2, adjust 
this variable to something larger than one minute.

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Andre Vrankovic
Sent: Monday, October 21, 2013 10:08 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] How fast are SSDs?

Thanks for the link.

Okay.

So that is setting a timeout for the application before it retries, rather than 
just failing like it did pre R2. If it still isn’t working for people they 
might need to set it to more than the default which is 1 minute. Would have 
been nice if they fixed the issue with locationservices rather than patch the 
application installation operation, seems like a workaround similar to the ping 
wait rather than a true fix. Unless I’ve got that wrong?

Dre.
From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Aaron Czechowski
Sent: Tuesday, 22 October 2013 2:52 PM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] How fast are SSDs?

The extent of the documentation on it is what Craig pasted below (from 
http://technet.microsoft.com/en-us/library/hh273375.aspx).

And no recommended value, you’ll need to determine what’s appropriate for your 
environment. Too many variables to provide a specific value for general use.

Aaron


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Andre Vrankovic
Sent: Monday, October 21, 2013 8:25 PM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] How fast are SSDs?

Is there some documentation around the variable? Do you set it at the 
collection?

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Johan Arwidmark
Sent: Tuesday, 22 October 2013 9:05 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] How fast are SSDs?

What’s the recommended setting for SSD’s?

/ Johan

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Aaron Czechowski
Sent: den 21 oktober 2013 23:42
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] How fast are SSDs?

Bob, are you using the new SMSTSMPListRequestTimeout variable? This is the 
“fix” in R2.

Craig, this variable should apply in your scenario as well.

Aaron



From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Underwood, Bob
Sent: Monday, October 21, 2013 11:50 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] How fast are SSDs?

Has anyone seen evidence that this might indeed have been fixed in R2?

From what we’re seeing here, it’s still an issue.


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Johan Arwidmark
Sent: Thursday, October 17, 2013 6:10 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] How fast are SSDs?

That’s a known issue. I have been told it’s addressed in R2, but I haven’t 
tested yet.

Keep the pause for now ☺

/ Johan


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Craig Andrew (OIZ)
Sent: den 17 oktober 2013 05:02
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] How fast are SSDs?

Hi All,

Thought i would share something with you all. We are using ConfigMgr2012 to 
build Win7 OSD. Now we have just received machines with SSD and the download 
time and boot time is so fast that after the Install Updates step the OS 
reboots and starts up the OS and the TSEngine so quickly that the domain has 
not had time to react and verify the machine account. The next step, install 
Applications, fails because the client cannot get the site information from AD 
and subsequently gets nothing from location request and cannot download 
anything. After putting in a wait step before the applications step the build 
runs through without problem.

You are only ever as fast as the slowest component.

Looking at built in TS variables, if it was just an application install step 
then this might help: SMSTSMPListRequestTimeout: For System Center 2012 R2 
Configuration Manager only:

Use this variable to specify how much time a task sequence waits before it 
retries to install an application after it fails to retrieve the management 
point list from location services. By default, the task sequence waits one 
minute before it retries the step. This variable is applicable only to the 
Install Application task sequence step

[mssms] RE: Windows 8.1 RTM and Windows Server 2012 R2 RTM available...

[Aaron Czechowski]

Yep - that should now work.

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of christopher.catl...@us.sogeti.com
Sent: Monday, September 9, 2013 12:25 PM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Windows 8.1 RTM and Windows Server 2012 R2 RTM available...

Johan, does this mean the bug in MDT 2013 Preview is fixed (since it was the 
ADK's fault), regarding the creation of an unattend file?

Christopher Catlett
Consultant | Detroit
[MCTS_2013_small]

Sogeti USA
Office 248-876-9738 |Fax 877.406.9647
26957 Northwestern Highway, Suite 130, Southfield, MI 48033-8456
www.us.sogeti.comhttp://www.us.sogeti.com/

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Daniel Ratliff
Sent: Monday, September 09, 2013 2:10 PM
To: mdt...@lists.myitforum.com; mssms@lists.myitforum.com
Subject: [mssms] RE: Windows 8.1 RTM and Windows Server 2012 R2 RTM available...

Nice! Thanks Johan.

Daniel Ratliff

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Johan Arwidmark
Sent: Monday, September 09, 2013 1:56 PM
To: mdt...@lists.myitforum.commailto:mdt...@lists.myitforum.com; 
mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [MDT-OSD] Windows 8.1 RTM and Windows Server 2012 R2 RTM available...

My first cross-post, worth it...:)

Windows 8.1 RTM and Windows Server 2012 R2 RTM available...
http://blogs.msdn.com/b/stevengu/archive/2013/09/09/download-windows-8-1-rtm-visual-studio-2013-rc-and-windows-server-2012-r2-rtm-today.aspx

/ Johan


Johan Arwidmark | Chief Technical Architect | Knowledge Factory
Torsgatan 8 | SE 111 23 Stockholm
Mobile: +46-70-454 30 07 | Switchboard: +46 8 465 012 70
www.knowledgefactory.sehttp://www.knowledgefactory.se/

[Description: 
C:\Users\johan.arwidmark\AppData\Local\Microsoft\Windows\Temporary Internet 
Files\Content.Outlook\ULRY6HCP\kf_signoff_eng (3).png]

[cid:image003.jpg@01CEAD67.8264E490]


The information transmitted is intended only for the person or entity to which 
it is addressed
and may contain CONFIDENTIAL material. If you receive this material/information 
in error,
please contact the sender and delete or destroy the material/information.





inline: image001.jpginline: image002.pnginline: image003.jpg

RE: [mssms] SCCM 2012 WinPE issue.

[Aaron Czechowski]

This should be addressed in R2 Preview.

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of CESAR.ABREG0 .
Sent: Wednesday, August 21, 2013 4:55 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] SCCM 2012 WinPE issue.


So are. CU2
On Aug 21, 2013 4:53 PM, Richard Zuraff 
richard.zur...@genmills.commailto:richard.zur...@genmills.com wrote:
We are on CU2 and are seeing it.

On Aug 21, 2013, at 5:49 PM, Daniel Ratliff 
dratl...@humana.commailto:dratl...@humana.com wrote:
This sounds like an issue we were seeing pre CU2 but with DPs not MPs. 
Microsoft basically said when we distribute content we have to add all DPs 
otherwise it will always try to download from the DP that doesn't have the 
content. We upgraded to CU2 over the weekend but haven't tested yet.

-Daniel Ratliff

-Original Message-
From: CESAR.ABREG0 . [elsal...@gmail.commailto:elsal...@gmail.com]
Sent: Wednesday, August 21, 2013 06:26 PM Eastern Standard Time
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: Re: [mssms] SCCM 2012 WinPE issue.
We are having the same exact symptoms in our environment, the only difference 
is that one of our 4 MPs is part of an 'untrusted domain' environment in a DMZ 
and is not internet facing one, our 5th that is not online yet, will be an 
internet facing one.

Out bootdisk has 3 primary MPs in the options but the client wants to get pol 
from our 4th MP which is not part of the MP options. One of our team members 
directed the question to MS rep but no response yet. We removed the role from 
the Site System for now since we is not in production yet.

I will relay any findings that we get or workarounds.

On Wed, Aug 21, 2013 at 3:01 PM, Richard Zuraff 
richard.zur...@genmills.commailto:richard.zur...@genmills.com wrote:
I'm having an issue with our OSD booting from PXE.  Everything was working 
correctly until we setup an external facing management point for our Internet 
facing clients.  Once we did that our imaging via PXE\Boot CD stopped working.  
We are now getting the external Management Point instead of the internal one.  
It's unable to find any DP's with the imaging content on it even though the 
internal and external DP's have the imaging content on them.  If we remove the 
external MP everything works fine.

How does it determine the MP during WinPE?  Any ideas on where to start 
troubleshooting this issue?



Thanks









The information transmitted is intended only for the person or entity to which 
it is addressed
and may contain CONFIDENTIAL material. If you receive this material/information 
in error,
please contact the sender and delete or destroy the material/information.

[mssms] RE: Imaging a surface pro.

[Aaron Czechowski]

Surface Pro is a 64bit UEFI device, so the architecture has to be consistent 
throughout, thus only x64 boot image. See 
http://support.microsoft.com/kb/2858199/EN-US.

Also, check out the Surface Pro deployment guide: 
http://download.microsoft.com/download/2/0/7/2073C22F-2F31-4F4A-8059-E54C91C564A9/Surface%20Pro%20-%20Enterprise%20Deployment%20Quick%20Start%20Guide-June2013.pdf.
 Aside from procedural guidance it also has some general FAQs.

Aaron



-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Richard Zuraff
Sent: Thursday, August 22, 2013 11:11 AM
To: mssms
Subject: [mssms] Imaging a surface pro.

Is anyone imaging a Surface Pro via winpe 32 bit.  I'm being told by the 
imaging person that took over my role it can't be done.  It will only work with 
Winpe 64.  I find this hard to believe.  

When I built Win 7 x64 I had to do the first build and capture in x64 pe, but 
than after that I could use 32 pe to deploy and build future images from that 
first wim.

RE: [mssms] Offline Servicing problems???

[Aaron Czechowski]

We're investigating the issue. And by we I mean ConfigMgr and Windows product 
groups. Not much more to share at this point than that.

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Linkey, Mike
Sent: Wednesday, August 14, 2013 9:10 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Offline Servicing problems???

I tried that once and got similar results.  Hosed up all of my images and I had 
to redo them.  Have not tried since.

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Paul J Melancon
Sent: Wednesday, August 14, 2013 9:40 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] Offline Servicing problems???

Ok so has no one in this forum run into this problem or is it just a few 
people.. trying to figure out if I did something wrong in the upgrade to SP1 
because this only cropped up after the upgrade before everything was working 
fine..

http://social.technet.microsoft.com/Forums/en-US/9c34add1-5261-4dcf-b3f6-7c26ef4fcd28/sccm-2012-sp1-offline-servicing-failed-to-install-update


Paul

RE: [mssms] OSD vs. MDT -- Let the debate begin (again)

[Aaron Czechowski]

Interesting thread, definitely one I'll file away. :) As the program manager 
for both OSD and MDT now, let me echo Jason's comment: MDT is still in 
development, we continue to invest in it, and will continue to do so. For all 
three scenarios: LTI, ZTI and UDI. (And when I say scenario, I mean the 
high-level ways in which you deploy an OS, not specifically the technology that 
drives that today.) This product has grown wildly over the past eight+ years, 
very much because of the strength of this and the larger deployment community. 
But, sometimes that growth is not always apparent, something that works well on 
a slide or as a demo at TechEd or a great blog post, but there is still growth, 
and there will continue to be growth.

So all great feedback, please keep it coming!

Aaron


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Daniel Ratliff
Sent: Friday, July 26, 2013 5:40 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] OSD vs. MDT -- Let the debate begin (again)

What? You don't want to do all your customizations in c++?

I agree though, very powerful, was actually using it for a while as our LTI 
solution until we had our PowerShell frontend working.

Daniel Ratliff

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of 
andrew.ber...@everestre.commailto:andrew.ber...@everestre.com
Sent: Friday, July 26, 2013 8:33 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] OSD vs. MDT -- Let the debate begin (again)

+1 to that statement!

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com]mailto:[mailto:listsad...@lists.myitforum.com]
 On Behalf Of Marcum, John
Sent: Thursday, July 25, 2013 4:41 PM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] OSD vs. MDT -- Let the debate begin (again)

What would be GREAT is if they would write some improvements for UDI. It has so 
much potential yet so many flaws!!!




John Marcum
Sr. Desktop Architect
Bradley Arant Boult Cummings LLP


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Sandys
Sent: Thursday, July 25, 2013 3:18 PM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: RE: [mssms] OSD vs. MDT -- Let the debate begin (again)

It is still in development to my knowledge - just without Michael (which is 
maybe not the best thing is the world although I'm sure Michael may be sick of 
MDT by now :)). The ConfigMgr team has stated that both LiteTouch and ZeroTouch 
will continue to be supported and developed.

J

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com]mailto:[mailto:listsad...@lists.myitforum.com]
 On Behalf Of Todd Hemsell
Sent: Thursday, July 25, 2013 3:09 PM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: Re: [mssms] OSD vs. MDT -- Let the debate begin (again)

CM  MDT is the best IMHO. MDT fixes issues you never even knew you had. Tiss a 
horrid shame you are not still improving on it. My hatred for MS over that move 
burns with the fury of 10,000 suns.

Happy for you personally though :-)
On Thu, Jul 25, 2013 at 2:22 PM, Michael Niehaus 
michael.nieh...@microsoft.commailto:michael.nieh...@microsoft.com wrote:
I'd reply back with a longer reply if I weren't so tired.  So you'll get the 
abridged version:

Every customer has different requirements.  For most, using MDT Lite Touch for 
image creation is easiest (although a lot of that is tied to many of the waste 
of time customizations made to the images being created).  You can then use 
either MDT or ConfigMgr to deploy.  For many customers, there are scenarios 
where both could make sense.  There is no one size fits all answer.  I see 
customers with 500 seats using ConfigMgr completely; I see customers with 
400,000 seats using only MDT.

If you want to use ConfigMgr for everything in every scenario, feel free.  If 
you want to use MDT with ConfigMgr to help make that easier, feel free.  (If 
you don't, I'll try not to hold it against you :))  If you want to use MDT 
without ConfigMgr, feel free.

Just never ask me about doing something in ConfigMgr that MDT already does...

Thanks,
-Michael

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Todd Hemsell
Sent: Thursday, July 25, 2013 12:06 PM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: Re: [mssms] OSD vs. MDT -- Let the debate begin (again)

amen brutha!
On Thu, Jul 25, 2013 at 1:04 PM, Jason Sandys 
ja...@sandys.usmailto:ja...@sandys.us wrote:
Eww yuck (IMO). This requires duplication of effort, duplication of 
configuration, and