Re: [mssms] SCCM 2012 and Software Updates

...to add to that, you can only have one Active SUP per site. If you have multiple, then they all have to be members nodes in the same NLB cluster farm. I believe you can only have up to 4 SUPs in a cluster farm and they have to share the same SUP database... I haven't done this in a couple

Re: [mssms] Automating package replication

I would start by reviewing the package distribution or software distribution workflows. You can find all the different workflows under config manager 2007. Reverse engineer those and I believe that would be a good start for figuring out what it is you want to do. Just search Google for those

[mssms] RE: OT: Johan Webinar for BDNA

A demo of how BDNA can reduce your overall time to migrate by over 70% WOW!?!? Troy L. Martin | Principal Consultant 1E | Empowering Efficient IT US Mobile: +1 678-898-6147 UK Mobile : +44 208 326 9141 troy.mar...@1e.commailto:troy.mar...@1e.com | www.1e.comhttp://www.1e.com/

RE: [mssms] CM12 - Inventory Cache Size and Usage

...you may find this valuable as well. http://blogs.msdn.com/b/alex_semi/archive/2011/12/15/increase-cm-cache-and-clean-it.aspx Troy L. Martin | Principal Consultant 1E | Empowering Efficient IT US Mobile: +1 678-898-6147 UK Mobile : +44 208 326 9141 troy.mar...@1e.commailto:troy.mar...@1e.com |

RE: [mssms] CM12 - Inventory Cache Size and Usage

[mailto:listsad...@lists.myitforum.com] On Behalf Of Todd Hemsell Sent: Wednesday, July 17, 2013 10:26 AM To: mssms@lists.myitforum.com Subject: Re: [mssms] CM12 - Inventory Cache Size and Usage nice, thanks. On Wed, Jul 17, 2013 at 8:57 AM, Troy Martin troy.mar...@1e.commailto:troy.mar

RE: [mssms] ConfigMgr 2012 meets tablets - The case of the Unknown

What you're describing is an edge-case scenario which is probably being impacted by an environmental condition. I've seen new objects replicated between a CAS and single primary within a couple of minutes, if not less. What you've described is not the norm... Troy L. Martin | Principal

RE: [mssms] CM12, Multiple SUPs questions

...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Troy Martin Sent: Friday, September 6, 2013 10:21 AM To: mssms@lists.myitforum.com Subject: RE: [mssms] CM12, Multiple SUPs questions Hey Roland, I realize the goal is to spread the load across all of them. But it sound

Re: [mssms] Client install issue

Just a hunch... Right-click CCMsetup.exe and select properties. Make sure the file is not blocked. If you see the Unblock button, then it is being blocked. Sent from my iPhone On Sep 19, 2013, at 9:18 PM, Daniel Ratliff dratl...@humana.commailto:dratl...@humana.com wrote: Install ended

RE: AW: [mssms] Migrating Objects from 2012 to 2012

Now if only we had the ability to mark UAT objects as approved and keep the admins right out of PROD :) . . . . On the surface, you could absolutely do this in RBAC, setting the desired and appropriate security scopes on the UAT objects. Can you elaborate on your statement? Troy L. Martin |

Re: [mssms] SUP Switching with ConfigMgr 2012

What SP1 provides is redundancy and HA (e.g. multiple active SUPs per primary), and delayed failover (e.g. intelligence of SUP agent in ConfigMgr client, but only 2hrs 2 min after losing contact with current SUP). The new capabilities of the SUP role does not provide load-balancing...only

Re: [mssms] Exclude IP range from ALL SCCM deployments\updates

Sounds extreme, but I may not completely understand what the goal is. As the admin, you control what clients are targeted for advertisements. Since collections are the source for targeting clients, how about a query that excludes the undesired subnet(s)? Can you elaborate a little more on

RE: [mssms] ConfigMgr 2012 SP1 CU3: OSD Client fails to communicate with MP

Trevor, To confirm that the client is truly communicating with IIS on the MP - from the MP -, go to and open Inetpub\Logs\W3SVC1\most recent logfile. Starting from the bottom, look for lines with the vidr/URL entry like CCM_System_WindowsAuth/Request. Most likely you're going to see 401

RE: [mssms] 1E nomad documentation - help

help.1e.com Troy L. Martin | Principal Consultant 1E | Empowering Efficient IT US Mobile: +1 678-898-6147 UK Mobile : +44 0758 530 0940 troy.mar...@1e.commailto:troy.mar...@1e.com | www.1e.comhttp://www.1e.com/ Facebookhttp://www.facebook.com/1eglobal | Twitterhttps://twitter.com/1e_global/ |

RE: [mssms] SCCM 2007 - Control versioning

What about using ZTITatoo.wsf and ZTITatoo.mof, found in MDT? You could modify/copy from this to make your own solution. All the work is already done :) Troy L. Martin | Principal Consultant 1E | Empowering Efficient IT US Mobile: +1 678-898-6147 UK Mobile : +44 758 530 0940

[mssms] RE: RBAC question

Is DEFAULT security scope still associate with the Administrative Users in question? DEFAULT security scope is applied to all newly created objects - by default, of course - unless you change/(re)set Security Scopes on the object(s). If DEFAULT security scope is still set on an object, then

Re: [mssms] RE: RBAC question

...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Troy Martin Sent: Tuesday, December 10, 2013 10:30 AM To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: [mssms] RE: RBAC question Is DEFAULT security scope still associate with the Administrative Users

[mssms] RE: Rolling with SCCM 2012 SP1 tonight

...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Troy Martin Sent: Monday, January 06, 2014 3:36 PM To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: [mssms] RE: Rolling with SCCM 2012 SP1 tonight +1 Save yourself the hassle and use

RE: [mssms] SCCM 2012, PKI and ICBM

...there are several optionshttp://technet.microsoft.com/en-us/library/bb693824.aspx to consider, with - I believe - Scenario 3 with SQL Server Replicahttp://technet.microsoft.com/en-us/library/bb694250.aspx being the most secure and the one I've successfully implemented at several customers.

Re: [mssms] SCCM 2012, PKI and ICBM

Scenario 4: Internet connections into the intranet - http://technet.microsoft.com/en-us/library/bb632529.aspx ...but is also arguably the least secure, because your allowing IBCM clients to communicate directly with site systems over the Internet. Intranet clients are also communicating with

RE: [mssms] DMZ CM servers

For security reasons, I would strongly consider splitting the site roles across multiple servers...based upon the type of protocol used to communicate with IIS: * All HTTP-enabled roles on Server A o FSP o PKI CRL-DP (Note: this is not a ConfigMgr site role. However, it is

RE: [mssms] Clients ignoring boundaries

Multiple nics (wired/wireless)...connected to two different subnets? If so, make sure the nic connected to the desired boundary the preferred DP(s) connected to, is the only nic that is ENABLED. Is the site/location/subnet behind a Nat'ed firewall, masking/spoofing all the client's IP? Is

RE: [mssms] DMZ CM servers

+1 From: listsad...@lists.myitforum.com listsad...@lists.myitforum.com on behalf of Rich Coulter rich.coul...@aos5.com Sent: Saturday, February 08, 2014 5:36 PM To: mssms@lists.myitforum.com Subject: Re: [mssms] DMZ CM servers There’s no hard and fast rule

Re: [mssms] MP Issue

When using HTTPS, the servername and SANs used to create the certificate should be used. Also, when browsing to the HTTPS URL, the browser session (in IE or whatever browser being used) needs to have a Client Authentication certificate assigned to it. Let me explain... When an IBCM client

Re: [mssms] SQL query to get status messages?

Take a look/search on John Nelson's blog on myITforum... Sent from my iPhone On Mar 28, 2014, at 10:45 AM, Daniel Ratliff dratl...@humana.commailto:dratl...@humana.com wrote: Has anyone ever done any SQL queries to gather status messages? Any ideas on how I can get this data? I can get just

Re: [mssms] CU1 available...

I thought using WinPE 3.1 was the workaround for the bootsect isssue. Are you saying that after installing CU1, WinPE 3.1 boot images is no longer required when migrating Windows XP machines? Sent from my iPhone On Mar 28, 2014, at 3:03 PM, Michael Niehaus

Re: [mssms] CU1 available...

it correctly uses the older BOOTSECT. Thanks, -Michael From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Troy Martin Sent: Friday, March 28, 2014 2:26 PM To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com

RE: [mssms] IBCM clients go to Microsoft Update for patches

Before they go to Microsoft to download the update binaries, where would they get the catalog from to scan against? You need an Internet-facing SUP so IBCM clients can still download the catalog. WSUS Catalog = SUP (in DMZ) Binaries = 1st - Microsoft Update, 2nd- DP (in DMZ) Troy L. Martin |

RE: [mssms] IBCM clients go to Microsoft Update for patches

It's not so much of a need, as it is a Plan B or backup. If for whatever reason, those clients cannot get to Microsoft Update website, then the DP (in DMZ) is an option is the only alternative. My thinking is about minimizing risk - avoid orphaning IBCM clients (e.g. not being able to access

Re: [mssms] Sccm 2012 R 2 known issues related to OSD

IIS logs will provide further information. Sent from my iPad On Apr 23, 2014, at 11:11 AM, Hun boy hun@outlook.commailto:hun@outlook.com wrote: It was the file block setup.vbs This vbs is in the root of the folder And in other situation the file type is .cat this is in a sub

Re: [mssms] So basic Application question

+1 Sent from my iPad On May 2, 2014, at 9:24 AM, Matt Wilkinson mwilkin...@lcb.ac.uk wrote: +1 -Original Message- From: Daniel Ratliff [mailto:dratl...@humana.com] Sent: 02 May 2014 13:58 To: mssms@lists.myitforum.com Subject: RE: [mssms] So basic Application question +1.

RE: [mssms] Question about DP's

Yes, 1E Nomad and other 3rd party options are more than capable at solving the problem being described. Troy L. Martin | Principal Consultant 1E | Empowering Efficient IT US Mobile: +1 (678) 898-6147 UK Phone : +44 208 326 9141 troy.mar...@1e.com | www.1e.com Facebook | Twitter | YouTube |

RE: [mssms] CCMEVALTASK issue

http://channel9.msdn.com/Events/TechEd/NorthAmerica/2011/SIM304 Description: = Security-conscious organizations often lock down their systems based on prescriptive guidance from Microsoft, US Federal government agencies or other security organizations. Sometimes these settings can lead

RE: [mssms] CCMEVALTASK issue

...@lists.myitforum.commailto:listsad...@lists.myitforum.com listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com on behalf of Troy Martin troy.mar...@1e.commailto:troy.mar...@1e.com Sent: Thursday, May 8, 2014 11:40 AM To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: RE

RE: [mssms] CS.ini processes rules but doesn't install apps in ZTI deployment

…have you tried using the Application GUID, instead of the name? Troy L. Martin | Principal Consultant 1E | Empowering Efficient IT US Mobile: +1 (678) 898-6147 UK Phone : +44 208 326 9141 troy.mar...@1e.commailto:troy.mar...@1e.com | www.1e.comhttp://www.1e.com/

RE: [mssms] Re: IBCM not working after CM12 R2 upgrade

Disabling CRL checking is not a best practice and would be a bad thing to do. I would give that a second thought, and research what it would take to so that CRL checking can be enabled. Essentially, clients need to be able to access the CRL Distribution Points whether they’re on the intranet

RE: [mssms] Re: IBCM not working after CM12 R2 upgrade

R2 upgrade I definitely will. Thanks Troy. Jeff On Mon, Jun 2, 2014 at 4:47 PM, Troy Martin troy.mar...@1e.commailto:troy.mar...@1e.com wrote: Disabling CRL checking is not a best practice and would be a bad thing to do. I would give that a second thought, and research what it would take to so

[mssms] Pre-Flight Check TS is now available!!

http://bit.ly/1BJjQiV Troy L. Martin | Product Manager, Management Infrastructure 1E | Run IT For Less US Mobile: +1 (678) 898-6147 UK Phone : +44 208 326 9141 troy.mar...@1e.commailto:troy.mar...@1e.com | www.1e.comhttp://www.1e.com/ Facebookhttp://www.facebook.com/1eglobal |

[mssms] RE: Pre-Flight Check TS is now available!!

...@lists.myitforum.com] On Behalf Of Troy Martin Sent: Tuesday, October 7, 2014 2:40 PM To: mdt...@lists.myitforum.com Cc: mssms@lists.myitforum.com Subject: [MDT-OSD] Pre-Flight Check TS is now available!! http://bit.ly/1BJjQiV Troy L. Martin | Product Manager, Management Infrastructure 1E | Run

[mssms] RE: Pre-Flight Check TS is now available!!

: Wednesday, October 8, 2014 11:49 AM To: mdt...@lists.myitforum.com Cc: mssms@lists.myitforum.com Subject: [mssms] RE: Pre-Flight Check TS is now available!! Nice work! From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Troy

Re: [mssms] RE: Distribution Bottleneck

If you're seriously considering BranchCache as the alternate content provider for your organization, be sure to do your homework, by first reading a white paper Paul Thomsen has written: http://www.1e.com/blog/all_resources/branchcache-right-organisation/ In the white paper, we look at the key

Re: [mssms] RE: Distribution Bottleneck

...@lists.myitforum.commailto:listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Troy Martin Sent: den 4 december 2014 22:59 To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: Re: [mssms] RE: Distribution Bottleneck If you're seriously considering BranchCache as the alternate

Re: [mssms] Transactional replication of CM database

Transactional replication of the site database is only supported for the MP role. This is so because only a subset of the site database is used by an MP, and not the entire database. Consider using Log Shipping instead - https://msdn.microsoft.com/en-us/library/ms151224.aspx Sent from my

[mssms] RE: (OT) Vendor list for Ignite?

Hey Ivan, Have them stop by the 1E booth. In the meantime, check out our site - http://www.1e.com/appclarity-software-asset-management/ Thanks :) Troy L. Martin | Product Manager, Endpoint Automation Provision software, not infrastructure US Mobile: +1 (678) 898-6147 UK Phone : +44 208 326

RE: [mssms] RE: (OT) Vendor list for Ignite?

...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Troy Martin Sent: den 19 februari 2015 17:24 To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: [mssms] RE: (OT) Vendor list for Ignite? Hey Ivan, Have them stop by the 1E booth. In the meantime, check out our

[mssms] A "true" offline silent install of Google Chrome

Although Google documents having an .msi installer to do "offline" installs of the browser, it still requires the device to have Internet access. Apparently Chrome still needs to download bits over the Internet during the install. In addition, I have not found an actual Chrome .msi for

[mssms] Application installs not happening automatically

I've noticed on two ConfigMgr 1602 environments that application installs are not occurring automatically and (near) immediately after/once the client downloads policy. The only way to have the application installs begin is to trigger an Application Deployment Evaluation Cycle client action.

[mssms] Application installs not happening automatically

I've noticed on two ConfigMgr 1602 environments that application installs are not occurring automatically and (near) immediately after/once the client downloads policy. The only way to have the application installs begin is to trigger an Application Deployment Evaluation Cycle client action.

[mssms] RE: Moving IP's

...it's all about name resolution and routing: If DNS (public and intra') has been updated accordingly, there should not be any problems. If routing to the new IP addresses is working, should not be any problems. Troy L. Martin | Technical Architect 1E | Software Lifecycle Automation for the

RE: [mssms] New Software Center old client

Old = CCM\SCClient.exe New = CCM\ClientUX\SCClient.exe Both exists, but only one is actually registered (to be used/opened). To determine which one is registered: Start -> Run -> softwarecenter: The colon “:” is included The registered one will be the one that will open. Troy L. Martin |

Re: [mssms] CS.ini SQL without NAMED PIPES

In the SQL server configuration tools, TCP/IP protocol is required to be enabled on the server as well. Also, the ConfigMgr Network Access Account needs a SQL login and granted db_datareader perms to the MDT database. 1E | Software Lifecycle Automation On Jul 5, 2016, at 1:05 PM, Giroux, Eric

Re: [mssms] CS.ini SQL without NAMED PIPES

LShare is on the SQL server and UNC connection is made successfully in the logs. This is not the MDT database but a db for an internal app we use to populate some deployment variables. From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.

RE: [mssms] Upgrading 1511 to 1607 w/ Bitlocker

If doing In-Place Upgrade, Windows will automatically disable/(re)enable BitLocker during the deployment. Troy L. Martin | Technical Architect 1E | Software Lifecycle Automation for the Digital Business US Mobile: +1 (678) 898-6147 | UK Phone : +44 208 326 9141

RE: [mssms] Upgrading 1511 to 1607 w/ Bitlocker

system using the Feature Update software package with systems that have Bitlocker and do an in-place upgrade using a task sequence? If I am using MBAM I am assuming this will work the same, correct? Sol From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad

[mssms] RE: PKI Certificate hell

Once the MP cert is imported into the MP's machine/computer cert store, if you double-click, is the certificate path OK/validated? Troy L. Martin | Technical Architect 1E | Software Lifecycle Automation for the Digital Business US Mobile: +1 (678) 898-6147 | UK Phone : +44 208 326 9141

RE: UPDATE: RE: [mssms] Upgrading 1511 to 1607 w/ Bitlocker

hould interfere with this and that the setup/install process should take care of it. From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Troy Martin Sent: Tuesday, February 7, 2017 12:03 PM To: mssms@lists

RE: [mssms] Windows 7 B after Convenience Roll-up

All that’s needed is the Convenience Roll-up from April/May and the January 2017 Quality Update…all thanks to the efficiency of WaaS ☺, else you’d be applying updates from June thru January.

Re: [mssms] Optiplex 7010 Windows 10 imaging problems

Are you doing a Bios-to-UEFI conversion as part of the task sequence? If so - as a test -, before the conversion add another "Restart in WinPE" step. I understand that the machine is already PE at that time, but just try and see how that goes. 1E | Software Lifecycle Automation On Sep 22,

RE: [External] Re: [mssms] W10 Upgrade & Printer Issues

orum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Troy Martin Sent: Monday, December 5, 2016 12:48 PM To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com> Subject: RE: [External] Re: [mssms] W10 Upgrade & Printer Issues …and what ha

RE: [External] Re: [mssms] W10 Upgrade & Printer Issues

…and what happens when wipe/load? Troy L. Martin | Technical Architect 1E | Software Lifecycle Automation for the Digital Business US Mobile: +1 (678) 898-6147 | UK Phone : +44 208 326 9141 troy.mar...@1e.com |

Re: [mssms] deploy executable that opens a command prompt

cmd / c %~dp0.exe 1E | Software Lifecycle Automation On Mar 8, 2017, at 3:10 PM, Timothy Ransom > wrote: Hi, I have a custom executable to deploy with ConfigMgr that must be run from UNC path and opens a command prompt while

[mssms] RE: SQL Query question / best practice

Give them access to an offline (replica/log-shipped) copy of the site database, hosted on a remote (or other) SQL Server and let them go to town :) No need to provide access to CAS or primary site databases. Avoid doing that for a number of reasons... Troy L. Martin | Technical Architect 1E |

[mssms] RE: MBR2GPT question

https://blogs.technet.microsoft.com/system_center_configuration_manager_operating_system_deployment_support_blog/2017/02/23/no-mouse-cursor-during-configmgr-osd-task-sequence/ Troy L. Martin | Technical Architect 1E | Software Lifecycle Automation for the Digital Business US Mobile: +1 (678)

RE: [mssms] sccm plain image vs core apps image

https://twitter.com/sandy_tsang/status/852172689544552448 pretty good thread debating the pros/cons of both… Troy L. Martin | Technical Architect 1E | Software Lifecycle Automation for the Digital Business US Mobile: +1 (678) 898-6147 | UK Phone : +44 208 326 9141

RE: [mssms] RE: Recovery Key required after SecureBoot

https://miketerrill.net/2017/04/19/how-to-detect-suspend-and-re-enable-bitlocker-during-a-task-sequence/ Troy L. Martin | Technical Architect 1E | Software Lifecycle Automation for the Digital Business US Mobile: +1 (678) 898-6147 | UK Phone : +44 208 326 9141

[mssms] RE: MBR2GPT question

R2GPT is working flawlessly. Good that I found the issue, but weird that a system volume drive letter other than C would cause such an odd problem. Thank you, Richard Poole From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com]

[mssms] RE: m.2 and win10 OSD

...missing NVME driver?? Troy L. Martin | Technical Architect 1E | Software Lifecycle Automation for the Digital Business US Mobile: +1 (678) 898-6147 | UK Phone : +44 208 326 9141 troy.mar...@1e.com |

RE: [mssms] Automated Software Removal

...uum [cid:image004.jpg@01D32CB8.96470E00] Troy L. Martin | Technical Architect 1E | Software Lifecycle Automation for the Digital Business US Mobile: +1 (678) 898-6147 | UK Phone : +44 208 326 9141 troy.mar...@1e.com |

RE: [mssms] Redirect VPN clients traffic to IBCM servers !

What is the CCMSetup.exe command-line used to install the client in your environment? At a minimum, it should include the following: CCMSetup.exe /UsePKICert CCMHOSTNAME="SMSMP01.corp.contoso.com" If you want to force the clients to "always" be Internet clients, then add the following to the

RE: [mssms] Redirect VPN clients traffic to IBCM servers !

e case in my experience. Dewayne From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Troy Martin Sent: Friday, December 8, 2017 1:47 AM To: mssms@lists.myitforum.com Subject: RE: [mssms] Redirect VPN clients traffic to IBCM servers ! What is the CCMSetup.exe