How can I determine what Antimalware Policy is applied to my SCEP 2012 SP1 client

Niall Brady posted a blog post a few days ago How can I determine what Antimalware Policy is applied to my SCEP 2012 SP1 client. Niall showed how to check Antimalware Policy via registry or via Configuration Manager Console. Actually there is one method more - Antimalware policy is also stored in WMI class . You can use query below to identify the Antimalware policy from WMI. $EmptyPolicy= @() $EPPolicy = Get-wmiObject -namespace "Root\ccm\Policy\Machine\ActualConfig" -query "Select Name from CCM_AntiMalwarePolicyClientConfig" | ForEach-Object {$EmptyPolicy+=$_.Name} $EmptyPolicy | Group-Object | Select-Object -Property Name -Unique   Script Output  

By |2013-02-22T18:53:09+01:00February 22nd, 2013|Configuration Manager (SCCM), Powershell|1 Comment

Both True and False is enforced on a rule/monitor – who wins?

Got this question today: A rule/monitor is created and disabled by default The rule/monitor is overridden and enforced to False for a class The rule/monitor is then overridden and enforced to True for a specific object of the class Will the rule be True or False? I created a rule and disabled it by default. I then made an override for All Windows Server and enabled marked the ”Enforced” box.   I then made an override for a specific object of Windows Server, and changed the Override Value to True. I applied this change, but the Effective Value would still [...]

By |2013-02-22T12:23:35+01:00February 22nd, 2013|Operations Manager (SCOM)|1 Comment

Install a SCOM 2012 agent – silent

  As a part of a script, I wanted to install the SCOM agent on several servers. All these servers are in workgroup/dmz/other domains, which means I had to do a manual installation. Now, there’s a lot of guides on how to install an agent using a command line, the official one from Microsoft: Install Agent Using the Command Line: However, this one doesn’t describe any silent parameters. The only way to use the /silent parameter is when installing an OpsMgr component (server, gateway etc). I tried with the /qn option, which made my command look like this: msiexec.exe [...]

By |2013-02-21T15:14:53+01:00February 21st, 2013|Operations Manager (SCOM)|3 Comments

State of the Empire: How to use E-mail Notifications in ConfigMgr 2012 SP1

In the old days you found out something was wrong when phones started to ring and senior management was at you "doorstep" with an angry look. In Configuration Manager 2012 SP1 we have many ways of being proactive with the state of our environment and the state of our precious clients. In this blog post ill cover: Client Status alerts (Check, Remediation & Activity) Endpoint Protection alerts (Malware detection & outbreak) Site Server status alerts (Site backup, Software Update sync, Database free space & replication) Reports Note: E-mail Notification component has to be configured in the Configuration Manager environment. Client [...]

Configure E-mail Notification component in ConfigMgr 2012 SP1

In order to send Alert notifications or Reports via E-mail we need to make some configurations in the Console and in SQL Reporting Services Configuration Manager. In the Administration section select the Site Configuration folder and click Sites. In the Ribbon click Configure Site Components and select E-mail Notification. Enter the details for the SMTP connection, and test that it works. Click Ok, and you are done in the Configuration Manager Console. Onwards to glory! Almost… Open SQL Reporting Services Configuration Manager. Click E-mail Settings and enter the SMTP details in here. Click Ok, and you are done in the [...]

Automatic Client Upgrade greyed out

In ConfigMgr 2012 SP1 you might run into the Automatic Client Upgrade feature being greyed even if you are a full administrator. In this example I have a group called ConfigMgr Administrators that has been assigned Full Administrator rights but are still not able to enable the Automatic Client Upgrade settings. To fix the issue log in with the account that installed the primary site server. In the Administration workspace, select Security, Administrative Users and open the properties for the ConfigMgr Administrators group. Click Add, Security Scope and select All Security Scopes. Click OK and all users in the ConfigMgr [...]

By |2013-02-19T18:00:33+01:00February 19th, 2013|Configuration Manager (SCCM), Security|11 Comments

Solution for The certificate specified in the registry at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Operations Manager\3.0\Machine Settings cannot be used for authentication. The error is The credentials supplied to the package were not recognized(0x8009030D)

  Certificates. Fairly easy to setup if you do it from scratch, but if something fails at some point, it can be a little tricky to troubleshoot. Today, I had one of the moments. At a customer we had a running OpsMgr environment with three gateway servers in the DMZ and some agents also in the DMZ, everything running smooth for a couple of months. Now, all of a sudden, no gateway servers could authenticate. We had changed nothing, we could telnet, the certificates weren’t expired etc. Weird!   On the management server I then noticed this error: Source: OpsMgr [...]

By |2013-02-19T12:25:53+01:00February 19th, 2013|Operations Manager (SCOM)|4 Comments

Working with regular expressions and ip addresses in OpsMgr 2012

Today, one of my costumers asked me to create some groups and Live Maps views containing network devices with a specific ip address range. Now, im a big fan of the “work smarter, not harder” principle, so I wanted the groups and views to be dynamic using regular expressions. I’ve worked with regular expressions before, which is fairly manageable with a table of the meta characters on your hand. However, I find ip addresses a lot more tricky, which is why I’m posting different solutions. Before advancing, I would like to introduce you to a dear friend of mine: [...]

By |2013-02-12T17:16:48+01:00February 12th, 2013|Operations Manager (SCOM)|7 Comments

WSUS 6.x Admin Console Post-deployment Configuration fails on Windows Server 2012

When you want to just install an Admin Console instance of WSUS on the new Windows Server 2012, it has shown to be a little troublesome at times. In the old WSUS 3.0 days it was easier because it was an executable you installed, and in the installation you was asked to choose whether you wanted a Admin Console installation or a Full WSUS Server installation. Now on Windows Server 2012 its a role with some features you either check or uncheck. This WSUS role services setup will install just the Admin Console, if you want a Full WSUS server [...]

By |2013-02-11T13:19:03+01:00February 11th, 2013|Configuration Manager (SCCM), Windows Server|5 Comments

Migrate reports from SCCM 2007 to SCCM 2012 SP1

The built-in migration wizard in ConfigMgr 2012 can migrate most objects but not reports. In ConfigMgr 2012 classical ASP reports (as we know them from earlier versions) are no longer supported. Migrate the classical reports to SQL Reporting Services in SCCM 2007 Below is a walk thru of how you migrate your existing classical reports to SQL reporting Services in SCCM 2007. Notice that you will still be able to run all classical reports after the migration. On you SCCM 2007 site server install either SCCM 2007 R2 or SCCM 2007 R3, both will add SQL Reporting Services support for [...]

By |2013-02-09T09:42:03+01:00February 9th, 2013|Configuration Manager (SCCM), General info|12 Comments

Operations Manager 2012 Maintenance Mode

  ”How can I schedule maintenance mode in SCOM 2012?” “How can I put a server in maintenance mode without using the Operations Console?” These are fairly common questions from my costumers. A lot of tools was developed to Operations Manager 2007, but not for 2012, hence this blog. Tool: SCOM Remote Maintenance Mode Scheduler 2.0 by Tim McFadden I can’t take any credit for this one, as it was developed by Tim McFadden, but it is the best (only) scheduler I can find. Furthermore, it has an UI, which makes it far easier to put servers or group in [...]

By |2017-08-22T13:06:40+01:00February 7th, 2013|Operations Manager (SCOM)|9 Comments

SCO 2012: Videos from NIC 2013 is online!

  System Center Orchestrator 2012 – Self service with Service manager The future is self-service! You see it everywhere, but now it has arrived for IT. In this session Jakob will show you how to utilize the new Self-service portal in Service Manager 2012, combined with System Center Orchestrator 2012 to make a fully automated environment with a great user interface, in a simple way!   (sorry embedding was not allowed) System Center Orchestrator 2012 – Runbook Design for Service manager In this session we will dive into tips and tricks in designing production runbooks for Service Manager. Learn [...]

By |2013-02-06T15:10:01+01:00February 6th, 2013|Automation|0 Comments

LEAP Motion Controller Add-ins for Microsoft Office 2010/2013 (C#)

I have been so lucky to be accepted for the LEAP Motion Developer program. LEAP Motion is a new Kinect-like controller, which will be cheap and much more precise than anything seen before. My first project is a controller project for Office. Supported so far: Visio - Swipe Pages (for live dashboards etc.) PowerPoint - For Previous/Next Slide in presentation Excel - Change Sheet. Scroll + Scroll Pages Word - Change Page More info on the codeplex site, which is btw also my first published codeplex project. Feel free to comment or join the project!

By |2013-02-05T20:19:26+01:00February 5th, 2013|Scripting & Development|1 Comment

Slides and notes from my Advanced Infrastructure session @NIC 2013

A huge thanks to all NIC 2013 attendes, once again you proved that Norway is a perfect place to host the Nordic Infrastructure Conference. Two great days where I also had the pleasure of attending sessions hosted by some A-Class speakers. As promised here is my slide deck from my Friday afternoon session on dvanced infrastucture. Key take-away from the session is “ways to max the performance in your ConfigMgr infrastructure and plan for redundancy”. Step-by-step guide on Creating Management Point database replicas Great blog post from Brian Mason on Management Points and database replicas Must see SCCM Guru video [...]

By |2013-02-04T14:23:18+01:00February 4th, 2013|Configuration Manager (SCCM), General info|3 Comments