Creating a JoinDomain account for use with SCCM OSD

Because The join domain account is often visible in your deployment answer file (unattend.xml of sysprep.inf) during the WinPE phase, it is important that this specific account does not have any more permission, than the bare minimum.. I often experience that a domain admin account is used for this job, which is a huge security breach. When i ask why this is, the answer is normally “ we can not find the information on how to create an account with only join domain rights”. So her is a step by step guide on how to create such an account!   [...]

By |2010-09-16T08:51:26+01:00september 16th, 2010|Configuration Manager (SCCM), OS Deployment|14 Comments

Timeout Expired on Report Server

One question I often get from System Center folks is about the SQL Reporting Services and report timeout. Unfortunately Microsoft have an default value on many report dataset which is to low for an production environment. The easy solution would be to edit the RSReportServer.Config XML file, I mean - in this file we have a Tag called SQLCommandTimeoutSeconds and would it be great if we could use this one. But in fact your Report server dosn't use the SQL timeout value specified in this file... Symptoms: If you see the error message: "An error occurred during client rendering" Like [...]

WDS Service stopping after system restart

I had a problem with my PSP (PXE Service Point) on a Windows 2008 R2 box. Every time I restarted the server the service wouldn’t start (Which is not good). The error only happens when I add the PXE Service Point role in the Configuration Manager console, without the role my WDS service is starting like a charm. The errors in the event viewer First error An error occurred while trying to initialize provider SMSPXE loaded from C:\Windows\SysWOW64\CCM\x64\smspxe.dll. If the provider is marked as critical the Windows Deployment Services server will be shutdown. Error Information: 0x4005 Source: WDSPXE Second Error [...]

By |2010-08-20T09:02:32+01:00august 20th, 2010|Configuration Manager (SCCM)|2 Comments

Integrate 3rd. party updates with Configuration Manager and Shavlik SCUPdates Part II

In this post I will explain how you can integrate SCUPdates from Shavlik from A to Z. I’ll focus the post on these topics. Installation of the product Richness of the update catalog Configuration Manager integration Approving Updates Deploying Updates Reporting How to get started Installation of the product SCUPdates requires that you have installed and configured Microsoft System Center Updates Publisher (SCUP). In my test lab I already use SCUP to monitor and deploy updates from different hardware vendors like HP and Dell. For those of you who hasn’t yet played with SCUP I strongly advise you to have [...]

By |2010-08-10T10:30:00+01:00august 10th, 2010|Configuration Manager (SCCM)|3 Comments

Coretech SCCM Manager 1.0.3.1 – Freeware Download

New Version out! 1.0.4! Get it here: https://blog.ctglobalservices.com/?p=2852 Since we found a minor bug in the 1.0.3 version, we have decided to release version 1.0.3.1. This has fixed the bug that cause distribution points that did have “-“ in the name, not to show up in the list of DPs. We are still working on a newer version, but can not give any info about when it will be released, since we don’t know. Changelog / What’s New 1.0.3 -> 1.0.3.1 Fixed bug that caused DP’s that had “-“ in their name, not to show up in the list. 1.0 RC1 [...]

Integrate 3rd. party software update with Configuration Manager 2007 and Secunia Part I

In the following weeks I will blog about the some of the different 3rd. party software update solution we can integrate with Configuration Manager. I will focus my articles on: Installation of the product Richness of the update catalog Configuration Manager integration Approving Updates Deploying Updates Reporting How to get started First I will test drive Secunia, a world-leading provider of Vulnerability Intelligence. Secunia has been around since 2002 and is most known for its award winning product CSI - Corporate Software Inspector. The installation Secunia requires a few components that are all easy to install and configure: The CSI [...]

By |2010-06-23T13:55:59+01:00juni 23rd, 2010|Configuration Manager (SCCM)|Kommentarer lukket til Integrate 3rd. party software update with Configuration Manager 2007 and Secunia Part I

Wauw 220 percent complete

Just downloaded a few HP Bios updates with ConfigMgr 2007 and SCUP 4.5 today. Being an old football player I have often heard from my coach that I should “give 100%”. In my world 100% is pretty much but apparently not when you are downloading HP updates. 220 percent - not bad :-)

By |2010-06-17T12:58:57+01:00juni 17th, 2010|Configuration Manager (SCCM)|Kommentarer lukket til Wauw 220 percent complete

Using TS variables when running a script under a different account.

One of the features available when running a Task Sequence in Config Mgr R2, is to run a command line as a different user, which can comes in handy in a number of scenarios. There is however a small but important thing to be aware of. When using this step to run a script, you will notice that you cannot use any of the “task sequence variables”, as they are not passed through to script. So if you need to use any of the TS variables in your scripts you will have to pass them to the script as arguments [...]

Collection for computers that failed to run an advertisement

Recently I got a question from a student who wanted to have two collections for each software deployment. 1 collection containing computer that ran the advertisement successfully; and 1 collection for those who failed. There can be several ways to solve this puzzle. In my example I look at the status messages coming from the client. In order to use this solution you first need to find the advertisement ID for the deployment. Navigate to the advertisement and make a note of the advertisement ID. In my example the advertisement ID is A0120005 Next create two query based collections and [...]

WMI Inconsistent or Error 25205 Failed to Uninstall SDK MOF

In the past couple of years I have stumbled over this error when I install OpsMgr Clients - It seams like some products are doing naughty things with the WMI database, which then leaves the WMI repository in Inconsistent state. The way I correct this is by using the following recipe: Error when installing OpsMgr Agent: Symptoms: Check Properties on your computer, are there no information in Processor and Memory????? Resolution: 1)      Change to C:\windows\system32\wbem 2)      Run the command: winmgmt /verifyrepository 3)      Check the result: “WMI repository is INCONSISTENT” ? 4)      If so run the command: winmgmt /salvagerepository 5)      Check [...]

Awarded MVP 2010 in Configuration Manager

Wauw, look what the Easter Bunny just mailed me: Dear Kent Agerlund, Congratulations! We are pleased to present you with the 2010 Microsoft® MVP Award! This award is given to exceptional technical community leaders who actively share their high quality, real world expertise with others. We appreciate your outstanding contributions in System Center Configuration Manager technical communities during the past year. The award really makes me proud and I’m honored to become part of the Configuration Manager MVP team. A team of people I really admire and respect for their dedication and knowledge. Spending all this time in the Configuration [...]

By |2010-04-01T19:18:00+01:00april 1st, 2010|Configuration Manager (SCCM), Personal|7 Comments

New version of Johan Arwidmark’s “Pretty Good Frontend” has been released

Johan has just released a new version of his Pretty Good Frontend which is a suburb frontend for your MDT and Configuration Manager image deployment solutions. The frontend is a free download and comes with a complete setup guide. Download the tool and Download the setup guide To Johan; keep up the great work. There is nothing like really cool utilities directly from the “masters”.

By |2010-03-29T20:28:38+01:00marts 29th, 2010|Configuration Manager (SCCM), Tools|1 Kommentar

SQL Reporting Services and antivirus settings

Just installed and configured SQL Reporting Services 2008 with ConfigMgr. 2007 R2 SP2 this morning. Everything went smoothly except for one minor detail; I got an error in my mail subscription: Failure sending mail: The message could not be sent to the SMTP server. The transport error code was 0x800ccc15. The server response was not available After a little investigation it turned out that the McAfee firewall was causing the problem. From the local firewall log file we could see these entries: 3/22/2010 9:57:12 AM Blocked by port blocking rule C:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe Anti-virus Standard Protection:Prevent mass mailing [...]

By |2010-03-22T14:51:52+01:00marts 22nd, 2010|Configuration Manager (SCCM), SQL Server Reporting Services (SSRS)|Kommentarer lukket til SQL Reporting Services and antivirus settings

Shavlik now integrates with ConfigMgr. Software Updates

Most of you already have knowledge about the power of SCUP used together with ConfigMgr. System Center Custom Updates (SCUP) gives you the possibilities to include 3rd. party updates in your normal Configuration Manager software update deployments. One of the downsizes to SCUP is that it requires high level of knowledge about each update you want to distribute. Shavlik now offers ConfigMgr. Customers to subscribe to a very rich catalog of 3rd. party updates. Read more about the solution http://www.shavlik.com/scupdates.aspx and to see full list of updates supported - http://forum.shavlik.com/viewtopic.php?f=67&t=15901

By |2010-03-06T11:09:13+01:00marts 6th, 2010|Configuration Manager (SCCM)|3 Comments

Hide software update notifications

When configuring software updates with ConfigMgr. one of the challenges that I run into the most; is hiding software update notifications from some clients while allowing a full notification on other computers. You can solve this challenge in two different ways. Hide all software update deployments and create a package that will display notifications on some clients Allow software update notifications and create a package that will remove the notification on some clients. Configure the Software Update Client Agent In this example I will allow software updates notifications on the agent.  Then i will create a package that removes the [...]

By |2010-02-19T12:39:01+01:00februar 19th, 2010|Configuration Manager (SCCM)|Kommentarer lukket til Hide software update notifications

Tripple check your software updates this month

As some of you might already be aware of; MS10-015 (KB977165) might cause a BSOD. As far as I have read the problem is not the update itself, but caused by an existing infection on the computer.  For updates on this issue be sure to check - http://blogs.technet.com/msrc/archive/2010/02/11/restart-issues-after-installing-ms10-015.aspx

By |2010-02-15T09:28:56+01:00februar 15th, 2010|Configuration Manager (SCCM)|Kommentarer lukket til Tripple check your software updates this month

Using the archive_reports.sms file to monitor inventory data

As you might know SMS/Configmgr; has some secret files that can change the way agents behave. One of the files is called archive_reports.sms. When you add this file to the inventory temp folder (\system32\ccm\inventory\temp\) it will prevent the inventory xml files from being deleted after they are send to the management point. This can be very useful when you want to track the size of each inventory file. In my screen dump you can see several xml file. I use this feature to spot the change in file size whenever I enable new classes in my sms_def.mof file (AI classes, [...]

By |2010-02-09T18:58:44+01:00februar 9th, 2010|Configuration Manager (SCCM), General info|2 Comments

Distribution Manager – package status is install pending

Its Friday the weekend is coming up and what I don’t want is a day filled errors . On the other hand, errors can be a cool way to start the weekend – if you get them solved! The first 10 minutes at the customer site went according to my plan. I got some coffee and began to distribute a new package. The coffee was black and strong (which is good) but my package never made it to the distribution point (which is not good). The error The status in the console was stuck in Install Pending. I looked at [...]

By |2010-01-29T18:42:56+01:00januar 29th, 2010|Configuration Manager (SCCM)|5 Comments

Software Updates – Waiting for another installation to complete

Looking at the compliance reports I see that most of updates are installing ok but some are constantly saying “Waiting for another installation to complete” The updates won’t install and end-users are constantly getting an error saying the another installation process is already running. It’s not another running process causing the problem, so restarting services won’t help. Information is stored in WMI and most likely is caused by an earlier installation that failed. To fix the problem – two solutions The drastic one – Repair WMI Log on to the client and stop the Windows Management Instrumentation Service – WMI [...]

By |2010-01-17T08:26:55+01:00januar 17th, 2010|Configuration Manager (SCCM)|5 Comments

WEBdav fails on Windows server 2008 R2

Just spend a few hours this morning troubleshooting a new Configuration Manager 2007 SP2 R2 installation.  I started to search the Internet for a solution and didn’t really find any good blog entries. Found a few similar errors posted in the Technet forums and thought I would write a post on the subject. The errors After configuring the Management Point I started to receive these errors: Sitecomp.log: Component [SMS_MP_CONTROL_MANAGER] could not install correctly on server Servername. WebDAV on the Windows Longhorn server is not configured correctly. MPsetup.log <12-30-2009 09:00:07>  WebDAV settings is not setup appropriately <12-30-2009 09:00:07>  [Allow property queries [...]

By |2009-12-30T11:31:10+01:00december 30th, 2009|Configuration Manager (SCCM)|1 Kommentar

Disable Adobe Reader JavaScript

Adobe has just informed about a critical vulnerability in Adobe Reader 9.2 and earlier versions  - which is well… all Adobe Reader versions :-) An update to fix the vulnerability will be released mid January 2010. You can read the bulletin here - http://www.adobe.com/support/security/advisories/apsa09-07.html Disable Adobe Reader JavaScript manually 1. Launch Adobe Reader. 2. Select Edit>Preferences 3. Select the JavaScript Category 4. Uncheck the 'Enable Acrobat JavaScript' option 5. Click OK Disable Adobe Reader JavaScript with a configmgr. package 1. Create bat file with this entry reg add "HKCU\Software\Adobe\Acrobat Reader\9.0\JSPrefs" /v bEnableJS /d 0 /t REG_DWORD /F 2. Copy the [...]

By |2009-12-18T14:56:30+01:00december 18th, 2009|Configuration Manager (SCCM)|1 Kommentar

Coretech nominated to System Center Alliance Partner Program

Coretech has joined the list of Microsoft nominated System Center Alliance Program partners. We are proud to have received the nomination and will continue our effort to develop tailor-made System Center solutions for the fast growing System Center community and our many customers. For more information about the partner program go to http://www.microsoft.com/systemcenter/en/us/alliance-program-overview.aspx

By |2009-12-17T14:23:57+01:00december 17th, 2009|Configuration Manager (SCCM), General info|Kommentarer lukket til Coretech nominated to System Center Alliance Partner Program