ConfigMgr 2012 Evaluation version expired

So what actually happens when an evaluation version expires? You will notice a few things, like the ConfigMgr administrator console very clearly tells you it expired. As you can see from above you will still be able to open the console but only with Read permisions. Trying to perform actions via PowerShell will give you an error saying that you don’t have the proper permissions: Looking in the SMS provider log file (smsprov.log) you will also see errors indicating the lack of permissions. You will also notice that both the SMS Executive Service and Site Component Manager service is not [...]

By |2014-09-01T13:44:46+01:00september 1st, 2014|Configuration Manager (SCCM), General info|3 Comments

Managing 3rd. party Software Updates with System Center 2012 ConfigMgr & Secunia CSI Part II

In Part I focused on installing and configuring Secunia CSI 7 and System Center 2012 R2 ConfigMgr. In this part I will explain how you can deploy software updates. I do anticipate that you already have a working Software Update Management infrastructure managed by System Center 2012 R2 ConfigMgr. Deploying 3rd party software updates The process of deploying 3rd party software updates can be initiated from the CSI web portal or using the System Center 2012 R2 ConfigMgr plugin. In my world updates are divided into two categories: Applications managed and supported by the organization. In this category I often [...]

By |2014-08-27T11:51:02+01:00august 27th, 2014|Configuration Manager (SCCM), General info|1 Kommentar

Follow up questions from my 3rd party software update webinar

As promised here are the follow up questions we didn’t time to cover during the 60 min webinar - https://www.brighttalk.com/webcast/8113/116381 Q & A from the webinar Q1 When you have applied an update for Flash e.g., how do you repair that version if the application gets broken? Repair so it reverts back to "old" version or can the updated version be repaired?A1 Traditionally you are deploying the applications from ConfigMgr and the updates thru CSI. Unless you update the application/package in ConfigMgr then you have to install the old version and upgrade it again. Another option is to republish the [...]

By |2014-08-21T16:32:01+01:00august 21st, 2014|Configuration Manager (SCCM)|Kommentarer lukket til Follow up questions from my 3rd party software update webinar

Troubleshooting Workgroup Clients with PKI not talking with MP

I had a ConfigMgr 2012 R2 case going on for a while with Workgroup clients in a DMZ zone that wouldn’t communicate with the Management Point. A PKI infrastructure was in place and running, and the ConfigMgr Client was installing fine on these workgroup clients – but when the time came for the client to start talking with the Management Point i had numerous errors in LocationService.log and ClientIDManagerStartup.log and in a couple of other logs. Errors in the LocationServices.log >> Failed to send request to /ccm_system_AltAuth/request at host MPServerFQDN, error 0x2f8f >> Error sending HEAD request. HTTP code 600, [...]

By |2014-08-21T14:32:47+01:00august 21st, 2014|Configuration Manager (SCCM)|1 Kommentar

Managing 3rd. party Software Updates with System Center 2012 ConfigMgr & Secunia CSI Part I

Question if often get when visiting customers;”Is there really a need for managing our 3rd. party applications when we already patch Adobe Reader and JAVA”? The short answer is Yes, and the longer answer is please look at the numbers. The absolute number of vulnerabilities detected in 2013 was 13,073, discovered in 2,289 products from 539 vendors. The number shows a 45% increase in vulnerabilities in the five year trend, and a 32% increase from 2012 to 2013. Knowing these numbers I get the feeling that only patching Adobe Reader and JAVA is not enough to keep my environment secure. [...]

By |2014-08-21T12:30:07+01:00august 21st, 2014|Configuration Manager (SCCM), General info|Kommentarer lukket til Managing 3rd. party Software Updates with System Center 2012 ConfigMgr & Secunia CSI Part I

Coretech Configuration Manager 2012 R2 PowerShell automation module 0.1

During the TechEd Kent showed one of our solution that allows you to save all the Collections to an Excel file or to create Collections based on Excel template. We have received a lot of emails and twitter tweets that when we are going to publish it and good news is that we will publish it now :) . If you haven't seen the Kent TechEd video, then I recommend to watch it before you use this module. This is not the latest version and it is work in progress release. We will continue to improve this PowerShell module. Here [...]

Working with Security Scopes in Configuration Manager with PowerShell

Last year @MMS Kent showed our automated RBA solution and I just discovered that this does not work in ConfigMgr 2012 R2 CU1 environment. It seems like they have changed the process behind the UI and in ConfigMgr 2012 R2 CU1 environment they are using different IDs to identify the Object. Before they used FolderTypeID value but now they are using SecuredTypeID values. You will need these values, if you are working with SMS_SecuredCategoryMemberShip WMI class and AddMemberShips/RemoveMemberships mehtods FolderTypeID FolderTypeName SecuredTypeID 2 SMS_Package 2 7 SMS_Query 7 9 SMS_MeteredProductRule 9 11 SMS_ConfigurationItem 11 14 SMS_OperatingSystemInstallPackage 14 16 SMS_VhdPackage 16 [...]

Collections not being refreshed in ConfigMgr 2012 R2

Case, old collections do not refresh when adding or removing objects to the collection. New collections are updated, it just takes a long time. Looking in the colleval.log file there was a lot of errors like this: *** exec dbo.sp_TransferMembership 'PS100014', 0    SMS_COLLECTION_EVALUATOR    02-06-2014 23:14:36    7392 (0x1CE0) *** [23000][547][Microsoft][SQL Server Native Client 11.0][SQL Server]The INSERT statement conflicted with the CHECK constraint "ClientOfferStatus_ItemKey_Partition_CK". The conflict occurred in database "CM_PS1", table "dbo.ClientOfferStatus", column 'ItemKey'. : CollectionMembers_ins_upd_del    SMS_COLLECTION_EVALUATOR    02-06-2014 23:14:36    7392 (0x1CE0) CCollectionSource_SQL::RefreshResults - could not execute SQL cmd exec dbo.sp_TransferMembership 'PS100014', 0    SMS_COLLECTION_EVALUATOR    02-06-2014 23:14:36    7392 (0x1CE0) STATMSG: ID=601 SEV=E LEV=M SOURCE="SMS [...]

By |2014-06-03T12:26:49+01:00juni 3rd, 2014|Configuration Manager (SCCM)|7 Comments

Links and notes from the MVP Expert Session @TechED 2014 Houston

One word – Awesome! Attending the MVP Expert session along with 1000 attendees as speaker was nothing short of an awesome experience. For those of you who couldn’t attend session, you can catch the recording here: http://channel9.msdn.com/Events/TechEd/NorthAmerica/2014/PCIT-B410#fbid= The scripts I used The collection/Excel tool [download id="212"]

By |2014-05-13T16:10:07+01:00maj 13th, 2014|Configuration Manager (SCCM), Events|10 Comments

Links and notes from the “ConfigMgr in the Real World” precon @ TechEd NA 2014

First a huge thanks to the 341 attendees showing up at the precon, you all contributed to making this a day to remember for both Johan and I. By now we should have answered all questions that was posted to #TEPRC10 on Tweeter. Precon links from Johans blog: http://www.deploymentresearch.com/Research/tabid/62/EntryId/173/Links-from-ConfigMgr-2012-R2-preconference-at-TechEd-2014-NA.aspx Pre-creating the database using this script Checking the database fragmentation: Use CM_PS1 Go SELECT DB_NAME(database_id) AS [Database Name], OBJECT_NAME(ps.OBJECT_ID) AS [Object Name],     i.name AS [Index Name], ps.index_id, index_type_desc,     avg_fragmentation_in_percent, fragment_count, page_count FROM sys.dm_db_index_physical_stats(DB_ID(),NULL, NULL, NULL ,N'LIMITED') AS ps     INNER JOIN sys.indexes AS i WITH (NOLOCK)     ON ps.[object_id] [...]

By |2014-05-13T15:36:49+01:00maj 13th, 2014|Configuration Manager (SCCM), Events|3 Comments

Dealing with Jailbroken/Roted devices in ConfigMgr 2012 R2 & Intune

As you enroll a mobile device into Intune/ConfigMgr 2012 R2, inventory data will automatically be uploaded to the ConfigMgr database. One of the data being collected is the Jailbroken/rooted condition. In the below example the device is being detected as a jailbroken device. One of the many benefits of using Intune as the MDM solution is the integration with System Center 2012 R2 Configuration Manager. Once data is in the database we can use the entire ConfigMgr engine to manage the device. MDM devices in ConfigMgr can be managed using the Application Model and the Compliance Management feature. Especially the [...]

By |2014-04-10T10:18:04+01:00april 10th, 2014|Configuration Manager (SCCM), General info|Kommentarer lukket til Dealing with Jailbroken/Roted devices in ConfigMgr 2012 R2 & Intune

How to change Configuration Manager Hardware Inventory Schedule Client Setting

Today I tried to modify Hardware Inventory Schedule client setting and it didn't work. First I thought that I did something wrong or the cmdlet is broken. Here is the cmdlet Verbose output Then I thought that, lets disable the HW client setting and then enable the HW client setting with correct schedule and Bingo it worked correctly. #Step 1 $ClientSettingsName = 'HW Settings' Set-CMClientSetting -Name $ClientSettingsName -EnableHardwareInventory $false -Verbose -Debug #Step 2 $CMWeeklySchedule = New-CMSchedule -RecurCount 1 -RecurInterval Hours Set-CMClientSetting -InventorySchedule $CMWeeklySchedule -Name $ClientSettingsName -EnableHardwareInventory $True -Verbose -Debug If you compare the verbose outputs, then you will see the [...]

Export out User Device Affinity Relationship with PowerShell

This script allows to export out specific collection UDA Relationships to a CSV file. Here is the script it self. Run it on your Primary Site Server and then open the CSV file with Excel. <# .Synopsis This script exports out specific collection UDA Relationships .DESCRIPTION .EXAMPLE Export-CMUDARelationships.ps1 -DeviceCollectionName "All Systems" -OutPut C:\Scripts\Reports\UDA.csv -SiteCode PS1 .NOTES Developed by Kaido Järvemets, Coretech A/S Version 1.0 #> Param( [Parameter(Mandatory=$True,HelpMessage="Please Enter ConfigMgr Collection Name",ParameterSetName='CSV')] $DeviceCollectionName, [Parameter(Mandatory=$True,HelpMessage="Please Enter CSV file location",ParameterSetName='CSV')] $OutPut, [Parameter(Mandatory=$True,HelpMessage="Please Enter ConfigMgr site code",ParameterSetName='CSV')] $SiteCode ) $CollectionQuery = Get-CimInstance -Namespace "Root\SMS\Site_$SiteCode" -ClassName "SMS_Collection" -Filter "Name='$DeviceCollectionName' and CollectionType='2'" $ResourcesInCollection = Get-CimInstance -Namespace [...]

The EASY WAY – List objects in specific folder in Configuration Manager 2012 with PowerShell

Last week I saw one blog post how to list specific folder objects and I believe that actually there is much easier way to list the objects in specific folder. First we need to figure out the ContainerNodeID which is the folder unique ID. We have several ways to find out the folder unique ID, for example we can run the ConfigMgr Admin console in developer mode or we can use a WMI tool. There are different WMI tools that you can find from the internet or you can simple use the WBEMTEST tool also which is already built-in in [...]

ConfigMgr 2012 R2 and Windows Azure Cloud Distribution Point

  In order to use a Windows Azure distribution point, you need a few things like a Windows Azure account, Access to internal DNS, a couple of certifcates and 45 minutes. The Azure distribution point can act as a fallback distribution point for your Windows clients and do support most content type. To calculate the cost for each Azure distribution point, checkout this Azure calculator http://www.windowsazure.com/en-us/pricing/calculator/?scenario=full. What a Cloud-Based Distribution Point do not support ·Apple MAC OS X clients UNIX clients 3rd party Software updates thru the Windows Update feature Windows Updates Streamed Applications Task Sequences that are NOT configured [...]

By |2014-03-21T17:30:18+01:00marts 21st, 2014|Configuration Manager (SCCM), General info|4 Comments

How to move objects in Configuration Manager Admin Console with PowerShell

Starting with Configuration Manager 2012 R2 we have a cmdlet called Move-CMObject. This cmdlet allows to move different objects in Admin Console. We still don't have a cmdlet that allows to create ConfigMgr Admin Console folders but if necessary you can use this code to create folders. Here are 6 different examples How to move objects in ConfigMgr Admin Console # Example 1 $CMCollection = Get-CMDeviceCollection -Name "OSD - Windows 8.1" Move-CMObject -FolderPath "PS1:\DeviceCollection\OSD" -InputObject $CMCollection # Example 2 $CollectionID = "PS10036C" Move-CMObject -FolderPath "PS1:\DeviceCollection\OSD" -ObjectId $CollectionID # Example 3 $ConfigurationItem = Get-CMConfigurationItem -Name "Business Hours" Move-CMObject -FolderPath "PS1:\ConfigurationItem\LOB" -InputObject [...]

Installing ConfigMgr R2 2012 client for Mac OSx

Earlier this week Microsoft released a new ConfigMgr R2 2012 Mac OSx client. Althoug it has been possible to enroll Mac OSx 10.9 clients without this new client, I still recommend a client upgrade. How to install the new client Download the new installer from: ConfigMgr 2012 R2 Mac Client Run the ConfigmgrMacClient.msi on a Windows machine. The installer will extract a dmg file in C:\Program Files (x86)\Microsoft\System Center 2012 R2 Configuration Manager For Mac Client. Copy the Macclient.dmg to a Mac OSx client that has an existing ConfigMgr client installed (can be the old SP1 client). Open a Terminal [...]

Create ConfigMgr 2012 R2 Collections with Powershell

I know we have migrations tools and other built-in options when we want to build a new ConfigMgr environment. But Microsoft have given us Powershell, and there are some really cool cmdlets that we can utilize. I’ve had a couple of examples lately where i had to create 100+ collections from scratch – or basicly from just a list of applications… And instead of doing that by hand i would much rather do it with Powershell, and save my poor fingers alot of clicking and typing. Microsoft have a Technet site where all ConfigMgr 2012 R2 cmdlets are listed and [...]

By |2014-02-18T14:07:36+01:00februar 18th, 2014|Configuration Manager (SCCM), Powershell|6 Comments

Simple workflow for Configuration Manager Client installation

Here is a really simple Configuration Manager Client installation PowerShell workflow. This workflow queries all the clients where ClientType property is NULL. You can easily add logging, scheduling etc. workflow Install-CMClient { Param( $SiteCode, $SiteServer ) $Computers = Get-WmiObject -Namespace "Root\SMS\Site_$($SiteCode)" ` -Query "Select Name from SMS_R_System where ClientType is NULL" -PSComputerName $SiteServer Write-Output -Input "Total computers without Configuration Manager Client:$($Computers.Count)" ForEach -parallel ($item in $Computers){ $Path = "\\$($item.Name)\c$" if(Test-Path -Path $Path) { Write-Output -Input "Copying installation files to $($item.Name) TEMP folder" Copy-Item -Path "\\Terminaator\CMClient" -Destination "\\$($item.Name)\c$\TEMP" -Recurse -Force Inlinescript{ Write-Output -Input "Starting CCMSETUP.EXE on $($Using:Item.Name)" Start-Process -FilePath "C:\TEMP\CCMSETUP.EXE" } [...]

Configuration Manager Support Center

Microsoft just released a Configuration Manager Support Center tool in beta on connect.microsoft.com. The Support Center is perfect for troubleshooting clients and collecting client data. There is two tools and some PowerShell cmdlets in the support Center. The data collection tab in the support center, will allow you to collect data from a client (local and remote) and store the information in a zip file. The zip file can be opend in the Support Center Viewer for troubleshooting. A view of the local content on a client from the Content tab Viewing and changing log settings from the Logs tab. [...]

By |2014-02-05T00:07:08+01:00februar 5th, 2014|Configuration Manager (SCCM), General info|2 Comments

Community tools from System Center Universe 2014

These are some of the tools the I used in my demonstraiton @SCU 2014 in houston Remember to hug your community contributers today!!! Infrastructure and Client Management Johan Arwidmark ConfigMgr R2 Hydration Kit - http://www.deploymentresearch.com/Research/tabid/62/EntryId/113/The-Hydration-Kit-for-ConfigMgr-2012-R2-is-available-for-download.aspx Mikael Nyström System center Hydration Kit - http://deploymentbunny.com/2013/01/04/hydration-kit-v3-is-out/ Startup Script -http://blog.configmgrftw.com/?page_id=349 Right Click tools - http://psrightclicktools.codeplex.com/releases/view/104529 Right click took - http://myitforum.com/myitforumwp/2012/09/21/sccm-rctools/ Client Center - https://sccmclictr.codeplex.com/ David’s Inventory Script PowerShell - http://www.david-obrien.net/2014/01/30/update-inventory-script-makes-configmgr-life-easier/ Garth’s Inventory Script vbSript - http://www.enhansoft.com/pages/downloads.aspx CM12Healthcheck toolkit - https://www.rflsystems.co.uk/sccm-2012-r2-healthcheck-toolkit/ ConfigMgr 2012 Registration Request - https://configmgrregistratio.codeplex.com/ PowerShell Right Click tools - https://blog.ctglobalservices.com/kaj/sccm-client-actions-tool-powershell-edition-aka-poshcat/ RegkeyToMof - http://myitforum.com/cs2/files/folders/proddocs/entry152945.aspx Now Micro Right Click tools - Http://nowmicro.com/RCT ConfigMgr 2012 [...]

Coretech HTA

The main idea with this HTA is to assist small and medium sized organizations with an easy way to implement a custom OSD solution without having any developer or HTML skills. The HTA solutions can be used when booting directly into WinPE and to prestage computers. Why; You might ask, Why, do Coretech create this tool instead of using the built-in tools in Configuration Manager or using the UDI wizard in Microsoft Deployment Toolkit?  The answer is straight forward. We often run into customers who do not have the knowledge it takes to build custom solutions or use the UDI [...]

Dealing with Network Printers in Configuration Manager 2012

There are multiple ways how you can add a network printer to a PC and of course you can do that also with Compliance Settings in Configuration Manager. In PowerShell we can use Add-Printer cmdlet and if you don’t have the latest PowerShell version, then you can use Win32_Printer WMI class to add the Printer. If you don’t want to depend on a specific PowerShell version, then maybe the easiest way is to use Win32_Printer WMI Class. Here are the scripts/cmdlets that you can use Discovery Scripts Option 1 Win32_Printer WMI Class query Get-WmiObject -Class Win32_Printer -Filter "Name='\\\\CTTERM\\CTColorPrint01'" | Measure-Object [...]

Auto activate Trusted Platform Module on Fujitsu computers using DeskView and MDT/SCCM

Recently I have been working on a way to auto activate the TPM chip on Fujitsu computers during the Operating System Deployment. Until recently, this has been limited to customers that have purchased DeskView advanced client from Fujitsu. Now, it is possible to work around this issue, and the way I have done it before is to use manage-bde.exe to activate TPM and BiosSet.exe to set a BIOS-password. However, using the manufacture own software to do everything is always considered best practice and with a script it is now possible. First the challenge: When using DeskView to activate TPM you [...]