Part 1: Uninstall Java (or any other software) with ConfigMgr Compliance Baselines

Compliance Items and Compliance Baselines in ConfigMgr is so powerful! And with some PowerShell magic you can almost use it to do anything you like on a Windows based computer – Only your imagination that will be the showstopper! Here I will show how you can uninstall software using WMI and Compliance Items in SCCM. However, it is important that you read the following articles as the uninstallation process uses win32_product WMI class which is known for its evilness. Thanks to Kaido, Jürg and Torsten for pointing this one out. A updated post as been created using a better and more [...]

Troubleshooting: An error occurred when creating the WSUS Signing Certificate (Secunia)

Lately I have been doing some Secunia integrations with System Center 2012 R2: Configuration Manager (SCCM/ConfigMgr 2012). When you are setting up the connector between Secunia CSI and WSUS one of the first things the wizard is asking you to do is to Configure a WSUS Self-Signed Certificate, the WSUS signing certificate is required to create and install local packages. Without it, only packages from Microsoft Update will be installed. How-ever this time I got this error when trying to 'Automatically create and install certificate'  during the Connector Wizard: An error occurred when creating the WSUS Signing Certificate Now this [...]

By |2015-10-20T20:14:46+01:00oktober 20th, 2015|Configuration Manager (SCCM), Security|1 Kommentar

How to: Create custom SQL- based Reports in System Center 2012 R2: Configuration Manager

A customer asked me  for a “how-to” on how to Create reports in SCCM 2012, so why not share with everyone. This post is not intended to show how to write or design queries, but show you have to create  a report based on a SQL query you might already have. Even-though we are skipping how to write SQL Queries for know, this post is still going to be a bit long. Time for that cup of coffee! First some requirements: You need to have an SQL Server instance for SCCM with SQL Reporting Services running You need to have [...]

Windows Phone 8.1 devices keep prompting for sign in to the Company Portal

I have been working on another mobility project the last couple of months. this project started as a hybrid SCCM/Intune project using “old” SCC 2012 R2 platform, a couple of weeks ago we migrated the platform to the latest service pack in order to get all of the new hybrid mobile features in place. The project have support for Android, iOS and Windows phones 8.1 devices. In the beginning the company portal was deployed to the Windows Phones using the Windows Phone trial certificate (not supported, but it works). That part worked as expected for many months, but using the [...]

By |2015-07-01T10:47:13+01:00juli 1st, 2015|Configuration Manager (SCCM), Enterprise Mobility Suite (EMS), General info|Kommentarer lukket til Windows Phone 8.1 devices keep prompting for sign in to the Company Portal

House of Cards–The ConfigMgr Software Update Point and WSUS

A Card house; fun to build but not very solid and when one card falls the whole house often goes down with it. It’s a little like that with the WSUS server and Configuration Manager. Installing WSUS seems so easy but there are still some moving part, and if you get one of the wrong maybe the whole House of Cards falls. Recently I have seen that happen at several customers. This blog post is divided into 3 parts: 1. Introduction 2. Problem overview and symptoms 3. Solutions to fix issues and avoid it in the future Let’s start by [...]

By |2014-09-10T14:38:25+01:00september 10th, 2014|Configuration Manager (SCCM), General info|50 Comments

3rd party updates & Compliance using Secunia and System Center 2012 ConfigMgr

This is the 3rd and final post in my series of Secunia CSI and System Center 2012 Configuration Manager integration. Part 1 focused on installing and configuring, Part 2 focused on deploying and installing 3rd party software updates. This blog post will introduce you to the monitoring options in the product. You can monitor compliance in either ConfigMgr or in Secunia CSI. The difference between the two is ConfigMgr will only show you compliance about the updates you have published to WSUS where CSI will list compliance for all applications found on the systems. Tracking compliance in CSI In CSI [...]

By |2014-09-05T14:33:47+01:00september 5th, 2014|Configuration Manager (SCCM)|Kommentarer lukket til 3rd party updates & Compliance using Secunia and System Center 2012 ConfigMgr

ConfigMgr 2012 Evaluation version expired

So what actually happens when an evaluation version expires? You will notice a few things, like the ConfigMgr administrator console very clearly tells you it expired. As you can see from above you will still be able to open the console but only with Read permisions. Trying to perform actions via PowerShell will give you an error saying that you don’t have the proper permissions: Looking in the SMS provider log file (smsprov.log) you will also see errors indicating the lack of permissions. You will also notice that both the SMS Executive Service and Site Component Manager service is not [...]

By |2014-09-01T13:44:46+01:00september 1st, 2014|Configuration Manager (SCCM), General info|3 Comments

ConfigMgr 2012 R2 and Windows Azure Cloud Distribution Point

  In order to use a Windows Azure distribution point, you need a few things like a Windows Azure account, Access to internal DNS, a couple of certifcates and 45 minutes. The Azure distribution point can act as a fallback distribution point for your Windows clients and do support most content type. To calculate the cost for each Azure distribution point, checkout this Azure calculator What a Cloud-Based Distribution Point do not support ·Apple MAC OS X clients UNIX clients 3rd party Software updates thru the Windows Update feature Windows Updates Streamed Applications Task Sequences that are NOT configured [...]

By |2014-03-21T17:30:18+01:00marts 21st, 2014|Configuration Manager (SCCM), General info|4 Comments

Dealing with reboot pending clients in Configuration Manager 2012

Guess most of you are struggling with troubleshooting software update compliance and installing applications in Configuration Manager 2012. What I have found, is that clients in a reboot pending state often is the root cause to the problems. In previous posts I have described how you can use tools like Coretech Shutdown Utility to automatically restart computers that has been in a reboot pending state for X number of hours/days.  The information about the reboot pending state is stored in WMI Root\ccm\ClientSDK namespace as illustrated here with the Coretech WMI & PowerShell explorer: Identify reboot state using PowerShell Launch PowerShell [...]

By |2014-01-19T17:14:28+01:00januar 19th, 2014|Configuration Manager (SCCM), General info|19 Comments

NIC 2014 – Deck and links from my ConfigMgr Community session

Once again, to all who has ever contributed to the community – We salute you – keep on working and know that you are making a difference for 1000’s of IT pros “out there”. Download deck Just some of the community tools: Infrastructure and Client Management Johan Arwidmark ConfigMgr R2 Hydration Kit - Mikael Nyström System center Hydration Kit - Startup Script - Right Click tools - Right click took - Client Center - David’s Inventory Script PowerShell - Garth’s Inventory Script vbSript - CM12Healthcheck toolkit - ConfigMgr 2012 Registration Request - [...]

Coretech Application E-Mail Approval Tool

A little over a year ago we released the first version of our Application E-mail approval utility. Ever since our first release we have received lots of positive feedback and ideas to new features. Most of the ideas are implemented in this new release. Thanks for all the feedback and please keep it coming. This blog post will explain how you can install CTAA (Coretech Application Approval tool) – Download Additional blog posts will follow and explain how you can customize the tool. Why the need for this utility The idea with this utility is to integrate a “real approval [...]

By |2017-09-13T11:42:26+01:00oktober 11th, 2013|Configuration Manager (SCCM), General info, Tools|168 Comments

The Coretech Software Update Management Tool

As demonstrated @TechEd in Australia and New Zealand our latest free tool is the Software Update Management Tool. The sole purpose of the tool is to automate the creation of software update deployments. The benefits of using the tool are: All deployments will be using the same naming standard. the naming standard is WRK/SRV + Year + Value of Month WRK 2013 09. The names are automatically generated using the actual month. You save time by automating the process. You eliminate errors by automating the process. All deployments are created as disabled deployments. This gives you complete control over the [...]

By |2013-09-20T13:45:06+01:00september 20th, 2013|Configuration Manager (SCCM)|30 Comments

Coretech WMI & PowerShell Explorer–Using the WMI feature

Earlier today Coretech released a brand new tool that we call Coretech WMI and PowerShell Explorer. For information about downloading and installing the tool checkout this blog post from Kaido Järvemets.  The tool has two main features, a WMI and a PowerShell explorer. This blog post will explain how you can use the WMI feature. Working with Coretech WMI and PowerShell Explorer Connect to the local computer Root\Cimv2 Namespace Launch the Coretech WMI and PowerShell Explorer as Administrator. From the upper left corner, expand the Menu and click Connect. In the Connect dialog box, type the Namespace or use the [...]

SCCM 2012 PowerShell Class coming in the Fall

Summer is finally here, and what better to spend the Summer than developing a brand new System Center 2012 Configuration Manager PowerShell class. We (Kaido Jävemets & Kent Agerlund) are currently busy writing lots of labs and examples that will help you unleash the power of PowerShell. Why a PowerShell class you might ask? Well, because PowerShell is King and we love it The class will be running at a training center near you – and if not, please contact us. The agenda for the 3 day lab look like this: Mastering SCCM 2012 R2 with PowerShell Title: Mastering Configuration [...]

By |2013-06-15T12:32:24+01:00juni 15th, 2013|Configuration Manager (SCCM)|1 Kommentar

Where are my Software Update state messages

My experienced ConfigMgr 2007 administratos are wondering how it can be that Software Update compliance reports are not showing states like “Waiting for Maintenance Windows” but only Enforcement State unknown or Compliant. The answer to that question can be found in the State Message detail settings for the software update deployment. By default only Error and success messages are reported. Example 1 – using the default software update state details settings:   Example 2 – Software Update deployment configured to send all state messages :   Controlling the state message detail level The correct way to configure the state message [...]

Error when running Application reports in ConfigMgr 2012

During the SQL Reporting Services site system role, SCCM automatically create a login in SQL and assign the required permissions to the account that you have specified. However I have seen several times that the account do not have the permissions required to run some of the Application reports.   When running the Software Distribution - Application Monitoring > All application deployments (advanced) report I get the following error An error has occurred during report processing. (rsProcessingAborted) Query execution failed for dataset 'FirstMatchingAppOrCollection'. (rsErrorExecutingCommand) The EXECUTE permission was denied on the object 'fnGetSiteNumber', database 'CM_PS1', schema 'dbo'. To solve the [...]

System Center 2012 ConfigMgr Advanced infrastructure session notes

Here are the promised links to our demos from the advanced infrastructure session @MMS 2013 in Las Vegas. View the session on channel 9 and download slides: Working with Management Point and SQL replicas: Step-bystep guide to create a Management Point replica: Video on setting up a Management point replica:  Working with Software Updates: Software Updates: Installing Workgroup clients: Orchestrator runbook by Andreas Falck to install Workgroup clients with PKI Distribution Points and WAN: Coretech Distribution Point Utilization Monitor: Brian Mason on twitter: @AbetterPC Brian Mason blog: Kent Agerlund on twitter: @Agerlund

By |2013-04-17T13:58:43+01:00april 17th, 2013|Configuration Manager (SCCM)|7 Comments

Coretech Distribution Point Utilization Monitor

Ever wanted to see how much content is being downloaded by each ConfigMgr. client and from where? Then look no further, the Coretech Distribution Point utilization monitor will give you the answers. The tool has a server portion with a database and a client that you install on all distribution points. Once a day the client (agent on the Distribution Point) will collect information from the IIS log files, convert the files to a CSV format and copy them to the server. The server uses a scheduled task in Windows to import all data into the database. Once in the [...]

By |2013-04-16T23:45:42+01:00april 16th, 2013|Configuration Manager (SCCM), General info|31 Comments

Working with database replicas on your Management Point

Wonder why you should consider database replicas on your Management Points? The answers are in this webcast from Brian Mason (fellow Configuration Manager MVP from Minnesota.) The keywords are fault tolerance and performance and who do not want that as part of their Configuration Manager infrastructure. Download the MP replica step-by-step guide Huge thanks to Brian Mason for helping out with the document and for convincing me to use this feature.

By |2013-01-20T21:01:58+01:00januar 20th, 2013|Configuration Manager (SCCM)|5 Comments

First look at the Secunia CSI integration with Configuration Manager 2012

A few years ago I wrote a blog posts on Microsoft SCUP and Secunia CSI 5.0. Back then my conclusion was that Secunia had a superb security database but required a custom agent and didn’t have an easy Configuration Manager Console integration. With the latest release of Secunia CSI those “obstacles” are removed and the solution looks very promising. In this, my first test drive of the product, I will see how quickly I can install the solution and start patching my environment. The installation CSI requires that you first install the CSI administrator console and then the CSI SCCM [...]

By |2012-11-30T11:27:18+01:00november 30th, 2012|Configuration Manager (SCCM), General info, Security|2 Comments

Mastering SCCM 2012 SP1 training

System Center 2012 SP1 just released, and it’s not a minor release. I have been working with SMS since 1996 and I haven’t seen anything like this in the past. If you need training on Configuration Manager 2012 I highly recommend that you attend the correct class and it must be a class where the material is based on the latest Service Pack. There a huge changes in Service Pack 1 and we will make sure that you learn about all of them. Our Mastering Configuration Manager 2012 class has been running with great success since May 2011 and is [...]

By |2012-10-04T12:50:04+01:00oktober 4th, 2012|Configuration Manager (SCCM), Training|2 Comments