31 ene 2013

SCCM by Davis: “Demystifying AppContainers in Windows 8” plus 19 more

SCCM by Davis: “Demystifying AppContainers in Windows 8” plus 19 more

Link to SCCM by Davis

Demystifying AppContainers in Windows 8

Posted: 30 Jan 2013 11:04 PM PST

The introduction of Modern UI apps in Windows 8 has added a whole new layer of security in the operating system. Modern UI apps can be installed by standard users. In order to keep the system secure with all this added functionality, Microsoft created a sandbox architecture that is primarily used for Modern UI apps. Modern UI Apps live in an AppContainer. The AppContainer defines the sandbox and the identity of the App.

Microsoft published very little information about AppContainers. One of the most detailed articles on the Microsoft site is a blog on Enhanced Protected Mode in Internet Explorer by Eric Law [ex-MSFT]. The article was written in the Windows 8 Release Preview time frame and partly contains outdated information about IE10.

Continue reading: Demystifying AppContainers in Windows 8 (Part I)

Google extends EAS support for GMail until July 31, 2013

Posted: 30 Jan 2013 10:42 PM PST

In a blog post Microsoft revealed some good new for Windows Phone users with a GMail account. Google is extending the support for Exchange Active Sync (EAS) on GMail until July 31, giving Microsoft some more time to build CalDAV and CardDAV support in Windows Phone.

Source: Windows Phone Blog

Windows Phone 7.5 is officially updating to 7.8

Posted: 30 Jan 2013 10:32 PM PST

According to various sources, Microsoft started the official rollout of Windows Phone 7.8 through Zune. The  update will be available in 4 waves over the next 3 weeks. Windows Phone 7.8 is available for all phones running on Mango (Windows Phone 7.5).

SCCM DCM What is it?

Posted: 07 Dec 2012 05:47 AM PST

What is Desired Configuration Management (DCM)?

DCM is a feature in SCCM that will provide a framework for assisting organizations in both defining and enforcing corporate policies and standards for system configurations, whether related to the operating system or an application installed on the system.

Feature include authoring and scheduling, model-based design leveraging Service Modeling Language (SML) (a component of Microsoft's Dynamic Systems Initiative) which makes the features we're about to discuss possible.

Some of the key scenarios that drove the features Microsoft delivered in the final release of DCM include:

Regulatory Compliance - demonstrating regulatory compliance in system configurations. Not only deploying a compliant standard system configuration, but being able to periodically prove adherence to these policies.

Pre and post change configuration – Verify that no unplanned changes took place during the implementation of a planned change.

Monitoring for "drift" – Verify that new systems are built in accordance to the planned role in your infrastructure, and monitoring for human error and misconfiguration in day-to-day administration. Ensuring corporate policies are implemented in base machine builds and maintained over time.

Streamline Support – Incorporating DCM reporting into the troubleshooting process to drive down time to resolution and overall support costs.

The bottom line – DCM monitors your systems actual configuration against a "desired configuration" model and identifies policies that have drifted outside this policy.

DCM Components

3 key concepts: Configuration Items, Configuration Baselines, and Configuration Packs.

The smallest unit of measure in the DCM model is the Configuration Item (CI). Configuration Items represent a desired object or setting or value on a client or within an application. Configuration items can include registry values, objects on the file system (files, folders) and attributes (firewall settings, NTFS permissions), as well data retrieved via scripts. The Configuration Items fall into one of the following categories:

Application CI – Settings within an application like MS Word, Exchange, or SQL Server.

OS CI – Representing a specific operating system object or setting.

General CI – General settings related to corporate policies like corporate security policy, Sarbanes-Oxley, etc.

These configuration items are reusable, and can be grouped into multiple, logical collections of settings known as a Configuration Baselines, which represent your base unit of management in DCM. Within the configuration baseline, you can define mandatory, optional and prohibited configuration items.?

Configuration Baselines will generally be constructed to map to machine roles (a type or class of system), such as Domain Controller, Exchange 2003 Server, SQL Database Server. Creating all the configuration items for configuration baseline for something like Exchange is time consuming and the use of Configuration Packs comes in. Configuration Packs are pre-defined configuration baselines (templates so to speak) created by Microsoft and 3rd parties representing best practice configuration for common OS and server applications. Configuration packs are designed to be used as a starting point for your own corporate baseline, and then modified to meet your organizations requirements.

Configuration packs templates are best served using the Solution Accelerator Microsoft Security Compliance Manager

Apendix: systemcentercentral.com

PXE Cache Issues

Posted: 06 Dec 2012 07:44 AM PST

I search massive amount of forums when I am looking for solutions for complex issues. This was an article I found (and referenced it at the bottom) that will a PXE cache issue. I was on a project where the SCCM server was setup but there was no documentation on the state of the server.

<<< >>>

Config Mgr OS deployments when using PXE boot , you've probably had machines that did not want to boot the task sequence as it stated "No task sequence found, booting onto the hard drive".

This is most likely due to a previous task sequence being advertised to that machine. By default ConfigMgr will cache the PXE advertisement for 60 minutes (Default setting) and then it will expire. Most of the time you can speed up things when restarting the WDS services. Restarting the WDS services ( clearing the cache) isn't the best solution. In ConfigMgr SP2 the cache expiry can be set in the registry.

  • On an x86 machine the located under:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\PXE
  • On an x64 machine the registry key is under:
    HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\SMS\PXE

Create a new DWORD value CacheExpire, and set the desired value in seconds. For example, if you prefer the cache expired in 2 minutes, set the value to 120. If the value is set to 0, then the default 60 minutes value is used.

Note: Setting the value in CacheExpire is only supported in ConfigMgr 2007 SP2.

Be careful if you have R2 installed and unknown computer support enabled because if you set the cache expire value too low and you are using a mandatory task sequence your machine will continuously start the same task sequence every time it reboots.

Reference: http://scug.be/blogs/sccm/archive/2010/11/16/configmgr-2007-pxe-cache-behavior.aspx

Erik Dixon became a registered member

Posted: 30 Jan 2013 04:52 PM PST

Comments: 0

SonicWALL SRA 4600 Delivers Secure Network Access for Remote Workers

Posted: 30 Jan 2013 01:45 PM PST

REVIEW: Dell's SonicWALL SRA 4600 combines remote access, SSL VPN, application firewall and desktop support in a svelte 1U rack mount appliance that can handle up to 500 remote users.

Jignesh Solanki commented on the post, ConfigMgr 2012 Right Click Tools

Posted: 30 Jan 2013 02:53 PM PST

Does this one work with SCCM 2007? I have 1 problem when advertisement has subcollection checked, ReRun advertisement on collection does not show the advertisement in the Subcollection.

Comments: 0

Jignesh Solanki became a registered member

Posted: 30 Jan 2013 02:47 PM PST

Comments: 0

Marcel Hager joined the group System Center Service Manager

Posted: 30 Jan 2013 01:13 PM PST

Comments: 0

Jerry Potter became a registered member

Posted: 30 Jan 2013 11:21 AM PST

Comments: 0

Cisco Unifies Wired, Wireless Networks With Switch, WLAN Controller

Posted: 30 Jan 2013 09:40 AM PST

Cisco unveils key additions to its Unified Access initiative, including a new Catalyst switch and WLAN controller that is based on a new ASIC.

Enhansoft wrote a new post, Wanted: More Monitor Information Reporting – MIR Version 4 Beta Testers

Posted: 30 Jan 2013 09:24 AM PST

ThumbnailWe are rolling out a new version of Monitor Information Reporting – MIR and we're looking for beta testers.

Curious about how MIR works? Visit our website to read MORE about MIR Version 4 and how to download it […]

Comments: 0

Chris Nackers wrote a new post, Deployment Image Servicing Management (DISM) – Removing An Injected Update From The Image

Posted: 30 Jan 2013 08:04 AM PST

ThumbnailPosted in GeneralWAIK!-- Start Shareaholic LikeButtonSetTop Automatic --!-- End Shareaholic LikeButtonSetTop Automatic --The following commands are used to identify and remove an update that has been injected into […]

Comments: 0

Chris Nackers wrote a new post, Deployment Image Servicing Management (DISM) – Removing An Injected Update From The Image

Posted: 30 Jan 2013 08:04 AM PST

ThumbnailPosted in GeneralWAIK!-- Start Shareaholic LikeButtonSetTop Automatic --!-- End Shareaholic LikeButtonSetTop Automatic --The following commands are used to identify and remove an update that has been injected into […]

Comments: 0

Jesse Garcia commented on the post, Lessons Learned with Configuration Manager 2012 Cross-Forest, Internet-Based Client Management Configuration

Posted: 30 Jan 2013 07:45 AM PST

Nice work!

Comments: 0

Polycom Expands UC Capabilities With Sentri Acquisition

Posted: 30 Jan 2013 08:00 AM PST

In addition to Microsoft unified communications expertise, Sentri has expertise in other areas, including networking, VOIP and security.

bharath became a registered member

Posted: 30 Jan 2013 07:15 AM PST

Comments: 0

Rosen D became a registered member

Posted: 30 Jan 2013 07:10 AM PST

Comments: 0

Dana Daugherty wrote a new post, Software Licensing: Tips for Avoiding Noncompliance with Microsoft Products

Posted: 30 Jan 2013 06:46 AM PST

I believe the vast majority of organizations honestly try to avoid over using software license. Even so, the nature of software licensing actually facilitates mistakes causing noncompliance. This post lists some […]

Comments: 0

30 ene 2013

SCCM by Davis: “Peter Daalmans wrote a new post, My top 10 new features of ConfigMgr 2012 SP1 – part 6” plus 19 more

SCCM by Davis: “Peter Daalmans wrote a new post, My top 10 new features of ConfigMgr 2012 SP1 – part 6” plus 19 more

Link to SCCM by Davis

Peter Daalmans wrote a new post, My top 10 new features of ConfigMgr 2012 SP1 – part 6

Posted: 30 Jan 2013 01:26 AM PST

ThumbnailIn my series about my favorite new or renewed features in Configuration Manager 2012 SP1 I would like to dedicate this blog to the Apple Mac OS X support. As from Service Pack 1 Configuration Manager supports Mac […]

Comments: 0

Muhammad Masood became a registered member

Posted: 29 Jan 2013 11:03 PM PST

Comments: 0

Efim became a registered member

Posted: 29 Jan 2013 10:09 PM PST

Comments: 0

Cisco is Buying Network Security Vendor Cognitive

Posted: 29 Jan 2013 07:00 PM PST

The move is the latest by the networking giant as it looks to build its capabilities in such areas as networking, mobility, video and the cloud.

Brad Johnson commented on the post, ConfigMgr 2012 Right Click Tools

Posted: 29 Jan 2013 05:47 PM PST

that's awesome!
works heaps better
I was looking at modifying the script myself to put the bypass and unblock parts, but couldn't sort it perfectly :-)

Comments: 0

Rod Trent posted an update in the group System Center Configuration Manager 2012: Announcement: Service Pack 1 Media Updates - System Center […]

Posted: 29 Jan 2013 05:37 PM PST

Alexander Larkin joined the group Orchestrator Runbooks Community Repository

Posted: 29 Jan 2013 05:15 PM PST

Comments: 0

Jeff Stokes commented on the post, ConfigMgr 2012 Right Click Tools

Posted: 29 Jan 2013 05:08 PM PST

John I had the same problem on 2012. My install was on the D drive so I pointed the install to that dir but it didn't work. I'm not sure if it had any impact, but I did the reg permission tweeks, unblocked […]

Comments: 0

Ryan Ephgrave commented on the post, ConfigMgr 2012 Right Click Tools

Posted: 29 Jan 2013 04:45 PM PST

I created a CodePlex project to track changes I'm making. I just updated the Right Click Tools there to include a better vbs scrip to launch the powershell files through SCCM. It's the same set of tools as here, […]

Comments: 0

John Piwowarczyk commented on the post, ConfigMgr 2012 Right Click Tools

Posted: 29 Jan 2013 04:17 PM PST

Kevin, that worked. Thanks. Still looking for a CM12 right click tool set that can connect to the Admin, WBEM shares. Any idea on which ones can do that? thanks

Comments: 0

John Piwowarczyk joined the group SCCM Right-click tools

Posted: 29 Jan 2013 04:11 PM PST

Comments: 0

Kevin Wehnau commented on the post, ConfigMgr 2012 Right Click Tools

Posted: 29 Jan 2013 03:59 PM PST

I had the same issue, I had to go in and use the unblock-file cmdlet (or right click properties) on each file in the directory. Then everything starting running great.

Comments: 0

Patrics Bolouvi became a registered member

Posted: 29 Jan 2013 03:49 PM PST

Comments: 0

Raphael Perez wrote a new post, 3rd Party patch management - Part 5

Posted: 29 Jan 2013 03:45 PM PST

ThumbnailHi All,

this is the part 5 where we will see how to install a remote console and integrate with SCCM 2012 SP1. I'll be using the SCCM Site Server itself instead of a remote SCCM Console.

the 1st step, […]

Comments: 0

Rod Trent posted an update in the group Microsoft Management Summit: Helping you help yourself to MMS 2013: a form letter for your manager

Posted: 29 Jan 2013 03:10 PM PST

Rod Trent wrote a new post, Helping you help yourself to MMS 2013: a form letter for your manager

Posted: 29 Jan 2013 03:07 PM PST

With the deadline for Early Bird savings for MMS 2013 looming, some of you are getting anxious, waiting to hear approval from your manager.  With only two days left, now is the time to send a kind reminder.

To […]

Comments: 0

Rod Trent posted an update in the group System Center Configuration Manager 2012: MacWindows: Parallels integrates Macs with Microsoft SCCM, […]

Posted: 29 Jan 2013 02:45 PM PST

Rod Trent posted an update in the group System Center Configuration Manager 2012: How to configure ConfigMgr Distribution Point

Posted: 29 Jan 2013 02:44 PM PST

Brad Johnson commented on the post, ConfigMgr 2012 Right Click Tools

Posted: 29 Jan 2013 02:42 PM PST

I am experiencing same problems.
I can run powershell, set unrestricted, and then load the scripts fine,
however when accessing through SCCM the commands don't load anything, seems it cannot open powershell?

Comments: 0

Rod Trent posted an update in the group System Center Configuration Manager 2012: Support Tip: ConfigMgr clients fail to register and generate […]

Posted: 29 Jan 2013 02:21 PM PST

SCCM by Davis