SCCM by Davis: “Matt became a registered member” plus 13 more

Matt became a registered member
smile became a registered member
M Rolstone became a registered member
Nick Moseley wrote a new post, Deploying Android Apps with Windows Intune
Nick Moseley wrote a new post, Deploying Android Apps with Windows Intune
Kurt Irvin became a registered member
Packaging Adobe Reader XI
LTI/ZTI Scripting: Add computer to an AD Group
Gus joined the group Orchestrator Runbooks Community Repository
Gus joined the group System Center Orchestrator/Opalis
Gus became a registered member
SCCM by Davis: “Rob Marshall wrote a new post, WMUG - A day with Wally Mead covering ConfigMgr 2012 SP1 and Mobile Device Management” plus 2 more
Valbjorn Julius Thorlaksson became a registered member
Aniruth became a registered member

Matt became a registered member

Posted: 28 May 2013 01:25 AM PDT

Comments: 0

smile became a registered member

Posted: 28 May 2013 12:01 AM PDT

Comments: 0

M Rolstone became a registered member

Posted: 27 May 2013 11:49 PM PDT

Comments: 0

Nick Moseley wrote a new post, Deploying Android Apps with Windows Intune

Posted: 27 May 2013 04:58 PM PDT

Using Windows Intune standalone? You can quickly deploy apps using the following process! This example utilizes an Android emulator being managed through Intune. For more information on how to set that up for […]

Comments: 0

Nick Moseley wrote a new post, Deploying Android Apps with Windows Intune

Posted: 27 May 2013 04:47 PM PDT

Comments: 0

Kurt Irvin became a registered member

Posted: 27 May 2013 04:28 PM PDT

Comments: 0

Packaging Adobe Reader XI

Posted: 19 Apr 2013 09:54 AM PDT

Here are the instructions of how to package up Adobe Reader XI using the Adobe Customization tool free of charge. The purpose of packaging up this application is to selectively disable auto updates and any other annoyances that comes by default with the product.

Here are the steps I took.

1. Download the distributable Adobe Reader XI exe

2. Extract the exe to an empty folder using the following command:

AdbeRdr11000en_US.exe –nos_oc:\adobereader\extracted –nos_ne

Where c:\adobereader\extracted is the location to extract the exe

3. Download and install Adobe Reader XI customization wizard

http://www.adobe.com/support/downloads/detail.jsp?ftpID=5515

4. Open customization wizard and open the extracted AcroRead.msi file for customizing

5. Here are the customizations I made to the product to disable the unwanted features

A. Suppress the EULA

B. Configure some Installation Options

C. Disable icon from being placed on desktop

D. Disabled all online updates and features

F. Deleted the Adobe ARM service installed by defaults that communicates back to Adobe for updates. The service is not listed here but is by default.

6. Then save the package and you'll see a transform file has been created inside the extracted files directory. You can either deploy this package using the msi along with the transform file or use the setup.exe which calls the setup.ini file and the transform file exists inside of the ini.

example: msiexec.exe /i "acroread.msi" TRANSFORMS="acroread.mst"

LTI/ZTI Scripting: Add computer to an AD Group

Posted: 18 Apr 2013 09:00 PM PDT

I'm currently doing some intense SCCM 2012 training so I've not been posting or in the forums recently. I've still been responding to emails though.

I received an email from a reader earlier this week. He wanted to add the current computer to an AD security group during his deployment.

It turns out that I wrote such a script a few weeks earlier. It's in the repository here.

The script will add the current computer to an AD Group that is set in the customsettings.ini

The script is then run in a task sequence with the command line:

cscript.exe "%SCRIPTROOT%\ZTIAddMember.wsf

The code below is a sample of the customsettings.ini changes.

[Settings]  Priority=Default  Properties=CustomProperty, ADGroup     [Default]  OSInstall=Y  ADGroup = LDAP://CN=IT Computers,OU=Groups,DC=corp,DC=continuum,DC=com

The code is "As is". No refunds!

Gus joined the group Orchestrator Runbooks Community Repository

Posted: 27 May 2013 12:06 PM PDT

Comments: 0

Gus joined the group System Center Orchestrator/Opalis

Posted: 27 May 2013 12:03 PM PDT

Comments: 0

Gus became a registered member

Posted: 27 May 2013 12:00 PM PDT

Comments: 0

SCCM by Davis: “Rob Marshall wrote a new post, WMUG - A day with Wally Mead covering ConfigMgr 2012 SP1 and Mobile Device Management” plus 2 more

Posted: 27 May 2013 03:40 AM PDT

SCCM by Davis: "Rob Marshall wrote a new post, WMUG - A day with Wally Mead covering ConfigMgr 2012 SP1 and Mobile Device Management" plus 2 more

Rob Marshall wrote a new post, WMUG - A day with Wally Mead covering ConfigMgr 2012 SP1 and Mobile Device Management

Posted: 26 May 2013 01:36 PM PDT

The Windows Management User Group has Wally Mead back for an awesome day of ConfigMgr SP1 and Mobile Device Management content.The venue is London, Victoria, Cardinal Place, and we have capacity for 100 attendees, […]

Comments: 0

SCCM by Davis: "SCCM 2012 SP1 Powershell cmdlets" plus 19 more

Posted: 26 May 2013 03:27 AM PDT

SCCM by Davis: "SCCM 2012 SP1 Powershell cmdlets" plus 19 more

SCCM 2012 SP1 Powershell cmdlets

Posted: 18 Apr 2013 05:03 AM PDT

Un certain nombre de cmdlets Powerhsell sont disponibles avec SCCM 2012 SP1.
Powershell 3 doit être installé afin de pouvoir utiliser ces cmdlets.

La liste est disponible sur le technet à l'adresse suivante : http://technet.microsoft.com/en-us/library/jj821831.aspx

Il est également possible d'obtenir la liste des cmdlets en utilisant la commande suivante dans Powershell : Get-Command -Module ConfigurationManager

La console Powershell peut être lancée depuis la console SCCM via le menu Connect via Windows Powershell.

Jay Ferron wrote a new post, Microsoft Security Compliance Manager

Posted: 25 May 2013 12:25 PM PDT

How do manage your infrastructure and verify compliance. Microsoft SCM offers security baselines to help you manage configuration drift, address compliance requirements, and reduce security threats. Security […]

Comments: 0

Jason Sandys wrote a new post, ConfigMgr Startup Script Updated

Posted: 25 May 2013 01:19 PM PDT

1.6 is here with a couple of minor improvements including the ability to selectively install ConfigMgr 2012 x86 or x64 hotfixes based upon the client's OS architecture. The other improvement is the ability to […]

Comments: 0

Dell, HP Upgrade Thin Client for Better Security, Communications

Posted: 25 May 2013 08:30 AM PDT

The companies unveiled new and enhanced thin client offerings aimed at improved performance in cloud and virtual environments.

Chris LaPlante became a registered member

Posted: 25 May 2013 04:23 AM PDT

Comments: 0

System Center: SQL installation guide

Posted: 16 Apr 2013 10:20 AM PDT

I was always a bit upset because of missing SQL installation guide for System Center (and other prod

AdminStudio Configuration Manager Edition

Posted: 14 Apr 2013 02:42 AM PDT

How to get free software packaging tool when you have System Center Configuration Manager

Download software : http://www.flexerasoftware.com/promolanding/7698.htm

Optain a licens number : http://learn.flexerasoftware.com/content/AR-EVAL-AdminStudio-Limited-Edition-SCCM

MMS (Microsoft Management Solutions) 2013 Keynote – my notes

Posted: 13 Apr 2013 02:48 PM PDT

Mostly it was Microsoft System Center 2012 SP 1 stuff like Azure intgration into the privat cloud, Intune integration etc. what was known before, but here are some interesting highlights that I wrote down:

20% of the Microsoft Enterprise customers use Office 365
At Domino's (BIG US Pizza Service – http://www.dominos.com/) they run 15000 VM's based on Hyper-V, administred by only 2 (two) admins
There are 35000 unique Windows Intune customers
IT evolve to be a PEOPLE CENTRIC IT which needs to provide answers to questions like WHO access the IT Infrastructure, WHAT they access and WHERE they access it from
Happy users are more productive
Security should travel with the documents

You can view the keynote here –> http://channel9.msdn.com/Events/MMS/2013/KEY1

Upgrade SCCM 2012 to 2012 SP1 and get an error when editing a task sequence?

Posted: 12 Apr 2013 12:17 PM PDT

Recently I upgraded Configuration Manager 2012 to 2012 Sp1. We had a bunch of task sequences, but they wouldn't open. I re-ran the configuration manager extension integration from the MDT 2012 Update 1 install, forcing the extensions down and resolved the error. I was thinking of blogging about this topic, and somone already did, 8 days ago. Nice work Jeroen Erkelens, here's the Post.

MDOP 2013

Posted: 12 Apr 2013 07:47 AM PDT

MDOP 2013 has launched. Several enhancements to the suite of apps including MBAM 2.0. This utility now has integration into ConfigMgr and a self-service portal and automated provisioning with Win8 deployments. AGPM, DART, App-V, and UEV have all been improved. Continue reading about the new feature sets at the Windows Blog.

Install and Manage EndPoint with SCCM

Posted: 12 Apr 2013 03:29 AM PDT

Install EndPoint Protection using SCCM

Microsoft System Center 2012 Endpoint Protection (previously Forefront Endpoint Protection) consolidates desktop security & management into one solution.

Add Site System Roles for "EndPoint Protection" Point.

Specify only if you are use proxy server.

Configuring EndPoint Protection Point:

Configuring Windows Update Pint:

Before you proceed double click on "Software Update Pont" to ensure port used by the WSUS server ( it is 80 and 443 for WSUS 3.0 SP2 but newer WSUS use port: ports 8530 and 8531)

Specify only if you are use proxy server.

Configure Email Alert.

Set account credentials if your email server doesn't permit relay. If it is external server; probably it will not support relay. So you need to "specify an account" and mail server account password.

Creation on device collection (group similar Operating system for group deployment)

We just put "All Systems" for this exercise but in real live we can be specific.

Grouping Windows 7 system in same collection here.

Definition updates for malware.

Yes

See the log update

Craete a share with read access to auth users and full access to admin ac

Note: you can notice FEP will install on to your desktop PC. Require waiting for an while.

You can set type of FEP scan policy you required; either import from built in template as shown below or customize the template as per your need.

Customize antimalware policy:

SCCM Boundaries and Client push configuration

Posted: 12 Apr 2013 02:46 AM PDT

Configuring SCCM 2012 SP1.

First all we need to create a boundary group so that SCCM could discover clients. It can be done using AD Site as group, IP segment etc.

Here we creating boundary and its group using AD Site.

Right click on Boundaries from left panel as shown in the red box. Choose type as you prefer.

Now Right click on "Boundary Groups" to create boundary group (eg. AD site)

Please ignore my AD name. this server is SCCMSERVER not SCOM

Yes to following ..

Then Yes to confirm for next popup screen.

Configure (Enable) push base client installation (remote).

Click on Sites then click on our site from right windows and Click on "Client Installation Setting" follow by Client Push Installation.

Just follow the following steps:

Here you can use Administrator account or your custom account.

Now selecting "All Systems" should show you those client has been joined to the domain and discovered by SCCM.

Right click on the client computer name and click on 'Install Client" from popup menu.

SCCM client installation should kick in at the client machine.

Following screen shows SCCM client installation process sis running on the client machine.

SCCM Client has been install on following Windows 7 computer.

Now you can manger above client for other purposes. See my next post for the "installation of SCCM EndPoint Protection" using SCCM.

Note: installation of SCCM EndPoint Protection post contains steps for Windows updates (WSUS) and "Creation of System Collection" (grouping different client type based on Query Rules).

SCCM 2012 SP1 Installation

Posted: 12 Apr 2013 01:58 AM PDT

This document guide you through installation of Microsoft System Center Configuration Manger (SCCM) 2012 SP1 with Windows Server 2012 AD and MS SQL Server Standard 2012 SP1.

Configure Active Director (AD) on Windows server 2012:

Creating Active directory rather simple in Windows 2012.

Add the roles and feature from Server Manager Dashboard (AD DS);

Back in Server Manager, you will notice that AD DS has been added to the left navigation tree. Click on it and then click on More on the right navigation pane where it states that Configuration is required for Active Directory Domain Services.

Note:
No dcpromo command needs to enter from command prompt or Windows Run.

You will now be presented with the All Servers Task Details, in which you will click on Promote this server to a domain controller under Action. The Deployment Configuration screen appears and we will select "Add a new forest" as this is the first domain controller.

Enter your Root domain name and then click Next.

The following screen will then appear in which you will enter and select your Domain Controller Options.

You will then get the below warning in which you can ignore for now.

Click Next

The NetBIOS domain name will then be inputted automatically. In the event of a conflict, it will suggest an alternative by appending the original name with a 0.

Click Next

Note: click on following link next for the screen that is not show on above.

http://social.technet.microsoft.com/wiki/contents/articles/12370.step-by-step-guide-for-setting-up-windows-server-2012-domain-controller.aspx

Microsoft SQL server 2012 SP1 Setup:

Configuration Manager 2012 SP1 requires the following SQL versions

SQL Server 2008 SP2 with Cumulative Update 9 or higher
SQL Server 2008 SP3 with Cumulative Update 4 or higher
SQL Server 2008 R2 SP1 with Cumulative Update 6 or higher
SQL Server 2012 with Cumulative Update 2 or higher

You can install additional feature as you required but I just go with minimum required for SCCM installation.

Ensure you have select following SQL Collation for SCCM:

SQL_Latin1_General_CP1_CI_AS.

Click Add Current user or Other Amin users:

Download SP1 this is now supported SQLServer2012SP1 (KB2674319-x64-ENU.exe)

http://www.microsoft.com/en-us/download/details.aspx?id=35575

Now open SQL Manger and connect using your current user (user that you have entered during installation as admin)

Note: Ignore the server name;

Microsoft recommend 50 to 80% of available physical memory.

Note: more memory certainly improve performance. It is ideal to use a different server for SQL for real operational server.

Install Windows ADK:

The Windows® Assessment and Deployment Kit (Windows ADK) is a collection of tools that you can use to customize, assess, and deploy Windows operating systems to new computers.

http://download.microsoft.com/download/9/9/F/99F5E440-5EB5-4952-9935-B99662C3DF70/adk/adksetup.exe

Prepare Active Directory (schema update for AD) for SCCM.

Run following file from DC server if SCCM server is not your DC server. Note: do not use SCCM server as DC server in real production server. AD has to be separated but for lab environment it is OK.

On the CD or mounted/extracted iso it should be here: SMSSETUP\BIN\X64\extadsch.exe

\SMSSetup\Bin\x64\Extadsch.exe, right click and choose Run As Administrator.
A command prompt window will appear briefly as the schema is extended, check in c:\ for a log file called ExtADSch.log it should look similar to this

If you see error message following log file; run this for domain controller login with Administrator.

Configure Windows Host firewall to required ports for SCCM:

Right click on Incoming rules and create new rule

Crate System Object Container:

Right click CN=system management then properties

Create firewall rules using Group policy:

Open Group Policy Management tools to open WMI and File and printer sharing for SCCM clients.

Repeat again for WMI

Adding required Windows Roles and Feature>

If require PXE boot; the Windows Deployment Service is required. Note: Enabling PXE boot from SCCM consoled also automatically install "Windows Deployment Service" so you can install now or later.

———–

——————-

WSUS installation

———– Note: installation of Default WSUS server with Windows Server 2012 ————–
It is better choice to use Database rather WID database. Recreate SUP (Software Update Point) in SCCM Site server roles if sync is failed between WSUS and SCCM SP1

WSUS is bit cranky for now but here is what I did to fix it:

1) Uninstall SUP role

2. Uninstall WSUS

4. Delete SUSDB from SQL Server if any

5. Restart Server

6. Install WSUS (Chose to install DB not WID)

7. Configured Updates to be stored locally

8. Run Post Deployment Configuration from Server manager

9. Started WSUS Admin Console and ran Wizard (also chose to connect for the catalog sync) up to the Point where you select the products. Here I canceled the wizard without choosing any products

10. Install SUP role in SCCM and configure the right Settings (WSUS on Server 2012 Defaults to its own admin Website and ports 8530 and 8531) and select the products you required.

11. Check following log file if WSUS does not sync with SCCM.

Path: C:\Program Files\Microsoft Configuration Manager\Logs

File Name:

WCM.log
wsyncmgr.log

12.) Starts synchronization in the sccm console

Install with Windows Server 2008 R2 SP1 [very stable]
Alternatively; download and install stable version of WSUS 3.0 SP2 or better still if you go with Windows 2008 R2 and WSUS 3.0 SP2 [stable]. Windows server 2008 R2 SP1, SCCM 2012 SP1, MS SQL 2008 R2 with required updates/ MS SQL 2012 SP1 with cumulative updates.

WSUS 3.0 SP2 installation steps:

http://technet.microsoft.com/en-us/library/dd939822(v=ws.10).aspx

Apply following KB for WSUS 3.0 Service Pack 2 (SP2) to work on Windows 2008 R2 Server.
Installation steps are here:

KB2720211

http://support.microsoft.com/kb/2720211

KB2734608

http://support.microsoft.com/kb/2734608/en-us

—————- End—————

Install SCCM 2012 (auto boot DVD or Run splash.hta file as an administrative privilege):

Click on the begun installation if no error found. Note: SCCM 2012 SP1 needs 8GB RAM for Primary site.

Required Hotfix release on Feb-2013 for SCCM SP1

http://hotfixv4.microsoft.com/ConfigMgrV5/sp1/ConfigMgr_2012_SP1_CU0_KB2801987_ENU/05.00.7804.1108/free/457899_ENU_x64_zip.exe

http://hotfixv4.microsoft.com/ConfigMgrV5/sp1/ConfigMgr_2012_SP1_CU0_KB2793237_ENU/05.00.7804.1111/free/459398_ENU_x64_zip.exe

Restart the server and ensure required services are running. Done.

This posting includes an audio/video/photo media file: Download Now

McAfee Access Protection Prevents creation of boot disk in SCCM 2012 SP1

Posted: 11 Apr 2013 05:32 PM PDT

This has been driving me crazy the past couple of days:

https://kc.mcafee.com/corporate/index?page=content&id=KB76867&actp=search&viewlocale=en_US&searchid=1357907921573

Last week I started on an install for SCCM 2012 SP1 for a customer who has McAfee as the main security solution in their environment. I have some previous experience with McAfee, and i hadn't previously experienced any issues with it. All of the previous clients I had that used McAfee were on 2012 RTM, and this was the first one I had done with SP1. Sp1 uses the ADK, instead of the AIK, of course, and all has not gone smoothly.

The first problem I encountered was with the site installation itself: the site seemed to install fine, but no boot images were created. This seemed a bit odd, so I checked the ConfigMgrSetup.log file located on the root of C:\

The boot images were not created properly during setup. The boot image files were both at their default location (\\server\SMS_sitecode\osd\boot) but they weren't in the console. I decided to try and import them manually:

A bit of an odd error message, however, the DISM log file showed that SCCM was unable to insert the OSD binaries into the WIM. Now we're getting somewhere. I figured I'd try creating one from scratch with MDT. That was also unsuccessful.

Searching around the web was not very helpful as most people seemed to be reporting problems related to permissions. Given the access denied error that others reported, and the fact that my permissions were fine, I believed the culprit would be McAfee. Since the logs didn't show McAfee blocking or deleting anything, I didn't have much to go on. I talked to the security team and got them to allow me to temporarily disable McAfee, and like clockwork, I was able to create a boot image. My first thought was to exclude C:\Windows\Temp\BootImages from McAfee, but the customer's security team wanted specific justification before adding any exclusions. We tried it as a troubleshooting step, but once Access Protection was reactivated, the problem returned.

Earlier today I came across the article above from McAfee, hopefully they'll come to a more permanent solution, but for the time being, we need to turn off Access Protection whenever we update or edit any boot image, or perform offline servicing on a WIM. I've been in other environments with SCCM 2012 SP1 and other AV solutions, such as Symantec Endpoint Protection, Kaspersky, and of course SCEP, but haven't experienced this issue yet.

AV White-list Considerations

This issue has prompted me to review some of the community resources concerning AV policy on an SCCM site server. My personal feeling is to exclude these locations from any AV client:

%programfiles%\Microsoft Configuration Manager\Inboxes\*
%programfiles(x86)%\Microsoft Configuration Manager\Inboxes\*
<C:>\ConfigMgr_OfflineImageServicing – defaults to the same drive the site is installed on
C:\Windows\TEMP\BootImages

You may want to review the following links for more information:

http://blogs.technet.com/b/systemcenterpfe/archive/2013/01/11/updated-system-center-2012-configuration-manager-antivirus-exclusions-with-more-details.aspx

http://www.systemcenterblog.nl/2012/05/09/anti-virus-scan-exclusions-for-configuration-manager-2012/

SCCM 2007: http://blogs.technet.com/b/configurationmgr/archive/2010/11/30/configmgr-2007-antivirus-scan-and-exclusion-recommendations.aspx

-easy

Onrego's Multitenant SCCM for MSP's

Posted: 10 Apr 2013 11:14 PM PDT

We are proud to announce the fact that Onrego Online System Center workstation management, based on Microsoft System Center Configuration Manager 2012, is now multitenant and available for MSP's around the world either as whitelabel or branded as Online System Center.

We launched Onrego Online System Center for corporations on November 1st 2012, and today we launch Onrego Online System Center for managed service providers (MSP) as well. MSP's can now use our innovation in managing their end customers' workstations and users and benefit from the power of Microsoft System Center Configuration Manager, which is, by Gartner Magic Quadrant for Client Management Tool, the leader in the field as you can see in the following figure (Copyright Gartner, found from Microsoftnow.com).

MSP's can manage the tenants from Onrego Online System Center Portal with fully automated processes. Management Console can be given to the appropriate tenant if needed with no worries in security matters.

You don't have to worry about network or domain boundaries. Onrego Online System Center workstation management can manage workstations where ever they are located and no matter who owns them. MSP's can also benefit from mass management, such as delpoying patches to every tenant at once.

We are able to give a demo account for a MSP on a request. Meanwhile, we have couple of teasers of tenat management as well as basic workstation management.

Example of tenant management in Onrego Online System Center:

Example of basic workstation management in Onrego Online System Center:

We believe the future is cloud based! We believe our customers, partners and MSP's should pay only for what they are using with no upfront investments. Contact us and build your business as scalable and flexible one!

If you have any questions or you are intrested in Onrego's services, please do not hesitate to contact us!

Identify if SCCM 2012 SP1 CU1 has been installed

Posted: 09 Apr 2013 12:00 PM PDT

After upgrading to System Center Configuration Manager 2012 SP1 CU1, you will be able to identify th

Configuration Manager 2012 SP1 Toolkit - Content Library Transfer Tool

Posted: 07 Apr 2013 08:04 PM PDT

I found a cool blog post by Neil Peterson on this tool. Check it out if you need to move the DP's content store from one drive to another Neil's Blog and TechNet Information

Configuration Manager 2012 SP1 Toolkit download

Sandeep Mangaraj became a registered member

Posted: 24 May 2013 04:40 PM PDT

Comments: 0

kaizokucred became a registered member

Posted: 24 May 2013 10:51 AM PDT

Comments: 0

Chad Simmons replied to the forum topic SCCM 2012 - Need help...computers restarting when Maintenance Window is in place in the group System Center Configuration Manager 2012

Posted: 24 May 2013 10:40 AM PDT

Review these logs: RebootCoordinator.log, ServiceWindowManager, SCNotify*, UpdatesDeployment, UpdatesHandler, and WUAHandler to see if you can coorelate the Software Updates request for restart/reboot and the […]

Comments: 0

You are subscribed to email updates from SCCM by Davis To stop receiving these emails, you may unsubscribe now.	Email delivery powered by Google
Google Inc., 20 West Kinzie, Chicago IL USA 60610

System Center Configuration Manager - Davis Blog

This posting includes an audio/video/photo media file: Download Now

Ethernet Invention Revealed the Origins of Innovation

Posted: 26 May 2013 08:50 AM PDT

NEWS ANALYSIS: Ethernet's invention 40 years ago showed that innovation can happen when smart people are given time to think and to work together.

You are subscribed to email updates from SCCM by Davis To stop receiving these emails, you may unsubscribe now.	Email delivery powered by Google
Google Inc., 20 West Kinzie, Chicago IL USA 60610

System Center Configuration Manager - Davis Blog

This posting includes an audio/video/photo media file: Download Now

Valbjorn Julius Thorlaksson became a registered member

Posted: 27 May 2013 07:44 AM PDT

Comments: 0

Aniruth became a registered member

Posted: 27 May 2013 05:53 AM PDT

Comments: 0