SCCM by Davis: “SCCM 2012 SP1 Powershell cmdlets” plus 19 more |  |
- SCCM 2012 SP1 Powershell cmdlets
- Jay Ferron wrote a new post, Microsoft Security Compliance Manager
- Jason Sandys wrote a new post, ConfigMgr Startup Script Updated
- Dell, HP Upgrade Thin Client for Better Security, Communications
- Chris LaPlante became a registered member
- System Center: SQL installation guide
- AdminStudio Configuration Manager Edition
- MMS (Microsoft Management Solutions) 2013 Keynote – my notes
- Upgrade SCCM 2012 to 2012 SP1 and get an error when editing a task sequence?
- MDOP 2013
- Install and Manage EndPoint with SCCM
- SCCM Boundaries and Client push configuration
- SCCM 2012 SP1 Installation
- McAfee Access Protection Prevents creation of boot disk in SCCM 2012 SP1
- Onrego's Multitenant SCCM for MSP's
- Identify if SCCM 2012 SP1 CU1 has been installed
- Configuration Manager 2012 SP1 Toolkit - Content Library Transfer Tool
- Sandeep Mangaraj became a registered member
- kaizokucred became a registered member
- Chad Simmons replied to the forum topic SCCM 2012 - Need help...computers restarting when Maintenance Window is in place in the group System Center Configuration Manager 2012
| SCCM 2012 SP1 Powershell cmdlets Posted: 18 Apr 2013 05:03 AM PDT Un certain nombre de cmdlets Powerhsell sont disponibles avec SCCM 2012 SP1. La liste est disponible sur le technet à l'adresse suivante : http://technet.microsoft.com/en-us/library/jj821831.aspx Il est également possible d'obtenir la liste des cmdlets en utilisant la commande suivante dans Powershell : Get-Command -Module ConfigurationManager La console Powershell peut être lancée depuis la console SCCM via le menu Connect via Windows Powershell.  |
| Jay Ferron wrote a new post, Microsoft Security Compliance Manager Posted: 25 May 2013 12:25 PM PDT How do manage your infrastructure and verify compliance. Microsoft SCM offers security baselines to help you manage configuration drift, address compliance requirements, and reduce security threats. Security […] Comments: 0  |
| Jason Sandys wrote a new post, ConfigMgr Startup Script Updated Posted: 25 May 2013 01:19 PM PDT 1.6 is here with a couple of minor improvements including the ability to selectively install ConfigMgr 2012 x86 or x64 hotfixes based upon the client's OS architecture. The other improvement is the ability to […] Comments: 0  |
| Dell, HP Upgrade Thin Client for Better Security, Communications Posted: 25 May 2013 08:30 AM PDT The companies unveiled new and enhanced thin client offerings aimed at improved performance in cloud and virtual environments.  |
| Chris LaPlante became a registered member Posted: 25 May 2013 04:23 AM PDT Comments: 0  |
| System Center: SQL installation guide Posted: 16 Apr 2013 10:20 AM PDT I was always a bit upset because of missing SQL installation guide for System Center (and other prod  |
| AdminStudio Configuration Manager Edition Posted: 14 Apr 2013 02:42 AM PDT How to get free software packaging tool when you have System Center Configuration Manager Download software : http://www.flexerasoftware.com/promolanding/7698.htm Optain a licens number : http://learn.flexerasoftware.com/content/AR-EVAL-AdminStudio-Limited-Edition-SCCM  |
| MMS (Microsoft Management Solutions) 2013 Keynote – my notes Posted: 13 Apr 2013 02:48 PM PDT Mostly it was Microsoft System Center 2012 SP 1 stuff like Azure intgration into the privat cloud, Intune integration etc. what was known before, but here are some interesting highlights that I wrote down:
You can view the keynote here –> http://channel9.msdn.com/Events/MMS/2013/KEY1  |
| Upgrade SCCM 2012 to 2012 SP1 and get an error when editing a task sequence? Posted: 12 Apr 2013 12:17 PM PDT Recently I upgraded Configuration Manager 2012 to 2012 Sp1. We had a bunch of task sequences, but they wouldn't open. I re-ran the configuration manager extension integration from the MDT 2012 Update 1 install, forcing the extensions down and resolved the error. I was thinking of blogging about this topic, and somone already did, 8 days ago. Nice work Jeroen Erkelens, here's the Post.  |
| Posted: 12 Apr 2013 07:47 AM PDT MDOP 2013 has launched. Several enhancements to the suite of apps including MBAM 2.0. This utility now has integration into ConfigMgr and a self-service portal and automated provisioning with Win8 deployments. AGPM, DART, App-V, and UEV have all been improved. Continue reading about the new feature sets at the Windows Blog.  |
| Install and Manage EndPoint with SCCM Posted: 12 Apr 2013 03:29 AM PDT Install EndPoint Protection using SCCM Microsoft System Center 2012 Endpoint Protection (previously Forefront Endpoint Protection) consolidates desktop security & management into one solution. Add Site System Roles for "EndPoint Protection" Point. Specify only if you are use proxy server. Configuring EndPoint Protection Point: Configuring Windows Update Pint: Before you proceed double click on "Software Update Pont" to ensure port used by the WSUS server ( it is 80 and 443 for WSUS 3.0 SP2 but newer WSUS use port: ports 8530 and 8531) Specify only if you are use proxy server. Configure Email Alert. Set account credentials if your email server doesn't permit relay. If it is external server; probably it will not support relay. So you need to "specify an account" and mail server account password. Creation on device collection (group similar Operating system for group deployment) We just put "All Systems" for this exercise but in real live we can be specific. Grouping Windows 7 system in same collection here. Definition updates for malware. Yes See the log update Craete a share with read access to auth users and full access to admin ac Note: you can notice FEP will install on to your desktop PC. Require waiting for an while. You can set type of FEP scan policy you required; either import from built in template as shown below or customize the template as per your need. Customize antimalware policy:  |
| SCCM Boundaries and Client push configuration Posted: 12 Apr 2013 02:46 AM PDT Configuring SCCM 2012 SP1. First all we need to create a boundary group so that SCCM could discover clients. It can be done using AD Site as group, IP segment etc. Here we creating boundary and its group using AD Site. Right click on Boundaries from left panel as shown in the red box. Choose type as you prefer. Now Right click on "Boundary Groups" to create boundary group (eg. AD site) Please ignore my AD name. this server is SCCMSERVER not SCOM Yes to following .. Then Yes to confirm for next popup screen. Configure (Enable) push base client installation (remote). Click on Sites then click on our site from right windows and Click on "Client Installation Setting" follow by Client Push Installation. Just follow the following steps: Here you can use Administrator account or your custom account. Now selecting "All Systems" should show you those client has been joined to the domain and discovered by SCCM. Right click on the client computer name and click on 'Install Client" from popup menu. SCCM client installation should kick in at the client machine. Following screen shows SCCM client installation process sis running on the client machine. SCCM Client has been install on following Windows 7 computer. Now you can manger above client for other purposes. See my next post for the "installation of SCCM EndPoint Protection" using SCCM. Note: installation of SCCM EndPoint Protection post contains steps for Windows updates (WSUS) and "Creation of System Collection" (grouping different client type based on Query Rules).  |
| Posted: 12 Apr 2013 01:58 AM PDT This document guide you through installation of Microsoft System Center Configuration Manger (SCCM) 2012 SP1 with Windows Server 2012 AD and MS SQL Server Standard 2012 SP1. Configure Active Director (AD) on Windows server 2012: Creating Active directory rather simple in Windows 2012. Add the roles and feature from Server Manager Dashboard (AD DS); Back in Server Manager, you will notice that AD DS has been added to the left navigation tree. Click on it and then click on More on the right navigation pane where it states that Configuration is required for Active Directory Domain Services.
Note: You will now be presented with the All Servers Task Details, in which you will click on Promote this server to a domain controller under Action. The Deployment Configuration screen appears and we will select "Add a new forest" as this is the first domain controller. Enter your Root domain name and then click Next. The following screen will then appear in which you will enter and select your Domain Controller Options.
You will then get the below warning in which you can ignore for now.
Click Next The NetBIOS domain name will then be inputted automatically. In the event of a conflict, it will suggest an alternative by appending the original name with a 0.
Click Next Note: click on following link next for the screen that is not show on above. Microsoft SQL server 2012 SP1 Setup: Configuration Manager 2012 SP1 requires the following SQL versions SQL Server 2008 SP2 with Cumulative Update 9 or higher You can install additional feature as you required but I just go with minimum required for SCCM installation. Ensure you have select following SQL Collation for SCCM: SQL_Latin1_General_CP1_CI_AS. Click Add Current user or Other Amin users: Download SP1 this is now supported SQLServer2012SP1 (KB2674319-x64-ENU.exe) http://www.microsoft.com/en-us/download/details.aspx?id=35575 Now open SQL Manger and connect using your current user (user that you have entered during installation as admin)
Microsoft recommend 50 to 80% of available physical memory.
Install Windows ADK: The Windows® Assessment and Deployment Kit (Windows ADK) is a collection of tools that you can use to customize, assess, and deploy Windows operating systems to new computers. http://download.microsoft.com/download/9/9/F/99F5E440-5EB5-4952-9935-B99662C3DF70/adk/adksetup.exe Prepare Active Directory (schema update for AD) for SCCM. Run following file from DC server if SCCM server is not your DC server. Note: do not use SCCM server as DC server in real production server. AD has to be separated but for lab environment it is OK. On the CD or mounted/extracted iso it should be here: SMSSETUP\BIN\X64\extadsch.exe \SMSSetup\Bin\x64\Extadsch.exe, right click and choose Run As Administrator. If you see error message following log file; run this for domain controller login with Administrator. Configure Windows Host firewall to required ports for SCCM: Right click on Incoming rules and create new rule Crate System Object Container: Right click CN=system management then properties Create firewall rules using Group policy: Open Group Policy Management tools to open WMI and File and printer sharing for SCCM clients. Repeat again for WMI Adding required Windows Roles and Feature> If require PXE boot; the Windows Deployment Service is required. Note: Enabling PXE boot from SCCM consoled also automatically install "Windows Deployment Service" so you can install now or later. ———– ——————- WSUS installation ———– Note: installation of Default WSUS server with Windows Server 2012 ————– WSUS is bit cranky for now but here is what I did to fix it: 1) Uninstall SUP role 2. Uninstall WSUS 4. Delete SUSDB from SQL Server if any 5. Restart Server 6. Install WSUS (Chose to install DB not WID) 7. Configured Updates to be stored locally 8. Run Post Deployment Configuration from Server manager 9. Started WSUS Admin Console and ran Wizard (also chose to connect for the catalog sync) up to the Point where you select the products. Here I canceled the wizard without choosing any products 10. Install SUP role in SCCM and configure the right Settings (WSUS on Server 2012 Defaults to its own admin Website and ports 8530 and 8531) and select the products you required. 11. Check following log file if WSUS does not sync with SCCM. Path: C:\Program Files\Microsoft Configuration Manager\Logs File Name: WCM.log 12.) Starts synchronization in the sccm console http://technet.microsoft.com/en-us/library/dd939822(v=ws.10).aspx Apply following KB for WSUS 3.0 Service Pack 2 (SP2) to work on Windows 2008 R2 Server. KB2720211 http://support.microsoft.com/kb/2720211 KB2734608 http://support.microsoft.com/kb/2734608/en-us —————- End————— Install SCCM 2012 (auto boot DVD or Run splash.hta file as an administrative privilege): Click on the begun installation if no error found. Note: SCCM 2012 SP1 needs 8GB RAM for Primary site. Required Hotfix release on Feb-2013 for SCCM SP1 Restart the server and ensure required services are running. Done.  This posting includes an audio/video/photo media file: Download Now |
| McAfee Access Protection Prevents creation of boot disk in SCCM 2012 SP1 Posted: 11 Apr 2013 05:32 PM PDT This has been driving me crazy the past couple of days: Last week I started on an install for SCCM 2012 SP1 for a customer who has McAfee as the main security solution in their environment. I have some previous experience with McAfee, and i hadn't previously experienced any issues with it. All of the previous clients I had that used McAfee were on 2012 RTM, and this was the first one I had done with SP1. Sp1 uses the ADK, instead of the AIK, of course, and all has not gone smoothly. The first problem I encountered was with the site installation itself: the site seemed to install fine, but no boot images were created. This seemed a bit odd, so I checked the ConfigMgrSetup.log file located on the root of C:\ The boot images were not created properly during setup. The boot image files were both at their default location (\\server\SMS_sitecode\osd\boot) but they weren't in the console. I decided to try and import them manually: A bit of an odd error message, however, the DISM log file showed that SCCM was unable to insert the OSD binaries into the WIM. Now we're getting somewhere. I figured I'd try creating one from scratch with MDT. That was also unsuccessful. Searching around the web was not very helpful as most people seemed to be reporting problems related to permissions. Given the access denied error that others reported, and the fact that my permissions were fine, I believed the culprit would be McAfee. Since the logs didn't show McAfee blocking or deleting anything, I didn't have much to go on. I talked to the security team and got them to allow me to temporarily disable McAfee, and like clockwork, I was able to create a boot image. My first thought was to exclude C:\Windows\Temp\BootImages from McAfee, but the customer's security team wanted specific justification before adding any exclusions. We tried it as a troubleshooting step, but once Access Protection was reactivated, the problem returned. Earlier today I came across the article above from McAfee, hopefully they'll come to a more permanent solution, but for the time being, we need to turn off Access Protection whenever we update or edit any boot image, or perform offline servicing on a WIM. I've been in other environments with SCCM 2012 SP1 and other AV solutions, such as Symantec Endpoint Protection, Kaspersky, and of course SCEP, but haven't experienced this issue yet. AV White-list Considerations This issue has prompted me to review some of the community resources concerning AV policy on an SCCM site server. My personal feeling is to exclude these locations from any AV client:
You may want to review the following links for more information: http://www.systemcenterblog.nl/2012/05/09/anti-virus-scan-exclusions-for-configuration-manager-2012/ -easy  |
| Onrego's Multitenant SCCM for MSP's Posted: 10 Apr 2013 11:14 PM PDT We are proud to announce the fact that Onrego Online System Center workstation management, based on Microsoft System Center Configuration Manager 2012, is now multitenant and available for MSP's around the world either as whitelabel or branded as Online System Center. We launched Onrego Online System Center for corporations on November 1st 2012, and today we launch Onrego Online System Center for managed service providers (MSP) as well. MSP's can now use our innovation in managing their end customers' workstations and users and benefit from the power of Microsoft System Center Configuration Manager, which is, by Gartner Magic Quadrant for Client Management Tool, the leader in the field as you can see in the following figure (Copyright Gartner, found from Microsoftnow.com). MSP's can manage the tenants from Onrego Online System Center Portal with fully automated processes. Management Console can be given to the appropriate tenant if needed with no worries in security matters. You don't have to worry about network or domain boundaries. Onrego Online System Center workstation management can manage workstations where ever they are located and no matter who owns them. MSP's can also benefit from mass management, such as delpoying patches to every tenant at once. We are able to give a demo account for a MSP on a request. Meanwhile, we have couple of teasers of tenat management as well as basic workstation management. Example of tenant management in Onrego Online System Center: Example of basic workstation management in Onrego Online System Center: We believe the future is cloud based! We believe our customers, partners and MSP's should pay only for what they are using with no upfront investments. Contact us and build your business as scalable and flexible one! If you have any questions or you are intrested in Onrego's services, please do not hesitate to contact us!  |
| Identify if SCCM 2012 SP1 CU1 has been installed Posted: 09 Apr 2013 12:00 PM PDT After upgrading to System Center Configuration Manager 2012 SP1 CU1, you will be able to identify th  |
| Configuration Manager 2012 SP1 Toolkit - Content Library Transfer Tool Posted: 07 Apr 2013 08:04 PM PDT I found a cool blog post by Neil Peterson on this tool. Check it out if you need to move the DP's content store from one drive to another Neil's Blog and TechNet Information Configuration Manager 2012 SP1 Toolkit download  |
| Sandeep Mangaraj became a registered member Posted: 24 May 2013 04:40 PM PDT Comments: 0  |
| kaizokucred became a registered member Posted: 24 May 2013 10:51 AM PDT Comments: 0  |
| Posted: 24 May 2013 10:40 AM PDT Review these logs: RebootCoordinator.log, ServiceWindowManager, SCNotify*, UpdatesDeployment, UpdatesHandler, and WUAHandler to see if you can coorelate the Software Updates request for restart/reboot and the […] Comments: 0  |
| You are subscribed to email updates from SCCM by Davis To stop receiving these emails, you may unsubscribe now. | Email delivery powered by Google |
| Google Inc., 20 West Kinzie, Chicago IL USA 60610 | |
No hay comentarios:
Publicar un comentario