SMS/SCCM, Beyond Application Deployment - Matthew Hudson

Auto Discovery via Script

2011-12-31T19:19:00.004-06:00

Ever wanted clients to auto-assign but you didn't know how to do it.
Well there are several ways to do this. You could create an export of all the boundarys, so with a script so the client can determine where it needs to be. Otherwise you can do this:

----------- Reassign.vbs -------------------
Set smsclient = CreateObject("Microsoft.SMS.Client")
smsClient.ReAssignSite
------------------------------------------------------------

Example:
Multi-Tier hiearchy. Imaging done at the central site. Computer is assigned during imaging to the Central Site.
At the end of the process run the script and it should auto discovery it's site code based on the boundaries. Obviously if the client stays at the Central site then you have a boundary or other problem that needs to be addressed.

Here is a link to my website that I made several years back. I it is one the slipped my mind until recently.Site Code Assignment

Forefront Endpoint Protection Update 1 Updates tool

2011-12-24T13:45:00.002-06:00

Have you been using Forefront Endpoint protection 2010. Hopefully you have found the time to update to the lastest release, Update 1.

What is critical to this update is the new update tool that allows you to really automate the download and push to the DPs. Before you had to do this manually, created a script or use another 3rd party script.

http://www.microsoft.com/download/en/details.aspx?id=26613

This tool should be copied to your Bin folder on machine performing the updates or referenced on the command line to run the program.

If you choose to create your own Deployment Management name and package name then you need to follow the switches for the application

SoftwareUpdateAutomation.exe” /AssignmentName FEP2010SignatureUpdates /PackageName FEP2010Signature

If you choose to use the defaults provided by the program then you simply need to run the .exe and sit back and watch. In the programsData folder there should be a log file name softwareupdateautomation.log. In here you can watch the program check the Deployment Management / Package and then download the files and update the DPs as necessary.

I recommend that you check your Deployment settings and set the program to use Binary Replication so you don't push all the files over and over again.

MMS 2012 Registration is now open!

2011-11-17T19:09:00.003-06:00

Book your spot now for MMS 2012 in Las Vegas, hosted at the Venteian.

http://www.mms-2012.com/

This is a great time to learn as well as network with your fellow ConfigMgr peers!

space is limited so act now!

ConfigMgr 2012 RC Released

2011-10-27T19:09:00.000-05:00

Configuration Manager 2012 RC has been Released.

Just another step closer to RTM and to full deployment

One thing everyone should note is the Endpoint Protection is not included in the installer:

"System Center 2012 Configuration Manager and System Center 2012 Endpoint Protection are now provided as a single installation package"

http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27841

Reprinted from Microsoft:Please note: System Center 2012 Configuration Manager and System Center 2012 Endpoint Protection are now provided as a single installation package.
System Center 2012 Configuration Manager helps you to empower people to use the devices and applications they need to be productive, while maintaining corporate compliance and control. As more and more consumer devices enter the workplace, IT faces the challenge of delivering a rich experience to users across multiple devices – both personal and corporate-owned – without giving up the control needed to protect company assets. Configuration Manager provides a unified infrastructure for mobile, physical and virtual environments. Configuration Manager also helps you to be more efficient with simplified administrative tools and improved compliance enforcement.

New features in the release candidate include:

•Improved endpoint protection functionality, with integrated setup, management and reporting of System Center 2012 Endpoint Protection. (see below)
•Improved application catalog design that provides a better, more responsive experience when requesting and downloading applications.
•New support for Windows Embedded devices, including Windows Embedded 7 SP1, POS-Ready 7, Windows 7 Think PC, and Windows Embedded Compact 7.
•Improved compliance enforcement and tracking, with the ability to create dynamic collections of baseline compliance and generate hourly compliance summaries.
•Platform support for deep mobile device management of Nokia Symbian Belle devices. Pending a platform update by Nokia later this calendar year for these devices, customers will be able to try out the management of Nokia devices with Configuration Manager.

System Center 2012 Endpoint Protection (previously known as Forefront Endpoint Protection 2012) protects client and server operating systems against the latest threats using industry-leading malware detection technologies. It is built on System Center 2012 Configuration Manager, giving customers a unified infrastructure for client security and compliance management. This shared infrastructure lowers ownership costs while providing improved visibility through user-centric malware reporting and control over endpoint management and security.

New features in the release candidate include:
•Support for System Center 2012 Configuration Manager, including integrated setup, management, and reporting.
•Role-based management across security and operations.
•Improved alerting and reporting, with near real-time and user-centric data views.
•More efficient delivery of signature updates using new automatic software deployment model.

MP has rejected a policy request from GUID:XXXX

2011-09-30T19:37:00.002-05:00

Does your MP Control Manager log have nothing but errors about a machine not registered to the site?

Symptoms
Component: SMS_MP_CONTROL_MANAGER

MP has rejected a policy request from GUID:XXXXX-XXXX-XXX-XXX-XXXXXXXXXXXXXX because it was not approved.

Solutions:
Locate the machine by running a SQL query on the database:
select SMS_Unique_Identifier0, Name0 from V_R_System where SMS_Unique_Identifier0 = 'GUID:xxxxx-xxx-xx-xx-xxx-x'

1. Mixed mode: Check to see if machine has been approved in the console
2. Native Mode: Check to see if the client is installed correctly or registered correctly. Also check to make sure the client certificate is correct on the machine

You may need to uninstall the client or repair it if the the data in the console looks correctly. Hopefully the problem will stop after a while and logs will clear out.

ConfigMgr 2012 Console Extensions

2011-08-21T15:05:00.006-05:00

Hopefully this will be one of many SCCM 2012 "Console Extensions". One thing you have already noticed is that 2012 is now Ribbon Based so we can't call them "Right Click" tools. You may already be familiar with Greg Ramsey's Guid Locator method for 2007. http://myitforum.com/cs2/blogs/gramsey/archive/2008/05/05/sccm-2007-console-extensions-guid-locator.aspx

Here is the version I created for 2012. Basically I looped through the XML Console files and create a tools folder and file based on each GUID in the Default section of the Ribbon. This might not be a totally exhaustive list but I think it should be a good start. The file/folders are pulled from the Beta 2 version currently downloaded from Microsoft.

The Zip file is the actions folder and should be extracted in the Actions Folder (
%ProgramFiles%\Microsoft Configuration Manager\AdminUI\XmlStorage\Extensions\Actions)

I hope to update this as the SDK is updateded. This way you can see the changes in the Console Extensions. Once everything is published I hope to see about creating a tool to converted the XML 2007 format to the XML 2012 format, which is slightly different.

Role keeps installing.

2011-08-17T20:42:00.003-05:00

Problem:
Role on server keeps installing, every hour. Let's say is it is the MP role, yet in the MPsetup.log file it shows that the role installed sucessfully but the Compmon.log shows that the services are not installed. You also might find the registry entries for the server are not there. If found several errors in the event log as listed below about the performance counter error. After searching I finally located the "repair" command for the performance counter. After several hours I went back and checked and found the server had stopped repairing/reinstalling and the logs look good. All logs were moving as they should. Below is the data I found in the logs and the command to run.

Windows Event Log:

The performance counter explain text string value in the registry is not formatted correctly. The malformed string is #%$*>)@}#. The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.

CompMon.log:
Can not get the current execution state for component SMS_MP_CONTROL_MANAGER since it is not installed or completed installing.
Can not get the current execution state for component SMS_EXECUTIVE since it is not installed or completed installing.
Can not get the current execution state for component SMS_COMPONENT_MONITOR since it is not installed or completed installing
Can not get the current execution state for component SMS_OUTBOX_MONITOR since it is not installed or completed installing.
Can not get the current execution state for component SMS_MP_FILE_DISPATCH_MANAGER since it is not installed or completed installing.
Waiting until the next polling cycle in 5 seconds from now.
Checking components ...

MPSetup.log:
Installation was successful.

Resolution:
lodctr /r: c:\windows\system32\perfstringbackup.ini

Where is my collection

2011-07-09T19:37:00.004-05:00

Everyone asks in the forum, "I need to find a collection, how do I do that?" Well there are reports that you can run. You can ask your peers where they stuck it or you can look. If you have several levels it can take awhile.

So I decided to come up with a new tool: Where is my collection?

It will help you locate your collection using a simply HTA program. Simply type in a few characters of the collection and it will return the top 100 matches. Then you find your collection and click on the "Locate collection" It will then give you a read out like this:

Root Collection
--Adobe
----Adobe Professional
------Machines still needing Adobe Profressional

It is accomplished by using the SMS_CollectToSubCollect namespace. Generally this is used to create a subcollection. It occured to me that this property is also read only so it was a good choice to use.

I have the tool on my site as stand alone tool since no arguments are passed from the console to the machine via right click, but I have also included how to add this to the console. I only spent several hours on the tool one evening so if you see something that can be improved, please let me know.

Enjoy, and as always, use at your own risk :)

http://www.sccm-tools.com/tools/standalone/standalone-Whereismycollection.html

Since this is also echoed in the Advertisments and Packages I could also create a tool or expand this one. Some of this has already been solved in ConfigMgr 2012 so go check it out!!

Not all machines in Collection

2011-07-06T19:52:00.003-05:00

Did ever create a collection and realize that not all the computers were appearing?
When you create a collection you need to make sure you use:

SMS_R_System.Name or in some cases SMS_R_System.NetbiosName

Using the SMS_G_System_COMPUTER_SYSTEM.Name or other similar options might not reveal all your systems. When creating collections of large amounts of machines use the SMS_R_System.

I have seen large collections lack 1 or even hundres of machines when using a SMS_G_System_XXXXX

ConfigMgr Beta 2 2010 Release

2011-06-12T17:23:00.002-05:00

So are you wanting to see more of ConfigMgr 2012, then download the latest VHD.

http://www.microsoft.com/downloads/en/details.aspx?FamilyID=1b23c540-9b9f-4d41-a05d-d4b216061957

VHD Test Drive - System Center Configuration Manager 2012 Beta 2 on Windows Server 2008 R2

See the Ribbon Menu at its best as well as other components as they come along.

Signature verification failed for PolicyAssignmentID

2011-06-09T19:52:00.019-05:00

I will say the sometimes in Native mode I have seen this problem and it was due to a problem with the certificate on the MP but this article assumes you have tested your site system and found no such problem

Problem:

1. Run Advergtised Programs is blank or partially populated

2. PolicyAgent log : Signature verification failed for PolicyAssignmentID

Solution:

Locate all the Programs from Packages that have bad OS Requirements. This means if you have a program set to run "All x86 XP workstations as well as x86 XP SP1, x86 SP2. Because you cannot have both All systems as well as the individual versions of the OS. The policy cannot be compiled due to this conflict.

When you check the client it appears to be working fine. It can update hardware but otherwise it looks fine.

Signature verification failed for PolicyAssignmentID {6dc2328f-1dd7-4cc3-95a9-3ca5aa34ec8a}.

The problem is that how do find the offending Program? Well there are many ways but I will just give you the one I used and I am sure I will find a faster way and repost. First connect to machine via Wbemtest (ROOT\ccm\Policy\Machine\requestedConfig). Enum Classes and select Recursive to list everything.

Next find the CCM_Policy_Assignment2 and click on it

Click on the Instances and you should see something similar to this below. Now find the line with your policy. You could create a query to find it but this is a manual approach.

When you find your line click and select "Show MOF" You sould see something like this

instance of CCM_Policy_Assignment2
{
AssignmentCondition = "{BA0997BC-AA74-498E-8D8E-B0A691F46F6F}";
AssignmentCookie = "2011-06-07 16:53:17.550";
AssignmentID = "{ef6d2778-3b08-4fdf-a989-cc48458c1bd6}";
AssignmentPolicy = "CCM_Policy_Policy4.PolicyID=\"C0220033-C020009D-7D1B5B9B\",PolicyVersion=\"4.00\",PolicySource=\"SMS:P03\"";
AssignmentSource = "SMS:P03";
AssignmentVersion = "4.00";
};

SELECT TOP 1000 [PolicyID]
,[PADBID]
,[PolicyAssignmentID]
,[OfferID]
,[PkgID]
,[ProgramName]
,[OfferCRC]
,[PkgCRC]
,[ProgramCRC]
,[ProviderVersion]
,[ParentPolicyID]
,[DepSourceID]
FROM [dbo].[SoftwarePolicy]
where PolicyID like '%C0220033%'

Advertisment - PackageID -xxxxxxx

This query will help you find the offending program and now you can find the offending program

SCCM 2007 Performance Considerations

2011-05-18T11:37:00.023-05:00

Many times in the forum you will see administrators ask how to setup their hard disk arrays for best performance with SCCM. While this is not approached directly in the ConfigMgr documenation it is understood that you should always install the Configuration Manager application on a different drive than your OS. With that in mind, Microsoft has a document that will help with performance considerations for sites between 10,000 and 200,000 machines. If you are running a site less than 1,000 machines you could easily install everything on one drive and not see performance degredation but I would not consider is a best practice.

What is great about this document is the detailed information on Volumes, Raid type and number of disks.

10k clients (Single machine) Configuration
Site Server / management point:
* 2x2 Xeon @ 3 GHz
* 4GB RAM
* SAS write back / read ahead cache (with battery backup) options for all volumes

Volume	Purpose	RAID Type	# of Disks
1	Operating System/SQL Server Temp Database	RAID 1	2
2	Configuration Manager 2007 installation files and SQL Server site database	RAID 1	2

This document and other valuable White papers can be found here:
http://www.microsoft.com/systemcenter/en/us/configuration-manager/cm-white-papers.aspx

Exact white paper:
Configuration Manager 2007: Sample Configurations and Common Performance Questions

Please note that the document was created in July 2008 but still contains valuabe information that can be used today! Microsoft cannot keep up with every change in Disk and CPU technology so please adjust as necessary. For this reason Microsoft cannot recommend how to setup every different enviroment because there is no way of knowing the performance of your hardware.

Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1 as supported platforms for Configuration Manager 2007 Service Pack 2

2011-03-29T18:54:00.001-05:00

Looks like Microsoft is set approve the use of Sp1 for 2008 R2 and Win7. There is a hotfix that needs to be installed.

http://support.microsoft.com/kb/2489044/en-us?sd=rss&spid=12769

Hopefully no one jumped the gun and installed Sp1 in their enviroment before it was certified by the ConfigMgr group. As a general rule when something new comes out you should look to MS for their 45 to 90 day rule of testing. Once they says it works then you can install/upgrade. This goes for SQL versions.

Running this hotfix on your site systems will add the capabilities you desire. There were problems with this site earlier in the day so keep trying if you have a problem. Many people are dowloading it I bet

MMS 2011 session Listing

2011-01-05T20:03:00.002-06:00

MMS session listing is up and running:
http://www.mms-2011.com/Topic/List

This morning they had 73, tonight they have 86. There are more sessions added all the time. Look for the list to be complete by the end of the month. Keep checking back for your favorite presenter or topic. You will notice that v.Next is now Configuration Manager 2012 so you might see both titles in the session listing. This is because it was given a formal name after the sessions had been submited.

Flash upgrade errors

2010-12-22T18:02:00.006-06:00

Sometimes the simplest of programs can cause the biggest problems. On a few machines we keep seeing that Flash fails to install. If we login to the machine and install the update via the Web then it will install and report correctly in the browser. I have found that it creates another problem. The MSI that is used to distribute Flash is smart enough to know that there is a problem. On several machines the MSI install log looks like this

--------------------
MSI (s) (5C:64) [10:12:06:420]: Product: Adobe Flash Player 10 ActiveX -- Configuration failed.

Another version of this product is already installed. Installation of this version cannot continue. To configure or remove the existing version of this product, use Add/Remove Programs on the Control Panel.
{95468B00-C081-4B27-AC96-0A2A31359E60}
--------------------
If you look at Add/Remove programs of the client or if you look at the Resource Explorer of the console you will see a problem:

Here is you see there are multiple versions of Flash installed. To correct this problem we need to remove all copies of Flash from the registry and then allow ConfigMgr to install Flash.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{24762012-C6C8-4AAD-A02D-71A009FA1683}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6815FCDD-401D-481E-BA88-31B4754C2B46}

Once all the other versions are removed from the registry the advertisment will try again and it will install. The problem on the client side is that it says it cannot remote the previous version of flash. Something happens at the install that it leaves the older version then at one point the newest version wants to uninstall the old version and it fails. Instead of installing the newest version it fails and then the admin needs to fix the problem. I have had limited success with the Flash uninstaller and trying to remove Flash from Add remove programs doesn’t seem to work.

Many times on reports it only shows one version of flash but looking at Add/remove on the client and in the console we can see multiple because the GUIDS for each application are different.

Now that all the problematic versions are remove it should install flash and show up in the reports correctly

Forefront Endpoint Protection 2010!

2010-12-16T20:26:00.002-06:00

It's here FEP 2010 is now RTM!

Microsoft Volume Licensing Service Center (VLSC) starting Jan. 1, 2010. It is already on Technet and trial versions are out for you to try. This has been a year in the making and looks to be a good addition to Configuration Manager 2007. Now you have secure the desktop right from ConfigMgr (SCCM).

Read the full Annoucment here:

http://blogs.technet.com/b/forefront/archive/2010/12/16/announcing-forefront-endpoint-protection-2010.aspx

SQL 2008 SP2 Support

2010-12-09T06:59:00.002-06:00

I am sure many people have all been using it but it is now official that SQL 2008 SP2 is now supported on ConfigMgr 2007. According to Harini Muralidharan, Microsoft statement:

"System Center Configuration Manager 2007 SP1, SP2 and R2 now support Microsoft SQL Server 2008 SP2 as a Configuration Manager 2007 site database. The site system role of Reporting Services Point and the client status reporting feature of System Center Configuration Manager 2007 R2 are supported."

No updates are required to use it.

That being said many times people assume that they can just jump to the latest version of SQL or server platform. This is not always the case. The different product groups must test the new platforms to make sure they work correctly and stable with SCCM. Manytimes there might be a patch that needs to be install or a hotfix. As a general rule you can expect a notification from Microsoft no less than 90 Days after something like this happens. So while you can install it in your test enviroment you really should way the 90+ days for the product group to OK it. This will cause less Support calls to Microsoft and problems in your hiearchy.

MMS 2011 Prediction

2010-11-30T19:54:00.002-06:00

Well based on the schedule for MMS 2011, I would expect to see the session list in the next 2 weeks. I am always excited to see who is presenting and the topics. There is always something new to learn. This time around there should be even more information on ConfigMgr 2011.

Configuration Manager 2012 Beta 2 TAP Nominations Now Open

2010-11-12T16:52:00.003-06:00

Beta 2 for ConfigMgr 2012 (V.next) is now officially open.

http://blogs.technet.com/b/systemcenter/archive/2010/11/09/configuration-manager-2012-beta-2-tap-nominations-now-open.aspx

This is pretty important because it names the application and gives the community an idea of when the platform will be available.

http://blogs.technet.com/b/systemcenter/archive/2010/11/09/announcing-configuration-manager-v-next-official-name.aspx

2010-11-02T21:36:00.001-05:00

I was getting tired of some of the problems with the Java core.zip install failure so I came up with this script. It isn't pretty but it does work to install or fix a machine that currently messed up. Test it, use at your own risk

------------------------


'On Error Resume Next
Dim WshShell, strKeyPath
dim filesys, demofolder
set WshShell = WScript.CreateObject("WScript.Shell")
set filesys = CreateObject ("Scripting.FileSystemObject")

Installed=0 ' I haven't installed Java correctly yet
'determine if this is a 64bit machine
Set Wmi = GetObject("winmgmts:\\.\root\CIMV2")
Set Col = Wmi.ExecQuery("SELECT * FROM Win32_Processor")
For Each Obj in Col
MachineType= Obj.AddressWidth
next


'''Install Java Loop
Do Until Installed=1

'Install Java
WshShell.run("msiexec /i jre1.6.0_22.msi /qb IEXPLORER=1 MOZILLA=1 REBOOT=Suppress JAVAUPDATE=0"), 0, True

'check to see if it installed correctly


if filesys.FileExists("c:\Program Files\Java\jre6\Core.zip") then
FixJava(MachineType)
elseif filesys.FileExists("c:\Program Files (x86)\Java\jre6\core.zip") then
FixJava(MachineType)
else
Installed=1
end if
Loop

Sub FixJava(MachineType)


if MachineType=32 then

'''''''''x86 runtime

''delete the registry entries FOR X86

strKeyPath = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F83216022FF}\"
WshShell.RegDelete strKeyPath

strKeyPath = "HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Web Start\1.6.0_22\"
WshShell.RegDelete strKeyPath

strKeyPath = "HKEY_CLASSES_ROOT\Installer\Products\4EA42A62D9304AC4784BF238120622FF\SourceList\Net\"
WshShell.RegDelete strKeyPath

strKeyPath = "HKEY_CLASSES_ROOT\Installer\Products\4EA42A62D9304AC4784BF238120622FF\sourceList\Media\"
WshShell.RegDelete strKeyPath

strKeyPath = "HKEY_CLASSES_ROOT\Installer\Products\4EA42A62D9304AC4784BF238120622FF\SourceList\"
WshShell.RegDelete strKeyPath

strKeyPath = "HKEY_CLASSES_ROOT\Installer\Products\4EA42A62D9304AC4784BF238120622FF\"
WshShell.RegDelete strKeyPath

set demofolder = filesys.GetFolder("Program Files\Java\")
demofolder.Delete


end if

if MachineType=64 then
'''''''''''''''x64 runtime
strKeyPath = "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F83216022FF}\"
WshShell.RegDelete strKeyPath

strKeyPath = "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\JavaSoft\Java Web Start\1.6.0_22\"
WshShell.RegDelete strKeyPath

strKeyPath = "HKEY_CLASSES_ROOT\Installer\Products\4EA42A62D9304AC4784BF238120622FF\SourceList\Net\"
WshShell.RegDelete strKeyPath

strKeyPath = "HKEY_CLASSES_ROOT\Installer\Products\4EA42A62D9304AC4784BF238120622FF\sourceList\Media\"
WshShell.RegDelete strKeyPath

strKeyPath = "HKEY_CLASSES_ROOT\Installer\Products\4EA42A62D9304AC4784BF238120622FF\SourceList\"
WshShell.RegDelete strKeyPath

strKeyPath = "HKEY_CLASSES_ROOT\Installer\Products\4EA42A62D9304AC4784BF238120622FF\"
WshShell.RegDelete strKeyPath

set demofolder = filesys.GetFolder("c:\program files (x86)\java")
demofolder.Delete
End if


End Sub

--------------------

32bit Java install for vista / Win 7

2010-10-21T05:35:00.004-05:00

There are 2 flavors of Java a 64bit version and 32bit version. Depending on your machines you may need to install both. We run the 64bit version of Win7 for our enviroment. There seems to be a problem with the installer when installing 32bit version, I don't know the exact cause but the end result is such.

When you deploy the .EXE to the Vista/Win 7 machines the Java install folder is left with a Core.zip file and the error you will recieve will either be "unable to extract Core.zip file" or The Status message may return with a sucessfull install even though it didn't complete. If you go to the Java website it will test your machine and tell you that Java is installed correctly. This is because the registry entries are there but the install didn't complete. If you try to vist a site that requires Java the Browser generally will crash.

How to Fix and Deploy Java

Normal Deployent:

jre-6u22-windows-i586.exe ADDLOCAL=ALL IEXPLORER=1 NETSCAPE=1 MOZILLA=1 JAVAUPDATE=0 /quiet

Modified Deployment:

Start by performing a standard install on a machine. Then depending on which OS you ran it on you can copy the install folder off the machine. The install files are generic so they will work on any OS. You don't need to repeat the install on a different OS.

Vista /Win7

C:\Users\UserNAME\AppData\LocalLow\Sun\Java

XP
C:\Documents and Settings\UserNAME\Application Data\Sun\Java\[java version]

Here you will find the installer folder with the MSI and files necessary to install. You will need the full contents of the folder, not just the MSI. Copy this folder out and use it to install. Then the command line will be MSI based. You can use this for XP also but I found that with XP the .exe installer works fine.

This MSI install should work fine for your Vista or Win7 machines.

Note: I haven't had any problems with the Java 64bit version installer so you can use the .EXE to deploy that version.

System Center Configuration Manager 2007 R3 Released

2010-10-15T12:19:00.002-05:00

ConfigMgr R3 is now RTM. Go down to your corner Sofware Assurance store and pick it up. Really it might take a week to filter to the different SA websites for your Company, State, or Federal website. Hopefully you have already been reading up. If not here is the information:

http://blogs.technet.com/b/systemcenter/archive/2010/10/14/system-center-configuration-manager-2007-r3-unleashed.aspx

Registration for MMS 2011 is now open

2010-10-07T18:14:00.001-05:00

Get over to http://www.mms-2011.com "You Empowered." and register for MMS 2011. Rooms can go fast so hurry up!

Configuration Manager R3

2010-10-03T15:52:00.005-05:00

Get the jump on everyone and order the latest book about SCCM 2007 R3: System Center Configuration Manager 2007 R3 Complete

The paper back is listed as:37.79 but this is a pre-order so it currently isn't released yet.

ISBN-10: 1435456505 | ISBN-13: 9781435456501
880 Pages Paperbound
Available in January 2011 according to the publisher
Available in November 2010 according to Barns and Noble

MMS 2011 Call for Sessions

2010-09-23T18:50:00.003-05:00

Call for Session topics is now public. If you ever wanted to present at MMS here is your chance! There is no telling what might be selected or not so make your topic interesting that could fill a room. Maybe it is an introduction to a topic or a deep dive. Everything is needed. "Real World" experiences are the greatest draws because the audience can relate to you.

If you are selected then you will recieve the following accomodations:

Free speaker registration for the event
4 nights’ hotel accommodation during the event
Access to the on-site speaker lounge at the event
An opportunity to take Speaker Training on-site with top professional speaker coach Richard Klees

Content Goals
We are seeking session topics from Industry speakers which cover:

Real-world experience in the Windows management space
Best practices developed through actual deployments
Tips and tricks developed from real life experience

Session Format & Content
All Session slots will be 75 minutes, and should be pitched at a 300-400 (technical to deep technical) level for this audience. Live demonstrations are strongly encouraged.

The “Call for Sessions” entry page is located here https://www.mms-2011.com/CFT
The closing date for topic proposals from all speakers is midnight PST on November 24th 2010.

If you have a colleague or Industry contact who is interested in speaking at the event, please ask them to send email to mmsqs@microsoft.com. They will be sent a New Industry Speaker Access Code.

You can register for the event and if you are selected to be a speaker there is a process by which you can go through to receive a refund of your registration fee.

App-v Quicktime 7.68.75.0

2010-09-22T17:38:00.002-05:00

Every few months Apple releases a new Quicktime due to patches or feature changes. Back in 7.5 or 7.6.0 Apple required the "Apple Application Support" program to be installed. This wasn't a major problem but it did make create a App-v version a bit longer to create.

Well with this latest version came new pains. Virtualizing with Client 4.6 was a breeze. Testing the program and plugin worked fine. You still need to remember to use the "Add Application" and put in a shortcut for IE so you can have the Quicktime plugin active in that version of IE.

With this version the IE plugin didn't seem to worked on XP but did work on Win7. Virtualizing it different ways didn't remove the problem, "It would work fine on the Sequencer but not on the deployment test machine".

Each time you tried to view a Quicktime movie in IE the following problem would appear.
Quicktime failed to initialize. Error # 0.
Please make sure Quicktime is properly installed on this computer

After discussing it in the forums for a bit someone else figured out the problem.
It appears how XP and Quicktime handle the need for a file folder. Granted "Apple Application Support" was installed and the folder was in the package but the application was looking for "C:\Program Files\Common Files\Apple\Apple Application Support" and it wasn't going to look at the virtual one.

To solve this problem with XP you can do one of two things. Either create the physical folder for the use or allow App-V do it for you. The folder doesn't do anything but serve as a place holder and the rest of the application will use the virtual version.

If the users don't have adminstraive privs on XP then you will pass down a command to create the folder.

If the users do have administrative privs on XP then allow App-v to do it for you.
Open the OSD file for Internet Explorer and add this text:

<dependency>
<clientversion version="4.6.0.0">
<script event="LAUNCH" protect="FALSE" timing="PRE" wait="TRUE">
<scriptbody>MD "C:\Program Files\Common Files\Apple\Apple Application Support"</scriptbody>
</script>
</dependency>

You could also use the cmd.exe to start the command if you like.

MMS 2011 Content Survey

2010-09-15T13:40:00.002-05:00

The Content survey for MMS 2011 is live. http://www.mms-2011.com/default.aspx
This is your chance to choose what kind of topics will appear at MMS and how it will be focused.

This year you could win a prize for filling out the survey

"When the survey closes on Wednesday, November 24th, 2010, we will draw two entries from amongst the responses and will send a Portable Media Player to those respondents. If you would like to be entered for this draw, simply enter your email address in the text box below. Supplied email addresses will only be used for the purposes of winner notification and will not be stored or used in any other way."

VNext Beta 1 VHD now available

2010-08-18T09:22:00.001-05:00

I don't have much time due to pressing issues but you can now look/play/test Configuration Manager Vnext in VHD form

http://blogs.technet.com/b/systemcenter/archive/2010/08/18/configuration-manager-v-next-beta-1-now-on-vhd-test-drive-program.aspx

myITforum.com Poll: System Center Certification

2010-08-04T17:45:00.002-05:00

We need your help filling out this poll.

http://www.myitforum.com/absolutenm/templates/site.aspx?articleid=19149&zoneid=120

We are trying to get informaiton on what System Center Certifications admins have

Blog about Configuration Manager VNext and win!

2010-07-30T21:19:00.003-05:00

Microsoft is offering prizes for blogging about ConfigMgr Vnext.

"Each month, you will have a chance to win an exclusive System Center branded high-def Flip-Mino 2nd Generation camcorder, which will enable you to easily create and post videos to any website. In addition, each monthly winner will be entered into a drawing at the end of the competition for a pass to the Microsoft Management Summit for 2011."

http://www.microsoft.com/systemcenter/en/us/configuration-manager/cm-contest.aspx

Configmgr VHD R2 refresh

2010-07-22T17:19:00.001-05:00

The VHD for ConfigMgr R2 has been refreshed (7/22/10)
http://www.microsoft.com/downloads/details.aspx?FamilyID=e0fadab7-0620-481d-a8b6-070001727c56&displaylang=en

It will expire November 26, 2011.

Windows Intune

2010-07-18T21:29:00.004-05:00

For those that are familiar with the Cloud Computing innovative, Microsoft is placing the ability to manage a computer into the cloud. Much like Configuration Manager but in the cloud. Now Microsoft can handle your hardware and you can work on the managment side. This is nice for the company that has 50 people and they are in 3 different cities. No longer do you need to setup a System Center Essentials server or use another program that requires servers and licenses you might need. With Intune you can manage the machines from anywhere. This is great for the small companies or consultants that need to manage several small companies

http://www.microsoft.com/online/windows-intune.mspx

The open Beta #2 was released last week. When the first beta was annouced it filled up in less than a day if I recall correctly. Here is your chance to test drive this nice application. You will need to manage at least 5 machine but you cannot manage more than 25 via this beta.

MMS 2011 call for sessions

2010-07-18T21:15:00.004-05:00

Based on the previous years I would hope to see the call for sessions soon. Because the event will be one month earlier I would expect the call for sessions to be as well. Generally they are open around thanks giving and closed mid December. Then early January you would hear about the results. With MMS in March I would expect that we will hear between the middle of October to the first week in November. I will update this post and my blog as soon as the call goes out. If you have presented before you should receive a private invitation and code that will allow you to re-register. This code is for you and not the general public. Much like the alum registration code, it is strictly for that person and selected group.

I would expect to see many seasons on V.Next and I hope to many familiar faces presenting again. I liked the presentations presented by the Microsoft Product team. It puts a real face with a "group" or "product." Microsoft personnel, while, very busy, are people and approachable. I think the Configuration Manager product group feels like open family. I can't say much about the other product groups because I don't attend other kinds of conferences nor do I interface with them.

Keep up the good work!

ConfigMgr site from Eval to Production

2010-07-15T22:36:00.004-05:00

This question comes up in the forums frequently. Most people ask. I have setup a ConfigMgr server and I like it, how can I move this to production. If you have search the forums and docs then you see many people have done it. Here is the supporting Microsoft Docs
http://technet.microsoft.com/en-us/library/bb693584.aspx

By simply doing an in place upgrade on the site it will pull in your Key and other info and change the site to a production version. It isn't a quick install. Depending on how complex you have setup on the server it might take an hour or more.

I recently ran into this when another IT Admin called me and ask me to look at his site. The server patched at 3AM and when he checked it the next morning there were some errors and the Site wouldn't attach to the database. Well I have seen several errors like this so I headed on over. I looked at the log and found the one error you don't really expect to see in the Event log. "You 180 Evaluation of Configuration Manager has come to an end" It just so happened to have done this just after the patches were installed. So 5 mins to find the problem. About 1 hour or more waiting for the upgrade to occur. The person who had setup the site had left and the current admin didn't know that the site was an Eval. We put in the licensed CD for ConfigMgr and told it to upgrade the site. After a while of watching progress bars the site wanted a restart and then we check and it was all happy. The admin was grateful for my assistance and I admit that this was the first time I personally had ever performed an Eval to production move. I think if I wasn't there he might have formatted and started over. He is just now getting into ConfigMgr and is not an expert, nor is that is only job area. If you don't spend you life in ConfigMgr like I do then you are greatfull to the ones that do.

When the problem looks like the world is coming to an end, ask another IT person, forum, phone, directly. No one can learn unless you ask, and failing is the only way to truly learn. I know I have failed and stumbled many times. It is a part of life and no one should be too proud to say, "I don't know how to do that.". Especially in IT. I had no idea how to do a Pivot table until someone asked me to show them how. I told them I didn't know but I would look it up and figure it out and we can both work on it.

Have a good evening.

Microsoft SQL Server 2008 R2 is now supported on Configuration Manager 2007 SP1 and SP2 and Configuration Manager 2007 R2

2010-07-14T20:30:00.001-05:00

In case you missed the June annoucements from Microsoft regarding Configuration Manager 2007, SQL 2008 R2 is now supported for your enviroment.

http://blogs.technet.com/b/configmgrteam/archive/2010/06/30/configuration-manager-support-announcements-for-june-2010.aspx

User migration for Windows 7

2010-07-14T13:38:00.004-05:00

Recently I tested the Viewfinity user migration tool. There are many ways to do user migration. USMT integrated with ConfigMgr is just one of them and can be performed at the time of imaging. What if you need to do it in a different time span. Back up the files on Thursday and then Deploy the new machine on Monday but no one knows exactly who is getting which computer. The Viewfinity migration tool uses USMT a bit differently, it allows you to set a time frame for the capture and then places that migration in the hands of the users, not the admins. The admins do control what content can be captured and where it it is stored.

I was very impressed with the product. It definitely made profile migration a breeze! It was a big time saver. The Viewfinity User Migration application is great tool with potential to create a seamless and effortless migration of user files and settings between Windows XP and Windows 7. The advantage over other products is the lack of application installation required on the host or target machines as well as the ability to put the time frame for migration of data into the hands of the users.

If you get the chance go over to the website and look at the demo and download a trial version.
http://www.viewfinity.com/Products/UserMigration/Default.aspx

You may see my full review here:
http://www.viewfinity.com/Resources/MVPReviews/MVPMigrationReviewerSummary.pdf

My review was performed as and independent admin/MVP and not as my employeer/company.

Adobe Updates on x64

2010-07-06T07:39:00.003-05:00

I will go back and modify my script on this blog and my http://www.sccm-tools.com/ website later today but I wanted to post because people have asked me about my script and x64 machines.
I have several posts http://sms-hints-tricks.blogspot.com/2009/05/deploy-adobe-acrobat-updates.html on how to deploy the adobe updates in a single VBscript file that makes life easy. Again this for those that don't have an Administrative install point or some other method for patching Adobe.

So you need to check the registry to determine what version of Adobe Reader/Pro is install so you know which patch to install. The problem is the 64bit machines will store this in the Wow64 section since it isn't a 64bit app. Here is the trick for your machine.

By looking in WMI we can determine if the machine is a 32bit machine or 64bit machine. This data is in several places in WMI. Here is just one example.

Adobe 9 Professional
---------------------------------------
Dim objShell, RegLocate
Set objShell = WScript.CreateObject("WScript.Shell")
On error resume next

'determine if this is a 64bit machine

Set Wmi = GetObject("winmgmts:\\.\root\CIMV2")
Set Col = Wmi.ExecQuery("SELECT * FROM Win32_Processor")
For Each Obj in Col
MachineType= Obj.AddressWidth
next

if MachineType=32 then
Dim sngVersion
'''' Adobe 9.0.0
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.0.0" then
objShell.run "msiexec /p AcroPro-std9.1.msp /qb /norestart", 0, True
end if

'''' Adobe 9.1.0
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.1.0" then
objShell.run "msiexec /p Adobe_9.1.2_pro.msp /qb /norestart", 0, True
end if

'''' Adobe 9.1.1
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.1.1" then
objShell.run "msiexec /p Adobe_9.1.2_pro.msp /qb /norestart", 0, True
end if

'''' Adobe 9.1.3
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.1.2" then
objShell.run "msiexec /p AcrobatUpd913_all_incr.msp /qb /norestart", 0, True
end if

'''' Adobe 9.2
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.1.3" then
objShell.run "msiexec /p AcrobatUpd920_all_incr.msp /qb /norestart", 0, True
end if

'''' Adobe 9.2
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.2.0" then
objShell.run "msiexec /p AcrobatUpd930_all_incr.msp /qb /norestart", 0, True
end if

'''' Adobe 9.3.2
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.3.0" then
objShell.run "msiexec /p AcrobatUpd932_all_incr.msp /qb /norestart", 0, True
end if

'''' Adobe 9.3.2
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.3.1" then
objShell.run "msiexec /p AcrobatUpd932_all_incr.msp /qb /norestart", 0, True
end if

'''' Adobe 9.3.3
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.3.2" then
objShell.run "msiexec /p AcrobatUpd933_all_incr.msp /qb /norestart", 0, True
end if

else ' MachineType=64

'''' Adobe 9.0.0
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.0.0" then
objShell.run "msiexec /p AcroPro-std9.1.msp /qb /norestart", 0, True
end if

'''' Adobe 9.1.0
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.1.0" then
objShell.run "msiexec /p Adobe_9.1.2_pro.msp /qb /norestart", 0, True
end if

'''' Adobe 9.1.1
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.1.1" then
objShell.run "msiexec /p Adobe_9.1.2_pro.msp /qb /norestart", 0, True
end if

'''' Adobe 9.1.3
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.1.2" then
objShell.run "msiexec /p AcrobatUpd913_all_incr.msp /qb /norestart", 0, True
end if

'''' Adobe 9.2
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.1.3" then
objShell.run "msiexec /p AcrobatUpd920_all_incr.msp /qb /norestart", 0, True
end if

'''' Adobe 9.2
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.2.0" then
objShell.run "msiexec /p AcrobatUpd930_all_incr.msp /qb /norestart", 0, True
end if

'''' Adobe 9.3.2
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.3.0" then
objShell.run "msiexec /p AcrobatUpd932_all_incr.msp /qb /norestart", 0, True
end if

'''' Adobe 9.3.2
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.3.1" then
objShell.run "msiexec /p AcrobatUpd932_all_incr.msp /qb /norestart", 0, True
end if

'''' Adobe 9.3.3
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.3.2" then
objShell.run "msiexec /p AcrobatUpd933_all_incr.msp /qb /norestart", 0, True
end if
end if
WScript.Quit
------------------------------------------

The nice trick about this is you don't need to create a seperate program or package for the 64bit machines. You simply modify the vbscript/batch/cmd file you use to deploy your application. I admit there are good reasons for seperating this. We have some advertisments that have a program for 64bit and some for 32 but in this instance it is easy to send it all machines and allow the program to determine the best course.

MMS 2011

2010-07-05T19:05:00.002-05:00

It occured to me that we should be hearing about MMS 2011 and such.

Well if you attended last year you hear that is going to Mandalay bay. Well every week since June 1st, I started doing DNS lookups to see if Microsoft has the site up. They do!!!

Mandalay Bay, Las Vegas
March 21 - 25 2011

http://www.mms-2011.com/

Start making plans and if you want to present stay tuned for the public call for sessions.

TechNet MSDN forum email notifications

2010-06-23T19:56:00.004-05:00

If you are upset that you never had a response to a forum post for the last few weeks then you should have received it by now. The problem affected the platform used for MSDN and TechNet it shouldn't have affected Answers.

I knew it was fix sometime late today when my inbox was slowly filling up. It is almost like a mail que back log. About every 20 seconds I receive an email. If you are a heavy posted then I hope you don't have a small inbox. I am slowly looking at each email to see if I need to check the responses for each thread. Many I have been able to stay on top of by viewing my threads via my profile.

Well happy reading everyone. I am sure there are contributers that are a sleep right now and will awake with either a dead mobile device or an inbox that read (300 new messages)!

Topics every Configuration Manager admin should know

2010-06-17T07:38:00.003-05:00

If you are looking at this blog you might an advanced SMS/ConfigMgr admin or you might just be hunting for information as you get more accustom to this product.

http://blogs.technet.com/b/configurationmgr/archive/2010/06/16/documentation-topics-every-configuration-manager-admin-should-know.aspx

You should always read your docs and know what you should do first "look before you leap"

Here are some other good docs to read when getting started.

Prerequisites for Installing Configuration Manager
http://technet.microsoft.com/en-us/library/bb694113.aspx

About Configuration Manager Client Installation Properties
http://technet.microsoft.com/en-us/library/bb680980.aspx

Planning for PXE Initiated Operating System Deployments
http://technet.microsoft.com/en-us/library/bb680753.aspx

Operating System Deployment in Configuration Manager
http://technet.microsoft.com/en-us/library/bb632767.aspx

Step-By-Step Example Deployment of the PKI Certificates Required for Configuration Manager Native Mode: Windows Server 2008 Certification Authority
http://technet.microsoft.com/en-us/library/cc872789.aspx

New blog site for System Center Vnext

2010-06-11T19:58:00.003-05:00

You can never get enough information right.

Check out the blogs and information.

http://systemcentervnext.com/

MMS 2010 DVDs

2010-06-02T19:40:00.002-05:00

Well I received my MMS 2010 DVD in the mail today. Ironically tonight I recieved the email that notified me that they were shipped. Microsoft gets faster and faster. Maybe I live near the distribution center. Hope every receives their DVDs and enjoys them!

Technet Forum Changes

2010-05-11T06:28:00.003-05:00

You might have noticed some changes occuring on the Technet forums. If you are still using SMS 2003 you will now see this forum

Systems Management Server 2003
http://social.technet.microsoft.com/Forums/en-US/sms/threads

Under the Configuration Manager forum.

System Center Configuration Manager 2007 Toolkit V2

2010-05-01T10:16:00.003-05:00

Microsoft has release an update to the popular Configuration Manager Tool Kit. Added to the popular took kit are the following tools:

Delete Group Class, MP Troubleshooter, Preload Package and Send Schedule Tools

These were in the SMS 2003 toolkit but not in the 2007 version. Since the community requested them, Microsoft has delivered. Even while they give tools for ConfigMgr 2007 they are working on V.Next. This release has a nice MSI to make it easy to install and deploy if necessary.

Remember that SMS 2003 Mainstream support has now ended. Users should look at moving to 2007 and then to V.Next. If you're on 2003 the jump to V.NExt might be a bit much. Especially if you will wait for SP1. If you do then you might want to get over to ConfigMgr 2007 Sp2 R2. R3 will be release by the end of the year.

The download can be found here
http://www.microsoft.com/downloads/details.aspx?FamilyID=5a47b972-95d2-46b1-ab14-5d0cbce54eb8&displaylang=en

MMS 2010 Success

2010-04-25T21:05:00.005-05:00

Well all the glitz and glamor of MMS 2010 is over. The MMS will be March 21st - 25th at Mandalay bay. At this last installment we learned about InTune, the cloud computing aspect of Configuration Manager. It will offer a slimmed down version of the popular patching and software distributed model. It will allow admins to pay MS to host the hardware and infrastructure. This is going to make it easy for firms that might be too spread out to leverage infrastructure or better yet, firms that small like 1o to 50 machines in which System Center Essentials is still a bit of an over kill. We saw the next Road Map for the System Center products (ConfigMgr V.Next will come out in H2 2011). Users in the lab were able to play and learn on the beta version of the application. With the quality expressed in the beta I know we have good product for the masses in the next year.

Last year we saw that V.Next will be all 64 bit. This year we learned about the hierarchy changes (the CAS) and other changes Role Based Access Control(RBAC) There are too many new things to discuss it here. I am grateful for MMS. The MVPs have been privy to some of the information for almost 2 years. I have never been on the side of Software Engineering at the Enterprise level as with Configuration Manager. We see the dedication of the product team and what decisions they must make. We saw many changes taken and some delayed. There are 1,000s of requirements and design changes and not everything can make it into the product at the intial release. That is why we must wait for Service Packs and Revisions. Speaking of which they debuted more information about Configuration Manager's R3 and the power management that it will introduce. We should hope to see some cost savings here.

Well my presenation went ok. I didn't have the change to practice as much as I usually do. The car wreck took time and work away from it. There were points I wanted to cover like Collection structure of small to large companies as well as some complex Collections. While many people enjoyed it there were the few that wished I would have slowed down a bit and the demo wasn't as polished as it should have been. To those I say, sorry. Jumping a hill at 70MPH and crashing into ground while unconscience doesn't put a dent into the prep of things. While that was bad some people where able to present or presented late due to the ash cloud so there were some surprises with MMS. Even the weather became so cold that the closing party was moved indoors. I think I will remember this MMS as the one that was a half bubble off plumb but stood the test of time.

MMS 2010 Full

2010-04-14T21:06:00.002-05:00

It should come as no surprise that MMS is sold out. See the Microsoft note here about ways to still register.
http://www.mms-2010.com/public/registrationoverview.aspx

It will be a packed croud. I think my first time has close to 4,000 participants. Even with the large venue like the Venitian it can be cramped between sessions. I have been practicing my session. Let's hope it lives up to everything. With 3 kids, a bad car wreck, medication and just everything else happening I hope it comes out well.

MMS 2010

2010-04-13T07:06:00.002-05:00

MMS 2010 is just around the corner. We expect to see the latest version of ConfigMgr, chat with community experts, attend too many sessions and maybe a few parties. In less than a week it will be in full swing. I am already on edge. My presentation is one of the first for the week. I will land and have about 5 hours to get settled, practice one time, do my tech check and present. I have several other community based chats that I will be involved it.

As a reminder it is always good to step outside your comfort zone so you can meet people and network. While I know many people now through the MVP program, myITforum, the Microsoft forums and simply attending these events I like to find a table that has maybe 1 to 3 people and strike up a conversation. Last year at lunch I sat at a table with 3 french men. Only 1 spoke excellent English so he translated most of the time. I always say "Howdy", I am from the south and graduate of Texas A&M University so it fits right in. Of course I also always wear cowboy boots (even got married in them). Well when you sit down and say Howdy you get some looks. They had a good time asking me about Texas and I had a good time asking them how they were doing. If your going to MMS 2010 hope to see you there.

MMS 2010:Expert Encounters

2010-04-10T00:21:00.002-05:00

If you are familiar with MMS then you know that at the end of each day you can meet with the all the presenters in a round table, which is kinda cool to shoot out questions. A new idea is being added to MMS this year, Experts Encounters. It is a chance to have a mini chat with people from the Community as well as Microsoft Execs about given topics. Hopefully this is a chance to place a name with a face and such. My tenative time slot is set for Tuesday at 12:30 to 1pm. Come hear a little about collections queries and ask questions.

Check out the System Center Blog for more details:

http://blogs.technet.com/systemcenter/archive/2010/04/09/encounter-experts-in-the-mms-2010-community-lounge.aspx

Side note:My full length presentation will be on Monday at 3pm to 4:15pm

Always check your Bios Settings

2010-04-05T18:49:00.004-05:00

The following errors were found in our TS logfile of a brand new out of the box machine.

In SSL, but with no client cert

unknown host (gethostbyname failed)

sending with winhttp failed; 80072ee7

Failed to get client identity (80004005)

As standard practice we boot the machine, modify the time, WOL settings and power settings of the laptop and get to imaging.

For this particular problem it wasn't the network drivers that needed to be updated in WinPE or anything with the network. The tech kept looking at the client and the image. The twin that came with the machine imaged at the same time with not problems and we have imaged this laptop model several times before. The orginal error was the a Policy couldn't be found for the Task Sequence. I checked the machine and asked the standard questions. Well I could jump to a command prompt and see the ip address and ping back and forth from the server. Hmmm what could be the issue. Well I was scrolling throught the log above and couldn't make out the problems. Upon checking the ipconfig /all data I saw that the lease expires on Dec 26, 2009.

Well that struck me as odd!!! Looked at the log...wrong date there. It just happened that the OSD Certificate (Native mode) was create on Dec 1, 2010. So since the date was before this certificate existed it couldn't be found. Rebooted, changed the date in the bios and we imaged the machine. The Tech's response, "That is why you're the MVP." Not I just looked at the one thing you assume is always correct.

Ask the MVPS and MS Product group

2010-03-05T18:16:00.002-06:00

Do you want to get a head start on ConfigMgr V.Next? Well if you attend MMS 2010 you might get to do just that! In the Session you will be able to interact with some of the MVPs as well as parts of the ConfigMgr team. This is the same team that we, the MVPs interact with. Get the info from the source! I recommend that you take a look at this if you want the jump on the next version.

Session Info:
Configuration Manager v.Next - Ask the Panel of Experts Thursday, April 22 5:30 PM - 6:30 PM, Veronese 2404-2506
OK - so, you've attended all the breakouts on ConfigMgr v.Next and completed all the hands-labs. Now you know the "what" of ConfigMgr v.Next. How about getting a chance to learn the "how" and "why" of ConfigMgr? We've assembled a panel of engineering leadership from the ConfigMgr team, along with a few key MVP's, to really answer your questions about the "how's" and "why's" of ConfigMgr. To help tee it up we are using some social avenues to hear from you. Either email a question to the session moderator (jeffwe@microsoft.com) or simply tweet a question using the hashtag #MMSEA01. Even if you don't have a question - come join us to hear these so-called "experts" answer the tough questions and provide insights into the product and strategies for ConfigMgr.

MMS 2010

2010-02-16T21:30:00.002-06:00

I received my date and time for my session 4/19 at 3:00 - 4:15. I arrive at 8:33 so I need to book it to the hotel, change, practice, check my Virtual enviroment and present. I might have the chance to practice it 1 time. since everyone is arriving we will see how many people will be attending. Dates and times may change as people register. I have had my session moved due to the number of people registering.

Well I am at the MVP summit talking about ConfigMgr v.Next. Very fun. That is about all I can say due to the NDA.

ConfigMgr Superflows Released

2010-02-11T21:09:00.002-06:00

Superflows are pumped up flowcharts to help admins follow a proceedure or course inside of Configuration Manager 2007.

Main Linkhttp://technet.microsoft.com/en-us/library/ff385001.aspx

SuperFlow for Creating SQL Server Reporting Services Report Models in Configuration Manager 2007
SuperFlow for Configuring Software Updates
Software Update Deployment SuperFlow
Software Updates Synchronization SuperFlow

It is the hope of the community and Microsoft that these will help you understand/implement/and deploy ConfigMgr better.

Collections Based on Metered Data

2010-02-08T18:54:00.000-06:00

Software last run more the X days ago
----------------
select distinct SMS_R_System.ResourceId, SMS_R_System.Name from SMS_R_System inner join SMS_G_System_SoftwareUsageData on SMS_G_System_SoftwareUsageData.ResourceID = SMS_R_System.ResourceId where SMS_G_System_SoftwareUsageData.FileName = "sol.exe" and SMS_G_System_SoftwareUsageData.StartTimeLocal > DateAdd(dd,-6,GetDate())

Software NOT run in x days
-----------------
select distinct SMS_R_System.ResourceId, SMS_R_System.Name from SMS_R_System where SMS_R_System.ResourceId not in (select distinct SMS_R_System.ResourceId from SMS_R_System inner join SMS_G_System_SoftwareUsageData on SMS_G_System_SoftwareUsageData.ResourceID = SMS_R_System.ResourceId where SMS_G_System_SoftwareUsageData.FileName = "sol.exe" and SMS_G_System_SoftwareUsageData.StartTimeLocal > DateAdd(dd,-6,GetDate()))

Win 7 clients for SMS 2003

2010-02-02T07:01:00.000-06:00

Microsoft has added support for Win7 and Server 2008 R2 clients in SMS 2003 SP3.

More information can be found here
http://support.microsoft.com/?kbid=974014

This should be used as a stepping stone as people move from SMS 2003 to SCCM 2007 or even V.Next due out sometime next year. Since main stream support has ended I would recommend people look at moving not just because support has ended but because the added benifits that are in 2007 Sp2 R2.

If you intend on staying with 2003 and jump 2007 then I would recommend that you download the ConfigMgr 2007 R2 VHD http://www.microsoft.com/downloads/details.aspx?FamilyID=e0fadab7-0620-481d-a8b6-070001727c56&displaylang=en

to play with and see how it all works so you will be better prepaired for the next version.

MMS 2010 Sesions list has been posted

2010-02-01T15:42:00.004-06:00

For those looking at attenting MMS 2010 the sessions have now been posted. This list might change as more speakers accept or decline the offer. Expect to see dates/times by mid Feburary. You may use the drop down menu or simply download the latest PDF file to see all the sessions.

http://www.mms-2010.com/public/sessions.aspx

Mainstream Support for SMS 2003 ends 1/10

2010-01-03T07:11:00.002-06:00

Well, 1 week from today mainstream support for SMS 2003 ends. This means no more hotfixes or Design Request changes. It is time to move forward to ConfigMgr 2007. If you really don't want to move at this point you could hold out to some time in 2011 for the lastest ConfigMgr but you will be missing some great opportunities for your hierarchy. ConfigMgr 2007 R3 should be out in the next few months and this extends the product once again. This is also the first R3 release for any Microsoft product.

Configuration Manager MVP for 2010

2010-01-03T06:59:00.002-06:00

Microsoft saw fit to award me as a MVP again. This will be my second year. Thank you Microsoft for the great opportunities that come as a MVP. Hopefully I doing some good out there for everyone.

This program is currently not available

2009-12-07T21:01:00.002-06:00

Have you ever seen this error when you have a non-manditory advertisment? It could be to several reasons. If you have a chain of programs it could be that one requires the no one be logged on or maybe that you have it disabled. Check the settings for each program or remove the chain and run just the first program and see if it downlaods and runs.

Adobe reader virtual and Pro

2009-12-04T17:42:00.001-06:00

We have an environment where some machines are running Adobe Pro 7 and Adobe Pro 6. More often than not some run into a PDF they can’t open so the must use the Reader 9. Well in a test to see how a virtual Reader would act, this is what I found.

Reader virtual was installed First
Pro 7 is then installed.

As expected when Reader was installed any PDF you click on opens Adobe Reader virtual. A link in the web browser will launch the external PDF viewer since IE wasn’t sequenced with it.

When Pro 7 is installed the Default PDF behavior is shift to the Pro, as expected. Any PDF opened will open in pro.
Interestingly enough if you want to force Adobe Reader as the default behavior you can right click a PDF select “open with” then select “Application virtualization client” Always open with this.

Then when you click a PDF app-v will check and use the appropriate application but if you click on a PDF link in a browser window it will open with PDF pro since it can see the app-v settings. I am sure I can trick the browser by why bother. In the rare case you can’t open the PDF, or if it is very slow, you can simply download and open it by double clicking which will open it with the Virtual Reader.

There is no real reason to run these virtually or physically together other than the face that 6 and 7 are old. Machines that have Adobe 8 pro and Adobe 9 pro are just fine.

Java Collection that contains only java 1.6

2009-11-27T17:21:00.001-06:00

A user on the MS forums was looking for a collection that contained computers with only Java 1.6 installed and not both 1.6 and 1.5. So here is a collection to do just that:

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName like "Java(TM) 6%" and SMS_G_System_COMPUTER_SYSTEM.Name not in (select distinct SMS_G_System_COMPUTER_SYSTEM.Name from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName like "Java(TM) 5%")

SP upgrade error

2009-11-24T19:51:00.002-06:00

I upgraded to SP2 over the weekend. I didn't uninstall the MP nor did I uninstall WAIK before I began. Those objects upgraded with zero problems. The only problem I encountered was at the very beginning when you choose your download location for the updates.

Every time I choose the download folder it was state:
"component manifest was not found or it was invalid"

Well I simply moved the
ConfigMgr.manifest.cab
ccmsetup.cab
to a new folder and tried again. This time it downloaded and start the install.

I cannot say how long it took, but It wasn't several hours. I minimized the window and read the Sunday paper. When I returned it was pretty much done upgrading.

A restart wasn't required but I did it anyway since I like to restart after major upgrades and installs to ensure the platform is stable.

Microsoft Cert 071-686

2009-11-19T18:07:00.003-06:00

It looks like I passed the Pro: Windows® 7, Enterprise Desktop Administrator Beta exam.
It still isn't listed on the Microsoft Website. I still have one more exam for Win 7 and I hopefully I will be a MCITP in Win 7.

New KB973499 - A memory leak occurs when many content location requests are received by a site server ConfigMgr 2007 SP1

2009-11-18T18:09:00.000-06:00

A new hotfix is out for ConfigMgr 2007. It has to do with too many requests sent to the MP and a memory leak that may occur. More information can be found at the Micrsosoft configMgr blog

http://blogs.technet.com/configurationmgr/archive/2009/11/16/new-kb973499-a-memory-leak-occurs-when-many-content-location-requests-are-received-by-a-site-server-configmgr-2007-sp1.aspx

Windows 7 Ultimate, commemorative Edition

2009-11-16T08:25:00.003-06:00

Well I received my commemorative copy of Windows 7 today. It is a thanks for beta tests of Win 7. Microsoft also sent me 6 copies of Windows 7 RC DVDS when it was published. Thank you Mircorosft for the generous gift.

Win 7 Cab files for OSD

2009-11-04T19:37:00.001-06:00

For those that inject the drivers into the image of Dell machines, the win 7 cabs are now out

http://www.delltechcenter.com/page/Dell+Business+Client+Operating+System+Deployment+-+The+.CAB+Files

Passed Win 7, 71-685 exam

2009-11-04T17:50:00.003-06:00

Well I received my passing notice for the Win 7, Enterprise Desktop Support Technician beta exam.

We have a Win 7 test machine in our office which I have only played with a little but have been reading all the documentation for Win 7 and all the articles on it. Knowing Vista would help you only a little bit.

MMS 2010 Call for Sessions

2009-10-30T20:04:00.002-05:00

Well MMS is a month earlier this year, it usually falls on my wedding anniversary :(

Well call for sessions is now open!!!

https://www.mms-2010.com/CFT/default.aspx

So not only was I wrong about the day....I was wrong about the month!!!

ConfigMgr Sp2 and R3 Webcast

2009-10-28T19:14:00.001-05:00

Did you want to get in on the ground floor and learn about the changes and advances in Sp2 and R3 here is your chance.

On Tuesday, November 03, 2009 12:00 PM Pacific Time (US & Canada)
TechNet Webcast: Technical Overview: System Center Configuration Manager 2007 SP2 and R3

http://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?EventID=1032428200&EventCategory=4&culture=en-US&CountryCode=US

MMs 2010 Registration

2009-10-27T18:12:00.002-05:00

Registration opens for MMS 2010 on November 3, 2009.

If you want to stay in the Venetian Hotel or with the Palazzo Hotel you need to book early!
If you think you want to present but you still want to attend if you don't then go ahead and register. If you become a presenter then they will credit your registration and hotel fees.

Nov 20th might be close to when the Call for Sessions opens, that is my guess. Just keep watching the mms site: http://www.mms-2010.com/ or the www.myitforum.com pages for more information.

Win 7 day and ConfigMgr Sp2 Day

2009-10-22T08:02:00.004-05:00

Well we know that today is the official release day for Win 7. There is a buzz that today Sp2 for ConfigMgr 2007 (SCCM) will also be release. Since it is still only 6AM over in Redmond, I can assume it won't be pushed to the web for a few more hours. Once it goes live I will add the link to this page.

ConfigMgr SP2
http://www.microsoft.com/downloads/details.aspx?familyid=3318741A-C038-4AB1-852A-E9C13F8A8140&displaylang=en

Quicktime 7.6.4

2009-10-22T08:02:00.000-05:00

If you have deployed Quicktime either virtually or physically you have noticed that Apple slipped in a new application Apple Application Support. I am not quite sure what this application does but it won't work without it now.

When you virtualize Quicktime it will not pull in this new application by default.
While this is run during the sequecing it isn't capture into the virtual file structure. C:\program files\common files\Apple\Apple Application Support

Uninstalling when you don't have an MSI

2009-10-17T15:24:00.000-05:00

Many times you need to remove software from the clients but how do you do that when you installed it using an EXE?

Well the answer is quite simple, msiexe /x {GUID}

Where GUID is pulled from the registry of the client. If you look in the Resource explorer of the machine and find the software you want to remove then scroll over to the right it will have the GUID. This can found in the programs Registry settings also.

Lets look at Adobe Air uninstall key:

Adobe Air:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{00203668-8170-44A0-BE44-B632FA4D780F}

Uninstall string:MsiExec.exe /I{00203668-8170-44A0-BE44-B632FA4D780F}
------------------------------

Sometimes you can look in the Software section of the program such as for Adobe Reader
HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Acrobat Reader\9.0\Installer
ENU_GUID:{AC76BA86-7AD7-1033-7B44-A91000000001}

Eitherway you now have several ways to find the uninstall method for the application.

It doesn't always work but at least you now have a starting point

Boundaries, Boundaries, Boundaries

2009-10-16T01:29:00.002-05:00

I don't think it is expressed enough how critical boundaries are to your site. I know I have bloged about it before. It happened again that another administrator at my University selected the campus AD as their boundary instead of their AD Site name or something else. This caused all machines in the AD to pull into his All Systems collection (not that he had permisson to perform any action on the machines). I discovered it after Patch Tuesday when machines wouldn't patch or do anything. Now it looks at first that the MP or IIS is just not working correctly. After watching my patch status I could see that "some" of the machines would patch so obviously it was "kinda" working. It then occured to me that I had something similar happen about 6 months ago. On a client I opened the LocationServices.log file and sure enough it was saying that it's MP was xxxx.foo.com instead of aaaa.foo.com. A quick email to the admin and the problem was solved. I went over and showed him some key settings on his site that should be set. Of course it is like drinking water from a fire hose. I showed him key things and points. I think I overwhelmed him more than helped but ConfigMgr is something you need to get into slowly and in our enviroment that means that a single person is managing the entire ConfigMgr enviroment and doing other IT work, making learning slow and hard sometimes.

Both times this happened it was due to a brand new site coming up. It isn't a big deal and easily corrected but this brings home how important proper boundaries are to the site. We had similar issues when parts of the camps were on SMS 2003 as well. I know I saw a quicksetup guide by a ConfigMgr admin and I need to go find it and see where they have boundaries in the list and at what importance level. There needs to be a key set of configuration changes that must be made once the site is online, boundaries should be near the top, if not #1.

I did get a kick out of see the SCCM Unleashed book on his desk, written in part by several MVPs. I finally have my own copy to read. I did notice I am on page 1111 under free tools. That was a surprise to me. I had no idea it was there.

MMS 2010 call for sessions coming soon

2009-10-09T20:54:00.002-05:00

If you are thinking about presenting at MMS 2010 (http://www.mms-2010.com/) you need to start thinking of topics. My prediction is that they will open between the 12 and 19 of November with the cut off date around December 17th. This is only a prediction but should be pretty close. Once they open I will post the link. "Many will enter, few will be chosen" Think about a topic in ConfigMgr that a large group would be interested in and has a high value. It could be a simple or complex topic. Isn't necessary to have a demo during the presentation but it is always nice to break it up.
If you don't feel comfortable about being on stage by yourself then find a partner. They do have a coach there that you can take classes and hopefully improve your stage presence. I speak from personal experience that it can be a bit overwhelming to stand there and see hundreds of your peers staring back. Good luck and happy thinking!!!

Change cache location

2009-10-09T20:45:00.003-05:00

Sometimes you have a cache folder needs to move because of space issues

To do this at install time you need to use the SMSCACHEDIR attribute:
CCMSetup.exe SMSCACHEDIR="D:\sccm\cache"
Will force the client to install the cache folder to the D drive in a new folder

Maybe the client is already installed but you want to change the folder. Here is a VbScript that you can push down to the client. This takes a fraction of a second to run on the client so they are not affected by the change. Be aware that Cache cannot have any advertisment that is active. If so then you can't move the cache.

--------------------------
Dim oUIResourceMgr
Dim oCache
Set oUIResourceMgr = CreateObject("UIResource.UIResourceMgr")
Set oCacheInfo = oUIResourceMgr.GetCacheInfo
oCacheInfo.Location = "D:SCCM\Cache"
-------------------------------------

Uninstall when not in a collection

2009-09-12T06:52:00.002-05:00

Alot of admins would like to uninstall software when the computer is not in a collection. While this thought processes is sound it can't be done. ConfigMgr needs to send policy to machines that are in a certain collection.

So how do we get around this problem.
I want to point back to a blog post I have labeled, "Collections in reverse"
http://sms-hints-tricks.blogspot.com/2009/03/using-collections-in-reverse.html

What I do is simply have a collection of the software I want people to be allowed to have, say Google Earth.
Then I have a collection of people that are NOT in the google earth collection. Now when I place an "approved" machine in the google Earth collection nothing happens since this is a user based install via the web, but the computer is removed from the uninstall collection. Otherwise, the day after they install it the machine would kick off the uninstall.

So you see, you still need to create a collection of computers, in this example we have 2 the approved collection and the Uninstall collection.

Manage Computers via SCCM console

2009-09-09T15:29:00.006-05:00

Have you wanted to manage a machine from the SCCM console only to find there is no tool to do it. So you must lauch Computer Manager and then connect to the remote machine. Well here is the simple right click tool to help you do just that.

<ActionDescription Class="Group" DisplayName="ConfigMgr" MnemonicDisplayName="ConfigMgr Tools" Description="ConfigMgr Tools" SqmDataPoint="100">
<ActionGroups>
<ActionDescription Class="Executable" DisplayName="Computer Management" MnemonicDisplayName="Computer Management" Description="Manage remove computer">
<Executable>
<FilePath>c:\WINDOWS\system32\compmgmt.msc</FilePath>
<Parameters>/computer:\\##SUB:Name##</Parameters>
</Executable>
</ActionDescription>
</ActionGroups>
</ActionDescription>

Place this in the query node, machine node etc and restart the console. Now you can right click on a machine and select Manager Computer. Granted this will only work if your account has the appropriate permissions to the machine.

Configuration Manager 2007 R3

2009-09-08T17:58:00.002-05:00

Yes, Microsoft is releasing a R3 for ConfigMgr. This is the first R3 release in MS history.

Jeff Wettlaufer, Sr. Technical Product Manager, announces it in a blog post:

"Configuration Manager 2007 R3 will release will release as a beta at the end of October 2009, with a targeted release of late Q1 calendar 2010."

http://blogs.technet.com/systemcenter/archive/2009/09/08/announcing-system-center-configuration-manager-2007-r3.aspx

sccm driver pack

2009-09-07T21:01:00.002-05:00

Well as of today Dell has updated some driver files for SCCM.

The Dell Optiplex 760 has a new driver pack (9/4/2009) under Systems Management

What is even better is that some of the models are showing a pack for System Center Configuration Manager. This should make it easier to load and inject drivers into the image. I will see if I can run down the model list and list a few here for you to see.

Microsoft Subnet

2009-09-03T19:22:00.004-05:00

For those of you that aren't aware there is a new blog site in town (at least to me):

Microsoft Subnet

http://www.networkworld.com/subnets/microsoft/

They have some very good articles and insites. There are also contests each month for you to read the blog entries.

Check it out. I think you will like what you see. I do so far!!

MMS 2009 Hands on Lab

2009-09-02T16:13:00.002-05:00

Seems the MS is sending out the Hands on Lab (HOL) DVD again. I just recieved notification that it had been shipped. Much like last year, they can't put the entire HOL session on the DVD because they require Virtual PC but they do have many of the walk thrus so you can do it yourself at home or at work. Very nice work. They don't have to pass this on to us but it is a nice jesture, not to mention nice for those that couldn't or didn't have time to get in to the Lab.

SMS Newsgroups

2009-08-25T21:43:00.002-05:00

I hear every so often that "There are no SMS forums or newgroups anymore." Well this is not the case. The SMS newsgroups are alive and still kicking.
If you go here http://technet.microsoft.com/en-us/sms/bb839598.aspx
and click on any of the SMS newsgroups links you are passed to a page that says "Welcome to Microsoft Discussion Groups " but no data is listed. This is partly due to a bad link which hopefully will be corrected soon. In the mean time here is a corrected link to get you o the Admin newsgroup, from there you can move to any of the other newsgroups.

http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.sms.admin

Windows 7 RTM

2009-08-06T20:51:00.002-05:00

Well like most people we already know that in October Windows 7 will be released to the public. I received my official notice from Technet that Windows 7 is available for download via MSDN. Happy production testing. I hope to have several posts about us configurating and deploying it via SCCM to our network when our time comes. I don't think it will be close to Spring break
(March) or christmas 2010. Since we are higher education, we have certain periods of downtime that we can take full advantage of. Much was the same for Office 2007. We deployed it via our christmas break so you left with 2003 and came back to 2007.

SCCM 2007 SP2

2009-08-06T07:29:00.003-05:00

We have all read what Sp2 covers, Server 2008 R2 , SP2 and other options. Well here is everything in a single list and nicely laid out.

http://blogs.technet.com/systemcenter/archive/2009/08/05/configuration-manager-2007-service-pack-2.aspx

Based on the life cycle you can expect Sp2 around Christmas and again here is also mentioned.

SCCM Unleashed

2009-07-22T18:42:00.003-05:00

update note: This is now shipping.....

Seems that Amazon and other places now have a date for publication August 6, 2009 Barnes and Nobel have August 10, 2009. Before it was "around" July 21st." One of the authors is Greg Ramsey a fellow MVP and Dell employee. He is very cool Buck Eye.

http://search.barnesandnoble.com/System-Center-Configuration-Manager/Kerrie-Meyler/e/9780672330230 (Barnes and nobel pre order)
$44.99 Online price(Save 25%) *
$40.49 Member Price*

http://www.amazon.com/gp/product/0672330237?ie=UTF8&tag=sccmtools-20&linkCode=as2&camp=1789&creative=9325&creativeASIN=0672330237 (Amazon Pre order)
$37.79*

* Prices as of July 22, 2009

Microsoft Releases SCAP for ConfigMgr

2009-07-21T18:11:00.002-05:00

I received an email from Micrsoft announcing that SCAP was complete and ready for download.
Below is the link
http://technet.microsoft.com/en-us/library/cc677271.aspx

Security Content Automation Protocol (SCAP) is the program designed to help protect your system through checks with NIST and vulernabilities.
http://scap.nist.gov

With SCAP you can ensure that your machines are secure per the Federal Desktop Core Configuration (FDCC) mandate. Even if you are not a Government entity it is still good to use this because it can check for possible security problems and will help you lock down your machines. I beta test this...very impressive...I am hoping some of the changes were made to the applicaiton to fully take use of the vulnerability scanning. With this your server could download the latest vulnerabilities and scan your network and let you know if you have a hole (i.e. Word zero day hole, Mozilla hole, etc.)

MMS 2010

2009-07-20T20:41:00.003-05:00

The Microsoft Management Summit is the top conference for IT management. I highly recommend it!! Here is the "save the date" site. Look to this site in the future for more information.

http://www.mms-2010.com/

I have presented twice and I am still in awe of the number of people and knowledge at this event. Think of all that brain power in a single building.

Right click Status Messages

2009-06-27T09:18:00.005-05:00

I received a nice email from Robert Mitsch about my status messages right click tool. Back in the days of SMS 2003 in late 2005 I had tried to work with the statview.exe application for the status messages but didn't have the time nor could I find some good documentation so I just kept it the way it was with statusmessages.exe. Well he has it working with statview. Shown below is the new method. The differences are as follows:
1. No longer to you need to select server and hit enter
2. Messages no longer pull ALL messages in. This caused problems sometimes. It now pulls in around 1 month of messages.

<filepath>C:\xxxxxxx\AdminUI\bin\i386\statview.exe</filepath>
<parameters>/SMS:Server=\\##SUB:__Server## /SMS:Path=##SUB:__Namespace## /SMS:System=##SUB:Name##</parameters>

Changes will be made here on SCCM Tools website
http://www.sccm-tools.com/tools/rightclick/rightclick-statusmessages.html

and on my original blog post
http://sms-hints-tricks.blogspot.com/2008/06/right-click-tool-status-messages.html

Removing registry keys with Regedit

2009-06-08T19:21:00.002-05:00

Many times working with sccm we need to push out registry keys which is easy with a .reg file and regedit...."regedit /s key.reg" This adds all your keys to the registry and is very quick at it.

But what if you want to remove keys. Well you can use Vbscript or other lang to edit the registry or you can use a regedit. Yup a special "minus" sign will remove a key or tree.

[HKEY_LOCAL_ MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\xwing]
"key1"="value"
"key2"="value"
"key3"="value"

Say we want to remove the entire tree. We do this by sending the reg file with the following change

[-HKEY_LOCAL_ MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\xwing]

Everything in xwing and sub keys will be deleted.

Now say you want to just delete key2 then you send this
[HKEY_LOCAL_ MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\xwing]
"key2"=-

This will remove only key2 from the registry.

What is nice about this is that it won't throw an error if nothing is there so you can send it down to all machines whether they have the key or not.

MS KB article
http://support.microsoft.com/kb/310516

Deploy Adobe Acrobat Updates

2009-05-25T08:41:00.006-05:00

See an update on deploying patches to x64 machines
http://sms-hints-tricks.blogspot.com/2010/07/adobe-updates-on-x64.html

Every couple of months Adobe will release a patch for their products. If you're like us you might be running several versions of Adobe Acrobat (7,8,9) at the same time.

Depending on how you want to upgrade these software titles determines your approach. At one time we had a collection for each update. As the computer was patched it was inventoried and moved to the next collection. On some machines we might send down a batch file that would force all the patches back on in the hopes that the software knew what had been installed and would skip the older version. Here is the latest way we push down the patch. We have a single collection for Adobe 8,9 Patches. It looks for machines that have adobe 8 but are not at the latest patch level. Now you simply run this vbs script on the collection. The script determines the patch level and applies the appropriate patches.

------Adobe 8--------
Dim objShell, RegLocate
Set objShell = WScript.CreateObject("WScript.Shell")
On error resume next

Dim sngVersion

'''' Adobe 8.0.0
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000003}\DisplayVersion")
if sngVersion="8.0.0" then
objShell.run "msiexec /p AcrobatUpd810_efgj_incr.msp /qb /norestart", 0, True

end if

'''' Adobe 8.1.0
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000003}\DisplayVersion")
if sngVersion="8.1.0" then
objShell.run "msiexec /p AcrobatUpd811_all.msp /qb /norestart", 0, True

end if

'''' Adobe 8.1.1
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000003}\DisplayVersion")
if sngVersion="8.1.1" then
objShell.run "msiexec /p 8.1.2 patch.msp /qb /norestart", 0, True

end if

'''' Adobe 8.1.2
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000003}\DisplayVersion")
if sngVersion="8.1.2" then
objShell.run "msiexec /p AcrobatUpd813_all_incr.msp /qb /norestart", 0, True

end if

'''' Adobe 8.1.3 allows for jumps in patches
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000003}\DisplayVersion")
if sngVersion="8.1.3" then
objShell.run "msiexec /p Adobe_Pro_8.1.6.msp /qb /norestart", 0, True

end if

'''' Adobe 8.1.4 allows for jumps in patches
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000003}\DisplayVersion")
if sngVersion="8.1.4" then
objShell.run "msiexec /p Adobe_Pro_8.1.6.msp /qb /norestart", 0, True

end if

'''' Adobe 8.1.5 allows for jumps in patches
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000003}\DisplayVersion")
if sngVersion="8.1.5" then
objShell.run "msiexec /p Adobe_Pro_8.1.6.msp /qb /norestart", 0, True

end if

'''' Adobe 8.1.7
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000003}\DisplayVersion")
if sngVersion="8.1.6" then
objShell.run "msiexec /p AcrobatUpd817_all_incr.msp /qb /norestart", 0, True

end if

'''' Adobe 8.2
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000003}\DisplayVersion")
if sngVersion="8.1.7" then
objShell.run "msiexec /p AcrobatUpd820_all_incr.msp /qb /norestart", 0, True

end if
-------------------
Adobe Reader 8 updates collection
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName like "%Adobe Acrobat 8%" and SMS_G_System_ADD_REMOVE_PROGRAMS.Version != "8.2.0"

-------------------------------------------------

-----------Adobe Pro 9 updates--------------------------------------
Dim objShell, RegLocate
Set objShell = WScript.CreateObject("WScript.Shell")
On error resume next

Dim sngVersion

'''' Adobe 9.0.0
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.0.0" then
objShell.run "msiexec /p AcroPro-std9.1.msp /qb /norestart", 0, True

end if

'''' Adobe 9.1.0
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.1.0" then
objShell.run "msiexec /p Adobe_9.1.2_pro.msp /qb /norestart", 0, True

end if

'''' Adobe 9.1.1
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.1.1" then
objShell.run "msiexec /p Adobe_9.1.2_pro.msp /qb /norestart", 0, True

end if

'''' Adobe 9.1.3
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.1.2" then
objShell.run "msiexec /p AcrobatUpd913_all_incr.msp /qb /norestart", 0, True

end if

'''' Adobe 9.2
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.1.3" then
objShell.run "msiexec /p AcrobatUpd920_all_incr.msp /qb /norestart", 0, True

end if

'''' Adobe 9.2
sngVersion = objShell.RegRead ("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-1033-0000-7760-000000000004}\DisplayVersion")
if sngVersion="9.2.0" then
objShell.run "msiexec /p AcrobatUpd930_all_incr.msp /qb /norestart", 0, True

end if

WScript.Quit
----------------------------------------------------

Adobe Reader 9 collection
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName like "Adobe Reader 9%" and SMS_G_System_ADD_REMOVE_PROGRAMS.Version != "9.2.0"

What's new with Microsoft?

2009-05-22T19:16:00.002-05:00

Here is some information from the
System Center and Virtualization Readiness Newsletter: May 2009

On-demand Webcasts:

Client Management Bootcamp to launch July 2009

"To help our partners leverage these opportunities, the BG team has developed the System Center Client Management Bootcamp. This training will teach partners how to effectively position, sell and deploy the System Center Client Management Suite to address common customer challenges around client management." Topics include:

· Client virtualization
· Optimized client architecture, planning and deployment
· Deploying and optimizing Windows 7 and Office 14
· How to Deliver a Client Management Suite Proof of Concept
· Service Manager 1-day deep dive

Inventory Certificates

2009-05-10T20:18:00.001-05:00

Ok here is the link to the code to inventory certificates.

http://www.sccm-tools.com/tools/vbscript/vbscript-certificates.html

Inventory Certificates

2009-05-10T00:42:00.002-05:00

Recently we found some Native Mode computers that had expired computer certificates. When this happens the client becomes unhealth and thus stops responding. Until the cert is renewed it will just sit in a dead state. Well instead of working "reactively" I want to be "proactive." Now I have found several differnet reasons for certificate renewal errors which I have document one or more here in my blog. With my latest work with Sherry Kissinger, another MVP in the ConfigMgr area we were able to create a VBscript that would pull the cert data and inject into WMI so it can be pulled at inventory time. Since the expiration date (and count down in days) is pulled a report can be run that will tell you if a computer is getting ready to expire or has already occured.

The only difficult issue is that it relies on Capicom, which some admins don't use. It will attempt to register the dlls so it can inventory. I haven't found a better way to do this. .NET offers some but again you are dependent on an installtion of .NET and some other assemblies. Well hopefully I can have some others confirm this works correctly in their test enviroments. I will then post the code here, link from the original post in the Technet Forums and move it into production.

MMS 2009 Presenation

2009-05-03T08:08:00.002-05:00

So you either went to the session with Greg and me or you have watched it the recording.
I have a tools website that I slow been working on
www.sccm-tools.com

Here are some of the tools that I personally have created:
http://sms-hints-tricks.blogspot.com/2008/06/right-click-tool-status-messages.html
http://www.sccm-tools.com/tools/rightclick/rightclick-clientactions.html
http://www.sccm-tools.com/tools/rightclick/rightclick-Collectionaddcomputers.html

a good way to find tools online is to search with these parameters
"sccm tools"
"right click tools"
"Console extenstions"

MMS 2009

2009-04-30T13:33:00.003-05:00

Well like many ConfigMgr people I am here in Las Vegas at MMS 2009. If you went to the SuperFlow sessions by Steve K then you heard about the newest superflows and when you can expect to see them. He also talked about the MVPs and the superflows they are creating. I have been working for about 4 to 5 weeks with some of the Docs people to setup the outline for a Native Mode Superflow. It might just be the most complex and biggest superflow. To release a good version we scale down what is publised in the first revision. It could take 2 or 3 to have everything published and linked. It think it will provide a great deal of insite to native mode deployment. I personally didn't find native mode very hard to deploy and the benifits are GREAT!!!!

Could the ConfigMgr console put you to sleep?

2009-04-17T08:04:00.002-05:00

Well I am home because my wife is out of town and I have a sick 1 year old. Well he wanted to roam around so I sat down and remoted to my ConfigMgr server. Like all good IT personell, I "volunteer" alot. Well he wanted to be picked up so I placed him on my lap while I ran throuhg logs and status messages. It took about 15 mins before he started to do the head bob and 5 minutes later he was out. Now he has only been up for about 1 hour so either he really needs more sleep or that console is not for children under "5 years of age." We saw at MMS 2008 that even a 5 year old can image machines so I think we need a disclaimer for working with System Center products. Not recommended for childen under the age of 5 years of age. Drowsiness may occur.

SuperFlows

2009-04-14T17:31:00.001-05:00

Stop by the Birds of a Feather (BOF) session at MMS 2009 to hear what is going on with Superflows....

------------------------------
BY05 Configuration Manager SuperFlow Showcase
Tuesday 6:45 PM 7:45 PM, Casanova 606
Speaker(s): Steve Kaczmarek, Doug Eby
Track(s): Systems Management
Session Type: Birds-of-a-Feather
Products(s): Configuration Manager 2007
At this Birds-of-a-feather session we will showcase 6-8 of the newest Configuration Manager SuperFlows currently in development or available for publishing. A SuperFlow is a downloadable interactive content model that provides troubleshooting, process flow and other data flow information in an interactive format. We will also demonstrate an authoring template that can be used to create SuperFlows.

Query to find computers with user missing application

2009-04-13T18:15:00.004-05:00

This is something I did pretty quick, it could easily edited on a computer report

First you need to create a query with no object type (see image) Now paste this into the query editor. You will not be able to use the Query designer for any help. This particular example looks for computers missing a specific Version of Flash. Paired with it are the lasted logged in user, user, title, department. You may need to extened the AD User Discovery as mentioned in a previous blog for title and department information.

-------------------------------------------------------------

select SMS_R_SYSTEM.Name,SMS_R_User.Name,SMS_R_System.LastLogonUserName,SMS_R_System.Name, SMS_G_System_COMPUTER_SYSTEM.UserName,SMS_R_User.title , sms_r_user.department from SMS_R_System
inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId
inner join SMS_R_User on SMS_R_User.Username= SMS_R_System.LastLogonUserName
where SMS_G_System_COMPUTER_SYSTEM.Name not in (select SMS_G_System_COMPUTER_SYSTEM.Name from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName like "%Flash Player%" and SMS_G_System_ADD_REMOVE_PROGRAMS.Version = "10.0.22.87")
--------------------------------------------------------------

Native machine will not pull down computer certificate

2009-03-10T20:00:00.004-05:00

Did you ever have a machine that just won't pull down the Computer certificate? You do everything you can think of and it just doesn't work. When you do a run>MMC.exe and add Certificates to the console then you can right click on personal certificates and request a cert. You might see this error

The certificate request failed because of one of the following conditions:-The request required an exchange certificate from a Certification Authority (CA) that is not started.-You do not have the permissions to request certificates from the available CAs.

if so then you might need to add the EnableDCOM entry to the machine with a value of Y

The EnableDCOM registry entry is located in the following registry subkey:
HKEY_LOCAL_MACHINE\Software\Microsoft\Ole

then restart the machine and wait for GPO to pull down the cert. The client should now be happy again.

http://support.microsoft.com/kb/929494

See this other post on Certificate errors
http://sms-hints-tricks.blogspot.com/2008/02/sccm-client-certificate-problems.html

Using collections in Reverse

2009-03-05T19:36:00.003-06:00

We all know you can create a collection to uninstall software but how about a collection Authorized software. This basically due to Google Earth. We run our computers in a locked down user only mode, so they can't install software. Well Google Earth gets around this by installing to the applications folder and in the profile. Users download it and then never update it so we create a collection to allow only authorized users to keep it. Here is how we did it.

Parent Collection (Computers allowed to run Google Earth)
Child Collection (Query and find every machine that has it not in the parent and uninstall every day.

Parent Collection is based on some queries and some direct memberships. Collection id is SYS00447
Child collection:

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceId = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName = "Google Earth" and ResourceId not in (select ResourceID from SMS_CM_RES_COLL_SYS00447)

The child is limited to All Worstations so I can pull in all the computers and then we use the "not in parent collection ID"

Have fun with it....