New blog started about Endpoint Manager

With the grouping of ConfigMgr, Intune, Co-management, Desktop/Analytics, Device Management and Admin Console under the name "Microsoft Endpoint Manager - I have started a new blog https://endpointmanager.blogspot.com/ to cover my findings with that product.
Please follow me there.

BGInfo to display User Principal Name (UPN)

To make BGInfo display UPN / Logged On Username
(This will display what the user uses as logon name)


Open your *.bgi file
Create a custom field by clicking "Custom.."
In the User Defined Fields dialouge click "New.."
In the Define New Field dialouge enter the following:
Identifier: Logged on Username
Replace Identifier with: Mark "Registry value" and "64-bit registry view"
Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\LastLoggedOnUser

Add your newly created field by marking "Logged on Username" and then click "< - Add"

Prevent desktop shortcut creation for Google Chrome

To prevent Googe Chrome installation to create a dekstop shortcut I needed to do two things:

1. Delete the shortcut created in the public folder
Run command line: Powershell.exe -Command "&{Remove-Item 'C:\Users\Public\Desktop\Google Chrome.lnk'}"

2. Replace the master_preferences file with one that contains the setting "create_all_shortcuts":false
Run commandline: Powershell.exe -Command "&{Copy-Item '.\master_preferences' 'C:\Program Files (x86)\Google\Chrome\Application'}"
(where this step is configured to use a package containing the modified master_preferences file)

Attending Microsoft Ignite in Orlando

This year Microsoft Ignite is held at OCCC in Orlando Florida, I'm there learning about the latest!

Export members of a collection to a .csv file

Go to:
\Monitoring\Overview\Reporting\Reports\Asset Intelligenc\Hardware 01A - Summary of computers in a specific collection
Select a collection and run the report.
The report can then be exported to: Word, Excel, PowerPoint, PDF, TIFF File, MHTML, CSV, XML, Data Feed

Different / New Content ID after application migration

I just recently run into a problem using shared distribution points, some applications would just not download anymore.
After some troubleshooting I found out that the application had different Content ID when I compared the source- and target application.
Then I found this great aticle to explain the issue:

https://blogs.technet.microsoft.com/configurationmgr/2015/09/30/configmgr-2012-support-tip-migrating-an-application-to-a-new-hierarchy-creates-new-content-id/

100 000 visitors!

Today, this site just had it's number 100 000 visitor!
Thank's for visiting!

Built in support in ConfigMgr 1610 to convert from BIOS to UEFI

See these steps on how to convert from BIOS to UEFI in a ConfigMgr 1610 task sequence

https://docs.microsoft.com/en-us/sccm/osd/deploy-use/task-sequence-steps-to-manage-bios-to-uefi-conversion

Microsoft Deployment Toolkit (8443) Now Available

Microsoft Deployment Toolkit (8443) Now Available

https://blogs.technet.microsoft.com/msdeployment/2016/11/14/microsoft-deployment-toolkit-8443-now-available/

Problem with WSUS updates when creating Windows 10 1607 ref image

When I was about to create a new ref-image for Windows 10 1607 I ran into problem when WSUS updates were about to download and install, they were just stuck on "Downloadning".

I got the problem even if the following updates were injected as packages in the beginning of the task sequence.
KB3189866
KB3176936

Found this great information from Michael Niehaus.
https://blogs.technet.microsoft.com/mniehaus/2016/08/16/windows-10-delivery-optimization-and-wsus-take-2/

So I tried with disabling the "Delivery Optimization" service before Windows Update installations and enabled it again before sysprep and capture.
This solved the problem and the updates were downloaded and installed correctly.

Here are the steps added before and after updates installation in the task sequence:

Stop service DoSvc
     Command: sc stop DoSvc
Disable service DoSvc
     Command: sc config DoSvc start= disabled

Windows Update (Pre-Application Installation)

Install Applications

Windows Update (Post-Application Installation)

Enable service DoSvc
     Command: sc config DoSvc start= delayed-auto
Start service DoSvc
     Command: sc start DoSvc

Unknown device hwid ACPI\MSFT0101 on HP EliteBook Folio G1 Notebook PC

Just ran across an issue with an unknown device hwid ACPI\MSFT0101 on HP EliteBook Folio G1 Notebook PC for Windows 7.

The solution was to install Microsoft KB2920188
https://support.microsoft.com/en-us/kb/2920188

Here is the support link from HP
http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c05083992&sp4ts.oid=9764622


I tried this tool to convert from TPM 2.0 to TPM 1.2 but the application failed for me and unfortunately I didn't get it to work properly
http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c05192291&sp4ts.oid=8818661

WSUS app pool becomes unresponsive - ConfigMgr 1511

During a migration with a heavy load of clients being installed in a short period of time at a customer I run into this issue with WSUS app pool becomes unresponsive.

One of the error messages were:
WSUS Control Manager failed to configure proxy settings on WSUS Server

https://blogs.msdn.microsoft.com/the_secure_infrastructure_guy/2015/09/02/windows-server-2012-r2-wsus-issue-clients-cause-the-wsus-app-pool-to-become-unresponsive-with-http-503/

Support for SQL Server versions for System Center Configuration Manager (current branch)

Support for SQL Server versions for System Center Configuration Manager (current branch)


SQL Server 2008 R2 SP3 No minimum cumulative update
Central administration site, Primary site, Secondary site

SQL Server 2012 SP2 No minimum cumulative update
Central administration site, Primary site, Secondary site

SQL Server 2014 SP1 No minimum cumulative update
Central administration site, Primary site, Secondary site

SQL Server 2012 Express SP2 No minimum cumulative update
Secondary site

SQL Server 2014 Express SP1 No minimum cumulative update
Secondary site

Reference:
https://technet.microsoft.com/sv-se/library/mt589592.aspx

New version of CU2 for ConfigMgr 2012 SP2 and ConfigMgr 2012 R2 SP1

Issues were found with the original CU2 release

If you downloaded and installed CU2 before November 13, 2015 and you are experiencing the issues described in the link below, you should download the updated CU2 media and follow the instructions in KB 3118546 to reinstall the Administrator Console patch.

http://blogs.technet.com/b/configmgrteam/archive/2015/11/10/now-available-cu2-for-sc-2012-r2-configmgr-sp1-and-sc-2012-configmgr-sp2.aspx

CU 2 for ConfigMgr 2012 SP2 and ConfigMgr 2012 R2 SP1 released

CU 2 for ConfigMgr 2012 SP2 and ConfigMgr 2012 R2 SP1 released

https://support.microsoft.com/en-us/kb/3100144

Skipping task sequence [Task Sequence ID] because it is not active yet

I have seen this in smsts.log if you just run trough the wizard when deploying a task sequence as "available".
It doesn't seem to matter if you mark the checkbox "Schedule when this deployment will become available" or not. What does seem to help is to set the available time one hour back in time.

MDT 2013 Update 1 re-released

MDT 2013 Update 1 is now re-released but make sure that you get the correct build
(build 8298 is the new one, build 8290 is the old one)

http://blogs.technet.com/b/msdeployment/archive/2015/09/15/mdt-2013-update-1-re-released-build-8298.aspx

Sometimes impossible to right click deployments in ConfigMgr 2012 R2 SP1

Lately I've seen that it sometimes is impossible to right click any deployments on a ConfigMgr 2012 R2 SP1 site, if you for an example would like to delete a deployment or just view properties for it.
Does not seem to matter if the site is upgraded or newly installed (from SP2 media).
The resolution.. Close the Console and reopen it again.

ConfigMgr news at Microsoft Ignite

At Microsoft Ignite held in Chicago this week a technical preview of the next version of ConfigMgr was released, which is planned to have final release in Q4.

Next week service packs to support Windows 10 for ConfigMgr 2012 and ConfigMgr 2012 R2 will be released.

((ConfigMgr 2007 (SP2, R2, and R3) support for managing Windows 10 is coming via a compatibility pack in Q4 (OS and client deployment will not be supported)).


Read more here: http://blogs.technet.com/b/configmgrteam/archive/2015/05/04/announcing-support-for-windows-10-management-with-system-center-configuration-manager.aspx

ConfigMgr agent policies suddenly dissappear

Just recently I ran into a problem at a customer that runs ConfigMgr 2012 SP1 (no CU).
The problem was that after OSD completes the agent recievs all the policies, but after a few minutes they are gone again.. Leaving the client with only Machine policy and User policy actions.
By waiting (45-60 min) usually makes the policies come back again.

Found this forum thread (even though we are not using HTTPS):
https://social.technet.microsoft.com/Forums/en-US/5a82bcb3-4cde-4eb0-a016-5d4f2a60f2d7/pki-client-starts-to-intialize-then-7-minutes-later-client-agents-go-back-to-disabled-for-upwards

The resolution for me was:
1. Either delete the ConfigMgr object and re-create it prior to deploying the operating system to it.
2. Or add the following run-command line at the end of the task sequence (as suggested in the thread)

cmd /c reg add HKLM\Software\Microsoft\CCM /v "UserPolicyReRequestDelay" /t REG_DWORD /d "6000000" /f

IE 10 on Windows 7 SP1

Installing IE 10 on Windows 7 SP1 x64 has these prerequisites:

wusa "Windows6.1-KB2670838-x64.msu" /quiet /norestart
wusa "Windows6.1-KB2533623-x64.msu" /quiet /norestart
wusa "Windows6.1-KB2731771-x64.msu" /quiet /norestart
wusa "Windows6.1-KB2729094-v2-x64.msu" /quiet /norestart
wusa "Windows6.1-KB2786081-x64.msu" /quiet /norestart


https://support.microsoft.com/kb/2818833

Installation log can be found in C:\Windows\IE10_Main.log

CU4 for Configuration Manager 2012 R2

More information can be found here:
http://support.microsoft.com/kb/3026739

Error when installing Adobe CS 5.5 Premium from Application Catalog

Just recently I ran in to some trouble installing Adobe CS 5.5 Premium from the Configuration Manager Application Catalog.
From MSI logging I recieved error: CustomAction CADeploy returned actual error code 1603
But after reviewing the log files created by the Adobe installer in (64-bit) C:\Program Files (x86)\Common Files\Adobe\Installers. I found this line:
ERROR: DW046: Following Conflicting processes were running -
 block:Internet Explorer (iexplore.exe)

So I closed the web-browser (Application Catalog) and the installer ran through and installed without any errors.

TechEd North America 2014

TechEd North America 2014 is on, me and all my company colleagues are here!
Inspiring and fun times!

How to move the content library in ConfigMgr 2012 R2

When you want to move the content library in ConfigMgr 2012 R2 from one drive to another, there is a great tool (ContentLibraryTransfer.exe) included in the System Center 2012 R2 Configuration Manager Toolkit. Which can be downloaded here: http://www.microsoft.com/en-us/download/details.aspx?id=36213

Syntax:
ContentLibraryTransfer.exe –SourceDrive <Current Drive Letter> -TargetDrive <New Drive Letter>

'New-CMOperatingSystemInstaller' powershell cmdlet not working correctly

After using the 'New-CMOperatingSystemInstaller' powershell cmdlet for importing a operating system installer into SCCM 2012 the option 'Distribute content' is grayed out for those installers.

Microsoft have confirmed that the properties are not set properly using powershell and have logged an internal issue on this and are looking at fixing this in a future release. 

The recommendation in the meantime would be to use the UI, or to use WMI to create or modify the properties of that object.

Installing App-v 5.0 sp1 client in a task sequence

When installing the App-v 5.0 SP1 client during a task sequence using the /q switch for silent installation it will give you a exit code 0x68e.

For silent installation you'll need to use both /q and /Accepteula

The correct syntax will be: APPV_CLIENT_SETUP.EXE /Q /ACCEPTEULA

SCCM 2012 R2 - SQL Requirements

Configuration Manager 2012 R2 requires the following SQL versions

SQL Server 2008 SP2 with Cumulative Update 9 or higher
SQL Server 2008 SP3 with Cumulative Update 4 or higher
SQL Server 2008 R2 SP1 with Cumulative Update 6 or higher
SQL Server 2008 R2 SP2 with no Cumulative Update
SQL Server 2012 with Cumulative Update 2 or higher
SQL Server 2012 SP1 with no Cumulative Update

Free ebook:Troubleshooting Configuration Manager

Free ebook: Microsoft System Center: Troubleshooting Configuration Manager
Download from link below:

http://blogs.msdn.com/b/microsoft_press/archive/2013/11/12/free-ebook-microsoft-system-center-troubleshooting-configuration-manager.aspx

Great tool from Sysinternals!

Sysinternals provides a great tool for creating VHD versions of physical disks for use in Microsoft Virtual PC or Microsoft Hyper-V virtual Machines.

More information about Disk2vhd and download can be found here:
http://technet.microsoft.com/en-us/sysinternals/ee656415.aspx

Clients do not update with the latest antimalware definition files after you install the Endpoint Protection point site system role.

Today I ran into this problem:

Clients do not update with the latest antimalware definition files after you install the Endpoint Protection point site system role in System Center 2012 Configuration Manager.

Solution was found in the article below.
http://support.microsoft.com/kb/2688242

OSD Task Sequence Fails with Error 0x80091007

Hash could not be matched for the downloded content
The hash value is not correct. (Error: 80091007; Source: Windows)

This error just occured on one machine and was due to bad memory on the machine.

Default location of Cmtrace.exe in WinPE 4.0

Cmtrace.exe is included in WinPE 4.0 and can be found in X:\SMS\BIN\I386\cmtrace.exe or in X:\SMS\BIN\x64\cmtrace.exe depending on architecture.

Pre-provision BitLocker

When you have upgraded to SCCM 2012 SP1 (and WinPE 4.0) the new task sequence step "Pre-provision BitLocker" will be available to you. This means that encryption will start from WinPE, right after the "Format and Partition" steps and "Set OSDDiskPart" and the result is a much faster encryption process. This applicable to Windows 7 and later operating systems.

Command to load .inf files to a booted WinPE image

To add .inf files to a booted WinPE image run this command:

drvload.exe filename.inf

SMS_DISTRIBUTION_MANAGER Error Message ID: 2302

Recently I started to recieve lots of errors with Message ID: 2302 for the SMS_DISTRIBUTION_MANAGER component after validating a package. The only way to stop this error was to delete the package from the ditribution point and then redistribute it agin.
If I after that tried to validate the package once again, the error came back..
This happens to all my packages if I select "validate package".

After some help from Microsoft, the resolution to this problem was to move a FILE named "Program" (without any file extension) that was located in the root of my E:\ drive to another destination.

Task Sequence problem after SCCM 2007 to SCCM 2012 SP1 migration

Ran into some problem after I had migrated a SCCM 2007 site to SCCM 2012 SP1

When running the Task Sequence I got the following errors in SMSTS.LOG

Empty location for package: _SMSTSP01000F1 ApplyOperatingSystem

Installation of image 1 in package P01000F1 failed to complete..
The system cannot find the file specified. (Error: 80070002; Source: Windows) ApplyOperatingSystem

The resolution was to change the deployment properties on the Task Sequence from "Access content directly from a distribution Point" to "Download content locally".

I Believe that changing the operating system package properties under Data Access to "Copy the content in this package to a package share on distribution Points" would have been the other solution to this problem.

How to change SQL collation

Problem installing SCCM due to wrong SQL collation?

If your SQL installation media path is E:
The command line syntax would be:
(Always test in non-production environment before using them in production Environment)

E:\setup /QUIET /ACTION=REBUILDDATABASE /INSTANCENAME=MSSQLSERVER /SQLSYSADMINACCOUNTS=DOMAIN\administrator /SAPWD=YourPassword /SQLCOLLATION=SQL_Latin1_General_CP1_CI_AS

KB2506143 Known Issue: Configuration Manager Management Points collocated with clients fail after installing Windows Management Framework 3.0 and running Client Health Evaluation

See this article for more information:

http://blogs.technet.com/b/configmgrteam/archive/2012/12/18/known-issue-configuration-manager-management-points-collocated-with-clients-fail.aspx

And here for resolution:
http://support.microsoft.com/kb/2796086

SCCM 2012 SP1 released

System Center 2012 SP1 was released last night to MSDN.

How to set network priority order in Windows 7

Download nvspbind from http://archive.msdn.microsoft.com/nvspbind
Create a SCCM package with the files included and use the following command line:
nvspbind.exe /++ "Loacal Area Connection" ms_tcpip

This will put the Local Area Connection on top of the list

How to extend the inventory of the registry

To extend the inventory of the registry, there is a great tool (RegKeyToMOFv31.exe) to download from http://myitforum.com/cs2/files/folders/proddocs/entry152945.aspx

Start the tool and select the registry key you would like to add to the inventory.
Copy the syntax from the tool and paste into the "Added extensions" section of the configuration.mof located on the SCCM primay server install directory\Microsoft Configuration Manager\inboxes\clifiles.src\hinv (make a copy of the original file before you edit and save it).

Select the "to import in Admin/Agent settings...." tab oft the tool and save the information to a .mof file.
After that go to the SCCM console, Administration -> Client Settings -> Hardware Inventory -> Set Classes and then click Import..
Select the file you just created and verify that the new classes are added.

Run a hardware inventory action on a client and verify that the new registry values are added to the inventory.

Where to find Service Manager in SCCM 2012

Sometimes you might want to stop or start a Configuration Manager component.
This is done by Configuration Manager Service Manager.

The new location for this component in SCCM 2012 is:
\Monitoring\Overview\System Status\Component Status and mark Component Status for an example. Go to the "Home" ribbon at the top of the console screen and click "Start". There you can coose "Configuration Manager Service Manager"

SCCM 2012 error importing drivers

It seems like you still have to (in some cases) create a .TXT file and put it among the drivers before you successfully can import them to SCCM 2012.

Where to set the Rate Limits on Site Servers vs Distribution Points

On Site Servers, Rate Limits are set under \Administration\Overview\Hierachy Configuration\Addresses.
Right click the site name and select properties then the tab "Rate Limits".

For Site systems that only act as Distribution point, Rate Limits are set under \Administration\Overview\Site Configuration\Servers and Site System Roles.
If you mark a server "Site System Roles" is shown at the botttom. Right click "Distribution point" and select properties then the tab "Rate Limits".

SCCM 2012 with MDT 2012 integration

When trying to create a MDT 2012 Client Task Sequence i received an error "access to the path is denied"..

The solution was to delete the following file:
 C:\Program Files\Microsoft Deployment Toolkit\Templates\Distribution\Scripts\Autorun.inf

SCCM 2012 RTM supported SQL versions

SQL Server version	Central administration site	Primary site	Secondary site
SQL Server 2008 SP2 with Cumulative Update 9	x	x	x
SQL Server 2008 SP3 with Cumulative Update 4	x	x	x
SQL Server 2008 R2 with SP1 and Cumulative Update 6	x	x	x
SQL Server Express 2008 R2 with SP1 and Cumulative Update 4	Not Supported	Not Supported	x

Back from USA

The Microsoft Management Summit 2012 in Las Vegas was a great event!
I'm now filled with knowledge and inspiration!

MMS 2012 Las Vegas here we come!

Tomorrow I'm bound for Las Vegas to attend the 2012 Microsoft Management Summit.
Hope to get lots of new SCCM 2012 tips and trix to update this site with.

Enable PXE on Distribution Point

Steps how to enable PXE on a distribution point in SCCM 2012

1. Add the Windows Deployment Services role to the server by using server manager.

2. From the SCCM Console: \Administration\Overview\Distribution Points
          Right Click the DP and select properties.
          Under the tab “PXE”, check “Enable PXE support for clients”
          Check “Allow this distribution point to respond to incoming PXE Requests”

3. From the SCCM Console: \Software Library\Overview\Operating Systems\Boot Images
          Right click the boot image and select “Properties”
          On the “Data Source” tab mark
          “Enable binary differential replication” and
          “Deploy this boot image from the PXE service point”

 

Package status turns from successful to in progress

I have noticed that when you distribute a package to a DP it shows up fairly quickly in the console as 100% "successful" (green). If I then start the execution of a task sequence it will fail due to a package that's not available on the DP..
If I go back to the console,  after a while the package status turns over to "in progress" (yellow) instead and won't turn back to "successful" (green) again for 5-10 min..
Cannot find anything obvous in the logs about SCCM resending the package..

Hope this is a RC bug..

MININT- as computername second time computer installs

Experienced an odd behavour when using a boot.iso with unknown computer support enabled.

If I added a computer to the SCCM console and installed the computer, the computer got the same name as I gave it when importing the computer (correct).
But when I reinstalled the same computer a second time it was named with a MININT- name instead..
Created a new boot.iso without unknown computer support (not using it anyway) and the problem went away. The computer now gets the name entered in the SCCM console every time.

Application with dependencies during Task Secuence

Configuration Manager 2012 (RC2) can handle installation of applications with dependencies during Task sequence execution. (Not possible with Configuration Manager 2007)

New location for the Client Logs

In SCCM 2012 RC2 the client logs are stored in C:\Windows\CCM\Logs

SCCM 2012 RC2 on separate instances on the same SQL Server

My SCCM 2012 RC2 environment consists of one CAS and one Primary site.
To make this work in a common SQL hotel with seperate instances you need to make shure that they don't communicate with the database on the same ports.

During the SCCM 2012 site installation you need to set:
On the CAS-Server "SSB Port" = 4022
On the P01-Server "SSB Port" = 4023

To configure this, go to the SQL Server:
Start SQL Server Configuration Manager
Go to SQL Server Network Configuration
Protocols for CAS-Instance - TCP/IP - Properties - IP Addresses - Set TCP Port = 1433 on all
Protocols for P01-Instance - TCP/IP - Properties - IP Addresses - Set TCP Port = 1434 on all

Done

First post..

Hello,

My name is Henrik Ericsson and I work for a company called Enfo Zipper in Stockholm Sweden.
I will blog about my, and my customers, experience from using Configuration Manager 2012.
Starting today, with Configuration Manager 2012 RC2.

Welcome!