[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x

SCCM

832

Solutions

756

Contributors

Systems Center Configuration Manager (SCCM, formerly known as Systems Management Server) is Microsoft’s system software for managing large groups of not only Microsoft computers, but those running other operating systems, such as Linux, OS-X, and various mobile technologies.

Share tech news, updates, or what's on your mind.

Sign up to Post

Which certificates are required for the SCCM environment to allow software updates,etc?
Is there a document that explains all the certificates/auto enrollment requirements?
0
OWASP: Avoiding Hacker Tricks
LVL 12
OWASP: Avoiding Hacker Tricks

Learn to build secure applications from the mindset of the hacker and avoid being exploited.

I have to come up with a SCCM Enterprise patch management plan.  First time taking this kind of responsibility but looking forward to it.
 My question is what should I do for my manager to give a good representation of what the patch management environment is now and what it should be?

 What to look for and how to map out updating past updates for work stations to bring up to date.
0
Issues: We are facing issues with SCCM 2012 client scan(windows 7) with windows update server. The error message in Wuahandler.log is "OnSearchComplete - Failed to end search     job. Error = 0x80072ee2.".

Environment detail:
PSS - we have a single primary site server SCCM 2012 R2 with SP1 in datacentre 1 in a virtual server (win serv 2012 R2 with 5.5 GB physical memory).
XYZ - This server in the datacentre 1 having windows server 2008 R2 with 32GB internal memory. This server is installed with distribution point, fallback status point and management point.
ABC -  This server is in datacentre 2 having windows server 2008 R2 with 32GB internal memory. This server is installed with distribution point, Reporting service Point, management point and software update point.
We have around 4000 win 7 device(laptop/desktop) and 2000(win 10 device win7 and win 10), all getting patched with SCCM. We are deploying all the October month OS, .Net Framework, IE and Office patch to these win 7 and win 10 device.

Initial troubleshoot: Since most of the blogs and website point toward increasing the private memory of WSUS pool under IIS so I have changed the private memory to 0 and also the queue length to 2000. I also restarted the server ABC but no luck.

Few logs detail:
WuaHandler.log (Scan failed with error = 0x80072ee2.)
Update Store: No error found here. Querying update status completed successfully and all the missing and installed updates are reflecting here.#
0
Hi!

I've created a TS to make a clean installation of Windows 10 pro 1803.
Everything goes fine, until the TS rises the "Setup Windows and Configuration Manager" step. As you know, at this step the computer reboots. In my case, the TS doesn't continue, the system restart but SCCM client it's not installed, and either the applications.

I've tried to find out any solution to this issue in internet, but no results.

Can anyone help me with this issue???

I have:
SCCM version 1806
SCCM Client 5.00.8692.1008

Here are the last lines of my smsts.log.


!--------------------------------------------------------------------------------------------!            
Successfully completed the action (Setup Windows and Configuration Manager) with the exit win32 code 0            
"MP server http://siteserver.mydom.com. Ports 80,443. CRL=false."            
Setting authenticator            
Sending StatusMessage            
Setting the authenticator.            
CLibSMSMessageWinHttpTransport::Send: WinHttpOpenRequest - URL: siteserver.mydom.com:80  CCM_POST /ccm_system/request            
Not in SSL            
Request was successful.            
Set a global environment variable _SMSTSLastActionRetCode=0            
Set a global environment variable _SMSTSLastActionSucceeded=true            
Expand a string: %_SMSTSMDataPath%\Logs            
Clear local default environment            
The action (Setup Windows and Configuration Manager) requested a retry            
Reboot to local harddisk            
_OSDGinaIsConfigured variable set to TRUE            
_SMSTSServiceStartType variable set to …
0
Hi,

I'm just curious and just need to understand all faisable possibilities. If I have this scenario: Around 1000 users to migrate from Windows 7 to Windows 10.

How long this can take?
What the best tool or way to do that migration?

Thanks
0
we have sccm and scom 2012 r2 running on windows 2008 r2 as the OS. database on a different server running windows 2008 r2 and sql 2008.

we want to upgrade the OS of sccm, scom and sql servers

we want to upgrade sccm and scom to system center cb 1802 or later.

it is best to install fresh deployments of all and try and migrate data.

or look at the option of inplace upgrade.
0
I have recently deployed SCCM 1802 on our primary site with seperate SQL 2014 Server. Now, I need to deploy secondary site for my remote location. I need to know which ports will be opened between primary site server and secondary site server? Do i need to open any port between SQL server and secondary site server as well? And what will be the direction. I have read articles which says ports 443, 445, 1439 and 4022 but all are when primary site server and SQL server are co-located. I have seperate servers on primary site which is confusing me. On secondary site database will be co-located.
0
Wonderful day,
I am looking into creating a SCCM Lab, what type of software and hardware I would need to purchase?
0
Hello all,

I have created a boot image and deployed it on VM. on the deployment page F8 is not working. on my boot image I have anabled the f8 option while creating and i confirm its enabled.

Am i missing anything?

Regards
0
Hello all I am getting below error while updating the boot image.

  Error: Update boot image:
• Microsoft Windows PE (x86)

  Error: Update actions:
• Add ConfigMgr binaries using Production Client version 5.00.8692.1008
• Add custom background
• Set scratch space
• Enable Windows PE command line support

  Error: Failed to import the following drivers:

Optional components:
• Microsoft .NET (WinPE-NetFx)
• Windows PowerShell (WinPE-PowerShell)
• Scripting (WinPE-Scripting)
• Startup (WinPE-SecureStartup)
• Network (WinPE-WDS-Tools)
• Scripting (WinPE-WMI)

  Error: The wizard detected the following problems when updating the boot image.
• The SMS Provider reported an error.: ConfigMgr Error Object:
instance of SMS_ExtendedStatus
{
• Description = "Failed to inject OSD binaries into mounted WIM file (often happens if unsigned drivers are inserted into x64 boot image)";
• ErrorCode = 2152205056;
• File = "..\\sspbootimagepackage.cpp";
• Line = 5198;
• ObjectInfo = "CSspBootImagePackage::PreRefreshPkgSrcHook";
• Operation = "ExecMethod";
• ParameterInfo = "SMS_BootImagePackage.PackageID=\"ACM0076A\"";
• ProviderName = "WinMgmt";
• StatusCode = 2147749889;
};

any suggestions?
0
Become a Certified Penetration Testing Engineer
LVL 12
Become a Certified Penetration Testing Engineer

This CPTE Certified Penetration Testing Engineer course covers everything you need to know about becoming a Certified Penetration Testing Engineer. Career Path: Professional roles include Ethical Hackers, Security Consultants, System Administrators, and Chief Security Officers.

Hello,
I need help to user Powershell to delete a computer from SCCM by providing the name only.
However, before deleting it should capture the UUID & MAC ADDRESS for reference.

Any help is appreciated.
Regards,
A
0
Successfully added the Adobe Reader catalog to SCCM 1806.
Also deployment of the update works to already running clients (the installation is shown in Software Center).
Task Sequence installed clients do not have the Adobe Reader update because the Adobe Reader patch is not required yet.

To fix this I enabled "Available for Installation - All software updates" in the "Install Software Updates" step.

Now the step "Install Software Updates" fails near the end.

found in UpdatesHandler.log:

<![LOG[Failed to initiate install of WSUS updates, error = 0x800b0109]LOG]!><time="13:38:10.991-120" date="10-11-2018" component="UpdatesHandler" context="" type="3" thread="5828" file="wsusupdatehandler.cpp:133">
<![LOG[Failed to start WSUSUpdate, error = 0x800b0109]LOG]!><time="13:38:10.991-120" date="10-11-2018" component="UpdatesHandler" context="" type="3" thread="5828" file="update.cpp:1205">

Open in new window


And wuahandler.log:
<![LOG[1. Update: 26e84e49-305a-4349-8174-1478bc7caee5, 2   BundledUpdates: 0]LOG]!><time="13:38:10.475-120" date="10-11-2018" component="WUAHandler" context="" type="1" thread="5828" file="cwuahandler.cpp:1698">
<![LOG[1. Update (Missing): Adobe Acrobat Reader DC - MUI Update 17.011.30105 (26e84e49-305a-4349-8174-1478bc7caee5, 2)]LOG]!><time="13:38:10.475-120" date="10-11-2018" component="WUAHandler" context="" type="1" thread="5828" file="cwuahandler.cpp:1820">
<![LOG[Failed to download updates to the WUAgent datastore. Error = 0x800b0109.]LOG]!><time="13:38:10.991-120" date="10-11-2018" component="WUAHandler" context="" type="3" thread="5828" file="cwuahandler.cpp:490">

Open in new window


Searching for the error reveals it has a problem with verfying the validity of the file. Found out the WSUS self signed certificate is not in the machines certificate store.
Added the certificates to root and trusted publisher, the step still fails with the same error...

Any ideas?
0
Trying to install SQL 2014 Express (English) via SCCM on German Windows 10 1803 on multiple computers.

Problem: local admin group won't get added to the sysadmin group in SQL, therefore any user is unable to access the tables or add permissions.

Tried setup via command line:

setup.exe /Q /IACCEPTSQLSERVERLICENSETERMS /ACTION=install /FEATURES=SQLEngine,Tools /INSTANCENAME=SQLExpress /ERRORREPORTING=0 /SQMREPORTING=0 /UpdateEnabled=0 /SQLSYSADMINACCOUNTS="[b]VORDEFINIERT\Administratoren[/b]" /ADDCURRENTUSERASSQLADMIN=0

Open in new window


or

setup.exe /Q /IACCEPTSQLSERVERLICENSETERMS /ACTION=install /FEATURES=SQLEngine,Tools /INSTANCENAME=SQLExpress /ERRORREPORTING=0 /SQMREPORTING=0 /UpdateEnabled=0 /SQLSYSADMINACCOUNTS="[b]BUILTIN\Administrators[/b]" /ADDCURRENTUSERASSQLADMIN=0

Open in new window


First command line works when run on a command prompt, but not when deployed via SCCM.

Next I've tried the ConfigurationFile.ini. After recording the ini-file via
setup.exe /Action=Install /UIMode=Normal 

Open in new window

it shows:
SQLSYSADMINACCOUNTS="[b]VORDEFINIERT\Administratoren[/b]"

Open in new window


But after installing it via command prompt
setup.exe /ConfigurationFile="ConfigurationFile.ini"

Open in new window

sysadmins is again empty.

Same result when I change ConfigFile.ini to
SQLSYSADMINACCOUNTS="[b]BUILTIN\Administrators[/b]"

Open in new window

0
wmi query if machine are connected  to ethernet cable

second  check if machine connected to wifi

thanks
0
Hello all,

I created a TS , it installs fine. After "setup windows and configuration manager" step it restsrts and it wont continue.

I have couple other scripts to run after that.

Any suggestions?

Regards
0
we have SCCM 2012 R2 sp1 deployed on windows 2008 r2. sccm is configured as a stand-alone primary site which is currently being used to deploy OSD, windows updates and asset management. Reports are configures. The database for SCCM is hosted on a separate SQL server 2008 standard server.

we are in the process of migrating from windows 2008 r2 as the base OS to windows 2016 for all services.

the SQL server will be upgraded to SQL server 2016.

The base OS needs to be upgraded to windows server 2016.

the SCCM will be upgraded to CB 1806.

what would be the best way to move forward
0
Hello,
I'm new to SCCM so need some help.
I have to add a computer to SCCM for installation, currently I'm supposed to do:
1. on devices right click & import computer information
2. Provide single computers name & MAC address
3. In Device collection add in the right folder by Right Click - Add Resources, the ID of the group I want to add is: CollecionID: 100
4. Then when the PC is added (it takes very long to show up) Right click on the PC & Clear Required PXE Deployments

This all takes enormous time & is very boring.... I have for the 1 & 2 figured out this :
Import-CMComputerInformation -CollectionId "100" -ComputerName "TEST" -MacAddress "00:00:00:94:F9:97"

The computer is shown up in the system, however it's only done till 1 & 2
Can someone help please to achieve the complete process?
I intend to only import 1 computer.

Thanks
0
Hello all,

I am deploying sccm task sequence on virtual machine. Is there any way I can see the logs from diffrent computer. I can see those when it is installing OS. but after installing os it restart the machine and sits on the login screen. Is there any way i can see logs there?

Regards
0
We are looking to do an in-place upgrade from 1703 to 1709.
We create a reference image (.wim) file in MDT 2013, we bring it over to SCCM 2012 R2.
We do not create drivers in MDT we do that in SCCM 2012 R2.

When we do this in-place upgrade to 1709 is there are way to disable 'User First Sign-in Animation'.  
I know there are two ways GPO, Registry key.
I know you can also do it via unattend.xml.  We do not want to touch this.

Can I create a task sequence to do this in SCCM 2012 R2.                

Can someone help me I am so new to imaging.

thanks
0
Become a Microsoft Certified Solutions Expert
LVL 12
Become a Microsoft Certified Solutions Expert

This course teaches how to install and configure Windows Server 2012 R2.  It is the first step on your path to becoming a Microsoft Certified Solutions Expert (MCSE).

I am working with app packaging in SCCM 2012R2 and have an application installer (.exe) that while running launches a second .exe (Sentinel Runtime) to install. At the end of the second one installing, there is a prompt to hit OK. The application install won't go past this point if you don't hit OK. So in SCCM, it will run until it times out then the installation will fail. I haven't been able to get it to move beyond this point no matter what switches I use. It would be great to get some help with this. I am running the installation again to get some fresh logs as I am sure someone will want to know. Below is the string I am using in the installation line.

".\tnxTower8040_Setup.exe" /S /v"/qn " /norestart

I've tried many variations of the same command, but have had no luck. I've also reached out to their support and they were unhelpful as well. So now I am reaching out to the experts!

Thanks in advance!!
0
We have 6 hosts and 40 virtual servers running on ESXi. Each host has 2 processors with 16 cores each. total of 32 cores per server.

3000 clients

we will deploy SCCM and SCOM only

which option should I go for. System Center standard or datacenter. for my situation how will be the calculation.

Datacenter: I understand that it will cover unlimited VM's. and i need to buy 12 datacenter licenses. do I need to buy sccm client ML if I buy datacenter?

For Standard what should I buy.

appreciate if this can be answered today.
0
We are in the process of creating a policy for deploying windows updates. Our network was an isolated network with no access to the internet till now. we have recently deployed SCCM and software update point has been installed and configured.

Now we want to have policies create for deploying windows updates on servers and clients.

I am concerned about the servers as we have servers with different roles like

File server, sql clusters
exchange DAG's
application servers.

I want some suggestions if is it safe to deploy security updates on all servers at the same time especially the ones that are part of the clusters.

looking for some best practices related to deploying windows updates.
0
Hello experts,

we have some machines out there without McAfee VirusScan Enterprise" and McAfee Endpoint Security Threat Prevention. we are trying to get those machines. I tried query report as well. maybe something with the query.
select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, SMS_R_System.Client from  SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId where SMS_G_System_COMPUTER_SYSTEM.Name not in (select distinct
SMS_R_System.Name
From
 SMS_R_System
where
SMS_R_System.ResourceId not in
 (
select
SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID
 from
SMS_G_System_ADD_REMOVE_PROGRAMS
Where
SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName = "McAfee VirusScan Enterprise"
)
and SMS_R_System.ResourceId not in
 (
select
SMS_G_System_ADD_REMOVE_PROGRAMS_64.ResourceID
 from
SMS_G_System_ADD_REMOVE_PROGRAMS_64
Where
SMS_G_System_ADD_REMOVE_PROGRAMS_64.DisplayName = "McAfee VirusScan Enterprise"
)
and SMS_R_System.ResourceId not in
(
select SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID
 from
SMS_G_System_ADD_REMOVE_PROGRAMS
Where
SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName = "McAfee Endpoint Security Threat Prevention"
)
And SMS_R_System.ResourceId not in
 (
select SMS_G_System_ADD_REMOVE_PROGRAMS_64.ResourceID
from S
MS_G_System_ADD_REMOVE_PROGRAMS_64
Where
0
Recently migrated from Server 2012R2/SCCM 1802 to a new site with Server 2016/SCCM 1806.   We have MBAM integrated with SCCM and are wondering what needs to be done on the new site server to integrate our existing MBAM server from old SCCM environment to new environment .    Can you give me the steps needed to accomplish this?

Thanks.

MLStev01
0
How do i convert .iso image to .wim. My .iso Launch Media gives error while i run image capture wizard in windows 10. Task Sequence Error is "Image Capture Wizard has failed with the error code (0x00004005).
0

SCCM

832

Solutions

756

Contributors

Systems Center Configuration Manager (SCCM, formerly known as Systems Management Server) is Microsoft’s system software for managing large groups of not only Microsoft computers, but those running other operating systems, such as Linux, OS-X, and various mobile technologies.