Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x

SCCM

568

Solutions

560

Contributors

Systems Center Configuration Manager (SCCM, formerly known as Systems Management Server) is Microsoft’s system software for managing large groups of not only Microsoft computers, but those running other operating systems, such as Linux, OS-X, and various mobile technologies.

Share tech news, updates, or what's on your mind.

Sign up to Post

Hi,

As many users already reported, this month there are a lot of issues with WSUS.

I have an SCCM CB 1702 Site Server with WSUS on same server.

All was working fine until approx. 1 month ago.
The w3wp.exe process is constantly running at 95-100%.

I installed this Hotfix as described here.

However, the hotfix didn't solve the CPU usage but I could open the WSUS console again. (didn't start before)

After I've installed the hotfix, the WsusPool shuts down after recycling.
I've increased Private Memory to 8GB (used to be 4GB) but it still shuts down.
Only after I've set Rapid-Fail Protection to False the WsusPool is not shutting down.
But this doesn't seem to be a very smart setting.

Errors that keep coming back...
wsyncmgr.log
Sync failed: WSUS server not configured. Please refer to WCM.log for configuration error details.. Source: CWSyncMgr::DoSync
STATMSG: ID=6703 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_WSUS_SYNC_MANAGER" SYS=CMServer.domain.com SITE=CM2 PID=2804 TID=6100 GMTDATE=do sep 14 10:02:26.175 2017 ISTR0="CWSyncMgr::DoSync" ISTR1="WSUS server not configured. Please refer to WCM.log for configuration error details." ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0
Sync failed. Will retry in 60 minutes

WCM.log
0
Free Tool: ZipGrep
LVL 10
Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Hello Experts,

Today I have an SCCM question.  Let me just say, that I’m not an SCCM expert by any stretch of the imagination.

I learned our workstations were missing an Internet Explorer security update from 2015.  I decided I would try to push this update out via SCCM (we are running SCCM 2012).  I went through the process (at least what I think is the correct process) to setup a software update group, download the updates and deploy them to the test collection (which only contains one PC).  When I came in this morning and checked the status of the deployment, it should my one PC as being compliant.  See the screenshot below.

EE-SCCM1.png
However, when I logged onto my test PC to verify the update is installed, it is not showing up in the installed update list or update history.  I have provided the SCCM steps I used in pushing this update out below.

My questions are:
-      Why did my test PC show compliant when the update was not installed?
-      Is there an SCCM log I can be looking at for deployments?

Any help is greatly appreciated.

Nick

SCCM Steps:
1.      Remote into the SCCM server.
2.      Open the Configuration Manager Console.
3.      Click on the "Software Library" option in the navigation pane.
4.      Expand the "Software Updates" option in the navigation pane.
5.      Double-click on the "All Software Updates" option in the navigation pane.
6.      Input your search criteria to find the appropriate update.
7.      Select the updates you want to push out.
8.      …
0
Hiya all,

I have a block of Powershell that doesn't do what I want it to do, else I wouldn't be here. The aim is to import a list from a CSV file (called ADGroupToSCCM.csv) that has the AD group name and the SCCM Collection Name.

From there, the powershell script should extract the list of machines that's in the AD group, find the ResourceID and add the ResourceID through a Direct Membership Rule in SCCM Current Branch (1702).

So far, I got this (name masked). And it's working up to the point with Get-CMDevice -Name $ADMember | Select ResourceID. It just completely skips it. Running it manually does get the desired effect, but not automatically. It is run directly on the server.

Who can help unravel this mystery for me? Note that I am just a starter with Powershell and most of my experience comes from batch and VBS.

Import-Module "$($ENV:SMS_ADMIN_UI_PATH)\..\ConfigurationManager.psd1" 
Set-Location "CE1:"

Import-Module ActiveDirectory

$csvData = Import-CSV -Path C:\Users\hidden\Documents\ADGroupToSCCM.csv

foreach ($row in $csvData)
{
    $row.ADName
    $ADMembers = Get-ADGroupMember $row.ADName -Recursive | Select Name
    foreach ($ADMember in $ADMembers)
    {
    $ADMember
    Get-CMDevice -Name $ADMember | Select ResourceID
    $ResourceID
    Add-CMDeviceCollectionDirectMembershipRule -CollectionName $row.CollectionName -ResourceID $ResourceID -Force
    }
}

Open in new window

0
I have already a wsus server but I recently created a SCCM server and now wants to link wsus server with SCCM.
0
I need help powershell script to wmi query to check supported  machine model  if it's not equal it should msg pop out it should exit. msg pop out this model is not supported.
I'm using this for unsupported model in Windows deployment. thanks
0
I have a SCCM 2012 server handling Endpoint Protection Policies. I have Endpoint Protection on all workstations, but also on my servers. I want to exclude my servers from this policy, but can't see how I can do this.


I hope someone can help.
0
I have a SCCM test environment with a CAS and a Primary. Recently migrated the databases from SQL2012 to SQL2014 and now replication is broken.

When running the Replication Link Analyzer 'isServiceBrokerRouteConfigCorrect' comes back False for the Broker on the CAS database. Looks like the broker routes are expecting the old SQL server address but I don't know where it is getting this info from when the migration appeared to go successfully. Can anyone help?

Under the details column there are a number of messages like the following:

Service broker route [ConfigMgrDRSRoute_SitePRI] is missing or has incorrect address [TCP://NewSQLServer.abc.com:4023] for service [ConfigMgrDRS_SitePRI]. Expected address [TCP://OldSQLServer.abc.com:4023].
0
Hello All,
I got one issue in patching with SCCM because some server need to be configured with .net4.5 and some need to be stay on 2.5, I got issue that it is being automatically updating all server with .net 4.5.
Please help me, what to do with this type of issue?
0
Just trying to see what I might be missing here or where to look to find the issue.

I have a standalone SCCM 1702 serving about 350 clients. I've deployed apps and update many times over the past year plus. I'm trying to deploy O365 update 1706 8229.2139 to 4 PCs that are in Current Channel via GPO. I have a GPO for enabling manage O365 from SCCM in place. I downloaded the update, created a Software Update Group and deployed it to the collection these PC are in as required with a 3 day deadline. All of the PCs show up under Monitor Deployment in the Unknown tab (1 as Client check passed/Inactive because the PC is powered down, and 3 as Client check passed/Active).

I have initiated a Software Update Evaluation from the SCCM console as well as from the Configuration Manager Client on the PCs and it just doesn't seem to initiate the download or show up as an available update, and I have no idea what to look for in which logs as I've followed some of the posts for troubleshooting and see errors of some point in most logs. Where does one start to troubleshoot this issue?
0
Hello -

I am trying to uninstall Symantec Endpoint Protection and replace with new AV within SCCM 2012. I have the install application for Symantec and new AV. The Symantec application should have a uninstall switch, however not sure how to double check that with .exe I have for Symantec. I have tried to run uninstall of Symantec with Uninstall.exe however no luck. I have also tried to run a batch file from my desktop with wmic product where "name like 'Symantec Endpoint Protection%'" call uninstall /nointeractive, however no luck.
0
On Demand Webinar - Networking for the Cloud Era
LVL 10
On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

we can deploy software on computers through SCCM but how we can uninstall software from 100 of computers

can we do with SCCM or any other tool is required
0
We previously set up SCCM using a domain admin account SCCMAdm :
we have since removed it's domain admin privilege but with its domain
password dont expire.

is this a security concern (need assessment) & how we can mitigate?
0
Hello - I a have a Windows 7 system with bad hard drive, and I'd like to clone system within SCCM 2012 before it goes completed out. Do you have a good step-by-step instructions on how to accomplished this? I appreciate all your help!

Thanks,

nimdatx
0
Hello -

SCCM environment:
2012 R2 Configuration Manager SP1
Console version: 5.0.8239.1000
Site version: 5.00.8239.1000

SCCM.PNG
Does my version look correct considering CU? I also would like to know if I can go directly from my version to SCCM 1706, if so, do you know where I can find step-by-step on the upgrade?

Thanks,

nimdatx
0
I am looking to Schedule the deployment of windows updates to a client using SCCM. So far this has been a manual process with the following:

  • Test machine Collection
  • IT Users Collection
  • Test Users Group
  • Day 1 Deplyment
  • Day 2 Deployment

I have created an Automated rule for the initial "Test Machine Collection" following PrajWaldesai but I would like to have the whole process automated something like:

  • Test machine Collection
- Patch Tuesday
  • IT Users Collection
- +24 Hours
  • Test Users Group
- +48 Hours
  • Day 1 Deplyment
- +4 Days
  • Day 2 Deployment
- +6 Days

I am sure that i am not the first looking to complete this and automate the global roll out of the updates and wondered if others could offer experience.

Or is it as simple as an automatic deployment rule for each collection.
0
I am trying to load SCCM on a Windows 2016 and getting the following errror on the server in question:

Download Update: A recoverable error has occurred.  A retry attempt will be made


I have re-imaged this server multiple times and get stuck at this point. The c:\windows\ccmsetup folder only gets half of the files it should and that's when it gets stuck. I am open to any ideas on what to check.

I have loaded SCCM before on many servers (including Windows 2016); but on this one I am STUCK !

If I let the load continue, this last time keeps happening every 5 minutes for HOURS !


MANY THANKS in advance for ALL the help !
0
Hello all,

I've been using SCCM OSD to image machines for about 2 years.  Suddenly last month, it stopped working.  I assumed that we had a corrupted driver or boot wim.  I re-created both the x64 and x86 boot wims, downloaded the newest WinPE 10 drivers, etc.

and am still having the issue.

When doing PXE boot, I"m getting the failure at preparing network connections.  When loading PE from a usb, it loads but then says "There are no task sequences available for this computer."  If I do an F8 , ipconfig shows an IP and diskpart shows the drives, which I assume means that I have the correct drivers.  Fwiw- I've tried just about every driver combination that I can think of, to no avail.

The packet captures seem to be failing at an IPsec port 500 error, but I can't see what would be causing that. -it might be a red herring.

To make matters worse, our MS premier support contract ended the day before it broke and we're waiting for our legal dept. to sign the new enterprise agreement, so I have no MS support.

I'm including the smsts.log from one of the machines and wireshark packet traces from a mirrored port for both PXE and USB PE boots.  Any assistance is greatly appreciated, as I need to start pushing Win10 out by the end of the month.
smsts-z230.log
SCCMPXE-WINPE-Fail-1.pcapng
SCCMUSB-WINPE-Fail-1.pcapng
0
Hello -

I am trying to create a query that will give me all my Windows 7 x64 and x86 systems.

What I have is this below, however it doesn't give me the details I want. I want it to list OS, IP, Name, client active or not and whether or not it's a x64 or x86 system.


select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_R_System.OperatingSystemNameandVersion like "%Workstation 6.1%" or SMS_R_System.OperatingSystemNameandVersion like "%Windows 7%" and SMS_G_System_COMPUTER_SYSTEM.SystemType = "x64-based PC"

I run this for x86 and it gives me same result as the query above

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_R_System.OperatingSystemNameandVersion like "%Workstation 6.1%" or SMS_R_System.OperatingSystemNameandVersion like "%Windows 7%" and SMS_G_System_COMPUTER_SYSTEM.SystemType = "x86-based PC"

Thanks,

nimdatx
0
Hello -

I have SCCM 2012 R2 SP1 Console version 5.0.8239.1000/Site version 5.00.8239.1000 to new release version that will allow in place upgrades? Should I upgrade to CU5 or SCCM 1706? I'd like step-by-step how-to if possible. I appreciate all your help.

Thanks,

nimdatx
0
Important Lessons on Recovering from Petya
LVL 10
Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Hello -

I am looking to deploy a application within SCCM 2012 and the application is a .exe and vendor says it doesn't have any installers to accommodate any management installation platforms.  I'd like to know how I can use a batch file to run exe and silently without any user interaction. I can push out from SCCM and place package in Software Center to be deployed , however there is a popup that needs software license agreement to be checked. I do not want users to have to do this and I want it silently installed. Is there any way to accomplish this with .exe?

Thanks,

nimdatx
0
Hi Team,

I want to create a package & deploy through sccm that contains a batch script that will stop service, delete file and start service.
 
Below are the commands that I am including in script which I want to create as package & deploy on all machines using sccm.

Script:
Net stop HAgent /y
Cmd /c Del "C:\programFiles\WDM\Hagentsettings.in"
Net start Hagent /y

Will this work through sccm?
0
Hello -

I pulled a SCCM 2012 query on all systems and I see a lot of duplicates. Not sure why I am seeing duplicate devices all with same computer name. What is the best way to clean up?

Thanks,

nimdatx
0
are there any common reasons why devices in a domain may not be showing in system centre, or any pointers on where to start on how to resolve? I am not a SCCM admin myself, but wondered how the device initially gets added to the SCCM database? Is it a manual process when you procure and build new devices to add them into the system.
0
Is there any difference between deploying applications and images on  client machines through SCCM

what kind of images like i.e  boot or pxe  i can deploy on client machines .

any particular methods one requires
0
Can't use SCCM, but have to install lot of patches on a windows server. What is the fast way to search, download and install those patches?
0

SCCM

568

Solutions

560

Contributors

Systems Center Configuration Manager (SCCM, formerly known as Systems Management Server) is Microsoft’s system software for managing large groups of not only Microsoft computers, but those running other operating systems, such as Linux, OS-X, and various mobile technologies.