sccmnoobie

Hi all, When I look in monitoring / Endpoint Protection Status / System Center 2012 Endpoint Protection Status in the console, I see under the Definition Status on Computers, that the definition on servers are spanned over Current, Up to 3 days old etc. If I logon to a server and manually update the SCEP client, it is successful so there is no issue with that. I have looked at the Antimalware polices and I have "Run a daily quick scan on client computers" selected as well as "Check for the latest definition updates before running a scan". Is there a setting I've missed, or is there any thoughts as to why I open the ConfigMgr console that not all of the servers don't have the current definition? The thing is, they eventually get the latest definition, at which the ones that were current are now up to 3 days old... Currently sitting as: Current: 46.9% Up to 3 days: 42.4% From 3 through 7 days old: 8.7% Older than 7 days: 2.0% Thanks, SCCMNoobie

Hi Peter, Thanks for the reply. With the 'Content Hash', does that mean the package has been successfully distributed to the DP *AND* the package has been verified? Or does it mean it can locate the package on the primary? Thanks for your help, SCCMNoobie

Hi all, Could someone please explain to me the difference between 'Content was distributed to distribution point' and 'Content hash has been successfully verifed'? We have multiple site servers and through all packages it looks like the same servers are seen in each type for each package. Each server was built exactly the same. Thanks! SCCMNoobie

Just following up on this. I have a solution. The query was for the most part correct, however it was missing the ARP64 (where Avamar is). Here is the query: select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.ResourceId not in (select SMS_R_System.ResourceId from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName LIKE "%Avamar%") and SMS_R_System.ResourceId not in (select SMS_R_System.ResourceId from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS_64 on SMS_G_System_ADD_REMOVE_PROGRAMS_64.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS_64.DisplayName LIKE "%Avamar%")and SMS_R_System.Client = 1 and SMS_R_SYSTEM.OperatingSystemNameAndVersion like 'Microsoft Windows NT%Server%'

Any other ideas, guys?

Thanks Peter. I have navigated to Resource Explorer / Hardware / Add/Remove Programs (64), and there is an entry in the Display Name saying EMC Avamar for Windows x64 Editions.

Hi Peter, Thanks for that. The software is showing in ResourceExplorer... Resource Explorer / Software / Product Details / EMC Corporation / Avamar Windows Client Does my query look correct? Thanks!

Hi Peter, Thanks for you response. I'm not sure how to check the inventory, however when running a report against the resource that says, say, Sophos isn't installed; it shows it's there. Is there any instructions you can provide to check the inventory, or have other suggestions? Many thanks indeed!

Hi guys, I have this query: select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.ResourceId not in (select SMS_R_System.ResourceId from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName LIKE "%Avamar%") and SMS_R_System.Client = 1 and SMS_R_SYSTEM.OperatingSystemNameAndVersion like 'Microsoft Windows NT%Server%' In short, it should report back with servers that don't have Avamar installed (not in ARP). The issue is, even though it has filtered many servers that do, I hasn't for all of them. I have RDPed to one of the servers that comes up and in ARP there is an entry 'EMC Avamar for Windows x64 Editions' in the ARP Name field. I entered the server name into the report 'Software registered in Add Remove Programs on a specific computer', and the Display Name shows 'EMC Avamar for Windows x64 Editions'. I also have another collection that checks for servers without Sophos by copying and pasting the query, just changing LIKE "%Avamar%" the LIKE "%Sophos%". The same server doesn't show in the collection as the query has detected Sophos is installed. I can confirm Avamar and Sophos are both installed on this particular server. Thanks, SCCMNoobie.

Hi Jorgen, Thanks for replying. We are using Active Directory Sites as the boundaries and they appear to be fine. Are there any other suggestions? Thanks, sccmnoobie

Hi guys, Not sure exactly where to look or what information to give. We have a primary site server in the main office and have secondary site servers at other sites. They are all set-up to build off PXE, distribute software, basically the lot. Just recently, newly provisioned workstations are now building over the WAN instead of the local secondary, slowing down network speeds, and the system resource in SCCM have the site code of the primary, where it used to be the secondary. Any ideas on where I can look? Much appreciated! sccmnoobie

Hi Waynegro, Thanks for your quick reply. I can connect to the SCCM primary site server via port 8530 successfuly. Thanks, sccmnoobie

Hi all, I successfully set up SUP and initially synchronised. I have a full list of update and it was fine. After the first sync, I'm now getting the attached error. I have checked the ports in SUP and ensured they are set to 8530 and 8531. Is there anywhere else to check? I have also tried a manual sync and still has the 'WSUS server not configured'. Is there anywhere else I need to check? No (apparent) issue in SUPSetup.log, WSUSCtrl.log, and WCM.log. Many thanks, sccmnoobie