GarthMJ

What exactly are your boundaries now? IP Range, AD site, IP subnet (yuck), etc.?

So have you looked at the built-in reports? Why not start with them and edit them to add/remove what you need.

yes, it is just a domain account and therefore is subject to all domain policies, including password expiry.

Take a look at your SSRS setup. Find out what your SQL Execution account name is. Then find out if the account's password has expired. Reset the Account password. Reset the account details within SSRS.

It not supported/recommend to change the logon from the services applet. You need to change it from the SQL tool only. This will ensure that the right permission are setup in the DB and on the DB files themselves.

How exactly did you change the server account name? did you use the Service applet or the SQL Setup applet? Have you tried to report the RP and re-add it?

Status message are you friend but they will not tell you who added what to a collection. They will only tell you that the collection has be "updated"

Dumb question but why not make it two commands? Why must it be one commend line?

Error 5 is access denied. Check your AV software Ensure that your WSUS server has access to delete the files.

If you want to talk about why having no DPs is a bad idea, I will gladly have it with you, but I can tell you are not interested. I (almost) never recommend backing up a DP. They can go up and down like yo-yo that one of the benefits. I hate you say it but it is indeed and access issue. There is no way around it. 0x80070005 = Access is denied. You need to break out procmon and find out exactly why it is getting access denied. Use the PSexec trick to manually test your install in a controlled manner, this will allow you to remove CM12 from the equation too. Sorry I thought you said times out, in your last post. (food comma) :-) You are welcome to post that suggestion https://configurationmanager.uservoice.com/forums/300492-ideas but I doubt it will ever be adopted due to the security risk that will introduce.

With what error? if it is a timeout error then it has nothing to do with CM12. If it is a access denied error then you don't have the permission right. There is honestly no trick to this, You can even simulate the way CM12 will execute anything by following this blog post. http://verbalprocessor.com/2007/12/05/running-a-cmd-prompt-as-local-system/ It is totally your call, to make your life difficult. BTW, I would total disagree with DPs are pointless in a "NO WAN" environment.

I'm sorry to say, doing what you are asking, is like shooting yourself in the foot. But it is your foot to shoot off. Sooo. That blog it is wrong and missing steps, this will not work as describe, you will need to open the network share to computes accounts. So go fix the permission to the share & files and things should work.

Add Win32_TimeZone to the Hardware Inventory then you can create a custom report base on this data.

I would start with what you have..

There is no wrong answer to this but I would work getting you MCSE in Windows 2012. or Windows 10/8 certs.

You will have more problems with remote SQL then you will ever has sharing one instance for CM12 and WSUS. Don't forget to install SSRS too.

There are many reasons for not doing it. Bandwidth being one of them. Troubleshooting Performance; generally it is faster to have SQL local. Remember that CM12 and WSUS is very chatty. How many computers are you managing?

CCMExec (CM12 client) does not need to run on a CAS but SMSExec does.

Yes this can be done and yes they can share a instance, Keep in mind that it is NOT recommend to have SQL remote from CM12 or WSUS for that matter.

It is not supported to edit the database. Hence why I always recommend opening a case with CSS directly on these type of issues.

You don't need a AI point on any primary except the CAS.

No there is only one database for CM12 + the WSUS database. You should see everything in the db unless the security is not setup correctly on the new SQL server. and by the sound of it, it is at the table/view level. I always recommend that you contact CSS anytime you are preforming a CM12 restore or DB move, for this exact reason.

So does it mean that they are getting a 200 error code too?

Compare the IP address of the client to the IIS logs, do they exist in the log?

They all show a 200 error code which is good. You need to match up the IP address to ensure that the problem client is getting a 200 error code.