FEJustinTH

I am having an issue where it is filling up the main data drive with hash files. The hash files are the same size as the WIM files we use. They are in the root drive of the FileLib directory, and they all have different names but are the same size which correlate perfectly with the WIM file sizes. One has 7 copies (8.6 GB each), another 24 (5 GB each), and the last one has 18 (4.8 GB each). Then on the SQL drive there is a FileLib that has the same hash files with the same sizes, they are being duplicated there but not as many. I am not sure which log file is required to look at this issue, I was guessing that it was SMSProv but I will wait for the correct requested one. Our Operating System Images files were set on a schedule to update and distribute and when they tried to distribute after a update on the 19th they failed because the hash files filled the drives. I tried removing one of them from a DP and redistributing it but it does not even try to do it (does not show it In Progress).

Ok, that makes sense, would you put all users into the uninstall user group? Right now I have this setup: 1 AD Group pointed at 2 user groups in SCCM with a query: select SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name, SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain from SMS_ R_User where SMS_R_User.UserGroupName = "DOMAINNAME\\GROUPNAME" Install Application (pulls from AD Securty group) -> If in this group install Uninstall Application -> All Users -> exclude the install application group Do you even need the query in the uninstall group or just put all users in there so it will only install the application if you are in the install application group? Does that sound about right? Here is the uninstall query: select SMS_R_User.ResourceId, SMS_R_User.ResourceType , SMS_R_User.Name, SMS_R_User.UniqueUserName, SMS_ R_User.WindowsNTDomain from SMS_R_User where SMS_R_ User.UserGroupName != "FEMSI\\SCCM MS Project Standard 2013"

I have my user account in the AD group, and I have the application installed also but I am not showing up in the device collection.

Applications yes (Microsoft Project and Visio are primary concern). I have a rule on each of those applications to only install on the users primary device. One deployment type per application. Here is a good example of what I am trying to do in the link before but I cannot get it to show the devices in the collections after I setup those queries: https://social.technet.microsoft.com/Forums/en-US/45c5c1cc-6245-4876-9ea2-89f44ab3b308/collection-query-ad-group-membership-filter-for-addremove-programs?forum=configmgrgeneral In that post he is deploying to computers though, I want to add users to the AD groups and have it deploy to that users primary device.

Scenario: We have AD security groups containing users to manage our product licenses (only so many in each group before we know we need to order more). We would like to deploy applications to those security groups and have them get installed on the users primary device. If someone gets added into those groups they would get the software, if they are removed from those groups it would automatically uninstall it. I have discovery on and I can see those groups in SCCM, but I am trying to get the query language correct. For the uninstall and install groups, I was going to do a query where it would uninstall the application from all users computers except for the users in the install group. How would you go about doing this? Would it be better to do this through User Collections rather than Device Collections?

I am trying to create a stand alone TS on a thumb drive, the thumb drive is 29 GB formatted (32 GB). The WIM is 11.8 GB, so it is not too large for the thumb drive. I have attached the logs below with the errors. It is referring to the Microsoft Office Application Package which I have re-distributed and that did not fix it. CreateTsMedia.log

Any idea's on this? We have tried rebuilding the VM and setting everything back up from Scratch and we are still getting the same error.

Getting the error below when installing a fresh install of SCSM 2012 SP1 to a SQL 2008 R2 cluster. PopulatingUserRoles: Populating user roles for SM Server PopulatingUserRoles error: System.Runtime.InteropServices.COMException : The security ID structure is invalid. (Exception from HRESULT: 0×80070539) MSI (s) (58:3C) [08:59:19:740]: NOTE: custom action _PopulateUserRoles unexpectedly closed the hInstall handle (type MSIHANDLE) provided to it. The custom action should be fixed to not close that handle. CustomAction _PopulateUserRoles returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox) MSI (s) (58:6C) [08:59:19:776]: User policy value ‘DisableRollback’ is 0 MSI (s) (58:6C) [08:59:19:776]: Machine policy value ‘DisableRollback’ is 0 Action ended 8:59:19: InstallFinalize. Return value 3.

I go through these steps: All Software Updates > Synchronize Software Updates > Add Criteria (Products) > Windows 7 > Download all available Operation System Images > Right Click the Image > Schedule Updates > Windows Architecture x64 > Apply all of the available updates > Schedule ASAP Like this: http://www.windows-noob.com/forums/index.php?/topic/4683-using-sccm-2012-rc-in-a-lab-part-12-updating-an-operating-system-image-using-offline-servicing/

We are using GP to do all the updates to clients, this is just for the image.

Here is a screen shot for an example of what it is missing. When I go to download the updates I tell it to get all of the ones for windows 7, and when I search for them in all software updates by the KB it does not find them.

Sorry, I am being told this by the support team. They are referring to optional updates not Microsoft updates, I am going to do some testing, but using the scheduled updates I am getting all the updates that apply to windows 7 and office.

I have been updating my WIM files with windows updates, it is finding and including all of those but it is not including microsoft updates. Is there a way to include those, or does that need to be a separate script to check and install those?

I have done some searching but I cannot find exactly what I am looking for. Problem is with unknown computers only. I can assign a TS to a Device Collection and if the computer is in that device collection it works just fine. So I know that PXE booting is working. Now with Unknown Computers it pulls the correct IP address for the SCCM 2012 server and it pulls the correct gateway. It errors out with PXE-M0F : Exiting Intel Boot Agent - which from what I have gathered is just saying that it is exiting PXE. Below is my PXE settings on the DP.

Creating a new Device collection worked so it must of been something with the WAIK issues I had, disreguard.

It has been 24 hours at least since I tried the two methods below and the resources are still not showing up. The resource was built with a OSD through a TS and the SCCM Client is on the resource. I have tried it three different ways: Device Collections > All Desktop and Server Clients > Right Click on the Resource > Add Selected Items > Add Selected Items to Existing Device Collection Device Collections > Test Bare Medal OSD > Add Resources (Menu Bar) > Search for resource > Add > OK Right click on the Collection > Properties > Membership Rules > Add Rule > It does not show up when I search for it though I know that I can access the computers because I can see both of their logs, and I know that SCCM can see them because they shop up in the All Desktop and Server Clients Collection as Active. What logs should I be looking at to find more information? Thank you in advance

Well I fixed it, seems that somehow Windows AIK got uninstalled, once I reinstalled it everything was fixed.

Sorry we can disreguard this post - can delete if you want to. Most of the information is in the SCCM Permissions thread

We had a rep come in and install everything, and get it all running. I followed your guide for the MDT portion of it only, but after I made a TS I started getting PXE boot errors and could not even PXE boot to the orginal non MDT TS. I would greatly appreciate it if you would remote in and take a look. Another piece of information, I can create applications just fine.

Some errors on Configuration Manager Status - Site Status - Management Point: Severity Type Site code Date / Time System Component Message ID Description Error Milestone FEM 7/25/2012 2:29:17 PM INBA-SCCM.flanderselectric.com SMS_WSUS_CONTROL_MANAGER 7000 WSUS Control Manager failed to configure proxy settings on WSUS Server "INBA-SCCM.flanderselectric.com". Possible cause: WSUS Server version 3.0 SP2 or above is not installed or cannot be contacted. Solution: Verify that the WSUS Server version 3.0 SP2 or greater is installed. Verify that the IIS ports configured in the site are same as those configured on the WSUS IIS website.You can receive failure because proxy is set but proxy name is not specified or proxy server port is invalid. Severity Type Site code Date / Time System Component Message ID Description Error Milestone FEM 7/25/2012 2:18:33 PM INBA-SCCM.FLANDERSELECTRIC.COM SMS_SITE_SQL_BACKUP 4959 Site Component Manager successfully installed this component. However the SQL Server Principal Name (SPN) could not be validated in Active Directory. Possible cause: The MSSQL Service is running under a user account, instead of the computer account. In this case, SQL does not publish its own SPN. Solution: Manually publish the SQL Server SPN in Active Directory. The component will operate correctly. However remote site systems requiring access to SQL Server (i.e. management points) might not be able to access the SQL database. Refer to your ConfigMgr Documentation or the Microsoft Knowledge Base for further information. Severity Type Site code Date / Time System Component Message ID Description Error Milestone FEM 7/25/2012 2:15:05 PM INBA-SCCM.flanderselectric.com SMS_EXECUTIVE 578 Could not read registry key "HKEY_LOCAL_MACHINE\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Components\SMS_EXECUTIVE\Yield Configuration" on computer INBA-SCCM. The operating system reported error 2: The system cannot find the file specified. Severity Type Site code Date / Time System Component Message ID Description Error Milestone FEM 7/25/2012 2:14:05 PM INBA-SCCM.flanderselectric.com SMS_EXECUTIVE 578 Could not read registry key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Components\SMS_EXECUTIVE" on computer INBA-SCCM. Severity Type Site code Date / Time System Component Message ID Description Error Milestone FEM 7/24/2012 4:28:23 PM INBA-SCCM.flanderselectric.com SMS_HIERARCHY_MANAGER 3303 Hierarchy Manager cannot connect to the site database. Possible cause: SQL Server problem. Solution: 1. Review the immediately preceding status messages from this component about SQL Server errors. 2. Verify that this computer can reach the SQL Server computer. 3. Verify that SQL Server services are running. 4. Verify that the site server computer account can access the site database. 5. Verify that the site database, transaction log, and tempdb are not full. 6. If the problem persists, check the SQL Server error logs. Severity Type Site code Date / Time System Component Message ID Description Error Milestone FEM 7/24/2012 3:36:43 PM INBA-SCCM.flanderselectric.com SMS_PORTALWEB_CONTROL_MANAGER 8000 Portal Web Site Control Manager detected PORTALWEB is not responding to HTTP requests. The http status code and text is 401, Unauthorized. Possible cause: Internet Information Services (IIS) isn't configured to listen on the ports over which PORTALWEB is configured to communicate. Solution: Verify that the designated Web Site is configured to use the same ports which PORTALWEB is configured to use. Possible cause: The designated Web Site is disabled in IIS. Solution: Verify that the designated Web Site is enabled, and functioning properly. For more information, refer to Microsoft Knowledge Base. Severity Type Site code Date / Time System Component Message ID Description Error Milestone FEM 7/24/2012 10:01:06 AM INBA-SCCM.flanderselectric.com SMS_DISTRIBUTION_MANAGER 2391 Distribution manager failed to connect to the distribution point ["Display=\\INBA-SCCM.flanderselectric.com\"]MSWNET:["SMS_SITE=FEM"]\\INBA-SCCM.flanderselectric.com\. Check your network and firewall settings. Severity Type Site code Date / Time System Component Message ID Description Error Milestone FEM 7/20/2012 8:19:36 AM INBA-SCCM.FLANDERSELECTRIC.COM SMS_HIERARCHY_MANAGER 3353 Hierarchy Monitoring detected that the ConfigMgr SQL Server INBA-SCCM.flanderselectric.com ports 1433,4022, are not active on Firewall exception.

Site reset did not fix it

When installing and uninstalling MDT is there anything I need to do, like reinstall something or change permissions?

I have tried restarting WMI and WDS without any luck too, any other idea's? I think it has something to do with installing MDT but I followed anyweb's guide to install it but I started having pxe boot issues so I uninstalled it and then these errors started... Site Permissions:

Thank you for responding, I greatly apprecaite it. Those file permissions are set on the software folder. This problem started after I installed MDT, so I uninstalled it and it did not help. I dont know if that was just a coincidence. Yes, I am logged on with the same account that we set config manager up with.