stevenjwilliams83

How can I create a reboot task for a collection of computers?

I am trying to create an auto deployment rule for my windows servers, but because I have 2003/2008/2012 the software package/auto deployment rule exceeds the 1000 update limits. So I want to create different collections within my server collection for each version of windows and create auto deployment rules for each collection. I don't know how to figure out what servers have what version of windows. Can someone guide me in the right direction to create a query to assign the right server to the right collection group?

wow this site does not like IE10

RED: Corporate connectivity is not working. Microsoft DirectAccess Connectivity Assistant is not properly configured. Please contact your administrator if this problem persists. 10/6/2013 13:32:6 (UTC) C:\Windows\system32\LogSpace\{8E372627-ADD6-47A4-B3FE-B7560CE2A881}>ipconfig /all Windows IP Configuration Host Name . . . . . . . . . . . . : USLAVL0033 Primary Dns Suffix . . . . . . . : MWP.Corp.com Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : MWP.Corp.com ALV.Corp.com ATI.Corp.com WC.Corp.com CS.Corp.com PF.Corp.com RM.Corp.com Corp.com Wireless LAN adapter Wireless Network Connection: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Realtek RTL8188CE 802.11b/g/n WiFi Adapter Physical Address. . . . . . . . . : 20-10-7A-38-4C-C7 DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : MWP.Corp.com Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller Physical Address. . . . . . . . . : E4-11-5B-4D-59-61 DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes IPv4 Address. . . . . . . . . . . : 10.170.2.85(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.254.0 Lease Obtained. . . . . . . . . . : Monday, June 10, 2013 8:31:00 AM Lease Expires . . . . . . . . . . : Tuesday, June 18, 2013 8:31:00 AM Default Gateway . . . . . . . . . : 10.170.2.1 DHCP Server . . . . . . . . . . . : 10.170.5.150 DNS Servers . . . . . . . . . . . : 10.170.5.10 10.170.5.11 10.70.20.11 10.70.60.15 NetBIOS over Tcpip. . . . . . . . : Enabled C:\Windows\system32\LogSpace\{8E372627-ADD6-47A4-B3FE-B7560CE2A881}>netsh int teredo show state Teredo Parameters --------------------------------------------- Type : disabled Server Name : teredo.ipv6.microsoft.com. Client Refresh Interval : 30 seconds Client Port : unspecified State : offline Error : none C:\Windows\system32\LogSpace\{8E372627-ADD6-47A4-B3FE-B7560CE2A881}>netsh int httpstunnel show interfaces Interface IPHTTPSInterface (Group Policy) Parameters ------------------------------------------------------------ Role : client URL : https://69.21.236.78:443/IPHTTPS DcaDefaultLog.txt

Anyone successfully using direct access with 2012 and windows 7/8 clients? I am having a heck of a time getting this going. From my windows 7 computer here is my log file. I assume the fact that my teredo interface is disabled is an issue, but shouldn't the direct access GP that the server creates take of all this? RED: Corporate connectivity is not working. Microsoft DirectAccess Connectivity Assistant is not properly configured. Please contact your administrator if this problem persists. 10/6/2013 13:32:6 (UTC) C:\Windows\system32\LogSpace\{8E372627-ADD6-47A4-B3FE-B7560CE2A881}>ipconfig /all Windows IP Configuration Host Name . . . . . . . . . . . . : USLAVL0033 Primary Dns Suffix . . . . . . . : MWP.Corp.com Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : MWP.Corp.com ALV.Corp.com ATI.Corp.com WC.Corp.com CS.Corp.com PF.Corp.com RM.Corp.com Corp.com Wireless LAN adapter Wireless Network Connection: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Realtek RTL8188CE 802.11b/g/n WiFi Adapter Physical Address. . . . . . . . . : 20-10-7A-38-4C-C7 DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : MWP.Corp.com Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller Physical Address. . . . . . . . . : E4-11-5B-4D-59-61 DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes IPv4 Address. . . . . . . . . . . : 10.170.2.85(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.254.0 Lease Obtained. . . . . . . . . . : Monday, June 10, 2013 8:31:00 AM Lease Expires . . . . . . . . . . : Tuesday, June 18, 2013 8:31:00 AM Default Gateway . . . . . . . . . : 10.170.2.1 DHCP Server . . . . . . . . . . . : 10.170.5.150 DNS Servers . . . . . . . . . . . : 10.170.5.10 10.170.5.11 10.70.20.11 10.70.60.15 NetBIOS over Tcpip. . . . . . . . : Enabled C:\Windows\system32\LogSpace\{8E372627-ADD6-47A4-B3FE-B7560CE2A881}>netsh int teredo show state Teredo Parameters --------------------------------------------- Type : disabled Server Name : teredo.ipv6.microsoft.com. Client Refresh Interval : 30 seconds Client Port : unspecified State : offline Error : none C:\Windows\system32\LogSpace\{8E372627-ADD6-47A4-B3FE-B7560CE2A881}>netsh int httpstunnel show interfaces Interface IPHTTPSInterface (Group Policy) Parameters ------------------------------------------------------------ Role : client URL : https://1.1.1.1:443/IPHTTPS

Peter - Can you explain this a bit more? When we configured this we setup a GPO to do this, like you would for WSUS?

There isnt a antimalware policy deployed to my desktop and laptop collection. But in software Library > All Software Updates > Endpoint Security Updates > on my packages, they are deployed to the all systems collection. So what is this doing?

When you set the GPO for intranet destination for your SCCM server for windows updates, how does this work for computers that are in a location with a DP? Do I need to specify another GPO specific to those devices that points to the DP for their intranet point for windows updates?

Is there a group policy setting that needs to be in place to make sure endpoint is getting updates from my sccm server? I built a new server, added it to the domain, but was unable to update endpoint until I enabled my proxy settings. That tells me it is going to the internet to get updates, does anyone disagree? How can I check if this is the case?

Where is the option in GP that allows a user to repair their network connection?

Does Windows 2012 include UAG? Is anyone using it? Does anyone have any good implementation guides to share beside TechNet?

I rolled out a new server the other day and after I joined it to the domain, my Jan software packed was pushed and installed. My concern was, what about all the updates to this point? GP does not allow a Desktop/Server out to Microsoft updates, it points them to our SCCM server. How is everyone making sure a new server and or desktop is fully up to date when they are joined to the domain?

I couldn't honestly tell you. It was created prior to my arrival. I would like to disable it, but what issues will it cause is the question. Is there somewhere in SCCM that I can look what accounts its using for things?

What are the requirements needed for SCCM 2012 as far as user accounts go in AD? What is the account used when the system applies updates, patches, software packages, etc? I have an admin account created for SCCM but unfortunately it has been abused and is being used all over for other things rather than just SCCM tasks. I want to somehow eliminate this issue. So I was going to restrict where this account could be logon at. So I would restrict it from logging on to member servers except my SCCM server. Any insights on this and what I need to check to make sure it doesnt break anything? Thanks.

Does anyone know if there is a way to make IE10 run in IE9 mode everytime you launch it? I always have to change it with the F12 option everytime I launch it.

This is what I did. And the capture still fails.

Ok. But I will want to automate the process of bitlocker when I deploy....Otherwise I have to go to every PC and start the process.

I have followed your instructions to the "T", with no luck. I do want my build and capture to include bitlocker as this is a requirement for all new deployments. So that is why I created two partitions. Do I need any type of drivers for storage?

Can I do this somehow without touching the PC? My deployment has disk 0 configured for 2 partitions, one is 100mb hidden, the other is 100 percent of what is left and for the system.

I can deploy a standard image to a VM no problem, but build capture fails all the time. smsts.log file attached can someone tell me what I am looking for? smsts.log

I have looked at this process over and over again....And it works up the point where I reboot my VM, then I always get an error, that it downloaded the abortpxe.com file. I usually solve this issue by clearing pxe requirements and deleting the computer account out of sccm, but the process in this article is to import the machine info first.