Kevin79
Established Members-
Posts
511 -
Joined
-
Last visited
-
Days Won
1
Everything posted by Kevin79
-
I'm having an issue with one of my clients. I applied the SCEP policy to that group it belongs to in order to have it install SCEP. The installation failed with How do I have it try to reinstall SCEP? It failed a week ago and the computer has been rebooted since then.
-
Yes I did. I put the deadline two days out and told it the updates should be available as soon as possible.
-
Then they should be fine. Clients can download other packages and even download SCEP updates.
-
I believe so. If I look at Deployment Packages, it says that specific deployment package is on all of my distribution points. I'm assuming the are accessible to the clients. How would I check?
-
I'm having a bit of trouble with Windows updates. I have SUP set up and my clients seem to be installing SCEP updates fine but they never show Windows Updates. I have the updates downloaded and deployed and SCCM shows them as being needed by the client. I looked at the WindowsUpdate.log file on the client and I don't really see much except WUAHandler.log doesn't show any errors. Any idea's how to fix this or what I should look at?
-
Distributing to and managing remote clients
Kevin79 replied to Kevin79's topic in Configuration Manager 2012
I have not. I'll put that on my list of things to look at. -
Distributing to and managing remote clients
Kevin79 replied to Kevin79's topic in Configuration Manager 2012
It VPN the only way to do it? -
What is the easiest and best way to install and manage the Configuration Manager client, Endpoint Protection and Windows Updates on remote computers that don't regularly VPN in to the network. They get email using Outlook Anywhere so they don't ever connect up. How does everyone else handle users like this?
-
Yes, it shows it as having it applied. Let's see... I have schedule scans off. Scan settings are True for "Scan email and email attachments", false for the rest and No Control for "User control of scheduled scans:". Default actions are Recommended, Recommended, Quarantine and Quarantine. Real-time protection settings are True, True, Scan incoming and outgoing files, True, True, True, True, False. I have the default locations in the Exclusion settings. Advanced is False, False, 14, False, False, False. No Threat overrides are set. Microsoft Active Protection Service is Basic Membership and false. Definition updates are 4, 9 AM, True, 4 sources selected (they are Updates distributed from Configuration Manager, Updates distributed from WSUS, Updates distributed from Microsoft Malware Protection Center and Updates distributed from Microsoft Update), 72 and (none).
-
Just an update - I tried on another computer and it isn't updating either. The only way I can get it to update is if it connects to SCCM. Any suggestions would be great since I can't deploy this until that is working.
-
How do I look at that? If I look at Help - About System Center Endpoint Protection, they look right.
-
Does it hurt anything to have exclusions in the antimalware policies for directories and/or processes that don't exist on the server? I have DC, DNS, DHCP, Sharepoint, Exchange, SQL, SCCM and other servers that all need different directories excluded in the real time scans. I don't really want to have a different collection for each type of machine just for excluded directories so I want to combine all the policies in to one. The only thing different with all of these is the directory exclusion. Will it cause an issue?
-
I looked in those two logs and all I see is that it can't reach the WSUS/SUP server (which would make sense since it isn't on the company network). The logs in ProgramData\Microsoft\Microsoft Antimalware\Support didn't show anything.
-
Thanks. Another question. Say I have remote users that don't VPN very often. If there a way to have SCCM tell the clients to use Microsoft's WSUS servers when they aren't VPNed in instead of using the SUP?
-
I haven't yet. I didn't know what logs to look at. I'll look know. Thanks.
-
Automatic client push stopped working
Kevin79 replied to Kevin79's topic in Configuration Manager 2012
I think I got it fixed. I had to disable the automatic installation and then reenable it. -
I have a few test clients with SCEP on them. I've removed one clients from our physical network in order to test the updating process on remote clients. Unfortunately, the client isn't updating. It has access to the internet, just not our domain (and the SCCM server). The policy that is has has it set to update from 4 sources: Configuration Manager, WSUS, Microsoft Update and Microsoft Malware Protection Center (in that order). I also have "If Configuration Manager is used as a source for definition updates, clients will only update from alternative sources if definition is older than (hours):" set to 72. My test computer is now 5 days old on the definitions and it doesn't look like it is updating. How do I get this working?
-
I've had something really strange happen. The automatic push installation of the SCCM client suddenly stopped working. It was working without an issue and now it doesn't work at all on any of my 12 sites. If I right click on the client in the console and tell it to install, it installs fine. It just doesn't install automatically. I looked in the ccm.log file on the server but it doesn't show anything. What should I look at to troubleshoot this?
-
I'm in the process of testing SUP with SCCM and we are currently using WSUS with group policy to configure the clients. Is there an easy way to have clients start using the SUP? I've created a group in AD that denies computers permission to my WSUS GPO but the only way I can get the clients to change over is to reboot them. For desktops PC's this isn't a huge issue but it is with servers. I can't reboot servers multiple times in order to get it to start using SCCM. How do I get them to read the GPO change without rebooting?
-
How do I back up a SCCM 2012 server?
-
Can I set up SCCM 2012 to delete the downloaded files for all updates that are superseded/expired? I have it downloading updates for Forefront and it looks like I have all of the old updates on my server. It is currently taking up 1.34GB of drive space and I would like to have it clean up the files so that the directory doesn't keep growing.
-
Anyone?
-
I am testing the SUP feature in SCCM 2012. I have it separating the updates by OS (Windows 7, Windows XP, Server 2008(R2), etc.). While testing, I had the Windows 7 updates setup first and deployed the updates to my main site only. I then set up the Server 2008R2 updates and then deployed those to all of my SCCM sites. Servers in those sites kept saying they were downloading the files (on regular servers, when told to install updates, the SCCM servers did say that the updates were copied to them). When I copied the Windows 7 updates to the deployment shares for all my sites, my 2008R2 servers installed the updates. Does the SUP feature only download updates once, even if it applies to multiple Operating Systems?
-
I looked in my WindowsUpdate.log and I don't see anything in the log files but I'm not sure I would since I have updates disabled from WSUS...
-
The ADR seems to be downloading the updates fine. How do I tell if the clients are downloading the updates?