Search the Community

Hi guys, I was hoping someone could provide some guidance. We are currently in the process of a forest/domain consolidation. We have two AD forests with one domain in each. We are in the process of standing up a third forest with one domain in it on 2012 R2 that we will be moving all resources and users to over the next year. I understand that i'll need to bring up a new primary site with a new Site Code in the new third forest/domain. Some other details about the SCCM 2007 environment: One Site Server running SCCM 2007 R3 One Remote SQL server running 2008 Forefront Endpoint Protection is Integrated WSUS with a remote WSUS server on 3.0 is integrated Windows OS Deployments with WIndows Deployment Services are integrated and currently configured for deploying Windows 7 Parallels Management Suite for Managing Macs is integrated We are currently deploying many applications via SCCM Updates Publisher 2011 is current integrated with SCCM on the site server. My question is, should i migrate from the existing SCCM 2007 environment to SCCM 2012 whilst still in the same forest first before migrating collections and packages etc to the new forest? Or just migrate once and migrate the SCCM 2007 forest collections and packages etc to the new 2012 R2 forest so as to not do double work? Any pros and cons either way? If anyone has done this sort of migration i would appreciate your recommendations. Thanks Joey

Hi There, I am in the middle of a OS refresh of our estate (XP to Windows 7) and many of the sites are running 20+ machines on slow links (20mb or less) and the OS refresh must be ran outside of hours We have a very tight timescale for the OS refresh so i would like to create a protected distribution point that can be taken to these slow sides and run upgrades locally rather than pulling down the wim 20+times over a slow link. Unfortunately i only have desktop PC's i5 4GB memory at the moment to use for the DP's and plan on once the OS refresh is completed at a site, remove this DP and take it to the next site. I would like to know if i can just use Windows 7 and set this as a protected branch distribution point or if i would be best to install Server 2008 and set it up as a full DP with PXE support? The important aspect is being able to move the protected DP between sites (reassigning the protected boundary each time) SCCM 2007 SP2 R3, 1 primary site server, no secondary sites and a couple of main DP's in main sites. Thanks

Currently in the process of deploying IE9 to about 1000 users as a software update. 400 of these users are reporting a status of 'update not required'. The other 60% are reporting required and have installed IE9 correctly. Workstations are all standard running the following: Windows 7 x64 Internet Explorer 8 What might be worth noting is that we only release security / critical software updates, regular windows updates are not deployed so we're missing about 30 or so. Any help would be great.

I have an inherited environment and just trying to understand the PXE process Currently I: In SCCM Add computer manually in SCCM Add computer to collection to boot and reimage computer with XP image Go to computer, reboot and press f12 to PXE boot and f12 to start imaging The imaging actually goes to a MDT image screen (to select the image from MDT to use) My assumption ....is: The PXE server checks to see if there is a SCCM advertisement for the computers MAC address, if there isn't it passes it on to MDT to give the computer an image. A few hours later if you boot the PC and f12 the SCCM image is sucessfully loaded. I am assuming that it takes a few hours for "all" of SCCM to know it exisits? Is this "normal" behaviour for MDT to be the fallback image option? cheers Lesta

Hi all I'm migrating a number of computers at remote sites from XP 32 to 7 64. The upgrade will be done by sending around a USB drive which will have a task sequence on it to upgrade them. As we are using SCCM 2007, I'm largely following this guide: http://www.windows-noob.com/forums/index.php?/topic/1735-using-offline-mode-in-windows-pe-using-usmt-4-via-a-task-sequence-in-sccm-2007-sp2/ My problem is that at some of the sites, the 80GB hard drives are split 40GB/40GB between C: and D: and I rather than run the risk of maxing this out mid-process, or leaving the disk near full capacity once reimaged, I'd like to use the "Partition Disk 0" Task Sequence step and get the full 80GB back. Obviously with the c: being formatted, I am unable to store my user state data there, So, my plan is to use the USB with the task sequence on it, with enough free space for the USMT to migrate the data to, as well as a few other files and registry keys. I'm not sure how to do this and my google-fu is failing me here. I'm thinking along the lines of the following... Do inserted flash drives automatically get mounted as D:? (I'd imagine not as you need to set %systemdrive% manually) I understand x: is the WinPE location - If the task sequence is on USB does this mean x: = usb? Can I somehow mount the USB drive using a task sequence? If anyone has any experience with this I'd be rather grateful! Thanks

Thanks for looking over this question. It's driving me crazy. In our corporate environment we have many workstations that auto log in with a machine-specific username and password. We are a hospital, and these are exam PCs, so many important variables are attached to these unique IDs. Right now, the environment is Windows XP 32 bit. We are using Config Manager 07 to deploy Windows 7 64 bit. In the XP environment, I have my task sequence do a command to back up the registry information I need before it downloads PE and reboots. It's a native command line, and it runs a batch file located on a remote server that builds a custom reg file for that machine, naming it dynamically based on the machine's name using the %computername% variable. It pulls out 5 values from this key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon It puts them all into a single .reg file that can then be merged manually or via a command line on the 64 bit machine. The reg file works, so it's not malformed or incompatible. However, the problem is that I want do this part automatically as part of the task sequence. There are simply too many PCs to do it manually one-by-one. At the end of my task sequence, after Setup Windows and ConfigMgr, I have placed the 4 attempts, each in their own task: C:\Windows\REGEDIT /s \\server\share\temp\%computername%.reg -redirection is OFF reg add \\server\share\temp\%computername%.reg -redirection is OFF C:\Windows\REGEDIT /s \\server\share\temp\%computername%.reg -redirection is ON reg add \\server\share\temp\%computername%.reg -redirection is ON All of these tasks have Continue on Error enabled and they are all running with an admin account. Again, if I run any one of these commands from the command line while logged in as the admin, they work. As a TS, they do not. From what I can tell the problem is that once the TS is complete there is a hidden final task to prepare the machine to boot into Admin or wait at the ctrl+alt+del screen (it does the latter), and this action clears the registry information I just merged. Does anyone have an idea for a workaround? Ideally, when the task sequence completes the workstation is left in the logged-in state using the autologon registry information. Thank you -Brian

I am trying to understand how to use an established task sequence for OSD and use it to target a collection. There has to be something different on how the programs are configured in task sequence that are making it diffcult to deploy as intended. What should you look for? Would you remove all reboots and leave one for the end? Below is the error from the execmgr.log And if there i better way at doing this then please let me know. I am trying to bascially come up with a way to have my company order workstations and those computers recieve the software normally achieved during the OSD. Error from execlog Notify user mandatory program * is about to run execmgr 3/4/2013 2:04:25 PM 1480 (0x05C8) Policy arrived for child program Disable Java Updates execmgr 3/4/2013 2:04:26 PM 2648 (0x0A58) Policy arrived for child program Install Attachmate Extra X-treme 9.1 execmgr 3/4/2013 2:04:26 PM 2648 (0x0A58) Policy arrived for child program Install Conferencing Addin execmgr 3/4/2013 2:04:26 PM 2648 (0x0A58) Policy arrived for child program Install Live Meeting Console execmgr 3/4/2013 2:04:26 PM 2648 (0x0A58) Policy arrived for child program Install Adobe Reader execmgr 3/4/2013 2:04:26 PM 2648 (0x0A58) Policy arrived for child program Install App-V 4.6 execmgr 3/4/2013 2:04:26 PM 2648 (0x0A58) Policy arrived for child program Install SQL Server Native Client 10 execmgr 3/4/2013 2:04:27 PM 2648 (0x0A58) Policy arrived for child program Install Office 2010 execmgr 3/4/2013 2:04:27 PM 2648 (0x0A58) Policy arrived for child program Install Autologon execmgr 3/4/2013 2:04:27 PM 2648 (0x0A58) Policy arrived for child program Install AnyConnect Windows 7 execmgr 3/4/2013 2:04:27 PM 2648 (0x0A58) Policy arrived for child program Install SEP (TS) execmgr 3/4/2013 2:04:27 PM 2648 (0x0A58) Policy arrived for child program Install Full Disk Encryption execmgr 3/4/2013 2:04:27 PM 2648 (0x0A58) Policy arrived for child program Install SEE Cert execmgr 3/4/2013 2:04:27 PM 2648 (0x0A58) Policy arrived for child program Install SEE Framework execmgr 3/4/2013 2:04:28 PM 2648 (0x0A58) Policy arrived for child program Per-system unattended execmgr 3/4/2013 2:04:28 PM 2648 (0x0A58) Policy arrived for child program Install Oracle execmgr 3/4/2013 2:04:28 PM 2648 (0x0A58) Policy arrived for child program Install Silverlight execmgr 3/4/2013 2:04:28 PM 2648 (0x0A58) Policy arrived for child program Del Monte Foods Show Sender Photo execmgr 3/4/2013 2:04:28 PM 2648 (0x0A58) Policy arrived for child program Java 6 ru17 execmgr 3/4/2013 2:04:28 PM 2648 (0x0A58) Policy arrived for parent package PGH0026B program * execmgr 3/4/2013 2:04:28 PM 2648 (0x0A58) Raising event: [sMS_CodePage(437), SMS_LocaleID(1033)] instance of SoftDistProgramOfferReceivedEvent { AdvertisementId = "PGH201DB"; ClientID = "GUID:057B1145-38CE-4096-8562-4BA970DFC7CC"; DateTime = "20130304190428.958000+000"; MachineName = "TS1"; ProcessID = 2516; SiteCode = "PGH"; ThreadID = 2648; }; execmgr 3/4/2013 2:04:28 PM 2648 (0x0A58) Executing program in Admin context execmgr 3/4/2013 2:04:35 PM 2356 (0x0934) Execution Request for package PGH0026B program * state change from Running to NotifyExecution execmgr 3/4/2013 2:04:35 PM 2356 (0x0934) Execution Manager timer has been fired. execmgr 3/4/2013 2:04:35 PM 976 (0x03D0) Executing program as a task sequence. execmgr 3/4/2013 2:04:35 PM 2356 (0x0934) Successfully prepared command line "C:\Windows\system32\CCM\TSLauncher.exe" execmgr 3/4/2013 2:04:35 PM 2356 (0x0934) Command line = "C:\Windows\system32\CCM\TSLauncher.exe", Working Directory = C:\Windows\system32\ execmgr 3/4/2013 2:04:35 PM 2356 (0x0934) Created Process for the passed command line execmgr 3/4/2013 2:04:35 PM 2356 (0x0934) Raising event: [sMS_CodePage(437), SMS_LocaleID(1033)] instance of SoftDistProgramStartedEvent { AdvertisementId = "PGH201DB"; ClientID = "GUID:057B1145-38CE-4096-8562-4BA970DFC7CC"; CommandLine = "\"C:\\Windows\\system32\\CCM\\TSLauncher.exe\""; DateTime = "20130304190435.425000+000"; MachineName = "TS1"; PackageName = "PGH0026B"; ProcessID = 2516; ProgramName = "*"; SiteCode = "PGH"; ThreadID = 2356; UserContext = "NT AUTHORITY\\SYSTEM"; WorkingDirectory = "C:\\Windows\\system32\\"; }; execmgr 3/4/2013 2:04:35 PM 2356 (0x0934) Raised Program Started Event for Ad:PGH201DB, Package:PGH0026B, Program: * execmgr 3/4/2013 2:04:35 PM 2356 (0x0934) Getting member download locations for program * package PGH000D1 execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Adobe Flash Player ActiveX 10.0.12.36 package PGH0010C execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Apple QuickTime 7.55.90.70 package PGH0010D execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Microsoft Office Communicator 2007 R2 package PGH00138 execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Microsoft Visio Viewer 2007 package PGH00161 execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Del Monte Foods Productivity Center package PGH00178 execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program * package PGH0017E execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program * package PGH00181 execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Install Attachmate Extra X-treme 9.1 package PGH00189 execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Install Conferencing Addin package PGH0018A execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Install Live Meeting Console package PGH0018B execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Install Adobe Reader package PGH001A0 execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Disable Java Updates package PGH00185 execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Install App-V 4.6 package PGH001A3 execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Install SQL Server Native Client 10 package PGH001A5 execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Install Office 2010 package PGH001A9 execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Install Autologon package PGH001B9 execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Install AnyConnect Windows 7 package PGH001BB execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Install Full Disk Encryption package PGH001CB execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Per-system unattended package PGH001CD execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Install SEP (TS) package PGH001C0 execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Install Oracle package PGH001E1 execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Install Silverlight package PGH001ED execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Del Monte Foods Show Sender Photo package PGH0020E execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Getting member download locations for program Java 6 ru17 package PGH0022F execmgr 3/4/2013 2:04:35 PM 2648 (0x0A58) Program exit code 257 execmgr 3/4/2013 2:04:35 PM 3996 (0x0F9C) Looking for MIF file to get program status execmgr 3/4/2013 2:04:35 PM 3996 (0x0F9C) Script for Package:PGH0026B, Program: * failed with exit code 257 execmgr 3/4/2013 2:04:35 PM 3996 (0x0F9C) ***This is the TS package ID number Raising event: [sMS_CodePage(437), SMS_LocaleID(1033)] instance of SoftDistProgramErrorEvent { AdvertisementId = "PGH201DB"; ClientID = "GUID:057B1145-38CE-4096-8562-4BA970DFC7CC"; DateTime = "20130304190435.996000+000"; ExitCode = "257"; MachineName = "TS1"; PackageName = "PGH0026B"; ProcessID = 2516; ProgramName = "*"; SiteCode = "PGH"; ThreadID = 3996; UserContext = "NT AUTHORITY\\SYSTEM"; }; execmgr 3/4/2013 2:04:35 PM 3996 (0x0F9C) Raised Program Error Event for Ad:PGH201DB, Package:PGH0026B, Program: * execmgr 3/4/2013 2:04:35 PM 3996 (0x0F9C) Execution is complete for program *. The exit code is 257, the execution status is FailureNonRetry execmgr 3/4/2013 2:04:36 PM 3996 (0x0F9C) Execution Request for package PGH0026B program * state change from Running to Completed execmgr 3/4/2013 2:04:36 PM 3996 (0x0F9C) Execution Manager timer has been fired. execmgr 3/4/2013 2:11:36 PM 2836 (0x0B14)

Help with SCCM and Active Directory On same server. Well hello my name is Zaper and I'm from Israel First thing first: I never seen an SCCM in my life this is my first time and I got no idea how to use it. Now few years ago a guy that used to work here installed the SCCM in our Active Directory server so I have on the same server both SCCM 2007 and my active directory. (Windows server 2003). my manager came over and sad "well we got this something that supposed to work but no one have a clue how to use it so you do it". Now all I need to happen is I want to push a package that will be installed on certain clients in my active directory. When I had a new client to my AD it wont show on SCCM but! When I click: Connect to site data base > connect to site data base on this server > browse I see the new client I added to the AD. Please If I got no chance to make it work please let me know. Sorry for bad grammar Zaper.

Having built a System Center (cm)12 for the purpose of WSUS and imaging of a new Win 7 and to deploy applications via the application catalogue. I have followed the instructions of this site. FANTASTIC but the question of getting just Visio, not office 2007 to deployment via the application catalogue I can’t find an answer to…. First you have issue relating to exe to MSI for the catalogue to display, and got many exe based apps to deploy and work all via the catalogue with approval and detection methods working but i just can’t get Visio to install correctly from the catalogue. Visio is shown in the catalogue, approval works and then it tries to install with various errors. Each time I change anything, it prompts me to say it has a new software and I clear the CCMCache folder via the client to ensure it pulls the new on down. Using setup.exe /visio.msp /config config.xml, nothing happens: I have amend the config.xml to include the PID key (with works on a manual install VLK version) it gives error 30030 Using setup.exe /config.xml just reinstalls office back on to the already installed version from the fat image. Using the setup.exe /adminfile "\\****\Deployment\Applications\Office 2007 Professional Plus\Setup_visio.msp" /config \\****\Deployment\Applications\Office 2007 Professional plus\config.xml gave error 30066 I feel as I am going round in circles and yet I have goggled answers and they all point to the methods I have tried.

I have the code for the permission audit nearly working. I am using powershell with ewsutil.dll. The code drags user objects from AD and then looks at their mailbox, recursive search through all folders and outputs to a csv file anything non default, for example inbox read rights etc. However the code is failing on one chunk of code for some mailboxes and not others. $fldarry = new-object EWSUtil.EWS.BaseFolderIdType[] 1 $dTypeFld = new-object EWSUtil.EWS.DistinguishedFolderIdType $dTypeFld.Id = [EWSUtil.EWS.DistinguishedFolderIdNameType]::msgfolderroot $mbMailbox = new-object EWSUtil.EWS.EmailAddressType $mbMailbox.EmailAddress = $mbMailboxEmail $dTypeFld.Mailbox = $mbMailbox $fldarry[0] = $dTypeFld $FolderList = $ewc.GetAllMailboxFolders($fldarry) $fldarry1 = new-object EWSUtil.EWS.BaseFolderIdType[] $FolderList.Count for ($fcint=0;$fcint -lt $FolderList.Count;$fcint++){ $fldarry1[$fcint] = $FolderList[$fcint].FolderId } $Folders = $ewc.GetFolder($fldarry1) If ($Folders.Count -ne 0) { ForEach ($Folder in $Folders) { Above is the section of code that fails, on the line where $fldarry1 is created below the for, I get on some mailboxes the following error. Exception calling "GetFolder" with "1" argument(s): "The request failed schema validation: The element 'FolderIds' in namespace 'http://schemas.microsoft.com/ exchange/services/2006/messages' has incomplete content. List of possible eleme nts expected: 'FolderId, DistinguishedFolderId' in namespace 'http://schemas.mi crosoft.com/exchange/services/2006/types'." At #############:175 char:26 + $Folders = $ewc.GetFolder <<<< ($fldarry1) + CategoryInfo : NotSpecified: ( [], MethodInvocationException + FullyQualifiedErrorId : DotNetMethodException Any help would be appreciated. Thanks.

Hello - I'm new to SCCM, and trying to run a report for management to see which systems need upgraded. I tried to run the report "Search for Computers" and put in the collection "Workstation and desktops", and comes back with a 500 internal server error. It works fine with other reports, but this one will be about 17000 computers. Just need computer type and computer name.. Thanks!!!

Hi, I decided to share our basic space requirements for our SCCM instance, managing approximately 500 computers/servers , as I have not really seen documentation related to this before. Before you start implementing SCCM , it's always good to first pause, and concider the layout. Currently we use three sccm servers, for our purposes, lets call them SCCMA , SCCMB, and SCCMC On SCCMA you would keep a distribution point, and WSUS, and allot of roles, at your discretion . It is important that you have a seperate hard-drive for WSUS , and a Seperate one for your distribution point(Added before installing this role~very important, and set to take preference over your c: drive). Wsus, and your distribution points can easily take up up to 100gb each if fully utilized, and depending on the implementation. It is also important that you leave room for growth on your c: drive for SCCM components ( Please also note, that it is not best practice to have sccm on your C: drive). SCCMB: This server would ideally be used for your SQL database, and maybe some SCCM roles, not that resource hungry. Here it is vital to store your database on a separate hard-drive as to avoid long disc ques, and increase the overall responsiveness of the sccm system. SCCMC: This server is usually perfect for pxe boot functionality, and works perfectly to prioritise pxe traffic, as the server would be dedicated to this role. As with any distribution point role, have a second hard-drive, installed before installing the role, and with enough space to handle operating sstem, boot image, driver , etc storage requirements (This should not go over 50gb neccesarily, depending on implementation) . Note to always assign more space, rather than less. Physical processing power, and memory requirements: Remember, SCCM servers are quite resource intensive, and it is vital that they have good network connectivity to your systems (1gbps is a good thought) . Processing power requirements is usually not that bad, and two virtual processors should usually do the trick, depending on the amount of roles installed on the server. Ram requirements: This is where bottlenecks tend to occur on these systems, and when it's busy polling systems, or performing maintenance it can really utilize your memory. It is vital them to have atleast 12gb ram on each of your sccm servers, also dependant on the roles, and the amount of users the servers would be responsible for. If you can think, or see anything you do not agree with, please don't be hesitant to post.

Hello, I am currently seeing a limitation of SCCM 2007 with the number of IP’s assigned to a server. The number seems to be around 1,500 addresses. Can anyone else validate this or know of a way to work around this? SCCM see’s the servers; it just spends so much time in WMI getting all of the IP info and then dies before it can send the data back to the Parent SCCM Server. Any information would be greatly appreciated! Regards, Yarrokon

We've been been experiencing a problem whereby advertisments (whether they're for OS deployment/software/etc) aren't being picked up by and of the client computers on our network. I've tried checking through the logs and through some of the troubleshooting guides on this website but I can't see anything that could be causing it? There don't seem to be any obvious error messages and we haven't made any changes/updates that I can link back to when this started happening. Worryingly this is affecting every computer on our network and it means we're unable to re-image computers or deploy software so I'm just about at the point where I need to log a support call with Microsoft! Is there anything obvious we should try/check before we do?

Does anyone know of a way to add multiple machines to a collection using direct membership? I can't really use a wildcard because all of our machines are named similarly and I only want to get a specific number of those machines. Example of what I'm trying to do, so we are about to roll out win 7 however we have about 6000 machines and will be doing it in stages, so I will need to create collections based on those rollouts. Our first test group will consist of 30 users. How can I add just those 30 machines to a collection without having to go through the direct membership wizard 30 times? Thanks, Mike