Search the Community

Not sure how to even search for this, and trying to set up a computer association isn't doing anything (seriously seems to be limited strictly to user state data). And I need to be able to set this up for computer names that have yet to be created. Is there a way to quickly make computer objects with just a name and collection membership? When we deploy windows to the new machines, they all need different software installed and rely upon collection membership to provide the right packages. If this is not something that can be done, how do you all deal with a new batch of computers that people need to be moved to without installing all the software by hand? Thanks

I have a requirement to create 2 collections from AD groups and return only the users/machines that are in both. I have tried something like the following:- SELECT ... WHERE ResourceID IN (SELECT ResourceID FROM SMS_R_User where SMS_R_User.SecurityGroupName = <GroupA>) AND ResourceID IN (SELECT ResourceID FROM SMS_R_User where SMS_R_User.SecurityGroupName = <GroupB>) But if a user is in both groups the result is 0 not the expected result e.g Collection from ADGroup1 = 12345 Collection from ADGroup2 = 34567 Collection items in ADGroup1 and ADGroup2 = 345

How can you quickly figure out what collections are associated with a Computer? I am trying to figure out what policies are being given higher priority by viewing what collections they are associated with. Does anyone know how to find this information?

Hi, Can anyone help me to create a collection for all the machines with a particular file (nlwnsck.dll) in a specific path (c:\Windows\System\) Thank you,

Hi everyone, I wonder if someone could help me. In my corporate environment, we have collections setup for deployments that our Service Desk use to build machines. The idea is that machines are created or added into that Collection, and the Task Sequence is also deployed to the Collection. We have upgraded to SCCM 1702 in recent times and ntoiced that we cannot always import machines to the collection - we get an error code, like 2152205056. I just looked at: So will test that out tomorrow when I am back in the office. The other issue I am having is; when we have existing machines that are in SCCM and show at Active with a tick etc, we cannot always rebuild them. Sometimes we can just start off the boot media and then either proceed or clean the disk first and then reboot/start the Task Sequence. Other times I get the "There are no task sequences available for this computer" message. What are we doing wrong?

Hello everyone! Some years ago I was looking for a script to create collections in SCCM based on AD OUs. I've found some of them, but they seemed a bit complex and incomprehensible to me. So I've wrote my own rather simple script, added a few options that I think would be in hand for SCCM admin and added a lot of comments to make the script easy to understand and modify. So I present it to your judge. Any comments and suggestions are appreciated. <# Crafted by Maestro, 17/03/2017 The purposes of this script: 1. Create device collections in SCCM based on AD. Assign Canonical name of OU to collection and OU GUID to collection description. I use OU GUID for my further needs, so you can omit this. In addition, I think that Canonical name is the best variant to use in SCCM but you can pick simple Name or Distinguished Name - it is up to you 2. Define the Refresh Schedule of collection. 3. Create Query Rule for collection membership 4. Move created collection to custom folder (very handy, never saw this option in other scripts). 5. Updates collection membership at once. #> # Importing necessary PS modules Import-Module ActiveDirectory Import-Module 'D:\Program Files\Microsoft Configuration Manager\AdminConsole\bin\ConfigurationManager.psd1' # Defining main variables # SCCM Site $Site = (Get-PSDRive -PSProvider CMSite).name <# Folder to move collections into. I've selected the ready one. You can create new folder right in script with simple "mkdir" in "${Site}:\DeviceCollection\" #> $TargetFolder = "${Site}:\DeviceCollection\FromAD_by_OU" # Relocating to SCCM PSDrive cd ${Site}: # Defining refresh interval for collection. I've selected 15 minutes period. $Refr = New-CMSchedule -RecurCount 15 -RecurInterval Minutes -Start "01/01/2017 0:00" <# Getting Canonical name and GUID from AD OUs. -SearchScope is Subtree by default, you can use it or use "Base" or "OneLevel". OUs are listed from the root of AD. To change this i.e. to OU SomeFolder use -SearchBase "OU=SomeFolder,DC=maestro,DC=local" #> $ADOUs = Get-ADOrganizationalUnit -Filter * -Properties Canonicalname |Select-Object CanonicalName, ObjectGUID # And at last, let's create some collections! foreach ($OU in $ADOUs) { $O_Name = $OU.CanonicalName $O_GUID = $OU.ObjectGUID # Adding collection New-CMDeviceCollection -LimitingCollectionName 'All Systems' -Name $O_Name -RefreshSchedule $Refr -Comment $O_GUID # Creating Query Membership rule for collection Add-CMDeviceCollectionQueryMembershipRule -CollectionName $O_Name -QueryExpression "select * from SMS_R_System where SMS_R_System.SystemOUName = '$O_Name'" -RuleName "OU Membership" # Getting collection ID $ColID = (Get-CMDeviceCollection -Name $O_Name).collectionid # Moving collection to folder Move-CMObject -FolderPath $TargetFolder -ObjectId "$ColID" # Updating collection membership at once Invoke-CMDeviceCollectionUpdate -Name $O_Name } Write-Host "----------------------------" Write-Host "All done, have some beer! ;)" Write-Host "----------------------------"

Hello all, Ever since I've upgraded our environment to 2012 R2 SP1 (5.0.8239.1000), my admin console has been acting goofy when I pull up collections, apps/packages, driver packages...etc. Anything with user created folders. I have folders under "Device Collections" to make things more organized. Apps/Packages, Driver Packages...etc follow suit. Basically, no matter what folder I click, I get the full list of collections as if I was clicking "Device Collections". Not just the ones that are under that particular folder. Same result in other areas. If I click back and forth enough, I'll eventually get the correct list for that particular folder. The only troubleshooting I've done was uninstall/reinstall the console on my workstation. I've browsed the forum and did some searches online, but I haven't seen any reports of it being a known issue. Anyone else experiencing this same "glitch"? Thanks!

I have a working query (Membership Rule) that gathers computers into a collection based on computer name. I also have a working query that gathers by OS (in this example we will use Windows 7). I have been trying to get the two combined into one query (basically an "and" statement instead of creating two separate membership rules, which apparently is an "or" statement). I readily admit that building queries is not my strongpoint, and I don't even know if this is the proper way to go about it, but I have been tinkering with it quite a bit. Here are the two queries...I know that both of them work individually, but I keep getting syntax errors when I try to combine them. select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_R_System.OperatingSystemNameandVersion like "%Workstation 6.1%" or SMS_R_System.OperatingSystemNameandVersion like "%Windows 7%" and SMS_G_System_COMPUTER_SYSTEM.SystemType = "x64-based PC" select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.NetbiosName like "Example" Is there a way to combine these two statements into one? Any help would be very much appreciated!

I have built a collection with no clients assigned and have a task sequence deployed to the collection to re-image the clients that are placed in. I have followed the steps to create the script and status filter rule. In my case it does not work, and I don't know why. I followed the instructions to the letter and even went through them several times. What am I missing? Does the task sequence have to be a MDT, at what point does the status rules run, or does when does the task sequence report back the success code? The machines work fine and I did have to change the deployment rule to only re-run if it failed otherwise it would just keep running. Should I abandon this method and use the powershell version instead? Anyone have this and overcome it? Thanks https://mpgnotes.wordpress.com/tag/remove-a-computer-from-a-collection-when-osd-task-sequence-is-completed/

Hi we've a large number of devices with a few PCI and PCIe devices installed, not in the same slots. would like to push out a configuration script, the settings of which, for long-winded reasons or prerequisites, depends on how many, and which, slots are in use. the solution to this would therefore be query based collections and separate packages containing the variables and then deployment en masse allowing configuration to be tailored to the hardware. -hopefully avoiding the months of work which would be a manual visual audit and inspection and then collation into collections. NOTE: it's actually irrelevant what the devices are, more whether there is, or isn't a device present in a slot, or which combination of slots are in use the problem with this plan is i can't actually find anything on which to base my query in SCCM 2012 itself, i can query an individual machine with powershell and return the slots in use. so i know the WMI classes and attributes exist but cannot find how to include these in a collection query, nor any way to report this in general. modifying and importing an updated sms_def.mof would be great but i'm unsure of what to add to this file to include the correct attributes. does anyone have any insight or experience of this, or any where they can point me in the right direction to get the correct details collected by the client and then to process this into a valid collection. thanks for your help

Hi all, I've been reading articles an topics here that already helped me a lot, but i'm very new here as a members. I'll need your help to set my mind about Active directory group based collections in SCCM 2007. My configuration: Both "AD System Group discovery" and "AD Security Group discovery" are enabled with the polling schedule set to occur once a day. Active Directory group based collection are also set to update once a day. and dynamic update i activated. My problem: Sometimes it take a very long time to see a computer added to an AD group, appear in the appropriate collection. My questions: 1- Does it make any sense to activate dynamic update on the collection and set a periodic update un the same time? 2- If i want collections to be updated more quickly, do i have to change discovery methods' polling schedules? Thanks for enlighting me.

Here's one for you. I have some Windows XP PC's that dual boot between two partitions. One is commonly used and the other not. The countdown to select the more commonly used partition ( default ) sits at 999seconds. Like using the right click tools on a collection in sccm 2012, does anybody know of a way I could WOL then wait 20 seconds and send a signal 'return' key to select the default partition and start booting. Any help would be greatly appreciated. W

Hi! I ran a AD System Discovery when I first set up SCCM 2012, and all the computer accounts in AD has been listed in the 'All Systems' collection as intended. The only issue here is, almost 2000 of these computer objects are objects that hasn't been active or been in contact with a Domain Controller for the last 180 days. Yesterday, I started a cleaning process in AD, so the old computer objects in AD has now been disabled. Is there any possibility for me to clean the 'All Computers' collection and get rid of the disabled computer objects? Any help is highly appreciated :-) Brgds. Stian M.

Hello All We are having an issue with our new SCCM Environment. SCCM was happily working, Deploying OS's, Installing and Uninstalling applications and the other day just stopped Uninstalling applications. It will install but wont remove. We are SCCM 2012 SP1 installed on Server 2008R2 we have a Standalone site and our Collections are populated via Querying AD Groups. Our Install and Uninstall Collections are updating and when we check the deployments within properties on the Device it shows the relevant 'Install' or 'Removal' for the required application. What we have noticed is: Before we had the problem even if we didnt have an application installed, within the Software Centre the application would be listed with a Status of Not Installed - Now it does not. If we delete the deployment and recreate we get the same issue If we delete the collection and recreate and then create a new deployment we get the same issue If we create a new application and create an uninstall deployment on the old collection it works We have looked through a lot of logs and have found some errors, not sure of which to post as not sure what is relevant. Can anyone offer any advice? Many Thanks Mark Jones

Need help building a Device collection for Machines that have AHCI enabled in the SATA operation in the BIOS Settings. Thanks Garrett

Hey When i redeploy a system, I have to wait for all the applications to be install after the TS has completed. Is there a way to get the task seqence to install software based on collections, without making an individual install step for all applications, that tests for collections membership ?

Is it possible to build a colllection off of machines that failed a deployment?

We have a pretty basic SCCM 2012 setup for now with a single primary site with AD intergration. Things are working great but we are at the point where we would like to begin implementing security for the rest of the IT staff. I'm hoping that someone can help me with an issue that I'm having or suggest a better way of doing things. I'm new to the SCCM world and am learning as I go so if you need to ask any additional questions, please ask away. Basically, we are implementing device collections based on software needs. So if a computer requires MS Project, we have a collection to which that application has been deployed to. We then add the computer resource to that collection. The issue that I'm having is from a security perspective. Essentually, we would like to be able to have our helpdesk staff add or remove resources from these collections based on their software needs. The only way that I've been able to achive this is to give them "modify" permissions on collections via a security role. The problem with this is that they are able to modify the collection properties. I don't want them to be able to do this.... What am I doing wrong or missing? Thank you for your time.

Hey guys, After setting up a new domain and deploying SCCM 2012 I came to realize how much work it actually is to set up new applications. I have made a script which creates AD groups and Collections. I still create the Applications manually because they usually differ when it comes to how they need to be set up. Some products can be imported as Applications (MSI etc) while some (Autodesk products in particular) need to be set up as Packages. Here's a link to the script. http://heineborn.com/tech/powershell-create-collections-and-ad-groups/ Enjoy!

So, I've ran into a bit of a conundrum. I have a large amount of domin-joined devices populated and organized in AD. I want to break them up for specific software deployments by further separating them using Device Collections in SCCM 2012. I use System Resource > System OU Name to break them down into generalized collections, but often times need to break them down further by either excluding nested OU's or only including devices with specific naming strings. My conundrum is this: When creating a query that only lists machines with a specific name string I get no results listed in the collection (see example 1). Additionally, I can't seem to write a query that excludes nested OU's (see example 2). EXAMPLE 1: select * from SMS_R_System inner join SMS_G_System_SYSTEM on SMS_G_System_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_R_System.SystemOUName = "DOMAIN/ITS/WORKSTATIONS/SUPPORT" and SMS_G_System_SYSTEM.Name like "%ISSUPPORT%" EXAMPLE 2: select * from SMS_R_System where SMS_R_System.SystemOUName = "DOMAIN/COMPUTER LABS" and SMS_R_System.SystemOUName != "DOMAIN/COMPUTER LABS/CLASSROOMS"

Imagine that you add a new computer to the "Deploy W7" Collection, but also want to add it to 2 different optional business app OUs. This PC also needs App X and App Y. Apps. X & Y are optional apps. Is there a way to ensure that during the TS, it looks at the collection membership and realises that it needs to also install apps. X & Y and force them to be installed, not wait until the collection policies are parsed?

A few questions on maintenance windows for SCCM 2007 collections. I have created a Parent collection that finds all of the servers I need to work with. I then have created child collections that feed off of the parent and split them based on other selections like so. Servers I Manage - (Parent) Domain Controllers - (Child)Windows 2008 - (Child)Windows 2003 - (Child)SQL Servers - (Child)Misc Servers - (Child) Now, if I set a maintenance window on the Parent Collection (Servers I Manager) and then deploy a package or update to the Child Collection (Windows 2008). The server that resides in both collections should not see the maintenance window from the parent collection as I am deploying to the child which has no maintenance window. I have read that "Maintenance windows are not inherited by subcollections." and the above would be true as there is no inheritance, but I've seen some discussion in that because the server itself resides in both collections, it will take the maintenance window from the Parent (Servers I Manage). Is this True? Thank you for any and all of your thoughts Regards, Yarrokon