thugusher Posted August 13, 2014 Report post Posted August 13, 2014 Hi Guys, Is there a way to find out (Logs/ event viewer) which user initiated a OS deployment on SCCM 2012 R2. Its sent a job to over 1000 unaware users oops!!!. Quote Share this post Link to post Share on other sites More sharing options...
anyweb Posted August 13, 2014 Report post Posted August 13, 2014 you can use reporting in configmgr to find out, check out the report category Status Messages - Audit, it will let you see what administrative users have done recently. like below Quote Share this post Link to post Share on other sites More sharing options...
thugusher Posted August 14, 2014 Report post Posted August 14, 2014 Thanks for the reply Niall. My colleague deleted the affected Collection and Deployment (used to be called Advertisements). We unticked "Allow this distribution to respond to into PXE requests" on the DP's > PXE tab. Is there any other way we can clear PXE requests on the affected client machines i.e delete a reg key, clear cache e.t.c. So when we enable PXE requests client don't pick up the old deployment. I hope this makes sense... Quote Share this post Link to post Share on other sites More sharing options...
anyweb Posted August 14, 2014 Report post Posted August 14, 2014 you shouldnt delete the deployment, just disable it (more info here) what you could try is removing the boot wim attached to the task sequence, that way those systems wont be able to boot if they have received the policy, also, consider changing the PXe Password or setting one if one is not already set. Many things you can do, but once the computers have the policy they'll try to act on it.... Quote Share this post Link to post Share on other sites More sharing options...