System Center Blog

    by Mikael Perhult (SCCMx)

    There is an easy way to gather Last Logon information from Active Directory System Discovery and the attribute flag for Last logon. When enabling this attribute the Last Logon timestamp is collected in the inventory. By then creating some SQL querys and reports can this be viewed. In this example it joins to Server objects […]

    This post is based on blogs that covers “How to Use Definition Update Automation Tool with Status Filter Rule”. From technet: http://blogs.technet.com/b/clientsecurity/archive/2011/11/03/how-to-use-the-definition-update-automation-tool-for-forefront-endpoint-protection-2010-update-rollup-1.aspx There has been updates made to the KB being used for Software Update Automation in SCCM/FEP 2010 that I have seen. In this scenarios are both KB’s active in the system and needed to […]

    When using a SQL Server specific port and not being able to open SQL browser UDP port 1434 through firewall the Linked Server can fail between SQL Servers in SCCM 2012. For example between a Secondary Site and a Primary Site. Cause: This is due to the Linked Server object in SQL is not being setup using […]

    When migrating clients to SCCM 2012 there can be an issue with agents trying to update the source list via Source Update Manager. This creates a fairly heavy load on the MP/SQL since it will retry this operation every hour, 3600 seconds, as a default. This schedule cannot be configured in the Client Agent settings. This […]

    There has been released a patch that adds support for Windows Server 2012 to the Schedule Updates of offline image servicing. The patch also stabilizes the overall feature of Schedule Updates. FIX: The Schedule Updates Wizard does not list content for Windows Server 2012 in System Center 2012 Configuration Manager Service Pack 1. http://support.microsoft.com/kb/2793237/en-us  

    When migrating to SCCM 2012 there can be a good way to keep track of the actual agent status over time using dynamic collections. This since the agent upgrade has an automatic roll-back if the upgrade failes. These collections can be used for both workstations or servers by using Limit to Collection in the query […]

    This operation assumes your machine can boot from a USB enabled device. Check your BIOS to make sure. You also MUST have a DVD/ISO copy of OS/PE to install the source files from a DVD or a source folder to a USB flash drive: 1. Insert your USB flash drive and enter the following commands: […]

    Here is a query that lists all AD groups the computer is member of together with deployments assigned to the computer. Software Update deployments are excluded. SELECT v_R_System.Name0, v_RA_System_System_Group_Name.System_Group_Name0, v_CIAssignment.AssignmentName, v_CIAssignment.Description FROM v_R_System INNER JOIN v_RA_System_System_Group_Name ON v_R_System.ResourceID = v_RA_System_System_Group_Name.ResourceID RIGHT OUTER JOIN v_CIAssignmentTargetedMachines ON v_R_System.ResourceID = v_CIAssignmentTargetedMachines.ResourceID RIGHT OUTER JOIN v_CIAssignment ON v_CIAssignmentTargetedMachines.AssignmentID = […]

    This query lists all failed deployments for package/programs on Servers. declare @__timezoneoffset int select @__timezoneoffset = DateDiff(ss,getutcdate(),getdate()); select sys.Netbios_Name0, sys.User_Domain0, sys.User_Name0,site.SMS_Installed_Sites0, Client_Type0, ainfo.AdvertisementName, LastStatusMessageID, LastStatusMessageIDName, DATEADD(ss,@__timezoneoffset,LastStatusTime) as LastStatusTime, stat.AdvertisementID, LastExecutionResult, LastExecutionContext, sys.Operating_System_Name_and0 from v_ClientAdvertisementStatus stat join v_AdvertisementInfo ainfo on stat.AdvertisementID=ainfo.AdvertisementID join v_R_System sys on stat.ResourceID=sys.ResourceID left join v_RA_System_SMSInstalledSites site on stat.ResourceID=site.ResourceID where stat.LastState='11' /* 11 […]

    When Loadstate.exe is executed in the user logon phase and being placed on an unc path the user will be prompted with a security warning. For removal of this warning so Loadstate can execute seamless in the background the domain can be added to ZoneMap as an exclusion. Change domain. reg.exe add “HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adlab.local” /f […]