All about SCCM Learning

Monday, December 30, 2019

I have migrated my blog to a WordPress site, please check the new site at https://paddymaddy.com

Monday, March 5, 2012

PowerShell in Nutshell learn from these steps

Stage 1

WebCast: Scott Hanselman – Developer Productivity Tools Part 3
WebCast: PowerShell Week - Day 2: CmdLets
Tutorial: MS Scripting Center Task-Based Tutorial
PDF Quick Reference: PowerShell Cheat Sheet
Podcast: HanselMinutes – Monad (show 11)
Blog post: Learning PowerShell without leaving the command line

Stage 2

CmdLet Exploration: Try all built-in CmdLets using Get-Command, Get-Help, and Get-Member. Don’t forget the -example param for Get-Help
Podcast: Hanselminutes – Interview with Jeffrey Snover (Powershell Architect)
Podcast: Hanselminutes – Interview with Bruce Payette (Powershell Dev Lead)
Snap-In: Install and learn PSCX (see my last post for overview)
Tool: PowerTab (provides intellisense)
Demo SQL Provider: Download and install info on this Powershell Team Blog post.

Stage 3

Book: Powershell in Action by Bruce Payette
WMI Exploration: If you want to do anything against remote computers, you’ll have to master WMI. Use gwmi -list | ?{$_.name -like ‘win32_*’} to see a list of useful objects and start exploring.
Sample Scripts: Script Center Repository
Blog: Powershell Team
Blog: Keith Hill
Blog: Powershell Guy
Blog: Dmitry

Sunday, March 4, 2012

Saturday, March 3, 2012

basic Programming Free CBTS

http://www.programmingvideotutorials.com

Thursday, March 1, 2012

Enable RDP in the Task Sequence

Const HKEY_LOCAL_MACHINE = &H80000002
strComputer = "."

Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & _
strComputer & "\root\default:StdRegProv")

strKeyPath = "SYSTEM\CurrentControlSet\Control\Terminal Server"

strValueName = "fDenyTSConnections"
dwValue = 0
oReg.SetDWORDValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName,dwValue

Monday, February 20, 2012

How to disable the UAC in Windows 7 Deployment

In fact we might get more errors if you have the UAC enabled while deploying the Windows 7, You can include one step in the task sequence as run a command line and fill this below in the command line box

“CMD /C REG.EXE ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f”

Note: Not required any options in the options to configure however you can record with a optional Success Code “0 3010”

http://joshuasmueller.wordpress.com/2011/01/18/disabling-windows-server-2008-sp2-uac-in-a-sccm-task-sequence/

How to set the Timezone

How to set the Timezone with in one task sequence… like you have more than one location and all these locations has different time zones…

To do this under the task sequence Apply Windows Settings in the options TS Variable is ADSite name equals is “WhateverTheSite” and in the Properties Time Zone choose the time you wanted…

On AD & exchange simply good website

http://www.netometer.com/

OSD import permission Issue

We might get when we are looking for only import permissions for a user or Group..

even when we setup the permissions at the end of the wizard we may get this error..

Errors

·You do not have security rights to perform this operation.

·ConfigMgr Error Object:

·instance of SMS_ExtendedStatus

·{

· Description = “User \”*************\” does not have permission of the current site to import machines.”;

· ErrorCode = 1112017920;

· File = “e:\\nts_sms_fre\\sms\\siteserver\\sdk_provider\\smsprov\\sspsite.cpp”;

· Line = 766;

· ObjectInfo = “524288″;

· Operation = “ExecMethod”;

· ParameterInfo = “SMS_Site”;

· ProviderName = “WinMgmt”;

· StatusCode = 2147749889;

};

The actual permissions required at SCCM Console level is:

On SCCM Root Collections we must grant read & read Resource
and for the target of the collection we need to give the permissions to add or whatever you wanted
at computer Association level we must give permissions for importing
(The most common mistake or un- mentioned step ..this one we may forget most of the time)

On the top of the Site ==Properties=> Security Tab => Class Security rights and we must choose here read,Import Computer Entry (below screenshot)

How to grant the SCCM Console permissions to Support Executive

Scenario SCCM installed on cm07.test.com & I have a test system with windows XP/7.
I have a User called RBAC and RBAC wanted some permissions on SCCM console.

Steps:-

Install the SCCM console on windows Xp/7

add the RBAC user to SMS Admins Group.

Follow these steps for granting the DCOM rights.

From SCCM Server the Start menu, click Run and type Dcomcnfg.exe.
In Component Services, click Console root, expand Component Services, expand Computers, and then click My Computer. On the Action menu, click Properties.
In the My Computer Properties dialog box, on the COM Security tab, in the Launch and Activation Permissions section, click Edit Limits.
In the Launch Permissions dialog box, click Add.
In the Select User, Computers, or Groups dialog box, in the Enter the object names to select (examples): box, typeSMS Admins and click OK.
In the Permissions for SMS Admins section, select the check box to allow Remote Activation.
Click OK twice, and then close Computer Management.

Friday, February 17, 2012

C drive disk space information on my all machine

SELECT TOP (100) PERCENT dbo.v_R_System.Name0 AS [System Name], dbo.v_GS_LOGICAL_DISK.Name0 AS [C Drive], dbo.v_GS_LOGICAL_DISK.Size0 AS [Total Size],

dbo.v_GS_LOGICAL_DISK.FreeSpace0 AS FreeSpace, dbo.v_GS_LOGICAL_DISK.Size0 AS Used

FROM dbo.v_R_System INNER JOIN

dbo.v_GS_LOGICAL_DISK ON dbo.v_R_System.ResourceID = dbo.v_GS_LOGICAL_DISK.ResourceID INNER JOIN

dbo.v_FullCollectionMembership ON dbo.v_FullCollectionMembership.ResourceID = dbo.v_R_System.ResourceID

WHERE (dbo.v_GS_LOGICAL_DISK.DriveType0 = 3) AND (dbo.v_FullCollectionMembership.CollectionID = 'sms00001') AND (dbo.v_GS_LOGICAL_DISK.Name0 = 'c:')

ORDER BY FreeSpace

Wednesday, February 8, 2012

For a specific Advertisement status for last 3 Days…

---for a specific Advertisement status for last 3 Days… if we include the Set @AdvName = '%' line then and remove the above line in red color will show for all advertisements with last 3 days status

-- To include all we need to give % in SQL this is a tip

Declare @AdvName Varchar(256)
Set @AdvName = 'Lync_2010_Full_Install'

---Set   @AdvName = '%'
Select      adv.AdvertisementName
,    adv.AdvertisementID
,    s.Host
,    LastAcceptanceMessageIDName
,    LastAcceptanceStateName
,    LastAcceptanceStatusTime
,    LastStatusMessageIDName
,    LastStateName
,    LastStatusTime
,    LastExecutionResult
From (
      Select      AdvertisementName
      ,    AdvertisementID
      From dbo.v_AdvertisementInfo
      Where AdvertisementName Like @AdvName
      ) As adv
Join (
      Select      AdvertisementID
      ,    ResourceID
      ,    LastAcceptanceMessageIDName
      ,    LastAcceptanceStateName
      ,    LastAcceptanceStatusTime
      ,    LastStatusMessageIDName
      ,    LastStateName
      ,    LastStatusTime
      ,    LastExecutionResult
      From dbo.v_ClientAdvertisementStatus
      Where LastStatusTime >= DateAdd(d,-3,GetDate())
      ) As cas
On    adv.AdvertisementID = cas.AdvertisementID
Join (
      Select      ResourceID
      ,    Netbios_Name0 As Host
      From dbo.v_R_System
      Where Client0 = 1
      And Active0 = 1
      And Obsolete0 = 0
      ) As s
On    cas.ResourceID = s.ResourceID
Order By
      AdvertisementName
,    Host

HeartBeat Discovery Status of specific collection of systems

select
    CS.Name0,
    max(AD.AgentTime) as 'Date/Time'
from
    dbo.v_AgentDiscoveries ad
    JOIN dbo.v_GS_COMPUTER_SYSTEM cs on AD.ResourceID = CS.ResourceId
    join dbo.v_FullCollectionMembership FCM on FCM.ResourceID = CS.ResourceId
Where
    AgentName = 'Heartbeat Discovery'
    and FCM.CollectionID = 'SMS00001'
Group by
    CS.Name0

Tuesday, February 7, 2012

To get ride of IIS Webdav issue

Most of the time some or other application extension would be blocked because of IIS Webdav Settings issue, to stop filtering in IIS Webdav we can change the

setting at the site level, i.e., open inetmgr/ IIS Console and chose the server name and in the right side we need to choose the “WebDav Authoring Rules” and in actions you will see “WebDAV settings” click on the button and you need to configure you Request filtering Behavior as below.

Okey, we may read in the blogs as we need to change in the applicationHost.config file.. if we do above settings it must be appear in the file… okey if you want to see the file how it looks like ……..

</fileExtensions>

</hiddenSegments>

</requestFiltering>

Monday, February 6, 2012

PXE error: PXE-T01:File not Found & PXE-E3B: TFTP Error – File Not Found

You might get the below error..

The above problem will come When you don’t Have the files in DriveLetter:\RemoteInstall\SMSBoot\

In fact the below article address the issue, However I have approached in different way as just copy the Missing files & folders from other Remote Install Folder and past on the Problem system.

http://www.kozeniauskas.com/itblog/2008/02/26/sccm-pxe-t01-file-not-found-and-pxee3b-tftp-error-file-not-found-errors/

Friday, January 27, 2012

AD computer Numbers vs SCCM Computer Numbers

read here more http://smsug.ca/blogs/garth_jones/archive/2008/12/03/how-to-add-ad-data-to-configmgr-reporting.aspx

AD it just another database, just like SQL server is. With that in mind there is nothing stopping you from using SQL to link to AD to give you data about your AD environment!

1) Create Linked Server using SSMS

exec master.dbo.sp_addlinkedserver 'ADSI', 'Active Directory Service Interfaces', 'ADSDSOObject', '<DC Name FQDN>'

2) Modify the security for ADSI using SSMS

exec master.dbo.sp_addlinkedsrvlogin @rmtsrvname = N'ADSI', @locallogin = NULL , @useself = N'False', @rmtuser = N'<Domian>\<User Id>', @rmtpassword = N'<Password>'

3) The hard part is over!

4) Create query to query AD and ConfigMgr

This query will list all PCs within AD that are NOT within ConfigMgr (or SMS)

select
AD.cn as 'PC Name(AD)',
AD.operatingSystem as 'OS (AD)',
AD.operatingSystemServicePack as 'SP (AD)'
from
openquery (ADSI,
'SELECT cn,
operatingSystem,
operatingSystemServicePack
FROM ''LDAP://<DC Name FQDN>''
WHERE objectCategory = ''Computer''') as AD
Where
AD.cn not in (Select name0 from v_GS_Computer_System as CS)
order by
AD.cn,
AD.operatingSystem,
AD.operatingSystemServicePack

This query will give you a count of all OS that are NOT within ConfigMgr (or SMS)

select
AD.operatingSystem as 'OS (AD)',
count(AD.operatingSystem)
from
openquery (ADSI,
'SELECT cn,
operatingSystem,
operatingSystemServicePack
FROM ''LDAP://gartek-dc.gartek.tst''
WHERE objectCategory = ''Computer''') as AD
Where
AD.cn not in (Select name0 from v_GS_Computer_System as CS)
Group by
AD.operatingSystem
order by
AD.operatingSystem

So what does this report look like.

So there you have it.

Wednesday, January 25, 2012

ClientIDManagerStartup.log Error: 0x80040225 & Error 3

Failed to send registration request message. Error: 0x80040225

also when you see in the error 3 in ClientIDManagerStartup log

RegTask: Server rejected registration request: 3 ClientIDManagerStartup 26/01/2012 1:07:43 AM 7904 (0x1EE0)

You might also see (not in all cases) in ccmexec.log

System task 'ClientRegistrationStartup' returned error code 0x80040222. CcmExec 26/01/2012 1:10:03 AM 7904 (0x1EE0)

Solution: Remove the Client authentication and SMS certificates Certificates of from Certificates console and request new certificates

PXE-T00: Unspecified file opening error detected

Found the error: While deploying 7 with the SCCM 2007 and MDT 2010.

sccm PXE-T00: Unspecified file opening error detected
PXE-E36:Error Received from TFTP server

Solution:This is not related to SCCM / WDS Issue.. it was with Symantec Ghost caused the issue, once the service was stopped the issue is resolved.

Sunday, January 22, 2012

Wanna Drive to SCCM 2012

here are the Virtual labs from MS System Center 2012

Enjoy,

Saturday, January 21, 2012

How would I extend my Windows 2008 R2 Evolution ?

Click Start, and then click Command Prompt.

Type slmgr.vbs -dli, and then press ENTER to check the current status of your evaluation period.

To reset the evaluation period, type slmgr.vbs /rearm, and then press ENTER.

Restart the computer.

It will again extend your evolution to 180 Days

Attribution

By accessing this Website, you indicate your acknowledgement acceptance of the following terms and conditions. These terms and conditions may change from time to time, and you agree to be bound by any such changes when posted on this Website, including its affiliates, as applicable reserves all of its rights at law and equity, The information and content displayed on this Website, including but not limited to text, graphics, logos, images, audio clips and software, is the property of Public or its licensors, as the case may be, and is protected by copyright laws. While I invite you to browse, no content or information on this Website may be downloaded, reproduced or modified in any manner without the prior written consent of me (PaddyMaddy) or as otherwise expressly provided herein.