1,800 reputation
1126
bio website jard.co.uk/james.shtml
location United Kingdom
age 37
visits member for 5 years, 5 months
seen Dec 19 at 10:34

You make everything, Groovy


Sep
10
comment How to avoid a terminal server user to reboot the machine on Windows update notification?
Are these users administrators on the terminal server?
Jul
10
comment Mount an ISO Image on Windows 2008 Server
The problem isn't mounting the ISO, the problem is installing extra software and extra drivers on a server to facilitate the mounting. If you want to keep servers as clean and stable as possible, you don't install extra drivers unless you really need them. Standalone EXEs and portable software don't need an install, and don't install drivers.
Feb
12
comment What are the pros/cons of blocking a program from running in %appdata%, %temp%, etc.?
@JuriRobl only the consumer version,the business version of Chrome is much better behaved.
Nov
29
comment What do each of the actions in the SCCM Client actually do?
The Hardware Inventory Cycle is actually a confusing name, what it really means is "WMI Inventory", as it reports any info available via WMI which is primarily hardware related info, but also includes other info accessible via WMI such as Add/Remove Programs, Operating System type and version, Services, etc. Whereas "Software Inventory" really means what most people would think of as a file inventory (except that would be too close to File Collection Inventory, which as you say above is different).
Jun
20
comment Scheduled Task to shutdown computer after 2 hours of inactivity?
This isn't directly answering your question, but we use 1E Nightwatchman to manage logoff and shutdown of idle PCs, but we started using it in the XP days, it's possible the built-in traggers like this are more versatile now in Win7 & 8.
Jan
18
comment How do Windows DFS referrals work for laptops away from the office?
"If the laptop is at a client office, hotel, home, etc, is it still considered to be within a site?" how is it connecting into your network in those cases? VPN, Direct Access, Remote Desktop, something else? What IP does the laptop get in those cases, are those IPs assigned to a site?
Jan
11
comment Export SCCM 2007 Query Results Via VBScript
@Mr.LostITGuy yes that's a very simplified example to show how it's done, I've run a lot of other queries like that through VBscript, many of them much more complex. One thing to beware of is quoting, SCCM Queries tend to quote text with " obviously you then get a double-quoting problem when you put it in the query above, just change the " to ' and you should be good.
Sep
25
comment Is SCCM overkill for medium-sized organizations?
Agree, I'm an admin in a company that until recently was about 900 seats across two sites, and couldn't imagine doing it without SCCM. Using it well will save you a lot of time and effort, and you really aren't that small in SCCM terms. (We now have 35 sites in 20 countries, though only a couple hundred more users, and it really is invaluable).
Feb
22
comment Do enterprises expect MSIs to uninstall previous product version?
@CraigJ It's quite likely that they're re-packaging rather than packaging. They will expect you to provide a properly created MSI that will either uninstall or upgrade the previous version as part of its install. They may then deploy it along with an MST to send additional settings, etc, or may do something more drastic, but they will expect to start with a properly behaved MSI
Jan
31
comment Protecting files from system administrator
@TomTom re-read what I've said, that's exactly the auditability and accountability that I'm talking about, and making it a firing type offence is mentioned in my first paragraph.
Jan
31
comment Protecting files from system administrator
@TomTom We obviously have different understandings of my writing and what C2 is. I'm aware that backups generally use features like System accounts, shadow copies, etc. Backups was an example that people are familiar with. C2 access (and filesystems like NTFS) use an Ownership mechanism for data. Administrators can always use taking Ownership as a way to re-permission and gain access to files; you want accountability, auditing and trust to prevent any problems with that. C2 specifically talks about accountability (using named, non-generic admin accounts) and auditing as a way to notify owners
Jan
25
comment SCCM'07 - OSD - Task Sequence - Install Software not caching program to hard drive
Batch files run fine in a download and execute scenario with no need for a drive letter, as they're moved to the local machine's cache before execution. You just have to remember to just use a relative path (or bare filename) to run it rather than a fully-qualified path. Using download and execute and properly specifying the package to run from generally runs a TS faster, and allows you to generate Offline TS Media easily, for disconnected (or slow-link) builds.
Jan
25
comment Windows 7 (roaming profiles) not seeing printers deployed with printer management?
There's more than one way to assign/install printers using GPO, which one are you using at the moment?
Jan
17
comment Office 2010 Deployment
I'd think of AppV as a complement to SCCM, not an alternative. We deploy Office 2010 as a local install to all machines using SCCM, but deploy some of the 'extra' Office apps like Project or Visio using AppV (controlled by AppV's SCCM integration).
Jan
13
comment Using “sc” command to control services with whitespace in name
@Tim thanks, it's a rare person that spots the reference!
Aug
19
comment Reasons to avoid routing traffic through NOC
@Jakers monitoring your traffic is very unlikely to mean that they'll be actively looking at what you're up to. They're more likely to be routing you through something that checks for malware and malicious sites, etc. Traffic logs are not something anyone wants to read through. This is something you'll find it hard to argue against. Also remember that if you already have a network connection back to the main office then they're most likely already monitoring all sorts of other things about your PCs and files anyway.
Jun
13
comment Can I manually configure a domain name for Windows Home Server 2011 Remote Access?
One thing that Micrsoft will be doing through their partner registries is managing dynamic IP problems. Presuming that you're on a consumer internet connection, it is quite likely that your router's external IP changes periodically. WHS has an agent installed on the server that can talk to back to Microsoft and let them know when your IP changes, and then they change the DNS record to point to your new IP automatically. If you set up your DNS record yourself you're also going to have manage any changes in your router's IP yourself.
Jun
10
comment How would you remotely install software on multiple Windows XP machines?
+1 Note that Systems Management Server (SMS) is now called System Center Configuration Manager (SCCM) microsoft.com/systemcenter/en/us/configuration-manager/…
Jun
10
comment SCCM 2007 not installing Forefront Endpoint Protection client
Many packages don't report status at all until the very end with either a success or failure. It could be that the install is waiting for something else to happen, could be a reboot, could be a pre-req install, could be a pre-req uninstall. Either way the package has started but hasn't actually finished.
May
9
comment Flash Plugin for Firefox on Terminal Server
if you look at the download page linked by Zoredache below, you'll see there's two installers. One installs the ActiveX control for Flash that will only work in IE, the other installs the NSPlugin version that works in all the other main browsers, you have to install that one for Firefox, that installs on the machine at the system level and is available for all users. Shockwave Flash is the right one, that you want. Rule of thumb in Firefox is if it shows in "about:plugins" it's there for all users, if its in Tools -> Add-Ons its for that user only. There are exceptions but they're rare