Hot answers tagged

26

This is a deceptively hard question! If you look up the Technet page regarding the Actions tab, you'll find that it tells you nothing about each action. All of the actions on the tab are scheduled tasks; that is, if the feature is enabled, it will automatically run on a periodic basis. In some circumstances (e.g. troubleshooting), you may find the need to ...


19

Background: I have been the primary administrator/user of a SCCM 2012 SP1 implementation in our organization which is composed of about 500 workstations (Windows 7) and 120 servers (Windows Server 2008 R2). I am also early on in my career and primarily have a background in and a passion for networking and Linux so Windows endpoint management is something ...


15

If you are a 501(c)3 there is no reason to buy VMware. In fact, you should use TechSoup.org to get all the Microsoft and Cisco you can. Ideally you would be keeping track of donation cycles and timelines and planning at least a year ahead on what donation requests you are going to make from Tech Soup next time the cycle comes around. This is especially true ...


14

I would not call 800+ computers "mid sized". I was successfully deploying the successor of SCCM in a bank with 850 employees. In your case it is a lot more likely nowt knowing your tools that will be the problem - somehow I have a problem imagining the team of 3 people in a school being the highly competent people that companies employ for a lot more money. ...


14

I know this question is a bit old, but there's some untruths being posted here. There is nothing wrong with how SCCM 2012 functions, the problem is a misunderstanding of how it deploys software and updates. It is not fair to quote Microsoft when they say it was behaving "by design" and that you cannot do anything but set a deadline far into the future. This ...


13

Empirical Results I wrote some PowerShell that, when run as a detection script, dumps the environment variables that the detection script sees to a log file. That script is at the end of this answer. I then cause this script to be run by the SCCM client by deploying a Deployment Type with different "Installation Behavior" and "Logon requirement" ...


10

Sysprep limitations are due to the windows activation process (and it's hardcoded limitations). To quote the manual: There is no limit to the number of times that the Sysprep command can run on a computer. However, the clock for Windows Product Activation begins its countdown the first time Windows starts. You can use the sysprep /generalize command to ...


9

Forget you're a school and look at your numbers critically. You have 800 computers and nearly 2000 users. That's not a small company and I wouldn't really say "midsize" either. Schools IT is often neglected, but the truth is you should be using good quality enterprise hardware and software. And, indeed, that includes SCCM. It's hard for any of us to say ...


9

If you are in the middle of one of these countdowns, you have no choice but to save your work and let the system reboot. You have to prevent them from happening in the first place by stopping the service responsible for them: the SMS Host Agent service. Once this service is started, it can't be stopped, even if you are an administrator. When the sys ...


8

There is a known problem with powershell exit codes (see the end of this answer) that can manifest when using powershell installation scripts with SCCM. To workaround the problem, I take two measures: I always have SCCM invoke a batch file which runs the powershell script by invoking powershell.exe explicitly. I ensure that every code path in the ...


7

SCCM is a tool for OS Deployment, Software deployment, Hardware/Software Inventory, Software (primarily windows) Updates. SCCM Definitely has some quirks, but is VERY good at it's job. What will eventually happen is that something will click and you'll finally "Get It" and things will become much easier. I would recommend sticking with it a bit longer. ...


6

vPro utilizes the integrated network adapter. Currently add-in cards (fiber or otherwise) are not supported. However if they are willing to use multiple adapters they could user a fiber add-in card for high-bandwidth traffic, and a second wired connection for manageability. Source: http://community.spiceworks.com/topic/116384-intel-vpro-and-fiber-...


6

Windows Defender pre-Windows 8 is a weak tool targeted at specific threats. It's not a full fledge AV, which is why Microsoft release Microsoft Security Essentials for home users. In Windows 8, Defender has MSE functionality rolled into it. Endpoint for SCCM and Intune are functionally similar to MSE, except that it allows for more granular centralized ...


6

Ah. The joys of automated software installation in a Windows environment. SCCM can only do so much with terrible vendor provided installers as you have discovered. My first stop when trying to build a Application-Program or a Package-Program is to take a look at ITNinja which used to be called App Deploy before Dell decided to buy and rebrand it. ...


6

The computer's IP address will update on its next Discovery Data Collection cycle. You can force this to happen by running this command on the client: WMIC /namespace:\\root\ccm path sms_client CALL TriggerSchedule "{00000000-0000-0000-0000-000000000003}" /NOINTERACTIVE This is the list of all available actions: Application Deployment Evaluation Cycle: {...


5

Perhaps the REV site code was used for a temporary test installation of SCCM 2012? Perhaps not. Institutional knowledge doesn't have any record of the REV it and the migration we performed before I was hired. This hunch was correct. I got a hold of my predecessor and apparently the first and unsuccessful attempt to migrate from SCCM 2007 to SCCM 2010 used ...


5

Just heard back from support. This is a known issue in 6.2.2, and a fix is already in the pipeline for release in an upcoming version. I can't promise you a version number, but you can watch release notes for defect number SPL-95121.


5

Here is the PowerShell function to do that : $Server = "sccm-01" $site = "S01" Function Get-Collections { <# .SYNOPSIS Determine the SCCM collection membership .DESCRIPTION This function allows you to determine the SCCM collection membership of a given user/computer ....


5

Does user need to be logged in to the target laptop, or is it sufficient that it is on the corporate network? In general, the answer is no the user does not need to be logged in, the only exception being that if in the Application-Program model the Deployment Type you are using in this instance requires a user presence (Deployment Type - User Experience -...


4

When you run the SCCM installer on your workstation, choose the option to Install Configuration Manager console. Now you can run the console from your own workstation instead of using remote desktop to the server. This screenshot is from Beta 1, but it looks the same.


4

This basic SQL will show all computers that do not have a piece of software installed that matches forefront. SELECT ResourceID, Name0, SMS_Unique_Identifier0 FROM v_R_System WHERE ResourceID NOT IN ( SELECT ResourceID FROM v_GS_INSTALLED_SOFTWARE WHERE ProductName0 LIKE '%forefront%' ) You can replace forefront with the name of the software you are ...


4

Have you tried setting the deadline to ridiculously long into the future? That's how I handle advertisements to my servers in SCCM 2008. I set the deadline for 1 year from the date I roll out the advertisements to the servers. Nice and convenient, since when the patching window rolls around, all the updates are there, waiting to be installed, but won't ...


4

Why not just make your deployment "available" rather than "required"? That way the updates will appear in Software Center but not automatically install. Also, maintenance windows apply to the Client, not to the Collection. "An additional gotcha is that if a machine is a member of more than one collection that have Deployments targeted to them, and one of ...


4

You're probably much better off packaging the application into an .msi to allow it to be deployed natively via SCCM, without any third-party dependencies. If that's not an option, I'd prefer using a .bat and a start up or logon script to deploy my .exe to trying to shove it through SCCM with a second installation utility to make it actually install.


4

This is generally handled by a monitoring and alerting system like SCOM, Nagios, OpenNMS, etc.


4

You can deploy the driver executable through SCCM the same way you deploy any other application through it.


4

None of these products will be impacted by the raising of the forest or domain functional levels. I can't think of a single application that would be impacted by this, as it typically only increases the number of features present in Active Directory.


4

You could use PSEXEC to remotely reinstall the SCCM client and reset the key to all 200 computers. psexec @c:\lists\NeedSccm.txt -u domain\admin -h -d "\\SCCMSERVER\SHARE$\ccmsetup.exe" RESETKEYINFORMATION=TRUE


4

I've done something similar, but with Altiris rather than SCCM. (I imagine you could also run it through Group Policy.) Not using WMI, but just scripting. What I would have done: Create a network share. Give the user who'll be running the script (System Center Management service user, whatever) write access to the share. Modify the script so that the ...


4

...allow them to be able to rebuild machines on the fly. Some notes about the process: SCCM OSD needs to be setup on one/the sccm server. It's best for the sccm administrator to do this. An OSD task sequence needs to be created containing the base image and optionally any applications that should be installed at before deployment. A step should be added ...


Only top voted, non community-wiki answers of a minimum length are eligible