SCCM – Updated E-book SCCM Administration v3

Hi All, my updated SCCM e-book has finally been released. It took some time to write up and test. With 130 pages divided in 37 chapters, you’ll find lots of good info about starting with SCCM. And it is free… In this version, I removed Linux related topics, Updated Windows 10 to 1709, added sections for Cloud Management Gateway (CMG), Windows 10 Express updates, SCCM Data warehouse, Office 365 Installer, Windows 10 Update Readiness, Pending Reboot, updated some other section for SCCM 1710 and updated/added some powershell scripts To download, click here. let me know if you have any feedback

SCCM-Migrating form HTTP to HTTPS

Hi All, have you ever needed to migrate a SCCM 2012 (or Current Branch) environment from HTTP to HTTPS? if you have, you know that it is quite easy, but there are some challenges, when things go wrong, off course :)… The steps I normally take (and I hope I haven’t forgotten any :)) are: 1- Create the certificate Template (ConfigMgr Clients (if the workstation is not already in place), ConfigMgr IIS Servers and ConfigMgr DP Servers) 2- Request the certificates 3- on the IIS servers, change the bind to allow HTTPS port (default 443) and select the certificate 4- Export the Root CA (and any other CA) certificate and import it into SCCM. Note, do not force the SCCM to use PKI, instead, allow it to use HTTP or HTTPS.. 5- for each client, confirm that the Client Certificate is set to PKI (you can easily check the HKLM\Software\Microsoft\CCM\HttpsState…

SCCM-Windows Update 6.2.x on Windows 10?

Hi All, I have been reviewing a report I did for a customer where all Windows 10 machines were reporting Windows Update Agent 6.2.x. what caused my customer to send few people on few windows 10 machines and try to troubleshoot windows update issues where it did not exist. of course, after couple of hours/day, they realise this was a data issue instead of their environment issue. When I started to review, I looked at my lab and I had the same. Executing a query on fn_rbac_UpdateScanStatus, I saw all my windows 10 machines also reporting Windows Update Agent 6.2.x So something was wrong. but why? 1st step was to check if the files on the client where the correct version. if you want to know where I discovered which file to look, click here. As you can see, the file was with the windows 10 version…so I checked Powershell…

Where after Windows 10? Computer Weekly 500 Club event.

Last week I had the pleasure to present at the Computer Weekly 500 Club. An event for IT leaders that, every month, talks about a different subject about modern challenges faced by organizations. I was invited as one of the three speakers for the night along with Ian Turfrey, IT Director at City & Guilds and Andy Beale, Director of Common Technology Services for GDS. The topic of the month was the future of desktop and technology in general after Windows 10 is released. Conversations were very diverse and the round table discussed very interesting topics proposed by the audience. A great article with the main topics of the events was published on the Computer Weekly website. Check it out. For those who missed the event, here is a brief intro video recorded on the night. Cheers David Nudelman

SCCM 2012 R2 PXE fails (WDS Crash)

Players, Last week I was asked to look into PXE boot issue that a friend of mine was experiencing, in his own words he explained that “PXE boots were working fine until” … he recently built a new Windows 2008 R2 box (No idea why he didn’t use 2012 R2 …). It wasn’t a boundary group issue, as this problem was intermittent. And was sometimes fixed reboot of the server. He passed over a bunch of log files, and the following error stuck out. Log Name: Application Source: WDSServer Event ID: 512 Task Category: WDSServer Description: An error occurred while trying to initialize provider WdsImgSrv from C:\Windows\system32\WdsImgSrv.dll. Since this provider is not marked as critical, Windows Deployment Services server will continue. As well as this … Log Name: Application Source: WDSIMGSRV Event ID: 258 Task Category: WdsImgSrv Level: Error Description: An error occurred while trying to initialize the Windows Deployment Services…

SCCM 2012 R2 and SP1 February 2015 anti-malware platform update for Endpoint Protection Clients

Players, If you’re on SCCM 2012 R2 or SP1, you’ll have noticed (depending on your WSUS sync schedule) a new version of SCEP that became available this week. We’re now on version The update contains the following improvements: The following configuration settings are updated in the ADMX templates: DisableAutoExclusions SubmitSamplesConsent UILockdown Improvements to registry and file system protection to counter tampering from malware. Sub-mount points can be automatically excluded, and volumes can be fully excluded in Real time protection (RTP). This update also includes the deprecation of the DisableGenericReports subkey in the following registry location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows Defender\Reporting NOTE: You need to be on at least CU1 of SCCM 2012 R2 or CU 5 for SCCM 2012 SP1. Please refer to this link (where I got the info from for this post) Enjoy Heinrich Pelser

Hotfix extends client notification in System Center 2012 R2 Configuration Manager to MDM devices

Players, I had a bit of a panic induced call from a former client this morning because it took to long time to wipe a device from SCCM. Luckily there is a hotfix for this. He applied it and … as if my magic, the issue went away, we were unable to test this on Android devices, but his iOS and Windows 8.1 devices were all wiping a lot faster. Prerequisites To apply this hotfix, you must have CU3 for System Center 2012 R2 Configuration Manager installed. Restart information You do not have to restart the computer after you apply this hotfix. Hotfix can be found here Enjoy @Heinrich_Pelser

How to uninstall SCCM 2012 agent

Players. I had this on my old blog a while back, but its a common question that I get asked. It seems that a few of you wish to uninstall the SCCM agent (or at least want to know that you can uninstall it) I will blog on how to script this in a later post. But, for now this is how you remove it manually. From the command promt type (Start>Run>cmd)C:\Windows\system32> cd\ C:\>cd windows C:\windows> cd ccmsetup C:\Windows\ccmsetup>ccmsetup /uninstallKeep an eye on the un-installation using the log files from C:\Windows\ccmsetup\ccmsetup.logOnce that’s complete delete the following files in boldC:\Windows\ccmsetup C:\Windows\ccmC:\Windows\SMSCFG.iniRemove the Machine Certs from the SMS storeTo do thisStart>Run>MMC>Click File>Add/Remove Snap-in…>Certificates>Click Add>Computer Account>Local Computer>SMSDelete the certificates in the SMS store.Enjoy Heinrich Pelser

SCCM 2012 R2 – KB2938441 – Cumulative Update 1

Hi All, Microsoft has just published the Cumulative Update 1 for System Center 2012 R2 Configuration Manager Information about this update can be found here and here 2938441: Description of Cumulative Update 1 for System Center 2012 R2 Configuration Manager 2932274: Description of PowerShell changes available in Cumulative Update 1 for System Center 2012 R2 Configuration Manager Also note a recent blog update on our servicing strategy to address some common customer questions. But now, how to install it? 1- Execute the CM12-R2CU1-KB2938441-X64-ENU.exe file you donwloaded and go to the Mirosoft License Terms. Click Accept and click Next 2- On the pre-requisites, click Next. 3- Select Install the update for the configuration manager console if not selected and click next 4- Select yes, update the site database and click next 5- leave all Deployment Assistance Options select and click Next. This basically means what packages are going to be…

SCCM 2012 – Updating SCCM client during TS

Hi All, for ages, i’ve being using a script to automatically populate the PATCH option of the SCCM client installation in a TS environment. the reason i’ve been using this script (if not clear for you), is the number of hotfixes and the allowed size of the text box on a TS… fortunately with SCCM 2012, the SCCM product group changed the way they di hotfixes and started to use Updates Rollup, meaning that you would not find the issue we’ve been experiencing on SCCM 2007. Even it is true, Microsoft had to release few updates out of the Update Rollup and people don’t know how to manage them in a Task Sequence as this has changed a bit. Fortunately (again), the script has been updates to SCCM 2012 ( however, what happen if you don’t have the ZTIUtility.vbs or don’t want do the MDT integration? Well…you need to do…