rbac

SCCM – Updated E-book SCCM Administration v3

Hi All, my updated SCCM e-book has finally been released. It took some time to write up and test. With 130 pages divided in 37 chapters, you’ll find lots of good info about starting with SCCM. And it is free… In this version, I removed Linux related topics, Updated Windows 10 to 1709, added sections for Cloud Management Gateway (CMG), Windows 10 Express updates, SCCM Data warehouse, Office 365 Installer, Windows 10 Update Readiness, Pending Reboot, updated some other section for SCCM 1710 and updated/added some powershell scripts To download, click here. let me know if you have any feedback

TucanData DataExplorer

The TucanData DataExplorer was initially developed by RFL Systems (company acquired by TucanData in September 2016 – more info about at http://thedesktopteam.com/raphael/tucandata-acquires-rfl-systems/). The solution provides extensions to enterprise applications, enhancing reports and data visualisation capabilities. TucanData’s DataExplorer is a cutting-edge data visualisation platform which helps enterprises to consume and distribute strategic business information. The solution was created to help System Center Configuration Manager (SCCM) administrators to analyse and monitor SCCM data as well as provide an easy way to allow a non-technical person to understand the SCCM Data. The solution has expanded since its conception and today it also has Active Directory, Office 365, System Center Service Manager (SCSM) and Hyper-V modules. It provides the following benefits: – Straightforward and easy to use. Visualisation of what you want is just a drag and drop click away; – Ready to use. There is no need to spend time creating queries and…

SCCM-Reporting

Hi all, Over the last couple of weeks, I’ve been reviewing the latest book from a friend and fellow MVP Garth Jones called System Center Configuration Manager Reporting Unleashed. I have to say that I was impressed how good the book was written and cover most (if not all) aspects of what you need to know about reporting in SCCM. Of course, there are load of things that only the experience will teach you but this book is a good start. Over the years working with many companies that uses SCCM, I could “classify” the SCCM admin in 4 different categories: 1-Novice – someone that is starting with SCCM, he/she normally do not have any experience with SCCM nor with SQL and Reporting 2-Junior – someone that has a good knowledge of the SCCM when using the console, however, cannot do anything else. he/she may have a some knowledge of…

SCCM-Migrating form HTTP to HTTPS

Hi All, have you ever needed to migrate a SCCM 2012 (or Current Branch) environment from HTTP to HTTPS? if you have, you know that it is quite easy, but there are some challenges, when things go wrong, off course :)… The steps I normally take (and I hope I haven’t forgotten any :)) are: 1- Create the certificate Template (ConfigMgr Clients (if the workstation is not already in place), ConfigMgr IIS Servers and ConfigMgr DP Servers) 2- Request the certificates 3- on the IIS servers, change the bind to allow HTTPS port (default 443) and select the certificate 4- Export the Root CA (and any other CA) certificate and import it into SCCM. Note, do not force the SCCM to use PKI, instead, allow it to use HTTP or HTTPS.. 5- for each client, confirm that the Client Certificate is set to PKI (you can easily check the HKLM\Software\Microsoft\CCM\HttpsState…

SCCM-Running RBAC queries on SQL Mgmt

Hi All, SCCM 2012 R2 introduced the RBAC to reports, what I mean by that is that now, users will be only able to see what they have rights to see. This is done by the introduction of the @UserID parameter to the reports. This parameter is hidden, so you don’t even know that it is there. however, if you try to run a report query on a SQL Management Studio, it will not like. As workaround, you can change the @UserID for ‘disabled’ and it will not validate the security. More info at http://blogs.technet.com/b/configmgrdogs/archive/2014/07/14/creating-custom-rbac-enabled-reports-in-configmgr-2012-r2.aspx as you can imagine, it is really good, you can get any report query and change the @UserID for ‘disabled’ and test the query, or do the other way around, however, this is not good if you want really know what is returning is what it should return, is it? So, imagine an example: Query1:…