Re: [mssms] RE: (OT) Vendor list for Ignite?

[Anoop C Nair]

Also, Intune can support Mac OS X as well if Apple can help with OMA-DM
protocol into MAC OS X. Isn't it?

Regards
Anoop

Best Regards,
*Anoop C Nair*
ConfigMgr Architect, Microsoft Community Contributor 2011 and 2012 / Senior
Consultant

*My Site: www.AnoopCNair.com *
*Twitter @anoopmannur *
Facebook - http://www.facebook.com/ConfigMgr2012

 * *

On Wed, Mar 4, 2015 at 12:51 AM, Michael Niehaus <
michael.nieh...@microsoft.com> wrote:

>  Yes, “mobile device management” isn’t just for mobile devices J
>
>
>
> Windows Intune has its own agent, or with Windows 8.1 and above it can use
> OMA-DM protocols that are built into the OS.  With Windows 8.1, those are
> fairly limited, so the focus is more on BYOD scenarios (for desktops) and
> lightweight management (phones and desktops).  For Windows 10, there will
> be more capabilities added (explored in detail at Ignite).
>
>
>
> Of course Intune also does iOS, Android, etc.
>
>
>
> Thanks,
>
> -Michael
>
>
>
> *From:* listsad...@lists.myitforum.com [mailto:
> listsad...@lists.myitforum.com] *On Behalf Of *Heaton, Joseph@Wildlife
> *Sent:* Tuesday, March 3, 2015 8:14 PM
>
> *To:* 'mssms@lists.myitforum.com'
> *Subject:* RE: [mssms] RE: (OT) Vendor list for Ignite?
>
>
>
> Looks like I really need to read up on Intune.  I thought it was just for
> mobile devices, but it seems I’m completely wrong on that.
>
>
>
> *From:* listsad...@lists.myitforum.com [
> mailto:listsad...@lists.myitforum.com ] *On
> Behalf Of *rodtr...@myitforum.com
> *Sent:* Friday, February 27, 2015 4:40 PM
> *To:* SMS
> *Subject:* Re: [mssms] RE: (OT) Vendor list for Ignite?
>
>
>
> I was there for the actual keynote. There's a bit of semantics going on.
> Workloads for the foreseeable future can mean a number of things, and
> there's been a LOT of activity in the background since that keynote.
>
>
>
> The core message is that Microsoft intends to support customers - not
> products. Microsoft understands that customers are inherently slow to adopt
> new products that require massive migrations. There are customers still
> running CM 2007, even SMS 2003. So, when it's said that CM will be
> supported for the foreseeable future, it means as long as customers are
> still running it.
>
>
>
> Focus is on Intune right now, and has been for a long while. CM may see
> some improvements, but only in areas where it makes sense to the Microsoft
> vision. Don't expect major new features. For example, one of the bigger
> features we'll see in the Fall for CM 2012 R2 is better integration with
> Intune. App and OS delivery are the only real pieces of CM that can't be
> Cloud-based right now, but that change is coming. Microsoft will attempt to
>  make Windows 10 the compelling reason for customers to move to Intune with
> changes in how apps and the OS delivers.
>
>
>
>
>
>
>
> *From:* 'Bill Bernat' 
> *Sent:* ‎Friday‎, ‎February‎ ‎27‎, ‎2015 ‎2‎:‎09‎ ‎PM
> *To:* SMS 
>
>
>
> It’s a fascinating topic. Here’s a recent take from Brad Anderson:
> http://redmondmag.com/articles/2015/02/23/system-center-configuration-manager-future.aspx
> .
>
>
>
> -billb
>
>
>
> *From: *Andreas Hammarskjöld 
> *Reply-To: *"mssms@lists.myitforum.com" 
> *Date: *Friday, February 27, 2015 at 10:58 AM
> *To: *"mssms@lists.myitforum.com" 
> *Subject: *RE: [mssms] RE: (OT) Vendor list for Ignite?
>
>
>
> But also remember what wise men say: “One does not just migrate 20 years
> of code in to Mordor… sorry the Cloud”
>
>
>
> MS focuses primarily on the Cloud right now, but we all know were few
> people actually use it. Does Intune even cover 1% of the ConfigMgr install
> base? And I am not talking purchased or licensed, I am talking about
> deployed.
>
>
>
> So MS faces the options to put in a few years to make Intune better with
> zero new stuff in ConfigMgr, which will make existing customer base angry,
> making future sells harder. Alternative is to do a split where some like
> 70% goes towards the Cloud and 30% to keep customer happy enough. But that
> won’t make the “market” people as they want a good story and strong figures
> on cloud and market share in that. The lack of ConfigMgr sessions at these
> events since there are very few new features, i.e. not so much dev time for
> our friend ConfigMgr.
>
>
>
> In my previous role at my old company I was in exactly the same spot as
> MS. I had to develop new things for the cloud, and still maintain good ol’
> “slow moving software”. It’s not an easy game. MS will make most mistake’s
> again with Intune as they did with ConfigMgr, because people are like that.
> Writing new code generates bugs, period, since developers are human. So it
> will be slower than they think, and when no new stuff comes to existing
> platform owners they will start not to renew Enterprise deals since there
> is a lack of roadmap, people will raise hell internally. And then God knows
> what will happen.
>
>
>
> So ba

RE: [mssms] Old Subject: Boundary Subnets

[Jason Sandys]

You don’t. Subnet IDs are independent from the mask. That’s part of the problem 
here.

J

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of David Jones
Sent: Tuesday, March 3, 2015 1:09 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Old Subject: Boundary Subnets

Thanks Jason. Something click with what you wrote. I inherited an SCCM system. 
It works great. I have only found a few anomalies. Some were in boundaries. If 
I want to check the boundaries against the DHCP servers for scope and subnet 
mask, how do find out what subnet mask was used originally to create the subnet 
boundary in SCCM just to confirm accuracy exists?

Dave



On Thu, Feb 26, 2015 at 11:39 AM, Jason Sandys 
mailto:ja...@sandys.us>> wrote:
First, to summarize the example:

IP Subnet boundary: 10.1.0.0
Clients (assuming /24 subnet mask): 10.1.0.100/24, 
10.1.1.100/24, 10.1.2.100/24, and 
10.1.3.100/24
Clients subnet IDs: 10.1.0.0, 10.1.1.0, 10.1.2.0, 10.1.3.0

Thus, only the clients in the first subnet would match boundary wise. If 
however you clients were all /22 for their subnet mask, this would work fine. 
How many folks use a /22 though. As Todd pointed out in his reply also that if 
your clients are truly using /22 as their subnet mask, then this is *not* a 
supernet. Supernets are aggregations of multiple subnets at a network level but 
this is not an aggregation, it’s the actual subnet.

The true supernet issue also comes in during discovery because supernets are 
often used in AD. AD discovery has no idea what subnet mask a client uses (it 
can’t) so it uses subnet information in AD to determine this and thus the 
subnet ID. So if you’ve used a supernet in your AD sites, then AD Discovery 
will calculate the incorrect subnet ID for the client causing it to not be 
assigned to the proper site.

Ultimately, it’s not that all of this doesn’t or can’t work. It’s that most 
folks don’t understand (or truly have the need to understand) the details of 
what’s going on and by simply using IP Address ranges, you don’t need to 
either. They are completely straight-forward and simple. The only caveat is for 
orgs with lots of boundaries (think thousands) then there can be perf 
implication.

J

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] 
On Behalf Of Miller, Todd
Sent: Thursday, February 26, 2015 9:00 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Old Subject: Boundary Subnets



I think the only thing here is confusion over what a supernet is.

Your example is correct.  You have a subnet that has a mask of 255.255.252.0 
and covers a range from 10.1.1.0 to 10.1.3.255 with the gateway at 10.1.1.0.  
That is a subnet, not a supernet.

An example of a supernet might be that you have two subnets 
10.1.1.0/22 and 10.1.4.0/22 and you 
think “why not just specify 10.1.1.0/21 in the SCCM 
boundary instead and cover then both?”  That would be where you would run into 
trouble.  You would need to specify both subnets 
10.1.1.0/22 AND 10.1.4.0/22 and not the 
“supernet” of 10.1.1.0/21

Or maybe you have 256 subnets 10.1.0.0, 10.1.1.0, 10.1.2.0 …. 10.1.255.0 and 
you think “Hey, I’ll just specify the boundary as 
10.1.0.0/16 and cover all my addresses with one line.  You 
can’t do that.  If you did this, the clients in 10.1.0.0 would work since their 
subnet is listed in SCCM, and the other 254 subnets would not since their 
subnets are not listed.  You could however specify a single address RANGE of 
10.1.0.0-10.1.255.255 and be done.

So, it is easier to maintain a single range rather than define 256 subnets 
(powershell not included.)  Also, when the computer tries to check its 
boundary, if you have 256 ranges, it needs to look through more data to figure 
out if it is in scope.  If you had a single range defined, it would only look 
at one piece of data.  I think these arguments are less important now with easy 
to create boundaries and fast AD clusters.

Another reason that you might avoid subnets as boundaries is that it is not 
always the case that the computer’s IP address is configured correctly.  
Someone might misconfigure the IP information on a client and then the subnet 
might be computed incorrectly, although hopefully that is unlikely if you are 
using DHCP.  The computer’s subnet is computed by the client so if the IP 
information is incorrect, the client might compute its subnet incorrectly.

(I am about 90% confident of this answer – I am not a network engineer)


From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of David Jones
S

[mssms] RE: SCCM in the lab

[Heaton, Joseph@Wildlife]

Awesome, thanks guys.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Daniel Ratliff
Sent: Tuesday, March 03, 2015 1:17 PM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: SCCM in the lab

Exactly, also don't use the same site code.

Daniel Ratliff

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marcum, John
Sent: Tuesday, March 03, 2015 4:12 PM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: SCCM in the lab

I assume it's on a VM? Just delete the VM, clean out the System Management 
container and build a new VM with the version you want.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Heaton, Joseph@Wildlife
Sent: Tuesday, March 03, 2015 3:10 PM
To: mssms@lists.myitforum.com
Subject: [mssms] SCCM in the lab

I have a lab environment, in which I had originally setup SCCM 2012 R2, on a 
Server 2012 box.  Well, now I need to plan out and test the upgrade of our 
production environment, which is SCCM 2012 SP1.  I want to remove SCCM from my 
lab environment, so that I can do a clean install of the older version.  I'm 
getting ready to exercise my google-fu, but thought I'd ask here as well, in 
case someone has already done this, and has a reference that I could look at.

Thanks,

Joe Heaton
Enterprise Server Support
Information Technology Operations Branch
Data and Technology Division
CA Department of Fish and Wildlife
1700 9th Street, 3rd Floor
Sacramento, CA  95811
Desk:  (916) 323-1284




Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.


The information transmitted is intended only for the person or entity to which 
it is addressed
and may contain CONFIDENTIAL material. If you receive this material/information 
in error,
please contact the sender and delete or destroy the material/information.

Re: [mssms] RE: (OT) Vendor list for Ignite?

[rodtrent]

Well, if you want to get technical, since licensing is now per user instead of 
per device…


Modern User Management?  😊






From: Marcum, John
Sent: ‎Tuesday‎, ‎March‎ ‎3‎, ‎2015 ‎3‎:‎52‎ ‎PM
To: SMS






I like "Modern" devices better than "Mobile" and that's what I am hearing when 
talking to product team folks.

 



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Rod Trent
Sent: Tuesday, March 03, 2015 1:38 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

 

And, really it’s not about devices – or at least what we think computing 
devices are today. I see Intune taking on additional management capabilities in 
the near future to manage even IoT and wearables. At least, it has to.

 

It should actually be “mobility management”

 



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Michael Niehaus
Sent: Tuesday, March 3, 2015 2:22 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

 

Yes, “mobile device management” isn’t just for mobile devices J

 

Windows Intune has its own agent, or with Windows 8.1 and above it can use 
OMA-DM protocols that are built into the OS.  With Windows 8.1, those are 
fairly limited, so the focus is more on BYOD scenarios (for desktops) and 
lightweight management (phones and desktops).  For Windows 10, there will be 
more capabilities added (explored in detail at Ignite).

 

Of course Intune also does iOS, Android, etc.

 

Thanks,

-Michael

 



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Heaton, Joseph@Wildlife
Sent: Tuesday, March 3, 2015 8:14 PM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

 

Looks like I really need to read up on Intune.  I thought it was just for 
mobile devices, but it seems I’m completely wrong on that.

 



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of rodtr...@myitforum.com
Sent: Friday, February 27, 2015 4:40 PM
To: SMS
Subject: Re: [mssms] RE: (OT) Vendor list for Ignite?

 



I was there for the actual keynote. There's a bit of semantics going on. 
Workloads for the foreseeable future can mean a number of things, and there's 
been a LOT of activity in the background since that keynote.


 


The core message is that Microsoft intends to support customers - not products. 
Microsoft understands that customers are inherently slow to adopt new products 
that require massive migrations. There are customers still running CM 2007, 
even SMS 2003. So, when it's said that CM will be supported for the foreseeable 
future, it means as long as customers are still running it.


 


Focus is on Intune right now, and has been for a long while. CM may see some 
improvements, but only in areas where it makes sense to the Microsoft vision. 
Don't expect major new features. For example, one of the bigger features we'll 
see in the Fall for CM 2012 R2 is better integration with Intune. App and OS 
delivery are the only real pieces of CM that can't be Cloud-based right now, 
but that change is coming. Microsoft will attempt to  make Windows 10 the 
compelling reason for customers to move to Intune with changes in how apps and 
the OS delivers. 


 


 


 



From: 'Bill Bernat'
Sent: ‎Friday‎, ‎February‎ ‎27‎, ‎2015 ‎2‎:‎09‎ ‎PM
To: SMS


 







It’s a fascinating topic. Here’s a recent take from Brad Anderson: 
http://redmondmag.com/articles/2015/02/23/system-center-configuration-manager-future.aspx.


 


-billb


 


From: Andreas Hammarskjöld 
Reply-To: "mssms@lists.myitforum.com" 
Date: Friday, February 27, 2015 at 10:58 AM
To: "mssms@lists.myitforum.com" 
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?


 




But also remember what wise men say: “One does not just migrate 20 years of 
code in to Mordor… sorry the Cloud”

 

MS focuses primarily on the Cloud right now, but we all know were few people 
actually use it. Does Intune even cover 1% of the ConfigMgr install base? And I 
am not talking purchased or licensed, I am talking about deployed. 

 

So MS faces the options to put in a few years to make Intune better with zero 
new stuff in ConfigMgr, which will make existing customer base angry, making 
future sells harder. Alternative is to do a split where some like 70% goes 
towards the Cloud and 30% to keep customer happy enough. But that won’t make 
the “market” people as they want a good story and strong figures on cloud and 
market share in that. The lack of ConfigMgr sessions at these events since 
there are very few new features, i.e. not so much dev time for our friend 
ConfigMgr.

 

In my previous role at my old company I was in exactly the same spot as MS. I 
had to develop new things for the cloud, and still maintain good ol’ “slow 
moving software”. It’s not an easy game. MS will make most mistake’s again with 
Intune as they did with

[mssms] RE: SCCM in the lab

[Daniel Ratliff]

Exactly, also don't use the same site code.

Daniel Ratliff

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marcum, John
Sent: Tuesday, March 03, 2015 4:12 PM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: SCCM in the lab

I assume it's on a VM? Just delete the VM, clean out the System Management 
container and build a new VM with the version you want.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Heaton, Joseph@Wildlife
Sent: Tuesday, March 03, 2015 3:10 PM
To: mssms@lists.myitforum.com
Subject: [mssms] SCCM in the lab

I have a lab environment, in which I had originally setup SCCM 2012 R2, on a 
Server 2012 box.  Well, now I need to plan out and test the upgrade of our 
production environment, which is SCCM 2012 SP1.  I want to remove SCCM from my 
lab environment, so that I can do a clean install of the older version.  I'm 
getting ready to exercise my google-fu, but thought I'd ask here as well, in 
case someone has already done this, and has a reference that I could look at.

Thanks,

Joe Heaton
Enterprise Server Support
Information Technology Operations Branch
Data and Technology Division
CA Department of Fish and Wildlife
1700 9th Street, 3rd Floor
Sacramento, CA  95811
Desk:  (916) 323-1284




Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.


The information transmitted is intended only for the person or entity to which 
it is addressed
and may contain CONFIDENTIAL material.  If you receive this 
material/information in error,
please contact the sender and delete or destroy the material/information.

[mssms] RE: SCCM in the lab

[Marcum, John]

I assume it's on a VM? Just delete the VM, clean out the System Management 
container and build a new VM with the version you want.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Heaton, Joseph@Wildlife
Sent: Tuesday, March 03, 2015 3:10 PM
To: mssms@lists.myitforum.com
Subject: [mssms] SCCM in the lab

I have a lab environment, in which I had originally setup SCCM 2012 R2, on a 
Server 2012 box.  Well, now I need to plan out and test the upgrade of our 
production environment, which is SCCM 2012 SP1.  I want to remove SCCM from my 
lab environment, so that I can do a clean install of the older version.  I'm 
getting ready to exercise my google-fu, but thought I'd ask here as well, in 
case someone has already done this, and has a reference that I could look at.

Thanks,

Joe Heaton
Enterprise Server Support
Information Technology Operations Branch
Data and Technology Division
CA Department of Fish and Wildlife
1700 9th Street, 3rd Floor
Sacramento, CA  95811
Desk:  (916) 323-1284




Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.

[mssms] SCCM in the lab

[Heaton, Joseph@Wildlife]

I have a lab environment, in which I had originally setup SCCM 2012 R2, on a 
Server 2012 box.  Well, now I need to plan out and test the upgrade of our 
production environment, which is SCCM 2012 SP1.  I want to remove SCCM from my 
lab environment, so that I can do a clean install of the older version.  I'm 
getting ready to exercise my google-fu, but thought I'd ask here as well, in 
case someone has already done this, and has a reference that I could look at.

Thanks,

Joe Heaton
Enterprise Server Support
Information Technology Operations Branch
Data and Technology Division
CA Department of Fish and Wildlife
1700 9th Street, 3rd Floor
Sacramento, CA  95811
Desk:  (916) 323-1284

Re: [mssms] SCCM updates reporting

[ccollins9]

Disregard.  I checked another report and it seems that all these computers
are pending restart for the update.  Thanks for the help!

On Tue, Mar 3, 2015 at 2:41 PM, ccollins9  wrote:

> Thanks for that.  I got the "Last State Received" column to update with
> today's date, but the update is still showing as required even tho it's
> installed.  Very odd.
>
> On Tue, Mar 3, 2015 at 1:29 PM, Sherry Kissinger <
> slkissin...@sbcglobal.net> wrote:
>
>> It may be that the State Message from the client to the server was 'lost'
>> somewhere on it's way from the client to the server; you may want to try
>> the script in here -->
>> http://blogs.msdn.com/b/steverac/archive/2011/01/07/sccm-state-messaging-in-depth.aspx
>>
>> for "RefreshServerComplianceState" -- to have those particular clients
>> resend all of their updates' compliance.
>>
>>
>>
>>   On Tuesday, March 3, 2015 12:10 PM, ccollins9 
>> wrote:
>>
>>
>> I'm trying to track the compliance of a specific update and am using the
>> report "Compliance 2 - Specific software update". There are several
>> machines on the report that I know have the update and their "Last State
>> Received" was 5 days ago.
>>
>> My question, does anyone know the client task that will update this
>> report faster? So far, I've tried:
>>
>> Machine Policy Retrieval & Evaluation Cycle
>> Software Updates Deployment Evaluation Cycle
>> Software Updates Scan Cycle
>>
>>
>>
>>
>>
>>
>
>

RE: [mssms] RE: (OT) Vendor list for Ignite?

[Marcum, John]

I like "Modern" devices better than "Mobile" and that's what I am hearing when 
talking to product team folks.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Rod Trent
Sent: Tuesday, March 03, 2015 1:38 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

And, really it’s not about devices – or at least what we think computing 
devices are today. I see Intune taking on additional management capabilities in 
the near future to manage even IoT and wearables. At least, it has to.

It should actually be “mobility management”

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Michael Niehaus
Sent: Tuesday, March 3, 2015 2:22 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

Yes, “mobile device management” isn’t just for mobile devices ☺

Windows Intune has its own agent, or with Windows 8.1 and above it can use 
OMA-DM protocols that are built into the OS.  With Windows 8.1, those are 
fairly limited, so the focus is more on BYOD scenarios (for desktops) and 
lightweight management (phones and desktops).  For Windows 10, there will be 
more capabilities added (explored in detail at Ignite).

Of course Intune also does iOS, Android, etc.

Thanks,
-Michael

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Heaton, Joseph@Wildlife
Sent: Tuesday, March 3, 2015 8:14 PM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

Looks like I really need to read up on Intune.  I thought it was just for 
mobile devices, but it seems I’m completely wrong on that.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of 
rodtr...@myitforum.com
Sent: Friday, February 27, 2015 4:40 PM
To: SMS
Subject: Re: [mssms] RE: (OT) Vendor list for Ignite?

I was there for the actual keynote. There's a bit of semantics going on. 
Workloads for the foreseeable future can mean a number of things, and there's 
been a LOT of activity in the background since that keynote.

The core message is that Microsoft intends to support customers - not products. 
Microsoft understands that customers are inherently slow to adopt new products 
that require massive migrations. There are customers still running CM 2007, 
even SMS 2003. So, when it's said that CM will be supported for the foreseeable 
future, it means as long as customers are still running it.

Focus is on Intune right now, and has been for a long while. CM may see some 
improvements, but only in areas where it makes sense to the Microsoft vision. 
Don't expect major new features. For example, one of the bigger features we'll 
see in the Fall for CM 2012 R2 is better integration with Intune. App and OS 
delivery are the only real pieces of CM that can't be Cloud-based right now, 
but that change is coming. Microsoft will attempt to  make Windows 10 the 
compelling reason for customers to move to Intune with changes in how apps and 
the OS delivers.



From: 'Bill Bernat'
Sent: ‎Friday‎, ‎February‎ ‎27‎, ‎2015 ‎2‎:‎09‎ ‎PM
To: SMS

It’s a fascinating topic. Here’s a recent take from Brad Anderson: 
http://redmondmag.com/articles/2015/02/23/system-center-configuration-manager-future.aspx.

-billb

From: Andreas Hammarskjöld 
mailto:jun...@2pintsoftware.com>>
Reply-To: "mssms@lists.myitforum.com" 
mailto:mssms@lists.myitforum.com>>
Date: Friday, February 27, 2015 at 10:58 AM
To: "mssms@lists.myitforum.com" 
mailto:mssms@lists.myitforum.com>>
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

But also remember what wise men say: “One does not just migrate 20 years of 
code in to Mordor… sorry the Cloud”

MS focuses primarily on the Cloud right now, but we all know were few people 
actually use it. Does Intune even cover 1% of the ConfigMgr install base? And I 
am not talking purchased or licensed, I am talking about deployed.

So MS faces the options to put in a few years to make Intune better with zero 
new stuff in ConfigMgr, which will make existing customer base angry, making 
future sells harder. Alternative is to do a split where some like 70% goes 
towards the Cloud and 30% to keep customer happy enough. But that won’t make 
the “market” people as they want a good story and strong figures on cloud and 
market share in that. The lack of ConfigMgr sessions at these events since 
there are very few new features, i.e. not so much dev time for our friend 
ConfigMgr.

In my previous role at my old company I was in exactly the same spot as MS. I 
had to develop new things for the cloud, and still maintain good ol’ “slow

[mssms] SCCM 2007 some clients randomly not downloading content

[Atkinson, Matt T]

We are nearing the end of our migration from 2007 to 2012. We are using 2007 to 
deploy the 2012 client, but in a large number of machines I am finding that 
they have the advertisement according to CliSpy and a review of the policy 
agent and policy evaluator logs, but the execmgr.log never shows any mention of 
the advert or package and the download never checks for location in CAS.log.

The only thing we are doing which I could see possibly causing a problem is 
that we have the package deployed twice (last advert deployed to all systems, 
designed to catch any machines that may have slipped through and not been in 
one of our targeted collections).

Any other logs I can check?

Matt Atkinson
Client Systems Engineer
3601 Murray Blvd Ste. 175 Beaverton, OR 97005
W: 971-282-0342 C: 503-851-4620





This message is intended for the sole use of the addressee, and may contain 
information that is privileged, confidential and exempt from disclosure under 
applicable law. If you are not the addressee you are hereby notified that you 
may not use, copy, disclose, or distribute to anyone the message or any 
information contained in the message. If you have received this message in 
error, please immediately advise the sender by reply email and delete this 
message.

RE: [mssms] RE: (OT) Vendor list for Ignite?

[Rod Trent]

Monthly cadence

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Phil Wilcock
Sent: Tuesday, March 3, 2015 2:21 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

 

Indeed! There’s a great blog from Mr Sandys here 
http://blog.configmgrftw.com/comparing-the-two-modes-of-microsoft-intune/  
which compares the two modes of Intune

 

What’s interesting about Intune is the rate at which features can be/are being 
added with it being a Cloud Based service..

 

Phil

 

 

Phil Wilcock

2Pint Software

  http://2pintsoftware.com

 

 

 

From: listsad...@lists.myitforum.com   
[mailto:listsad...@lists.myitforum.com] On Behalf Of Heaton, Joseph@Wildlife
Sent: 03 March 2015 19:14
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

 

Looks like I really need to read up on Intune.  I thought it was just for 
mobile devices, but it seems I’m completely wrong on that.

 

From: listsad...@lists.myitforum.com   
[mailto:listsad...@lists.myitforum.com] On Behalf Of rodtr...@myitforum.com 
 
Sent: Friday, February 27, 2015 4:40 PM
To: SMS
Subject: Re: [mssms] RE: (OT) Vendor list for Ignite?

 

I was there for the actual keynote. There's a bit of semantics going on. 
Workloads for the foreseeable future can mean a number of things, and there's 
been a LOT of activity in the background since that keynote.

 

The core message is that Microsoft intends to support customers - not products. 
Microsoft understands that customers are inherently slow to adopt new products 
that require massive migrations. There are customers still running CM 2007, 
even SMS 2003. So, when it's said that CM will be supported for the foreseeable 
future, it means as long as customers are still running it.

 

Focus is on Intune right now, and has been for a long while. CM may see some 
improvements, but only in areas where it makes sense to the Microsoft vision. 
Don't expect major new features. For example, one of the bigger features we'll 
see in the Fall for CM 2012 R2 is better integration with Intune. App and OS 
delivery are the only real pieces of CM that can't be Cloud-based right now, 
but that change is coming. Microsoft will attempt to  make Windows 10 the 
compelling reason for customers to move to Intune with changes in how apps and 
the OS delivers. 

 

 

 

From: 'Bill Bernat'  
Sent: ‎Friday‎, ‎February‎ ‎27‎, ‎2015 ‎2‎:‎09‎ ‎PM
To: SMS  

 

It’s a fascinating topic. Here’s a recent take from Brad Anderson: 
http://redmondmag.com/articles/2015/02/23/system-center-configuration-manager-future.aspx.

 

-billb

 

From: Andreas Hammarskjöld mailto:jun...@2pintsoftware.com> >
Reply-To: "mssms@lists.myitforum.com  " 
mailto:mssms@lists.myitforum.com> >
Date: Friday, February 27, 2015 at 10:58 AM
To: "mssms@lists.myitforum.com  " 
mailto:mssms@lists.myitforum.com> >
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

 

But also remember what wise men say: “One does not just migrate 20 years of 
code in to Mordor… sorry the Cloud”

 

MS focuses primarily on the Cloud right now, but we all know were few people 
actually use it. Does Intune even cover 1% of the ConfigMgr install base? And I 
am not talking purchased or licensed, I am talking about deployed. 

 

So MS faces the options to put in a few years to make Intune better with zero 
new stuff in ConfigMgr, which will make existing customer base angry, making 
future sells harder. Alternative is to do a split where some like 70% goes 
towards the Cloud and 30% to keep customer happy enough. But that won’t make 
the “market” people as they want a good story and strong figures on cloud and 
market share in that. The lack of ConfigMgr sessions at these events since 
there are very few new features, i.e. not so much dev time for our friend 
ConfigMgr.

 

In my previous role at my old company I was in exactly the same spot as MS. I 
had to develop new things for the cloud, and still maintain good ol’ “slow 
moving software”. It’s not an easy game. MS will make most mistake’s again with 
Intune as they did with ConfigMgr, because people are like that. Writing new 
code generates bugs, period, since developers are human. So it will be slower 
than they think, and when no new stuff comes to existing platform owners they 
will start not to renew Enterprise deals since there is a lack of roadmap, 
people will raise hell internally. And then God knows what will happen.

 

So basically, Microsoft has to develop a kick-ass Intune with the same feature 
set that it took them 20 years to put into ConfigMgr + more. And this they have 
to do in a very short timeframe before losing new or existing custo

RE: [mssms] RE: (OT) Vendor list for Ignite?

[Michael Niehaus]

True, it could be any network-connected device that has lightweight management 
needs.

Kind of like with SMS 2003 when they introduced the “mobile client” which was 
an improvement over the old client, much lighter-weight, and quickly replaced 
the old client, becoming the “advanced client.”  Now, there’s something even 
lighter weight, MDM, that could conceivably take on some scenarios where you 
don’t need a huge amount of functionality.

Thanks,
-Michael

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Rod Trent
Sent: Tuesday, March 3, 2015 8:38 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

And, really it’s not about devices – or at least what we think computing 
devices are today. I see Intune taking on additional management capabilities in 
the near future to manage even IoT and wearables. At least, it has to.

It should actually be “mobility management”

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Michael Niehaus
Sent: Tuesday, March 3, 2015 2:22 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

Yes, “mobile device management” isn’t just for mobile devices ☺

Windows Intune has its own agent, or with Windows 8.1 and above it can use 
OMA-DM protocols that are built into the OS.  With Windows 8.1, those are 
fairly limited, so the focus is more on BYOD scenarios (for desktops) and 
lightweight management (phones and desktops).  For Windows 10, there will be 
more capabilities added (explored in detail at Ignite).

Of course Intune also does iOS, Android, etc.

Thanks,
-Michael

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Heaton, Joseph@Wildlife
Sent: Tuesday, March 3, 2015 8:14 PM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

Looks like I really need to read up on Intune.  I thought it was just for 
mobile devices, but it seems I’m completely wrong on that.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of 
rodtr...@myitforum.com
Sent: Friday, February 27, 2015 4:40 PM
To: SMS
Subject: Re: [mssms] RE: (OT) Vendor list for Ignite?

I was there for the actual keynote. There's a bit of semantics going on. 
Workloads for the foreseeable future can mean a number of things, and there's 
been a LOT of activity in the background since that keynote.

The core message is that Microsoft intends to support customers - not products. 
Microsoft understands that customers are inherently slow to adopt new products 
that require massive migrations. There are customers still running CM 2007, 
even SMS 2003. So, when it's said that CM will be supported for the foreseeable 
future, it means as long as customers are still running it.

Focus is on Intune right now, and has been for a long while. CM may see some 
improvements, but only in areas where it makes sense to the Microsoft vision. 
Don't expect major new features. For example, one of the bigger features we'll 
see in the Fall for CM 2012 R2 is better integration with Intune. App and OS 
delivery are the only real pieces of CM that can't be Cloud-based right now, 
but that change is coming. Microsoft will attempt to  make Windows 10 the 
compelling reason for customers to move to Intune with changes in how apps and 
the OS delivers.



From: 'Bill Bernat'
Sent: ‎Friday‎, ‎February‎ ‎27‎, ‎2015 ‎2‎:‎09‎ ‎PM
To: SMS

It’s a fascinating topic. Here’s a recent take from Brad Anderson: 
http://redmondmag.com/articles/2015/02/23/system-center-configuration-manager-future.aspx.

-billb

From: Andreas Hammarskjöld 
mailto:jun...@2pintsoftware.com>>
Reply-To: "mssms@lists.myitforum.com" 
mailto:mssms@lists.myitforum.com>>
Date: Friday, February 27, 2015 at 10:58 AM
To: "mssms@lists.myitforum.com" 
mailto:mssms@lists.myitforum.com>>
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

But also remember what wise men say: “One does not just migrate 20 years of 
code in to Mordor… sorry the Cloud”

MS focuses primarily on the Cloud right now, but we all know were few people 
actually use it. Does Intune even cover 1% of the ConfigMgr install base? And I 
am not talking purchased or licensed, I am talking about deployed.

So MS faces the options to put in a few years to make Intune better with zero 
new stuff in ConfigMgr, which will make existing customer base angry, making 
future sells harder. Alternative is to do a split where some like 70% goes 
towards the Cloud and 30% to keep customer happy enough. But that won’t make 
the “market” people as they want a good stor

[mssms] RE: Sccm 2007 Sp2 R2 - Can i use MDT 2012?

[Burke, John]

Hi folks.  I’ve had some of my rules block email from myitforum before.

This one seemed like something you folks would know pretty quick, so thought 
I’d confirm it got to the list and that I’m getting the responses.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Burke, John
Sent: March-03-15 11:32 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Sccm 2007 Sp2 R2 - Can i use MDT 2012?

Hi,

I’m trying to get our image working with Mcafee Encryption. The newer versions 
instructions are failing, I believe because it is built for

SCCM 2012
MDT 2012 update 1
Windows assessment and Deployment Kit version 4.0.

My question is – can I install MDT 2012 update 1 and Windows assessment and 
deployment kit and use those to manipulate the WIM outside of SCCM? I’m hoping 
that will let me follow their instructions and then I can just deploy that.

RE: [mssms] Using SCCM 2012 for Third Party Licensing

[Nick sullivan]

Sounds like SCROCH is a powerful tool.  We will need this for our app catalog 
request process anyhow.. 
 
From: jmar...@babc.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Using SCCM 2012 for Third Party Licensing
Date: Tue, 3 Mar 2015 18:20:30 +









Does it….
 
1. Open a ticket in SCSM prior to do so?
2. Allow the user to opt out of the reclamation?
3. If the user opts out allow an override by a manager?
4. Close the SCSM ticket upon completion of the removal?
 
I need that in order to stay in compliance with change management. SCORCH Rocks!
 
 
 
 
 
 
 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Michael Mott

Sent: Tuesday, March 03, 2015 12:13 PM

To: mssms@lists.myitforum.com

Subject: RE: [mssms] Using SCCM 2012 for Third Party Licensing


 
AppClarity reclaims license with its own Reclaimer
 


From:
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Marcum, John

Sent: Tuesday, March 03, 2015 11:12 AM

To: mssms@lists.myitforum.com

Subject: RE: [mssms] Using SCCM 2012 for Third Party Licensing


 
I use BDNA Normalize for this. It works well. You can even reclaim licenses 
automatically etc if you have SCROCH.
 


From:
listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Nick sullivan

Sent: Tuesday, March 03, 2015 9:56 AM

To: mssms@lists.myitforum.com

Subject: [mssms] Using SCCM 2012 for Third Party Licensing


 

We are currently looking for the best third party licensing tool to integrate 
with SCCM.  Anyone ever used 1E to accomplish this? Or do you have any 
suggestions to accomplish this goal?

 

http://myitforum.com/myitforumwp/2012/12/19/sccm-integrated-sam-tools-appclarity-and-shopping-by-1e/

 

Thanks,

 

Systems Architect 

 





Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.
 
 







Legal Notice: This email is intended only for the person(s) to whom it is 
addressed. If you are not an intended recipient and have received this message 
in error, please notify the sender immediately by replying to this email or 
calling +44(0) 2083269015 (UK)
 or +1 866 592 4214 (USA). This email and any attachments may be privileged 
and/or confidential. The unauthorized use, disclosure, copying or printing of 
any information it contains is strictly prohibited. The opinions expressed in 
this email are those of the
 author and do not necessarily represent the views of 1E Ltd. Nothing in this 
email will operate to bind 1E to any order or other contract.
 







  

Re: [mssms] SCCM updates reporting

[ccollins9]

Thanks for that.  I got the "Last State Received" column to update with
today's date, but the update is still showing as required even tho it's
installed.  Very odd.

On Tue, Mar 3, 2015 at 1:29 PM, Sherry Kissinger 
wrote:

> It may be that the State Message from the client to the server was 'lost'
> somewhere on it's way from the client to the server; you may want to try
> the script in here -->
> http://blogs.msdn.com/b/steverac/archive/2011/01/07/sccm-state-messaging-in-depth.aspx
>
> for "RefreshServerComplianceState" -- to have those particular clients
> resend all of their updates' compliance.
>
>
>
>   On Tuesday, March 3, 2015 12:10 PM, ccollins9 
> wrote:
>
>
> I'm trying to track the compliance of a specific update and am using the
> report "Compliance 2 - Specific software update". There are several
> machines on the report that I know have the update and their "Last State
> Received" was 5 days ago.
>
> My question, does anyone know the client task that will update this report
> faster? So far, I've tried:
>
> Machine Policy Retrieval & Evaluation Cycle
> Software Updates Deployment Evaluation Cycle
> Software Updates Scan Cycle
>
>
>
>
>
>

RE: [mssms] RE: (OT) Vendor list for Ignite?

[Phil Wilcock]

Indeed! There’s a great blog from Mr Sandys here 
http://blog.configmgrftw.com/comparing-the-two-modes-of-microsoft-intune/  
which compares the two modes of Intune

What’s interesting about Intune is the rate at which features can be/are being 
added with it being a Cloud Based service..

Phil


Phil Wilcock
2Pint Software
http://2pintsoftware.com



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Heaton, Joseph@Wildlife
Sent: 03 March 2015 19:14
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

Looks like I really need to read up on Intune.  I thought it was just for 
mobile devices, but it seems I’m completely wrong on that.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of 
rodtr...@myitforum.com
Sent: Friday, February 27, 2015 4:40 PM
To: SMS
Subject: Re: [mssms] RE: (OT) Vendor list for Ignite?

I was there for the actual keynote. There's a bit of semantics going on. 
Workloads for the foreseeable future can mean a number of things, and there's 
been a LOT of activity in the background since that keynote.

The core message is that Microsoft intends to support customers - not products. 
Microsoft understands that customers are inherently slow to adopt new products 
that require massive migrations. There are customers still running CM 2007, 
even SMS 2003. So, when it's said that CM will be supported for the foreseeable 
future, it means as long as customers are still running it.

Focus is on Intune right now, and has been for a long while. CM may see some 
improvements, but only in areas where it makes sense to the Microsoft vision. 
Don't expect major new features. For example, one of the bigger features we'll 
see in the Fall for CM 2012 R2 is better integration with Intune. App and OS 
delivery are the only real pieces of CM that can't be Cloud-based right now, 
but that change is coming. Microsoft will attempt to  make Windows 10 the 
compelling reason for customers to move to Intune with changes in how apps and 
the OS delivers.



From: 'Bill Bernat'
Sent: ‎Friday‎, ‎February‎ ‎27‎, ‎2015 ‎2‎:‎09‎ ‎PM
To: SMS

It’s a fascinating topic. Here’s a recent take from Brad Anderson: 
http://redmondmag.com/articles/2015/02/23/system-center-configuration-manager-future.aspx.

-billb

From: Andreas Hammarskjöld 
mailto:jun...@2pintsoftware.com>>
Reply-To: "mssms@lists.myitforum.com" 
mailto:mssms@lists.myitforum.com>>
Date: Friday, February 27, 2015 at 10:58 AM
To: "mssms@lists.myitforum.com" 
mailto:mssms@lists.myitforum.com>>
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

But also remember what wise men say: “One does not just migrate 20 years of 
code in to Mordor… sorry the Cloud”

MS focuses primarily on the Cloud right now, but we all know were few people 
actually use it. Does Intune even cover 1% of the ConfigMgr install base? And I 
am not talking purchased or licensed, I am talking about deployed.

So MS faces the options to put in a few years to make Intune better with zero 
new stuff in ConfigMgr, which will make existing customer base angry, making 
future sells harder. Alternative is to do a split where some like 70% goes 
towards the Cloud and 30% to keep customer happy enough. But that won’t make 
the “market” people as they want a good story and strong figures on cloud and 
market share in that. The lack of ConfigMgr sessions at these events since 
there are very few new features, i.e. not so much dev time for our friend 
ConfigMgr.

In my previous role at my old company I was in exactly the same spot as MS. I 
had to develop new things for the cloud, and still maintain good ol’ “slow 
moving software”. It’s not an easy game. MS will make most mistake’s again with 
Intune as they did with ConfigMgr, because people are like that. Writing new 
code generates bugs, period, since developers are human. So it will be slower 
than they think, and when no new stuff comes to existing platform owners they 
will start not to renew Enterprise deals since there is a lack of roadmap, 
people will raise hell internally. And then God knows what will happen.

So basically, Microsoft has to develop a kick-ass Intune with the same feature 
set that it took them 20 years to put into ConfigMgr + more. And this they have 
to do in a very short timeframe before losing new or existing customers. I 
think I recall that ConfigMgr 2012 was 9 million lines of code and the test 
tools had 4.5 million, so to finish in 5 years time they have to check in more 
than 12000 perfect lines of code each day. You do the math! ☺

Anyhow, my 2 cents after having 2Pints! So conditions do apply, now off to 
pester mr Arwidmark and Mikael Nyström on Twitter!

//A

From: listsa

RE: [mssms] RE: (OT) Vendor list for Ignite?

[Rod Trent]

And, really it’s not about devices – or at least what we think computing 
devices are today. I see Intune taking on additional management capabilities in 
the near future to manage even IoT and wearables. At least, it has to.

 

It should actually be “mobility management”

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Michael Niehaus
Sent: Tuesday, March 3, 2015 2:22 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

 

Yes, “mobile device management” isn’t just for mobile devices :)

 

Windows Intune has its own agent, or with Windows 8.1 and above it can use 
OMA-DM protocols that are built into the OS.  With Windows 8.1, those are 
fairly limited, so the focus is more on BYOD scenarios (for desktops) and 
lightweight management (phones and desktops).  For Windows 10, there will be 
more capabilities added (explored in detail at Ignite).

 

Of course Intune also does iOS, Android, etc.

 

Thanks,

-Michael

 

From: listsad...@lists.myitforum.com   
[mailto:listsad...@lists.myitforum.com] On Behalf Of Heaton, Joseph@Wildlife
Sent: Tuesday, March 3, 2015 8:14 PM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

 

Looks like I really need to read up on Intune.  I thought it was just for 
mobile devices, but it seems I’m completely wrong on that.

 

From: listsad...@lists.myitforum.com   
[mailto:listsad...@lists.myitforum.com] On Behalf Of rodtr...@myitforum.com 
 
Sent: Friday, February 27, 2015 4:40 PM
To: SMS
Subject: Re: [mssms] RE: (OT) Vendor list for Ignite?

 

I was there for the actual keynote. There's a bit of semantics going on. 
Workloads for the foreseeable future can mean a number of things, and there's 
been a LOT of activity in the background since that keynote.

 

The core message is that Microsoft intends to support customers - not products. 
Microsoft understands that customers are inherently slow to adopt new products 
that require massive migrations. There are customers still running CM 2007, 
even SMS 2003. So, when it's said that CM will be supported for the foreseeable 
future, it means as long as customers are still running it.

 

Focus is on Intune right now, and has been for a long while. CM may see some 
improvements, but only in areas where it makes sense to the Microsoft vision. 
Don't expect major new features. For example, one of the bigger features we'll 
see in the Fall for CM 2012 R2 is better integration with Intune. App and OS 
delivery are the only real pieces of CM that can't be Cloud-based right now, 
but that change is coming. Microsoft will attempt to  make Windows 10 the 
compelling reason for customers to move to Intune with changes in how apps and 
the OS delivers. 

 

 

 

From: 'Bill Bernat'  
Sent: ‎Friday‎, ‎February‎ ‎27‎, ‎2015 ‎2‎:‎09‎ ‎PM
To: SMS  

 

It’s a fascinating topic. Here’s a recent take from Brad Anderson: 
http://redmondmag.com/articles/2015/02/23/system-center-configuration-manager-future.aspx.

 

-billb

 

From: Andreas Hammarskjöld mailto:jun...@2pintsoftware.com> >
Reply-To: "mssms@lists.myitforum.com  " 
mailto:mssms@lists.myitforum.com> >
Date: Friday, February 27, 2015 at 10:58 AM
To: "mssms@lists.myitforum.com  " 
mailto:mssms@lists.myitforum.com> >
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

 

But also remember what wise men say: “One does not just migrate 20 years of 
code in to Mordor… sorry the Cloud”

 

MS focuses primarily on the Cloud right now, but we all know were few people 
actually use it. Does Intune even cover 1% of the ConfigMgr install base? And I 
am not talking purchased or licensed, I am talking about deployed. 

 

So MS faces the options to put in a few years to make Intune better with zero 
new stuff in ConfigMgr, which will make existing customer base angry, making 
future sells harder. Alternative is to do a split where some like 70% goes 
towards the Cloud and 30% to keep customer happy enough. But that won’t make 
the “market” people as they want a good story and strong figures on cloud and 
market share in that. The lack of ConfigMgr sessions at these events since 
there are very few new features, i.e. not so much dev time for our friend 
ConfigMgr.

 

In my previous role at my old company I was in exactly the same spot as MS. I 
had to develop new things for the cloud, and still maintain good ol’ “slow 
moving software”. It’s not an easy game. MS will make most mistake’s again with 
Intune as they did with ConfigMgr, because people are like that. Writing new 
code generates bugs, period, since developers are human. So it will be slower 
than they think, and when no new stuff comes to existing platform owners they 
will s

[mssms] RE: Software Center Popup message

[Heaton, Joseph@Wildlife]

So, your message comes up at 23 hours before reboot, with the Hide disabled?  
That setting can be modified within Client Settings.  The bottom number should 
be a lower number of minutes than 23 hours...

[cid:image002.png@01D055A5.C2B34E00]

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marilyn Muhammad-Lawal
Sent: Monday, March 02, 2015 2:52 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Software Center Popup message

Is there a way to hide this popup message or close it in SCCM 2012 maintenance 
options? Once it has reached this stage the only enabled option is Restart.

[cid:image001.png@01D054FD.5437DA70]
Marilyn Muhammad-Lawal
Systems Analysts Team Lead
Information Services
5401 N. Central Exp. Suite 280 Dallas, TX 75205
Email: mmuham...@associaonline.com
Service Desk: 1-888-206-0368 or #611
Direct: 972-661-4474
Notice: This e-mail message is for the sole use of the intended recipient(s) 
and may contain confidential and privileged information. Any unauthorized 
review, use, disclosure or distribution is prohibited. If you are not the 
intended recipient, please contact the sender by reply e-mail and destroy all 
copies of the original message. Please virus check all attachments to prevent 
widespread contamination and corruption of files and operating systems. The 
unauthorized access, use, disclosure, or distribution of this email may 
constitute a violation of the Federal Electronic Communications Privacy Act of 
1986 and similar state laws.

RE: [mssms] RE: (OT) Vendor list for Ignite?

[Michael Niehaus]

Yes, “mobile device management” isn’t just for mobile devices ☺

Windows Intune has its own agent, or with Windows 8.1 and above it can use 
OMA-DM protocols that are built into the OS.  With Windows 8.1, those are 
fairly limited, so the focus is more on BYOD scenarios (for desktops) and 
lightweight management (phones and desktops).  For Windows 10, there will be 
more capabilities added (explored in detail at Ignite).

Of course Intune also does iOS, Android, etc.

Thanks,
-Michael

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Heaton, Joseph@Wildlife
Sent: Tuesday, March 3, 2015 8:14 PM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

Looks like I really need to read up on Intune.  I thought it was just for 
mobile devices, but it seems I’m completely wrong on that.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of 
rodtr...@myitforum.com
Sent: Friday, February 27, 2015 4:40 PM
To: SMS
Subject: Re: [mssms] RE: (OT) Vendor list for Ignite?

I was there for the actual keynote. There's a bit of semantics going on. 
Workloads for the foreseeable future can mean a number of things, and there's 
been a LOT of activity in the background since that keynote.

The core message is that Microsoft intends to support customers - not products. 
Microsoft understands that customers are inherently slow to adopt new products 
that require massive migrations. There are customers still running CM 2007, 
even SMS 2003. So, when it's said that CM will be supported for the foreseeable 
future, it means as long as customers are still running it.

Focus is on Intune right now, and has been for a long while. CM may see some 
improvements, but only in areas where it makes sense to the Microsoft vision. 
Don't expect major new features. For example, one of the bigger features we'll 
see in the Fall for CM 2012 R2 is better integration with Intune. App and OS 
delivery are the only real pieces of CM that can't be Cloud-based right now, 
but that change is coming. Microsoft will attempt to  make Windows 10 the 
compelling reason for customers to move to Intune with changes in how apps and 
the OS delivers.



From: 'Bill Bernat'
Sent: ‎Friday‎, ‎February‎ ‎27‎, ‎2015 ‎2‎:‎09‎ ‎PM
To: SMS

It’s a fascinating topic. Here’s a recent take from Brad Anderson: 
http://redmondmag.com/articles/2015/02/23/system-center-configuration-manager-future.aspx.

-billb

From: Andreas Hammarskjöld 
mailto:jun...@2pintsoftware.com>>
Reply-To: "mssms@lists.myitforum.com" 
mailto:mssms@lists.myitforum.com>>
Date: Friday, February 27, 2015 at 10:58 AM
To: "mssms@lists.myitforum.com" 
mailto:mssms@lists.myitforum.com>>
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

But also remember what wise men say: “One does not just migrate 20 years of 
code in to Mordor… sorry the Cloud”

MS focuses primarily on the Cloud right now, but we all know were few people 
actually use it. Does Intune even cover 1% of the ConfigMgr install base? And I 
am not talking purchased or licensed, I am talking about deployed.

So MS faces the options to put in a few years to make Intune better with zero 
new stuff in ConfigMgr, which will make existing customer base angry, making 
future sells harder. Alternative is to do a split where some like 70% goes 
towards the Cloud and 30% to keep customer happy enough. But that won’t make 
the “market” people as they want a good story and strong figures on cloud and 
market share in that. The lack of ConfigMgr sessions at these events since 
there are very few new features, i.e. not so much dev time for our friend 
ConfigMgr.

In my previous role at my old company I was in exactly the same spot as MS. I 
had to develop new things for the cloud, and still maintain good ol’ “slow 
moving software”. It’s not an easy game. MS will make most mistake’s again with 
Intune as they did with ConfigMgr, because people are like that. Writing new 
code generates bugs, period, since developers are human. So it will be slower 
than they think, and when no new stuff comes to existing platform owners they 
will start not to renew Enterprise deals since there is a lack of roadmap, 
people will raise hell internally. And then God knows what will happen.

So basically, Microsoft has to develop a kick-ass Intune with the same feature 
set that it took them 20 years to put into ConfigMgr + more. And this they have 
to do in a very short timeframe before losing new or existing customers. I 
think I recall that ConfigMgr 2012 was 9 million lines of code and the test 
tools had 4.5 million, so to finish in 5 years time they have to check in more 
than 12000 perfect lines of code each day. You do the math! ☺

Anyhow, my 2 cents after

RE: [mssms] RE: (OT) Vendor list for Ignite?

[Heaton, Joseph@Wildlife]

Looks like I really need to read up on Intune.  I thought it was just for 
mobile devices, but it seems I’m completely wrong on that.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of rodtr...@myitforum.com
Sent: Friday, February 27, 2015 4:40 PM
To: SMS
Subject: Re: [mssms] RE: (OT) Vendor list for Ignite?

I was there for the actual keynote. There's a bit of semantics going on. 
Workloads for the foreseeable future can mean a number of things, and there's 
been a LOT of activity in the background since that keynote.

The core message is that Microsoft intends to support customers - not products. 
Microsoft understands that customers are inherently slow to adopt new products 
that require massive migrations. There are customers still running CM 2007, 
even SMS 2003. So, when it's said that CM will be supported for the foreseeable 
future, it means as long as customers are still running it.

Focus is on Intune right now, and has been for a long while. CM may see some 
improvements, but only in areas where it makes sense to the Microsoft vision. 
Don't expect major new features. For example, one of the bigger features we'll 
see in the Fall for CM 2012 R2 is better integration with Intune. App and OS 
delivery are the only real pieces of CM that can't be Cloud-based right now, 
but that change is coming. Microsoft will attempt to  make Windows 10 the 
compelling reason for customers to move to Intune with changes in how apps and 
the OS delivers.



From: 'Bill Bernat'
Sent: ‎Friday‎, ‎February‎ ‎27‎, ‎2015 ‎2‎:‎09‎ ‎PM
To: SMS

It’s a fascinating topic. Here’s a recent take from Brad Anderson: 
http://redmondmag.com/articles/2015/02/23/system-center-configuration-manager-future.aspx.

-billb

From: Andreas Hammarskjöld 
mailto:jun...@2pintsoftware.com>>
Reply-To: "mssms@lists.myitforum.com" 
mailto:mssms@lists.myitforum.com>>
Date: Friday, February 27, 2015 at 10:58 AM
To: "mssms@lists.myitforum.com" 
mailto:mssms@lists.myitforum.com>>
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

But also remember what wise men say: “One does not just migrate 20 years of 
code in to Mordor… sorry the Cloud”

MS focuses primarily on the Cloud right now, but we all know were few people 
actually use it. Does Intune even cover 1% of the ConfigMgr install base? And I 
am not talking purchased or licensed, I am talking about deployed.

So MS faces the options to put in a few years to make Intune better with zero 
new stuff in ConfigMgr, which will make existing customer base angry, making 
future sells harder. Alternative is to do a split where some like 70% goes 
towards the Cloud and 30% to keep customer happy enough. But that won’t make 
the “market” people as they want a good story and strong figures on cloud and 
market share in that. The lack of ConfigMgr sessions at these events since 
there are very few new features, i.e. not so much dev time for our friend 
ConfigMgr.

In my previous role at my old company I was in exactly the same spot as MS. I 
had to develop new things for the cloud, and still maintain good ol’ “slow 
moving software”. It’s not an easy game. MS will make most mistake’s again with 
Intune as they did with ConfigMgr, because people are like that. Writing new 
code generates bugs, period, since developers are human. So it will be slower 
than they think, and when no new stuff comes to existing platform owners they 
will start not to renew Enterprise deals since there is a lack of roadmap, 
people will raise hell internally. And then God knows what will happen.

So basically, Microsoft has to develop a kick-ass Intune with the same feature 
set that it took them 20 years to put into ConfigMgr + more. And this they have 
to do in a very short timeframe before losing new or existing customers. I 
think I recall that ConfigMgr 2012 was 9 million lines of code and the test 
tools had 4.5 million, so to finish in 5 years time they have to check in more 
than 12000 perfect lines of code each day. You do the math! ☺

Anyhow, my 2 cents after having 2Pints! So conditions do apply, now off to 
pester mr Arwidmark and Mikael Nyström on Twitter!

//A

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Ed Aldrich
Sent: den 27 februari 2015 19:28
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: (OT) Vendor list for Ignite?

“I'm trying to interpret these marketing and materials changes to understand 
what MS will be pushing in the years to come. “

As far as us in the CfgMgr world are concerned, rest assured that the future 
holds cloud enabled management... Current initiatives around Intune show that 
clearly... while it still has a way to go before its prime-time ready, it is 
the future toss in a more homogen

Re: [mssms] Old Subject: Boundary Subnets

[David Jones]

Thanks Jason. Something click with what you wrote. I inherited an SCCM
system. It works great. I have only found a few anomalies. Some were in
boundaries. If I want to check the boundaries against the DHCP servers for
scope and subnet mask, how do find out what subnet mask was used originally
to create the subnet boundary in SCCM just to confirm accuracy exists?

Dave



On Thu, Feb 26, 2015 at 11:39 AM, Jason Sandys  wrote:

>  First, to summarize the example:
>
>
>
> IP Subnet boundary: 10.1.0.0
>
> Clients (assuming /24 subnet mask): 10.1.0.100/24, 10.1.1.100/24,
> 10.1.2.100/24, and 10.1.3.100/24
>
> Clients subnet IDs: 10.1.0.0, 10.1.1.0, 10.1.2.0, 10.1.3.0
>
>
>
> Thus, only the clients in the first subnet would match boundary wise. If
> however you clients were all /22 for their subnet mask, this would work
> fine. How many folks use a /22 though. As Todd pointed out in his reply
> also that if your clients are truly using /22 as their subnet mask, then
> this is **not** a supernet. Supernets are aggregations of multiple
> subnets at a network level but this is not an aggregation, it’s the actual
> subnet.
>
>
>
> The true supernet issue also comes in during discovery because supernets
> are often used in AD. AD discovery has no idea what subnet mask a client
> uses (it can’t) so it uses subnet information in AD to determine this and
> thus the subnet ID. So if you’ve used a supernet in your AD sites, then AD
> Discovery will calculate the incorrect subnet ID for the client causing it
> to not be assigned to the proper site.
>
>
>
> Ultimately, it’s not that all of this doesn’t or can’t work. It’s that
> most folks don’t understand (or truly have the need to understand) the
> details of what’s going on and by simply using IP Address ranges, you don’t
> need to either. They are completely straight-forward and simple. The only
> caveat is for orgs with lots of boundaries (think thousands) then there can
> be perf implication.
>
>
>
> J
>
>
>
> *From:* listsad...@lists.myitforum.com [mailto:
> listsad...@lists.myitforum.com] *On Behalf Of *Miller, Todd
> *Sent:* Thursday, February 26, 2015 9:00 AM
> *To:* mssms@lists.myitforum.com
> *Subject:* RE: [mssms] Old Subject: Boundary Subnets
>
>
>
>
>
>
>
> I think the only thing here is confusion over what a supernet is.
>
>
>
> Your example is correct.  You have a subnet that has a mask of
> 255.255.252.0 and covers a range from 10.1.1.0 to 10.1.3.255 with the
> gateway at 10.1.1.0.  That is a subnet, not a supernet.
>
>
>
> An example of a supernet might be that you have two subnets 10.1.1.0/22
> and 10.1.4.0/22 and you think “why not just specify 10.1.1.0/21 in the
> SCCM boundary instead and cover then both?”  That would be where you would
> run into trouble.  You would need to specify both subnets 10.1.1.0/22 AND
> 10.1.4.0/22 and not the “supernet” of 10.1.1.0/21
>
>
>
> Or maybe you have 256 subnets 10.1.0.0, 10.1.1.0, 10.1.2.0 …. 10.1.255.0
> and you think “Hey, I’ll just specify the boundary as 10.1.0.0/16 and
> cover all my addresses with one line.  You can’t do that.  If you did this,
> the clients in 10.1.0.0 would work since their subnet is listed in SCCM,
> and the other 254 subnets would not since their subnets are not listed.
> You could however specify a single address RANGE of 10.1.0.0-10.1.255.255
> and be done.
>
>
>
> So, it is easier to maintain a single range rather than define 256 subnets
> (powershell not included.)  Also, when the computer tries to check its
> boundary, if you have 256 ranges, it needs to look through more data to
> figure out if it is in scope.  If you had a single range defined, it would
> only look at one piece of data.  I think these arguments are less important
> now with easy to create boundaries and fast AD clusters.
>
>
>
> Another reason that you might avoid subnets as boundaries is that it is
> not always the case that the computer’s IP address is configured
> correctly.  Someone might misconfigure the IP information on a client and
> then the subnet might be computed incorrectly, although hopefully that is
> unlikely if you are using DHCP.  The computer’s subnet is computed by the
> client so if the IP information is incorrect, the client might compute its
> subnet incorrectly.
>
>
>
> (I am about 90% confident of this answer – I am not a network engineer)
>
>
>
>
>
> *From:* listsad...@lists.myitforum.com [
> mailto:listsad...@lists.myitforum.com ] *On
> Behalf Of *David Jones
> *Sent:* Thursday, February 26, 2015 7:47 AM
> *To:* mssms@lists.myitforum.com
> *Subject:* [mssms] Old Subject: Boundary Subnets
>
>
>
> I've spent the last few days reading as much as I could find on the old
> fun topic of boundary subnets vs. ranges. It get both arguments. Just
> reading them would lead one to believe that "best practice" on this
> topic is based on ones interpretation of the many articles. Such as, If the
> subnet is a /24, then entering it as a ‘subnet’ is best. If it is a
> supernet of some kind, then enteri

[mssms] RE: What do People do about Update Restart Notifications

[Heaton, Joseph@Wildlife]

I’ve been thinking of changing my Windows updates to go through the Powershell 
App Deployment Toolkit.  Lots of user-friendly notification with that one.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Matt Browne
Sent: Monday, March 02, 2015 9:00 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: What do People do about Update Restart Notifications


1.   I’ve looked at doing this, but the issue I have is that this changes 
the setting for all notifications.  We might end up doing it though.



2.   I would have mutiny if I did that X)





From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Brucker, Chris
Sent: 02 March 2015 16:45
To: mssms@lists.myitforum.com
Subject: [mssms] RE: What do People do about Update Restart Notifications

I have done two things to try to combat this:

1.   Change the delay on the balloon notification in the taskbar:

a.   Credit to Kenny Buntinx for this; 
http://scug.be/sccm/2015/01/20/windows-7-configmgr-2012-balloon-tips-setting-it-more-then-5-sec-to-display/

2.   Change the final notification to 2 hours, this isn’t the best option, 
but it keeps our associates somewhat happy. (I assume you know how to do this, 
if not let me know and I will be happy to provide details).

In the future, I would love to implement something like this to control ALL 
restarts. Credit to Kent Agerlund and CoreTech for this shutdown tool: 
http://blog.coretech.dk/kea/new-version-of-the-coretech-shutdown-tool/.

Also, I found a couple of threads on connect, please vote them up so we can get 
this fixed in a CU or future version.
(Allow for additional reminders) 
https://connect.microsoft.com/ConfigurationManagervnext/Feedback/Details/1058617
(Ability to Snooze Restarts) 
https://connect.microsoft.com/ConfigurationManagervnext/Feedback/Details/1150035

Thanks,
Chris Brucker
First Financial Bank | IT - Desktop Engineer
Suite 800 | 225 Pictoria Dr. | Cincinnati, OH 45246
513-551-1673

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Matt Browne
Sent: Monday, March 2, 2015 11:26 AM
To: mssms@lists.myitforum.com
Subject: [mssms] What do People do about Update Restart Notifications


I’m intrigued to know what people do about the restart notifications on the 
users machines.

We are getting complaints because the users aren’t getting notifications of 
restarts until the last 15min warning, which they can’t close.

We give the users 6 hours to restart the machine, but the problem is that the 
notification of the restart appears for 5 seconds and then it disappears (ie 
easy to miss).  The green restart notification appears in the notification area 
on the taskbar (Win7) but the user won’t see this unless they go looking for it.

So, how does everyone else deal with this? Am I missing something?


Information in this message is sent in confidence and is intended only for the 
use of the individual or entity to whom it is addressed. If you are not the 
intended recipient, any use, distribution or copying of the information is 
strictly forbidden. Please notify the sender immediately by return email or 
telephone 01823 721400. If you received this email in error please delete it 
and any copies of it from your system.

Viridor Waste Management Limited
Registered Office: Peninsula House, Rydon Lane, Exeter EX2 7HR Registered in 
England No. 575069



The information contained in this message from First Financial Bancorp or its 
affiliates and any attachments are confidential. It is not intended for 
transmission to, or receipt by, anyone other than the addressee(s), or a person 
authorized to deliver it to the named addressee(s). If you have received this 
message in error, you are prohibited from copying, distributing or using the 
information. Please contact the sender immediately by return email and delete 
the original message.



Information in this message is sent in confidence and is intended only for the 
use of the individual or entity to whom it is addressed. If you are not the 
intended recipient, any use, distribution or copying of the information is 
strictly forbidden. Please notify the sender immediately by return email or 
telephone 01823 721400. If you received this email in error please delete it 
and any copies of it from your system.

Viridor Waste Management Limited
Registered Office: Peninsula House, Rydon Lane, Exeter EX2 7HR Registered in 
England No. 575069

RE: [mssms] SCUP's

[Barnes,Chris]

+1 on this. I often times will get the e-mail that patches are available before 
I even know that an app needs to be patched.


Chris Barnes
Senior Technical Specialist
Penske Automotive Group
(248) 648-2528 Direct
(248) 767-4415 Mobile

[cid:image001.jpg@01D055B6.B0091B20]

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Patch My PC Support
Sent: Tuesday, March 3, 2015 1:27 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] SCUP's

We also have a full list of applications that we support in our SCUP catalog 
here: https://patchmypc.net/supported-products-scup-catalog

We also generally release updates the same day or within 24 hours of their 
release. Full history available here: 
https://patchmypc.net/category/SCUPCatalogUpdates/feed

David, please feel free to reach out to us directly: 
https://patchmypc.net/contact-us if you have any questions!

Thanks,

Marie
Patch My PC Support
Support Forum: https://patchmypc.net/forum
Support Email: supp...@patchmypc.net

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marcum, John
Sent: Tuesday, March 3, 2015 11:21 AM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] SCUP's

+1

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Steve Whitcher
Sent: Tuesday, March 03, 2015 12:19 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] SCUP's

After it was recommended on this mailing list several months ago, we subscribed 
to the update catalog from patchmypc.net.  It includes 
updates for  java, adobe, firefox, chrome, etc.  I've been very happy with it, 
and the patchmypc catalog is very inexpensive compared to similar update 
catalogs from other companies.

Steve

On Tue, Mar 3, 2015 at 12:11 PM, David McSpadden 
mailto:dav...@imcu.com>> wrote:
How do I find SCUP’s for Java?
Or even other software?

This e-mail and any files transmitted with it are property of Indiana Members 
Credit Union, are confidential, and are intended solely for the use of the 
individual or entity to whom this e-mail is addressed. If you are not one of 
the named recipient(s) or otherwise have reason to believe that you have 
received this message in error, please notify the sender and delete this 
message immediately from your computer. Any other use, retention, 
dissemination, forwarding, printing, or copying of this email is strictly 
prohibited.


Please consider the environment before printing this email.





Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.




Penske Automotive Group and its affiliates will never sell or rent your email 
address in violation of applicable law. This email and any files transmitted 
with it are confidential and intended solely for use of the individual or 
entity to whom they are addressed. Please delete all copies if you are not the 
intended recipient.

Re: [mssms] SCCM updates reporting

[Sherry Kissinger]

It may be that the State Message from the client to the server was 'lost' 
somewhere on it's way from the client to the server; you may want to try the 
script in here --> 
http://blogs.msdn.com/b/steverac/archive/2011/01/07/sccm-state-messaging-in-depth.aspx

for "RefreshServerComplianceState" -- to have those particular clients resend 
all of their updates' compliance.   
 


On Tuesday, March 3, 2015 12:10 PM, ccollins9  wrote:
  


I'm trying to track the compliance of a specific update and am using the report 
"Compliance 2 - Specific software update". There are several machines on the 
report that I know have the update and their "Last State Received" was 5 days 
ago.

My question, does anyone know the client task that will update this report 
faster? So far, I've tried:

Machine Policy Retrieval & Evaluation Cycle
Software Updates Deployment Evaluation Cycle
Software Updates Scan Cycle

RE: [mssms] Using SCCM 2012 for Third Party Licensing

[Michael Mott]

It can, open API for steps 1 and 4 to accomplish that.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marcum, John
Sent: Tuesday, March 03, 2015 1:21 PM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] Using SCCM 2012 for Third Party Licensing

Does it

1. Open a ticket in SCSM prior to do so?
2. Allow the user to opt out of the reclamation?
3. If the user opts out allow an override by a manager?
4. Close the SCSM ticket upon completion of the removal?

I need that in order to stay in compliance with change management. SCORCH Rocks!







From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Michael Mott
Sent: Tuesday, March 03, 2015 12:13 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Using SCCM 2012 for Third Party Licensing

AppClarity reclaims license with its own Reclaimer

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marcum, John
Sent: Tuesday, March 03, 2015 11:12 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Using SCCM 2012 for Third Party Licensing

I use BDNA Normalize for this. It works well. You can even reclaim licenses 
automatically etc if you have SCROCH.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Nick sullivan
Sent: Tuesday, March 03, 2015 9:56 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Using SCCM 2012 for Third Party Licensing

We are currently looking for the best third party licensing tool to integrate 
with SCCM.  Anyone ever used 1E to accomplish this? Or do you have any 
suggestions to accomplish this goal?

http://myitforum.com/myitforumwp/2012/12/19/sccm-integrated-sam-tools-appclarity-and-shopping-by-1e/

Thanks,

Systems Architect



Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.





Legal Notice: This email is intended only for the person(s) to whom it is 
addressed. If you are not an intended recipient and have received this message 
in error, please notify the sender immediately by replying to this email or 
calling +44(0) 2083269015 (UK) or +1 866 592 4214 (USA). This email and any 
attachments may be privileged and/or confidential. The unauthorized use, 
disclosure, copying or printing of any information it contains is strictly 
prohibited. The opinions expressed in this email are those of the author and do 
not necessarily represent the views of 1E Ltd. Nothing in this email will 
operate to bind 1E to any order or other contract.






Legal Notice: This email is intended only for the person(s) to whom it is 
addressed. If you are not an intended recipient and have received this message 
in error, please notify the sender immediately by replying to this email or 
calling +44(0) 2083269015 (UK) or +1 866 592 4214 (USA). This email and any 
attachments may be privileged and/or confidential. The unauthorized use, 
disclosure, copying or printing of any information it contains is strictly 
prohibited. The opinions expressed in this email are those of the author and do 
not necessarily represent the views of 1E Ltd. Nothing in this email will 
operate to bind 1E to any order or other contract.

[mssms] RE: flexera shopping store

[Thomas Gonzalez]

Thanks John, I'm trying to convince mgt on looking at another vendor, but 
things here move like molasses. I'll give the disabling option a try. 
Appreciate it.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marcum, John
Sent: Tuesday, March 03, 2015 12:23 PM
To: 'mssms@lists.myitforum.com'
Subject: [mssms] RE: flexera shopping store

The easiest way to fix this is to uninstall Flexera and install any other 
product. :-)

That is the sloppiest code I've ever used in any production environment in my 
close to 20 years in IT.

You can avoid this error by disabling the content validation feature though. Of 
course you likely want to use that feature and it did at one time work but 
since Flexera bought them who knows if it does or not.





From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Thomas Gonzalez
Sent: Tuesday, March 03, 2015 12:20 PM
To: 'mssms@lists.myitforum.com'
Subject: [mssms] flexera shopping store

Anyone using the shopping store from Flexera? I'm having this weird error 
appear on two packages, and they once worked but are now producing this error:


[cid:image001.png@01D055AD.841387C0]


I have the package on the DP of SCCM and have deployed it to a workstation and 
there are no errors. But when adding the package from the store, I get this 
errorfrustrating and the knowledge base site for flexera is horrible as 
well as the documentation, not very much info. Don't want to open a case unless 
I have to...



Thanks,

[new title]




Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.

RE: [mssms] SCUP's

[Patch My PC Support]

We also have a full list of applications that we support in our SCUP catalog 
here: https://patchmypc.net/supported-products-scup-catalog

We also generally release updates the same day or within 24 hours of their 
release. Full history available here: 
https://patchmypc.net/category/SCUPCatalogUpdates/feed

David, please feel free to reach out to us directly: 
https://patchmypc.net/contact-us if you have any questions!

Thanks,

Marie
Patch My PC Support
Support Forum: https://patchmypc.net/forum
Support Email: supp...@patchmypc.net

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marcum, John
Sent: Tuesday, March 3, 2015 11:21 AM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] SCUP's

+1

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Steve Whitcher
Sent: Tuesday, March 03, 2015 12:19 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] SCUP's

After it was recommended on this mailing list several months ago, we subscribed 
to the update catalog from patchmypc.net.  It includes 
updates for  java, adobe, firefox, chrome, etc.  I've been very happy with it, 
and the patchmypc catalog is very inexpensive compared to similar update 
catalogs from other companies.

Steve

On Tue, Mar 3, 2015 at 12:11 PM, David McSpadden 
mailto:dav...@imcu.com>> wrote:
How do I find SCUP’s for Java?
Or even other software?

This e-mail and any files transmitted with it are property of Indiana Members 
Credit Union, are confidential, and are intended solely for the use of the 
individual or entity to whom this e-mail is addressed. If you are not one of 
the named recipient(s) or otherwise have reason to believe that you have 
received this message in error, please notify the sender and delete this 
message immediately from your computer. Any other use, retention, 
dissemination, forwarding, printing, or copying of this email is strictly 
prohibited.


Please consider the environment before printing this email.





Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.

[mssms] RE: flexera shopping store

[Marcum, John]

The easiest way to fix this is to uninstall Flexera and install any other 
product. :-)

That is the sloppiest code I've ever used in any production environment in my 
close to 20 years in IT.

You can avoid this error by disabling the content validation feature though. Of 
course you likely want to use that feature and it did at one time work but 
since Flexera bought them who knows if it does or not.





From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Thomas Gonzalez
Sent: Tuesday, March 03, 2015 12:20 PM
To: 'mssms@lists.myitforum.com'
Subject: [mssms] flexera shopping store

Anyone using the shopping store from Flexera? I'm having this weird error 
appear on two packages, and they once worked but are now producing this error:


[cid:image001.png@01D055AC.C6C9BC70]


I have the package on the DP of SCCM and have deployed it to a workstation and 
there are no errors. But when adding the package from the store, I get this 
errorfrustrating and the knowledge base site for flexera is horrible as 
well as the documentation, not very much info. Don't want to open a case unless 
I have to...



Thanks,

[new title]




Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.

RE: [mssms] SCUP's

[Marcum, John]

+1

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Steve Whitcher
Sent: Tuesday, March 03, 2015 12:19 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] SCUP's

After it was recommended on this mailing list several months ago, we subscribed 
to the update catalog from patchmypc.net.  It includes 
updates for  java, adobe, firefox, chrome, etc.  I've been very happy with it, 
and the patchmypc catalog is very inexpensive compared to similar update 
catalogs from other companies.

Steve

On Tue, Mar 3, 2015 at 12:11 PM, David McSpadden 
mailto:dav...@imcu.com>> wrote:
How do I find SCUP’s for Java?
Or even other software?

This e-mail and any files transmitted with it are property of Indiana Members 
Credit Union, are confidential, and are intended solely for the use of the 
individual or entity to whom this e-mail is addressed. If you are not one of 
the named recipient(s) or otherwise have reason to believe that you have 
received this message in error, please notify the sender and delete this 
message immediately from your computer. Any other use, retention, 
dissemination, forwarding, printing, or copying of this email is strictly 
prohibited.


Please consider the environment before printing this email.





Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.

RE: [mssms] Using SCCM 2012 for Third Party Licensing

[Marcum, John]

Does it

1. Open a ticket in SCSM prior to do so?
2. Allow the user to opt out of the reclamation?
3. If the user opts out allow an override by a manager?
4. Close the SCSM ticket upon completion of the removal?

I need that in order to stay in compliance with change management. SCORCH Rocks!







From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Michael Mott
Sent: Tuesday, March 03, 2015 12:13 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Using SCCM 2012 for Third Party Licensing

AppClarity reclaims license with its own Reclaimer

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marcum, John
Sent: Tuesday, March 03, 2015 11:12 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Using SCCM 2012 for Third Party Licensing

I use BDNA Normalize for this. It works well. You can even reclaim licenses 
automatically etc if you have SCROCH.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Nick sullivan
Sent: Tuesday, March 03, 2015 9:56 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Using SCCM 2012 for Third Party Licensing

We are currently looking for the best third party licensing tool to integrate 
with SCCM.  Anyone ever used 1E to accomplish this? Or do you have any 
suggestions to accomplish this goal?

http://myitforum.com/myitforumwp/2012/12/19/sccm-integrated-sam-tools-appclarity-and-shopping-by-1e/

Thanks,

Systems Architect



Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.





Legal Notice: This email is intended only for the person(s) to whom it is 
addressed. If you are not an intended recipient and have received this message 
in error, please notify the sender immediately by replying to this email or 
calling +44(0) 2083269015 (UK) or +1 866 592 4214 (USA). This email and any 
attachments may be privileged and/or confidential. The unauthorized use, 
disclosure, copying or printing of any information it contains is strictly 
prohibited. The opinions expressed in this email are those of the author and do 
not necessarily represent the views of 1E Ltd. Nothing in this email will 
operate to bind 1E to any order or other contract.

[mssms] flexera shopping store

[Thomas Gonzalez]

Anyone using the shopping store from Flexera? I'm having this weird error 
appear on two packages, and they once worked but are now producing this error:


[cid:image001.png@01D055AC.53668D30]


I have the package on the DP of SCCM and have deployed it to a workstation and 
there are no errors. But when adding the package from the store, I get this 
errorfrustrating and the knowledge base site for flexera is horrible as 
well as the documentation, not very much info. Don't want to open a case unless 
I have to...



Thanks,

[new title]

Re: [mssms] SCUP's

[Steve Whitcher]

After it was recommended on this mailing list several months ago, we
subscribed to the update catalog from patchmypc.net.  It includes updates
for  java, adobe, firefox, chrome, etc.  I've been very happy with it, and
the patchmypc catalog is very inexpensive compared to similar update
catalogs from other companies.

Steve

On Tue, Mar 3, 2015 at 12:11 PM, David McSpadden  wrote:

>  How do I find SCUP’s for Java?
> Or even other software?
>
> This e-mail and any files transmitted with it are property of Indiana
> Members Credit Union, are confidential, and are intended solely for the use
> of the individual or entity to whom this e-mail is addressed. If you are
> not one of the named recipient(s) or otherwise have reason to believe that
> you have received this message in error, please notify the sender and
> delete this message immediately from your computer. Any other use,
> retention, dissemination, forwarding, printing, or copying of this email is
> strictly prohibited.
>
> Please consider the environment before printing this email.
>
>

[mssms] RE: SCUP's

[Linkey, Mike]

We us patch my pc  https://patchmypc.net/  Works well for us.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of David McSpadden
Sent: Tuesday, March 3, 2015 12:11 PM
To: mssms@lists.myitforum.com
Subject: [mssms] SCUP's

How do I find SCUP's for Java?
Or even other software?

This e-mail and any files transmitted with it are property of Indiana Members 
Credit Union, are confidential, and are intended solely for the use of the 
individual or entity to whom this e-mail is addressed. If you are not one of 
the named recipient(s) or otherwise have reason to believe that you have 
received this message in error, please notify the sender and delete this 
message immediately from your computer. Any other use, retention, 
dissemination, forwarding, printing, or copying of this email is strictly 
prohibited.


Please consider the environment before printing this email.

RE: [mssms] Using SCCM 2012 for Third Party Licensing

[Michael Mott]

AppClarity reclaims license with its own Reclaimer

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marcum, John
Sent: Tuesday, March 03, 2015 11:12 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Using SCCM 2012 for Third Party Licensing

I use BDNA Normalize for this. It works well. You can even reclaim licenses 
automatically etc if you have SCROCH.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Nick sullivan
Sent: Tuesday, March 03, 2015 9:56 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Using SCCM 2012 for Third Party Licensing

We are currently looking for the best third party licensing tool to integrate 
with SCCM.  Anyone ever used 1E to accomplish this? Or do you have any 
suggestions to accomplish this goal?

http://myitforum.com/myitforumwp/2012/12/19/sccm-integrated-sam-tools-appclarity-and-shopping-by-1e/

Thanks,

Systems Architect



Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.





Legal Notice: This email is intended only for the person(s) to whom it is 
addressed. If you are not an intended recipient and have received this message 
in error, please notify the sender immediately by replying to this email or 
calling +44(0) 2083269015 (UK) or +1 866 592 4214 (USA). This email and any 
attachments may be privileged and/or confidential. The unauthorized use, 
disclosure, copying or printing of any information it contains is strictly 
prohibited. The opinions expressed in this email are those of the author and do 
not necessarily represent the views of 1E Ltd. Nothing in this email will 
operate to bind 1E to any order or other contract.

[mssms] SCUP's

[David McSpadden]

How do I find SCUP's for Java?
Or even other software?
This e-mail and any files transmitted with it are property of Indiana Members 
Credit Union, are confidential, and are intended solely for the use of the 
individual or entity to whom this e-mail is addressed. If you are not one of 
the named recipient(s) or otherwise have reason to believe that you have 
received this message in error, please notify the sender and delete this 
message immediately from your computer. Any other use, retention, 
dissemination, forwarding, printing, or copying of this email is strictly 
prohibited.

Please consider the environment before printing this email.

[mssms] SCCM updates reporting

[ccollins9]

I'm trying to track the compliance of a specific update and am using the
report "Compliance 2 - Specific software update". There are several
machines on the report that I know have the update and their "Last State
Received" was 5 days ago.

My question, does anyone know the client task that will update this report
faster? So far, I've tried:

Machine Policy Retrieval & Evaluation Cycle
Software Updates Deployment Evaluation Cycle
Software Updates Scan Cycle

RE: [mssms] Deploy applications using AD groups.

[sccmfun]

Much appreciated, helps me feel better about the path I’m going down.

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marcum, John
Sent: Tuesday, March 3, 2015 11:33 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

 

Well…. I sort of lied I guess… I do SOMETIMES deploy to computers but only apps 
that are deployed to all computers. Like upgrades or something like that.

 

Yes, I use primary device as a requirement rule. 

 

I am in the process of switching from Flexera over to 1E shopping. Either 
product offers the ability to do approvals. Apps that are not site licensed 
require approvals. This is how I deal with licensed software. As I said, the 
same thing could be done on a shoestring budget using that free SCORCH web 
frontend. http://www.eupsco.nl/HowItWorks but honestly Shopping is cheap.

 

I don't make any apps available. All of my apps are required.

 

 

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of sccmfun
Sent: Tuesday, March 03, 2015 10:28 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

 

Awesome info, so last few questions and I think I’m all sorted out.

 

You said you never put computes in groups, just users.  So do you never deploy 
to computers or if you do you just make a collection of machine names?  How do 
you target them for the deployment?

 

So what requirements do you have so this doesn’t happen?  Are you using primary 
user so it only gets installed on that machine?  

 

The way I was thinking of doing it was to have any application that isn’t 
licensed we would make it available so the user can install it.  If it’s a 
licensed app we would deploy that to the computer as required (using an AD 
group we put the machine into).  We would never deploy anything to the user 
that is required.

 

It sounds like you target users with required AND available apps but use 
primary user to ensure any required apps only installs on their primary machine 
and not ever machine they log into.  Is that right?

 

Very helpful stuff.

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marcum, John
Sent: Tuesday, March 3, 2015 11:11 AM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] Deploy applications using AD groups.

 

You definitely "could" have this happen if your requirement rules are not setup 
correctly. 

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Matt Browne
Sent: Tuesday, March 03, 2015 9:50 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

 

We tend to target our software to computer collections only, with one or two 
exceptions.  If you target the software to a user exception you could get in 
the situation where the software gets installed on every machine the user logs 
into.

 

We never deploy software to the user and computer collections at the same time. 
 I’ve just never needed to do this.

 

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of sccmfun
Sent: 03 March 2015 15:11
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

 

Thanks Matt.

 

John you use the same exact WQL query that Matt uses for your collections?  
When you say all your software is done using AD user groups, so you always 
target only the user, you don’t put computers into AD groups and target them 
also?  

 

Another question:

 

When you look in System Resource (computer collection), there is a Security 
group name and System Group name, does anyone know what the difference is?

 

Same question when looking at User Resource (user collection) there is a 
Security group name and User Group name, does anyone know what the difference 
is?

 

Thanks

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marcum, John
Sent: Tuesday, March 3, 2015 9:58 AM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] Deploy applications using AD groups.

 

+1 

 

Doing it that way means the user doesn't even have to log out and back in 
before the software is deployed. ALL of my software is done this way using AD 
user groups and the app model.

 

 

 

 

 

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Matt Browne
Sent: Tuesday, March 03, 2015 4:55 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

 

The collection query we use for users and computers is :

 

Computers :

select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, 
SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, 
SMS_R_System.Client from  SMS_R_System where SMS_R_System.SystemGroupName = 
"DOM\\GROUP_NAME_FROM_AD"

 

Users :

select 
SMS_R_USER.ResourceID,SMS_R_U

RE: [mssms] Using SCCM 2012 for Third Party Licensing

[Jason Wallace]

Not wanting to jump on this thread too much but has anyone experience with
Eracent and mind some quick questions?

 

 

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Marcum, John
Sent: 03 March 2015 16:21
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Using SCCM 2012 for Third Party Licensing

 

I have some old blogs on doing license reclamation using it. Also if you
have SCORCH check this out, it's a cool way to do something like Shopping
for free. 

 

http://www.eupsco.nl/HowItWorks

 

We JUST bought Shopping, if I had seen this first I may have tried to use it
instead. It's looks promising.

 

 

 

 

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Nick sullivan
Sent: Tuesday, March 03, 2015 10:19 AM
To: mssms@lists.myitforum.com  
Subject: RE: [mssms] Using SCCM 2012 for Third Party Licensing

 

I'll check this out.  We have SCROCH but have very little knowledge in using
it.  
 
Thanks!
 

  _  

From: jmar...@babc.com  
To: mssms@lists.myitforum.com  
Subject: RE: [mssms] Using SCCM 2012 for Third Party Licensing
Date: Tue, 3 Mar 2015 16:12:02 +

I use BDNA Normalize for this. It works well. You can even reclaim licenses
automatically etc if you have SCROCH.

 

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Nick sullivan
Sent: Tuesday, March 03, 2015 9:56 AM
To: mssms@lists.myitforum.com  
Subject: [mssms] Using SCCM 2012 for Third Party Licensing

 

We are currently looking for the best third party licensing tool to
integrate with SCCM.  Anyone ever used 1E to accomplish this? Or do you have
any suggestions to accomplish this goal?
 
http://myitforum.com/myitforumwp/2012/12/19/sccm-integrated-sam-tools-appcla
rity-and-shopping-by-1e/
 
Thanks,
 
Systems Architect 

 

  _  


Confidentiality Notice: This e-mail is from a law firm and may be protected
by the attorney-client or work product privileges. If you have received this
message in error, please notify the sender by replying to this e-mail and
then delete it from your computer.

 

 

 

RE: [mssms] Deploy applications using AD groups.

[Marcum, John]

Well…. I sort of lied I guess… I do SOMETIMES deploy to computers but only apps 
that are deployed to all computers. Like upgrades or something like that.

Yes, I use primary device as a requirement rule.

I am in the process of switching from Flexera over to 1E shopping. Either 
product offers the ability to do approvals. Apps that are not site licensed 
require approvals. This is how I deal with licensed software. As I said, the 
same thing could be done on a shoestring budget using that free SCORCH web 
frontend. http://www.eupsco.nl/HowItWorks but honestly Shopping is cheap.

I don't make any apps available. All of my apps are required.



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of sccmfun
Sent: Tuesday, March 03, 2015 10:28 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

Awesome info, so last few questions and I think I’m all sorted out.

You said you never put computes in groups, just users.  So do you never deploy 
to computers or if you do you just make a collection of machine names?  How do 
you target them for the deployment?

So what requirements do you have so this doesn’t happen?  Are you using primary 
user so it only gets installed on that machine?

The way I was thinking of doing it was to have any application that isn’t 
licensed we would make it available so the user can install it.  If it’s a 
licensed app we would deploy that to the computer as required (using an AD 
group we put the machine into).  We would never deploy anything to the user 
that is required.

It sounds like you target users with required AND available apps but use 
primary user to ensure any required apps only installs on their primary machine 
and not ever machine they log into.  Is that right?

Very helpful stuff.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marcum, John
Sent: Tuesday, March 3, 2015 11:11 AM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] Deploy applications using AD groups.

You definitely "could" have this happen if your requirement rules are not setup 
correctly.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Matt Browne
Sent: Tuesday, March 03, 2015 9:50 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

We tend to target our software to computer collections only, with one or two 
exceptions.  If you target the software to a user exception you could get in 
the situation where the software gets installed on every machine the user logs 
into.

We never deploy software to the user and computer collections at the same time. 
 I’ve just never needed to do this.


From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of sccmfun
Sent: 03 March 2015 15:11
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

Thanks Matt.

John you use the same exact WQL query that Matt uses for your collections?  
When you say all your software is done using AD user groups, so you always 
target only the user, you don’t put computers into AD groups and target them 
also?

Another question:

When you look in System Resource (computer collection), there is a Security 
group name and System Group name, does anyone know what the difference is?

Same question when looking at User Resource (user collection) there is a 
Security group name and User Group name, does anyone know what the difference 
is?

Thanks

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marcum, John
Sent: Tuesday, March 3, 2015 9:58 AM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] Deploy applications using AD groups.

+1

Doing it that way means the user doesn't even have to log out and back in 
before the software is deployed. ALL of my software is done this way using AD 
user groups and the app model.






From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Matt Browne
Sent: Tuesday, March 03, 2015 4:55 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

The collection query we use for users and computers is :

Computers :

select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, 
SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, 
SMS_R_System.Client from  SMS_R_System where SMS_R_System.SystemGroupName = 
"DOM\\GROUP_NAME_FROM_AD"



Users :

select 
SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain
 from SMS_R_User where SMS_R_User

RE: [mssms] Deploy applications using AD groups.

[sccmfun]

Matt so 99% of the time you’re using the query below for your targeting ?

 

Computers :

select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, 
SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, 
SMS_R_System.Client from  SMS_R_System where SMS_R_System.SystemGroupName = 
"DOM\\GROUP_NAME_FROM_AD"

 

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Matt Browne
Sent: Tuesday, March 3, 2015 10:50 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

 

We tend to target our software to computer collections only, with one or two 
exceptions.  If you target the software to a user exception you could get in 
the situation where the software gets installed on every machine the user logs 
into.

 

We never deploy software to the user and computer collections at the same time. 
 I’ve just never needed to do this.

 

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of sccmfun
Sent: 03 March 2015 15:11
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

 

Thanks Matt.

 

John you use the same exact WQL query that Matt uses for your collections?  
When you say all your software is done using AD user groups, so you always 
target only the user, you don’t put computers into AD groups and target them 
also?  

 

Another question:

 

When you look in System Resource (computer collection), there is a Security 
group name and System Group name, does anyone know what the difference is?

 

Same question when looking at User Resource (user collection) there is a 
Security group name and User Group name, does anyone know what the difference 
is?

 

Thanks

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marcum, John
Sent: Tuesday, March 3, 2015 9:58 AM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] Deploy applications using AD groups.

 

+1 

 

Doing it that way means the user doesn't even have to log out and back in 
before the software is deployed. ALL of my software is done this way using AD 
user groups and the app model.

 

 

 

 

 

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Matt Browne
Sent: Tuesday, March 03, 2015 4:55 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

 

The collection query we use for users and computers is :

 

Computers :

select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, 
SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, 
SMS_R_System.Client from  SMS_R_System where SMS_R_System.SystemGroupName = 
"DOM\\GROUP_NAME_FROM_AD"

 

Users :

select 
SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain
 from SMS_R_User where SMS_R_User.UserGroupName = "DOM\\GROUP_NAME_FROM_AD"

 

Make sure the collection is set to incremental updates and you should be good 
to go.  It’s not instant, but the software should go out in a few minutes.

 

Hope that helps

 

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of sccmfun
Sent: 03 March 2015 10:42
To: mssms@lists.myITforum.com
Subject: [mssms] Deploy applications using AD groups.

 

What is the best way to create a collection to deploy software to 
users/computers based off of AD Group

 

Should I populate the collection using the security group name, in which case 
the collection only has 1 member (ex: contoso\winzip) or should I create the 
collection so it returns the members of the group so it shows the actual 
objects (ex: 15 users/computers)?  I thought I remember something that the 
collection needs to have the actual computer/user names returned and not just 
the 1 group name returned or users/computers would need to logoff/logon for 
their token to refresh before they receive the policy.

 

Does anyone have the query they use?  My goal is to create a collection based 
off AD group (ex: contoso\winzip) and have the least amount of wait/interaction 
from the user.

 

Thanks

 

 

  _  

Information in this message is sent in confidence and is intended only for the 
use of the individual or entity to whom it is addressed. If you are not the 
intended recipient, any use, distribution or copying of the information is 
strictly forbidden. Please notify the sender immediately by return email or 
telephone 01823 721400. If you received this email in error please delete it 
and any copies of it from your system. 

Viridor Waste Management Limited
Registered Office: Peninsula House, Rydon Lane, Exeter EX2 7HR Registered in 
England No. 575069 

  _  

 

  _  


Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error

RE: [mssms] Deploy applications using AD groups.

[sccmfun]

Awesome info, so last few questions and I think I’m all sorted out.

 

You said you never put computes in groups, just users.  So do you never deploy 
to computers or if you do you just make a collection of machine names?  How do 
you target them for the deployment?

 

So what requirements do you have so this doesn’t happen?  Are you using primary 
user so it only gets installed on that machine?  

 

The way I was thinking of doing it was to have any application that isn’t 
licensed we would make it available so the user can install it.  If it’s a 
licensed app we would deploy that to the computer as required (using an AD 
group we put the machine into).  We would never deploy anything to the user 
that is required.

 

It sounds like you target users with required AND available apps but use 
primary user to ensure any required apps only installs on their primary machine 
and not ever machine they log into.  Is that right?

 

Very helpful stuff.

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marcum, John
Sent: Tuesday, March 3, 2015 11:11 AM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] Deploy applications using AD groups.

 

You definitely "could" have this happen if your requirement rules are not setup 
correctly. 

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Matt Browne
Sent: Tuesday, March 03, 2015 9:50 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

 

We tend to target our software to computer collections only, with one or two 
exceptions.  If you target the software to a user exception you could get in 
the situation where the software gets installed on every machine the user logs 
into.

 

We never deploy software to the user and computer collections at the same time. 
 I’ve just never needed to do this.

 

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of sccmfun
Sent: 03 March 2015 15:11
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

 

Thanks Matt.

 

John you use the same exact WQL query that Matt uses for your collections?  
When you say all your software is done using AD user groups, so you always 
target only the user, you don’t put computers into AD groups and target them 
also?  

 

Another question:

 

When you look in System Resource (computer collection), there is a Security 
group name and System Group name, does anyone know what the difference is?

 

Same question when looking at User Resource (user collection) there is a 
Security group name and User Group name, does anyone know what the difference 
is?

 

Thanks

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marcum, John
Sent: Tuesday, March 3, 2015 9:58 AM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] Deploy applications using AD groups.

 

+1 

 

Doing it that way means the user doesn't even have to log out and back in 
before the software is deployed. ALL of my software is done this way using AD 
user groups and the app model.

 

 

 

 

 

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Matt Browne
Sent: Tuesday, March 03, 2015 4:55 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

 

The collection query we use for users and computers is :

 

Computers :

select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, 
SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, 
SMS_R_System.Client from  SMS_R_System where SMS_R_System.SystemGroupName = 
"DOM\\GROUP_NAME_FROM_AD"

 

Users :

select 
SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain
 from SMS_R_User where SMS_R_User.UserGroupName = "DOM\\GROUP_NAME_FROM_AD"

 

Make sure the collection is set to incremental updates and you should be good 
to go.  It’s not instant, but the software should go out in a few minutes.

 

Hope that helps

 

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of sccmfun
Sent: 03 March 2015 10:42
To: mssms@lists.myITforum.com
Subject: [mssms] Deploy applications using AD groups.

 

What is the best way to create a collection to deploy software to 
users/computers based off of AD Group

 

Should I populate the collection using the security group name, in which case 
the collection only has 1 member (ex: contoso\winzip) or should I create the 
collection so it returns the members of the group so it shows the actual 
objects (ex: 15 users/computers)?  I thought I remember something that the 
collection needs to have the actual computer/user names returned and not just 
the 1 group name returned or users/computers would need to logoff/logon for 
their token to refresh before they receive the policy.

 

Does anyone have

RE: [mssms] Using SCCM 2012 for Third Party Licensing

[Marcum, John]

I have some old blogs on doing license reclamation using it. Also if you have 
SCORCH check this out, it's a cool way to do something like Shopping for free.

http://www.eupsco.nl/HowItWorks

We JUST bought Shopping, if I had seen this first I may have tried to use it 
instead. It's looks promising.




From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Nick sullivan
Sent: Tuesday, March 03, 2015 10:19 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Using SCCM 2012 for Third Party Licensing

I'll check this out.  We have SCROCH but have very little knowledge in using it.

Thanks!


From: jmar...@babc.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Using SCCM 2012 for Third Party Licensing
Date: Tue, 3 Mar 2015 16:12:02 +
I use BDNA Normalize for this. It works well. You can even reclaim licenses 
automatically etc if you have SCROCH.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Nick sullivan
Sent: Tuesday, March 03, 2015 9:56 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Using SCCM 2012 for Third Party Licensing

We are currently looking for the best third party licensing tool to integrate 
with SCCM.  Anyone ever used 1E to accomplish this? Or do you have any 
suggestions to accomplish this goal?

http://myitforum.com/myitforumwp/2012/12/19/sccm-integrated-sam-tools-appclarity-and-shopping-by-1e/

Thanks,

Systems Architect



Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.

RE: [mssms] Using SCCM 2012 for Third Party Licensing

[Nick sullivan]

I'll check this out.  We have SCROCH but have very little knowledge in using 
it.  
 
Thanks!
 
From: jmar...@babc.com
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Using SCCM 2012 for Third Party Licensing
Date: Tue, 3 Mar 2015 16:12:02 +









I use BDNA Normalize for this. It works well. You can even reclaim licenses 
automatically etc if you have SCROCH.
 


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Nick sullivan

Sent: Tuesday, March 03, 2015 9:56 AM

To: mssms@lists.myitforum.com

Subject: [mssms] Using SCCM 2012 for Third Party Licensing


 

We are currently looking for the best third party licensing tool to integrate 
with SCCM.  Anyone ever used 1E to accomplish this? Or do you have any 
suggestions to accomplish this goal?

 

http://myitforum.com/myitforumwp/2012/12/19/sccm-integrated-sam-tools-appclarity-and-shopping-by-1e/

 

Thanks,

 

Systems Architect 

 





Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.







  

RE: [mssms] Using SCCM 2012 for Third Party Licensing

[Marcum, John]

I use BDNA Normalize for this. It works well. You can even reclaim licenses 
automatically etc if you have SCROCH.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Nick sullivan
Sent: Tuesday, March 03, 2015 9:56 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Using SCCM 2012 for Third Party Licensing

We are currently looking for the best third party licensing tool to integrate 
with SCCM.  Anyone ever used 1E to accomplish this? Or do you have any 
suggestions to accomplish this goal?

http://myitforum.com/myitforumwp/2012/12/19/sccm-integrated-sam-tools-appclarity-and-shopping-by-1e/

Thanks,

Systems Architect



Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.

RE: [mssms] Deploy applications using AD groups.

[Marcum, John]

You definitely "could" have this happen if your requirement rules are not setup 
correctly.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Matt Browne
Sent: Tuesday, March 03, 2015 9:50 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

We tend to target our software to computer collections only, with one or two 
exceptions.  If you target the software to a user exception you could get in 
the situation where the software gets installed on every machine the user logs 
into.

We never deploy software to the user and computer collections at the same time. 
 I’ve just never needed to do this.


From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of sccmfun
Sent: 03 March 2015 15:11
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

Thanks Matt.

John you use the same exact WQL query that Matt uses for your collections?  
When you say all your software is done using AD user groups, so you always 
target only the user, you don’t put computers into AD groups and target them 
also?

Another question:

When you look in System Resource (computer collection), there is a Security 
group name and System Group name, does anyone know what the difference is?

Same question when looking at User Resource (user collection) there is a 
Security group name and User Group name, does anyone know what the difference 
is?

Thanks

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marcum, John
Sent: Tuesday, March 3, 2015 9:58 AM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] Deploy applications using AD groups.

+1

Doing it that way means the user doesn't even have to log out and back in 
before the software is deployed. ALL of my software is done this way using AD 
user groups and the app model.






From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Matt Browne
Sent: Tuesday, March 03, 2015 4:55 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

The collection query we use for users and computers is :

Computers :

select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, 
SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, 
SMS_R_System.Client from  SMS_R_System where SMS_R_System.SystemGroupName = 
"DOM\\GROUP_NAME_FROM_AD"



Users :

select 
SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain
 from SMS_R_User where SMS_R_User.UserGroupName = "DOM\\GROUP_NAME_FROM_AD"



Make sure the collection is set to incremental updates and you should be good 
to go.  It’s not instant, but the software should go out in a few minutes.



Hope that helps


From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of sccmfun
Sent: 03 March 2015 10:42
To: mssms@lists.myITforum.com
Subject: [mssms] Deploy applications using AD groups.

What is the best way to create a collection to deploy software to 
users/computers based off of AD Group

Should I populate the collection using the security group name, in which case 
the collection only has 1 member (ex: contoso\winzip) or should I create the 
collection so it returns the members of the group so it shows the actual 
objects (ex: 15 users/computers)?  I thought I remember something that the 
collection needs to have the actual computer/user names returned and not just 
the 1 group name returned or users/computers would need to logoff/logon for 
their token to refresh before they receive the policy.

Does anyone have the query they use?  My goal is to create a collection based 
off AD group (ex: contoso\winzip) and have the least amount of wait/interaction 
from the user.

Thanks



Information in this message is sent in confidence and is intended only for the 
use of the individual or entity to whom it is addressed. If you are not the 
intended recipient, any use, distribution or copying of the information is 
strictly forbidden. Please notify the sender immediately by return email or 
telephone 01823 721400. If you received this email in error please delete it 
and any copies of it from your system.

Viridor Waste Management Limited
Registered Office: Peninsula House, Rydon Lane, Exeter EX2 7HR Registered in 
England No. 575069




Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender b

RE: [mssms] Deploy applications using AD groups.

[Marcum, John]

Log on and log off is NOT required the way I do it.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of elsalvoz
Sent: Tuesday, March 03, 2015 9:25 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.


The token needs to renew when you add a new object to a group logoff/logon is 
required.

I've done both in the past. I would use members of a group instead, the user 
gets added directly to the collection and no logoff is required I believe. Test.

Cesar
On Mar 3, 2015 7:14 AM, "sccmfun" 
mailto:sccm...@hotmail.com>> wrote:
Thanks Matt.

John you use the same exact WQL query that Matt uses for your collections?  
When you say all your software is done using AD user groups, so you always 
target only the user, you don’t put computers into AD groups and target them 
also?

Another question:

When you look in System Resource (computer collection), there is a Security 
group name and System Group name, does anyone know what the difference is?

Same question when looking at User Resource (user collection) there is a 
Security group name and User Group name, does anyone know what the difference 
is?

Thanks

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] 
On Behalf Of Marcum, John
Sent: Tuesday, March 3, 2015 9:58 AM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] Deploy applications using AD groups.

+1

Doing it that way means the user doesn't even have to log out and back in 
before the software is deployed. ALL of my software is done this way using AD 
user groups and the app model.






From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Matt Browne
Sent: Tuesday, March 03, 2015 4:55 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

The collection query we use for users and computers is :

Computers :

select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, 
SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, 
SMS_R_System.Client from  SMS_R_System where SMS_R_System.SystemGroupName = 
"DOM\\GROUP_NAME_FROM_AD"



Users :

select 
SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain
 from SMS_R_User where SMS_R_User.UserGroupName = "DOM\\GROUP_NAME_FROM_AD"



Make sure the collection is set to incremental updates and you should be good 
to go.  It’s not instant, but the software should go out in a few minutes.



Hope that helps


From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of sccmfun
Sent: 03 March 2015 10:42
To: mssms@lists.myITforum.com
Subject: [mssms] Deploy applications using AD groups.

What is the best way to create a collection to deploy software to 
users/computers based off of AD Group

Should I populate the collection using the security group name, in which case 
the collection only has 1 member (ex: contoso\winzip) or should I create the 
collection so it returns the members of the group so it shows the actual 
objects (ex: 15 users/computers)?  I thought I remember something that the 
collection needs to have the actual computer/user names returned and not just 
the 1 group name returned or users/computers would need to logoff/logon for 
their token to refresh before they receive the policy.

Does anyone have the query they use?  My goal is to create a collection based 
off AD group (ex: contoso\winzip) and have the least amount of wait/interaction 
from the user.

Thanks



Information in this message is sent in confidence and is intended only for the 
use of the individual or entity to whom it is addressed. If you are not the 
intended recipient, any use, distribution or copying of the information is 
strictly forbidden. Please notify the sender immediately by return email or 
telephone 01823 721400. If you received this email in error please delete it 
and any copies of it from your system.

Viridor Waste Management Limited
Registered Office: Peninsula House, Rydon Lane, Exeter EX2 7HR Registered in 
England No. 575069




Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.

RE: [mssms] Deploy applications using AD groups.

[Marcum, John]

Correct, I only put users in groups, never computers.

Here's one of my queries:

select 
SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain
 from SMS_R_User where SMS_R_User.UserGroupName = "mydomain\\IP Communicator"

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of sccmfun
Sent: Tuesday, March 03, 2015 9:11 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

Thanks Matt.

John you use the same exact WQL query that Matt uses for your collections?  
When you say all your software is done using AD user groups, so you always 
target only the user, you don’t put computers into AD groups and target them 
also?

Another question:

When you look in System Resource (computer collection), there is a Security 
group name and System Group name, does anyone know what the difference is?

Same question when looking at User Resource (user collection) there is a 
Security group name and User Group name, does anyone know what the difference 
is?

Thanks

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marcum, John
Sent: Tuesday, March 3, 2015 9:58 AM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] Deploy applications using AD groups.

+1

Doing it that way means the user doesn't even have to log out and back in 
before the software is deployed. ALL of my software is done this way using AD 
user groups and the app model.






From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Matt Browne
Sent: Tuesday, March 03, 2015 4:55 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

The collection query we use for users and computers is :

Computers :

select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, 
SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, 
SMS_R_System.Client from  SMS_R_System where SMS_R_System.SystemGroupName = 
"DOM\\GROUP_NAME_FROM_AD"



Users :

select 
SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain
 from SMS_R_User where SMS_R_User.UserGroupName = "DOM\\GROUP_NAME_FROM_AD"



Make sure the collection is set to incremental updates and you should be good 
to go.  It’s not instant, but the software should go out in a few minutes.



Hope that helps


From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of sccmfun
Sent: 03 March 2015 10:42
To: mssms@lists.myITforum.com
Subject: [mssms] Deploy applications using AD groups.

What is the best way to create a collection to deploy software to 
users/computers based off of AD Group

Should I populate the collection using the security group name, in which case 
the collection only has 1 member (ex: contoso\winzip) or should I create the 
collection so it returns the members of the group so it shows the actual 
objects (ex: 15 users/computers)?  I thought I remember something that the 
collection needs to have the actual computer/user names returned and not just 
the 1 group name returned or users/computers would need to logoff/logon for 
their token to refresh before they receive the policy.

Does anyone have the query they use?  My goal is to create a collection based 
off AD group (ex: contoso\winzip) and have the least amount of wait/interaction 
from the user.

Thanks



Information in this message is sent in confidence and is intended only for the 
use of the individual or entity to whom it is addressed. If you are not the 
intended recipient, any use, distribution or copying of the information is 
strictly forbidden. Please notify the sender immediately by return email or 
telephone 01823 721400. If you received this email in error please delete it 
and any copies of it from your system.

Viridor Waste Management Limited
Registered Office: Peninsula House, Rydon Lane, Exeter EX2 7HR Registered in 
England No. 575069




Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.

[mssms] Slow Policy download in WinPE before OSD welcome Screen

[Augustine, Greg A]

We have a couple of sites that are taking a long time to download policy 
information before the OSD welcome screen is displayed.  It is taking about 
25~30 minutes.  The computers PXE boot to the local server that is on the same 
subnet and is also configured as a Secondary Site.  Since it is configured as a 
Secondary the policy download should be fairly quick since it would not have to 
travel across the WAN link.  Here is an example of it downloading some of the 
policies.  It take 8 minutes to check 4 policies.

Downloading policy body ZZZ20A00-ZZZ00378-6F6BCC28.  2/19/2015 
10:58:52 AM
Preparing Policy Body Request. 2/19/2015 10:58:52 AM
Setting transport.2/19/2015 10:58:52 AM
Setting policy location = 
http:///SMS_MP/.sms_pol?ZZZ20A00-ZZZ00378-6F6BCC28.22_00.  
2/19/2015 10:58:52 AM
Executing Policy Body Request. 2/19/2015 10:58:52 AM
CLibSMSMessageWinHttpTransport::Send: URL: SCCM1.testdomain.com:80  GET 
/SMS_MP/.sms_pol?ZZZ20A00-ZZZ00378-6F6BCC28.22_00   2/19/2015 
10:58:52 AM
Request was succesful. 2/19/2015 11:00:51 AM
Found a secure policy.   2/19/2015 11:00:51 AM
Trying to decode policy.2/19/2015 11:00:51 AM
Policy decoded.2/19/2015 11:00:51 AM
Hash computed from CSP: Microsoft Enhanced RSA and AES Cryptographic Provider, 
AlgID: 32780, HashSize: 32 2/19/2015 11:00:51 AM
Expected Hash size: 32, Computed Hash size: 322/19/2015 
11:00:51 AM
Request location: HTTP:///SMS_MP/.SMS_POL?ZZZ20A00-ZZZ00378-6F6BCC28.22_00  
 2/19/2015 11:00:51 AM
Response ID: ZZZ20A00-ZZZ00378-6F6BCC28   2/19/2015 11:00:51 AM
Reading Policy Body.  2/19/2015 11:00:52 AM
Parsing Policy Body.2/19/2015 11:00:52 AM
Downloading policy body ZZZ20A18-ZZZ0036F-6F6BCC28.  2/19/2015 
11:00:52 AM
Preparing Policy Body Request. 2/19/2015 11:00:52 AM
Setting transport.2/19/2015 11:00:52 AM
Setting policy location = 
http:///SMS_MP/.sms_pol?ZZZ20A18-ZZZ0036F-6F6BCC28.15_00.  
2/19/2015 11:00:52 AM
Executing Policy Body Request. 2/19/2015 11:00:52 AM
CLibSMSMessageWinHttpTransport::Send: URL: SCCM1.testdomain.com:80  GET 
/SMS_MP/.sms_pol?ZZZ20A18-ZZZ0036F-6F6BCC28.15_00   2/19/2015 
11:00:52 AM
Request was succesful. 2/19/2015 11:02:52 AM
Found a secure policy.   2/19/2015 11:02:52 AM
Trying to decode policy.2/19/2015 11:02:52 AM
Policy decoded.2/19/2015 11:02:53 AM
Hash computed from CSP: Microsoft Enhanced RSA and AES Cryptographic Provider, 
AlgID: 32780, HashSize: 32 2/19/2015 11:02:53 AM
Expected Hash size: 32, Computed Hash size: 322/19/2015 
11:02:53 AM
Request location: HTTP:///SMS_MP/.SMS_POL?ZZZ20A18-ZZZ0036F-6F6BCC28.15_00  
 2/19/2015 11:02:53 AM
Response ID: ZZZ20A18-ZZZ0036F-6F6BCC28   2/19/2015 11:02:53 AM
Reading Policy Body.  2/19/2015 11:02:53 AM
Parsing Policy Body.2/19/2015 11:02:53 AM
Downloading policy body ZZZ20A1B-ZZZ00376-6F6BCC28.  2/19/2015 
11:02:53 AM
Preparing Policy Body Request. 2/19/2015 11:02:53 AM
Setting transport.2/19/2015 11:02:53 AM
Setting policy location = 
http:///SMS_MP/.sms_pol?ZZZ20A1B-ZZZ00376-6F6BCC28.18_00.  
2/19/2015 11:02:53 AM
Executing Policy Body Request. 2/19/2015 11:02:53 AM
CLibSMSMessageWinHttpTransport::Send: URL: SCCM1.testdomain.com:80  GET 
/SMS_MP/.sms_pol?ZZZ20A1B-ZZZ00376-6F6BCC28.18_00   2/19/2015 
11:02:53 AM
Request was succesful. 2/19/2015 11:05:03 AM
Found a secure policy.   2/19/2015 11:05:03 AM
Trying to decode policy.2/19/2015 11:05:03 AM
Policy decoded.2/19/2015 11:05:03 AM
Hash computed from CSP: Microsoft Enhanced RSA and AES Cryptographic Provider, 
AlgID: 32780, HashSize: 32 2/19/2015 11:05:03 AM
Expected Hash size: 32, Computed Hash size: 322/19/2015 
11:05:03 AM
Request location: HTTP:///SMS_MP/.SMS_POL?ZZZ20A1B-ZZZ00376-6F6BCC28.18_00  
 2/19/2015 11:05:03 AM
Response ID: ZZZ20A1B-ZZZ00376-6F6BCC28   2/19/2015 11:05:03 AM
Reading Policy Body.  2/19/2015 11:05:03 AM
Parsing Policy Body.2/19/2015 11:05:03 AM
Downloading policy body ZZZ20A1F-ZZZ0037A-6F6BCC28. 2/19/2015 
11:05:03 AM
Preparing Policy Body Request. 2/19/2015 11:05:03 AM
Setting transport.2/19/2015 11:05:03 AM
Setting policy location = 
http:///SMS_MP/.sms_pol?ZZZ20A1F-ZZZ0037A-6F6BCC28.13_00.  
2/19/2015 11:05:03 AM
Executing Policy Body Request. 2/19/2015 11:05:03 AM
CLibSMSMessageWinHttpTransport::Send: URL: SCCM1.testdomain.com:80  GET 
/SMS_MP/.sms_pol?ZZZ20A1F-ZZZ0037A-6F6BCC28.13_00   2/19/2015 
11:05:03 AM
Request was succesful. 2/19/2015 11:06:56 AM
Found a secure policy.   2/19/2015 11:06:56 AM
Trying to decode policy.2/19/2015 11:06:56 AM
Policy decoded.2/19/2015 11:06:57 AM
Hash computed from CSP: Microsoft Enhance

[mssms] Using SCCM 2012 for Third Party Licensing

[Nick sullivan]

We are currently looking for the best third party licensing tool to integrate 
with SCCM.  Anyone ever used 1E to accomplish this? Or do you have any 
suggestions to accomplish this goal?
 
http://myitforum.com/myitforumwp/2012/12/19/sccm-integrated-sam-tools-appclarity-and-shopping-by-1e/
 
Thanks,
 
Systems Architect 
  

RE: [mssms] Deploy applications using AD groups.

[Matt Browne]

We tend to target our software to computer collections only, with one or two 
exceptions.  If you target the software to a user exception you could get in 
the situation where the software gets installed on every machine the user logs 
into.

We never deploy software to the user and computer collections at the same time. 
 I’ve just never needed to do this.


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of sccmfun
Sent: 03 March 2015 15:11
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

Thanks Matt.

John you use the same exact WQL query that Matt uses for your collections?  
When you say all your software is done using AD user groups, so you always 
target only the user, you don’t put computers into AD groups and target them 
also?

Another question:

When you look in System Resource (computer collection), there is a Security 
group name and System Group name, does anyone know what the difference is?

Same question when looking at User Resource (user collection) there is a 
Security group name and User Group name, does anyone know what the difference 
is?

Thanks

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Marcum, John
Sent: Tuesday, March 3, 2015 9:58 AM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] Deploy applications using AD groups.

+1

Doing it that way means the user doesn't even have to log out and back in 
before the software is deployed. ALL of my software is done this way using AD 
user groups and the app model.






From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Matt Browne
Sent: Tuesday, March 03, 2015 4:55 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

The collection query we use for users and computers is :

Computers :

select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, 
SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, 
SMS_R_System.Client from  SMS_R_System where SMS_R_System.SystemGroupName = 
"DOM\\GROUP_NAME_FROM_AD"



Users :

select 
SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain
 from SMS_R_User where SMS_R_User.UserGroupName = "DOM\\GROUP_NAME_FROM_AD"



Make sure the collection is set to incremental updates and you should be good 
to go.  It’s not instant, but the software should go out in a few minutes.



Hope that helps


From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of sccmfun
Sent: 03 March 2015 10:42
To: mssms@lists.myITforum.com
Subject: [mssms] Deploy applications using AD groups.

What is the best way to create a collection to deploy software to 
users/computers based off of AD Group

Should I populate the collection using the security group name, in which case 
the collection only has 1 member (ex: contoso\winzip) or should I create the 
collection so it returns the members of the group so it shows the actual 
objects (ex: 15 users/computers)?  I thought I remember something that the 
collection needs to have the actual computer/user names returned and not just 
the 1 group name returned or users/computers would need to logoff/logon for 
their token to refresh before they receive the policy.

Does anyone have the query they use?  My goal is to create a collection based 
off AD group (ex: contoso\winzip) and have the least amount of wait/interaction 
from the user.

Thanks



Information in this message is sent in confidence and is intended only for the 
use of the individual or entity to whom it is addressed. If you are not the 
intended recipient, any use, distribution or copying of the information is 
strictly forbidden. Please notify the sender immediately by return email or 
telephone 01823 721400. If you received this email in error please delete it 
and any copies of it from your system.

Viridor Waste Management Limited
Registered Office: Peninsula House, Rydon Lane, Exeter EX2 7HR Registered in 
England No. 575069




Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.
---
Information in this message is sent in confidence and is intended only for
the use of the individual or entity to whom it is addressed.  If you are not
the intended recipient, any use, distribution or copying of the information
is strictly fo

[mssms] Sccm 2007 Sp2 R2 - Can i use MDT 2012?

[Burke, John]

Hi,

I’m trying to get our image working with Mcafee Encryption. The newer versions 
instructions are failing, I believe because it is built for

SCCM 2012
MDT 2012 update 1
Windows assessment and Deployment Kit version 4.0.

My question is – can I install MDT 2012 update 1 and Windows assessment and 
deployment kit and use those to manipulate the WIM outside of SCCM? I’m hoping 
that will let me follow their instructions and then I can just deploy that.

RE: [mssms] Deploy applications using AD groups.

[elsalvoz]

The token needs to renew when you add a new object to a group logoff/logon
is required.

I've done both in the past. I would use members of a group instead, the
user gets added directly to the collection and no logoff is required I
believe. Test.

Cesar
On Mar 3, 2015 7:14 AM, "sccmfun"  wrote:

> Thanks Matt.
>
>
>
> John you use the same exact WQL query that Matt uses for your
> collections?  When you say all your software is done using AD user groups,
> so you always target only the user, you don’t put computers into AD groups
> and target them also?
>
>
>
> Another question:
>
>
>
> When you look in System Resource (computer collection), there is a
> Security group name and System Group name, does anyone know what the
> difference is?
>
>
>
> Same question when looking at User Resource (user collection) there is a
> Security group name and User Group name, does anyone know what the
> difference is?
>
>
>
> Thanks
>
>
>
> *From:* listsad...@lists.myitforum.com [mailto:
> listsad...@lists.myitforum.com] *On Behalf Of *Marcum, John
> *Sent:* Tuesday, March 3, 2015 9:58 AM
> *To:* 'mssms@lists.myitforum.com'
> *Subject:* RE: [mssms] Deploy applications using AD groups.
>
>
>
> +1
>
>
>
> Doing it that way means the user doesn't even have to log out and back in
> before the software is deployed. *ALL *of my software is done this way
> using AD user groups and the app model.
>
>
>
>
>
>
>
>
>
>
>
>
>
> *From:* listsad...@lists.myitforum.com [
> mailto:listsad...@lists.myitforum.com ] *On
> Behalf Of *Matt Browne
> *Sent:* Tuesday, March 03, 2015 4:55 AM
> *To:* mssms@lists.myitforum.com
> *Subject:* RE: [mssms] Deploy applications using AD groups.
>
>
>
> The collection query we use for users and computers is :
>
>
>
> Computers :
>
> select SMS_R_System.ResourceId, SMS_R_System.ResourceType,
> SMS_R_System.Name, SMS_R_System.SMSUniqueIdentifier,
> SMS_R_System.ResourceDomainORWorkgroup, SMS_R_System.Client from
> SMS_R_System where SMS_R_System.SystemGroupName = "DOM\\GROUP_NAME_FROM_AD"
>
>
>
> Users :
>
> select
> SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain
> from SMS_R_User where SMS_R_User.UserGroupName = "DOM\\GROUP_NAME_FROM_AD"
>
>
>
> Make sure the collection is set to incremental updates and you should be
> good to go.  It’s not instant, but the software should go out in a few
> minutes.
>
>
>
> Hope that helps
>
>
>
>
>
> *From:* listsad...@lists.myitforum.com [
> mailto:listsad...@lists.myitforum.com ] *On
> Behalf Of *sccmfun
> *Sent:* 03 March 2015 10:42
> *To:* mssms@lists.myITforum.com
> *Subject:* [mssms] Deploy applications using AD groups.
>
>
>
> What is the best way to create a collection to deploy software to
> users/computers based off of AD Group
>
>
>
> Should I populate the collection using the security group name, in which
> case the collection only has 1 member (ex: contoso\winzip) or should I
> create the collection so it returns the members of the group so it shows
> the actual objects (ex: 15 users/computers)?  I thought I remember
> something that the collection needs to have the actual computer/user names
> returned and not just the 1 group name returned or users/computers would
> need to logoff/logon for their token to refresh before they receive the
> policy.
>
>
>
> Does anyone have the query they use?  My goal is to create a collection
> based off AD group (ex: contoso\winzip) and have the least amount of
> wait/interaction from the user.
>
>
>
> Thanks
>
>
>
>
> --
>
> Information in this message is sent in confidence and is intended only for
> the use of the individual or entity to whom it is addressed. If you are not
> the intended recipient, any use, distribution or copying of the information
> is strictly forbidden. Please notify the sender immediately by return email
> or telephone 01823 721400. If you received this email in error please
> delete it and any copies of it from your system.
>
> Viridor Waste Management Limited
> Registered Office: Peninsula House, Rydon Lane, Exeter EX2 7HR Registered
> in England No. 575069
> --
>
>
> --
>
>
> Confidentiality Notice: This e-mail is from a law firm and may be
> protected by the attorney-client or work product privileges. If you have
> received this message in error, please notify the sender by replying to
> this e-mail and then delete it from your computer.
>
>
>
>

RE: [mssms] Nolock on reports.

[Robert Spinelli]

Thanks for the info Andrew very helpful.

 

Thanks Daniel for the confirmation.

 

Rob

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Andrew Craig
Sent: Tuesday, March 3, 2015 9:08 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Nolock on reports.

 

Nolock hints propagate through table and view hierarchy paths only.

 

sccm reporting (2012 r2)utilizes the rbac model in reporting - all out of
box reports use functions and nolock hints do not propagate functions. That
is why no default reports use nolock hints. Unless the nolock is coded
behind,in which case you would not know that anyway, unless you set up
sqlprofiler.

 

If you build new reports via sccm console then this will be the same I
think.

 

If you build custom ssrs reports, then maybe you should use nolock, I don't
know. I presume Microsoft will say, to do it in the console. Because the
other, quite major, thing about building custom ssrs reports is, how do you
implement the rbac?

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Daniel Ratliff
Sent: 02 March 2015 16:23
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Nolock on reports.

 

Never heard of it, have written hundreds of reports and no issues I am aware
of. 

 

Daniel Ratliff

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Robert Spinelli
Sent: Monday, March 02, 2015 9:29 AM
To: mssms 
Subject: [mssms] Nolock on reports.

 

Having an internal debate in regards to writing reports for SCCM 2012 using
/ not using nolock.

 

Just wondering what others do?  Do you use nolock when writing
queries/reports?  I've never used nolock, but others who are much better
here at SQL said nolock should always be used.  They were surprised when I
pointed out that none of the built in SCCM reports using nolock.

 

Thanks 

 

Rob

 

 


The information transmitted is intended only for the person or entity to
which it is addressed
and may contain CONFIDENTIAL material. If you receive this
material/information in error,
please contact the sender and delete or destroy the material/information.

 

 

RE: [mssms] Deploy applications using AD groups.

[sccmfun]

Thanks Matt.

 

John you use the same exact WQL query that Matt uses for your collections?  
When you say all your software is done using AD user groups, so you always 
target only the user, you don’t put computers into AD groups and target them 
also?  

 

Another question:

 

When you look in System Resource (computer collection), there is a Security 
group name and System Group name, does anyone know what the difference is?

 

Same question when looking at User Resource (user collection) there is a 
Security group name and User Group name, does anyone know what the difference 
is?

 

Thanks

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marcum, John
Sent: Tuesday, March 3, 2015 9:58 AM
To: 'mssms@lists.myitforum.com'
Subject: RE: [mssms] Deploy applications using AD groups.

 

+1 

 

Doing it that way means the user doesn't even have to log out and back in 
before the software is deployed. ALL of my software is done this way using AD 
user groups and the app model.

 

 

 

 

 

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Matt Browne
Sent: Tuesday, March 03, 2015 4:55 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

 

The collection query we use for users and computers is :

 

Computers :

select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, 
SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, 
SMS_R_System.Client from  SMS_R_System where SMS_R_System.SystemGroupName = 
"DOM\\GROUP_NAME_FROM_AD"

 

Users :

select 
SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain
 from SMS_R_User where SMS_R_User.UserGroupName = "DOM\\GROUP_NAME_FROM_AD"

 

Make sure the collection is set to incremental updates and you should be good 
to go.  It’s not instant, but the software should go out in a few minutes.

 

Hope that helps

 

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of sccmfun
Sent: 03 March 2015 10:42
To: mssms@lists.myITforum.com
Subject: [mssms] Deploy applications using AD groups.

 

What is the best way to create a collection to deploy software to 
users/computers based off of AD Group

 

Should I populate the collection using the security group name, in which case 
the collection only has 1 member (ex: contoso\winzip) or should I create the 
collection so it returns the members of the group so it shows the actual 
objects (ex: 15 users/computers)?  I thought I remember something that the 
collection needs to have the actual computer/user names returned and not just 
the 1 group name returned or users/computers would need to logoff/logon for 
their token to refresh before they receive the policy.

 

Does anyone have the query they use?  My goal is to create a collection based 
off AD group (ex: contoso\winzip) and have the least amount of wait/interaction 
from the user.

 

Thanks

 

 

  _  

Information in this message is sent in confidence and is intended only for the 
use of the individual or entity to whom it is addressed. If you are not the 
intended recipient, any use, distribution or copying of the information is 
strictly forbidden. Please notify the sender immediately by return email or 
telephone 01823 721400. If you received this email in error please delete it 
and any copies of it from your system. 

Viridor Waste Management Limited
Registered Office: Peninsula House, Rydon Lane, Exeter EX2 7HR Registered in 
England No. 575069 

  _  

 

  _  


Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.

 

RE: [mssms] Deploy applications using AD groups.

[Marcum, John]

+1

Doing it that way means the user doesn't even have to log out and back in 
before the software is deployed. ALL of my software is done this way using AD 
user groups and the app model.






From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Matt Browne
Sent: Tuesday, March 03, 2015 4:55 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Deploy applications using AD groups.

The collection query we use for users and computers is :

Computers :

select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, 
SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, 
SMS_R_System.Client from  SMS_R_System where SMS_R_System.SystemGroupName = 
"DOM\\GROUP_NAME_FROM_AD"



Users :

select 
SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain
 from SMS_R_User where SMS_R_User.UserGroupName = "DOM\\GROUP_NAME_FROM_AD"



Make sure the collection is set to incremental updates and you should be good 
to go.  It’s not instant, but the software should go out in a few minutes.



Hope that helps


From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of sccmfun
Sent: 03 March 2015 10:42
To: mssms@lists.myITforum.com
Subject: [mssms] Deploy applications using AD groups.

What is the best way to create a collection to deploy software to 
users/computers based off of AD Group

Should I populate the collection using the security group name, in which case 
the collection only has 1 member (ex: contoso\winzip) or should I create the 
collection so it returns the members of the group so it shows the actual 
objects (ex: 15 users/computers)?  I thought I remember something that the 
collection needs to have the actual computer/user names returned and not just 
the 1 group name returned or users/computers would need to logoff/logon for 
their token to refresh before they receive the policy.

Does anyone have the query they use?  My goal is to create a collection based 
off AD group (ex: contoso\winzip) and have the least amount of wait/interaction 
from the user.

Thanks



Information in this message is sent in confidence and is intended only for the 
use of the individual or entity to whom it is addressed. If you are not the 
intended recipient, any use, distribution or copying of the information is 
strictly forbidden. Please notify the sender immediately by return email or 
telephone 01823 721400. If you received this email in error please delete it 
and any copies of it from your system.

Viridor Waste Management Limited
Registered Office: Peninsula House, Rydon Lane, Exeter EX2 7HR Registered in 
England No. 575069




Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.

[mssms] More on Intune and CfgMgr

[Ed Aldrich]

There was some recent discussion around Intune here in the last few days (Mike 
Marable posted questions around cost of using same in test model)...

I came across this recent blog that may also be of interest to those who are 
creeping toward Intune.

Updates for Managing Mobile Devices with Configuration Manager and Microsoft 
Intune


Ed Aldrich
Mobile: (401) 924-2293
ed.aldr...@1e.com | www.1e.com
[Description: Description: cid:image011.png@01CAD56A.EFDE3F90] Ent Cli Mgmt 
(2003-2014)





Legal Notice: This email is intended only for the person(s) to whom it is 
addressed. If you are not an intended recipient and have received this message 
in error, please notify the sender immediately by replying to this email or 
calling +44(0) 2083269015 (UK) or +1 866 592 4214 (USA). This email and any 
attachments may be privileged and/or confidential. The unauthorized use, 
disclosure, copying or printing of any information it contains is strictly 
prohibited. The opinions expressed in this email are those of the author and do 
not necessarily represent the views of 1E Ltd. Nothing in this email will 
operate to bind 1E to any order or other contract.

RE: [mssms] Nolock on reports.

[Andrew Craig]

Nolock hints propagate through table and view hierarchy paths only.

sccm reporting (2012 r2)utilizes the rbac model in reporting - all out of box 
reports use functions and nolock hints do not propagate functions. That is why 
no default reports use nolock hints. Unless the nolock is coded behind,in which 
case you would not know that anyway, unless you set up sqlprofiler.

If you build new reports via sccm console then this will be the same I think.

If you build custom ssrs reports, then maybe you should use nolock, I don't 
know. I presume Microsoft will say, to do it in the console. Because the other, 
quite major, thing about building custom ssrs reports is, how do you implement 
the rbac?

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Daniel Ratliff
Sent: 02 March 2015 16:23
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Nolock on reports.

Never heard of it, have written hundreds of reports and no issues I am aware of.

Daniel Ratliff

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Robert Spinelli
Sent: Monday, March 02, 2015 9:29 AM
To: mssms
Subject: [mssms] Nolock on reports.

Having an internal debate in regards to writing reports for SCCM 2012 using / 
not using nolock.

Just wondering what others do?  Do you use nolock when writing queries/reports? 
 I've never used nolock, but others who are much better here at SQL said nolock 
should always be used.  They were surprised when I pointed out that none of the 
built in SCCM reports using nolock.

Thanks

Rob



The information transmitted is intended only for the person or entity to which 
it is addressed
and may contain CONFIDENTIAL material. If you receive this material/information 
in error,
please contact the sender and delete or destroy the material/information.

RE: [mssms] Deploy applications using AD groups.

[Matt Browne]

The collection query we use for users and computers is :

Computers :

select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, 
SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, 
SMS_R_System.Client from  SMS_R_System where SMS_R_System.SystemGroupName = 
"DOM\\GROUP_NAME_FROM_AD"



Users :

select 
SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain
 from SMS_R_User where SMS_R_User.UserGroupName = "DOM\\GROUP_NAME_FROM_AD"



Make sure the collection is set to incremental updates and you should be good 
to go.  It's not instant, but the software should go out in a few minutes.



Hope that helps


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of sccmfun
Sent: 03 March 2015 10:42
To: mssms@lists.myITforum.com
Subject: [mssms] Deploy applications using AD groups.

What is the best way to create a collection to deploy software to 
users/computers based off of AD Group

Should I populate the collection using the security group name, in which case 
the collection only has 1 member (ex: contoso\winzip) or should I create the 
collection so it returns the members of the group so it shows the actual 
objects (ex: 15 users/computers)?  I thought I remember something that the 
collection needs to have the actual computer/user names returned and not just 
the 1 group name returned or users/computers would need to logoff/logon for 
their token to refresh before they receive the policy.

Does anyone have the query they use?  My goal is to create a collection based 
off AD group (ex: contoso\winzip) and have the least amount of wait/interaction 
from the user.

Thanks
---
Information in this message is sent in confidence and is intended only for
the use of the individual or entity to whom it is addressed.  If you are not
the intended recipient, any use, distribution or copying of the information
is strictly forbidden.  Please notify the sender immediately by return email
or telephone 01823 721400. If you received this email in error please delete 
it and any copies of it from your system.

Viridor Waste Management Limited
Registered Office: Peninsula House, Rydon Lane, Exeter EX2 7HR
Registered in England No. 575069
---

[mssms] Deploy applications using AD groups.

[sccmfun]

What is the best way to create a collection to deploy software to
users/computers based off of AD Group

 

Should I populate the collection using the security group name, in which
case the collection only has 1 member (ex: contoso\winzip) or should I
create the collection so it returns the members of the group so it shows the
actual objects (ex: 15 users/computers)?  I thought I remember something
that the collection needs to have the actual computer/user names returned
and not just the 1 group name returned or users/computers would need to
logoff/logon for their token to refresh before they receive the policy.

 

Does anyone have the query they use?  My goal is to create a collection
based off AD group (ex: contoso\winzip) and have the least amount of
wait/interaction from the user.

 

Thanks