RE: [mssms] 1709 Compat Scan

[Enley, Carl]

Thanks we actually have Upgrade Analytics running but that would not help us 
here. The compat scan actually found files on our network file server and that 
is what I am trying to understand…why would it search there?

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Adam Juelich
Sent: Friday, January 26, 2018 1:45 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] 1709 Compat Scan

Just a heads-up that you can utilize OMS in Azure for free to grab all of this 
data, chug through it, and tell you which apps won't work in Windows 10, which 
ones will be upgrade blocks, etc.  It also integrates into ConfigMgr with a 
nice dashboard and the ability to build collections off of that data.

On Fri, Jan 26, 2018 at 7:47 AM, Enley, Carl 
<cen...@arifleet.com<mailto:cen...@arifleet.com>> wrote:
So we are moving along pretty good with our W10 1607 > 1709 upgrade via SCCM 
task sequence, mostly still in the IT deployment / Business pilot phase. I had 
a user contact me yesterday telling me the update failed so I did the usual 
digging through the log files in the panther directory and I found failure 
pretty quickly. There were 4 applications listed as hard blocks in the 
compatdata.xml file as shown below. I figured easy I will just remove the 
programs and go about my day or so I thought. I started poking around on the 
users machine and I couldn’t find any of the programs Windows was complaining 
about installed, nor could I even find a file or registry key that matched 
those programs.









I started digging deeper and found another log file in the panther directory 
called 2kP-xumRk0W++Fnb.3.8.0.0_APPRAISER_HumanReadable.xml that had some 
additional information in it like where the program that was being blocked was 
located. So it turn out all of the programs that Windows was finding and 
causing the 1709 upgrade block are files buried out on a network drive that 
everyone in the company has mapped? Why would the compat scan search mapped 
network drives for program compatibility, this can’t be the expected behavior 
can it?

















Here is the command line that my OS upgrade TS runs –

Command line of Windows Setup upgrade: '"C:\windows\ccmcache\18\SETUP.EXE" 
/ImageIndex 3 /auto Upgrade /quiet /noreboot /postoobe 
"C:\windows\SMSTSPostUpgrade\SetupComplete.cmd" /postrollback 
"C:\windows\SMSTSPostUpgrade\SetupRollback.cmd" /DynamicUpdate Disable /compat 
IgnoreWarning  /compat ScanOnly


Here is what I get when I run the setup.exe manually from the ccmcache 
directory.

[cid:image001.png@01D396BA.F2E677B0]

[mssms] 1709 Compat Scan

[Enley, Carl]

So we are moving along pretty good with our W10 1607 > 1709 upgrade via SCCM 
task sequence, mostly still in the IT deployment / Business pilot phase. I had 
a user contact me yesterday telling me the update failed so I did the usual 
digging through the log files in the panther directory and I found failure 
pretty quickly. There were 4 applications listed as hard blocks in the 
compatdata.xml file as shown below. I figured easy I will just remove the 
programs and go about my day or so I thought. I started poking around on the 
users machine and I couldn't find any of the programs Windows was complaining 
about installed, nor could I even find a file or registry key that matched 
those programs.









I started digging deeper and found another log file in the panther directory 
called 2kP-xumRk0W++Fnb.3.8.0.0_APPRAISER_HumanReadable.xml that had some 
additional information in it like where the program that was being blocked was 
located. So it turn out all of the programs that Windows was finding and 
causing the 1709 upgrade block are files buried out on a network drive that 
everyone in the company has mapped? Why would the compat scan search mapped 
network drives for program compatibility, this can't be the expected behavior 
can it?

















Here is the command line that my OS upgrade TS runs -

Command line of Windows Setup upgrade: '"C:\windows\ccmcache\18\SETUP.EXE" 
/ImageIndex 3 /auto Upgrade /quiet /noreboot /postoobe 
"C:\windows\SMSTSPostUpgrade\SetupComplete.cmd" /postrollback 
"C:\windows\SMSTSPostUpgrade\SetupRollback.cmd" /DynamicUpdate Disable /compat 
IgnoreWarning  /compat ScanOnly


Here is what I get when I run the setup.exe manually from the ccmcache 
directory.

[cid:image001.png@01D39680.65CDE910]

[mssms] RE: 1709 Issues

[Enley, Carl]

Thanks for the reply. I have been working the issues with the MS support team. 
I have been told that my issue related to Outlook search as well as the Excel 
error when sending to email is a bug in the 1709 Fall Creators update. It 
appears the Windows upgrade is removing Office registry keys, he could not 
provide any further information than that as the information is very new and 
nothing has been officially confirmed as of yet.

I was told the issue was not present in the 1703 build, because we got such a 
late start we decided to go to 1709 instead of 1703...maybe we should re-think 
our decision.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of ODONNELL Aaron M
Sent: Friday, January 19, 2018 4:54 PM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: 1709 Issues

We've seen both those two issues in our 1709 testing as well, and both those 
fixes worked for us in most cases. A few computers are still having the outlook 
search issue even after a repair + cleaning up the OSTs and creating a new 
Outlook profile. We haven't gotten very far in pursuing it since 1709 is still 
in testing and we are still working through a host of 1703 upgrade issues that 
have a much bigger priority.


Thanks,

Aaron O'Donnell

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Enley, Carl
Sent: Friday, January 19, 2018 5:53 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] 1709 Issues

We are currently starting to pilot the 1709 update to our users and have 
started to notice a few issues, I am curious if anyone else is seeing the same 
problems we are.

We are using 1709 Enterprise and SCCM 1706 task sequence to deploy, we have 
Office 2016 .msi version installed.

1 - After upgrading to 1709 our users are having search issues with Outlook 
2016, very similar to the issues last June when the security patch broke the 
search function. Basically when they search they have a message saying 
"Something went wrong and your search couldn't be completed", results are 
retuned but they appear to be missing some items. I was able to fix the issue 
by deleting the users .OST file and performing an Office repair, neither one by 
itself would fix the issue. This is really not a great solution as our users 
have pretty large .OST files and some of them are connected via slow WAN links.

Seems I may not be alone -
https://social.technet.microsoft.com/Forums/ie/en-US/c9673cdc-0fa9-4126-9acc-b9ec4ae3/after-windows-10-fall-update-1709-outlook-search-error?forum=outlook

2 - After upgrading to 1709 when a user is in Excel 2016 and they use the File 
> Share > Email to send the workbook via email they receive the following error 
"  General mail failure. Quit Excel, restart the mail system and try again". 
The only way to fic this is to delete the MAPI32.DLL file from C:\Program Files 
(x86)\Common Files\system\MSMAPI\1033\ directory.

Again it doesn't look like I am alone -
https://social.technet.microsoft.com/Forums/office/en-US/4ca08c76-5252-40a2-88bb-dd430d637c2b/general-mail-failure-quit-microsoft-excel-restart-the-mail-system-and-try-again?forum=Office2016ITPro

https://answers.microsoft.com/en-us/windows/forum/windows_10-windows_install/creator-update-excel-2016-general-mail-failure/07c820b6-3f5c-4a2d-bc2c-a051ec1effbf?auth=1

3 - My last issue is more of a product issue / feature request. While 
performing the 1709 upgrade over a VPN when the first reboot occurs the client 
loses contact with the MGT point, the task sequence continues to run and 
because I have the content downloaded before running the install succeeds and 
life is good. The problem with this is that the client does not queue up the 
status messages to be sent upon next connection to the network so our reporting 
is not reliable, we have no idea if the user is up to date via the monitoring 
tab...it gets messy as the systems stay in the "In progress" state.

I guess in an ideal world every user would be in an office somewhere connected 
to the corporate LAN while performing the feature updates but that is just not 
feasible in our environment as we have many road warriors and sales folks. I 
suppose some type of cloud / DMZ / IBCM type solution would help the situation 
but ideally I would expect the status messages to remain client side until the 
next time it connects to the MGT point and then send them up. Does anyone know 
of a script or something that could be run to re-send the task sequence status 
messages?

*Rant on/ - I have premiere support so I opened a ticket regarding the issues I 
am having, still waiting on response from MS but what I find ridiculous is that 
I have to open up 3 different tickets. So rather than working with one support 
rep I now have to mage 3 different support reps wanting to setup time to 
trouble shoot etc...all of

[mssms] 1709 Issues

[Enley, Carl]

We are currently starting to pilot the 1709 update to our users and have 
started to notice a few issues, I am curious if anyone else is seeing the same 
problems we are.

We are using 1709 Enterprise and SCCM 1706 task sequence to deploy, we have 
Office 2016 .msi version installed.

1 - After upgrading to 1709 our users are having search issues with Outlook 
2016, very similar to the issues last June when the security patch broke the 
search function. Basically when they search they have a message saying 
"Something went wrong and your search couldn't be completed", results are 
retuned but they appear to be missing some items. I was able to fix the issue 
by deleting the users .OST file and performing an Office repair, neither one by 
itself would fix the issue. This is really not a great solution as our users 
have pretty large .OST files and some of them are connected via slow WAN links.

Seems I may not be alone -
https://social.technet.microsoft.com/Forums/ie/en-US/c9673cdc-0fa9-4126-9acc-b9ec4ae3/after-windows-10-fall-update-1709-outlook-search-error?forum=outlook

2 - After upgrading to 1709 when a user is in Excel 2016 and they use the File 
> Share > Email to send the workbook via email they receive the following error 
"  General mail failure. Quit Excel, restart the mail system and try again". 
The only way to fic this is to delete the MAPI32.DLL file from C:\Program Files 
(x86)\Common Files\system\MSMAPI\1033\ directory.

Again it doesn't look like I am alone -
https://social.technet.microsoft.com/Forums/office/en-US/4ca08c76-5252-40a2-88bb-dd430d637c2b/general-mail-failure-quit-microsoft-excel-restart-the-mail-system-and-try-again?forum=Office2016ITPro

https://answers.microsoft.com/en-us/windows/forum/windows_10-windows_install/creator-update-excel-2016-general-mail-failure/07c820b6-3f5c-4a2d-bc2c-a051ec1effbf?auth=1

3 - My last issue is more of a product issue / feature request. While 
performing the 1709 upgrade over a VPN when the first reboot occurs the client 
loses contact with the MGT point, the task sequence continues to run and 
because I have the content downloaded before running the install succeeds and 
life is good. The problem with this is that the client does not queue up the 
status messages to be sent upon next connection to the network so our reporting 
is not reliable, we have no idea if the user is up to date via the monitoring 
tab...it gets messy as the systems stay in the "In progress" state.

I guess in an ideal world every user would be in an office somewhere connected 
to the corporate LAN while performing the feature updates but that is just not 
feasible in our environment as we have many road warriors and sales folks. I 
suppose some type of cloud / DMZ / IBCM type solution would help the situation 
but ideally I would expect the status messages to remain client side until the 
next time it connects to the MGT point and then send them up. Does anyone know 
of a script or something that could be run to re-send the task sequence status 
messages?

*Rant on/ - I have premiere support so I opened a ticket regarding the issues I 
am having, still waiting on response from MS but what I find ridiculous is that 
I have to open up 3 different tickets. So rather than working with one support 
rep I now have to mage 3 different support reps wanting to setup time to 
trouble shoot etc...all of the issues were caused by a simple 1709 feature 
update,  there should be someone who can take the lead and get the right people 
in the loop to help, why should I have to open and manage 3 different support 
cases because they broke core functionality in the product with the upgrade. I 
guess I understand the VPN status message thing should be a separate ticket but 
come on Office is Office and whether it is Outlook or Excel you would think the 
same guy could help me. *Rant off/

RE: [mssms] Upgrading Config Mgr

[Enley, Carl]

Wow - we went CM2012 to CBB 16.xx (don't remember) then to 1702 > 1706 > 1710 - 
never a single hiccup. Knock on wood.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of JONES, RICK J
Sent: Friday, December 15, 2017 9:38 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Upgrading Config Mgr

I am hopeful that 1710 will be the one for us to be mostly painless, right now 
we are in no touchy time of the year as I'm sure many are, high sales time...
First of the year though 1710 here we come!

Rick J. Jones
Wireless from AT
Domestic Desktop Application Management
(206) 419-1104


 Original message 
From: "Heaton, Joseph@Wildlife" 
>
Date: 12/15/17 6:02 PM (GMT-08:00)
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Upgrading Config Mgr

Well, then I thank you for paving the way to our ease of upgrades :)



From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of JONES, RICK J
Sent: Friday, December 15, 2017 2:12 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Upgrading Config Mgr

It's been a running joke with our PFE, I emphatically require him to be 
available as it will FAIL.  Oh.. no, it will be better this time Ring, 
Ring... it failed...

The last time we upgraded to 1706 the PFE setup some of the product engineers 
to be present, so I went to MS building, sat in a conference room with my 
screen projected on the wall as I kicked off the process that I knew would 
fail...
The Product engineers were called into the room several times as it puked many 
steps through the process... and hmmm FAIL... uh... most of that upgrade was 
done by the Product Engineers...

I believe in 1710 there are several enhancements as a result of their hands on 
experience with the pain that they were forced to experience in that conference 
room.

Rick J. Jones
Wireless from AT
Domestic Desktop Application Management
(206) 419-1104

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Sherry Kissinger
Sent: Friday, December 15, 2017 12:54 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Upgrading Config Mgr

Wow.  We've had glitches or bumps in the road--but nothing ever earth 
shattering.  and I think only for paranoia (turned out we didn't need them 
anyway) we had our PFEs available when we upgraded from cm12 to current branch. 
 Otherwise... nothing where the system was "down" or "unusable" during or after 
an upgrade.

We do of course have to do pre-announced change windows, when the system will 
be down for upgrading, with a detailed checklist and step-by-step checks to 
confirm all is well post-upgrade.  and yes, that Change does have to be 
approved by the-powers-that-be.  We just did 1706 to 1710 2 weeks ago (the 
infrastructure, not all clients immediately) we were done in 9 hours.  It would 
have only taken 7.5 hrs... but again--some external thing we didn't know to 
block was locking something the upgrade wanted to have exclusive rights to.  
had to find and kill it.  (we now have a step in our checklist to explicitly 
look for and kill if found during upgrades)

That included the CAS, Primary Sites, all the other role servers (MP/DP/SUPs 
etc), and a preventative reboot before... and a "we might as well" reboot after 
on all the infrastructure servers, just in case one was needed.  We'd rather 
reboot on a Saturday than figure out a reboot is needed mid-day Monday.  Also 
included updating to the latest ADK, and the console instances hosted on Citrix.

On Fri, Dec 15, 2017 at 2:24 PM, JONES, RICK J 
> wrote:
Just for those that think there is no big deal to this...
EVERY SINGLE UPDATE we have done has failed in some way even back to SCCM 2007. 
 EVERY SINGLE ONE.
EVERY SINGLE time we have had to bring Microsoft in to fix the problem.  EVERY 
SINGLE TIME.

Rick J. Jones
Wireless from AT
Domestic Desktop Application Management
(206) 419-1104

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] 
On Behalf Of Marable, Mike
Sent: Friday, December 15, 2017 4:12 AM

To: mssms@lists.myitforum.com
Subject: RE: [mssms] Upgrading Config Mgr

Same here.  We would never be able to just click "go" without a vetted plan in 
place and change management involved.  With 35K clients we are by no means a 
large organization, but if something were to go sideways in the upgrade and we 
skipped the planning and control, there wouldn't be enough time to update 
resumes once they came for us.

On top of that there are 

[mssms] RE: Servers Reporting False Patching Compliance

[Enley, Carl]

I have run into this with workstations before, I run the following POSH script 
and it seems to clear it up -  give it a try on one box and see what happens.

(New-Object -ComObject 
Microsoft.CCM.UpdatesStore).RefreshServerComplianceState()



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Chris Carbone
Sent: Thursday, November 30, 2017 10:41 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Servers Reporting False Patching Compliance

Hello All,

As we start to leverage SCCM more and more for patching servers I am starting 
to manually go through and see that a number of servers are reporting back 
compliant but do not have patches in the SUG installed. I keep finding more and 
more servers like this. Right now it seems to be mostly 2012 servers. I also 
find some servers where I have another weird issue that some of the patches in 
my 2012 SUG applied but most of them have not yet these servers reported back 
compliant.

The biggest consistent I am finding when looking through the logs is errors in 
the cbs.log like this.

2017-11-30 10:14:11, Info  CBSSQM: Failed to start upload 
with file pattern: C:\Windows\servicing\sqm\*_std.sqm, flags: 0x2 [HRESULT = 
0x80004005 - E_FAIL]
2017-11-30 10:14:11, Info  CBSSQM: Failed to start standard 
sample upload. [HRESULT = 0x80004005 - E_FAIL]
2017-11-30 10:14:11, Info  CBSSQM: Warning: Failed to 
upload all unsent reports. [HRESULT = 0x80004005 - E_FAIL]

Or these.

2017-11-29 11:06:36, Info  CBSDWLD: Failed to begin WU 
search [HRESULT = 0x8024500c - Unknown Error]
2017-11-29 11:06:36, Info  CBSFailed to search Windows 
update [HRESULT = 0x800f0906 - CBS_E_DOWNLOAD_FAILURE]
2017-11-29 11:06:36, Info  CBSFailed to enumerate cloud 
capabilities [HRESULT = 0x800f0906 - CBS_E_DOWNLOAD_FAILURE]

The WUAHandler, UpdatesDeployment, ScanAgent logs are not coming back with 
anything that stands out.

I have tried the typical steps of resetting windows update components, sfc 
/scannow, dism cleanup options both manually and using the Reset Windows Update 
Tool. I tried installing the latest windows update agent but received the 
message this is not applicable to your system which is strange. The WSUS 
environment has been completely rebuilt using Server 2016 and redoing the DB in 
SQL so everything is new.

Is there a way to reset the reporting these servers are sending to the SCCM 
server? I tried using right click tools and the option, "Send Unsent State 
Messages" and "State Message Cache Cleanup" but that doesn't seem to change 
what is reported back.

Thanks!
Chris




This electronic mail transmission may contain confidential information intended 
only for the use of the individual(s) identified as addressee(s). If you are 
not the intended recipient, you are hereby notified that any disclosure, 
copying, distribution or the taking of any action in reliance on the contents 
of this electronic mail transmission is strictly prohibited. If you have 
received this transmission in error, please notify me by telephone immediately.

RE: [mssms] Configuration Manager 1710

[Enley, Carl]

In the comments section of the release notes there is a link to the POSH script 
that enables the fast ring –

https://docs.microsoft.com/en-us/sccm/core/plan-design/changes/whats-new-in-version-1710

https://gallery.technet.microsoft.com/ConfigMgr-1710-Enable-1313c6d2



From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of David Jones
Sent: Wednesday, November 29, 2017 7:47 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Configuration Manager 1710

Does anyone see 1710 yet in Updates and Servicing? We want to update by the end 
of the year but have to go through a lot of management hoops first so time is 
somewhat short. If it is not in Updates and Servicing, How else can we get it? 
In AU downloads, we only see 1702.

[mssms] RE: June 27, 2017—KB4022168 (Preview of Monthly Rollup)

[Enley, Carl]

So can I assume from the lack of replies that nobody knows if the fixes for 
Outlook search and IE11 frame printing issues will be fixed in next month’s 
security only update? Or do I have to deploy the quality update to get the 
fixes?

From: Enley, Carl
Sent: Friday, June 30, 2017 10:41 AM
To: 'mssms@lists.myITforum.com' <mssms@lists.myitforum.com>
Subject: RE: June 27, 2017—KB4022168 (Preview of Monthly Rollup)

We are definitely not deploying the preview, we are dealing with workarounds 
(new tab, chrome) or for the search it appears our users can use advanced find 
or OWA to get by.

My biggest question that I have not had answered yet is if the fixes will be 
rolled into the security only update next month or will they only be available 
in the quality update? We currently only deploy the security only package and I 
am concerned what may break if I have to install the quality update to get this 
fix.

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Jimmy Martin
Sent: Friday, June 30, 2017 10:27 AM
To: 'mssms@lists.myITforum.com' 
<mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>
Subject: [mssms] June 27, 2017—KB4022168 (Preview of Monthly Rollup)


so...  those of you who patched earlier this month and were bitten, are you 
turning around and immediately deploying this update to fix?

June 27, 2017—KB4022168 (Preview of Monthly 
Rollup)<https://support.microsoft.com/en-us/help/4022168/windows-7-sp1-windows-server-2008-r2-sp1-update-kb4022168>

I am wondering what others are doing since this is a preview and I don't send 
previews out to everyone.  Is the cure worse than the illness??? :-)





Jimmy Martin | Information Systems |  | BMHCC - CORPORATE
Phone: (901) 227-8209 | jimmy.mar...@bmhcc.org<mailto:jimmy.mar...@bmhcc.org>
Opinions expressed above are not necessarily those of Baptist.

This message and any files transmitted with it may contain legally privileged, 
confidential, or proprietary information. If you are not the intended recipient 
of this message, you are not permitted to use, copy, or forward it, in whole or 
in part without the express consent of the sender. Please notify the sender of 
the error by reply email, disregard the foregoing messages, and delete it 
immediately.


P Please consider the environment before printing this email...

[mssms] RE: June 27, 2017—KB4022168 (Preview of Monthly Rollup)

[Enley, Carl]

We are definitely not deploying the preview, we are dealing with workarounds 
(new tab, chrome) or for the search it appears our users can use advanced find 
or OWA to get by.

My biggest question that I have not had answered yet is if the fixes will be 
rolled into the security only update next month or will they only be available 
in the quality update? We currently only deploy the security only package and I 
am concerned what may break if I have to install the quality update to get this 
fix.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Jimmy Martin
Sent: Friday, June 30, 2017 10:27 AM
To: 'mssms@lists.myITforum.com' 
Subject: [mssms] June 27, 2017—KB4022168 (Preview of Monthly Rollup)


so...  those of you who patched earlier this month and were bitten, are you 
turning around and immediately deploying this update to fix?

June 27, 2017—KB4022168 (Preview of Monthly 
Rollup)

I am wondering what others are doing since this is a preview and I don't send 
previews out to everyone.  Is the cure worse than the illness??? :-)





Jimmy Martin | Information Systems |  | BMHCC - CORPORATE
Phone: (901) 227-8209 | jimmy.mar...@bmhcc.org
Opinions expressed above are not necessarily those of Baptist.

This message and any files transmitted with it may contain legally privileged, 
confidential, or proprietary information. If you are not the intended recipient 
of this message, you are not permitted to use, copy, or forward it, in whole or 
in part without the express consent of the sender. Please notify the sender of 
the error by reply email, disregard the foregoing messages, and delete it 
immediately.


P Please consider the environment before printing this email...

[mssms] RE: Delta Download Startup Issues

[Enley, Carl]

Let me know what happens when you disable it. I disabled mine and then 
performed a full sync thinking it would reduce the package size back to 
pre-express updates but it did not. I was actually going to ask the question to 
this group or reddit/sccm to try and understand how I get back to my normal 
package size.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Beardsley, James
Sent: Thursday, June 22, 2017 12:13 PM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Delta Download Startup Issues

That’s unfortunate to hear. So you think I should just turn off this setting 
until future notice? Like Carl said, my package sizes jumped up to about 25GB 
per month so if those express updates aren’t being used properly, I’ll disable 
it.

We’re on client version 5.00.8498.1008. I do not have the 1702 Hotfix Rollup 
installed yet.

[cid:image002.png@01D2EB50.C27F0120]

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Phil Wilcock
Sent: Thursday, June 22, 2017 10:15 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Delta Download Startup Issues

Yep, don’t bother just yet. We’re informed that there are significant 
improvements arriving in 1706. And it is Friday tomorrow 

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Enley, Carl
Sent: 22 June 2017 14:56
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Delta Download Startup Issues

IMHO Express files in SCCM are not ready for primetime at this point, I 
wouldn’t bother. It literally takes 4 hours to download the W10 cumulative with 
Express updates enabled. My patch package grew from 13GB to nearly 44GB in size.

With that said I assume you are on the latest 1703 client ? 5.00.8498.xxx ?

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Beardsley, James
Sent: Thursday, June 22, 2017 9:23 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Delta Download Startup Issues

I’m having trouble implementing express updates for some reason. The “task” is 
not starting on any of my machines. Anyone have a solution to this?

This 
post<https://social.technet.microsoft.com/Forums/windows/en-US/ea82257f-5016-4ef5-9f58-e3cbfb4c4a40/express-updates-port?forum=ConfigMgrCompliance>
 on TechNet forums indicates that the machine must have the April 2017 patches 
installed. This particular machine where I took this screenshot has all of the 
latest cumulative updates installed already so I don’t know what update I could 
be missing.

[cid:image003.png@01D2EB50.C27F0120]



Confidentiality Notice: This e-mail is intended only for the addressee named 
above. It contains information that is privileged, confidential or otherwise 
protected from use and disclosure. If you are not the intended recipient, you 
are hereby notified that any review, disclosure, copying, or dissemination of 
this transmission, or taking of any action in reliance on its contents, or 
other use is strictly prohibited. If you have received this transmission in 
error, please reply to the sender listed above immediately and permanently 
delete this message from your inbox. Thank you for your cooperation.





Confidentiality Notice: This e-mail is intended only for the addressee named 
above. It contains information that is privileged, confidential or otherwise 
protected from use and disclosure. If you are not the intended recipient, you 
are hereby notified that any review, disclosure, copying, or dissemination of 
this transmission, or taking of any action in reliance on its contents, or 
other use is strictly prohibited. If you have received this transmission in 
error, please reply to the sender listed above immediately and permanently 
delete this message from your inbox. Thank you for your cooperation.

[mssms] RE: Delta Download Startup Issues

[Enley, Carl]

IMHO Express files in SCCM are not ready for primetime at this point, I 
wouldn't bother. It literally takes 4 hours to download the W10 cumulative with 
Express updates enabled. My patch package grew from 13GB to nearly 44GB in size.

With that said I assume you are on the latest 1703 client ? 5.00.8498.xxx ?

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Beardsley, James
Sent: Thursday, June 22, 2017 9:23 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Delta Download Startup Issues

I'm having trouble implementing express updates for some reason. The "task" is 
not starting on any of my machines. Anyone have a solution to this?

This 
post
 on TechNet forums indicates that the machine must have the April 2017 patches 
installed. This particular machine where I took this screenshot has all of the 
latest cumulative updates installed already so I don't know what update I could 
be missing.

[cid:image001.png@01D2EB3D.BE29D270]



Confidentiality Notice: This e-mail is intended only for the addressee named 
above. It contains information that is privileged, confidential or otherwise 
protected from use and disclosure. If you are not the intended recipient, you 
are hereby notified that any review, disclosure, copying, or dissemination of 
this transmission, or taking of any action in reliance on its contents, or 
other use is strictly prohibited. If you have received this transmission in 
error, please reply to the sender listed above immediately and permanently 
delete this message from your inbox. Thank you for your cooperation.

[mssms] RE: SW Updates on computers with McAfee Drive Encryption

[Enley, Carl]

So I don't use it for patching but I do use it in my OS upgrade task sequences. 
The 3rd party disk encryption has been our biggest headache with the OS 
upgrades...luckily McAfee has provided some tools so that we can inject drivers 
and disable pre boot authentication until the task sequence is finished. The 
autoboot utility works very well as we are using it, disable pre boot in the 
beginning and the last step is to re enable pre boot.

If you figure out a way to do it with patching I would be very interested.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Melin, Cordell (BAC/LAC)
Sent: Wednesday, June 14, 2017 1:59 PM
To: mssms@lists.myitforum.com
Subject: [mssms] SW Updates on computers with McAfee Drive Encryption

Does anyone use EpeTemporaryAutoboot.exe in conjunction with monthly patching 
on devices with McAfee Drive Encryption?

This is an admin tool from McAfee to allow devices to bypass the manual 
pre-boot login.

I am wondering what method you might be using to put the device into autoboot 
prior to the SW Updates Deployment and setting it back after.

Cordell Melin

RE: [mssms] RE: Query assistance

[Enley, Carl]

Thanks James, this works as expected.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Beardsley, James
Sent: Wednesday, May 24, 2017 4:30 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: Query assistance

Try this. Down in the WHERE clause, you’ll see the Select Name from 
_RES_COLL_SMS1, change the SMS1 to the collection ID of the machine 
collection you’re trying to limit to.

SELECT distinct
   sys.Name0,
   UniqueUserName,
   Case
 When isnull(USR.Mail0, 'n/a') = 'n/a' then 'n/a'
 when USR.Mail0 = '' then 'n/a'
 else
 USR.Mail0
   End as 'Email',
   OS.Caption0,
   OS.BuildNumber0

FROM
   v_R_System sys

INNER JOIN
   dbo.UserMachineRelation pc ON pc.MachineResourceID = sys.ResourceID
Join   v_R_User USR on SUBSTRING(pc.UniqueUserName, CHARINDEX('\', 
pc.UniqueUserName) + 1, LEN(pc.UniqueUserName)) = USR.User_Name0
JOIN   v_GS_OPERATING_SYSTEM OS on sys.ResourceID = OS.ResourceID

WHERE  OS.Caption0 like 'Microsoft Windows % Enterprise'
   and sys.Name0 in (select Name from _RES_COLL_SMS1)
ORDER BY
   sys.Name0, UniqueUserName




From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Enley, Carl
Sent: Wednesday, May 24, 2017 12:42 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] RE: Query assistance

Okay thanks for the replies.

Let me re-phrase my question… Can anyone assist me with writing a Query from 
within the Config Mgr console that would be able to look at a collection of 
*machines* and from that output the computer name, primary user and mail0 
attribute? I can use the built in prompt for collection from within the query 
window.

Thanks


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Ed Aldrich
Sent: Wednesday, May 24, 2017 12:11 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] RE: Query assistance

…which means one cannot simply copy a SQL query and paste into collection query 
properties as that is expecting a WQL query syntax


[Ed]
Mobile: (401) 924-2293
[Description: Description: cid:image011.png@01CAD56A.EFDE3F90] Ent Cli Mgmt 
(2003-2016)

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Erik Wold
Sent: Wednesday, May 24, 2017 11:29 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>; 
mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: Re: [mssms] RE: Query assistance

Also configmgr uses wql, slightly dfifferent than sql.

Mvh
Erik
_
From: Collin Murphy 
<collinrmur...@hotmail.com<mailto:collinrmur...@hotmail.com>>
Sent: onsdag, mai 24, 2017 4:49 pm
Subject: [mssms] RE: Query assistance
To: <mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>




If you copied and pasted sometimes the apostrophe get messed up.  Try deleting 
and adding them manually.  I apologize if you have tried that before.

Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows 10

From: Enley, Carl<mailto:cen...@arifleet.com>
Sent: Wednesday, May 24, 2017 8:43 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Query assistance

Thanks, excuse my ignorance but if I run the query directly in SQL manager I 
get accurate results. If I try to create a new query from the config mgr 
console I get a syntax is not correct error, am I missing something? I will be 
the first to admit that reporting and SQL are not my strong points. Also is it 
possible to list the users primary device in the results output?


[cid:image002.png@01D2D468.E5A24530]


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com]On Behalf Of Garth Jones
Sent: Wednesday, May 24, 2017 8:19 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Query assistance

The query will get you stated.


Select
   U.Full_User_Name0,
  Case
Whenisnull(U.Mail0,'n/a')='n/a'then'n/a'
when U.Mail0=''then'n/a'
else
 U.Mail0
  Endas'Email'
from
   dbo.v_R_User U


Take this query and build upon it, if you get stuck post what you have here 
with a short description of the problem you are having.



Garth Jones
Chief Architect

www.Enhansoft.com<http://www.enhansoft.com/>
[Description: Description: 
cid:image001.jpg@01CC63FB.974F4EC0]<http://www.enhansoft.com/>
Enhancing Your Business
[Description: Description: Description: Description: Description: Description: 
Description: 
cid:image004.png@01CD5E19.F3C3A110]&

[mssms] RE: Query assistance

[Enley, Carl]

Thank you Garth, sorry I could not make it to Ontario. :) Won't be at IT/DEV 
either but I did find out they are sending us to Ignite...presenting there? :)

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Garth Jones
Sent: Thursday, May 25, 2017 8:32 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Query assistance

Here is the query that get you the details you are looking for.

SELECT distinct
   RV.Netbios_Name0 as 'Computer',
   SCUM.TopConsoleUser0 as 'UserId',
   USR.Full_User_Name0 as 'User Name',
   Case
 When isnull(USR.Mail0, 'n/a') = 'n/a' then 'n/a'
 when USR.Mail0 = '' then 'n/a'
 else USR.Mail0
   End as 'Email'
FROM
   dbo.v_R_System_Valid RV
   join dbo.v_GS_SYSTEM_CONSOLE_USAGE_MAXGROUP SCUM on RV.ResourceID = 
SCUM.ResourceID
   join dbo.v_R_User USR on SCUM.TopConsoleUser0 = USR.Unique_User_Name0
Order by
   RV.Netbios_Name0,
   SCUM.TopConsoleUser0







Garth Jones
Chief Architect

www.Enhansoft.com<http://www.enhansoft.com/>
[Description: Description: 
cid:image001.jpg@01CC63FB.974F4EC0]<http://www.enhansoft.com/>
Enhancing Your Business
[Description: Description: Description: Description: Description: Description: 
Description: 
cid:image004.png@01CD5E19.F3C3A110]<http://www.enhansoft.com/blog>[Description: 
Description: Description: Description: Description: Description: Description: 
cid:image005.png@01CD5E19.F3C3A110]<https://twitter.com/enhansoft>[Description: 
Description: Description: Description: Description: Description: Description: 
cid:image006.jpg@01CD5E19.F3C3A110]<http://www.facebook.com/EnhansoftInc>[Description:
 Description: Description: Description: Description: Description: Description: 
Description: Description: Description: Description: Description: Description: 
Description: Description: Enhansoft's YouTube 
Page]<http://www.youtube.com/user/Enhansoft/videos>[Description: Description: 
Description: Description: Description: Description: Description: 
cid:image007.png@01CD5E19.F3C3A110]<http://myitforum.com/myitforumwp/community/groups/enhansoft/>

Subscribe to Enhansoft's Newsletter!<http://www.enhansoft.com/register>

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Garth Jones
Sent: Wednesday, May 24, 2017 3:51 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Query assistance


This sender failed our fraud detection checks and may not be who they appear to 
be. Learn about spoofing<http://aka.ms/LearnAboutSpoofing>

Feedback<http://aka.ms/SafetyTipsFeedback>

If you are in Ottawa, Ontario, I'm presenting on this topic starting at 6pm 
(aka 130 minutes from now) at the Microsoft office. :)

Otherwise, I will try to write this up tomorrow when I get back into the office 
tomorrow.

 Or/and you can see me at IT/Dev Connections in 
October, I'm doing two session there on ConfigMgr, SQL and Reporting.
http://devconnections.com/dc17/Public/SpeakerDetails.aspx?FromPage=Speakers.aspx=1136210

If you come to IT/Dev, let me know and I will get you a signed napkin from the 
famous but elusive Rod Trent!




Garth Jones
Chief Architect

www.Enhansoft.com<http://www.enhansoft.com/>
[Description: Description: 
cid:image001.jpg@01CC63FB.974F4EC0]<http://www.enhansoft.com/>
Enhancing Your Business
[Description: Description: Description: Description: Description: Description: 
Description: 
cid:image004.png@01CD5E19.F3C3A110]<http://www.enhansoft.com/blog>[Description: 
Description: Description: Description: Description: Description: Description: 
cid:image005.png@01CD5E19.F3C3A110]<https://twitter.com/enhansoft>[Description: 
Description: Description: Description: Description: Description: Description: 
cid:image006.jpg@01CD5E19.F3C3A110]<http://www.facebook.com/EnhansoftInc>[Description:
 Description: Description: Description: Description: Description: Description: 
Description: Description: Description: Description: Description: Description: 
Description: Description: Enhansoft's YouTube 
Page]<http://www.youtube.com/user/Enhansoft/videos>[Description: Description: 
Description: Description: Description: Description: Description: 
cid:image007.png@01CD5E19.F3C3A110]<http://myitforum.com/myitforumwp/community/groups/enhansoft/>

Subscribe to Enhansoft's Newsletter!<http://www.enhansoft.com/register>

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Enley, Carl
Sent: Wednesday, May 24, 2017 3:31 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Query assistance

Garth thanks for taking the time to explain this to me.

I guess what I really want is a way (Sql or WQL) to select a c

[mssms] RE: Query assistance

[Enley, Carl]

Garth thanks for taking the time to explain this to me.

I guess what I really want is a way (Sql or WQL) to select a collection of 
computers and from there output the computer name, primary user assigned to 
that device and their email address. I am surprised this is not natively 
possible from within the console as it seems that it would save a bunch of 
time. I am okay with either SSMS or creating SSRS report to get this done, I 
just don't have the expertise to start from scratch.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Garth Jones
Sent: Wednesday, May 24, 2017 10:10 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Query assistance

You can't take a SQL query and use it within the CM console, they are two 
different (SQL vs WQL) languages.

What you are asking to do make a lot more sense to do in SSMS or even a SSRS 
reporting than in CM console. The CM console will be almost impossible to do 
what you want.

Yes you can get the primary user (PU) or top console user (TCU) for every 
computer, I was just giving you a starting point. There are ton of SQL examples 
on the web for both TCU and PU.

I always recommend that you start with the basic details you want for you SQL 
query then add to your query until you are happy with it. As such, What exactly 
is the most basic details that you want (ignore email and TCP/PU for now), that 
is the query you should write in SSMS. Once you have that add TCP/PU, then 
email.




Garth Jones
Chief Architect

www.Enhansoft.com<http://www.enhansoft.com/>
[Description: Description: 
cid:image001.jpg@01CC63FB.974F4EC0]<http://www.enhansoft.com/>
Enhancing Your Business
[Description: Description: Description: Description: Description: Description: 
Description: 
cid:image004.png@01CD5E19.F3C3A110]<http://www.enhansoft.com/blog>[Description: 
Description: Description: Description: Description: Description: Description: 
cid:image005.png@01CD5E19.F3C3A110]<https://twitter.com/enhansoft>[Description: 
Description: Description: Description: Description: Description: Description: 
cid:image006.jpg@01CD5E19.F3C3A110]<http://www.facebook.com/EnhansoftInc>[Description:
 Description: Description: Description: Description: Description: Description: 
Description: Description: Description: Description: Description: Description: 
Description: Description: Enhansoft's YouTube 
Page]<http://www.youtube.com/user/Enhansoft/videos>[Description: Description: 
Description: Description: Description: Description: Description: 
cid:image007.png@01CD5E19.F3C3A110]<http://myitforum.com/myitforumwp/community/groups/enhansoft/>

Subscribe to Enhansoft's Newsletter!<http://www.enhansoft.com/register>

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Enley, Carl
Sent: Wednesday, May 24, 2017 8:37 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Query assistance

Thanks, excuse my ignorance but if I run the query directly in SQL manager I 
get accurate results. If I try to create a new query from the config mgr 
console I get a syntax is not correct error, am I missing something? I will be 
the first to admit that reporting and SQL are not my strong points. Also is it 
possible to list the users primary device in the results output?


[cid:image012.jpg@01D2D475.F1EF]


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Garth Jones
Sent: Wednesday, May 24, 2017 8:19 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Query assistance

The query will get you stated.


Select
   U.Full_User_Name0,
   Case
 When isnull(U.Mail0, 'n/a') = 'n/a' then 'n/a'
 when U.Mail0 = '' then 'n/a'
 else
 U.Mail0
   End as 'Email'
from
   dbo.v_R_User U


Take this query and build upon it, if you get stuck post what you have here 
with a short description of the problem you are having.



Garth Jones
Chief Architect

www.Enhansoft.com<http://www.enhansoft.com/>
[Description: Description: 
cid:image001.jpg@01CC63FB.974F4EC0]<http://www.enhansoft.com/>
Enhancing Your Business
[Description: Description: Description: Description: Description: Description: 
Description: 
cid:image004.png@01CD5E19.F3C3A110]<http://www.enhansoft.com/blog>[Description: 
Description: Description: Description: Description: Description: Description: 
cid:image005.png@01CD5E19.F3C3A110]<https://twitter.com/enhansoft>[Description: 
Description: Description: Description: Description: Description: Description: 
cid:image006.jpg@01CD5E19.F3C3A110]<http://www.facebook.com/EnhansoftInc>[Description:
 Description: Description: Description: Description: Description: Description: 
Description: D

RE: [mssms] RE: Query assistance

[Enley, Carl]

Okay thanks for the replies.

Let me re-phrase my question… Can anyone assist me with writing a Query from 
within the Config Mgr console that would be able to look at a collection of 
*machines* and from that output the computer name, primary user and mail0 
attribute? I can use the built in prompt for collection from within the query 
window.

Thanks


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Ed Aldrich
Sent: Wednesday, May 24, 2017 12:11 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: Query assistance

…which means one cannot simply copy a SQL query and paste into collection query 
properties as that is expecting a WQL query syntax


[Ed]
Mobile: (401) 924-2293
[Description: Description: cid:image011.png@01CAD56A.EFDE3F90] Ent Cli Mgmt 
(2003-2016)

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Erik Wold
Sent: Wednesday, May 24, 2017 11:29 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>; 
mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: Re: [mssms] RE: Query assistance

Also configmgr uses wql, slightly dfifferent than sql.

Mvh
Erik
_
From: Collin Murphy 
<collinrmur...@hotmail.com<mailto:collinrmur...@hotmail.com>>
Sent: onsdag, mai 24, 2017 4:49 pm
Subject: [mssms] RE: Query assistance
To: <mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>>




If you copied and pasted sometimes the apostrophe get messed up.  Try deleting 
and adding them manually.  I apologize if you have tried that before.

Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows 10

From: Enley, Carl<mailto:cen...@arifleet.com>
Sent: Wednesday, May 24, 2017 8:43 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Query assistance

Thanks, excuse my ignorance but if I run the query directly in SQL manager I 
get accurate results. If I try to create a new query from the config mgr 
console I get a syntax is not correct error, am I missing something? I will be 
the first to admit that reporting and SQL are not my strong points. Also is it 
possible to list the users primary device in the results output?


[cid:image002.png@01D2D468.E5A24530]


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com]On Behalf Of Garth Jones
Sent: Wednesday, May 24, 2017 8:19 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Query assistance

The query will get you stated.


Select
   U.Full_User_Name0,
  Case
Whenisnull(U.Mail0,'n/a')='n/a'then'n/a'
when U.Mail0=''then'n/a'
else
 U.Mail0
  Endas'Email'
from
   dbo.v_R_User U


Take this query and build upon it, if you get stuck post what you have here 
with a short description of the problem you are having.



Garth Jones
Chief Architect

www.Enhansoft.com<http://www.enhansoft.com/>
[Description: Description: 
cid:image001.jpg@01CC63FB.974F4EC0]<http://www.enhansoft.com/>
Enhancing Your Business
[Description: Description: Description: Description: Description: Description: 
Description: 
cid:image004.png@01CD5E19.F3C3A110]<http://www.enhansoft.com/blog>[Description: 
Description: Description: Description: Description: Description: Description: 
cid:image005.png@01CD5E19.F3C3A110]<https://twitter.com/enhansoft>[Description: 
Description: Description: Description: Description: Description: Description: 
cid:image006.jpg@01CD5E19.F3C3A110]<http://www.facebook.com/EnhansoftInc>[Description:
 Description: Description: Description: Description: Description: Description: 
Description: Description: Description: Description: Description: Description: 
Description: Description: Enhansoft's YouTube 
Page]<http://www.youtube.com/user/Enhansoft/videos>[Description: Description: 
Description: Description: Description: Description: Description: 
cid:image007.png@01CD5E19.F3C3A110]<http://myitforum.com/myitforumwp/community/groups/enhansoft/>

Subscribe to Enhansoft’s Newsletter!<http://www.enhansoft.com/register>

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com]On Behalf Of Enley, Carl
Sent: Wednesday, May 24, 2017 8:00 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Query assistance

I need help writing a query that will allow me to pull the primary user and the 
mail0 attribute for each machine in a collection. I need to communicate with a 
group of users about an anticipated software update and it would be great if I 
could add all of the machines to a collection run a query against it to pull 
the email address for the primary device user. I c

[mssms] RE: Query assistance

[Enley, Carl]

Thanks, excuse my ignorance but if I run the query directly in SQL manager I 
get accurate results. If I try to create a new query from the config mgr 
console I get a syntax is not correct error, am I missing something? I will be 
the first to admit that reporting and SQL are not my strong points. Also is it 
possible to list the users primary device in the results output?


[cid:image002.png@01D2D468.E5A24530]


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Garth Jones
Sent: Wednesday, May 24, 2017 8:19 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Query assistance

The query will get you stated.


Select
   U.Full_User_Name0,
   Case
 When isnull(U.Mail0, 'n/a') = 'n/a' then 'n/a'
 when U.Mail0 = '' then 'n/a'
 else
 U.Mail0
   End as 'Email'
from
   dbo.v_R_User U


Take this query and build upon it, if you get stuck post what you have here 
with a short description of the problem you are having.



Garth Jones
Chief Architect

www.Enhansoft.com<http://www.enhansoft.com/>
[Description: Description: 
cid:image001.jpg@01CC63FB.974F4EC0]<http://www.enhansoft.com/>
Enhancing Your Business
[Description: Description: Description: Description: Description: Description: 
Description: 
cid:image004.png@01CD5E19.F3C3A110]<http://www.enhansoft.com/blog>[Description: 
Description: Description: Description: Description: Description: Description: 
cid:image005.png@01CD5E19.F3C3A110]<https://twitter.com/enhansoft>[Description: 
Description: Description: Description: Description: Description: Description: 
cid:image006.jpg@01CD5E19.F3C3A110]<http://www.facebook.com/EnhansoftInc>[Description:
 Description: Description: Description: Description: Description: Description: 
Description: Description: Description: Description: Description: Description: 
Description: Description: Enhansoft's YouTube 
Page]<http://www.youtube.com/user/Enhansoft/videos>[Description: Description: 
Description: Description: Description: Description: Description: 
cid:image007.png@01CD5E19.F3C3A110]<http://myitforum.com/myitforumwp/community/groups/enhansoft/>

Subscribe to Enhansoft's Newsletter!<http://www.enhansoft.com/register>

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Enley, Carl
Sent: Wednesday, May 24, 2017 8:00 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Query assistance

I need help writing a query that will allow me to pull the primary user and the 
mail0 attribute for each machine in a collection. I need to communicate with a 
group of users about an anticipated software update and it would be great if I 
could add all of the machines to a collection run a query against it to pull 
the email address for the primary device user. I could then just export the 
results and copy the email address into Outlook for the communication.

I do have the email address being discovered and UDA turned on and working, CM 
1702 if it matters.

Thanks

[mssms] Query assistance

[Enley, Carl]

I need help writing a query that will allow me to pull the primary user and the 
mail0 attribute for each machine in a collection. I need to communicate with a 
group of users about an anticipated software update and it would be great if I 
could add all of the machines to a collection run a query against it to pull 
the email address for the primary device user. I could then just export the 
results and copy the email address into Outlook for the communication.

I do have the email address being discovered and UDA turned on and working, CM 
1702 if it matters.

Thanks

[mssms] RE: 1702 Express Install Files

[Enley, Carl]

Yes thanks for the reply, I see some threads on technet as well as 
systemcenterdudes forum. I guess a lot of people are not using this feature 
yet. ☹ No response from MS yet that I can find.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Phil Wilcock
Sent: Tuesday, May 16, 2017 4:08 PM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: 1702 Express Install Files

Yep, seems to be an acknowledged issue. Seems the range requests are not quite 
right in some way which is resulting in slow downloads..
Couple of similar stories on Technet forums too so you are not alone 



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Enley, Carl
Sent: 16 May 2017 15:11
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] 1702 Express Install Files

Is anyone using this feature in SCCM 1702? I was really looking forward to 
getting this up and running after the 1702 upgrade but I am a little 
disappointed with the results I am seeing.

I understand the initial download is larger and I am okay with that, my patch 
package jumped from 13.1GB to nearly 44GB so the 2-3X size increase was pretty 
accurate. My issue is the time that it is taking to install the cumulative 
update, it is taking almost 3+ hours on my test machines. The machines are all 
W10 1607 with the latest April update applied, everything in the log files 
(deltadownload.log) indicates all is well and they are using the express files 
to install. It just takes forever to apply the update.

Is anyone else experiencing very long install times using the express install 
files? I am going to test a 1703 machine today to see if it makes any 
difference.

Thanks
Carl

[mssms] 1702 Express Install Files

[Enley, Carl]

Is anyone using this feature in SCCM 1702? I was really looking forward to 
getting this up and running after the 1702 upgrade but I am a little 
disappointed with the results I am seeing.

I understand the initial download is larger and I am okay with that, my patch 
package jumped from 13.1GB to nearly 44GB so the 2-3X size increase was pretty 
accurate. My issue is the time that it is taking to install the cumulative 
update, it is taking almost 3+ hours on my test machines. The machines are all 
W10 1607 with the latest April update applied, everything in the log files 
(deltadownload.log) indicates all is well and they are using the express files 
to install. It just takes forever to apply the update.

Is anyone else experiencing very long install times using the express install 
files? I am going to test a 1703 machine today to see if it makes any 
difference.

Thanks
Carl

[mssms] RE: 1702 - Software Center settings and notification messages for high-impact task sequences

[Enley, Carl]

Actually it was a brand new task sequence, but yes I do the same thing as you. 
I change the title slightly and then force a sync and verify that I see the 
change in software center.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Melin, Cordell (BAC/LAC)
Sent: Wednesday, May 3, 2017 9:10 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: 1702 - Software Center settings and notification messages 
for high-impact task sequences

Small thing, but could it be that your Software Center was not updated with the 
latest information on your task sequence deployment?

During testing, I usually add a number or letter to the end of the Task 
Sequence name so that when I go to the Software Center I am sure I have the 
latest changes.

Cordell

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Enley, Carl
Sent: May 3, 2017 8:46 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] 1702 - Software Center settings and notification messages for 
high-impact task sequences

I recently upgraded from 1602 > 1702 without issue. I want to take advantage of 
the new notification messages during an OS upgrade task sequence but I can't 
seem to get it to work. I also don't seem to be able to get the custom Software 
Center properties to show up for the new task sequence either.

Here are the steps I took to test this - I created a new OS Upgrade task 
sequence and I modified the User Notification tab with custom text and made 
sure the check box was in this is a high impact task sequence. I then deployed 
the task sequence to a client expecting to see the custom Software center 
properties settings as well as the custom user notification text when I kicked 
off the task sequence. Instead I saw all of the default values in Software 
Center as well as the default notification text letting my users know they were 
going to lose all of their data and settings. :)

Here are the screenshots of my task sequence settings and what I see in 
Software Center.

[cid:image001.jpg@01D2C3EF.284B76C0]  [cid:image002.jpg@01D2C3EF.284B76C0]

[cid:image003.jpg@01D2C3EF.284B76C0]   [cid:image004.png@01D2C3EF.284B76C0]



Any idea where I should start troubleshooting this issue?

[mssms] 1702 - Software Center settings and notification messages for high-impact task sequences

[Enley, Carl]

I recently upgraded from 1602 > 1702 without issue. I want to take advantage of 
the new notification messages during an OS upgrade task sequence but I can't 
seem to get it to work. I also don't seem to be able to get the custom Software 
Center properties to show up for the new task sequence either.

Here are the steps I took to test this - I created a new OS Upgrade task 
sequence and I modified the User Notification tab with custom text and made 
sure the check box was in this is a high impact task sequence. I then deployed 
the task sequence to a client expecting to see the custom Software center 
properties settings as well as the custom user notification text when I kicked 
off the task sequence. Instead I saw all of the default values in Software 
Center as well as the default notification text letting my users know they were 
going to lose all of their data and settings. :)

Here are the screenshots of my task sequence settings and what I see in 
Software Center.

[cid:image003.jpg@01D2C3E9.BCF736C0]  [cid:image005.jpg@01D2C3E9.BCF736C0]

[cid:image008.jpg@01D2C3E9.BCF736C0]   [cid:image010.png@01D2C3E9.614A47E0]



Any idea where I should start troubleshooting this issue?

[mssms] RE: Upgrade Readiness with System Center Configuration Manager

[Enley, Carl]

I am also interested in this, and are in a similar situation where we have an 
O365 tenant but no Azure per say. I spoke to MS rep and he said that the log 
analytics ingestion service as you describe is free, you will need a CC to sign 
up though. I have not pursued this as I am hoping my company will setup a full 
Azure footprint very soon. We also have some telemetry data challenges with our 
EU side of the business we have to work out first.

Please let me know if you go down this road and what exactly was needed.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Dave West
Sent: Tuesday, April 11, 2017 4:25 AM
To: mssms@lists.myitforum.com
Subject: [mssms] Upgrade Readiness with System Center Configuration Manager

I was wondering if anyone has integrated Upgrade Readiness with System Center 
Configuration Manager?

https://docs.microsoft.com/en-gb/sccm/core/clients/manage/upgrade/upgrade-analytics

We are looking into this now and there is a requirement for Microsoft 
Operations Management Suite (OMS) for the log analytics, and I can't seem to 
find any mention of the cost of adding OMS, specifically the log analytics, 
required for Upgrade Readiness/Upgrade Analytics Connector in ConfigMgr.

We have an Office365 tenancy but no Azure AD etc. so I was wondering if anyone 
else has set this up and if so how did they handle the OMS side of things.

Dave West
Senior Operations Analyst
Service Management
Technology & Information Services | Plymouth University | Drake Circus | 
Plymouth | PL4 8AA
Tel: 01752 587247 | Email: 
dave.w...@plymouth.ac.uk | Web: 
plymouth.ac.uk/ITservices


[http://www.plymouth.ac.uk/images/email_footer.gif]

This email and any files with it are confidential and intended solely for the 
use of the recipient to whom it is addressed. If you are not the intended 
recipient then copying, distribution or other use of the information contained 
is strictly prohibited and you should not rely on it. If you have received this 
email in error please let the sender know immediately and delete it from your 
system(s). Internet emails are not necessarily secure. While we take every 
care, Plymouth University accepts no responsibility for viruses and it is your 
responsibility to scan emails and their attachments. Plymouth University does 
not accept responsibility for any changes made after it was sent. Nothing in 
this email or its attachments constitutes an order for goods or services unless 
accompanied by an official order form.

[mssms] RE: Query for users with multiple primary devices

[Enley, Carl]

You could use this and just filter excel to show the duplicates in the name 
field?


SELECT UMR.MachineResourceID, UMR.MachineResourceName, UMR.UniqueUserName, Mail0
FROM v_R_User U
JOIN v_UserMachineRelationship UMR ON UMR.UniqueUserName = U.Unique_User_Name0

I also believe there is a built in report where you can specify a collection 
and the number of UDA relationships > greater than 1 for example.


From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Beardsley, James
Sent: Thursday, March 30, 2017 1:02 PM
To: mssms@lists.myitforum.com
Subject: [mssms] Query for users with multiple primary devices

Anyone have a SQL query that'll show me all users with more than one primary 
device assigned to them through UDA?

Thanks,
James



Confidentiality Notice: This e-mail is intended only for the addressee named 
above. It contains information that is privileged, confidential or otherwise 
protected from use and disclosure. If you are not the intended recipient, you 
are hereby notified that any review, disclosure, copying, or dissemination of 
this transmission, or taking of any action in reliance on its contents, or 
other use is strictly prohibited. If you have received this transmission in 
error, please reply to the sender listed above immediately and permanently 
delete this message from your inbox. Thank you for your cooperation.

RE: [mssms] RE: SQL Query question / best practice

[Enley, Carl]

Thanks but after a little research it looks like power BI will not use 
Express…so if I want to create a solution to solve all of my needs it will have 
to be the Full Sql version.

Any idea if it would be covered under the CM license?

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Wendell Hutchison
Sent: Friday, March 3, 2017 11:12 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] RE: SQL Query question / best practice

Use Express. It is free and if you are only storing/sharing data it will work 
for your purpose.

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Enley, Carl
Sent: Friday, March 3, 2017 5:55 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] RE: SQL Query question / best practice

Another question – If I stand up another SQL server to host a replica of the CM 
database would the SQL license be covered by CM or would I need to buy another 
SQL license? I would only host the replica copy of the CM database on this 
second SQL install.

I can think of a few good reasons to have the replicated CM database but need 
to understand if there is a cost involved. My thought is I could use this extra 
CM database to allow others to query against it as suggested in this thread. I 
also thought I may be able to use it for the test DB upgrade routine before I 
update CM versions. The final thought I had was we were looking at the SCCM 
power BI templates and it appears to require a second SQL server either local 
or Azure to pull its data from.

Thanks

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Enley, Carl
Sent: Wednesday, March 1, 2017 1:25 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: RE: [mssms] RE: SQL Query question / best practice

Thanks for all of the replies, I was thinking the same thing about not letting 
them in. Hopefully it is not an impossible fight to win with management.

Assuming I go down the replica database route what would be the suggested way 
to set that up? Is there a specific replication task that can be setup from 
within configuration manager or is this a SQL task that needs to be created? I 
assume I will need another server running the same version of SQL that I 
currently run and I either need to automate the replication or manually / 
script the database files over on some type of schedule. Would this secondary 
SQL server be required to have the Config Mgr client installed

Thanks

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Sherry Kissinger
Sent: Wednesday, March 1, 2017 10:29 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: Re: [mssms] RE: SQL Query question / best practice

I agree with Troy--setup a replica database.  We have two "classes" of people 
that desperately feel they need access to our data.  For 1 set, the replica is 
what they get, and it works perfectly for their needs.  There's another set of 
people who, through mainly political maneuvering, convinced the powers-that-be 
that only direct read-only access to the CM database would be acceptable.  And 
guess what... sure, MOST of those people with direct access know sql and can 
craft a query that doesn't bring CM to it's knees.  But about once a quarter 
some doofus who isn't as awesome in querying as he or she thinks they are... 
manage to craft something that blocks SQL from doing things like, say... 
processing hinv, or ddrs, or colleval, or... until whatever-it-is gets manually 
killed by us.  And then we have to spend a few emails and/or meetings 
explaining to those people why they can't do that.  (and then what I've seen 
them do--I've SEEN IT--they instead wait until 1am and run their cr@p when they 
think no one will notice their cr@p).

So... don't let them in.  Do whatever you can to keep them out.  A whole new 
server, with a replica database, is the best way to keep your production 
database doing what it's supposed to be doing--managing systems.

On Wed, Mar 1, 2017 at 9:02 AM, Garth Jones 
<ga...@enhansoft.com<mailto:ga...@enhansoft.com>> wrote:
Before making any suggestions, I have several questions


1.  What version of CM are you using?

2.  Do you use RBA? Aka will queries need to be RBA compliant?

3.  What version of SQL are you using?



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of Enley, Carl
Sent: Wednesday, March 1, 2017 9:45 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] SQL Query question / best practice

I am curious is anyone has an

RE: [mssms] RE: SQL Query question / best practice

[Enley, Carl]

Thanks for all of the replies, I was thinking the same thing about not letting 
them in. Hopefully it is not an impossible fight to win with management.

Assuming I go down the replica database route what would be the suggested way 
to set that up? Is there a specific replication task that can be setup from 
within configuration manager or is this a SQL task that needs to be created? I 
assume I will need another server running the same version of SQL that I 
currently run and I either need to automate the replication or manually / 
script the database files over on some type of schedule. Would this secondary 
SQL server be required to have the Config Mgr client installed

Thanks

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Sherry Kissinger
Sent: Wednesday, March 1, 2017 10:29 AM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: SQL Query question / best practice

I agree with Troy--setup a replica database.  We have two "classes" of people 
that desperately feel they need access to our data.  For 1 set, the replica is 
what they get, and it works perfectly for their needs.  There's another set of 
people who, through mainly political maneuvering, convinced the powers-that-be 
that only direct read-only access to the CM database would be acceptable.  And 
guess what... sure, MOST of those people with direct access know sql and can 
craft a query that doesn't bring CM to it's knees.  But about once a quarter 
some doofus who isn't as awesome in querying as he or she thinks they are... 
manage to craft something that blocks SQL from doing things like, say... 
processing hinv, or ddrs, or colleval, or... until whatever-it-is gets manually 
killed by us.  And then we have to spend a few emails and/or meetings 
explaining to those people why they can't do that.  (and then what I've seen 
them do--I've SEEN IT--they instead wait until 1am and run their cr@p when they 
think no one will notice their cr@p).

So... don't let them in.  Do whatever you can to keep them out.  A whole new 
server, with a replica database, is the best way to keep your production 
database doing what it's supposed to be doing--managing systems.

On Wed, Mar 1, 2017 at 9:02 AM, Garth Jones 
<ga...@enhansoft.com<mailto:ga...@enhansoft.com>> wrote:
Before making any suggestions, I have several questions


1.  What version of CM are you using?

2.  Do you use RBA? Aka will queries need to be RBA compliant?

3.  What version of SQL are you using?



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of Enley, Carl
Sent: Wednesday, March 1, 2017 9:45 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] SQL Query question / best practice

I am curious is anyone has any thoughts / suggestions surrounding 3rd party 
applications / tools running queries directly against the SCCM SQL database.

In my organization depending upon the company we have a few different asset 
management systems some are home brewed and others are 3rd party (manage 
engine) vendors. One of our biggest challenges is keeping all of our inventory 
/ asset management systems in “sync” so to speak. I have been approached by a 
few different departments / companies that would like to run queries directly 
against the SCCM SQL instance rather than use any type of built in reports / 
queries. They would like to automate the export of client information in their 
home grown tool without changing their process to include running canned 
reports out of the console or website. I offered to provide subscriptions to 
those reports they feel would be valuable but was told it would require a 
change to their current process they were not prepared to make.

So my thought is it should be no problem to provide them read only access to 
the database but my real concern is surrounding performance. I don’t want 
someone running a poorly written SQL query against the database and possibly 
slowing down the system speed. When I suggested this could possibly happen I 
was assured by the developers that they are very experienced in writing SQL 
queries and this would not happen….yadda, yadda, yadda.


Thanks for any suggestions.






--
Thank you,

Sherry Kissinger

My Parameters:  Standardize. Simplify. Automate
Blogs: http://www.mofmaster.com, http://mnscug.org/blogs/sherry-kissinger, 
http://www.smguru.org<http://webdefence.global.blackspider.com/urlwrap/?q=AXicE3RmeLubgeHvZgaGopxKA5MMveKiMr3cxMyc5Py8kqL8HL3k_FyGMiNDt8jM1GwDAxMLY0OG5NS8nNRKh8SizLSc1NQSsJKMkpICK3398vJyveLc9NKiUr38onQGBgbXNQwMAPJvIec>

[mssms] RE: SQL Query question / best practice

[Enley, Carl]

Currently on build 1602 planning to go to 1610 in the next 30 days.

We do use RBA and I have added the service account they are using to perform 
queries as a "Read Only Analyst".

SQL Server 2014

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Garth Jones
Sent: Wednesday, March 1, 2017 10:02 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: SQL Query question / best practice

Before making any suggestions, I have several questions


1.   What version of CM are you using?

2.   Do you use RBA? Aka will queries need to be RBA compliant?

3.   What version of SQL are you using?



From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Enley, Carl
Sent: Wednesday, March 1, 2017 9:45 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] SQL Query question / best practice

I am curious is anyone has any thoughts / suggestions surrounding 3rd party 
applications / tools running queries directly against the SCCM SQL database.

In my organization depending upon the company we have a few different asset 
management systems some are home brewed and others are 3rd party (manage 
engine) vendors. One of our biggest challenges is keeping all of our inventory 
/ asset management systems in "sync" so to speak. I have been approached by a 
few different departments / companies that would like to run queries directly 
against the SCCM SQL instance rather than use any type of built in reports / 
queries. They would like to automate the export of client information in their 
home grown tool without changing their process to include running canned 
reports out of the console or website. I offered to provide subscriptions to 
those reports they feel would be valuable but was told it would require a 
change to their current process they were not prepared to make.

So my thought is it should be no problem to provide them read only access to 
the database but my real concern is surrounding performance. I don't want 
someone running a poorly written SQL query against the database and possibly 
slowing down the system speed. When I suggested this could possibly happen I 
was assured by the developers that they are very experienced in writing SQL 
queries and this would not happenyadda, yadda, yadda.


Thanks for any suggestions.

[mssms] SQL Query question / best practice

[Enley, Carl]

I am curious is anyone has any thoughts / suggestions surrounding 3rd party 
applications / tools running queries directly against the SCCM SQL database.

In my organization depending upon the company we have a few different asset 
management systems some are home brewed and others are 3rd party (manage 
engine) vendors. One of our biggest challenges is keeping all of our inventory 
/ asset management systems in "sync" so to speak. I have been approached by a 
few different departments / companies that would like to run queries directly 
against the SCCM SQL instance rather than use any type of built in reports / 
queries. They would like to automate the export of client information in their 
home grown tool without changing their process to include running canned 
reports out of the console or website. I offered to provide subscriptions to 
those reports they feel would be valuable but was told it would require a 
change to their current process they were not prepared to make.

So my thought is it should be no problem to provide them read only access to 
the database but my real concern is surrounding performance. I don't want 
someone running a poorly written SQL query against the database and possibly 
slowing down the system speed. When I suggested this could possibly happen I 
was assured by the developers that they are very experienced in writing SQL 
queries and this would not happenyadda, yadda, yadda.


Thanks for any suggestions.

[mssms] RE: November Security Only Update

[Enley, Carl]

Check to see if your SUP configuration is set to expire superseded updates 
immediately. I had to go in and set mine to expire them in 2 months and then 
re-sync my SUP to get the security only updates to show. I also had to go in to 
my ADR's and remove the filter on superseded=NO.

This seems like a big mess

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Heaton, Joseph@Wildlife
Sent: Wednesday, November 9, 2016 1:49 PM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: November Security Only Update

I'm not even seeing the Security Only updates, for any of the OSes.  Even with 
no filtering.  I am only seeing the Monthly rollup.  Even verified my 
categories and products.  No idea why it's not showing.

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Brian McDonald
Sent: Wednesday, November 09, 2016 9:53 AM
To: mssms@lists.myitforum.com
Subject: [mssms] November Security Only Update


All,



Has anyone noticed the November, 2016 Security Only Update for Windows 7 
x64-based Systems (KB197867) is showing superseded already in SCCM? I believe 
this is because the Monthly Roll-up is also published, superseding the Security 
Only update. Real nice!



Can you deploy superseded updates from SCCM? Don't know that I've ever tried. I 
typically will remove superseded updates from SUGs on a regular basis.



Thank you,

Brian

[mssms] RE: Scripting - Pwr Shell AD Attributes

[Enley, Carl]

Awesome - thanks for your help guys. I am pretty sure I can get this to do 
exactly what I need. The last line with the find and replace inside the config 
file was a stumbling block for me that you have solved.

Carl

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Murray, Mike
Sent: Wednesday, July 27, 2016 10:24 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Scripting - Pwr Shell AD Attributes

Good point!  Also, I was thinking about this last night (yeah, I'm a dork). You 
could easily just replace the extension value in the existing file (instead of 
creating a completely new one) with something like this:

# Get Active Directory information for current user (Thanks Freddy!)
$UserName = $env:username
$Filter = "(&(objectCategory=User)(samAccountName=$UserName))"
$Searcher = New-Object System.DirectoryServices.DirectorySearcher
$Searcher.Filter = $Filter
$ADUserPath = $Searcher.FindOne()
$ADUser = $ADUserPath.GetDirectoryEntry()
$ADTelePhoneNumber = $ADUser.telephoneNumber

#Replace value in config file
(Get-Content c:\scripts\test.txt) -replace '\[EXTENSION\]', $ADTelePhoneNumber 
| Set-Content c:\scripts\test.txt


From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Freddy Grande
Sent: Tuesday, July 26, 2016 5:45 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Scripting - Pwr Shell AD Attributes

Does that not require RSAT being installed on each client computer?
You might be better off replacing the first two lines with something like this:
# Get Active Directory information for current user
$UserName = $env:username
$Filter = "(&(objectCategory=User)(samAccountName=$UserName))"
$Searcher = New-Object System.DirectoryServices.DirectorySearcher
$Searcher.Filter = $Filter
$ADUserPath = $Searcher.FindOne()
$ADUser = $ADUserPath.GetDirectoryEntry()
$ADTelePhoneNumber = $ADUser.telephoneNumber

You can clean that up and change variables to fit with your script. Just 
grabbed this off my Outlook Signatures script that runs on each client computer 
as users to build their signatures from AD attributes.

Regards,
Freddy

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Murray, Mike
Sent: Wednesday, 27 July 2016 9:56 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Scripting - Pwr Shell AD Attributes

Here's some more. I'm just tinkering, I'm sure there's a PowerShell expert or 
50 on this list that could come up with something better. But this would let 
you build the config file on the fly.

Import-Module ActiveDirectory
$phone = Get-ADUser -Identity $env:USERNAME -Properties * | Select-Object 
-ExpandProperty TelephoneNumber

$text = "First Line: Settings Here"
$text = $text + "`r`n"
$text = $text + "Second Line: Settings Here"
$text = $text + "`r`n"
$text = $text + "Extenstion: "
$text = $text + $phone
$text | Out-File C:\Scripts\test.txt


The "`r`n" is a CR-LF.

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Murray, Mike
Sent: Tuesday, July 26, 2016 4:03 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Scripting - Pwr Shell AD Attributes

Here's some basic stuff to get you started. You could read the logged in user 
and search their AD user record:

Import-Module ActiveDirectory
Get-ADUser -Identity $env:USERNAME -Properties * | Select-Object 
-ExpandProperty TelephoneNumber | Out-File C:\Scripts\Config.txt

This writes the phone number to a text file. I'm sure you could manipulate this 
to create the config file you want.

Mike

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Enley, Carl
Sent: Tuesday, July 26, 2016 2:22 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Scripting - Pwr Shell AD Attributes

Perhaps I am not being clear - I have a package built already, I have the user 
settings and the system settings already worked out. When the application is 
launched the user is prompted to enter their phone extension. I know where this 
information is stored in the config file but I do not know how to query Active 
Directory attribute to retrieve phone extension and then insert this value into 
my config file.

Thanks
Carl

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Andrew Craig
Sent: Tuesday, July 26, 2016 3:28 PM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Scripting - Pwr Shell AD Attributes

Sorry

[mssms] RE: Scripting - Pwr Shell AD Attributes

[Enley, Carl]

Perhaps I am not being clear - I have a package built already, I have the user 
settings and the system settings already worked out. When the application is 
launched the user is prompted to enter their phone extension. I know where this 
information is stored in the config file but I do not know how to query Active 
Directory attribute to retrieve phone extension and then insert this value into 
my config file.

Thanks
Carl

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Andrew Craig
Sent: Tuesday, July 26, 2016 3:28 PM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Scripting - Pwr Shell AD Attributes

Sorry, I didn't read your email properly.

You want to separate the system installation from the user settings,(config 
file).

Powershell app deployment toolkit might be your friend here...

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Enley, Carl
Sent: 26 July 2016 15:27
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Scripting - Pwr Shell AD Attributes

I am not sure? So I can query AD and get a phone extension and update a 
configuration file using GPP? I know I can use it to copy the files to the user 
directory but I already have that worked out, I need a way to export the AD 
information and write it to the configuration file. I think the delivery method 
of that file to the users machine can be either GPP or SCCM etc...

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Andrew Craig
Sent: Tuesday, July 26, 2016 9:01 AM
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] RE: Scripting - Pwr Shell AD Attributes

Could you not use Group Policy Preferences for this?

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Enley, Carl
Sent: 26 July 2016 14:30
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Scripting - Pwr Shell AD Attributes

I am posting to see if any of you folks have done what I am trying to do and 
can offer any tips or advice. -

Deploying Avaya soft phone package to my end users - package, install 
etc...everything is fine and works great no problem there. There is a config 
file in %username%\appdata\Roaming\Avaya\etc... that stores the server name, 
sip information and a few other static values. I have no problem updating that 
file and copying it to that location during the package deployment but there is 
one user configured setting that is not static and I cannot set it during 
deployment and that is the users phone extension. Obviously every user has a 
unique phone extension so the information is different for each user that 
installs the package, it is easy enough to have them fill in the information 
when the application is launched BUT I like to automate stuff if at all 
possible. :)

So here is my question...is it possible that during the install of the package 
maybe as a dependency (this is how I am copying the config files to the user 
directory - package installs as "system" file copy as "user") I could have a 
PowerShell script that queries AD for the phone extension of the logged on user 
and inserts it into the config file? Has anyone written a script to query AD 
attributes and insert them into a text file replacing a current value?

Thanks for any tips / advice.

[mssms] RE: Scripting - Pwr Shell AD Attributes

[Enley, Carl]

I am not sure? So I can query AD and get a phone extension and update a 
configuration file using GPP? I know I can use it to copy the files to the user 
directory but I already have that worked out, I need a way to export the AD 
information and write it to the configuration file. I think the delivery method 
of that file to the users machine can be either GPP or SCCM etc...

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Andrew Craig
Sent: Tuesday, July 26, 2016 9:01 AM
To: mssms@lists.myitforum.com
Subject: [mssms] RE: Scripting - Pwr Shell AD Attributes

Could you not use Group Policy Preferences for this?

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Enley, Carl
Sent: 26 July 2016 14:30
To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com>
Subject: [mssms] Scripting - Pwr Shell AD Attributes

I am posting to see if any of you folks have done what I am trying to do and 
can offer any tips or advice. -

Deploying Avaya soft phone package to my end users - package, install 
etc...everything is fine and works great no problem there. There is a config 
file in %username%\appdata\Roaming\Avaya\etc... that stores the server name, 
sip information and a few other static values. I have no problem updating that 
file and copying it to that location during the package deployment but there is 
one user configured setting that is not static and I cannot set it during 
deployment and that is the users phone extension. Obviously every user has a 
unique phone extension so the information is different for each user that 
installs the package, it is easy enough to have them fill in the information 
when the application is launched BUT I like to automate stuff if at all 
possible. :)

So here is my question...is it possible that during the install of the package 
maybe as a dependency (this is how I am copying the config files to the user 
directory - package installs as "system" file copy as "user") I could have a 
PowerShell script that queries AD for the phone extension of the logged on user 
and inserts it into the config file? Has anyone written a script to query AD 
attributes and insert them into a text file replacing a current value?

Thanks for any tips / advice.

[mssms] Scripting - Pwr Shell AD Attributes

[Enley, Carl]

I am posting to see if any of you folks have done what I am trying to do and 
can offer any tips or advice. -

Deploying Avaya soft phone package to my end users - package, install 
etc...everything is fine and works great no problem there. There is a config 
file in %username%\appdata\Roaming\Avaya\etc... that stores the server name, 
sip information and a few other static values. I have no problem updating that 
file and copying it to that location during the package deployment but there is 
one user configured setting that is not static and I cannot set it during 
deployment and that is the users phone extension. Obviously every user has a 
unique phone extension so the information is different for each user that 
installs the package, it is easy enough to have them fill in the information 
when the application is launched BUT I like to automate stuff if at all 
possible. :)

So here is my question...is it possible that during the install of the package 
maybe as a dependency (this is how I am copying the config files to the user 
directory - package installs as "system" file copy as "user") I could have a 
PowerShell script that queries AD for the phone extension of the logged on user 
and inserts it into the config file? Has anyone written a script to query AD 
attributes and insert them into a text file replacing a current value?

Thanks for any tips / advice.

[mssms] SCCM 2007 Migrate to new Hardware -

[Enley, Carl]

I have been approached with a project to migrate our existing SCCM 2007 R2 
environment to new Server hardware. We are currently running on Server 2003 and 
need to get to 2008R2 before EOL in June\July. I suppose a in place upgrade is 
not supported? I have suggested time and time again that we should put our 
efforts into SCCM 2012 but Mgt has not made a decision and time is running out.

We have 2 primary sites with about 5000 clients and I am looking for a brief 
outline of the steps required to perform this upgrade with no loss of data \ 
production services - patching, software distribution, reporting etc...

Some of my questions surround the following:

* In what order should the upgrade take place ? Primary Parent site 
first?

* Can I go from X86 server OS to X64 server OS.

* Physical to Virtual supported

* Sql Server versions, do they need to be the same (2005)

* Drive configuration (Raid levels etc..)

* Are there any gotchas that I should be looking at?

If anyone has performed this task before and you are willing to share some tips 
or outline the steps that you have taken I would greatly appreciate it.

Thanks

RE: [mssms] RE: SCCM 2007 Migrate to new Hardware -

[Enley, Carl]

Yes I agree with both of you…the problem is politics / budget. We do want to go 
to 2012 and we want to use a peer 2 peer 3rd party application to eliminate our 
BDP’s. The problem is we currently do not have budget approval to do so and we 
cannot be out of support on our 2003 Server OS. This is why I am trying to 
gather information / others experiences with the process and present Mgt with 
the estimated work effort. This work estimate may or may not change the budget 
decision but at least we have given them the information needed to make a 
decision.

I am sure you can understand my predicament, I would have to assume I am not 
alone and others would also benefit from this upgrade\migrate information.

Thanks

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Juelich, Adam
Sent: Wednesday, April 08, 2015 12:24 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] RE: SCCM 2007 Migrate to new Hardware -

I'd move to the newest of everything if you can.  No point in going to 2008R2 
being that it is nearing 7 years old.

Server 2012 R2
ConfigMgr 2012 R2
SQL 2014 or 2012 R2 (Don't remember if there are any ConfigMgr snaffus with 
this)


---

Adam Juelich

Pulaski Community School Districthttp://www.pulaskischools.org

Client Management Specialist

920-822-6075

On Wed, Apr 8, 2015 at 10:53 AM, Michael Mott 
michael.m...@1e.commailto:michael.m...@1e.com wrote:
Unless your limited by politics, I would go to a parallel scenario with one 
beef virtual server and get to CM12 ASAP.

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Enley, Carl
Sent: Wednesday, April 08, 2015 11:43 AM
To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com
Subject: [mssms] SCCM 2007 Migrate to new Hardware -

I have been approached with a project to migrate our existing SCCM 2007 R2 
environment to new Server hardware. We are currently running on Server 2003 and 
need to get to 2008R2 before EOL in June\July. I suppose a in place upgrade is 
not supported? I have suggested time and time again that we should put our 
efforts into SCCM 2012 but Mgt has not made a decision and time is running out.

We have 2 primary sites with about 5000 clients and I am looking for a brief 
outline of the steps required to perform this upgrade with no loss of data \ 
production services – patching, software distribution, reporting etc…

Some of my questions surround the following:

• In what order should the upgrade take place ? Primary Parent site 
first?

• Can I go from X86 server OS to X64 server OS.

• Physical to Virtual supported

• Sql Server versions, do they need to be the same (2005)

• Drive configuration (Raid levels etc..)

• Are there any gotchas that I should be looking at?

If anyone has performed this task before and you are willing to share some tips 
or outline the steps that you have taken I would greatly appreciate it.

Thanks





Legal Notice: This email is intended only for the person(s) to whom it is 
addressed. If you are not an intended recipient and have received this message 
in error, please notify the sender immediately by replying to this email or 
calling +44(0) 2083269015tel:%2B44%280%29%202083269015 (UK) or +1 866 592 
4214tel:%2B1%20866%20592%204214 (USA). This email and any attachments may be 
privileged and/or confidential. The unauthorized use, disclosure, copying or 
printing of any information it contains is strictly prohibited. The opinions 
expressed in this email are those of the author and do not necessarily 
represent the views of 1E Ltd. Nothing in this email will operate to bind 1E to 
any order or other contract.

RE: [mssms] A tool idea related to Maintenace Widow discussion

[Enley, Carl]

I do the same thing (SCCM 2007) all laptops  some desktops that cannot be 
rebooted (1000+) apply patches during the day silently suppressing any reboots. 
Usually natural shutdown / restart attrition allows them to become compliant. 
Some users need a reminder but that is just my environment. This has worked for 
us for many years, we do use 1E Wakeup and Maint Windows for the other desktops 
across our footprint.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Marcum, John
Sent: Friday, January 09, 2015 8:13 AM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] A tool idea related to Maintenace Widow discussion

I believe you are perfectly describing the software that 1e sells.

What I've done in the past for laptops is to ignore maintenance windows, patch 
completely silently and do not reboot. I've never had a single complaint doing 
that for 8 years now.





On Thu, Jan 8, 2015 at 10:54 AM, Miller, Todd 
todd-mil...@uiowa.edumailto:todd-mil...@uiowa.edu wrote:
All the discussion of Maintenance Windows has me thinking about a significant 
gap in the SCCM product.

Maintenance windows are pretty terrific for clients that are always on like 
servers, but are not so hot for clients that go to sleep.  It is missing in the 
product to schedule a wake up at the start of the next MW if there is a 
deferred installation pending.

It would be cool if someone with skillz could write a shim that computes 
whether there is a deferred installation waiting for the next MW.  The shim 
could subscribe to sleep/shutdown event and run just prior to the machine going 
to sleep and schedule the computer to wake at the start of the MW if there is a 
deferred installation pending.

It doesn’t solve the laptop problem with MWs, but it sure would make them more 
reliable for plugged in but sleep enabled computers.

I know you can set the power settings to wake the computer up for the MW, but 
there are two problems with that.  The first is that the computer will 
frequently wake up unnecessarily with no scheduled task to perform.  The second 
problem is that the go back to sleep timer is usually set to 2 minutes which is 
frequently too short for SCCM to discover it has a task to run


Notice: This UI Health Care e-mail (including attachments) is covered by the 
Electronic Communications Privacy Act, 18 U.S.C. 2510-2521, is confidential and 
may be legally privileged.  If you are not the intended recipient, you are 
hereby notified that any retention, dissemination, distribution, or copying of 
this communication is strictly prohibited.  Please reply to the sender that you 
have received the message in error, then delete it.  Thank you.






Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.



Confidentiality Notice: This e-mail is from a law firm and may be protected by 
the attorney-client or work product privileges. If you have received this 
message in error, please notify the sender by replying to this e-mail and then 
delete it from your computer.