RE: [mssms] Client update from SP1 to R2

Thanks, will check the next machine that gets reported to me. Worked on the machine the customer gave to me, but already saw about a dozen where ccmsetup didn't delete the folder and shortcuts. --- David http://www.david-obrien.net From: damon.jo...@justice.tas.gov.au To: mssms@lists.myitf

[mssms] RE: WQL not showing same results?

Sigh. Not my doing...I will say that ;) From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Sandys Sent: Tuesday, January 28, 2014 6:38 PM To: mssms@lists.myitforum.com Subject: [mssms] RE: WQL not showing same results? I see a CAS! From: listsad...

[mssms] RE: WQL not showing same results?

I see a CAS! From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Dzikowski, Michael Sent: Tuesday, January 28, 2014 4:08 PM To: mssms@lists.myitforum.com Subject: [mssms] RE: WQL not showing same results? Ah...I've got an issue with a primary. Got the prima

[mssms] RE: WQL not showing same results?

Ah...I've got an issue with a primary. Got the primary back up...and things are back to normal. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Dzikowski, Michael Sent: Tuesday, January 28, 2014 3:44 PM To: mssms@lists.myitforum.com Subject: [mssms] RE:

[mssms] ConfigMgr 2012 SP1 CU4 Released

http://support.microsoft.com/kb/2922875 Issues that are fixed Software distribution * Packages are listed as Unknown in the Content Status node of the Administrator Console. This occurs after a Configuration Manager 2007 distribution point is upgraded and assigned to a Configuration Mana

[mssms] RE: WQL not showing same results?

Ya, so when I look at SMSProv I'm seeing this: [cid:image002.png@01CF1C3F.B05FF5F0] So, I should expect 60 machines in that collection, right? Mike D- From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Jason Sandys Sent: Tuesday, January 28, 2014 3:27

RE: [mssms] Implement SCCM 2012 encryption with 3rd party CA?

Interesting and expensive. Remember, it's a recurring cost (as I pointed out). J From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of John M Sent: Tuesday, January 28, 2014 2:21 PM To: mssms@lists.myitforum.com Subject: RE: [mssms] Implement SCCM 2012 encrypt

Re: [mssms] Strange MDT Question : Can't find previous admins DeploymentShare!

Awesome Michael, that is exactly what I needed! On Tue, Jan 28, 2014 at 12:45 PM, Michael Niehaus < michael.nieh...@microsoft.com> wrote: > MDT will store an XML file in the user's profile with the deployment > shares that were open the last time it was used. Do you still have a > machine that

[mssms] RE: WQL not showing same results?

To my knowledge nothing. Have you reviewed the SQL statements that your WQL is being translated into in SMSProv.log? J From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of christopher.catl...@us.sogeti.com Sent: Tuesday, January 28, 2014 2:16 PM To: mssms@li

[mssms] RE: WQL not showing same results?

Haven't run into that exact problem, you're probably thinking of the console search issue we ran into. Mike, Does the WQL query work in the Queries node if you limit it to All Systems? From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of christopher.catl...@

RE: [mssms] Implement SCCM 2012 encryption with 3rd party CA?

This is the option we're exploring. The auto-enrollment feature has to be supported through the 3rd party CA or it's a non-starter for us. It does appear that Globalsign does have such a capability, but we have yet to get an estimate for the cost. From: christopher.catl...@us.sogeti.com To: m

RE: [mssms] Implement SCCM 2012 encryption with 3rd party CA?

With the PKI gateway from some of the vendors, you can enable auto-enrollment. Christopher Catlett Consultant | Detroit [MCTS_2013_small] Sogeti USA Office 248-876-9738 |Fax 877.406.9647 26957 Northwestern Highway, Suite 130, Southfield, MI 48033-8456 www.us.sogeti.com

[mssms] RE: WQL not showing same results?

I think Jeff Krueger @ HFHS ran into this same issue. Christopher Catlett Consultant | Detroit [MCTS_2013_small] Sogeti USA Office 248-876-9738 |Fax 877.406.9647 26957 Northwestern Highway, Suite 130, Southfield, MI 48033-8456 www.us.sogeti.com From: listsad...@lists.m

RE: [mssms] Client update from SP1 to R2

Anything weird with permissions on the shortcut? Rip it out with a group policy preference, would be a band-aid fix. Christopher Catlett Consultant | Detroit [MCTS_2013_small] Sogeti USA Office 248-876-9738 |Fax 877.406.9647 26957 Northwestern Highway, Suite 130, Southfield, MI 48033-8456 www.us.

[mssms] WQL not showing same results?

So, I have a collection that is query based. I get my results back and they don't seem to be what I expect. My query is a simple query for machines in an OU in AD. The collection is limited to All Systems. So, I took my WQL query and copied it and used the Queries node in the console to test

RE: [mssms] Implement SCCM 2012 encryption with 3rd party CA?

Not with certs purchased from a third-party (which is the main reason for this thread although I didn't state that in my answer). For certs issued using a Microsoft Enterprise PKI and a GPO with auto-enrollment and auto-renew enabled, yes. J From: listsad...@lists.myitforum.com [mailto:listsad

RE: [mssms] Implement SCCM 2012 encryption with 3rd party CA?

Correct me if I'm wrong but wouldn't the client enrollment through the GPO cause the clients to automatically renew the cert when it expires? From: ja...@sandys.us To: mssms@lists.myitforum.com Subject: RE: [mssms] Implement SCCM 2012 encryption with 3rd party CA? Date: Tue, 28 Jan 2014 19:08:10

RE: [mssms] Client update from SP1 to R2

Nope, it's still showing the Software Center link. Users are now confused as to why they have two Software Centers. One in System Center 2012 Configuration Manager and one in System Center 2012 R2 Configuration Manager. --- David http://www.david-obrien.net From: christopher.catl...@us.sog

RE: [mssms] Client update from SP1 to R2

Is the folder empty? Christopher Catlett Consultant | Detroit [MCTS_2013_small] Sogeti USA Office 248-876-9738 |Fax 877.406.9647 26957 Northwestern Highway, Suite 130, Southfield, MI 48033-8456 www.us.sogeti.com From: listsad...@lists.myitforum.com [mailto:listsad...@l

[mssms] Client update from SP1 to R2

Hi all, anyone came across the problem that the client update process from SP1 to R2 is not able to delete the start menu folder which points to the Software Center? This is happening to a lot of users in a current project of mine and people start to get confused. The ccmsetup.log actually say

RE: [mssms] Implement SCCM 2012 encryption with 3rd party CA?

Also remember that the unique client cert per computer is not perpetual, you would have to repurchase all of those certs every year so it's even more expensive than you think. And how are you going to get the renewed certs out to clients? As for 8.1 managed via the Intune connector, be careful,

RE: [mssms] Strange MDT Question : Can't find previous admins DeploymentShare!

MDT will store an XML file in the user's profile with the deployment shares that were open the last time it was used. Do you still have a machine that he logged onto? Look for a "user.config" file in the profile folder (e.g. C:\Users\\appdata\Roaming\Microsoft\Microsoft Deployment Toolkit). T

RE: [mssms] Implement SCCM 2012 encryption with 3rd party CA?

The expense of the client certs made us pause. The project is not dead, but since you need a unique client cert per computer on the internet, it's expensive. My understanding is that the clients will NOT auto-enroll you will need to deploy an SCCM client and unique cert by hand to each interne

RE: [mssms] Implement SCCM 2012 encryption with 3rd party CA?

We use Globalsign, so far they are being helpful, but it's almost like I'm the first one to have ever asked for this. > From: christopher.catl...@us.sogeti.com > To: mssms@lists.myitforum.com > Subject: RE: [mssms] Implement SCCM 2012 encryption with 3rd party CA? > Date: Tue, 28 Jan 2014 16:45:5

RE: [mssms] Implement SCCM 2012 encryption with 3rd party CA?

3rd party could be expensive for client certs... -Original Message- From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of John Sent: Tuesday, January 28, 2014 11:03 AM To: mssms@lists.myitforum.com Subject: [mssms] Implement SCCM 2012 encryption with 3

RE: [mssms] Implement SCCM 2012 encryption with 3rd party CA?

A few companies to "managed" PKI for client certs. http://www.symantec.com/verisign/managed-pki-service http://www.digicert.com/managed-pki-ssl.htm?gclid=CN_ChtuoobwCFeg-MgodJC8A9A https://www.globalsign.com/enterprise-pki/ Christopher Catlett Consultant | Detroit Sogeti USA Office 248-876-9

[mssms] Implement SCCM 2012 encryption with 3rd party CA?

Hi All, We are looking to set up a PKI to enable encryption in the SCCM 2012 environment, but unfortunately, we do not have a local CA. We use a 3rd party (GlobalSign) for our certificates, however, I'm not convinced they can provide the client certificates. Has anyone else managed to get th

RE: [mssms] Package Copy issues with SCCM 2012

Have you looked at the datatransferservice.log? Are your DPs healthy? Are you rate limiting with BITS and the transfer is taking a while? What are the issues you are seeing? More information could be helpful. Michael Dzikowski Senior Systems Engineer | Ally Technical Infrastructure - Windows Ho

RE: [mssms] Package Copy issues with SCCM 2012

Guys, I am having a lot of Patch Package copy issues since I moved to SCCM 2012. Mostly copying our patch package out to Remote DP's I am wondering I built the primary as a Windows 2012 with SQL 2012 and SCCM 2012 SP1. But the Remote DPS are windows 2008 R2. Is anyone aware of any know issue

[mssms] Strange MDT Question : Can't find previous admins DeploymentShare!

Hi guys, Weird situation. I took over for another person for a client, and I cannot for the life of me find where he stored the DeploymentShare for MDT. I've looked in the shares for this server (hidden and visible) and don't see it published, I've checked various other shares for it, and I fr