RE: [mssms] RE: Unusually high outbound network traffic from WSUS today?

2014-09-11 Thread Raghav, Abhishek
We also got hit, it was due to 37 patches revised on 2nd Sep 2014, all these 37 patches are in our active deployment with deadline passed last month. We are planning QoS at port 8053. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Sherry Kissinger

Re: [mssms] RE: System Center Endpoint Protection

2014-09-11 Thread Ryan
If only someone could make that a right click tool... On Wed, Sep 10, 2014 at 9:08 PM, Michael Mott michael.m...@1e.com wrote: Granted this was from FEP but it still applies. Quarantine, never delete so you can go back if need be C:\Program Files\Microsoft Security

Re: [mssms] RE: System Center Endpoint Protection

2014-09-11 Thread Ryan
Am I missing something? I can click on any piece of Malware found and select Restore files quarantined by this threat in the monitoring node. I can also see what files were modified through this node. If I double click on any virus it shows me all the computers infected and I can view the files

[mssms] App Portal for Windows 8

2014-09-11 Thread Todd Hemsell
Anyone have the link for the application catalog for Windows 8 systems?

Re: [mssms] RE: System Center Endpoint Protection

2014-09-11 Thread Todd Hemsell
there is a central recovery point. On Wed, Sep 10, 2014 at 4:18 PM, Marcum, John jmar...@babc.com wrote: Add me to thay list and you now know an uphappy customer. The support is horrible. There's no central recovery point. Out of the box SCEP doesn't even tell thou what files it quarantined.

Re: [mssms] RE: System Center Endpoint Protection

2014-09-11 Thread Todd Hemsell
it is now built in. you can recover certain files, certain files on certain machines, etc. On Wed, Sep 10, 2014 at 8:47 PM, Michael Mott michael.m...@1e.com wrote: I came up with a way to recover files, remotely using psexec. It was pretty easy. -Original Message- From:

Re: [mssms] RE: System Center Endpoint Protection

2014-09-11 Thread Todd Hemsell
It is a new feature and they did not know it was added :-) On Thu, Sep 11, 2014 at 7:51 AM, Ryan ryan2...@gmail.com wrote: Am I missing something? I can click on any piece of Malware found and select Restore files quarantined by this threat in the monitoring node. I can also see what files

RE: [mssms] RE: System Center Endpoint Protection

2014-09-11 Thread Marcum, John
Details please??? -Original Message- From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Michael Mott Sent: Wednesday, September 10, 2014 8:48 PM To: mssms@lists.myitforum.com; Nash Pherson Subject: RE: [mssms] RE: System Center Endpoint Protection

RE: [mssms] RE: System Center Endpoint Protection

2014-09-11 Thread Nash Pherson
You can do this all from the Monitoring node like Ryan already sent. -Original Message- From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Marcum, John Sent: Thursday, September 11, 2014 8:45 AM To: mssms@lists.myitforum.com Subject: RE: [mssms]

RE: [mssms] RE: System Center Endpoint Protection

2014-09-11 Thread Marcum, John
So a big problem we had was when a virus outbreak happened MANY computers saw the same infected files on the network. That turned into a total nightmare. We attempted to scan just one volume on our SAN and it took over 2 weeks to scan 10Tbs. By the time the scan completed the volume was

RE: [mssms] RE: System Center Endpoint Protection

2014-09-11 Thread Marcum, John
Nice… So CSS did not know how to recover files using the product that they support all day every day? This was THIRD LEVEL support too! From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Todd Hemsell Sent: Thursday, September 11, 2014 8:44 AM To:

Re: [mssms] RE: System Center Endpoint Protection

2014-09-11 Thread Todd Hemsell
it is a new Feature John. they listened to you and added it. On Thu, Sep 11, 2014 at 8:58 AM, Marcum, John jmar...@babc.com wrote: Nice… So CSS did not know how to recover files using the product that they support all day every day? This was THIRD LEVEL support too! *From:*

RE: [mssms] RE: System Center Endpoint Protection

2014-09-11 Thread Marcum, John
Ha Ha. Maybe so. I did have a call with them afterwards. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Todd Hemsell Sent: Thursday, September 11, 2014 9:45 AM To: mssms@lists.myitforum.com Subject: Re: [mssms] RE: System Center Endpoint Protection it

Re: [mssms] RE: System Center Endpoint Protection

2014-09-11 Thread Ryan
Ouch! There are many things that can cause an antivirus scan to slow down like that. I can't tell you what was happening in your environment at that time, but I can tell you that scans of that nature shouldn't take as long as you experienced. SCEP is usually rated as one of the quicker products on

[mssms] Bitlocker

2014-09-11 Thread Garth Jones
My Google skills are failing me this morning or I need more coffee…. How can you convert a Bitlocker drive from “Used Space Only Encrypted” to “Fully Encrypted”? Garth Jones Chief Architect Tel: 613-627-4801 x168 Fax: 613-627-4802 www.Enhansoft.comhttp://www.enhansoft.com/ [Description:

RE: [mssms] RE: System Center Endpoint Protection

2014-09-11 Thread Marcum, John
Oh we had cases with MS. They said it wasn't unusual. It's because it wasn't locally attached storage. Had to be scanned across the network from a Windows server. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Ryan Sent: Thursday, September 11, 2014

Re: [mssms] RE: System Center Endpoint Protection

2014-09-11 Thread Ryan
What do they know? They don't even know how to restore files! :-) On Thu, Sep 11, 2014 at 9:58 AM, Marcum, John jmar...@babc.com wrote: Oh we had cases with MS. They said it wasn't unusual. It's because it wasn't locally attached storage. Had to be scanned across the network from a Windows

RE: [mssms] RE: System Center Endpoint Protection

2014-09-11 Thread Marcum, John
HA HA HA!!! I kicked off a scan of one of my file servers just to get some screen shots. The volume I started scanning is 1Tb. After about 10 min I got bored and killed it. It had barely started. Give it a try for yourself. From: listsad...@lists.myitforum.com

[mssms] RE: mssms: Kb931125 in WSUS not in SUP for SCCM 2012

2014-09-11 Thread Taxter, Latisha
Does anyone have the fix for Root Certificate updates not showing up in SCCM 2012? I can see the update if I open WSUS. Thanks. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Taxter, Latisha Sent: Wednesday, September 10, 2014 4:46 PM To:

Re: [mssms] RE: mssms: Kb931125 in WSUS not in SUP for SCCM 2012

2014-09-11 Thread Sherry Kissinger
If you see it in WSUS, then is it simply that you don't have the category for it selected in your Software Update Point ? On Thursday, September 11, 2014 10:53 AM, Taxter, Latisha ltax...@kh.org wrote: Does anyone have the fix for Root Certificate updates not showing up in SCCM

RE: [mssms] RE: mssms: Kb931125 in WSUS not in SUP for SCCM 2012

2014-09-11 Thread Taxter, Latisha
In WSUS category shows as updates. In Sup, the updates category is selected. [cid:image003.jpg@01CFCDAB.15306AB0] [cid:image004.jpg@01CFCDAB.15306AB0] From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Sherry Kissinger Sent: Thursday, September 11, 2014

[mssms] RE: Client Packages

2014-09-11 Thread Readenour, Monica
Wilson, Wilson... Anybody? Thanks, Monica Readenour CITS E-Mail: monica.readen...@oa.mo.govmailto:monica.readen...@oa.mo.gov (573) 522-1174 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Readenour, Monica Sent: Wednesday, September 10, 2014 1:08 PM

[mssms] RE: Bitlocker

2014-09-11 Thread Jason Sandys
I can't find any reference to being able to convert between used space only and full (or vice-versa) so my initial thought is that you cannot do this directly. Side question: Why? J From: listsad...@lists.myitforum.com listsad...@lists.myitforum.com on behalf

Re: [mssms] Bitlocker

2014-09-11 Thread Niall Brady
you could try manage-bde -off C: then manage-bde -status to see how that is coming along, when fully decrypted do... manage-bde -on C: On Thu, Sep 11, 2014 at 4:55 PM, Garth Jones ga...@enhansoft.com wrote: My Google skills are failing me this morning or I need more coffee…. How can

RE: [mssms] RE: Bitlocker

2014-09-11 Thread Rod Trent
You can, however, use Manage-bde to turn Bitlocker off and on. Turning it off decrypts the an encrypted drive. Maybe you just need to turn it off, and the turn it back on using the Fully Encrypted option. Just a guess, though. However, Microsoft recommends using the new Used Space Only

[mssms] RE: Bitlocker

2014-09-11 Thread Garth Jones
The short version... I'm writing a set of reports for a security team on Bitlocker status and it must take into count a multinational company (without MBAM). They will NOT allow Used Space Only Encrypted to be used. I need to test on system with two physical drives in it, one drive is

Re: [mssms] RE: Bitlocker

2014-09-11 Thread Paul Winstanley
There are GPOs to control this Garth. This article will pintpoint them for you. http://m.windowsitpro.com/windows-8/bitlocker-changes-windows-8 On 11 Sep 2014, at 20:24, Garth Jones ga...@enhansoft.com wrote: The short version… I’m writing a set of reports for a security team on

RE: [mssms] RE: Bitlocker

2014-09-11 Thread Garth Jones
Apparently that is not good enough for one of the compliance standards (maybe PCI), or at least that is what I'm being told. BTW I did find the GPO to force full encryption.. It's an SSD drive so we will see how on it take to encrypt! Garth Jones Chief Architect Tel: 613-627-4801 x168 Fax:

RE: [mssms] RE: Bitlocker

2014-09-11 Thread Rod Trent
Probably GPO. First page, first link in Bing (not Google): http://www.bing.com/search?q=used+space+only+gpo http://www.bing.com/search?q=used+space+only+gpogo=Submit+Queryqs=dsform =QBRE go=Submit+Queryqs=dsform=QBRE From: listsad...@lists.myitforum.com

[mssms] KB2835361 missing from MDT-built image

2014-09-11 Thread William Jackson
I built a new Windows 7 64-bit reference image yesterday using MDT 2013 standalone. I am using the Microsoft-provided install WIM that includes SP1 as the base. I do not install any additional software. I use the built-in Windows Update steps that call ZTIWindowsUpdate.wsf. My

Re: [mssms] RE: Client Packages

2014-09-11 Thread Todd Hemsell
you might have a stuck file. in sms_cen\inboxes\hman.box Look for a file called client.acu That is what causes it to create the package. If it is not there read the hman log for clues. On Thu, Sep 11, 2014 at 1:24 PM, Readenour, Monica monica.readen...@oa.mo.gov wrote: Wilson, Wilson…

Re: [mssms] App Portal for Windows 8

2014-09-11 Thread Todd Hemsell
nobody knows? On Thu, Sep 11, 2014 at 8:39 AM, Todd Hemsell hems...@gmail.com wrote: Anyone have the link for the application catalog for Windows 8 systems?

Re: [mssms] App Portal for Windows 8

2014-09-11 Thread Todd Hemsell
I found it. http://www.microsoft.com/en-us/download/details.aspx?id=40795WT.mc_id=rss_alldownloads_all On Thu, Sep 11, 2014 at 8:39 AM, Todd Hemsell hems...@gmail.com wrote: Anyone have the link for the application catalog for Windows 8 systems?

RE: [mssms] App Portal for Windows 8

2014-09-11 Thread steven hosking
Todd, do you mean the sccm company portal? Which is like the intune one but you can point to your internal SCCM server? Sent from my Windows Phone From: Todd Hemsellmailto:hems...@gmail.com Sent: ‎12/‎09/‎2014 6:37 AM To:

RE: [mssms] App Portal for Windows 8

2014-09-11 Thread Rod Trent
This one? http://www.microsoft.com/en-us/download/details.aspx?id=40795 From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Todd Hemsell Sent: Thursday, September 11, 2014 4:37 PM To: mssms@lists.myitforum.com Subject: Re: [mssms] App Portal for

[mssms] Unconfigure Out of Band Management

2014-09-11 Thread Marcum, John
Does anyone know how to clear all the settings from the Out of Band Management component? Mine is throwing errors constantly because the AD groups are no longer there. I was testing OOB for a while then decided to not proceed. Seems like I just need to clear all these configs but that's not an

Re: [mssms] Unconfigure Out of Band Management

2014-09-11 Thread steven hosking
Hi John, We are in some what of the same situation as you have described, we did our testing on our SCCM 2007 env, and the clients are still provisioned to that ENV, now that we have moved to 2012 they are throwing alerts that the AMT clients are still registered to the SCCM 2007 server.

Re: [mssms] App Portal for Windows 8

2014-09-11 Thread Todd Hemsell
yes. I found it and it is same as Rod sent. Thanks for the replies. Awesome little app Good blog for it here. http://blogs.technet.com/b/jchalfant/archive/2014/05/09/how-do-deploy-company-portal-app-to-windows-8-in-configuration-manager.aspx On Thu, Sep 11, 2014 at 3:40 PM, steven hosking

RE: [mssms] App Portal for Windows 8

2014-09-11 Thread Murray, Mike
How is this different than the normal application catalog? From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Todd Hemsell Sent: Thursday, September 11, 2014 1:40 PM To: mssms@lists.myitforum.com Subject: Re: [mssms] App Portal for Windows 8 I found it.

RE: [mssms] App Portal for Windows 8

2014-09-11 Thread steven hosking
Todd I totally agree, it's a great app. Mike, this app is a modern application wrapper for the app catalog, one big plus is that you can promote applications, also its a single application that you can give your staff rather then a web link. It's only for win8 and above. It's pretty much the

RE: [mssms] App Portal for Windows 8

2014-09-11 Thread Murray, Mike
OK, thanks. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of steven hosking Sent: Thursday, September 11, 2014 4:07 PM To: mssms@lists.myitforum.com Subject: RE: [mssms] App Portal for Windows 8 Todd I totally agree, it's a great app. Mike, this app is

Re: [mssms] RE: Unconfigure Out of Band Management

2014-09-11 Thread Todd Hemsell
yes. Funny how he blocked the name of some useless server, then left the CA name in there :-) On Thu, Sep 11, 2014 at 4:40 PM, Jason Sandys ja...@sandys.us wrote: Remove the role? J -- *From:* listsad...@lists.myitforum.com listsad...@lists.myitforum.com on