RE: [External] [mssms] RE: Thoughts on Office 365 in the Enterprise?

2018-01-31 Thread Miller, Todd
I understand the struggle. I have found these scripts to do a fine job in our environment. https://github.com/OfficeDev/Office-IT-Pro-Deployment-Scripts/tree/master/Office-ProPlus-Deployment/Remove-PreviousOfficeInstalls From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.

Re: [External] [mssms] RE: Office 365 updates basically impossible to deploy with Configmgr

2018-01-19 Thread Miller, Todd
forum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Miller, Todd Sent: Thursday, January 18, 2018 11:48 AM To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com> Subject: [mssms] Office 365 updates basically impossible to deploy with Configmgr Has anybody started deploying

[mssms] Office 365 updates basically impossible to deploy with Configmgr

2018-01-18 Thread Miller, Todd
Has anybody started deploying Office 365 updates via Configmgr? I am finding that they are really problematic. Updates seem to just start applying without warning, and the update will close all the running Office applications without notification. The user gets a notification if the update dea

RE: [External] [mssms] RE: Prevent custom hardware inventory class from keeping history?

2017-11-01 Thread Miller, Todd
I think I remember hearing about an site – was it Welles Fargo?-- that was running a SQL maintenance task to truncate ALL their history tables in Configmgr. I am not sure if it has to be an all or nothing thing. It might be possible to just truncate the history table for that one thing in SQL

RE: [External] [mssms] RE: Driver management - opinions?

2017-04-19 Thread Miller, Todd
Is it unclear to me what you do about non-conforming computer models in this method. With no drivers loaded into Configmgr directly, there is no "chaos theory" for unsupported models to fall back to. This seems like it would work perfectly for a perfectly managed organization, but my reality is

[mssms] Endpoint notifications

2017-01-28 Thread Miller, Todd
I remember a while ago I came across a project that uses ConfigMgr to send notifications or emergency alerts out to collections of computers or users. I mean like system outage notifications or weather alerts. I have been trying in vain to find the project again. I feel like it might have been

RE: [mssms] RE: SCCM Win7 & 8.1 Updates

2016-11-16 Thread Miller, Todd
s of patching? Or am I incorrect? On Wed, Nov 16, 2016 at 8:46 AM, Miller, Todd mailto:todd-mil...@uiowa.edu>> wrote: This looks not quite right. You need to make a decision on whether you will take "Security Monthly Quality Rollup" or "Security Only Quality Update&quo

[mssms] RE: SCCM Win7 & 8.1 Updates

2016-11-16 Thread Miller, Todd
This looks not quite right. You need to make a decision on whether you will take "Security Monthly Quality Rollup" or "Security Only Quality Update" In November, the "Security Monthly Quality Rollup" started setting the "Security Only Quality Update" as superceded. This was not true for the

[mssms] RE: Report for Minutes active over date range?

2016-10-31 Thread Miller, Todd
bers.ResourceID Where v_ClientCollectionMembers.CollectionID= 'XXX000E7' order by name0,Date Drop table #DailyUsage From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Miller, Todd Sent: Monday, October 31, 2016 9:21 AM To: mssms@lists.myit

[mssms] Report for Minutes active over date range?

2016-10-31 Thread Miller, Todd
I am looking for a report that can show computer minutes active over a date range. I would like to specify a collection and a start date, and then the report would have rows for each machine in the collection and N columns (7, 14, 30?) starting with the specified date and listing the amount of

[mssms] Servicing plan question

2016-10-01 Thread Miller, Todd
I was watching the What's new in OSD from Ignite on demand. So it seems like a lot of work at MS has focused on the servicing plan idea with the deployment rings and the talk about the ease of which windows 10 can be kept current. In order to use a servicing plan, don't I have to just take all

Re: [mssms] RE: Help with computer models report

2016-09-22 Thread Miller, Todd
What if you group just by model? Is the report being thrown off by the double group by? I seem to always have trouble when double grouping. As long as you don't have two manufacturers with the same model- should be ok to group by model only. Sent from my iPhone On Sep 22, 2016, at 05:12, Ga

[mssms] RE: SCCM 2012 R2 - SCCM 1511 Boot Images

2016-09-15 Thread Miller, Todd
You need to rebuild your custom boot images. Your existing WinPE 5 boot images will continue to function, however you will no longer be able to edit or maintain them with SCCM (like adding components or drivers). I think, but am not certain, that you would have trouble refreshing or resending

Re: [mssms] Find computers without specific software installed

2016-09-14 Thread Miller, Todd
The easiest way is to make a query first for all machines that do have the software in "installed software" and then build a collection that is sub select for machine is not in, and select the query you build in the step above. Sent from my iPhone On Sep 14, 2016, at 10:22, Haritwal, Dhiraj ma

RE: [mssms] RE: Just upgraded 2012 R2 to 1606

2016-09-12 Thread Miller, Todd
your boot images. On Mon, Sep 12, 2016 at 9:37 AM, Miller, Todd mailto:todd-mil...@uiowa.edu>> wrote: There shouldn’t be any SCCM specialization in the WinPE.wim – only extra WinPE components like MDAC, Powershell etc . The ConfigMgr specialization happens in the WinPE wim that has the pack

[mssms] RE: Just upgraded 2012 R2 to 1606

2016-09-12 Thread Miller, Todd
There shouldn't be any SCCM specialization in the WinPE.wim - only extra WinPE components like MDAC, Powershell etc . The ConfigMgr specialization happens in the WinPE wim that has the package ID appended to the name of the WIM. So make sure you use the WimPE.wim and not WinPE.XXX2.wim.

[mssms] RE: Client AutoUpgrade CB1602

2016-09-09 Thread Miller, Todd
tforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Miller, Todd Sent: Friday, September 09, 2016 10:03 AM To: mssms@lists.myitforum.com Subject: [mssms] Client AutoUpgrade CB1602 I am having a problem with the client autoupgrade process with ConfigMgr CB (1602) - it doesn't funct

[mssms] Client AutoUpgrade CB1602

2016-09-09 Thread Miller, Todd
I am having a problem with the client autoupgrade process with ConfigMgr CB (1602) - it doesn't function for clients outside protected DP boundaries. I don't use site boundaries since I have only a single site. My clients are all assigned by the OS deployment process or by installation of the c

[mssms] Remote control now required agent

2016-09-08 Thread Miller, Todd
I have the CM Remote Control tool published over citrix so that employees working from home or wifi are able to get through the client based firewall without needing to be connecting from a known IP address. I am using the instructions on creating a stand-alone SCCM Remove viewer by making th

Re: [mssms] RE: Query for TPM capable systems

2016-08-28 Thread Miller, Todd
If you want to discover what machines have tpm chips present but not enabled, you need tools from the specific hardware vendor. Like for Dell, you would need to load use the cctk tool or Powershell commandlets for Dell- each vendor would have a separate tool - or not. If the TPM chip is disabl

RE: [mssms] Adobe Pro XI on Win 10 x64

2016-08-19 Thread Miller, Todd
The C++ runtime for Visual Studio 10, is required – not sure about a hotfix… If you use the MSI to deploy Acrobat XI then you have to install it yourself. Setup.exe might install the VSC++ runtime, but I am not sure of that… The MSI definitely does not. You should also make sure Winword is

Point and Print KB3170455 -- was RE: [mssms] Microsoft set to change Windows patching in a disasterous way

2016-08-17 Thread Miller, Todd
hich we also excluded, that's certainly going the mess up things.. Von: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] Im Auftrag von Miller, Todd Gesendet: Montag, 15. August 2016 22:42 An: mssms@lists.myitforum.com<

RE: [mssms] New Dell's with TPM 2.0 issues with BitLocker

2016-08-17 Thread Miller, Todd
Is this anything? There is a hotfix for Windows 7 x64 that adds compatibility for TPM 2.0. Would it be better/easier to slip that hotfix into your image rather than downgrade your TPM version? I don’t know if you already tried that or not, or if there is something wrong with Dell’s implementa

[mssms] Microsoft set to change Windows patching in a disasterous way

2016-08-15 Thread Miller, Todd
https://blogs.technet.microsoft.com/windowsitpro/2016/08/15/further-simplifying-servicing-model-for-windows-7-and-windows-8-1/ Wow, this could be a disaster. We have had 4 or 5 cases in the last 12 months where we have had to delay the installation of a security update so that applications could

Re: [mssms] W10 v1607 - new ADMX's ?

2016-08-15 Thread Miller, Todd
The part I am scared about is that I've read that several Windows 7 policies have been removed from these templates. Not sure about exact ones - a list is hard to find. If you still have to manage Windows 7 clients and policies, then what is lost from importing (and overwriting) the policy tem

RE: [mssms] Easy way to remove MS16-087

2016-08-03 Thread Miller, Todd
I am leaning towards removing this patch too… I’ve had a case open for 5 days and the problem has been known for almost three weeks with no repair or workaround even being hinted at. For our part, it is only affecting new computers because the universal print drivers cover 95% of our printers

Re: [mssms] SCCM Current Branch

2016-07-08 Thread Miller, Todd
I also hope they avoid common error codes as versions. Thank heavens there was no configmgr 1603 or we'd never find anything in a Google search. Sent from my iPhone On Jul 8, 2016, at 16:57, Aaron Czechowski mailto:aaron.czechow...@microsoft.com>> wrote: ROTFL I just look forward to 2020…we n

RE: [External] RE: [mssms] BranchCache, ConfigMgr, and PRO Sku

2016-06-29 Thread Miller, Todd
I wonder how this works if there are vLANs/broadcast domains. I think we might have some subnets that stretch across multiple building cores and switches. It could be trouble if clients who think they are on the same subnet start sending traffic across from switch to switch. I am not a networ

[mssms] RE: AD-based KMS client activation not working

2016-06-23 Thread Miller, Todd
(I am not sure about this answer) Don't you have to put in a public KMS Client Setup key so that Windows knows it needs to look for a KMS server? The Keys to use are located here... https://technet.microsoft.com/en-us/library/jj612867(v=ws.11).aspx I've not worked much with Windows 10 yet, but t

[mssms] RE: sccm 2012 r2 sp1-->1602 questions

2016-06-23 Thread Miller, Todd
You should definitely stand up a temporary SQL 2012 server and restore a copy of your SCCM database over there and run the test DB upgrade function against it before you try to upgrade your site to 1511. Update MDT to 2013U2 before going to 1602?? -- I am not sure about that. Shouldn't that

[mssms] MDT LTI Process

2016-06-23 Thread Miller, Todd
There is no easy way to make the LTI process run as SYSTEM without explorer loaded instead of Administrator logged in is there? Notice: This UI Health Care e-mail (including attachments) is covered by the Electronic Communications Privacy Act, 18 U.S.C. 2510-2

RE: [mssms] IE10 deployed using WSUS (SCCM 2012 R2) issues

2015-03-20 Thread Miller, Todd
I've run into something similar with Office 2010. I have SP1(or2?) and post sp1 patches deployed. When a client with Office 2010 (no SP) joins up with SCCM, it scans for all those patches. It installs SP1, but all the post SP1 patches are detected at the same time as "not applicable" because

RE: [mssms] SCCM 2012 Recommendation Replace for SCCM Client Center and Right Click Tools

2015-03-16 Thread Miller, Todd
You should look into the right click tools hosted by Now Micro… http://www.nowmicro.com/rct/ For me, the “Show collections – Advanced” item doesn’t work correctly, but the rest of the tools in the collection work great. If you aren’t using role based permissions in SCCM or are using it with an

RE: [mssms] Old Subject: Boundary Subnets

2015-02-26 Thread Miller, Todd
I think the only thing here is confusion over what a supernet is. Your example is correct. You have a subnet that has a mask of 255.255.252.0 and covers a range from 10.1.1.0 to 10.1.3.255 with the gateway at 10.1.1.0. That is a subnet, not a supernet. An example of a supernet might be that

RE: [mssms] Pending Reboot and notification

2015-02-02 Thread Miller, Todd
0-0027 On Mon, Feb 2, 2015 at 1:13 PM, Miller, Todd mailto:todd-mil...@uiowa.edu>> wrote: I suppress reboots on software updates and then I run a custom program to notify the user and reboot the computer. This has been working pretty well, but I recently ran into a problem with this.

[mssms] Pending Reboot and notification

2015-02-02 Thread Miller, Todd
I suppress reboots on software updates and then I run a custom program to notify the user and reboot the computer. This has been working pretty well, but I recently ran into a problem with this. I had some computers that ended up in a "Hard Reboot was found pending" state and on those computers

[mssms] A tool idea related to Maintenace Widow discussion

2015-01-08 Thread Miller, Todd
All the discussion of Maintenance Windows has me thinking about a significant gap in the SCCM product. Maintenance windows are pretty terrific for clients that are always on like servers, but are not so hot for clients that go to sleep. It is missing in the product to schedule a wake up at the

[mssms] RE: Another great alternative to Software Inventory

2014-12-12 Thread Miller, Todd
Sorry, I got the Technet post contributors wrong, Sherry and Jason made the recommendations on Technet. Garth had the great suggestion on this list pointing to Sherry's blog on using DCM. From: Miller, Todd Sent: Friday, December 12, 2014 10:14 AM To: mssms@lists.myitforum.com Su

[mssms] Another great alternative to Software Inventory

2014-12-12 Thread Miller, Todd
There was some discussion about Software Inventory recently and about looking for alternatives due to its resource intensive nature on the client - and the amount of (useless?) data sent to the DB. In looking for an answer to another problem, I tripped over this post by Sherry and Garth (thanks

[mssms] Schedule wake up for defered deployments?

2014-12-10 Thread Miller, Todd
I am thinking of making a script that runs prior to the computer sleeping. It will evaluate whether the computer has SCCM Software deployment that has been deferred until the next maintenance window. If the computer has a deferred installation, I would like to schedule a wake up task that will

[mssms] RE: Software Updates & Maintenance Windows:

2014-12-10 Thread Miller, Todd
work that way since user initiated deployment - which is what this would be - don't consider maintenance windows. J From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Miller, Todd Sent: Tuesday,

[mssms] RE: Software Updates & Maintenance Windows:

2014-12-09 Thread Miller, Todd
Maintenance windows are a little tricky with software updates. You have to choose among two options that both have pitfalls. Either you set a deadline and ignore maintenance windows, in which case the update installs at the deadline or the next time the computer is on after the deadline. So b

RE: [mssms] RE: CCMEXEC is taking up over 3gb of RAM

2014-12-05 Thread Miller, Todd
uter. My fingers are crossed that in vNext they'll make some feature renames to fix the confusion: "Hardware Inventory" = "System Inventory" "Software Inventory" = "File Inventory" From: listsad...@lists.myitforum.com<mailto:listsad...@lists

[mssms] RE: CCMEXEC is taking up over 3gb of RAM

2014-12-05 Thread Miller, Todd
How about we rally to get Microsoft to fix software inventory instead of begging everyone to stop using it? Their AV software is touching every file as it is read in and doing full scans periodically successfully, right? The index service is crawling the hard drive and maintaining a DB of file

RE: [mssms] Question about Limiting Collections

2014-12-05 Thread Miller, Todd
– like laptops – will never install the software, also bad. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Miller, Todd Sent: Thursday, December 04, 2014 11:43 AM To: mssms@lists.myitforum.com Subject: RE: [mssms] Question about Limiting Collections

RE: [mssms] Question about Limiting Collections

2014-12-04 Thread Miller, Todd
computers in the collection On Thu, Dec 4, 2014 at 10:57 AM, Miller, Todd mailto:todd-mil...@uiowa.edu>> wrote: Maintenance windows shift the schedule of deployment to be client dependent, where my current workflow puts the schedule on the package and advertisement. I am not sure I can o

RE: [mssms] Question about Limiting Collections

2014-12-04 Thread Miller, Todd
an include rule. On Thu, Dec 4, 2014 at 9:26 AM, Miller, Todd mailto:todd-mil...@uiowa.edu>> wrote: I have a question about the function of limiting collections. In SCCM 2012, they are having a undesirable effect where when a limiting collection is changed, the collections that are limited by

[mssms] Question about Limiting Collections

2014-12-04 Thread Miller, Todd
I have a question about the function of limiting collections. In SCCM 2012, they are having a undesirable effect where when a limiting collection is changed, the collections that are limited by that collection seem to reevaluate immediately. I have a workflow in 2007 that this new function di

RE: [mssms] Programs take a while to kick off

2014-11-13 Thread Miller, Todd
6:33 PM, "Jeff Poling" mailto:jeffrey.d.pol...@outlook.com>> wrote: Based on the log snip, it looks like the delay is due to waiting on the content of the package. Jeff Sent from my Windows Phone ________ From: Miller, Todd<mailto:todd-mil...@uiowa.e

Re: [mssms] Programs take a while to kick off

2014-11-12 Thread Miller, Todd
g on the content of the package. Jeff Sent from my Windows Phone ________ From: Miller, Todd<mailto:todd-mil...@uiowa.edu> Sent: ‎11/‎12/‎2014 5:38 PM To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com> Subject: [mssms] Programs take a while to

[mssms] Programs take a while to kick off

2014-11-12 Thread Miller, Todd
I have a program that is set to run at 3:07AM potentially every day. This is a package/program and it is set to run from the DP. My problem is that the execmgr kicks off at the right time, but there is an inexplicable delay between when execmgr kicks off and when the executable is started - in

[mssms] Unusually high outbound network traffic from WSUS today?

2014-09-09 Thread Miller, Todd
Did anyone else experience unusually high network utilization from WSUS/SUP today? I haven't approved any patches yet so my high utilization must be from the patch definitions file. For some reason WSUS spiked outbound on the network today shortly after Noon and lasted for about 1 hour. Was th

[mssms] RE: vb query against cm for mac

2014-08-29 Thread Miller, Todd
Here's is part of the way there. I have a script that takes the computer name and does a SQL query (via WMI) and pulls the MAC so that it can be used to send a WOL packet to the named machine using the WOL.dll You will need to edit this a little bit if you want to just pull the MAC address - b

RE: [mssms] SCCM Software Inventory issue

2014-08-21 Thread Miller, Todd
I believe that the File Details section of Resource Explorer will only show files that are not associated with products/software that are unknown to SCCM. If the file is associated with known software, it is filtered from displaying in Resource Explorer file details. From: listsad...@lists.myi

[mssms] RE: Destroy Java!

2014-08-12 Thread Miller, Todd
I have had some success with the uninstall script here. http://www.itninja.com/question/silent-uninstall-java-all-versions Search that web page for the text '2011.04.24' Of course you still need to make sure all IE instances and javaw.exe processes are closed prior to uninstall. There are a few

[mssms] RE: Internet Explorer & ActiveX

2014-08-11 Thread Miller, Todd
My main block to just deploying Java updates to all systems with Java installed is the two major statistical packages - SAS and SPSS. They both install very old customized versions of Java and as far as I can tell will not operate correctly with any current versions of Java. I have to be extra

[mssms] RE: Software Center Options Tab

2014-07-31 Thread Miller, Todd
You can't change the default that Microsoft has chosen from the console. There are scripts you can run on each client to set it differently, but no way to change the default or change all systems centrally. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf

[mssms] RE: ConfigMgr 2012 and Request Filtering

2014-07-21 Thread Miller, Todd
yitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Miller, Todd Sent: Monday, July 21, 2014 2:09 PM To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com> Subject: [mssms] ConfigMgr 2012 and Request Filtering On SCCM 2012 distribut

[mssms] ConfigMgr 2012 and Request Filtering

2014-07-21 Thread Miller, Todd
On SCCM 2012 distribution points, with the move away from IIS WebDAV, is request filtering for file types still a concern? I had to unblock several file types on my 2007 DPs, and I wonder if I need to do the same for 2012 DPs. What about those hidden segment setting that were so critical in 200

[mssms] RE: Software updates not installing during build & capture

2014-07-16 Thread Miller, Todd
Yes, you need to rescan for patches before running the second (or third) Install Software Updates step. The method to rescan is just like in the article you reference... Run Command line with WMIC /namespace:\\root\ccm path sms_client CALL TriggerSchedule "{----0113}

RE: [mssms] Secunia

2014-07-10 Thread Miller, Todd
e EXE installer? Thanks, Mike From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Miller, Todd Sent: Wednesday, July 09, 2014 4:50 PM To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com> Subject

RE: [mssms] Secunia

2014-07-09 Thread Miller, Todd
I find the scanning portion of the tool to work very well. You can scan using a client on the system, or it can be made to scan against software inventory data in SCCM. I choose to scan against SCCM software inventory data, but that does mean you have to turn on SCCM software inventory which p

[mssms] Doble Reboot patch

2014-06-17 Thread Miller, Todd
There was a patch released in June that causes double reboots during OSD Task Sequences. Microsoft released an article that says they will keep up to date as patches are released that cause double reboots. This article has not been updated yet. However the article has not been updated with inf

Re: [mssms] Solarwinds Patch Management

2014-06-14 Thread Miller, Todd
$10 client/year would pay for 1.5 FTE at my place. I would rather pay someone to write the patches in house and use the leftover hours to do other work. I don't think patching is worth more than $2 client/year. More than that and the numbers don't add up. On Jun 13, 2014, at 10:29 AM, at "Ma

[mssms] RE: Recover DP from package volume failure

2014-06-12 Thread Miller, Todd
tforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Miller, Todd Sent: Wednesday, June 11, 2014 3:43 PM To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com> Subject: [mssms] Recover DP from package volume failure Running SCCM 2012 R2 w/CU1 My (only) DP is running low o

[mssms] Recover DP from package volume failure

2014-06-11 Thread Miller, Todd
Running SCCM 2012 R2 w/CU1 My (only) DP is running low on space so I am going to add a couple more drives and expand it to Raid 10. I am pretty sure this will be destructive to the data on the volume. The DP's OS is not on this volume, but the packages and the SiS for the DP is. I am not sur

[mssms] Mighty MOFin' power rangers

2014-06-02 Thread Miller, Todd
I have a problem/question with a MOF edit. I am moving some MOF edits I made from 2007 to 2012 and am running into a little trouble with the ones that have conditional 32/64 components to them. Let's take Winlogon for example. I collect data from the Winlogon reg key to catch autologon machine

RE: [mssms] RE: Emory IT accidentally deploys Windows 7 to everything

2014-05-19 Thread Miller, Todd
lso do things like run a check via WMI or TSVs that a system is valid to have the TS run on it. On 17 May 2014, at 15:35, "Miller, Todd" mailto:todd-mil...@uiowa.edu>> wrote: This happens enough that you have to start wondering if the software could be improved in some way to hel

RE: [mssms] RE: Emory IT accidentally deploys Windows 7 to everything

2014-05-17 Thread Miller, Todd
This happens enough that you have to start wondering if the software could be improved in some way to help prevent it. Maybe there should be alerts or limits or a wizard that summarizes any change that affects a deployment or target collection. Like when you click OK, maybe there would be a "Th

[mssms] Delivering XP patches to SCCM clients

2014-04-25 Thread Miller, Todd
Does anyone know, when you buy extended support for XP patches, how are those patches delivered? Would these patches continue to be easily deployable via SCCM? Would you need to check each one in with SCUP or would it be even worse than that? Notice: This UI H

[mssms] RE: Remote controlling a server and observing the logged on user

2014-04-23 Thread Miller, Todd
Remote control shadowing has been made available again after a long hiatus. It is available in Windows Server 2012 R2, but doesn't have anything to do with SCCM. http://microsoftplatform.blogspot.nl/2013/07/detailed-walkthrough-on-remote-control.html From: listsad...@lists.myitforum.com [mail

[mssms] RE: Power management in SCCM 2012

2014-04-17 Thread Miller, Todd
tings). J From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Miller, Todd Sent: Wednesday, April 16, 2014 5:04 PM To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com> Subject: [mssms] Power managem

RE: [mssms] SCEP

2014-04-17 Thread Miller, Todd
SCEP is AV only though, right? What do you do to manage your firewall and disk encryption? I don’t appreciate the salad bar approach to security - a little bit from here a little bit from there. I want a suite to manage all the pieces. I suppose that is why McAfee wins the magic quadrant com

[mssms] Power management in SCCM 2012

2014-04-16 Thread Miller, Todd
Does anyone know why power management is not included in the client settings schemes, and rather is set as a property of a collection? It seems to me like the power management configs would be a natural fit with the client settings scheme and their ability to set priorities. To me this seems l

[mssms] RE: HW Inventory size limit

2014-04-16 Thread Miller, Todd
Your hardware MIF is that big - you must be inventorying something "bad." However, you can increase the allowed MIF size by editing the registry. The reg key (I think) is HKLM\Software\Microsoft\SMS\Components\SMS_INVENTORY_DATA_LOADER\Max MIF Size Set it to something like 320 (50MB). Is t

RE: [mssms] Exclude a group of machines from having updates managed by SCCM

2014-04-02 Thread Miller, Todd
. Use the Exclude Collection rules and add it to you Prod security updates collection? Rich Sent from my iPhone On Apr 2, 2014, at 11:37 AM, "Miller, Todd" mailto:todd-mil...@uiowa.edu>> wrote: I have an OU of machines that have the SCCM agent, however for these machines I

RE: [mssms] Exclude a group of machines from having updates managed by SCCM

2014-04-02 Thread Miller, Todd
filter on the gpo. > > Sent from Windows Mail > > From: Miller, Todd > Sent: Wednesday, April 2, 2014 12:39 PM > To: mssms@lists.myitforum.com > > I have an OU of machines that have the SCCM agent, however for these > machines I want them to apply updates from Microsoft W

[mssms] Exclude a group of machines from having updates managed by SCCM

2014-04-02 Thread Miller, Todd
I have an OU of machines that have the SCCM agent, however for these machines I want them to apply updates from Microsoft Windows Updates rather than having their updates managed by SCCM. Is there a way to have a small number of clients ignore any Windows Updates settings and just go out to Mic

RE: [mssms] Windows XP patching in April 2014

2014-04-01 Thread Miller, Todd
EOL for Windows XP to me is not as concerning as the fact that mainstream support for Windows 7 ends in < 10 months. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Daniel Ratliff Sent: Tuesday, April 01, 2014 3:45 PM To: mssms@lists.myitforum.com Subje

RE: [mssms] IT/Dev Connection

2014-03-04 Thread Miller, Todd
And half of those 11 SCCM sessions are for Intune. To be fair, you should probably include a few additional topics, like MDT in your count. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Ed Aldrich Sent: Tuesday, March 04, 2014 12:49 PM To: mssms@lists

[mssms] RE: User logs out during package based install

2014-03-04 Thread Miller, Todd
tsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Miller, Todd Sent: Monday, March 03, 2014 3:36 PM To: mssms@lists.myitforum.com Subject: [mssms] User logs out during package based install I have a package (old style) that I am using SCCM to deploy. The advertisement is set to

[mssms] User logs out during package based install

2014-03-03 Thread Miller, Todd
I have a package (old style) that I am using SCCM to deploy. The advertisement is set to run whether or not a user is logged in, is set to run with admin rights and is set to allow interaction with the user. The advertisement runs a program called Installer.exe which is a custom Autoit script.

[mssms] RE: TSQL Calculate Date

2014-02-10 Thread Miller, Todd
This might be enough to get you where you need to go. I do a report where I show the machines with warranty expiring in the next @DAYSLEFT. This is used to show machines expiring in the next couple of weeks so we can go out and inspect those systems to make sure there is nothing wrong with them

RE: [mssms] After installing slow OSD KB in R2, it is still slow? Did I miss something?

2014-02-05 Thread Miller, Todd
Here are problems I remember running into that can cause downloads from DPs to go slow My details are all sketchy, sorry. Does your network support IPv6? If not, do you have it disabled on your servers? If you have IPv6 enabled on your servers and they have registered their IPv6 address i

[mssms] Question about computer group discovery

2014-02-03 Thread Miller, Todd
I just want to make sure I am not missing a feature. There is no longer in SCCM 2012 a way to 1. Discover group memberships of only existing SCCM objects (can't do group discovery without it adding new objects to SCCM) Or 2. Discover ALL the AD groups that SCCM clients are in (can't discover

RE: [mssms] SCCM 2007 Query/Collection for Unnstall java version for below 6.18

2014-01-29 Thread Miller, Todd
LIKE '%Java(TM)%' OR soft.ProductName0 LIKE 'J2SE%' OR soft.ProductName0 LIKE 'Java 2 Runtime%' OR soft.ProductName0 LIKE 'IBM 32-bit Runtime%') AND sys.Client0 = '1' ORDER BY Name0 From: listsad...@lists.myitforum.com [mailto:listsad...@li

RE: [mssms] SCCM 2007 Query/Collection for Unnstall java version for below 6.18

2014-01-29 Thread Miller, Todd
I have been successfully using this script to remove Java versions for a couple of years. http://www.mockbox.net/bits-and-pieces/vbs-scripts/282-uninstall-java-using-vbs-script There are a few versions of Java that cannot be removed in a scripted way, but those are discussed in the script. Als

[MDT-OSD] RE: Imaging Questions

2014-01-29 Thread Miller, Todd
Yeah, I dunno about this. The GUID and MAC addresses will be new, but the computer will have an established SCCM account (and McAfee EPO and any other managementy type IDs or licensed software that gloms on to the GUID) that will get all fouled up. Maybe - best case, you would just end up with

[mssms] RE: Imaging Questions

2014-01-29 Thread Miller, Todd
Yeah, I dunno about this. The GUID and MAC addresses will be new, but the computer will have an established SCCM account (and McAfee EPO and any other managementy type IDs or licensed software that gloms on to the GUID) that will get all fouled up. Maybe - best case, you would just end up with

[mssms] RE: Client Update to CU3 during TS

2014-01-13 Thread Miller, Todd
I've been successfully deploying the patched SCCM client during TS in the way described in the Deployment Guys blog here http://blogs.technet.com/b/deploymentguys/archive/2013/06/04/automatically-populate-the-patch-property-for-the-configmgr-client-installation-script-update.aspx There are a cou

RE: [mssms] RBAC, is this possible?

2014-01-08 Thread Miller, Todd
If you start adding users to a bunch of new security groups to manage application deployments, make sure you keep an eye on your Kerberos token size. Once a user is in 70ish AD groups you may start encountering problems with systems that use Kerberos authentication. The buffer size for Kerbero

[mssms] RE: WSUS hotfixes not appearing in SCCM 2012

2013-12-04 Thread Miller, Todd
_ From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Miller, Todd Sent: Wednesday, December 4, 2013 12:19 PM To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com> Subject: [mssms] WSUS hotfixes not appearing i

[mssms] WSUS hotfixes not appearing in SCCM 2012

2013-12-04 Thread Miller, Todd
I have imported 3 updates into WSUS to deploy with SCCM 2012. There is 2775511, 2732673, and 2729738. That first one is the 90 hotfix enterprise rollup thing for Windows 7 and the other two are listed as required post 2775511 updates. The first one imports into WSUS fine and on syncing with S

[mssms] Basic powershell Question

2013-11-18 Thread Miller, Todd
I have a workflow where each month, after I create a SoftwareUpdateGroup for the month I have to create 8 deployments for that group with various different mandatory times and collections targeted. I think I would like to use powershell to do that. This will be my first powershell script - ma

RE: [mssms] HTA program for add a user in Local administrator group

2013-11-11 Thread Miller, Todd
Here is the VBScript code I use to verify user's password. CONST ADS_SCOPE_SUBTREE = 2 CONST ADS_SECURE_AUTHENTICATION = &H0001 CONST ADS_SERVER_BIND = &H0200 Set objCont

RE: [mssms] Deploy RDP Shortcut using SCCM 2012

2013-11-11 Thread Miller, Todd
I use autoit executables for things like this. I avoid copying shortcuts made on one machine to another. I've had some bad experiences with that process in the past and so now I always create shortcuts on the target - previously using SMSInstaller and now with AutoIt. From: listsad...@lists.m

RE: [mssms] SCCM Internet Explorer Homepage Report

2013-11-05 Thread Miller, Todd
You might have to shift the data into the machine space in some way - either into WMI or HKLM. You could have a startup script create a HKLM key someplace and then grant authenticated users write access to the HKLM location. Then have a logon script that would write the data into HKLM. Then a

[mssms] RE: SMTSPostAction - is it possible to run multiple post actions?

2013-11-05 Thread Miller, Todd
Autoit scripts can be written in a way so that the script is deleted after it is executed. You could look into writing a self-destructing AutoIt script that performs all the tasks you want to accomplish post TS. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Be

[mssms] RE: Detect CryptoLocker with DCM?

2013-10-29 Thread Miller, Todd
this too. Dewayne From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Miller, Todd Sent: Tuesday, October 29, 2013 2:58 PM To: mssms@lists.myitforum.com<mailto:mssms@lists.myitforum.com> Subject: [mssms] Detect

[mssms] Detect CryptoLocker with DCM?

2013-10-29 Thread Miller, Todd
Assume SCCM 2007withR2. I've been asked to develop a way to detect machines that have been affected by CryptoLocker. CryptoLocker infections will have a registry key at HKCU\Software\CryptoLocker. I thought I might first try to use DCM to detect machines where that registry key exists for an

  1   2   >