Quantcast
Channel: Configuration Manager 2012 - Security, Updates and Compliance forum
Viewing all 6382 articles
Browse latest View live

lost icon in win 10

$
0
0

Malware removed my icons in window 10 including msft edge

how do I get them back?


error=0x8024401 SCCM 2012R2

$
0
0

Hi All

i am having an issue on five servers at one of my clients - 3 of the 5 is at the same physical location while the other 2 is at a different site

i see tht this error refers to a network time out error but the rest of the servers patched fine at the 2 respective sites:

 Error=0x8024401c

however other servers at these sites have patched successfully -

I have ran the following script to try to remediate the issue

@echo off

cls

REM ==================================================================================

REM DESCRIPTION    : This script resets all of Windows Update Agent settings.

REM AUTHOR        : Luca Fabbri

REM VERSION HISTORY: 2.0 - Start

REM ==================================================================================

@echo 1. Stopping Windows Update, BITS, Application Identity, Cryptographic Services and SMS Host Agent services...

net stop wuauserv

net stop bits

net stop appidsvc

net stop cryptsvc

net stop ccmexec

@echo 2. Checking if services were stopped successfully...

sc query wuauserv | findstr /I /C:"STOPPED"

if %errorlevel% NEQ 0 goto END

sc query bits | findstr /I /C:"STOPPED"

if %errorlevel% NEQ 0 goto END

sc query appidsvc | findstr /I /C:"STOPPED"

if %errorlevel% NEQ 0 sc query appidsvc | findstr /I /C:"OpenService FAILED 1060"

if %errorlevel% NEQ 0 goto END

sc query cryptsvc | findstr /I /C:"STOPPED"

if %errorlevel% NEQ 0 goto END

sc query ccmexec | findstr /I /C:"STOPPED"

if %errorlevel% NEQ 0 sc query ccmexec | findstr /I /C:"OpenService FAILED 1060"

if %errorlevel% NEQ 0 goto END

@echo 3. Deleting AU cache folder and log file...

rd /s /q %SystemRoot%\SoftwareDistribution

@echo 4. Re-registering DLL files...

cd /d %WinDir%\system32

regsvr32.exe /s atl.dll

regsvr32.exe /s urlmon.dll

regsvr32.exe /s mshtml.dll

regsvr32.exe /s shdocvw.dll

regsvr32.exe /s browseui.dll

regsvr32.exe /s jscript.dll

regsvr32.exe /s vbscript.dll

regsvr32.exe /s scrrun.dll

regsvr32.exe /s msxml.dll

regsvr32.exe /s msxml3.dll

regsvr32.exe /s msxml6.dll

regsvr32.exe /s actxprxy.dll

regsvr32.exe /s softpub.dll

regsvr32.exe /s wintrust.dll

regsvr32.exe /s dssenh.dll

regsvr32.exe /s rsaenh.dll

regsvr32.exe /s gpkcsp.dll

regsvr32.exe /s sccbase.dll

regsvr32.exe /s slbcsp.dll

regsvr32.exe /s cryptdlg.dll

regsvr32.exe /s oleaut32.dll

regsvr32.exe /s ole32.dll

regsvr32.exe /s shell32.dll

regsvr32.exe /s initpki.dll

regsvr32.exe /s wuapi.dll

regsvr32.exe /s wuaueng.dll

regsvr32.exe /s wuaueng1.dll

regsvr32.exe /s wucltui.dll

regsvr32.exe /s wups.dll

regsvr32.exe /s wups2.dll

regsvr32.exe /s wuweb.dll

regsvr32.exe /s qmgr.dll

regsvr32.exe /s qmgrprxy.dll

regsvr32.exe /s wucltux.dll

regsvr32.exe /s muweb.dll

regsvr32.exe /s wuwebv.dll

@echo 5. Removing WSUS Client Id...

REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v AccountDomainSid /f

REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v PingID /f

REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientId /f

@echo 6. Resetting Winsock and WinHTTP Proxy...

netsh winsock reset

proxycfg.exe -d

netsh winhttp reset proxy

@echo 7. Starting SMS Host Agent, Cryptographic Services, Application Identity, BITS, Windows Update services...

net start ccmexec

net start cryptsvc

net start appidsvc

net start bits

net start wuauserv

@echo 8. Deleting all BITS jobs...

bitsadmin.exe /reset /allusers

@echo 9. Forcing AU discovery...

wuauclt /resetauthorization /detectnow

:END

these all virtual servers

i get the following error in

scanagent.log

windowsupdate.log

thank you

WSUS Sync Failure

$
0
0

Hello,

I was  trying to import kb2999226 update from Catalog website and once this was done, I tried to do WSUS sync which gave me the following error. 

Please suggest.

Maintenance of WSUS,SUP that attached to SCCM 2012 R2 hierarchy

$
0
0

Hi,

I am using Software updates from SCCM 2012 R2 after Integrating the WSUS and SUP.

But i want to do the maintenance of WSUS, SCCM and SUP so that i can got the more disk space , please share the steps that i can follow.


Shailendra Dev

Problem with SCEP

$
0
0

Apologies if this is the wrong forum for a question about SCEP.

We have a new issue with SCEP in our environment where it is taking 30-60 seconds to finish scanning a single file downloaded from our SRS environment. Is there a way to exclude scanning downloads from local Intranet sites or sites in general?

Thank you.

Offline Download/synchronize Updates on SCCM 2012 R2 Site Server/SUP

$
0
0

Hi,

I want to deploy the windows updates from SCCM 2012 R2. but Internet can not be allow on the SCCM Site Server`s LAN. Internet is working on different LAN Segment but there would be no any communication from SCCM Site Server`s LAN. i can install WSUS and synchronize the Updates on that but how can i download and synchronize the required updates on SCCM Site Server where SUP installed and from I can deploy the Updates to Devices.. i am looking for any blog...


Shailendra Dev

Update Scan not scanning all the updates

$
0
0

Hi,

We are using SCCM 2012 R2 SP1 CU2 . We are patching our Windows servers with latest updates using SCCM.

We have taken outage of 8 hours to update critical servers.

below is problem description:

At first time maximum updates are downloaded and installed and server restarted and servers are showing compliant. We ran manual scan /evaluation cycle but no update, all servers are showing compliant in SCCM report "Update enforcement history"

Now suddenly after 1 or 2 day , machine are showing 1-2 updates  are installed and pending for restart and compliant status changed to pending restart.

Now this is the problem , Application Owner escalated it why it is showing pending restart now , it should have been updated in given 8 hours outage window.

It should scan and update all required updates immediately. I also noticed there was not error while agent scanning /evaluating updates. Can someone help to get rid of the update scan issue.? what can be the fix?

Regards

Pankaj


MS Forum, PankajR

SUP SYNC Error 0X80131509

$
0
0

I have an issue, I can not figure out..   

Originally, I had SUP obtain windows updates directly from Microsoft.   Things worked very well.

We purchased Retina CS to mitigate WIndows & 3rd Party updates. 

 

So, for this to work,  we had to point SUP to an existing Upstream WSUS Server.

 

The Architecture is as follows;
SCCM Server 2012 -  2012 server, has a Back-End SQL Server 2012 Server.
The SCCM Server SUP connects to the Upstream WSUS Server [2008 server R2], that has a Backend 2008 SQL Server
The SCCM Server 2012 is a Automonus, 

 

 

WSYNCMGR  Log:

 

Sometimes in the WSYNCMGR, I get succeeded;  mostly I get Failed as show here..

 

Sync succeeded. Setting sync alert to canceled state on site NET  $$<SMS_WSUS_SYNC_MANAGER><08-08-2013 23:04:49.592+300><thread=5944 (0x1738)>
 

Sync failed: The operation has timed out. Source: Microsoft.UpdateServices.Internal.DatabaseAccess.ApiRemotingCompressionProxy.GetWebResponse  $$<SMS_WSUS_SYNC_MANAGER><08-09-2013 06:17:09.689+300><thread=5944 (0x1738)>

 

 

Software Update Point Synchronization Status

 

Synchronization source:  BR-WSUS

Synchronization: failed

Code:  0X80131509

 

Thank you for your help..


Update windows from 32-bit to 64-bit

$
0
0

Hello guys,

Can we update windows from 32-bit to 64-bit using SCCM ? or is there any limitations??

Regards,

Robert

Endpoint Protection does not report Virus founds

$
0
0

Hi

I've an SCCM 1602 Environment with Server 2012R2 Servers.

we use SCEP für Antimalware. Now we have the issue, that some Servers or Clients doesn't Report if a Virus is found. On the Computer Object in the Collection, under the Register "Malware Detail" is nothing available. for other Servers or Clients it works fine in the same Environment.

Any ideas? does anybody know, which Logfiles are interessting for the Notfication?

Thanks, Daniel

Office 2010 to Office 2016 - Upgrade Update???

$
0
0

Hello,

In our SCCM2012 environment MS provided an update to IE11.  This meant for our IE9,10 users we simply deployed the IE11 upgrade.  This worked very well for us!

Keeping in mind we are licensed correctly....

Which made me wonder.

Is there an SCCM "Update" to office 2016?  (I know I'm hopeful).

Thank you,

Tony H>

Haven't been able to manage settings in Microsoft Edge issues. Unable to update adobe or play games on POGO correctly

$
0
0

I am very disappointed with the problems I am having with the Microsoft Edger browser. It's one thing after another. If, POGO,

the gamesite I usually play on has a JAVA update, I have to waste so much time trying to do the update.  It shows as a Browser Issue in Windows 10.  \

I've never heard a peep out of Cortana, she must have expired.

I am a 69 year old lady and don't do good with trying to make it work following the directions.

PLEASE HELP

Thank you - Cathy Page

Windows and 3rd Party Updates "Waiting to Install"

$
0
0

Using SCCM 2012 R2 CU3 in a Windows 7 x64 Enterprise environment. A few months back I experienced an issue with the deployment packages that get created for pushing out Windows Updates along with Adobe and Java.  I am creating my packages usinghttp://prajwaldesai.com/deploy-software-updates-using-sccm-2012-r2/ as my guide.  Today I put a system on the wire to update and all the updates are spinning with a Waiting to Install status.  My first update is Adobe Reader XI (11.0.17) which I pushed out on 7/14 and it has been updating with no issue until today and the remainder are July's Windows updates. What I end up having to do is Edit Membership and remove the updates from the Software Update Groups and then delete everything and recreate.  Its because this error The error is:  The source directory\\xxxxxsccm\packagesource$\software update packages\all required updates\4d3ab8d3-ad70-4df8-bb99-3ac2800b994f for package DAV00013 does not exist.

I found an ADR for All Required Updates Microsoft which is not enabled but is pointed to the original Microsoft updates group that failed.  It is still pointed to the old software update group and I just realized that it was created by AutoUpdateRuleEngine.  If I change the deployment package to reflect the new Windows Update package would this resolve the issue.

I am not sure what logs I need to be looking at to determine why this is breaking, so any info would be appreciated and I can then attach them to this so you can understand and assist me with resolving this.

Mark

Restore Declined WSUS Updates to SCCM 2012

$
0
0

I have some updates that were declined in WSUS a few years ago. I need to restore and deploy them through SCCM. I've moved the updates from "Declined" to "Not Approved" in WSUS, when WSUS Synchronizes with the SUP in SCCM 2012 R2, the updates are not appearing in the Software Updates Catalog. I've synced WSUS, and SCCM is logging events that the Sync between WSUS and the SUP was successful.

Is there another step I'm missing here?

Approved updates synchronization from WSUS to SCCM

$
0
0

Can we configure the SUP to sync only the approved updates in WSUS? If yes please mention the configuration details.


Can multiple ADRs share the same deployment package directory?

$
0
0

I followed a guide for setting up automatic deployment rules for several scheduled deployments, but I think I misinterpreted how the deployment packages should be setup and used. We have separate deployment days that administrators can choose from, and depending on which day of the week they want updates deployed via SCCM, they will belong to an associated collection. Currently that means that there are 8 collections that a server could be a member of, therefore 8 rules are setup to schedule the deployment and installation on the appropriate date/time.

Where I think I have mucked it up is that I created a different deployment package location for each of these rules. So within "\Sources\Windows Updates\" there are 8 different folders with variable numbers of updates in each depending on how the rule evaluations worked out for each collection. Can the same DP folder be used by multiple rules without a problem? Most of the updates are in common, so what I'm doing now is a huge waste of disk space.

WIN 10 UPGRADE DEADLINE, WHAT IS THE EXACT DAY? IS THERE ANY EXTENSIONS?

$
0
0

I plan to do the upgrades on Friday the 29th and Saturday the 30th.

WIN 10 UPGRADE DEADLINE, WHAT IS THE EXACT DAY? IS THERE ANY EXTENSIONS?

Windows Defender Updates

$
0
0
Windows 10 machines did not get defender updates via SCCM or Microsoft Site. SCCM console shows these machines as "Active client at risk". Tell me the log file to check the error and best solution for this issue?

Removed Update Classifications from SUP Properties

$
0
0

A simple query.

If we enabled some of Classification from SUP properties from Site Settings-->SUP and now if we disabled those and kept a few of them. Now, do the updates that fall under those particular category and are already part of the SCCM database will be affected in any way.

For example : If I only have enabled "Critical and Security" Updates from Classifications and go on to tick mark "Service Packs, Updates" etc. I sync them and download and deploy them to machines. now if I untick Service Packs and Updates from Classifications, do they affect the already deployed updates of that category? Like I have already created some Software Update Groups and Software Update Packages and deployed to machines in hierarchy. When these categories are removed, would it affect the ones which are already deployed in any sense, like stopped reporting of compliance from machines etc.
May be if it does not affect immediately but would that happen in the next WSUS sync ?

Thanks


SCCM 2012 R2 SP1 Software updates not detected

$
0
0

Hello,

          I have a SCCM 2012 R2 SP1 environment (having SQL, DP and MP on same box) managing 500 clients.

          Unfortunately None of the SCCM clients are detected the software update this month with errors on WUAhandler, None of the SCCM Components are critical

WUAHANDLER LOG:

<![LOG[Search Criteria is (DeploymentAction=* AND Type='Software') OR (DeploymentAction=* AND Type='Driver')]LOG]!><time="01:50:59.923+420" date="07-25-2016" component="WUAHandler" context="" type="1" thread="3900" file="cwuahandler.cpp:2897">
<![LOG[Async searching of updates using WUAgent started.]LOG]!><time="01:50:59.923+420" date="07-25-2016" component="WUAHandler" context="" type="1" thread="3900" file="cwuahandler.cpp:560">
<![LOG[Async searching completed.]LOG]!><time="01:50:59.954+420" date="07-25-2016" component="WUAHandler" context="" type="1" thread="428" file="cwuahandler.cpp:2049">
<![LOG[OnSearchComplete - Failed to end search job. Error = 0x8024401f.]LOG]!><time="01:50:59.954+420" date="07-25-2016" component="WUAHandler" context="" type="3" thread="3900" file="cwuahandler.cpp:3045">
<![LOG[Scan failed with error = 0x8024401f.]LOG]!><time="01:50:59.954+420" date="07-25-2016" component="WUAHandler" context="" type="3" thread="3900" file="cwuahandler.cpp:3501">
<![LOG[Its a WSUS Update Source type ({7721DAE1-B780-4DC0-B019-90BA63568009}), adding it.]LOG]!><time="01:51:06.654+420" date="07-25-2016" component="WUAHandler" context="" type="1" thread="3900" file="sourcemanager.cpp:1232">
<![LOG[Existing WUA Managed server was already set (http://SCCMSERVER.ABC.com:8530), skipping Group Policy registration.]LOG]!><time="01:51:06.669+420" date="07-25-2016" component="WUAHandler" context="" type="1" thread="3900" file="sourcemanager.cpp:936">
<![LOG[Added Update Source ({7721DAE1-B780-4DC0-B019-90BA63568009}) of content type: 2]LOG]!><time="01:51:06.669+420" date="07-25-2016" component="WUAHandler" context="" type="1" thread="3900" file="sourcemanager.cpp:1265">
<![LOG[Scan results will include superseded updates only when they are superseded by service packs and definition updates.]LOG]!><time="01:51:06.685+420" date="07-25-2016" component="WUAHandler" context="" type="1" thread="3900" file="cwuahandler.cpp:2890">

Kindly Someone help to understand the issue.

Viewing all 6382 articles
Browse latest View live


Latest Images

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>