Quantcast
Channel: Configuration Manager 2012 - Security, Updates and Compliance forum
Viewing all 6382 articles
Browse latest View live

it worked

$
0
0
I read several suggestions and picked the one that seemed the one that would work and it did. Thank you the fastest and easiest fix I have ever had. I am book marking this site cuz I just happened to find it.

Clients stops receiving software updates from SCCM

$
0
0

Setup history: Sccm 2012 RTM on Server 2008 R2, upgraded to SCCM 2012 SP1. Then moved to Server 2012 (following MS guidelines for restore) and SCCM upgraded to R2.

All in a single server setup including WSUS and SUP.

Problem: Clients does not receive Software Updates any longer.

Everything has been working great about WSUS and SUP but for some time the clients hasn’t received any deployed software updates!? I’m not sure when it stopped, maybe after SP1 upgrade or maybe after R2 upgrade.

After a couple of weeks googling, reading logs and banging my head against the wall, we had an external contractor to look at it but he neither could see anything wrong in the log files. He reinstalled the wsus and sup with no effect. After that I removed all software update groups, deployment packages and the files from the deployment package source and started from scratch creating software update groups and deployment packages. After that it started working again for about a week and then stopped again.

I have tried to remove everything from sccm again without any luck. I haven’t tried to reinstall wsus and sup again.

I’m stuck – what to do next?

Any help would be really great!

Regards

Mikkel

SCCM Removing updates?

$
0
0

Hi all,

We've recently just started using SCCM 2012 to install software updates, our first try was installing Internet Explorer 9 and a cumulative security update to about 200 Windows 7 clients.

I've seen a few instances now where the update has installed successfully, but it has removed a whole load of other Windows updates, from Microsoft Office, Windows etc.

The deployment worked successfully on most of the other machines. I'm about to go through all of the logs and see what's gone on here, any ideas?

Thanks

 

Security Scopes for Antimalware Policy

$
0
0

A few others and myself have begun discussing our problems with security permissions on Antimalware Policies in a previous thread: http://social.technet.microsoft.com/Forums/en-US/ee5baed5-095b-4a02-8e60-cbe3e32b5b3c/security-scopes-and-antimalware-policies?forum=configmanagersecurity

We require the ability to limit administrators permission "by policy". As it currently stands, the only option is to grant Administrators Full permissions which gives them the ability to modify every Antimalware Policy.

This is a request to enable the ability to use Security Scopes for Antimalware Policies.

Thank you.

SCCM 2012 R2 Monthly Software deployment Query

$
0
0

Hello All,

            

 I have created the ADR for SCCM monthly patches and the same has been executed on 19-APr with 10 days deadline.

till last monday 750 machines were complaint, 100 machines were in In progress, 40 machines Error and rest were in unknown...

******************************************************

Monday evening our DC team backed up the SCCM VM and did some changes on the Phsyical server due to Hardware failure

once the Physical server issue resolved, they restored the SCCM VM.

:( but for the Monthly patch deployment the status is showing like only 75 machines are compliant and rest are in Unknown state...

*******************************************************************

Other deployments are showing correct data

Question: Till today some 350 machines are turned complaint, I didn't understand the behaviour. Can someone detail this concept.

Note: Logs are showing like Updates can't made avaialble, but I know for sure the updates are already installed on those machines and the same was reported as complaint before we restored VM.

FEP Automatic or Default "Apply Action" not working when malware detected.

$
0
0

Hi,

In SCCM 2012 R1 , With FEP Role.

When malware is detected, FEP does not do "Apply actions" automatically or remove malware automatically , I have configured its policy settings to Remove.

But its does not remove itself , I have to press "Apply actions" button manually. 

Is there any other settings.

Thanks



Differnce between "Is Installed" and "Not Required"

$
0
0

When running Software Updates reports,  what is the difference between the status  "Is Installed"  and "Is Not Required" ?

Cumulative update 1 failed at second part

$
0
0

I tried to update SCCM 2012 R2 with cm12-r2cu1-kb2938441-x64-ENU.exe. It finished the first part to upgrade the SCCM 2012 server, but failed at the second part to create the clients. This is the error. Could you please kindly check, thanks.

Task 'Create Software Update Catalog' completed, state is 'failed' ExceptionText: Error: Setup detected an unexpected problem during installation. Error message: A valid file name is required.
Parameter name: fileName

Error: Setup detected an unexpected problem during installation. Error message:    at Microsoft.SystemCenter.UpdateSetup.SystemUtilities.CalculateSHA1Base64(String fileName)
   at Microsoft.SystemCenter.UpdateSetup.Tasks.GenerateCatalog.ReplaceCommonInsertionStrings(String startText, String packageFile)
   at Microsoft.SystemCenter.UpdateSetup.Tasks.GenerateCatalog.GetConsoleUpdateXml()
   at Microsoft.SystemCenter.UpdateSetup.Tasks.GenerateCatalog.DoRun()
   at Microsoft.SystemCenter.UpdateSetup.Tasks.GenericTask.RunThread(Object taskObject)



SCCM 2012 Non-MS License import issue.

$
0
0

Hi All,

I am trying to import non-ms licenses in SCCM 2012 but its not letting me to import. I amusing the attached sample csv. but every-time I am getting error that import failed.

Link for both CSV & Image as follows ... Changed Url as

http:// 1drv.ms/1g1LZaN

Looking for inventory & compliance report for the following.

$
0
0

Hi All Technocrats,


I am looking for compliance report on the following criteria using SCCM 2012,  but no luckor my knowledge is limited, can someone please help.


  1. Oracle License reconciliation / inventory gathering from Linux PC’s.
  2. Core Based Licensing reports/ inventory for non-MS products.
  3. License reconciliation / compliance report for software’s which are not coming under add/remove programs on windows and Linux EG: Oracle.
  4. SQL Edition license/compliance report.
  5. Oracle report Edition wise on Windows.

Any help in this direction or any pointer will be highly appreciated. Thanks in Advance.

Software Update Scan Cycle not found on Client computer.

$
0
0

Hi,

In my organization in some of the client PC's (Windows 7), Software update scan cycle is not found.

When i checked the UpdateDeployment.log file on client computer it saying

"Software Updates client configuration policy has not been received."

"Software updates functionality will not be enabled until the configuration policy has been received. If this issue persists please check client/server policy communication."

"Software Updates feature is disabled"

Please help me to solve the issue. Let me know the solution if anyone faced the same problem.

Thanks in Advance

Shreyas

SCCM 2012: import objects from AD/manually

$
0
0

Hi,

We have an SCCM 2007 environment in which we want to update the sccm clients to SCCM 2012, then managing within new SCCM 2012 environment/installing a new OS to it. AD discovery happens and also an import of pc’s was done (mac).

We have duplicate entries: one with automatic discovered objects of AD, one with manually imported items.

Both should merge to 1 object. Just to see if we're doing this right. If we deploy a task sequence, we should deploy it to the manually imported object, since that one contains the mac-address, right?

 

J.


Jan Hoedt

[SCCM2012] Downloading (0% complete)

$
0
0

Hi all,

I'm deploying security and critical updates on a Collection of computers in China.

I currently have a problem.

The deployment seems to work but clients can't download updates.

Any idea ?

Thanks for your help.

How to restrict for postponding restart only once or twice

$
0
0

Hello,

I am using an test environment on my organization for updates deployment.

Now when I use SCCM 2012 for updates deployment I get the updates installed but it gives option to user either restart system or snooze the popup.

What I need, is it possible to restrict user so that user should be able to postpone the restart only specific no of time say either one or two times later the option should be grayed out and user should not get an option to postpone, this I need apart from maintenance window on collection, as what I have tested is, once user snooze the popup of restart again after some time he gets that and he is able to postpone again and it's possible for him multiple time.

I am attaching a couple of snap's for reference.

Regards,

Deepak Sharma

EndPoint Policy for SQL 2012

$
0
0

Does Microsoft provide EndPoint policies for SQL Server 2012? If not is it safe to use the ones specifically for SQL 2008?

Thank You


OSD: convert boot to logical path failed 0x80070490. Retrying. After attempt 29 it fails and says "giving up".

OSD: TS deployed to Vista SCCM 2012 client, reboots then doesn't find network drivers

$
0
0

Hi,

 

We deploy SCCM 2012 client to a SCCM 2007 Vista pc.

We then deploy a task sequence to install Windows 7.

 

Everything works fine on a vm, it reboots in winpe then starts the task sequence. On a laptop however, it does not work. F8 shows it does not get an ip address, it seems as if no network adaptor is recognized.

However, the same task sequence works fine on the same laptop when pxe booting + I added the driver to winpe. Didn’t help. Please advise.

J.


Jan Hoedt

System Center 2012 Endpoint Protection> Deployment State of Client= unmanaged

$
0
0

Hello Everyone,

We are facing issues deploying SCEP on machines. The deployment state for clients shows as un-managed. Client settings & AntiMalware policy have been configured properly. SCCM Client has been installed successfully, however the Endpoint Protect deployment state would not change to "To be Installed"/'Managed" from "unmanaged". Even after trying to install SCEP manually along with policy it shows as unmanaged. Please suggest how do i proceed further in this case.

Thanks

Sumit

SCCM 2012 R2 and WSUS Configuration

$
0
0

I am fairly new to ConfigMgr in general. I have recently installed Configuration Manger 2012 R2 in our office setting. I am using the existing WSUS infrastructure. I have downloaded the console on the SCCM server and i have populated the software updates with the updates but when I try to manually download updates to deploy manually i get nothing but errors. The WCM and wsyncmgr logs have no errors. The errors I am getting are in the WSUSCtrl log and the compmon log.

The WSUSCtrl log show the following:

Failed to read the required Operations Management component registry key values on SCCM.gccoop.local; error = 6 (0x6).SMS_WSUS_CONTROL_MANAGER4/28/2014 2:14:52 PM5948 (0x173C)
Failed to read in current property values and initialize COpsMgmtComponent object; error = 6 (0x6).SMS_WSUS_CONTROL_MANAGER4/28/2014 2:14:52 PM5948 (0x173C)
Failed to generate heartbeat for component 'SMS_WSUS_CONTROL_MANAGER' because the COpsMgmtComponent object is uninitialized.SMS_WSUS_CONTROL_MANAGER4/28/2014 2:14:52 PM5948 (0x173C)

The compmon log shows the following:


Failed to read the required Operations Management component registry key values on local computer; error = 6 (0x6).SMS_COMPONENT_MONITOR4/30/2014 11:04:37 AM3168 (0x0C60)
Failed to read in current property values and initialize COpsMgmtComponent object; error = 6 (0x6).SMS_COMPONENT_MONITOR4/30/2014 11:04:37 AM3168 (0x0C60)


I haven't had much luck looking for answers so any little bit of help would be greatly appreciated! Thanks.

Unable to make changes to your software

$
0
0
Hi,

We have an SCCM 2012 client (Vista pc) which was upgraded (SCCM 2007 => 2012 via client push).
We deployed a task sequence with OSD Windows 7. This worked fine untill now.
Suddenly we get the message "Unable to make changes to your software", None of the applications you tried to install began installation succesfully.

There is no smsts.log since the tasksequence didn't even started.

Please advise.
J.

Jan Hoedt

Viewing all 6382 articles
Browse latest View live


Latest Images

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>