Quantcast
Channel: Configuration Manager 2012 - Security, Updates and Compliance forum
Browsing all 6382 articles
Browse latest View live

Compliance Settings (DCM) and Software Updates to ensure machines have latest...

So as an administrator you have the ability to add software updates to configuration baselines in compliance settings within SCCM 2012.  The limitation is that you have to select individual updates....

View Article


Update Catalog not updating

Hi,I've got a single CCM 2012 server in a stand-alone primary site.It was working well but it stopped updating the update catalog.I went to the wsyncmgr.log and the last six entries are about no being...

View Article


Order of compliance settings evaluation

Hi All, Is it possible to order the evaluation of compliance settings within a CI or baseline? Our example is we have an application with a config file. This file has variables in it which other DCM...

View Article

automatically remove unauthorized software

Hi all,In Configuration Manager 2012 capable of configured to automatically remove the unauthorized software using the compliance setting?Could we set the whitelist software as the baseline and the...

View Article

Use a SUP as a WSUS server too

I know the answer's likely to be "No" but just double checking!I have an environment where a branch office will have a number of clients managed via SCCM with a MP/DP/SUP to support them for updates...

View Article


Compliance report - update not installed ???

I have a issue with the compliance report i SCCM2012 SP1, the problem is that the compliance report says that some updates are missing, but if i check the machine they are acutally installed.So i...

View Article

Real-Time Scans and Wildcards in SCEP 2012

Hello . . . I found some information for FCS that Real-Time scans will not honor wildcards like *.  2 questions.1. Do Real-Time scans recognize system variables like %systemdrive% or %username% for...

View Article

Install Patches from SCCM 2012 on Windows Server Core

I am unable to install windows server patches from SCCM running in Core. I pushed patches to my Hyper-V Host collection, which I know went because a number of my Hyper-V Hosts running in GUI mode got...

View Article


2012 Reporting - "Enforcement State Unknown" but actually "Pending Restart"?

Hi all. After a recent monthly patching cycle, I had almost 100% of my servers reporting a known and accurate status (Compliant & Pending System Restart). I thought things were going great.After a...

View Article


Image may be NSFW.
Clik here to view.

SCEP Definitions Detected In Console as Not Required When They Are

I'm pretty sure I'm probably just overlooking something simple, but I've seen this in two labs I've setup. It appears SCEP definition are showing as not required in the ConfigMgr console, but if I look...

View Article

Software Update Management - Endpoint Protection Definition Updates -...

Has anyone else run into an issue where the summarized compliance data is shown incorrectly in the console and reports for Endpoint Protection Definition Updates?  After machines install the definition...

View Article

SCEP Persistent Cache

Where does the Persistent Cache actually reside? I am having an issue with the files never being indexed on the drive.  SFCState is never reaching 7.I found the below information here...

View Article

User Notifications

I'm a little stumped to why our users are not seeing any notifications for impending software update installations.From what I understand if I have set Display in Software Center and show all...

View Article


Deploy a user-based configuration item/baseline on a collection of computers

Hello,I wrote a configuration item. It's a PowerShell that need to run into the context of the logged-in user, therefore I checked "Run scripts by using the logged on user credentials".On the other...

View Article

Software Center Updates show in tab, but will not download

My WSUS/SCCM2012 syncronizes just fine and I have been able to push out the client to the users.  The issues that I'm running in to is that when I try to deploy the updates, some will show in the...

View Article


Apply Windows 7 update to Windows 7 Embedded System via SUM

I want to deploy the RDP 8 update to my Windows 7 Embedded Standard SP1 clients. I have done it manually in the past by installing the following: 1. KB2574819 2. KB2592687 Now, I want to deploy them...

View Article

SCEP Prevents admin templates from displaying when running GPRESULT

So is there any other way around the issue asked by Brandon in this thread:System Center Endpoint and Group Policy ResultsOther than the work-around suggested? 

View Article


Query Username and return local admin memberships

All,I have implemeted Sherry's report to return all local admins on machines. (Can't paste link yet)Also, the report to enter a specific machine name to return local admins. Both working very well.I...

View Article

MS Security Patch deployment

 In our environment, I have completed Microsoft critical patch deployment so for to all workstations, now I am planning to deploy critical, important and low severity patch from Feb '2013.My questions...

View Article

Content of WSUSContent folder is being deleted from SUP server

We have a disconnected SCCM 2012 environment where software updates and related metadata are exported from an external WSUS server and imported into our offline WSUS server which is an active SUP. We...

View Article
Browsing all 6382 articles
Browse latest View live