Setting client SCEP uninstall
Can i configure SCCM 2012 ,for client cannot uninstall SCEP ?if can, how to configure it anyone can help me?thank you
View ArticleSome Clients Not Updating. Reporting "Compliant." hr=8007000E Error in...
I have a significant number (but not all) of my SCCM 2012 R2 CU3 clients not updating though my SCCM software updates. On these problem clients, I get this error in WindowsUpdate.log:"COMAPI WARNING:...
View ArticleIs it possible to configure the SCEP client to perform a daily Quick Scan and...
From what it looks like it appears it can according to the "Default Client Antimalware Policy" as shown here, unless I am reading this wrong:According to the settings above, does this mean that the...
View ArticleWindows update KB3000869 superseded, howto make sure we deploy the new version?
Hi,We deploy(ed) KB3000869 as urgent patch (zero vulnerability patch), I know see it is superseded. How can we make sure this patch is included in our latest patching? Please advise.Jan Hoedt
View Articlesome of the machines are not installing windows updates in SCCM 2012 SP1
I have deployed the current month patches to the machines. But, some of the machines are failed to install.Most commonly I am getting the below errors in windowsupdate.log , ReportREPORT EVENT:...
View ArticleSCCM 2012 R2 High CPU with Endpoint Protection
SCCM 2012 R2 (no CUs)Hi,We've noticed over the past two months that Endpoint has been causing high CPU on servers and workstations. It was running for six months prior to that without any issue....
View ArticleReboot Pending for Software Updates
I've recently taken over patching our enterprise servers with SCCM2012R2, whereas previously we were using WSUS + Group Policy. I've broadened my scope of SCCM updates to include more severities...
View ArticlePatching sccm database server
I am soon going to be migrating the SCCM DB from being hosted on the primary site server, to a standalone sql box. I'm curious how others have handled patch scheduling for the DB server.I have about...
View ArticleDefault Security Scope
Is it possible to change the Default "Security Scope" chosen for new or copied objects from "default"? For example when creating a new task sequence the default scope is set to "default" and I would...
View ArticleSCUP 2011 Cert for Multiple Forests
We've been using SCUP 2011 + SCCM 2012 in one forest and have created a cert for SCUP from our domain CA. Now we need to service another forest. I need to add a cert to that new forest so that it's...
View ArticleOld update folders and files not being deleted
Hi,On my SCCM 2012 SP1 server I've been removing old update groups and deployment packages to try and clean up. I've noticed though that if I look at the source folder on the drive where the actual...
View ArticleTroubleshooting Client install SCCM2012
What logs on the SCCM2012 Server side can I use to troubleshoot the client install not installing on workstations?thanksPat
View ArticleType mismatch (Error: 80041005; Source: WMI)
I've created a Configuration Baseline for workstations that checks for the existence of PageFile.Sys on the root of C:\ I've created a Configuration Baseline for servers that checks for the existence...
View ArticleWhen SCEP is configured to scan removable storage devices, is it an immediate...
I would like to know if the SCEP client is configured to scan removable storage devices, such as a USB thumb drive, will it perform the scan immediately when the thumb drive is plugged in?Thanks
View ArticleSCUP 2011 - SCCM 2012 - Certificates?
I am getting into the SCCM game fairly late and am trying to setup SCUP 2011 to install 3rd party patches. I have tried the following articles and am not able to successfully deploy Flash...
View ArticleI am bit confused between the "Enable real-time protection" setting and the...
Can someone help what the difference is between these two? I just assumed that if the "Enable real-time protection" setting was set to No, then file and programs would not be monitored.Thanks
View ArticleWhat does SCEP consider a system file?
In the default antimalware policy I see that in the Real-time protection section there is a "Scan system files" setting, but I don't understand what SCEP considers that to be. Thanks
View ArticleRBAC for OSD and unknown objects?
Hi,We have two OSD team one is All Desktops and the other is All Servers. But what about x64 Unknown Computer (x64 Unknown Computer) and x86 Unknown Computer (x86 Unknown Computer) object, what to do...
View ArticleIf I create an security scope for a group of SCCM-admins should i remove the...
Hi,If I create an security scope for a group of SCCM-admins should i remove the "Default Scope”?/PS/SaiTech
View ArticleSync failed. Will retry in 60 minutes although local WSUS has synced...
HiI have a single site server with ConfigMgr 2012 SP1 CU5, SQL 2012 SP2, WSUS 6.2.9200.16384 installed on Windows Server 2012. Every few days I seem to get a run of Sync Failed. The wsyncmgr.log has...
View Article