Understanding the Reassign Distribution Point Process

Benoit LecoursSCCM, SQL5 Comments

Here’s a detailed post on the process of upgrad (RTM,SP1) / reassign distribution point from 2007 during your migration project. What really happens when you click on “Reassign Distribution Point” on ConfigMgr 2012 R2: ? How to track the progress ? The process is quite simple : 1. Removal of DP role in the 2007 site 2. Delete site system record in the 2007 site 3. Delete shared DP role in the 2012 site 4. Delete shared DP site system record in the 2012 site 5. Install a new site system in the 2012 site 6. Install a new DP role in the 2012 site The interesting part to follow is next : 7. A store procedure is run “sp_MIG_UpgradeDistributionPoint” to update NALPath to point to new Distribution Point You can see in the screenshot that my DP is now assigned to the 2012 site code (CDP). I listed another DP to … Read More

Set an HTTPS Distribution Point as a Source DP for Pull DP

Benoit LecoursSCCMLeave a Comment

I worked in an environment where all DP are set to communicate with HTTPS. When trying to add a DP as a pull DP source, you get this : Technet is specifying that “Only distribution points that support HTTP can be specified as a source distribution points when you use the Configuration Manager console” http://technet.microsoft.com/en-us/library/gg712321.aspx You can configure a pull-distribution point when you install the distribution point or after it is installed by editing the properties of the distribution point site system role. A distribution point that you configure as a pull-distribution point can transfer content to clients by HTTP or HTTPS. When you configure the pull-distribution point, you must specify one or more source distribution points. Only distribution points that qualify to be source distribution points are displayed. Only distribution points that support HTTP can be specified as a source distribution points when you use the Configuration Manager console. … Read More

Computer Part of an SCCM Maintenance Windows doesn’t Reboot

Benoit LecoursSCCM5 Comments

Scenario : You deploy Software Updates to a specific collection that has a maintenance window configured. The machine doesn’t reboot as required This post describe how to fix SCCM maintenance windows reboot problems. SCCM maintenance windows reboot Troubleshooting : Check the Maintenance Windows properties The maintenance Windows is set to a 2h duration : Check the Deployment properties The first step is to make sure that your deployment allows reboot: My machine is a Windows 2012 (thus considered a server) and the option to suppress reboot is not selected. Check if there’s overlapping maintenance Windows Using the built-in report “Maintenance windows available to a specified client”, I can see that my maintenance Windows is applied correctly to my server and there’s no other maintenance windows applied. Check RebootCoordinator.log The log to watch for this type of “error” is RebootCoordinator. Let’s see what it has to say : The interesting part … Read More

SCCM Internet Explorer KB2964358 Deployment

Benoit LecoursSCCMLeave a Comment

Microsoft has released a critical security update to fix the “famous” IE security vulnerability. This post describes how to fix SCCM Internet Explorer KB2964358 error. Full details @ https://technet.microsoft.com/library/security/ms14-021 This security update resolves a publicly disclosed vulnerability in Internet Explorer. The vulnerability could allow remote code execution if a user views a specially crafted webpage using an affected version of Internet Explorer. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. This security update is rated Critical for Internet Explorer 6 (IE 6), Internet Explorer 7 (IE 7), Internet Explorer 8 (IE 8), Internet Explorer 9 (IE 9), Internet Explorer 10 (IE 10), and Internet Explorer 11 (IE 11) on affected Windows clients, and Moderate for Internet Explorer … Read More

Error in Migration Job with SCCM 2012

Benoit LecoursSCCMLeave a Comment

During an SCCM Migration project, you may encounter this SCCM Migration Job error: “Object modified after Migration”. As per Microsoft Documentation, use an SCCM Migration Job for : Use migration jobs to configure the specific data that you want to migrate to your Configuration Manager current branch environment. Migration jobs identify the objects that you plan to migrate, and they run at the top-level site in your destination hierarchy. You can set up one or more migration jobs per source site. This lets you migrate all objects at one time or limited subsets of data with each job. You can create migration jobs after Configuration Manager has successfully gathered data from one or more sites from the source hierarchy. You can migrate data in any sequence from the source sites that have gathered data. With a Configuration Manager 2007 source site, you can migrate data only from the site where … Read More

SCCM Content Conversion not showing Packages when reassigning DP

Benoit LecoursSCCM1 Comment

Symptoms :SCCM Administrators tries to Upgrade/Reassign a distribution point in a migration project. The Content Conversion tab is displaying There are no items to show in this view. This blog post will show how to fix this SCCM Content Conversion error. If you complete the wizard, the DP gets upgraded/reassign but the content is not (obviously). This happens because the package assigned to this DP is not migrated to the SCCM 2012 hierarchy. Microsoft definition of the upgrade feature : Many customers have large Configuration Manager infrastructures and are reducing primary or secondary sites to simplify their environment. They still need to retain distribution points at branch office locations to serve content to managed clients. These distribution points often contain multiple terabytes or more of content. This content is costly in terms of time and network bandwidth to distribute to these remote servers. This feature lets you reassign a distribution point … Read More

SCCM 2012 Migration Account Permissions for 2007 Hierarchy

Benoit LecoursSCCMLeave a Comment

Each time I’ve done an SCCM 2012 migration from 2007, someone asks “How do I give access to the migration account?”. Looking at some blogs and technet you can read that the account requires : Read & Execute Access to the SCCM 2007 Database Full Access to the SMS Provider Read access to all objects Fine but how do I do that ? I decided to do a step-by-step guide : In the CM07 console, navigate to Site Database > Security Rights > Users > Right Click Manage ConfigMgr Users and follow the wizard. In the user name tab, add a new user your Source site Account Give the computer account read permissions to the CM07 site class and on all instance (***If you plan to perform DP Sharing / Upgrade you need to add modify & delete). The account will need read permission for each object type you want to migrate. (Collection, Package, Operating … Read More

Orchestrator 2012 R2 Installation Guide

Benoit LecoursOrchestrator, SCCM1 Comment

Here’s a guide to install a SCORCH instance on a single server. Use this setup for a lab, it’s not optimized for a production environment. Prerequisites Mminimum hardware configuration required for a full installation of Orchestrator: Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2 Minimum 1 gigabyte (GB) of RAM, 2 GB or more recommended 200 megabyte (MB) of available hard disk space Dual-core Intel microprocessor, 2.1 gigahertz (GHz) or better  SQL Specific SQL Server 2008 R2 or Microsoft SQL Server 2012 Orchestrator requires only the basic SQL Server features found in the Database Engine Service. Orchestrator supports SQL_Latin1_General_CP1_CI_AS for collation. Management servers and runbook servers installed on the same computer must use the same database  Windows Features IIS can be enabled manually but the setup will enable it Microsoft .NET Framework 3.5 Service Pack 1 Microsoft .NET Framework 4.5 (which further requires WCF HTTP Activation) Active … Read More

sccm query imported computer

Benoit LecoursSCCM, SQL, SSRSLeave a Comment

This sccm query imported computer might be helpful to know which user imported a specific computer. You add a new computer directly to the SCCM database by calling the ImportMachineEntry Method in Class SMS_Site. This can be used to deploy operating systems to computers that have not yet been discovered automatically by SCCM. You can view this information in the Status Message Queries and search for MessageID #30213. But this query will target only the information you need. You can use this query to create a report or directly in SQL MS. This query won’t work to create a collection since it’s SQL language. select CASE smsgs.Severity WHEN -1073741824 THEN ‘Error’ WHEN 1073741824 THEN ‘Informational’ WHEN -2147483648 THEN ‘Warning’ ELSE ‘Unknown’ END As ‘SeverityName’, smsgs.MessageID, smsgs.Time, smwis.InsString1 as Username, smwis.InsString4 as ComputerName, smwis.InsString5 as MAC from v_StatusMessage smsgs join v_StatMsgWithInsStrings smwis on smsgs.RecordID = smwis.RecordID join v_StatMsgModuleNames modNames on smsgs.ModuleName = modNames.ModuleName … Read More

The Microsoft Software License Terms have not been Completely Downloaded

Benoit LecoursSCCM, SQL9 Comments

Problem – the Microsoft software license terms have not been completely downloaded SMS_WSUS_SYNC_MANAGER state is critical even if it worked in the previous months. Wsyncmgr.log shows the error on 2 updates : The Microsoft Software License Terms have not been completely downloaded and cannot be accepted Environment in use when this issue occurs SCCM 2012 R2 SQL 2012 Windows 2012 R2 Event viewer/Application Logs shows Access Denied errors on a different patch. Resolution of this issue The Wsuscontent directory was missing an NTFS permission. I added the “Network Service” account full control on the directory and sub-directory and launch a new sync. Everything sync successfully. All the details come from Technet : The following permissions are configured during WSUS setup, and are important for BITS downloads to work: The root folder on the drive where the WSUSContent folder resides (for example, <%windir%>\WSUS\WSUSContent) must have Read permissions for either the Users account or the NT Authority\Network Service account (on Windows … Read More