SCCM Virtual Labs

System Center Configuration Manager 2007

Const HKEY_LOCAL_MACHINE = &H80000002
strComputer = "."

Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & _
strComputer & "\root\default:StdRegProv")

strKeyPath = "SYSTEM\CurrentControlSet\Control\Terminal Server"

strValueName = "fDenyTSConnections"
dwValue = 0
oReg.SetDWORDValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName,dwValue

How to disable the UAC in Windows 7 Deployment

In fact we might get more errors if you have the UAC enabled while deploying the Windows 7, You can include one step in the task sequence as run a command line and fill this below in the command line box

“CMD /C REG.EXE ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f”

Note: Not required any options in the options to configure however you can record with a optional Success Code “0 3010”

http://joshuasmueller.wordpress.com/2011/01/18/disabling-windows-server-2008-sp2-uac-in-a-sccm-task-sequence/

How to set the Timezone

How to set the Timezone with in one task sequence… like you have more than one location and all these locations has different time zones…

To do this under the task sequence Apply Windows Settings in the options TS Variable is ADSite name equals is “WhateverTheSite” and in the Properties Time Zone choose the time you wanted…

On AD & exchange simply good website

http://www.netometer.com/

OSD import permission Issue

We might get when we are looking for only import permissions for a user or Group..

even when we setup the permissions at the end of the wizard we may get this error..

Errors

·You do not have security rights to perform this operation.

·ConfigMgr Error Object:

·instance of SMS_ExtendedStatus

·{

· Description = “User \”*************\” does not have permission of the current site to import machines.”;

· ErrorCode = 1112017920;

· File = “e:\\nts_sms_fre\\sms\\siteserver\\sdk_provider\\smsprov\\sspsite.cpp”;

· Line = 766;

· ObjectInfo = “524288″;

· Operation = “ExecMethod”;

· ParameterInfo = “SMS_Site”;

· ProviderName = “WinMgmt”;

· StatusCode = 2147749889;

};

The actual permissions required at SCCM Console level is:

On SCCM Root Collections we must grant read & read Resource
and for the target of the collection we need to give the permissions to add or whatever you wanted
at computer Association level we must give permissions for importing
(The most common mistake or un- mentioned step ..this one we may forget most of the time)

On the top of the Site ==Properties=> Security Tab => Class Security rights and we must choose here read,Import Computer Entry (below screenshot)

How to grant the SCCM Console permissions to Support Executive

Scenario SCCM installed on cm07.test.com & I have a test system with windows XP/7.
I have a User called RBAC and RBAC wanted some permissions on SCCM console.

Steps:-

Install the SCCM console on windows Xp/7

add the RBAC user to SMS Admins Group.

Follow these steps for granting the DCOM rights.

From SCCM Server the Start menu, click Run and type Dcomcnfg.exe.
In Component Services, click Console root, expand Component Services, expand Computers, and then click My Computer. On the Action menu, click Properties.
In the My Computer Properties dialog box, on the COM Security tab, in the Launch and Activation Permissions section, click Edit Limits.
In the Launch Permissions dialog box, click Add.
In the Select User, Computers, or Groups dialog box, in the Enter the object names to select (examples): box, typeSMS Admins and click OK.
In the Permissions for SMS Admins section, select the check box to allow Remote Activation.
Click OK twice, and then close Computer Management.

C drive disk space information on my all machine

SELECT TOP (100) PERCENT dbo.v_R_System.Name0 AS [System Name], dbo.v_GS_LOGICAL_DISK.Name0 AS [C Drive], dbo.v_GS_LOGICAL_DISK.Size0 AS [Total Size],

dbo.v_GS_LOGICAL_DISK.FreeSpace0 AS FreeSpace, dbo.v_GS_LOGICAL_DISK.Size0 AS Used

FROM dbo.v_R_System INNER JOIN

dbo.v_GS_LOGICAL_DISK ON dbo.v_R_System.ResourceID = dbo.v_GS_LOGICAL_DISK.ResourceID INNER JOIN

dbo.v_FullCollectionMembership ON dbo.v_FullCollectionMembership.ResourceID = dbo.v_R_System.ResourceID

WHERE (dbo.v_GS_LOGICAL_DISK.DriveType0 = 3) AND (dbo.v_FullCollectionMembership.CollectionID = 'sms00001') AND (dbo.v_GS_LOGICAL_DISK.Name0 = 'c:')

ORDER BY FreeSpace

For a specific Advertisement status for last 3 Days…

---for a specific Advertisement status for last 3 Days… if we include the Set @AdvName = '%' line then and remove the above line in red color will show for all advertisements with last 3 days status

-- To include all we need to give % in SQL this is a tip

Declare @AdvName Varchar(256)
Set @AdvName = 'Lync_2010_Full_Install'

---Set   @AdvName = '%'
Select      adv.AdvertisementName
,    adv.AdvertisementID
,    s.Host
,    LastAcceptanceMessageIDName
,    LastAcceptanceStateName
,    LastAcceptanceStatusTime
,    LastStatusMessageIDName
,    LastStateName
,    LastStatusTime
,    LastExecutionResult
From (
      Select      AdvertisementName
      ,    AdvertisementID
      From dbo.v_AdvertisementInfo
      Where AdvertisementName Like @AdvName
      ) As adv
Join (
      Select      AdvertisementID
      ,    ResourceID
      ,    LastAcceptanceMessageIDName
      ,    LastAcceptanceStateName
      ,    LastAcceptanceStatusTime
      ,    LastStatusMessageIDName
      ,    LastStateName
      ,    LastStatusTime
      ,    LastExecutionResult
      From dbo.v_ClientAdvertisementStatus
      Where LastStatusTime >= DateAdd(d,-3,GetDate())
      ) As cas
On    adv.AdvertisementID = cas.AdvertisementID
Join (
      Select      ResourceID
      ,    Netbios_Name0 As Host
      From dbo.v_R_System
      Where Client0 = 1
      And Active0 = 1
      And Obsolete0 = 0
      ) As s
On    cas.ResourceID = s.ResourceID
Order By
      AdvertisementName
,    Host

HeartBeat Discovery Status of specific collection of systems

select
    CS.Name0,
    max(AD.AgentTime) as 'Date/Time'
from
    dbo.v_AgentDiscoveries ad
    JOIN dbo.v_GS_COMPUTER_SYSTEM cs on AD.ResourceID = CS.ResourceId
    join dbo.v_FullCollectionMembership FCM on FCM.ResourceID = CS.ResourceId
Where
    AgentName = 'Heartbeat Discovery'
    and FCM.CollectionID = 'SMS00001'
Group by
    CS.Name0

To get ride of IIS Webdav issue

Most of the time some or other application extension would be blocked because of IIS Webdav Settings issue, to stop filtering in IIS Webdav we can change the

setting at the site level, i.e., open inetmgr/ IIS Console and chose the server name and in the right side we need to choose the “WebDav Authoring Rules” and in actions you will see “WebDAV settings” click on the button and you need to configure you Request filtering Behavior as below.

Okey, we may read in the blogs as we need to change in the applicationHost.config file.. if we do above settings it must be appear in the file… okey if you want to see the file how it looks like ……..

</fileExtensions>

</hiddenSegments>

</requestFiltering>

PXE error: PXE-T01:File not Found & PXE-E3B: TFTP Error – File Not Found

You might get the below error..

The above problem will come When you don’t Have the files in DriveLetter:\RemoteInstall\SMSBoot\

In fact the below article address the issue, However I have approached in different way as just copy the Missing files & folders from other Remote Install Folder and past on the Problem system.

http://www.kozeniauskas.com/itblog/2008/02/26/sccm-pxe-t01-file-not-found-and-pxee3b-tftp-error-file-not-found-errors/

ClientIDManagerStartup.log Error: 0x80040225 & Error 3

Failed to send registration request message. Error: 0x80040225

also when you see in the error 3 in ClientIDManagerStartup log

RegTask: Server rejected registration request: 3 ClientIDManagerStartup 26/01/2012 1:07:43 AM 7904 (0x1EE0)

You might also see (not in all cases) in ccmexec.log

System task 'ClientRegistrationStartup' returned error code 0x80040222. CcmExec 26/01/2012 1:10:03 AM 7904 (0x1EE0)

Solution: Remove the Client authentication and SMS certificates Certificates of from Certificates console and request new certificates

Test

test Post

The program for advertisement "CEN20199" has not been run yet ("CEN0018E" - "*"). Software Distribution is currently paused on this computer, and it has to be resumed before this program can begin.

You may get above (The program for advertisement "XXXXXXX" has not been run yet ("XXXXXXXX" - "*"). Software Distribution is currently paused on this computer, and it has to be resumed before this program can begin. ) error and your advertisement will never run… because system required a reboot to continue further any installation……