anyweb

Step 6. Create a new hyperV virtual machine Follow these steps to create a new HyperV virtual machine, called Windows 7 Client #2. Once created, start the VM and PXE boot it at the welcome to Task Sequence wizard click next and select our Deploy Windows 7 X64 Enterprise Task Sequence from the menu and click next the deployment begins formatting the disc takes a while (we'll fix that later) and now we see our captured image is getting applied to our VM applies drivers then we see the setup windows and configmgr step (involves a reboot) and after the reboot Setup is updating ... after another reboot... the Setup and Windows and configmgr step continues and installs the configmgr client.. and now our Install Software Updates step takes over and then we are done

did you look for the smsts.log on the client ? instructions to find it are here

i wouldn't advise you to set such aggressive discovery times as the sql server will be inundated and never keep up with itself, instead, upgrade to R3 and utilise the delta discovery methods it has, or set more realistic expectations amongst your users (within 3 hours or so) for software

it's a workflow to fix problems etc, for example using easy to use drag and drop you can create a sequence of events, such as if a file of version X exists in a folder then do some action, or whatever you want !

it sounds like he's using Computer Association to import the machines details into a collection. although why he's using 'blank for staging' is beyond me, as that's a BLANK collection where you never put computers into, to be used for the software update templates.... so perhaps Finamore can explain ?

Step 5. Deploy (advertise) the Task Sequence to the Unknown Computers Collection Highlight our newly created Deploy task sequence, right click and choose Deploy when the wizard appears, browse for the All Unknown Computers collection, and make sure to place a checkmark in Make this task sequence available to boot media and PXE leave the schedule as it is (optional), click next, set the distribution point settings as follows click next through Interaction, Summary, review the progress and finally click close at the confirmation.

what does C:\WINDOWS\system32\ccmsetup\client.msi.log say ?

do you have an ip address when it fails ? open a command prompt (f8) and type ipconfig

Step 6. Deploy the Windows 7 updates to our new collection repeat step 4 using the All Windows 7 collection we created above, except name the deployment Windows 7 2010 Baseline. Any Windows 7 client that you have running will now receive these new policies and the All Windows 7 targetted deployment will mean that these updates are deployed, you can review them being installed in the Installation Status tab of Software Center. To Summarise, we created Two Software Update deployments, one to the All Unknown Computers (this targets Windows 7 updates to computers getting deployed via OSD) and the other to All Windows 7 Computers. Step 7. Review our Deployment Settings. You can review these two Deployments (advertisements or Deployment Management Tasks if you are thinking the same way as before with SCCM 2007) by Selecting Update Groups if you select one Deployment (1.)and then click on the Deployment Tab (2.), Right click on Microsoft Updates below, and select Properties (3.). now you can review/change settings of the original Deployment by selecting the various tabs. click Cancel to exit. Step 8. Rename our Update Group Right click on our original Update Group Deployment called Update Group.... Choose Properties when the properties appear, Mark the Name, right click, choose Cut, Paste the information that you Cut above into the Description Field (so that you know when the Deployment was made) and give it a new, meaningful name like All Windows 7 Updates for Unknown Computers, click apply then ok. Notice how our Software Updates Deployments look now...

Step 5. Create All Windows 7 collection In the wunderbar click on Assets and compliance and select Device Collections, click on Create Collection in the Tasks Pane give the collection a name, All Windows 7 fill in the query with this select * from SMS_R_System where SMS_R_System.OperatingSystemNameandVersion like "%Workstation 6.1%" success !

Step 4. Deploy our Windows 7 Updates We want our Windows 7 computers that are being deployed to get these new updates. So let's target both the Unknown Computers collection and All Windows 7 computers collection with these updates. Select the first update in the list, scroll down and select the last so that all are selected (you can press CTRL and A to select All). Notice that all items are now selected right click and choose Deploy on the General screen, select browse and browse to the All Unknown computers collection set the Intent to Required (this makes the deployment mandatory) set the Schedule, and make sure to choose Set A Deadline set your User Experience options set your Alert options, I entered 95% review your download settings (leave as default) for Specify the Package to use, enter the following details (it's a new deployment package) select our VNEXT dp by click on browse, Change to Distribution Points, vnext select the download from internet option select English as the language, click next at the summary, and review the confirmation done !

Step 3. Create a new Search Folder Right click on All Updates, choose Search Folder click on New select the following options Bulletin ID Expired Superseded Product click Add Selected when done Click on Bulletin ID, when the window appears, type in the value MS and change Equals to Starts With for Expired and Superseded, select No as the value, and for Product select Windows 7, give your search folder the name Windows 7 Security Updates click ok and ok again. Notice the number of updates changes to much less than above, as we have filtered them to only show Windows 7 Security Updates that are not expired or superseded. Now we have 85 updates (Windows 7 security Updates)

Step 2. Run a Synchronisation In the Wunderbar, click on Software Library, Select Software Updates, All Updates, note that 0 items appear, Click on Run Synchronization in the Tasks pane. You will be prompted to review the sms_wsus_sync_manager log to get confirmation, answer Yes. In the Wunderbar, click on Monitoring, system Status, Component Status, Select our SMS_WSUS_SYNC_MANAGER component, right click and choose Show Messages, All. Click Ok to the 1 day prompt. Look for the Message ID 6702 Sync Done message,press F5 to refresh while waiting... Once the Sync is done, and you've verified it in the logs, in the Wunderbar click on Software Library, Software Updates, All Updates. You should see hundreds of updates listed like so

In Part 1. of this series we Installed vNext. In Part 2., we then Configured vNext to use the New AD Site as a boundary and Configured Discovery Methods in vNext. In Part 3, we installed the Reporting Point Role along with some additional roles and configured them. In Part 4 we configured the client Agents and deployed the vNext Client. In Part 5 we deployed an Application to All Users. In Part 6 we added Windows Deployment Services, added the PSP role, added the Windows 7 Enterprise image, and updated our boot image for Deploying Windows 7. In Part 7 we created our Build and Capture Task Sequence, enabled the Network Access Account, Advertised (Deployed) the Task Sequence, and created a new hyper-v virtual machine for capturing the wim on. In Part 8 we installed WSUS and then the SUP and SLP roles. Now we will configure add some products to get sync info about, and target some updates to collections. Step 1. Select some Products. In the Wunderbar click on Administration. Select Site Operations, Sites and then Right click our Site Server and click Properties. When the properties appear, select the Component Configuration Tab, Select Software Update Point and click on Edit. Click on the Products tab and scroll down, select the following products. Windows 7 Windows Server 2008 R2 Windows Server 2008 Click Apply when done. Then click Ok and Ok again.

Winrumors has reported that a new 0-day vulnerability affecting Windows XP, Vista and 7 has been discovered. The vulnerability resides in win32k.sys, "the kernel mode part of the Windows subsystem." This exploit allows user priviledge elevation, enabling even limited accounts to execute arbitrary code. Marco Giuliani of Prevx has stated that no malware is currently exploiting this flaw, but also warned that it would be "very soon" before malware authors begin exploiting the vulnerability. The API in which the vulnerability is located does not correctly validate input, resulting in stack overflow. This means that an attacker could control the destination of the "overwritten return address" and in essence execute their code with kernel mode privileges. Since this exploits user elevation, it bypasses UAC and leaves Vista and 7 vulnerable. This is specifically important due to the fact that UAC was originally implemented to prevent unauthorized privilege elevation. Prevx is well known for mistakenly stating, last year, that Windows Update was creating a "black screen of death." It was later revealed that the black screen was caused by a malware infection, rather than an oversight or mistake on Microsoft's part. Microsoft has confirmed that they are evaluating this vulnerability so a fix could be in the works. via > http://www.neowin.net/news/windows-0-day-vulnerability-bypasses-uac

yeah offline mode in Windows PE is how we do it here, and it works great (however we are also using a HTA Frontend to set some variables, which are in turn looked for in the task sequence)

looks like it wants boot files from a different architecture, so which are you using 32bit or 64bit ?

MS10-018 is expired and MS10-020 is available in configmgr play around with your search folder criteria for example if you have one search folder for Expired=yes you'll see MS018 listed as an expired update

theres no problem migrating from xp to windows 7 via pxe boot, what issue are you seeing exactly ??? can you post your logs ?

looks alright to me, compare it to my lab

welcome to the forums, can you show me a screenshot of what you are seeing please ?

does this step happen after you've installed the configmgr client ?

still not working for me, i'm still seeing the IPB favicon, tried in firefox and IE, same on both

Hi Everybody Just a quick post to let you know that the Opalis 6.3 Technet Library is now live at http://technet.microsoft.com/en-us/library/ff630946.aspx As you can see in the screenshot below, this includes detailed information on the new System Center Integration Packs and the activities within these IP’s. via > http://blogs.technet.com/b/systemcenter/archive/2010/11/21/the-opalis-6-3-technet-library-is-live.aspx

hmm, cleared my cache, restarted firefox, still see the old IPB one :/