-
Posts
1946 -
Joined
-
Last visited
-
Days Won
93
Everything posted by GarthMJ
-
Find what Collections a computer is apart of?
GarthMJ replied to brink668's topic in Configuration Manager 2012
I'm always around to answer questions but I'm a bit busy with MS Ignite stuff... If you are at Ignite, feel free to stop by the booth 1246 or if you are going to IT/Dev in Oct, say stop me and say Hi.- 23 replies
-
- SCCM 2012
- collections
-
(and 2 more)
Tagged with:
-
Plan to update exe file - thoughts?
GarthMJ replied to jackvdbuk's topic in Configuration Manager 2012
ok, I will bite, if the exe updates every 14 days, why don't you force it to upgrade any week? Why jump thur the extra hoops? I would not set the policies to check every 10 minutes, you are begging for trouble. -
SoftwareMeteringAgent & CCM_RecentlyUsedApps
GarthMJ replied to hadar0x's topic in Configuration Manager 2012
First off nothing within the CM database or WMI can every be used for forensics investigations and have it hold up in any court. On a side note, there are assumption within the first blog that are incorrect. CCM_RecentlyUsedApps will not tell you about deleted files. It will only tell you what was executed only. But by doing a comparison you can determine what executables have bene deleted or rename but nothing else. More than just SW metering needs to be enable the AI class also needs to be enabled too. AI data is collected based on the Hardware Inventory cycle default is 7 days BUT most senior SCCM admins will recommend daily. Not all apps are tracked by CCM_RecentlyUsedApps, you can see this from the log file. In my quick tests, the execution user is incorrectly identified, only the logon user (I assume console user) is shown as show executed the app. -
SoftwareMeteringAgent & CCM_RecentlyUsedApps
GarthMJ replied to hadar0x's topic in Configuration Manager 2012
Who found this? Where exactly are you seeing this? Why do you care about it? -
OU, is not always populated by AD discovery, it is also populated by heartbeat discovery. Similarly, Security groups are populated by Heartbeat discovery too. As such I never recommend using that query style instead, use a direct membership for the Sec group. This allow computers to install the SW (assuming that is what the collection is for) without having to wait for heartbeat discovery to run.
-
Configuration Item shows compliant but it is not.
GarthMJ replied to SanAntonioITGuy's topic in Configuration Manager 2012
ok, but that still mean the issue is with your CI detection methods.- 15 replies
-
- configuration baselines
- configuration item
-
(and 1 more)
Tagged with:
-
Collection to search for specific data in .txt file
GarthMJ replied to nhottinger's topic in Configuration Manager 2012
if you are going to create a PowerShell script to collect, I would take this one step farther and Tattoo the image version in either WMI or registry. This way you can inventory it was Hardware Inventory. I would also make sure that you update your TS to do this as well. -
Configuration Item shows compliant but it is not.
GarthMJ replied to SanAntonioITGuy's topic in Configuration Manager 2012
ok, so there is nothing wrong with CM12 as it is reporting exactly what the cleitn detects. There is nothing wrong between CM12 and the end client as the results on the client are exactly what is on the client. There is nothing wrong with the Client itself as the CI is executing and giving results. So this mean there is a problem with the CI itself. First off I would avoid using a "/" in anything as it is a special character in C. Instead try 247, does that work? Secondly I would change the detection time to 1 days. I personally find that anything less that 4 hours seems to have problems.- 15 replies
-
- configuration baselines
- configuration item
-
(and 1 more)
Tagged with: