GarthMJ

Yes, sure it is not the answer MadMacs77 was hoping for but IMO there is a much bigger issue here that just ADSS. <After re-reading this and still on my first cup of coffee, this seems preachy, but it not meant to be. > If you are you are going to “clean up” AD then you really need to do a full health check for that you need to look at: Network Network speeds Network latency Network reliability. AD itself Replication Workload Etc. ADSS DNS Is DNS working correctly IS DNS savaging turn on? DHCP IP Addresses IP Subnets Masks What is your DHCP lease time Each DC All the OUs All the GPO All logon scripts Get a list of all known issues, etc. </end peachy stuff> Now getting back to the ADSS and should you create a site for a network without a DC. It will depend on a lot of things. I have created ADSS for force GPO setting at a particular site (BITS setting for example) but rarely will I do it for anything else if there are no DCs at the site. As an aside, I personally don’t recommend using AD sites for CM07 or CM12. The reasons are supernet and outdated subnet details in AD. The bigger your environment the more likely they will not be up-to-date. I recommend IP ranges and if you have a single site the 0.0.0.0 – 255.255.255.255, works great! ;-)

ok, so what??? Can computers and users logon, I'm willing to bet yes. So exactly what problem are you trying to solve? Without this answer, there is no point in moving forward.

The SU reports don't use QFE for their result, they use WSUS data only. If you are not seeing results, it is because those computer are NOT reporting to CM12 for SU.

It will depend on what you are trying to do and why. Why exactly are you trying to clean it up? What problem are you trying to solve?

ok, I have already told you what the process is, there is nothing more to it than that.

Let me put it another way. It is complete not supported to do that.

Again, not all columns in CM12 will show the Full Version #, some will only show the SP version#. If you are saying that within one column you are seeing some with the updated versions and other without then yes there might be a problem. Generally HB will fix this but I just review the inventoryagent.log and the CM12 client version is NOT listed as one of the fields queried, therefore I'm not sure what actually updated this.

This is normal, not every place list the FULL version number. it will only list the last service pack version number.

No the assumption is that an administrator knows exactly when the best time is to install and application. However you can get fancy and use the app model to no install on servers or no allow the app to install on server OS but IMO why care... If an administrator install the application and reboot the server, why should you care?

yes that is right.

Use Maintenance windows to block the deployment of software. Keep in mind that this will NOT stop an administrator from manually installing software.

I'm sorry to say this is not a simple task and would take weeks of effort for me to create these reports and this is clearly not a single report but my guess at least 10 different reports. My suggestion is a few fold, break it down into a few different reports. Start with the high level and get the result for each item listed below. Remove IP address from all reports. This will cause you headaches. For items like, Audit on AV and malware, define exactly how you would do this task manually, then you can try to automated it.

Try this.. Watch out for typos.. I write this free hand. select distinct SMS_G_System_SYSTEM.Name, ARP.DisplayName, ARP.Version from SMS_R_System as Sys full join SMS_G_System_ADD_REMOVE_PROGRAMS as ARP on ARP.ResourceID = Sys.ResourceId full join SMS_G_System_SYSTEM on SMS_G_System_SYSTEM.ResourceID = Sys.ResourceId where ARP.DisplayName like "Sigmaplot %"

Without having your first query it is impossible to answer this question.

#1, I never recommend access the report via the console, there is just too much over head and too many problems. #2, have you reviewed the client side logs to ensure that the client is actually reporting data to CM12? 99% of the time when they display no data, it is because a GPO is blocking the client from using the CM12 SUP.

I would start with the one listed within the docs for Daily, weekly and monthly tasks.

Hi Nick, It is the AI classes that need to be abled to get the automatic rules created. But the automatic rules are useless because they will create a rule for Explorer.exe, or your AV software or other useless stuff like drivers, mouse software etc. On top of that they are disabled so what is the point of them. Honestly the best option is manually create the rule as you import the package and only for software which has a cost, otherwise there is no point to creating them.

There isn't much too the process. CM12 download the policy that apply to them and apply them.. So exactly what you are looking for? Exactly what setting under custom device setting have you select within the Power Management option?

Use a GPO to apply your power policy.

I'm sorry but this is not true. You don't need SW inventory to make SW metering work at all. On top of that I NEVER recommend enabling SW inventory, it is generally not what people think and it is (IMO) all be useless.

I never recommend enabling the automatic SWM rule. You will find that it will create junk rules. Instead manually create the rules that you need.

ResourceID will NEVER match Name. Change the Name to ResourceID any everything will be fine. where SMS_R_System.ResourceId not in (select SMS_R_System.Name

I see what wrong you are not comparing apples to apples.. in you subselct query, what are you returning? In your Where section of your second query what are you returning? Will they ever match???? Hint: Nope.. Make them the same it will work.

So I'm a bit confused, what is you question? SSRS will not show up in the setup wizard if your don't have the right CU install on SQL/SSRS itself. Exactly what version of SQL and SSRS are you running? What CU have been applied to both SQL and SSRS? Was SSRS installed AFTER SQL was installed? Did you re-apply the CUs and SPs? Why are you trying to use anything but the CM12 computer account to access SQL/SSRS? Or are you taking about the SSRS execution account? Did you know that it is NOT recommend that have SQL (and SSRS) remote from CM12 itself? Permissions will automatically get reset on SSRS by CM12 http://www.enhansoft.com/blog/disappearing-permissions-for-ssrs-reports-in-system-center-2012-configuration-manager

I would post it here. https://connect.microsoft.com/ConfigurationManagervnext, the TechNet forums will not help get thing fixed.