Jump to content


VRDRF

Established Members
  • Posts

    14
  • Joined

  • Last visited

Posts posted by VRDRF

  1. I just did a migration from MBAM to SCCM MBAM and wanted to share my findings, maybe its usefull to someone else.

    Everything worked for me except I wouldn't see any recovery keys in the SCCM database.
    There seems to be an issue where the MBAM recovery part in IIS is not working, SMS_MP_MBAM exists but if you click it you will get a "file not found"
    I realised this is a similair issue as Anyweb describes in the OP but its not exactly the same.

    The solution is the same, open the .cab file and extract it in for example "D:\Program Files\SMS_CCM\Microsoft BitLocker Management Solution" and run the mbamrecoveryserviceinstaller.ps1 script to set the acl's on the files.
    The recovery url should also be viewable after that, in my case that was https://sccmserverfqdn/SMS_MP_MBAM/CoreService.svc

    I also had to replace the old MBAM Recovery Service Endpoint with the new URL (https://sccmserverfqdn/SMS_MP_MBAM/CoreService.svc) to get clients to report the recovery keys to the SCCM database. 
    This also causes existing MBAM clients to report their recovery keys again.

  2. all reports 50% of the time, you then have to refresh the page to get them to work. 

    the datawarehouse reports don't work at all, not even after a refresh and these are the only reports that this broken data source has dependent items for.
    You can also see that the connection string for this data source is not correct, I can change it but sccm just changes it back after I press apply.

    capture2.PNG

    capture3.PNG

  3. Well I'm not trying to change anything, these 2 data sources are created by sccm every time the reporting point is installed by SCCM, one of them works and the other one doesn't.
    This is a fresh installation of SSRS on the same machine that is running the new SCCM installation, it is in no way connected to the old environment. 

    Basically what I'm trying to do is to get rid of the broken Data source so that my reports will stop failing 50% of the time. 

  4. We have recently reinstalled our SCCM environment and migrated from the old environment to the new one.

    The problem is that it seems some of the reporting services datasources were also migrated to the new server and is now causing some issues in reporting services.
    reports sometimes fail because they are looking at a broken datasource that doesn't connect.
    Stupid thing is, the old environment has the exact same data sources and the same one is also broken there but isnt causing issues.

    The one starting with 5C works fine but the one with 39 just doesn't connect.

    We have tried:

    • changing connection string (it works but sccm just replaces the string again causing it to break again)
    • Removing data source (sccm will just recreate it and break all the reports)
    • Reinstalling report point (sccm will just recreate all the reports and the broken data source)
    • reinstalling ssrs (threw database and files away but result is the same)

    Now I'm guessing that SCCM just creates the datasources based on something that is in his database but how do we get rid of this?

    Thanks in advance guys!

     

    Capture1.PNG

  5. Yeah I did.

     

    I managed to solve it in the end, for some reason the old sysprepped windows 7 didn't like the patch but a clean install.wim did.

    Removed the updates folder from the client folder and redistributed the package and it worked again.

     

    Now trying to find out what is actually in that sysprepped image apart from someone deciding it was a good idea to put office 2010 and adobe reader in the base image.

  6. I recently upgraded the OS of my SCCM server to 2012 R2 by doing a site recovery on a new OS and for some reason during the Windows 7 OSD install the update for the sccm client fails for no real apparent reason and to make it even stranger is the fact that My windows 10 and Server 2012 R2 work just fine with the same client package.

     

    I can see the following in the log files:

    configmgr2012ac-sp2r2sp1-kb3074857-x64.log:

     

    MSI (s) (8C:CC) [17:43:31:702]: Product: Configuration Manager Client - Update 'ConfigMgr2012AC-SP2R2SP1-KB3074857-x64' kan niet worden geïnstalleerd. Foutcode: 1603. Meer informatie is beschikbaar in logboekbestand C:\WINDOWS\ccmsetup\Logs\configmgr2012ac-sp2r2sp1-kb3074857-x64.msp.log.

    MSI (s) (8C:CC) [17:43:31:702]: Een update is geïnstalleerd. Productnaam: Configuration Manager Client. Productversie: 5.00.8239.1000. Producttaal: 1043. Fabrikant: Microsoft Corporation. Naam van update: ConfigMgr2012AC-SP2R2SP1-KB3074857-x64. Status van geslaagde/mislukte installatie: 1603.
    MSI (s) (8C:CC) [17:43:31:702]: Note: 1: 1729
    MSI (s) (8C:CC) [17:43:31:702]: Transforming table Error.
    MSI (s) (8C:CC) [17:43:31:702]: Note: 1: 2262 2: Error 3: -2147287038
    MSI (s) (8C:CC) [17:43:31:702]: Transforming table Error.
    MSI (s) (8C:CC) [17:43:31:702]: Note: 1: 2262 2: Error 3: -2147287038
    MSI (s) (8C:CC) [17:43:31:702]: Transforming table Error.
    MSI (s) (8C:CC) [17:43:31:702]: Note: 1: 2262 2: Error 3: -2147287038
    MSI (s) (8C:CC) [17:43:31:702]: Transforming table Error.
    MSI (s) (8C:CC) [17:43:31:702]: Note: 1: 2262 2: Error 3: -2147287038
    MSI (s) (8C:CC) [17:43:31:702]: Transforming table Error.
    MSI (s) (8C:CC) [17:43:31:702]: Transforming table Error.
    MSI (s) (8C:CC) [17:43:31:702]: Note: 1: 2262 2: Error 3: -2147287038
    MSI (s) (8C:CC) [17:43:31:702]: Transforming table Error.
    MSI (s) (8C:CC) [17:43:31:702]: Note: 1: 2262 2: Error 3: -2147287038
    MSI (s) (8C:CC) [17:43:31:702]: Transforming table Error.
    MSI (s) (8C:CC) [17:43:31:702]: Note: 1: 2262 2: Error 3: -2147287038
    MSI (s) (8C:CC) [17:43:31:702]: Transforming table Error.
    MSI (s) (8C:CC) [17:43:31:702]: Note: 1: 2262 2: Error 3: -2147287038
    MSI (s) (8C:CC) [17:43:31:702]: Transforming table Error.
    MSI (s) (8C:CC) [17:43:31:702]: Product: Configuration Manager Client -- Configureren mislukt.
    MSI (s) (8C:CC) [17:43:31:702]: Het product is opnieuw geconfigureerd. Productnaam: Configuration Manager Client. Productversie: 5.00.8239.1000. Producttaal: 1043. Fabrikant: Microsoft Corporation. Status van geslaagd/mislukt opnieuw configureren: 1603.
    MSI (s) (8C:CC) [17:43:31:702]: Attempting to delete file C:\WINDOWS\Installer\2bab0.msp
    MSI (s) (8C:CC) [17:43:31:702]: Unable to delete the file. LastError = 32
    MSI (s) (8C:CC) [17:43:31:702]: Attempting to delete file C:\WINDOWS\Installer\2bab1.mst
    MSI (s) (8C:CC) [17:43:31:702]: Unable to delete the file. LastError = 32
    MSI (s) (8C:CC) [17:43:31:717]: Deferring clean up of packages/files, if any exist
    MSI (s) (8C:CC) [17:43:31:717]: Attempting to delete file C:\WINDOWS\Installer\2bab0.msp
    MSI (s) (8C:CC) [17:43:31:717]: Attempting to delete file C:\WINDOWS\Installer\2bab1.mst
    MSI (s) (8C:CC) [17:43:31:717]: MainEngineThread is returning 1603
    MSI (s) (8C:98) [17:43:31:717]: RESTART MANAGER: Session closed.
    MSI (s) (8C:98) [17:43:31:717]: No System Restore sequence number for this installation.
    === Logboekfunctie beëindigd: 3-11-2015 17:43:31 ===
    MSI (s) (8C:98) [17:43:31:717]: User policy value 'DisableRollback' is 0
    MSI (s) (8C:98) [17:43:31:717]: Machine policy value 'DisableRollback' is 0
    MSI (s) (8C:98) [17:43:31:717]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (8C:98) [17:43:31:717]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (8C:98) [17:43:31:717]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (8C:98) [17:43:31:717]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
    MSI (s) (8C:98) [17:43:31:717]: Restoring environment variables
    MSI (s) (8C:98) [17:43:31:717]: Destroying RemoteAPI object.
    MSI (s) (8C:F8) [17:43:31:717]: Custom Action Manager thread ending.
    MSI © (7C:B8) [17:43:31:717]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
    MSI © (7C:B8) [17:43:31:717]: MainEngineThread is returning 1603
    MSI © (7C:80) [17:43:31:717]: RESTART MANAGER: Session closed.
    === Verbose logging stopped: 3-11-2015 17:43:31 ===

     

    I've tried using the PATCH= Function but that doesn't seem to solve anything.

     

    Edit: found this in the ccmsetup.log:

    File C:\WINDOWS\ccmsetup\configmgr2012ac-sp2r2sp1-kb3074857-x64.msp installation failed. Error text: ExitCode: 1603
    Action: CcmSetObjectSecurity.
    ErrorMessages:
    Setup was unable to apply security permissions to C:\Windows\CCM\nl\SCNotification.resources.dll
    The error code is 80070003

     

     

  7. As far as I know these packages are created each time you upgrade your sccm installation (Ive seen it before) They hold the new version of the sccm client.

    im not exactly sure if they all contain the same files, you would have to check the source for that.

     

    I'm guessing one is from rtm to sp1, second one from sp1 to R2 and the third from R2 to Cu3.

     

    You can safely move them to a sub folder as its just a visual thing in the console or delete them as long as you don't delete the one that has the latest clients version.

  8. Just to check, you guys create a new folder for each update package right?

     

    So for example:

    \\ServerName\Updates\UpdatePackage1

    \\ServerName\Updates\UpdatePackage2

    \\ServerName\Updates\UpdatePackage3

    etc

     

    As far as I know and you are free to correct me on this one but if you enter the same folder (\\ServerName\Updates)for all the update packages and SCCM's package validation comes around it will empty out the folder because the rest in there from the other packages should'nt be there.

  9. Hi Guys,

     

    This is a really simple question I think and wondered if anyone had a definitive answer...

     

    If a user sets their business hours as 00:00 to 00:00 for every day of the week, does this mean that the machine believes it's in use 24/7 and no software updates etc are deployed to the client? Or does it mean that effectively the user has no business hours?

     

    I just don't want anyone to have the ability to block any critical management activities.

     

    Thanks,

     

    Ian.

    A deadline will still be a deadline, even if the user could set it to 24/7 the updates will still install the moment the deadline is reached, business hours or not.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.