SMSNewb

Thanks, Niall. Do you happen to know of the server impact if a full update is done on 200 collections at the same time?

Or, if anyone has any input as to the impact of having a bunch of collections full update all at the same time, or the impact of a bunch of collections that use incremental updates that would also be helpful

Hello, I'm attempting to create a script that will mirror my AD OU's as collections. I have everything worked out, except "Schedule a full update on this collection". Is there a way that I can easily and dynamically stagger the update schedule with scripting? I don't want 150 collections doing a full update at the same time. I also read that having all your collections set to "Use incremental updates for the collection" can be rough on performance. Anyone have any suggestions as to how to automate this while being mindful of server performance? Thanks

Hello, I have an office where all the clients are no longer getting updates from SCCM SUP. The office is connected via VPN back to the main office where the MP/DP are. All clients at this office are Windows 7 Enterprise. Looking at the WUAHandler.log, I get: OnSearchComplete - Failed to end search job. Error = 0x80072efe. WUAHandler 9/6/2017 11:44:54 AM 2976 (0x0BA0) Scan failed with error = 0x80072efe. WUAHandler 9/6/2017 11:44:54 AM 2976 (0x0BA0) Looking at the WindowsUpdate.log, I get: 2017-09-06 12:29:33:171 1168 1344 Misc WARNING: Send failed with hr = 80072efe. 2017-09-06 12:29:33:171 1168 1344 Misc WARNING: SendRequest failed with hr = 80072efe. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <> 2017-09-06 12:29:33:171 1168 1344 Misc FATAL: SOAP/WinHttp - SendRequest: SendRequestUsingProxy failed. error 0x80072efe 2017-09-06 12:29:33:171 1168 1344 PT + Last proxy send request failed with hr = 0x80072EFE, HTTP status code = 0 2017-09-06 12:29:33:171 1168 1344 PT + Caller provided credentials = No 2017-09-06 12:29:33:171 1168 1344 PT + Impersonate flags = 0 2017-09-06 12:29:33:171 1168 1344 PT + Possible authorization schemes used = 2017-09-06 12:29:33:171 1168 1344 PT WARNING: GetAuthorizationCookie failure, error = 0x80072EFE, soap client error = 5, soap error code = 0, HTTP status code = 200 2017-09-06 12:29:33:171 1168 1344 PT WARNING: Failed to initialize Simple Targeting Cookie: 0x80072efe 2017-09-06 12:29:33:171 1168 1344 PT WARNING: PopulateAuthCookies failed: 0x80072efe 2017-09-06 12:29:33:171 1168 1344 PT WARNING: RefreshCookie failed: 0x80072efe 2017-09-06 12:29:33:171 1168 1344 PT WARNING: RefreshPTState failed: 0x80072efe 2017-09-06 12:29:33:171 1168 1344 PT WARNING: PTError: 0x80072efe 2017-09-06 12:29:33:171 1168 1344 Report WARNING: Reporter failed to upload events with hr = 80072efe. If I go to http://<servername>:8530, I get page can't be displayed. I can ping the SCCM server from the client. I've checked my SCCM client cert, and it is good. I can manually run updates trough Windows Updates. I've turned off the Windows Firewall to test without success. I've reinstalled the SCCM client. I'm not having this issue with any other clients, just the ones at this office. I'm kinda at a loss at this point. Does anyone have any insight as to what I can look at? Has anyone else experienced this issue? Thanks.

OK, thanks simulacra75. Do I limit that distribution point with a boundary group for the IP subnet for that office to force things to that DP? The will be ~3-5 /24 networks there

So, let the clients use the management point in the main building across the vpn? In what scenario would I want to add additional management points?

I believe it is a 20 megabyte connection, but the ISP is terrible there and the connection is flaky and drops quite a bit.

Hello, I'm looking for some best practice advise regarding adding additional management points. Currently, I have a single SCCM server for all my roles. I only have 1 site. I have an offsite office that connects via vpn to my site. I was going to put a distribution point out there and was considering a management point as well. Is it best practice to only have management points on you main lan at your primary site? Or would things be okay if I put a management point in my office that connects over vpn? Or should I consider a secondary site? Currently using 1610. I've never had to branch out from a single network, single building, so I don't have any experience with building out SCCM beyond that. Any help appreciated!

I'm completely new to working with queries, so I'm not sure I fully get what you're saying here. I'll poke around in the queries criteria tab and see what I can work out.

This is the query I'm running select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, SMS_R_System.Client, SMS_G_System_SoftwareProduct.ProductName, SMS_G_System_SoftwareProduct.ProductVersion from SMS_R_System inner join SMS_G_System_SoftwareProduct on SMS_G_System_SoftwareProduct.ResourceId = SMS_R_System.ResourceId where SMS_G_System_SoftwareProduct.ProductName like "Imprivata Agent" Pretty basic query, and I'm pulling more information than I actually need. Looking at it further, it appears that 98% of the output is only showing two versions. Everyone device has one version across the board, and the second version is what is in add/remove programs. Only a small subset have 3 versions...I should have looked at a larger sample before posting. Still odd, as I would only expect to see the version in add/remove programs listed, and I haven't been able to find any reference to the other version anywhere on the machine.

Hello all, I'm running some queries to find all devices that have a particular software product on them, and I'm getting some odd results. The issue that I am having is that when I run the query, I'm getting multiple product versions reported back. We have gone through several versions of the this software as it is updated pretty regularly, and all versions are reporting back in the query instead of just one, or the one that is actually installed. Only one version is shown in Add/Remove programs on the device as I would expect. Example: The device started with Program v1.1. Then Program v1.2 came out and we upgraded to it. Then Program v1.3 came out and we upgraded. When I run the query, it comes out showing all 3 versions, when I would expect it to show just 1. Ex: Computer1 Program v1.1 Computer1 Program v1.2 Computer1 Program v1.3 Could this be the result of stale data from previous software inventories? If so, what is the best method to clean that out? The computer only has 1 version installed, so stale data is the only thing I can think of that would cause this. Any help/suggestions would be greatly appreciated.

bumb Any suggestions?

I'm also looking for information on this. How to do UEFI OSD but also have 32bit OSD. Right now, if I set my UEFI TS to my 64bit boot image, it breaks all my 32bit OSD... very annoying

Hello, I'm trying to manually import an update into SCCM SUP. I have successfully imported the updated into the underlying WSUS server, and I can search and locate it there. But the update never makes it into SCCM. I've tried syncing with Microsoft Update (where I normally sync to), and "Do not synchronize from Microsoft Update or upstream data source" , neither sync will pull in that update. Can anyone tell me what I'm doing wrong? Should I be pointing my SUP to WSUS directly? I read an older blog post that said to use the "Do not sync..." with manually imported updates, which is why I tried that. Any help is much appreciated SMSNewb

I found this thread: https://www.windows-noob.com/forums/topic/13113-office-2013-updates-ridiculous-disk-usage/?hl=%2Boffice+%2Blanguages#entry50454 I checked WSUS proper and it was set to "Download updates in all languages, including new languages" My SCCM is only set to download English I didn't see any update/answers on the other thread. I was wondering if anyone had any additional information regarding this or is experiencing the issue themselves.

Has anyone experienced Office updates downloading all language versions? I'm using SCCM 2012 and my software update point is set to only download English updates, however, when I find updates for Office and create an Update Group and download the update, I'm getting all the languages. Has anyone else experienced this? I've double checked everything and English is the only thing I have selected to download. I'm not entirely sure what else to check.

Is the 1000 update limit on the Software Update Group or the Deployment Package?

Will grouping all the desktop level operating systems get you close to the 1000 update limit for the software update group? Are you relying on ADR's to do your monthly SUGs or are you manually doing this? How many deployment packages do you utilize? 1 for desktops, and 1 for servers?

Hello everyone, I was wondering if anyone could give me some help setting up my software updates. I understand the concepts and such, but I struggling with setting up the Update Groups and Deployment Packages. From what I am reading, a lot of people are saying to create a Update Group per month, every month, then eventually roll these updates into a yearly software update group. This makes sense to me. My question is, should I have software update groups per product? Example, one for Windows 7 and one for Windows 8.1? Or should I just have one software update group per month, with all the products I need to support? I'm aware that the client will only grab the updates it needs if its all in one. Should I have one single deployment package? Or several, one for each product? I'm really looking for best practices. Or any "gotchas" from people who have been doing software updates through SCCM for awhile. I realize the general answer will be "it depends on your environment", so I'm really just looking for some tips/suggestions/guidance that will help streamline the process Appreciate any help/suggestions

Hello all, I just received a batch of Dell Precision Tower 7810 workstations and I need to get them imaged and deployed. The issue I am having is with the NIC and some odd behavior during OSD and afterward. I have the driver from Dell that came from their system driver pack (http://en.community.dell.com/techcenter/enterprise-client/w/wiki/7556.precision-t7810-windows-7-driver-pack) and it seems to install okay. However, I can't get any of my applications to install during the TS with this driver. I can hit F8 and ping my DP and everything, but nothing will download and install. Once the TS finishes, and the machine boots into Windows, the taskbar shows the NIC as disconnected, but I have a network connection. The machine is added to the domain during the TS without issue. The SCCM client is installed during the TS, but it won't communicate with my management server once booted into Windows. I'm able to ping internally and externally without issue. I saw the comment on the Dell CAB webpage where the user used a newer driver, and I tried that as well with no success. So far, I have tried: the driver that comes in the Dell driver pack the driver download individual from Dell for this model the driver off Intels website the driver I pulled off a computer that came from Dell before I attempted to image with my organizations image All of these drivers exhibit the same behavior. The computer right out of the box using Dells image works fine. Anything done with OSD, and there are problems. I have no issues imaging any other machine whether it be made from Dell or HP For giggles, I installed Windows manually off a USB thumb drive and used the same drivers as above, and everything worked fine. I'm really scratching my head here on this one. I would say there is a problem with my image, but I don't have any issue with any other model across several vendors using the same image, so now I'm really at a loss. None of it really makes any sense at this point. The Dell T7810 uses the Intel I217-LM NIC, which I have other models that use as well, but the T7810 is the only one giving me issues. Any help/advice is greatly appreciated

Any other suggestions of anything I can look at?

I have two boundaries, one is ad-site, the other is IP range. Both of these boundaries are in a single boundary group

Yes, once the task sequenced failed, I checked the IP to confirm that it was getting a valid address for the boundary and it is.

Wouldn't that affect PXE imaging as well? I am able to PXE boot and image a computer with no issues, and install application in that task sequence. I'm just not able to perform the "Install Applications" portion of a build and capture task sequence. If I set "Continue on error", the build and capture will complete and place the wim in the directory that I specified, just without any applications.

Thank you. I added an IP Address Range boundary and added it to my Boundary Group. Unfortunately, I'm still having the issue. I verified the machine has a valid IP within the IP Address Range boundary, and networking is working fine as I copy my logs off with net use Here are my logs after changing the boundary group: SMSTS.LOG (Before move to C:\Windows\CCM\Logs) Active request handle is empty, registering with new active request handle. This is expected if the TS was started from a media/PXE. OSDSetupHook 5/9/2014 3:01:38 PM 1848 (0x0738) Saving the new active request handle for the task sequence: {A3F20EFA-94FD-4C5F-8F20-066FEB914572} OSDSetupHook 5/9/2014 3:01:38 PM 1848 (0x0738) Failed to create instance for IMTCTokenHandler interface, hr=0x80070005 OSDSetupHook 5/9/2014 3:01:38 PM 1848 (0x0738) Waiting for ccmexec process to start OSDSetupHook 5/9/2014 3:01:38 PM 1848 (0x0738) Failed to create instance for IMTCTokenHandler interface, hr=0x80070005 OSDSetupHook 5/9/2014 3:01:43 PM 1848 (0x0738) Waiting for ccmexec process to start OSDSetupHook 5/9/2014 3:01:43 PM 1848 (0x0738) Failed to create instance for IMTCTokenHandler interface, hr=0x80070005 OSDSetupHook 5/9/2014 3:01:48 PM 1848 (0x0738) Waiting for ccmexec process to start OSDSetupHook 5/9/2014 3:01:48 PM 1848 (0x0738) Failed to create instance for IMTCTokenHandler interface, hr=0x80070005 OSDSetupHook 5/9/2014 3:01:53 PM 1848 (0x0738) Waiting for ccmexec process to start OSDSetupHook 5/9/2014 3:01:53 PM 1848 (0x0738) Failed to create instance for IMTCTokenHandler interface, hr=0x80070005 OSDSetupHook 5/9/2014 3:01:58 PM 1848 (0x0738) Waiting for ccmexec process to start OSDSetupHook 5/9/2014 3:01:58 PM 1848 (0x0738) Failed to create instance for IMTCTokenHandler interface, hr=0x80070005 OSDSetupHook 5/9/2014 3:02:04 PM 1848 (0x0738) Waiting for ccmexec process to start OSDSetupHook 5/9/2014 3:02:04 PM 1848 (0x0738) CoCreateInstance succeeded OSDSetupHook 5/9/2014 3:02:10 PM 1848 (0x0738) Succesfully registered the tasksequence with the execution manager OSDSetupHook 5/9/2014 3:02:32 PM 1848 (0x0738) SMSTS.LOG (After move to C:\Windows\CCM\Logs) CAppMgmtSDK::GetEvaluationState ScopeId_520BCF39-A29D-4C91-8339-B2FC24AC6063/RequiredApplication_836ac639-7466-4839-83e4-edf8404051a1.4 = DownloadFailed DCMAgent 5/9/2014 3:05:59 PM 1924 (0x0784) Installation job completed with exit code 0x00000000 InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) Execution status received: 24 (Application download failed ) InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) App install failed. InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) Setting TSEnv variable '_TSAppInstallStatus'='Error' InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) Setting TSEnv variable 'SMSTSInstallApplicationJobID__ScopeId_520BCF39-A29D-4C91-8339-B2FC24AC6063/Application_836ac639-7466-4839-83e4-edf8404051a1'='' InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) Completed installation job. InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) Step 2 out of 2 complete InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) Install application action failed: 'Adobe Flash Player 12 ActiveX'. Error Code 0x80004005 InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) Sending error status message InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) Setting URL = **********************, Ports = 80,443, CRL = false InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) Setting Server Certificates. InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) Setting Authenticator. InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) Set authenticator in transport InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) Setting Media Certificate. InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) Sending StatusMessage InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) Setting message signatures. InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) Setting the authenticator. InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) CLibSMSMessageWinHttpTransport::Send: URL: ***************:80 CCM_POST /ccm_system/request InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) Request was successful. InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) Install application action cannot continue. ContinueOnErrorFlag is set to false. InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) hrInstallation, HRESULT=80004005 (e:\nts_sccm_release\sms\client\osdeployment\installapplication\installapplication.cpp,899) InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) pInstall->InstallApplications(saAppNames, sContinueOnError), HRESULT=80004005 (e:\nts_sccm_release\sms\client\osdeployment\installapplication\main.cpp,277) InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) Install Static Applications failed, hr=0x80004005 InstallApplication 5/9/2014 3:05:59 PM 1924 (0x0784) Process completed with exit code 2147500037 TSManager 5/9/2014 3:05:59 PM 3040 (0x0BE0) !--------------------------------------------------------------------------------------------! TSManager 5/9/2014 3:05:59 PM 3040 (0x0BE0) Failed to run the action: Install Application. Unspecified error (Error: 80004005; Source: Windows) TSManager 5/9/2014 3:05:59 PM 3040 (0x0BE0) AppDiscovery.log Entering ExecQueryAsync for query "select * from CCM_AppDeliveryType where (AppDeliveryTypeId = "ScopeId_520BCF39-A29D-4C91-8339-B2FC24AC6063/DeploymentType_f99f7b85-5c31-4526-af32-b8671cf0cc3a" AND Revision = 1)" AppDiscovery 5/9/2014 3:05:51 PM 2320 (0x0910) Performing detection of app deployment type Adobe Flash Player 12 ActiveX - Windows Installer (*.msi file)(ScopeId_520BCF39-A29D-4C91-8339-B2FC24AC6063/DeploymentType_f99f7b85-5c31-4526-af32-b8671cf0cc3a, revision 1) for system. AppDiscovery 5/9/2014 3:05:51 PM 2320 (0x0910) +++ MSI application not discovered [MSI Product Code: {B01EA176-C775-4490-B4CC-938A4B3EF5A3}, MSI Product version: ] AppDiscovery 5/9/2014 3:05:51 PM 2320 (0x0910) +++ Did not detect app deployment type Adobe Flash Player 12 ActiveX - Windows Installer (*.msi file)(ScopeId_520BCF39-A29D-4C91-8339-B2FC24AC6063/DeploymentType_f99f7b85-5c31-4526-af32-b8671cf0cc3a, revision 1) for system. AppDiscovery 5/9/2014 3:05:51 PM 2320 (0x0910) Entering ExecQueryAsync for query "select * from CCM_AppDeliveryType where (AppDeliveryTypeId = "ScopeId_520BCF39-A29D-4C91-8339-B2FC24AC6063/DeploymentType_f99f7b85-5c31-4526-af32-b8671cf0cc3a" AND Revision = 1)" AppDiscovery 5/9/2014 3:05:52 PM 2320 (0x0910) Performing detection of app deployment type Adobe Flash Player 12 ActiveX - Windows Installer (*.msi file)(ScopeId_520BCF39-A29D-4C91-8339-B2FC24AC6063/DeploymentType_f99f7b85-5c31-4526-af32-b8671cf0cc3a, revision 1) for system. AppDiscovery 5/9/2014 3:05:52 PM 2320 (0x0910) +++ MSI application not discovered [MSI Product Code: {B01EA176-C775-4490-B4CC-938A4B3EF5A3}, MSI Product version: ] AppDiscovery 5/9/2014 3:05:52 PM 2320 (0x0910) +++ Did not detect app deployment type Adobe Flash Player 12 ActiveX - Windows Installer (*.msi file)(ScopeId_520BCF39-A29D-4C91-8339-B2FC24AC6063/DeploymentType_f99f7b85-5c31-4526-af32-b8671cf0cc3a, revision 1) for system. AppDiscovery 5/9/2014 3:05:52 PM 2320 (0x0910) ActionType - Install will use Content Id: Content_99521959-85ed-4826-a6c7-760a6a083903 + Content Version: 1 for AppDT "Adobe Flash Player 12 ActiveX - Windows Installer (*.msi file)" [scopeId_520BCF39-A29D-4C91-8339-B2FC24AC6063/DeploymentType_f99f7b85-5c31-4526-af32-b8671cf0cc3a], Revision - 1 AppDiscovery 5/9/2014 3:05:53 PM 2320 (0x0910) ActionType - Install will use Content Id: Content_99521959-85ed-4826-a6c7-760a6a083903 + Content Version: 1 for AppDT "Adobe Flash Player 12 ActiveX - Windows Installer (*.msi file)" [scopeId_520BCF39-A29D-4C91-8339-B2FC24AC6063/DeploymentType_f99f7b85-5c31-4526-af32-b8671cf0cc3a], Revision - 1 AppDiscovery 5/9/2014 3:05:55 PM 2320 (0x0910) ContentTransferManager.log CTM job {49398B71-3ABA-4E25-9076-32CC7EF9C294} encountered error 0x80070005 during download ('Error processing manifest.')- The error maps to denied access. ContentTransferManager 5/9/2014 3:05:58 PM 896 (0x0380) Not sure where the denied access is coming from CAS.log Download location found 0 - *************************/SMS_DP_SMSPKG$/Content_99521959-85ed-4826-a6c7-760a6a083903.1 ContentAccess 5/9/2014 3:05:55 PM 896 (0x0380) Download request only, ignoring location update ContentAccess 5/9/2014 3:05:55 PM 896 (0x0380) Download started for content Content_99521959-85ed-4826-a6c7-760a6a083903.1 ContentAccess 5/9/2014 3:05:55 PM 2276 (0x08E4) Download failed for content Content_99521959-85ed-4826-a6c7-760a6a083903.1 under context System, error 0x80070005 ContentAccess 5/9/2014 3:05:58 PM 2872 (0x0B38) Download failed for download request {639EC930-7C72-4AA5-9D5F-1C69F113A4BF} ContentAccess 5/9/2014 3:05:58 PM 2872 (0x0B38) Raising event: [sMS_CodePage(437), SMS_LocaleID(1033)] instance of SoftDistDownloadFailedEvent { ClientID = "GUID:69653877-9CE6-4C61-B615-A8075213CE89"; DateTime = "20140509190558.835000+000"; MachineName = "BC7"; PackageId = "Content_99521959-85ed-4826-a6c7-760a6a083903"; PackageName = "Content_99521959-85ed-4826-a6c7-760a6a083903"; PackageVersion = "1"; ProcessID = 2724; SiteCode = "***"; ThreadID = 2872; }; ContentAccess 5/9/2014 3:05:58 PM 2872 (0x0B38) Successfully raised Download Failed event. ContentAccess 5/9/2014 3:05:58 PM 2872 (0x0B38) Error: DeleteDirectory:- Failed to delete Directory C:\WINDOWS\ccmcache\1.BCWork with Error 0x00000002. ContentAccess 5/9/2014 3:05:58 PM 2872 (0x0B38) Releasing content request {639EC930-7C72-4AA5-9D5F-1C69F113A4BF} ContentAccess 5/9/2014 3:05:59 PM 2872 (0x0B38)