Jump to content


dambrosioj

Established Members
  • Posts

    7
  • Joined

  • Last visited

dambrosioj's Achievements

Newbie

Newbie (1/14)

0

Reputation

  1. Yes it is enabled, it works fine once I login and then manually force a machine policy refresh then manually force the software update from the client. It just seems it is not working in the task sequence
  2. I am having trouble with some of our workgroup computers in our PKI HTTPS only environment. These machines are not added to the domain but to a workgroup so I am not sure how to get the PKI Workgroup cert to add and have the client connect to the management point correctly. I tried to follow this tutorial with no luck. http://ittherapist.net/2014/01/16/sccm-2012-r2-os-deployment-with-pki-https/ I believe I have all boundaries and everything setup it just is failing when it gets to either software updates or applications. Curious to see what others are doing for importing a workgroup cert , and commands for the configuration manager client. By the way this is in OSD Task sequence I am having trouble. I can manually import the cert afterwards and everything works fine.EDIT: So this is what I am getting now. I am able to import the cert in the task sequence and changed my switches to: FSP=mysite.local SMSMP=mysite.local CCMLOGLEVEL=0 CCMLOGMAXHISTORY=2 CCMLOGMAXSIZE=2000000 SMSCACHESIZE=20000 Software Updates client configuration policy has not been received. UpdatesDeploymentAgent 11/10/2015 9:54:15 AM 3464 (0x0D88) Software updates functionality will not be enabled until the configuration policy has been received. If this issue persists please check client/server policy communication. UpdatesDeploymentAgent 11/10/2015 9:54:15 AM 3464 (0x0D88) Software Updates feature is disabled UpdatesDeploymentAgent 11/10/2015 9:54:15 AM 3464 (0x0D88) CUpdatesLocalSettings::GetUserExperienceFlag - Got UserExperienceFlag = Default UpdatesDeploymentAgent 11/10/2015 9:54:15 AM 3464 (0x0D88) IsRebootNeeded: nNotifyUICount = 0, set overal NotifyUI = True UpdatesDeploymentAgent 11/10/2015 9:54:15 AM 3464 (0x0D88) No current service window available to run updates assignment with time required = 1 UpdatesDeploymentAgent 11/10/2015 9:54:15 AM 3464 (0x0D88) It just seems the updates part is not starting in the client. Once the sequence fails I am able to login and see the client is indeed connected and in PKI
  3. We recently switched our SCCM environment over to HTTPS/PKI and everything has been working well. We were now wanting to include MAC's into our environment for some asset reporting. But we recently started to notice some errors on teh enrollment server. If we re-image a MAC, and re-enroll it to SCCM it creates another record and cert I believe. So what I was doing was deleting the old record which seemed like not a big deal till we started getting the errors below. Our MAC clients are not bound by to AD by the way either. Failed to revoke Certificate on CA: ******\DUQCA1 with serial number: 1*******00000000573F. Check CA permission. ICertAdmin2 RevokeCertificate failed: Access is denied. Do we need to make the user able to revoke the permissions also? I did not see this in the step by step from Microsoft. What would best practice be?
  4. I understand that, I am just wondering what we can do with the native sccm environment. We do not have many macs here and really no need for management so was just curious. All I would really need is java/flash updates
  5. Does anyone use SCCM for any type of Mac Management? We recently switched our environment to HTTPS/PKI and figured why not test out the client on the MAC's. The Hardware inventory and reporting on that is a nice feature but what else is everyone using the mac client for? Seems very limited. I also tried to package Java and Flash via CMAppUtil and no luck.
  6. Thanks! I think I got it. Could you possibly help me add the model of the computer and PC Bios Version to this report? SELECT v_GS_NETWORK_DRIVERS.ResourceID ,v_GS_NETWORK_DRIVERS.DriverDate0 ,v_GS_NETWORK_DRIVERS.DriverDesc0 ,v_GS_NETWORK_DRIVERS.DriverVersion0 ,v_GS_NETWORK_DRIVERS.WakeOnMagicPacket0 ,v_GS_NETWORK_DRIVERS.RemoteWakeEnable0 ,v_GS_NETWORK_DRIVERS.ProviderName0 ,v_GS_NETWORK_DRIVERS.MediaType0 ,v_GS_SYSTEM.Name0 FROM v_GS_SYSTEM INNER JOIN v_FullCollectionMembership ON v_GS_SYSTEM.ResourceID = v_FullCollectionMembership.ResourceID INNER JOIN v_GS_NETWORK_DRIVERS ON v_GS_SYSTEM.ResourceID = v_GS_NETWORK_DRIVERS.ResourceID WHERE (v_FullCollectionMembership.CollectionID = @collid )
  7. I created this report to look for driver versions on our network after I edited the .mof file to look for it and everything seems to be pulling in great but I want to be able to limit this to a collection. Does anyone know how I can add that to this report. SELECT v_GS_NETWORK_DRIVERS.ResourceID ,v_GS_NETWORK_DRIVERS.DriverDate0 ,v_GS_NETWORK_DRIVERS.DriverDesc0 ,v_GS_NETWORK_DRIVERS.DriverVersion0 ,v_GS_NETWORK_DRIVERS.WakeOnMagicPacket0 ,v_GS_NETWORK_DRIVERS.RemoteWakeEnable0 ,v_GS_NETWORK_DRIVERS.ProviderName0 ,v_GS_NETWORK_DRIVERS.MediaType0 ,v_GS_SYSTEM.Name0 FROM v_GS_SYSTEM INNER JOIN v_GS_NETWORK_DRIVERS ON v_GS_SYSTEM.ResourceID = v_GS_NETWORK_DRIVERS.ResourceID Thanks!
×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.