kesh

2006. I had to run a new Sync. After that, all the new patches were downloaded. S Strange problem, but glad the sync resolved the issues.

Has anybody experience this issue with patches not downloading. I am having this problem for October? My ADR is running with no errors, but no updates are being downloaded. Last month's ADR and downloads went off without a hitch Rule Engine Error ADR - no problems ADR settings No patches under Preview

So basically, this is what I did: Added a Domain security group to the Remote Tools Operator Group. Went to Only the instances of objects that are assigned to the specified security scopes and collections. Removed everything from there except Default Security Scope and Add added the collection I want the group to have access too. User then logs into the SCCM console, but can see everything on SCCM. He does not have access on the other collections, but can still see everything else. I want to only allow them t see the collections they have access too.

sorry I meant I download this version: https://www.microsoft.com/en-us/download/details.aspx?id=29265 My CM version is on build 2006. RBA Viewer does not launch.

I tried to install this version but it keeps crashing. I am on CB 2006

I have setup delegated access to a few collections. Is it possible to only view those collections when they login to CM?

I also tested with a Apply Auto Drivers, and still failed. smsts.log

Currently on on V1906. Had about 50 laptops imaged, but the drivers where not included in the task sequence. I am trying to deploy the drivers to a collection that includes all the new laptops via a TS but keeping getting the errors below. smsts.log

I am busy with a project were I need to restructure my current AD and decommission 2 Domain Controllers. This involves creating new OUs and moving user accounts/service accounts and groups to different OUs as well. Is it possible to run a PS command, or any type of report to determine if any applications are using those particular DC's for LDAP queries, and also which accounts and groups are also being used? We have 100s of applications and no documentation for the setup on them. If I can get a report of which IP is talking to the DC for LDAP a query, I can use that to match my application so narrow down and get the application updated to use the new DC. I can also do the same for the accounts as well.

I am currently busy with a new AD structure. Basically moving accounts around, creating, re-naming, and deleting OUs, etc. There are tons of AD accounts that are being used for LDAP queries that have not been documented. Is there a way I can find out which AD accounts are linked or being used for queries by different applications?

My Auto Deployment Rule keeps failing with error code 0X87D20417. RULEENGINE.LOG STATMSG: ID=8706 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_RULE_ENGINE" SYS=MDBXDXVMSC4PR.MDD.NET SITE=MDD PID=2260 TID=10292 GMTDATE=Wed Jan 01 22:22:35.253 2020 ISTR0="SMS Rule Engine" ISTR1="Failed to download one or more content files" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0 SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) Creating Software Update Group for ADR SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) Parsing Deployment Action XML... SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) Parsing Rule XML... SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) Could not find element UpdateGroupName SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) SQL is: select cis.CI_ID from vCI_ConfigurationItems cis join vProvisionedCIs pci on cis.CI_ID = pci.CI_ID where cis.CI_ID in (16786503, 16786587, 16791268, 16791274, 16791276, 16791278, 16791280, 16791282, 16791284, 16791288, 16791294, 16791296, 16791298, 16791300, 16791302, 16791304, 16791306, 16791308, 16791310, 16791312, 16791314, 16791316, 16791318, 16791320, 16791322, 16791324, 16791326, 16791328, 16791330) order by cis.CI_ID SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) 1 of 29 updates are downloaded and will be added to the Deployment. SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) SQL is: select CI_UniqueID from vCI_ConfigurationItems where CI_ID in (16786587) order by CI_ID SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) SQL is: select distinct cira.ReferencedCI_ID from v_CIRelation_All cira ~join v_AuthListInfo ugi on cira.CI_ID = ugi.CI_ID~where ugi.CI_UniqueID = 'ScopeId_B94EC0F7-2C2C-4E50-B68F-11FB622D6FB1/AuthList_dfdbf548-9942-4b92-8177-09b7c8ff5ecb'~and cira.RelationType = 1 and cira.Level = 1 order by cira.ReferencedCI_ID SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) The rule found no new updates. Skipping update group creation or update SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) Enforcing Create Deployment Action SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) Create Deployment Rule Action XML is: <DeploymentCreationActionXML xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><DeploymentId>{2fd237bf-9eea-4245-b3c4-21fe97deef0f}</DeploymentId><DeploymentNumber>0</DeploymentNumber><CollectionId>MDD000B5</CollectionId><IncludeSub>true</IncludeSub><Utc>false</Utc><Duration>14</Duration><DurationUnits>Days</DurationUnits><AvailableDeltaDuration>0</AvailableDeltaDuration><AvailableDeltaDurationUnits>Hours</AvailableDeltaDurationUnits><SoftDeadlineEnabled>false</SoftDeadlineEnabled><SuppressServers>Checked</SuppressServers><SuppressWorkstations>Unchecked</SuppressWorkstations><PersistOnWriteFilterDevices>Unchecked</PersistOnWriteFilterDevices><RequirePostRebootFullScan>Unchecked</RequirePostRebootFullScan><AllowRestart>false</AllowRestart><DisableMomAlert>false</DisableMomAlert><GenerateMomAlert>false</GenerateMomAlert><UseRemoteDP>false</UseRemoteDP><UseUnprotectedDP>true</UseUnprotectedDP><UseBranchCache>true</UseBranchCache><EnableDeployment>true</EnableDeployment><EnableWakeOnLan>false</EnableWakeOnLan><AllowDownloadOutSW>false</AllowDownloadOutSW><AllowInstallOutSW>true</AllowInstallOutSW><EnableAlert>false</EnableAlert><AlertThresholdPercentage>0</AlertThresholdPercentage><AlertDuration>2</AlertDuration><AlertDurationUnits>Weeks</AlertDurationUnits><EnableNAPEnforcement>false</EnableNAPEnforcement><UserNotificationOption>DisplayAll</UserNotificationOption><LimitStateMessageVerbosity>true</LimitStateMessageVerbosity><StateMessageVerbosity>1</StateMessageVerbosity><AllowWUMU>false</AllowWUMU><AllowUseMeteredNetwork>false</AllowUseMeteredNetwork></DeploymentCreationActionXML> SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) Rule XML is: <AutoDeploymentRule xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"> <DeploymentId></DeploymentId> <DeploymentName>Windows Updates | Servers</DeploymentName> <UpdateGroupId>ScopeId_B94EC0F7-2C2C-4E50-B68F-11FB622D6FB1/AuthList_dfdbf548-9942-4b92-8177-09b7c8ff5ecb</UpdateGroupId> <UpdateGroupName></UpdateGroupName> <LocaleId>1033</LocaleId> <UseSameDeployment>false</UseSameDeployment> <AlignWithSyncSchedule>false</AlignWithSyncSchedule> <NoEULAUpdates>false</NoEULAUpdates> <EnableAfterCreate>true</EnableAfterCreate> <ScopeIDs><ScopeID>SMS00UNA</ScopeID> </ScopeIDs> <EnableFailureAlert>true</EnableFailureAlert> <IsServicingPlan>false</IsServicingPlan> <IsOldUpdateGroupCurrent>true</IsOldUpdateGroupCurrent> </AutoDeploymentRule> SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) Criteria Filter Result XML is: <AutoDeploymentRule xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"> <DeploymentId></DeploymentId> <DeploymentName>Windows Updates | Servers</DeploymentName> <UpdateGroupId>ScopeId_B94EC0F7-2C2C-4E50-B68F-11FB622D6FB1/AuthList_dfdbf548-9942-4b92-8177-09b7c8ff5ecb</UpdateGroupId> <UpdateGroupName></UpdateGroupName> <LocaleId>1033</LocaleId> <UseSameDeployment>false</UseSameDeployment> <AlignWithSyncSchedule>false</AlignWithSyncSchedule> <NoEULAUpdates>false</NoEULAUpdates> <EnableAfterCreate>true</EnableAfterCreate> <ScopeIDs><ScopeID>SMS00UNA</ScopeID> </ScopeIDs> <EnableFailureAlert>true</EnableFailureAlert> <IsServicingPlan>false</IsServicingPlan> <IsOldUpdateGroupCurrent>true</IsOldUpdateGroupCurrent> </AutoDeploymentRule> SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) Parsing Deployment Action XML... SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) Parsing Rule XML... SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) SQL is: select cis.CI_ID from vCI_ConfigurationItems cis join vProvisionedCIs pci on cis.CI_ID = pci.CI_ID where cis.CI_ID in (16786503, 16786587, 16791268, 16791274, 16791276, 16791278, 16791280, 16791282, 16791284, 16791288, 16791294, 16791296, 16791298, 16791300, 16791302, 16791304, 16791306, 16791308, 16791310, 16791312, 16791314, 16791316, 16791318, 16791320, 16791322, 16791324, 16791326, 16791328, 16791330) order by cis.CI_ID SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) 1 of 29 updates are downloaded and will be added to the Deployment. SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) SQL is: select CI_UniqueID from vCI_ConfigurationItems where CI_ID in (16786587) order by CI_ID SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) The rule found no new updates. Skipping deployment creation or update SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) CRuleHandler: Enforcing Actions for Rule 4 failed! SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) CRuleHandler: ResetRulesAndCleanUp() SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) Rule result is: 0 SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) CRuleHandler::CreateFailureAlert - Alert ID = 16777234 SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) Updated Failure Information for Rule: 4 SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) CRuleHandler: Deleting Rule 4 SMS_RULE_ENGINE 2020/01/02 12:22:35 AM 10292 (0x2834) Found notification file D:\Program Files\Microsoft Configuration Manager\inboxes\RuleEngine.box\4.RUL SMS_RULE_ENGINE 2020/01/02 12:22:40 AM 10292 (0x2834) PATCHDOWNLOADER.LOG Contentsource = http://download.windowsupdate.com/d/msdownload/update/software/secu/2019/12/windows6.0-kb4530719-x86_14639e5636336bd9a2d2c5053299e8079cbc8c31.cab . Software Updates Patch Downloader 2020/01/02 12:31:21 AM 10292 (0x2834) Query to run: select f.FileName, ct.ContentSource from SMS_CIToContent c join SMS_CIContentFiles f on c.ContentID = f.ContentID join SMS_Content ct on c.ContentID = ct.ContentID where c.ContentDownloaded = 1 and f.FileHash = 'SHA1:14639E5636336BD9A2D2C5053299E8079CBC8C31' Software Updates Patch Downloader 2020/01/02 12:31:22 AM 10292 (0x2834) Downloading content for ContentID = 16787234, FileName = Windows6.0-KB4530719-x86.cab. Software Updates Patch Downloader 2020/01/02 12:31:22 AM 10292 (0x2834) Connecting - Adding file range by calling HttpAddRequestHeaders, range string = "Range: bytes=0-" Software Updates Patch Downloader 2020/01/02 12:31:22 AM 10376 (0x2888) HttpSendRequest failed HTTP_STATUS_PROXY_AUTH_REQ Software Updates Patch Downloader 2020/01/02 12:31:22 AM 10376 (0x2888) Download http://download.windowsupdate.com/d/msdownload/update/software/secu/2019/12/windows6.0-kb4530719-x86_14639e5636336bd9a2d2c5053299e8079cbc8c31.cab to C:\Windows\TEMP\CAB5084.tmp returns 407 Software Updates Patch Downloader 2020/01/02 12:31:22 AM 10376 (0x2888) ERROR: DownloadContentFiles() failed with hr=0x80070197 Software Updates Patch Downloader 2020/01/02 12:31:22 AM 10292 (0x2834)

I have and it made no difference - on my other deployment which was more than 7 days ago, those machines show the same

I have a strange problem with reporting. I have created my upgrade TS to upgrade to from Windows 7 to Windows 10. The TS runs successfully and the machine does upgrade with no issues. My problem is that SCCM is stills reporting that the machines are still on Windows 7. Any suggestions on how to resolve this issue. I have even tried to create a new TS, but that made no difference.

Alternatively, does anybody have a link that has the minimum requirements for BitLocker Management via Intune - trying to Google, but nothing easily found

Can on Prem AD joined machines be used for Intune Bitlocker deployment, or do all machines have to be Azure joined? Would all users require E3 or higher for Bitlocker deployment?