Doug Blake

Hi, Since upgrading our environment to r2 SP1 we are experiencing a bug with the upgraded console(s). It seems, after performing an action such as creating a deployment, on return to Assets and Compliance and selecting a folder (either under Device Collections or User Collections) the folder then shows ALL site collections. Attached a picture for reference. Is anyone else getting this? Thanks, Doug

Hey, Using SCCM 2012 SP1. No CU currently applied although CU3 is to be installed today / this week. I've just tried creating another CI and baseline, to set the IE Homepage. Again, I've deployed to a user collection and logged onto the workstation as the user. The baseline has been pulled down however not evaluated yet. The evaluation schedule was set to every 20 minutes in the deployment however I've passed 20 minutes, and done a reboot and logoff / logon but no evaluation. For additional information, I left a vm logged in (with one of the user accounts the original baseline was deployed to) and it randomly ran about an hour or so after I left for the day, the workstation was idle and locked, but not run since again I'm not sure why this is. Thanks, Doug

Hi, I'm having difficulty understanding when a configuration baseline deployed to a user collection evaluates, and re-evaluates. I've setup 3 configuration items to configure Internet Explorer and added to a baseline, checking and remediating the following registry keys: 1. HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ AutoConfigURL = Company PAC File 2. HKLM:\Software\Policies\Microsoft\Internet Explorer\Control Panel Proxy = 1 3. HKLM:\Software\Policies\Microsoft\Internet Explorer\Control Panel AutoConfig = 1 According to the TechNet article here (http://technet.microsoft.com/en-us/library/hh219289.aspx) baselines deployed to a user will be evaluated at logon, however from my testing I can't see this happening. On the deployment I configured the evaluation to run every 15 minutes from the deployment creation, however the client doesn't actually evaluate. Compliance is enabled within the client settings, and running a Machine Policy retrieval (set to run every 15 minutes anyway) pulls down the compliance setting but reboots / logon's don't force it to run and evaluate. I can force the evaluation to run by opening the client from the control panel app and selecting the baseline to evaluate, however I would like this to run at every logon, and wondered if (when deployed to a user collection) there is a periodic re-evaluation? Thanks, Doug

Hi, I'm looking at combining a number of installs together using requirements / dependencies however unsure how to proceed when the requirement is a MSU file. In the case of installing the App-V 5 Beta 2 Client you are required to have Windows Management Framework 3.0 (KB2506143) and KB2533623 - both of which are available as an MSU file. If i add in the MSU file(s) into SCCM as a deployable application how can I specify the detection method used by the App-v install to detect if the KB's are installed / need installing. Thanks, Doug

Hi Darren, Hope this helps.... Create a report and paste in the text below which should show you the computer name, the last logged on user, the operating system and whether the client is reporting. SELECT TOP (100) PERCENT dbo.v_FullCollectionMembership.CollectionID, dbo.v_FullCollectionMembership.Name, dbo.v_GS_OPERATING_SYSTEM.Name0, dbo.v_GS_COMPUTER_SYSTEM.UserName0 FROM dbo.v_FullCollectionMembership INNER JOIN dbo.v_GS_OPERATING_SYSTEM ON dbo.v_FullCollectionMembership.ResourceID = dbo.v_GS_OPERATING_SYSTEM.ResourceID INNER JOIN dbo.v_GS_COMPUTER_SYSTEM ON dbo.v_FullCollectionMembership.ResourceID = dbo.v_GS_COMPUTER_SYSTEM.ResourceID WHERE (dbo.v_FullCollectionMembership.CollectionID = 'XXXXXXXX') ORDER BY dbo.v_FullCollectionMembership.Name Replace XXXXXXXX with a collection ID. You can find this by right clicking on a collection in ConfigMgr and selecting properties - should be listed at the bottom. It would be easiest to setup a collection to query for this information but if you don't know how to do that yet use the All Systems collection which should contain everything the database is aware of as such. Cheers, Doug

Hi, We're trying to install IE9 as part of our OSD. This is software deployment step within the OSD TS as the original Windows 7 capture has IE8. When deploying a customised MSI (using the IEAK9) the installation completes fine however when the first user for the new machine comes to try logging on the following error is displayed: The User Profile Service service failed to start. The error is due to the following file located within the default user profile either being unreadable not accessable - C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\SQM\iesqmdata_setup0.aqm Deleting the above file resolves the problem, similary changing the permissions the file also fixes the problem. Can anyone explain why this is happening and what resolution i can try? (I want to try to resolve the issue rather than adding a step to delete the file) This occurs on both x32 and x64 environments. I've also experienced the issue when deploying the same package to an existing Windows 7 machine that's already in use by a user. After the installation and reboot, the existing user can log on however no new users would be able to. Deploying an uncustomised IE does not cause this problem. Thanks, Doug

Hi, I'm trying to enable BitLocker during OSD but haven't had any success. I'm deploying Windows 7 x64 to an HP ProBook 6560B. I've enabled the TPM Chip within the BIOS and confirmed this is visible via the OS. As far as i'm aware we have not extended the schema within AD to allow for storage of keys, this isn't something we'll be doing and we don't wish to store any keys. I have selected the following options with the 'Enable BitLocker' TS: Current Operating System Drive - TPM Only Do Not Create A Recovery Key The TS fails with the following errors - Set command line: "OSDBitLocker.exe" /enable /wait:False /mode:TPM /pwd:None OSDBitLocker 11/01/2012 15:45:15 2712 (0x0A98) Target volume not specified, using current OS volume OSDBitLocker 11/01/2012 15:45:15 2712 (0x0A98) Current OS volume is 'C:' OSDBitLocker 11/01/2012 15:45:15 2712 (0x0A98) Succeeded loading resource DLL 'C:\Windows\SysWOW64\CCM\1033\TSRES.DLL' OSDBitLocker 11/01/2012 15:45:15 2712 (0x0A98) Protection is OFF OSDBitLocker 11/01/2012 15:45:15 2712 (0x0A98) Volume is fully decrypted OSDBitLocker 11/01/2012 15:45:15 2712 (0x0A98) Tpm is enabled OSDBitLocker 11/01/2012 15:45:16 2712 (0x0A98) Tpm is activated OSDBitLocker 11/01/2012 15:45:16 2712 (0x0A98) Tpm is not owned OSDBitLocker 11/01/2012 15:45:16 2712 (0x0A98) Tpm ownership is allowed OSDBitLocker 11/01/2012 15:45:16 2712 (0x0A98) uStatus == 0, HRESULT=80280012 (e:\nts_sms_fre\sms\framework\tscore\tpm.cpp,503) OSDBitLocker 11/01/2012 15:45:16 2712 (0x0A98) 'IsSrkAuthCompatible' failed (2150105106) OSDBitLocker 11/01/2012 15:45:16 2712 (0x0A98) Tpm does not have compatible SRK OSDBitLocker 11/01/2012 15:45:16 2712 (0x0A98) Tpm has EK pair OSDBitLocker 11/01/2012 15:45:16 2712 (0x0A98) Initial TPM state: 39 OSDBitLocker 11/01/2012 15:45:16 2712 (0x0A98) Creating TPM owner authorization value OSDBitLocker 11/01/2012 15:45:16 2712 (0x0A98) Succeeded loading resource DLL 'C:\Windows\SysWOW64\CCM\1033\TSRES.DLL' OSDBitLocker 11/01/2012 15:45:16 2712 (0x0A98) Taking ownership of TPM OSDBitLocker 11/01/2012 15:45:16 2712 (0x0A98) uStatus == 0, HRESULT=80070005 (e:\nts_sms_fre\sms\framework\tscore\tpm.cpp,645) OSDBitLocker 11/01/2012 15:45:18 2712 (0x0A98) 'TakeOwnership' failed (2147942405) OSDBitLocker 11/01/2012 15:45:18 2712 (0x0A98) pTpm->TakeOwnership( sOwnerAuth ), HRESULT=80070005 (e:\nts_sms_fre\sms\client\osdeployment\bitlocker\bitlocker.cpp,480) OSDBitLocker 11/01/2012 15:45:18 2712 (0x0A98) Failed to take ownership of TPM. Ensure that Active Directory permissions are properly configured Access is denied. (Error: 80070005; Source: Windows) OSDBitLocker 11/01/2012 15:45:18 2712 (0x0A98) InitializeTpm(), HRESULT=80070005 (e:\nts_sms_fre\sms\client\osdeployment\bitlocker\bitlocker.cpp,1191) OSDBitLocker 11/01/2012 15:45:18 2712 (0x0A98) ConfigureKeyProtection( keyMode, pwdMode, pszStartupKeyVolume ), HRESULT=80070005 (e:\nts_sms_fre\sms\client\osdeployment\bitlocker\bitlocker.cpp,1396) OSDBitLocker 11/01/2012 15:45:18 2712 (0x0A98) pBitLocker->Enable( argInfo.keyMode, argInfo.passwordMode, argInfo.sStartupKeyVolume, argInfo.bWait ), HRESULT=80070005 (e:\nts_sms_fre\sms\client\osdeployment\bitlocker\main.cpp,650) OSDBitLocker 11/01/2012 15:45:18 2712 (0x0A98) Process completed with exit code 2147942405 TSManager 11/01/2012 15:45:18 1800 (0x0708) !--------------------------------------------------------------------------------------------! TSManager 11/01/2012 15:45:18 1800 (0x0708) Failed to run the action: Enable BitLocker. Permissions on the requested may be configured incorrectly. Access is denied. (Error: 80070005; Source: Windows) TSManager 11/01/2012 15:45:18 1800 (0x0708) When i've tried to enable bitlocker from the command line (using manage-bde.exe -on C:) the output reports that BitLocker can't enable as TPM isn't the owner and that the OS needs to take ownership first. This can be achived by running manage-bde.exe -tpm -o selectapassword however i'm trying to avoid this method as would prefer to use the proper TS step (and have an auto generated password) Can anyone help? We're running SCCM 2007 R3.

Hi, When deploying a virtual application via SCCM the client receives a 'Notification to Run' baloon (with a 5 minute countdown). I want to remove this notification and have zero interation between the Virtual App and the user, basically for the icons to just appear. This is how all our normal applications are deployed via SCCM so users never see anything happen. While this option is available for normal application deployment it isn't for Virtual App's - can anyone help? Many thanks. Doug