Robs Blog

BBC News: Hacker loses extradition appeal

Rob — Thu, 28 Aug 2008 12:21:00 GMT

This story really gets my goat. I really feel sorry for Gary McKinnon. He's 2 weeks away from extradition to the USA, where mostly likely he'll be charged under the super-duper terrorism laws for his Indiscretions.

He really shouldn't be labelled as a Terrorist, and he shouldn't be extradited. Instead he should be tried here. That word Terrorist, it's so confusing nowdays (intentionally made confusing I may add) ... who is, and who isn't a Terrorist?

Take a look at the OED definition for Terrorist

a person who uses violence and intimidation in the pursuit of political aims

This guy hasn't shown an ounce of violence to anyone, he's just like me and you, and I'd bet he scraped his skill-set from the web and from chats with friends on IRC, instead he finds a weakness in the US Miliary\NASA computer systems (did anyone lose their jobs over their faiure to secure these secure networks?) and exploits it (bad! but not Evil!) to find out "secrets", as he puts it ... "I sought information on UFOs".

Roll back 10 or so years ago, and he would have been questioned, his methods analysed and neutralised, and possibly either hired or released back in to the wild. Roll forward to now and this guy is about to be made an example of, to all those terrorists that couldn't achieve what he did even if they tried ... great example that'll make!

If he gets put in prison in the USA then it's a show, a scam, and it's being done to cover up the clumsy security measures that were in-place when he managed to blaze his way through 97 odd computers.

If you have any sympathy for the poor guy, in the UK we write to our local MP's and they take it up, please raise awareness inside the USA that this isn't acceptable behaviour. He sure did commit a crime, but not an evil one!

Source: BBC News

ConfigMgr 2007 RTM\SP1 - Component Status Summarizer acting like a dead duck?

Rob — Thu, 28 Aug 2008 10:06:00 GMT

This issue won't impact many of you, and to induce the following behaviour you really need to go toggle some values most SMS Admins leave well alone. Hence why this one hasn't been spotted in the wild (there is a technet forum thread on this ...).

Have you noticed in your environment that your Component Status Summarization data is not being replicated to the parent site?

You prod it with the proverbial stick but it just won't respond, akin to a dead duck?

Well, firstly each Site server will summarizer it's own status messages for Offer, Component and Site System, wrap this up in a SUM file then replicate to it's Parent Site server (obviously only if this feature is enabled!). This is so that the Parent does not have to summarizer nn amount of child sites status messages. Overwhelm the server it could, so instead this summarization is performed by the owner of the status messages. I do believe this hasn't changed since the SMS 2.0 days, and is an effective way of managing the problem of summarization and replication of this data upwards.

You can check the usual log files, ending up in COMPSUMM, and you notice that nothing is ever put in to a SUM file for replication to the Parent Site server.

Again I have to say *** 99.9% of you WON'T ever experience this problem ***

That 0.1% that do suffer from the problem probably have done two things:

Firstly, they have modified the Replication Priority for the Component Status Summarizer from MEDIUM to HIGH or LOW at the Child site.
Secondly, they have reverted the change back to MEDIUM at the Child site.

If you are suffering from this problem, then go check your COMPSUMM log, make sure it definately isn't attempting to put together the SUM file for replicatioh, and that you are set to Replication Priority Medium. If so, now go check your SCF and pull up next to the <SMS_COMPONENT_STATUS_SUMMARIZER> Component definition, check out the Replication tag. Usually looks like this:

If it says Medium instead of Normal then there is the problem. ConfigMgr is looking for three values, High, Normal and Low. Therefore Medium is ignored, the replication of summarization data is skipped, and you don't see summarization data at the Parent. The child site will continue to summarize, but it just won't get around to producing and replicating a SUM file to the Parent Site server.

I reproduced this in my home test lab and can confirm all of the above.

Three ways out of this:

Change to HIGH\LOW (LOW best option, only if you are impacted, leave the Component Status Summarizer alone if you are not experiencing the problem)
Keep at MEDIUM but edit the SCF (I totally recommend that you DO NOT do this)
Wait for the impending hot-fix from Microsoft or for it to be rolled in to the next product service pack (Best path if you are unaffected)

By default, the out of the box SCF file has the correct definition so this bug activates ONLY if you modify Replication Priority for this specific component. Please do not tinker on your production environment to reproduce this problem, do it in the lab if you are unaffected but interested.

Force be with you and all that

WMUG Exclusive - Irrefutable proof that moon landings where faked!!!

Rob — Thu, 28 Aug 2008 09:18:00 GMT

Yes ... another great scoop for WMUG!

After much trawling of the web, I finally stumbled in to a site that had all the answers, with photo comparisons and analysis proving that those moon landings where truely faked (and that aliens where involved!)

Without much further ado, I link you to >here<

No more BS NASA, we are on to you big time!

Configuration Manager - List of log files

Rob — Tue, 26 Aug 2008 15:05:00 GMT

... More a reference for me really,

List of Log Files in Configuration Manager 2007

http://technet.microsoft.com/en-us/library/bb892800.aspx

ConfigMgr SP1 installation causes BSOD

Rob — Fri, 22 Aug 2008 10:27:00 GMT

Had an interesting problem yesterday, ConfigMgr RTM upgrade to SP1 two thirds of the way through induced a BSOD.

Hard to troubleshoot, system reboots and all you're left with is a minidump (depending on your OS configuration for debugging) and a partially completed ConfigMgrSetup log file.

ConfigMgrSetup log file indicates that the failure point took place around where the WinPE boot images are updated. You can go really far in terms of digging on this one, or just drop back, get the minidump and parse it in the Microsoft debugging tools.

Once you sort out your Symbols and analyse the dump, you'll be closer to identifying what causes the BSOD. In my case, it turned out to be a driver called SRTSP.SYS that belongs to the Symantec Anti-Virus suite.

Yep you read that right! It was the Anti-Virus software that Blue Screened the Operating System. Most disappointing, but from experience, and from talking to other Admins ... Anti-Virus is a plague we all have to tolerate, and it causes unusual and unpredictable behaviour to take place.

If you've not debugged a minidump, or forgotten the steps (for us oldies!) then here's a great article on Ghacks by Martin on how to get the process up and running.

I'd like to dedicate this blog posting to Larus Bulat, who cusses and curses about Anti-Virus software causing him no end of headaches, and who made me smile when I realised that the problem I was dealing with was entirely due to those pesky Anti-Virus products.

ConfigMgr client install failure - Errors 1708 & 1603 in

Rob — Fri, 22 Aug 2008 10:13:00 GMT

Seen an interesting issue where the CCMSETUP parameters incorrectly specify MP as SMSMP, resulting in failure and exotic errors appearing in the CLIENT.MSI and CCMSETUP logs:

Just need to fire up CLIENT.MSI in SMSTRACE, find Return value 3 and you'll possibly see the following:

WARNING: The path passed for the TRK file is empty.
SMSMP cannot be specified without SMSSITECODE
@@ERR:25001
MSI (s) (1C!94) [10:10:37:046]: Product: Configuration Manager Client -- Error 25001. Setup failed due to unexpected circumstances
The error code is 80004005

Error 25001. Setup failed due to unexpected circumstances
The error code is 80004005
MSI (s) (1C:0C) [10:10:37:046]: Machine policy value 'DisableRollback' is 0
MSI (s) (1C:0C) [10:10:37:093]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
Action ended 10:10:37: SmsSetClientConfigInit. Return value 3.
MSI (s) (1C:0C) [10:10:37:093]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (1C:0C) [10:10:37:093]: No System Restore sequence number for this installation.
MSI (s) (1C:0C) [10:10:37:093]: Unlocking Server
Action ended 10:10:37: INSTALL. Return value 3.

At the tail-end of the CLIENT.MSI log file:

MSI (s) (1C:0C) [10:10:37:328]: Note: 1: 1708
MSI (s) (1C:0C) [10:10:37:328]: Product: Configuration Manager Client -- Installation operation failed.

MSI (s) (1C:0C) [10:10:37:390]: Cleaning up uninstalled install packages, if any exist
MSI (s) (1C:0C) [10:10:37:390]: MainEngineThread is returning 1603
MSI (s) (1C:54) [10:10:37:500]: Destroying RemoteAPI object.
MSI (s) (1C:D0) [10:10:37:500]: Custom Action Manager thread ending.
=== Logging stopped: 20-08-2008 10:10:37 ===
MSI (c) (1C:20) [10:10:37:500]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (1C:20) [10:10:37:500]: MainEngineThread is returning 1603
=== Verbose logging stopped: 20-08-2008 10:10:37 ===

CCMSETUP log file drops out at the following section: SmsSetClientConfigInit

MSI: Action 13:55:32: SmsSetClientConfigInit. Setting SMS configuration ccmsetup
MSI: Setup failed due to unexpected circumstances
The error code is 80004005 ccmsetup
Installation failed with error code 1603 ccmsetup

It's a classic mistake, easily overlooked.

CCMSETUP should be saying "Command line parameters for CCMSETUP incorrectly specified, unknown parameter SMSMP identified", but it doesn't as you can see above

ConfigMgr 2007 and Windows Server 2008

Rob — Tue, 12 Aug 2008 10:08:00 GMT

I've recently spent a fair bit of time working on ConfigMgr R2 residing upon Windows Server 2008. There are a few issues in there that you'll need to become aware of, but it's not that difficult to get underway.

I was going to write up a good article on this one, but it seems I was literally only a few days ahead of some of the other posters out there, for example the Deployment Guys have a good posting on the subject.

Keep an eye on this procedure, don't follow these instructions to the letter, it's not a work sheet\tick list. You DON'T need to install the Domain Controller role on the Windows Server 2008 target server (the guy does state this is only a prereq for his lab!!!!)

http://blogs.technet.com/deploymentguys/archive/2008/08/07/how-to-setup-configmgr-2007-on-windows-server-2008.aspx

Anyways I thought I'd link up to that posting rather than put up my own (I know, such a lazy cheater I am!!!!)

All I'd add is to be mindful of being in Native mode, and requesting the certificates from a Windows 2003 Root CA (or subordinate) from Windows 2008. There is a two-step shuffle work-around required, firstly a patch to modify the Web enrolment website files on the CA itself to support Vista\Server 2008, and then once you've retrieved the certificate the steps for moving the certificate+keys from the User store to the Computer store.

Firstly, the Server 2008 to Server 2003 CA issue is discussed here (Along with a side-issue on V3 PKI certificates not being supported on ConfigMgr 2007, always handy to know this stuff even if it's not applicable now)

http://blogs.technet.com/wemd_ua_-_sms_writing_team/archive/2008/06/30/having-problems-deploying-the-certificates-for-native-mode-with-a-windows-server-2008-ca.aspx

And the second step is required because the web enrolment ActiveX component cannot reach the Computer Store (Server 2008, change in security architechure for Iexplore) and thus the certificate+key is stored in the User's certificate store instead. No good for ConfigMGr, so the steps to move the certificates are covered off here, but keep in mind the certificate template MUST have "export keys" ticked before you issue the certificate for this to work:

http://support.microsoft.com/kb/939616

Rushed I am, new task master I have. But I will try to squeeze more time out to review this posting, see what i've missed, answer any comments et al.

Enjoy,

ConfigMgr Visio stencils

Rob — Wed, 06 Aug 2008 12:45:00 GMT

Rod Trent over at myITforum posted a link to a download that contains Visio stencils and an example diagram ... had to link this here, as it's VERY HANDY!

http://myitforum.com/cs2/files/folders/configmgr/entry120945.aspx

Thanks Rod,

NxtGenUG Silverlight Manic Miner

Rob — Mon, 04 Aug 2008 09:57:00 GMT

The NxtGen User group put together Manic Miner running on Silverlight!

Check it out, classic retro graming at it's finest!

http://www.nxtgenug.net/ManicMiner

VMWare countering?

Rob — Wed, 23 Jul 2008 14:25:00 GMT

Article up on The Register about VMWare

http://www.theregister.co.uk/2008/07/23/vmware_q2_2008_earnings/

Cut through all the fancy figures, and diatribe and you get to what I think is the tucked away jewel in this story (for VMWare) ... ESXi (the light-weight version) will be free at the next release. And, what's the odds that the ESXi light-weight version will compare feature for feature with Hyper-V? Be interesting to see.

Is the Microsofts hype machine going to loose it's edge now? Not sure, but I'm sure going forward, if there is anything unique in Hyper-V per say, it will be lifted and placed in to VMWare's products. And rightly so I say, as Microsoft have blatantly done this with their offerings (SCVVM, Hyper-V).

It's funny how aggresively Microsoft are trying to take market share from VMWare, nothing subtle about it at all. Isn't it interesting times, now that (it would seem?) Microsofts only gambit and USP for Hyper-V has just gone flying out the window?

Right now, in my mind the only value-add from Hyper-V is:

Microsoft Support
Operations Manager 2007 to monitor the Hyper-V host\infrastructure

Those two points alone are enough for a lot of Microsoft shops to start winding down their VMWare usage, and begin implementing Hyper-V.

Of course, i'm not the most informed VMWare\Hyper-V guy around, but, unlike a lot of people shouting the value of Hyper-V i've actually tinkered with ESX and Virtual Center first-hand. And, I was taken aback by the performance and functionality of these two products all that time ago. Even now ESX cannot be touched functionality\performance-wise, no matter how many reports come out of Gartner or Microsoft saying otherwise. So, I guess i'm less receptive to the woooo-factor Hyper-V is bringing on amongst those that haven't had a chance to toy around with the competitors product range. Perhaps i'm jaded slightly, by something that isn't really new, that's been done in the mainframe world way before most of you reading this article were born, and was only really properlly propelled along by VMWare in to non-Unix\VMS\AS400 environments.

So, ESXi for free ... maybe that's going to dent the impact Hyper-V will make in the target market. Guess we have to wait and see!

Now saying all of this ... i'm using Hyper-V now at work on a tricked out server, and it's running like the clappers (old english term!). At home I'm planning on specc'ing up a server to host Hyper-V, so that I can do away with that nightmare, Virtual Server 2005 R2 and get off VMWare so that my VM's are compatible with the stuff I do in the Microsoft world (demo's, presentations et al).

Anyone with a a heady track history in Virtual technologies would have a far better take on all the pie throwing taking place between VMWare and Microsoft right now. Be good to read an unbiased apples for apples kind of review of ESX\Virtual Center and Hyper-V. Anyone find one, comment in here as I'd love to read it.

Feel free to comment, flame me, troll me over and spit me out, point out my lack of knowledge, off-center observations, stupidity, fact that i'm blonde, anything, be interesting to hear what others think about this!

Configuration Manager 2007 - Native Mode - IBCM support

Rob — Mon, 21 Jul 2008 11:40:00 GMT

Guys,

Looking to share knowledge with anyone that has implemented IBCM for Configuration Manager 2007. Get in touch if you want to bounce ideas around and learn from each other (yes you guessed, initially i'm looking for someone that has been through the pain barrier so I can glean some tips, as well as share what I find that's not documented). I'll post links to sutff I find on the subject in the ConfigMgr IBCM group.

I'll create a group on the WMUG website, the threaded chat, blog and Media available using a group shoudl help us share :>

Looking for a UK based ConfigMgr admin

Rob — Mon, 21 Jul 2008 11:32:00 GMT

Isn't it funny, as that saying goes, you wait around for a bus and three come along at once. Well I've not been waiting for a bus, instead I've been waiting around for some exceptional ConfigMgr projects to get stuck in too. I'm taken care of now, but wonder if there are any UK ConfigMgr consultants\contractors out there that are twiddling their thumbs (out of work).

If you or anyone that you may know is a good UK based (south if possible, otherwise you've got a lot of commuting to do!) SMS2003\ConfigMgr2007 engineer, and is available for contract work, then get in touch with me as I'm looking for a good guy to soak up some ConfigMgr work.

If you're interested, you can reach me via the Contact form on my Blog or via:

ROB [AT] WMUG DOT CO DOT UK

WMUG Event on the 15th of July 2008

Rob — Mon, 21 Jul 2008 11:21:00 GMT

I just cannot believe it was only last Tuesday that we had the WMUG meeting take place. The days since just seem to have slide by, with hardly a chance to come up for air and jump on to the WMUG site.

A big thank you to all that attended. A good time was had by all it seems, with great feedback on what you want to do at these events. We had (for us) an amazing turn out of over 14 people, mostly OpMgr folk i'm afraid, so my OSD demo fell on the wrong crowd :<

We're all looking forward to the next meeting, and we're listening to you all and will try to get a vendor in, as well as organise one of you to attend and speak at the event. Soon we'll be hosting some polls to divine what technologies within the System Center product family you want to see, and we'll try to manage it so that we highlight and make available features of a specific product (OSD, IBCM, DCM et al) for you all to vote on. So essentially your votes will decide what we'll be doing at the next event!

Another thank you to Ed Alrdich, who was in the UK for a week, for dropping in and mingling.

Thanks again! And looking forward to seeing you at the next event.

Rob

Configuration Manager 2007 SDK (V4.0) - Part 2

Rob — Sun, 29 Jun 2008 22:04:00 GMT

Doh, had to correct a URL in my previous post

The Configuration Manager 2007 SDK link on http://www.microsoft.com/smserver/default.mspx is still pointing at an invalid address ... pinged customer services to let them know, but doubt i'm the first ;-)

Configuration Manager 2007 SDK (V4.0)

Rob — Sun, 29 Jun 2008 20:33:00 GMT

I noticed that the Configuration Manager SDK link that is shown on www.microsoft.com/smserver is turning up a page not found, it points to http://mscompub/dmt/dialogs/preview/preview.aspx?d=preview&user=deniselr&familyid=064a995f-ef13-4200-81ad-e3af6218edcc&languageid=f49e8428-7071-4979-8a67-3cffcb0c2524 .... which is obviously an invalid URL for us net users

Must be a publishing burp, so here's a working link: System Center Configuration Manager 2007 Software Development Kit (SDK) v4.0 (http://www.microsoft.com/downloads/details.aspx?familyid=064a995f-ef13-4200-81ad-e3af6218edcc&displaylang=en&tm)

And if you're interested in the SDK, and like to use forums, here's a link to the Configuration Manager 2007 SDK Technet Forum, plus here's a link to the Configuration Manager 2007 documentation library

Also, the Configuration Manager 2007 SP1 and R2 Beta is available on Microsoft Connect