.:: (MVP) Raphael ::. : tip, systemcenter

MMS 2012...I'm not there

Raphael — Mon, 16 Apr 2012 13:21:00 GMT

Hi all,

even I'm not physically at the MMS 2012, I'll be remembered by one of my fellow friends MVP Kent Agerlund.

This is because he will be using a script i've created in the past to clean up Expired updates from a software update (package and/or deployment)

If you're interested in this script..you can download from my site, but only after Kent's presentation where he'll also share the link.

i'm sure you're now interested in Kent's presentation...

CD-B351 Configuration Manager 2007 R3: Review and Simplify Your Deployments
Join Kent Agerlund and Chris Nackers, two of the world’s foremost Configuration Manager experts in a dazzling session on how to get your existing Configuration Manager 2007 to work with you and be the super cool system management solution you always hoped it would be.

[Troubleshooting] Error installing KB977384

Raphael — Mon, 16 Apr 2012 05:52:00 GMT

Hi All,

i've got a problem installing KB977384 on a client long time ago, but only now had time to blog about it.

Basically, when trying to install KB977384, it was failing.

Looking at the logs, i found the following log lines:

MSI (c) (F4:08) [12:31:58:138]: Windows Installer installed the product. Product Name: Software Update for ConfigMgr 2007 SP2 (KB977384). Product Version: 4.0.6487.2157. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 1603.

it didn't give me much to work, but looking on the log, i found:

[12:39:10] Stop Service tmlisten
[12:31:50] Start tmlisten timer out, status is 4

but what's this service?

used sc qc <service name> and discovered that is was: OfficeScan NT Listener.

Stopped the AV and everything worked :)

SCCM 2012 Knowledge base

Raphael — Thu, 12 Apr 2012 14:58:00 GMT

Hi All,

do you know what to do when there is a problem with SCCM 2012?

The main link i'd say to you is the RSS Knowledge base.

Until now, there are over 20 published KB's and i'm sure this number will grow.

Add it to your favorite rss reader

http://Support.microsoft.com/common/rss.aspx?rssid=1060&ln=en-us

SMP USMT Password

Raphael — Tue, 27 Mar 2012 19:52:00 GMT

Hi All,

i've worked in a project where I needed to set a password for the USMT file (.mig) when using SMP.

Unfortunately, this is impossible as the password is generated automatically and it is stored in the computer association. using the console, you can get this info...however...

in my scenario, we kept the MIG file for a few of days on the server (7 days) and needed to keep the password in a encrypted text file only in case of we needed to recover any file from the MIG file after it has been deleted from the SMP (of couse, we have a backup of the folder :))

based on this, i've created a powershell script (Yes, powershell...my 1st real powershell script)

a small version of the powershell can is bellow (remember to change the site code)

$SourceComputer = "WIN7TEST78"

$DestinationComputer = "WIN7TEST78"

$SourceQuery = "Select ResourceID From SMS_R_System WHERE Active = 1 and Obsolete = 0 and NetbiosName = '" + $SourceComputer + "'"

$DestinationQuery = "Select ResourceID From SMS_R_System WHERE Active = 1 and Obsolete = 0 and NetbiosName = '" + $DestinationComputer + "'"

$SourceID = Get-WmiObject -Namespace "root\SMS\Site_<SITECODE>" -Query $SourceQuery

$DestinationID = Get-WmiObject -Namespace "root\SMS\Site_<SITECODE>" -Query $DestinationQuery

$Query = "select * from SMS_StateMigration where SourceClientResourceID=" + $SourceID.ResourceID + " and RestoreClientResourceID=" + $DestinationID.ResourceID

$pStateMigration = Get-WmiObject -Namespace "root\SMS\Site_LOR" -Query $Query

Foreach($USMTPassword in $pStateMigration) {

$key = $USMTPassword.GetEncryptDecryptKey()

write-host "Source Computer = " $SourceComputer

write-host "Destination Computer = " $DestinationComputer

write-host "Encryption Password = " $key.key

}

as you can see, I'm not good with powershell, i think i'm still an OLD SCHOOL person that loves vbscript :)

ConfigMgr 2012 Primary (Child) Site Installation

Raphael — Fri, 17 Feb 2012 17:50:00 GMT

Hi All,

just a quick blog post...

in the past few days i've been trying to install a primary site (child site) and always failing :(...after a lot of troubleshooting (and help from Microsoft), we discovered what was going on..

1st, let me tell you how i set my lab environment.

1 DC
1 SQL (3 instances, remember that you must use static port on each instance)
1 CAS
1 Primary

After the installation of the CAS using the default settings and using the SQL\INSTANCE01, i started to install the primary using the SQL\INSTANCE02, however, it didn't finish properly...

i tried many times and discovered the following:
The SSB port must be unique (it seens obvious, but when you next->next you don't change it)...

Note that there are post-setup process, as the setup didn't finish with all green checks. This is due a replication and other things. and when this happen, the site will be in read-only mode and a message will be displayed everytime you open the console on the primary site. on my end, it took few hours and depending on the size of your database and networking, it may take longer.

From the documentation, you get:

You Can Finish the Setup Wizard and Open the Configuration Manager Console Before Setup Is Completed

Setup is logically separated into two parts: the core setup and monitoring. After the core setup is complete, the site server continues to be configured in the background while Setup monitors the status of those background tasks. On the Setup Action Status Monitoring page of the Setup Wizard, a list of actions that Setup has to complete and the status of each action are displayed. However, the Next button is enabled before the Setup program finishes, which lets you complete the Setup Wizard and open the Configuration Manager console for a site that is still being configured. This could potentially cause data loss or other unexpected behavior if you make changes on a new primary site before the configuration is completed.

WORKAROUND Before you connect to a new primary site and make changes in the Configuration Manager console, verify that all actions listed on the Setup Action Status Monitoring page are successfully completed. If you close the Setup Wizard, click Monitoring in the Configuration Manager console, click Database Replication, and then verify that database replication is completed for the site. Do not make any changes on the primary site until database replication has completed successfully.

that's it for this...

[Tip] Excluding OU from Discovery

Raphael — Sun, 17 Oct 2010 12:17:00 GMT

Hi All,

i've been asked by a customer how to exclude 1 OU from System Discovery.

When he asked me, I said, it's easy, you only need deny read to that OU to the site server, however, it wasn't that simple as they are using specific permission instead.

If you read the documentation, you'll find: To run Active Directory Discovery, the Active Directory domain can be in any Active Directory mode, and the site server computer account must have Read access to the specified Active Directory containers.

To play a bit, I set my lab as following:

And set deny "read all properties" to "BranchOffice - 003" and apply onto I've selected "this object and all child objects". It didn't work.

I got upset and selected deny "full control" and tried again. it didn't work as well. I spoke with other MVP's and Torsten Meringer (http://www.mssccmfaq.de/) gave me a hint and I went check. The problem was, then I selected deny "full control" it changed the apply onto to "this object only".

After playing a bit more, I found the solution I was looking for. To deny it, I had to deny "list contents" to that OU and all child objects