.:: (MVP) Raphael ::. : tool, sccm

[Project] - CM12 Automation RC is out!

Raphael — Thu, 10 Jan 2013 13:19:38 GMT

Hi All,

i've been busy working on the RC release of CM12Automation (http://cm12automation.codeplex.com/) and today i'm happy to say that it has been released...

the codeplex page is being updated and also, i'm uploading videos on youtube. I'll update this page once everyting is there...

hope you'll enjoy using it as much as i'm enjoying creating it.

[Project] - CM12 Automation - RC is coming

Raphael — Tue, 11 Dec 2012 11:45:07 GMT

Hi All,

This project is really going somewhere, i received lots of inputs, including lots of Microsoft people, what is really great...

Anyway..i'm finishing the RC version (final testings) and i hope i'll be able to publish it before christmas...

at the moment, these are the main changes:
1- fixed bugs (many of them)
2- created ImportReports.ps1 and created few reports (at the moment 8 reports) **if you have any report that you'd like to see, let me know
3- Removed the folder structure from the installation and created CreateProjectStructure.ps1 file and changed it
4- Changed sql folder data/logs location and memory calculation (now it also sets the mim memory)
5- BuildMedia has been upgraded
6- created universion group for exchange connector
7- added system health validator installation point, creation of IP range for the DP ip address

i'll keep you posted, but if you want to download the beta version, go to http://cm12automation.codeplex.com/

Which one is the right method to deploy apps during OS Deployment?

Raphael — Thu, 18 Oct 2012 13:35:53 GMT

Hi All,

Many times I’m asked: How should I deploy this app: Add it to the base image, during the OS Deployment (as application) or after (sw deployment via computer collections/user)

This is a trick question and my answer is always couple of questions:

1- Size of the application
2- How often it changes?
3- who uses it?
4- How often you rebuild your base image?

Anyway…as you now have an idea, let’s get the office application but let’s ask the following questions:

1- Which deployment method will use less bandwidth?
2- Which deployment method will be faster?

To answer your questions, I created 2 base images, 1 with office and another without office. The size of the base image with office is 4.03GB (4,226,404KB) and without office is 2.82GB (2,966,625KB)

Now, time of the tests:
1- Deploy OS (Windows 8) via TS and Deploy Office via Software Distribution
Result: 27 minutes, 29 seconds and used 3.93GB

2- Deploy OS (Windows 8) and Office via TS (Office is deployed as application and not part of the base image)

Result: 24 minutes, 30 seconds and used 3.93GB

3- Deploy OS (Windows 8) and Office via TS (Office is part of the base image).

Result: 27 minutes, 01 seconds and used 4.36GB

As you can see, method 2 seems to be the fastest and used less bandwidth and the method 3 is using a lot more network badwidth

Now, let’s imagine couple of applications:
1- Office: Office is a large application and, often, you deploy it to all computers (except servers). The application doesn’t change often (and you can use software updates to deploy any update). For service packs, it is released once every few months. In my opinion it is a good example of application that you could add to the base image
2- Flash: Small application, change almost every week, everyone uses. It is not a good example, this is because every time you deploy the software, you need to update it. And updating flash is not only adding couple of registry changes/file changes, it is a complete new set of files (well, flash has only couple of files anyway)
3- Line of business app: App that is deployed to a few people only, maybe changes maybe not. This is an app that I normally do not put on the base, except if you want to manage couple of base images
4- Anti-virus: I normally against putting the AV into the base image, this is because it changes a lot and I prefer have no anti-virus instead of having an anti-virus that does not do anything…but this is my opinion

My recommendations:
1- Put in the base image only applications that doesn’t change or change only couple of times per year
2- Put only large applications. Applications with less than 100MB I do not see the point (my opinion)
3- Do not add AV to the base image (my opinion)
4- Update your base image couple of times per year to add the latest updates to it and same time when performing the OS Deployment…

But why would I add any software on my base image if it is slower and use more data and I’ll need to recreate the base image couple of times a year?!?!?!?!

Before I answer that, you need be aware that there is no network issue on my lab and there is no user intervention, it means, everything works as expected.

As I only used 1 application, imagine that you need add more applications…you may have many reboots, it is more data, etc…

Now, answer your question: You need to test in your environment with your applications to discover which method will be faster and use less bandwidth and only after this you’ll be able to perform the right choice.

Monitoring Bandwidth Transfer

Raphael — Tue, 16 Oct 2012 12:22:45 GMT

Hi All,

i'm doing some tests and i'd like to monitor the network bandwidth to confirm the amount of data transfered from the server to the client (and vice versa) during many actions, like OS Deployment, SW Deployment, etc...

i was looking over the net (and asked help from MVP friends), but unfortunatelly, all solutions i had was not as easy as i wanted...until the NetWorx (http://www.softperfect.com/products/networx/) this is a free and simple Bandwidth Monitoring and Usage Reporting.

note: I installed it on my on my lab because i only have 1 DC, 1 SCCM Server and 1 client, nothing else to interfere as it doesnt have a way to filter the source/destination

anyway...as soon as you dowload it, it is time to install and configure. I installed it on my SCCM Server..and it is really easy, almost next, next finish.. :)

Now it was time to start the software (if it is not started already), easy, go to start menu, Programs, NetWorx and start the NetWorx...

On the task bar (notification icons), you'll see a new icon there, just right click and select speet meter

on the speed meter, you have 2 main buttons (start and reset) as well as a timer..

on my lab, i started it and swtiched on a "blank" vm to perform the PXE boot and stopped when it downloaded all pxe stuff and was on the PXE Main screen (that one we're you can type the password)

as you can see, it took 01 minute and 57 seconds and used 215MB (8.84 Received and 207 sent). Remember, as i cannot filter, this values also contain a bit of network from/to Domain controller

[Project] - CM12 Automation - beta release

Raphael — Fri, 05 Oct 2012 12:00:22 GMT

Hi All,

today i'm proud to announce the release of the CM12 Automation beta...

The download can be found at http://cm12automation.codeplex.com/releases/view/95777

and for more information on how to use it, look at this post: http://wmug.co.uk/wmug/b/dotraphael/archive/2012/09/28/project-cm12-automation-beta-is-coming.aspx

[Project] - CM12 Automation - beta is coming

Raphael — Fri, 28 Sep 2012 10:32:47 GMT

Hi All,

I'm really loving doing this project..and it is almost in a beta stage...there are lots of things to do still and i'd love your imput, even for bugs..(send it to me to raphael AT rflsystems.co.uk)

Anyway...the webpage of the project is http://cm12automation.codeplex.com/ and the beta files will be there soon ((i'm finishing lots of tests)

the 1st powershell script you need to know is the BuildMediaFolder.ps1

as the name says, it will build a folder with all files you need to have...there are files it will download from the internet (if you say to download) or copy from a folder (that you'll tell the folder) and other files (ie ConfigMgr 2012 SP1, SQL Server 2008 R2 RTM) that it cannot download from the next and expect you to have somewhere

if you use proxy authentication, dont worry..it will ask your username/password to connect to the net as well :)

the 2nd script is PrepareActiveDirectory.ps1

as the name says, it will prepare the active directory, create OU's, computer accounts for the SCCM Servers (if it does not exist), groups, etc..and depending on the option you selected, it will perform the schema extensions...

yes, if you have a single domain you'll need run this twice, but if you're not the guy with rights to perform the extension, you can give them the file

the 3rd script is Prerequisites.ps1

this will install all requirements for the site, sql, etc...you can use it in 1 machine or in multiple machines, like, installing the DP/MP on a remote machine, you don't need to select this option on the site server...

as part of the process, it will install the minimum requirement for the role that you'll use...

things it will do:
install and configure CMTrace
Create c:\NO_SMS_ON_Drive .sms
Create d:\NO_SMS_ON_Drive .sms (if needed, basically, if you install a site)
create sql server firewall extensions
disable firewall
add the sccm servers group and sccm admins group as local admin
install .NET Framework 4
install IIS, bits, etc..
install sql 2008 r2 + sp2 or sql express
configure the number of sql files and max memory
if you're preparing for sql server reporting services, it will also configure the execution account and backup the encryption key
install wsus 3.0 sp2 and hotfixes
install ADK
install configmgr toolkit
install powershell 3

the 4th script is the InstallSCCMSite.ps1...

this is the main script as it will install the site, it will ask questions about the site, like, type (Central, Primary Std, Primary Child), sdk server, etc...

what i like most of this are:
1- install and integrate MDT
2- validate the installation (of course, basic validation)
3- automatically add the group you create to a full admin
4- change the logs size to 10MB (yes, it may be too much, but i'm using it on my lab)
5- enable tasks "Rebuild Indexes and Backup SMS Site Server"
6- enable tasks "Delete obsolete client discovery data", "delete inactive client discovery data"
7- disable task "evaluate provisioned AMT computer certificates"
8- automatically add a client push and network access account
9- create cm12 desktop icon and configure the launch of sql reporting builder 3
10- configure the database initial size and number of files
11- create boundary and boundary group
12- enable discovery(***)
13- create device and user folders and collections
14- extend hw inventory to collect extra data (used by the script), create a client settings to collect this extra data and also deploy to the sccm collections created

and the 5th script is SiteRolesInstallation.ps1
this will install all site roles that you want, but at the moment, it only install:
1- cm12 console (i know, it is not a site server :))
2- asset intelligence sync point
3- fallback
4- management point
5- dp (and also create a dpgroup)
6- smp
7- sup
8- application catalog website and webservice point
9- endpoint protection (and create ADR)

few points:
1- script expect to find at least 2 partitions and in many cases 3 (ie c, d and e)
2- all logs are in cmtrace format :):):)
3- ***there is a bug with the discovery, try avoiding using it if possible
4- Creating Secondary site may happen later
5- script only install if needed (ie: it will not install IIS if you don't select anything that uses IIS)
6- you can either run the script without parameters and it will ask you question or you can pass parameters and it will do almost everything in a automated way...

hope you're as excited as me about this project

[Script] InjectOEMInformation.ps1

Raphael — Wed, 05 Sep 2012 13:16:33 GMT

Hi All,

i've been asked by a friend to help him personalize the Windows 7/8 computer properties to add few information about the company, helpdesk and a company logo...

what we wanted is basically add the custom information like the OEM normally do...

as they are "migrating*" from SMS 2003 (with Windows XP) to SCCM 2007 SP1** to deploy Windows Windows 8, i decided to test it with powershell, and it worked :)

To perform this, you need follow these steps:
1- download the script i created from here
when you extract the file, you can create a bmp file (size 120x120). if you don't want, you can delete the bmp i created

2- Create a Package and distribute it to a DP or DP Group

3- Add powershell to the boot images (both, x64 and x86)

4- Edit your task sequence
the command line i'm using is: powershell.exe -ExecutionPolicy Bypass .\InjectOEMInformation.ps1 -Manufacturer 'RFL Systems Ltd' -model 'Windows 7 x64 Image v1.2' -SupportHours '09:00 to 17:00' -SupportPhone 'x1234' -SupportURL 'support.rflsystems.co.uk'
I really think i do not need explain the command line :)

5- when you deploy, you should see the chanes

*There is no migration path from SMS 2003 to SCCM 2012, they are basically creating it from scratch
**SCCM 2007 SP1 is not out yet and the only available version is CTP1, they are actually testing it in a lab environment

[Project] - CM12 Automation

Raphael — Fri, 31 Aug 2012 18:27:58 GMT

Hi All,

I created a project on codeplex called cm12 automation.

The goal is to automate (using powershell) all CM12 basic tasks...

at this moment, there are few scripts:
0- Functions.ps1
- used by the other scripts

1- prepareActiveDirectory.ps1
- this scripts create ad containers, groups, users and extend schema

2- prerequisites.ps1
- this install all requirements needed for the site server and site roles (ie. sql, iis, etc)

3- InstallSCCMSite.ps1
- this install cm12 (Sp1 ctp at the moment) with basic settings and validate its installation. it does not install MP or DP. You can use to install CAS, Primary Child or primary std

there are updates to allow install site servers like management point, fallback status point, etc...

the project is published here http://cm12automation.codeplex.com/

Building your java app for test

Raphael — Fri, 24 Aug 2012 08:11:17 GMT

Hi All,

this is part of my app for test series..i'm doing this only because later on, when CM12 SP1 will be beta/rtm, we'll start using it to deploy for our lab...

my goal is to have java applications with Appv and metro apps (windows 8)...the last post i created the metro app and now, i'll be creating the java app...

this is really basic and i won't show you how to write any code...

the steps i did were:
Download java 7 up 6 from java site
Copy the java code from http://www.roseindia.net/java/example/java/awt/dataentry-frame-in-java.shtml
open a command prompt and type the following commands:

Javac DataEntry.java

echo Main-Class: DataEntry >manifest.txt

jar cvfm DataEntry.jar manifest.txt DataEntry*.class

java -jar DataEntry.jar

Now its done..you have your java app ready :)

[Project] ConfigMgrRegistrationRequest

Raphael — Tue, 22 May 2012 14:01:00 GMT

Hi All,

i just published this project on CodePlex (https://configmgrregistratio.codeplex.com/). It is still in pre-beta, but worth to check it out.

Basically, this project will allow you to create Fake Clients, ideal when you need test load, reports, etc...

when you run the tool (as a local Administrator), it will
-          Open a csv file and send request to register a new client to sccm
-          Send a update client id to sccm
-          Request policy
-          Send a ddr message
-          Send hinv

To run: ConfigMgrRegistrationRequest /MPName:<MP Name/IPAddress> /FileName:"<CSV File>" /debug:true

Note that there is a file called HINVTemplate.xml with the HINV information template

the code ignores the 1^st line on the csv file as it is only information

SMSGUID

Computer Name

Domain (FQDN)

Domain (Netbios)

AD Site Name

ConfigMgr Site Code

Mac Address

IPAddress

IPSubnet

Windows OS Version

ConfigMgr Client Version

Memory

When you run, it will create certificates to communicate with the ConfigMgr infrastructure and it will save on the local machine store as following

and if everything works fine, the CM console will look like:

and the resource explorer:

[script] DeleteExpiredUpdates

Raphael — Thu, 19 Apr 2012 08:45:00 GMT

Hi All,

This script is intended to remove all expired updates from a package or Deployment and was showed by the MVP Kent Agerlund on his presentation at MMS 2012.

If you'd like to try (at your own risk), you can download it from here (just remember to change the .txt to .vbs)

Examples:
cscript.exe DeleteExpiredUpdates.vbs /SMSProvider:CM01 /PkgID:"A010000E"
cscript.exe DeleteExpiredUpdates.vbs /SMSProvider:CM01 /AssignmentID:"1;2;3;4;5;6;7;8;9"
cscript.exe DeleteExpiredUpdates.vbs /SMSProvider:CM01 /PkgID:"A010000E" /AssignmentID:"1;2;3;4;5;6;7;8;9"

20-March-2013

Updated Link

SMP USMT Password

Raphael — Tue, 27 Mar 2012 19:52:00 GMT

Hi All,

i've worked in a project where I needed to set a password for the USMT file (.mig) when using SMP.

Unfortunately, this is impossible as the password is generated automatically and it is stored in the computer association. using the console, you can get this info...however...

in my scenario, we kept the MIG file for a few of days on the server (7 days) and needed to keep the password in a encrypted text file only in case of we needed to recover any file from the MIG file after it has been deleted from the SMP (of couse, we have a backup of the folder :))

based on this, i've created a powershell script (Yes, powershell...my 1st real powershell script)

a small version of the powershell can is bellow (remember to change the site code)

$SourceComputer = "WIN7TEST78"

$DestinationComputer = "WIN7TEST78"

$SourceQuery = "Select ResourceID From SMS_R_System WHERE Active = 1 and Obsolete = 0 and NetbiosName = '" + $SourceComputer + "'"

$DestinationQuery = "Select ResourceID From SMS_R_System WHERE Active = 1 and Obsolete = 0 and NetbiosName = '" + $DestinationComputer + "'"

$SourceID = Get-WmiObject -Namespace "root\SMS\Site_<SITECODE>" -Query $SourceQuery

$DestinationID = Get-WmiObject -Namespace "root\SMS\Site_<SITECODE>" -Query $DestinationQuery

$Query = "select * from SMS_StateMigration where SourceClientResourceID=" + $SourceID.ResourceID + " and RestoreClientResourceID=" + $DestinationID.ResourceID

$pStateMigration = Get-WmiObject -Namespace "root\SMS\Site_LOR" -Query $Query

Foreach($USMTPassword in $pStateMigration) {

$key = $USMTPassword.GetEncryptDecryptKey()

write-host "Source Computer = " $SourceComputer

write-host "Destination Computer = " $DestinationComputer

write-host "Encryption Password = " $key.key

}

as you can see, I'm not good with powershell, i think i'm still an OLD SCHOOL person that loves vbscript :)

[Promotion] SCCM HealthCheck Toolkit as Christimas Gift

Raphael — Sun, 27 Nov 2011 16:00:00 GMT

Hi All,

Christmas is coming and nothing better to get some gifts. To thank you all that follow us, we'll draw to all that follow us on Twitter a copy of SCCM HealthCheck Toolkit (http://bit.ly/uA77HW)

The participation is easy: You need to follow @dotraphael and @CleberFMarques and post the following message on Twitter:

I follow @dotraphael and @CleberFMarques and I want a copy of the SCCM HealthCheck Toolkit - http://bit.ly/uUiCR6 #SysCtr #CanalSC

The draw will happen on 24 of december and all people that follow both of us on twitter and have posted the above message will be entering on the draw.

Good luck to all!

SCCM HealthCheck toolkit

Raphael — Fri, 01 Jul 2011 13:11:00 GMT

Hi All,

I know that it's been a while since my last post, but time is flying for me.

This is a quick post, only to tell you that I just released a beta version of my SCCM HealthCheck toolkit.

More information, download and example of the output, check out at http://www.dotnetwork.com.br/sccmhealthcheck.asp