Software Update Cleanup in System Center 2012 Configuration Manager

If you need some understanding on how software updates and cleaning up expired or superseeded updates works in System Center 2012 Configuration Manager – SCCM 2012, i can recommend this great little article that describes the automatic progress that runs in the background and also shows you the manuelt steps that can be done to remove old updates no longer needed.

http://blogs.technet.com/b/configmgrteam/archive/2012/04/12/software-update-content-cleanup-in-system-center-2012-configuration-manager.aspx

Best Regards

/Mads

Updating #FEP or #SCEP definitions gives error 0x80248014 – small fix required when using Windows Update as source

If you update Forefront Endpoint Protection from the agent shown below, it will sometime not update its definitions from Microsoft Update unless you have allowed the OS to receive updates from other products than Microsoft.

SCEPGUI

If you encounter something like the error code 0x80248014 below when updating FEP – Forefront Endpoint Protection or SCEP – System Center Endpoint Protection definitions, you need to make a small adjustment.

Microsoft Antimalware has encountered an error trying to update signatures.
New Signature Version:
Previous Signature Version: 1.173.226.0
Update Source: Microsoft Update Server
Update Stage: Search
Source Path: http://www.microsoft.com
Signature Type: AntiVirus
Update Type: Full
User: NT AUTHORITY\SYSTEM
Current Engine Version:
Previous Engine Version: 1.1.10502.0
Error code: 0x80248014
Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

Forefront Endpoint Protection cannot get Definition updates from Microsoft Update unless you check this box “Give me updates for other Microsoft Products when I update Windows”:

Image

 

If SCCM 2012 show this Antimalware Policy configuration, the “Updates distributed from Microsoft Update” will not work until you have checked the box.

Image

You can use a VB script to change it:

Save the text below in a file with a VBS extension.

Set ServiceManager = CreateObject(“Microsoft.Update.ServiceManager”)
ServiceManager.ClientApplicationID = “My App”
‘add the Microsoft Update Service, GUID
Set NewUpdateService = ServiceManager.AddService2(“7971f918-a847-4430-9279-4a52d1efe18d”,7,””)

Run the below command in an elevated command prompt: cscript optinMU.vbs

 

The reverse step is also possible with a simple alteration:

Set ServiceManager = CreateObject(“Microsoft.Update.ServiceManager”)
ServiceManager.ClientApplicationID = “My App”
‘remove the Microsoft Update Service by GUID
ServiceManager.RemoveService(“7971f918-a847-4430-9279-4a52d1efe18d”)

Source: http://support.microsoft.com/kb/2832355

Windows Intune & Configuration Manager – Free Trail Getting Started Guide

There is a way to get started with Windows Intune and Configuration Manager without creating a paid Microsoft Developer Account and buying a Symantec Certificat.

If you would like to try out Windows Intune with Configuration Manager 2012 R2 for Windows Phone 8, Android, IOS and Windows 8 PC’s for 30 days, this is what you will need.

Intune subscription and configuration login: http://account.manage.microsoft.com

Intune configuration login: http://manage.microsoft.com

If you would like to change the PoC to a production environment, you will allso need these:

If you would like to install your own Microsoft Store apps on Windows 8 or 8.1 without showing them to the public inside the store, and making the installation forced, this can be done by the term “Sideloading”.

You would need to look into Sideloading Keys HERE and HERE

 

The Windows Intune Team have written a blog regarding the Support Tool for Windows Intune Trail Management of Windows Phone 8 HERE

Solution – Error: Service health log: WP appStoreURI is missing for account 73dab792-979c-40be-947b-b7c8040e725b and userId

Solution – Error: We weren’t able to set up this company account on your phone

Changing Mobile Device Management Authority

System Center Tech

Managing mobile devices is possible through the use of Windows Intune in Standalone mode or through ConfigMgr 2012 SP1 or R2, with Intune integrated through the Intune Connector. During the initial configuration process, you have to select a mobile device management authority. When configuring Intune in standalone mode, this is performed through the Intune Admin Console, or in ConfigMgr integrated mode, this is performed through the ConfigMgr Console. Unfortunately, once this has been configured, you can’t switch the management authority through the provided tools, should your requirements change. Luckily there is another option.

View original post 59 more words

Install a Configuration Manager 2012 R2 in a lab – 4. Install SQL Server 2012 SP1 (Powershell)

IT's magic!

I finished my experiment with unattended installation of SQL Server 2012. It was not that complicated I guessed but you cannot say it’s easy. So many setup switches…

What you have to do before starting the script I wrote (it’s at the end of this blog):

  • Copy the content of the SQL installation sources to disk
  • create an folder in this sources which is called “SQLUpdates” (you can name it different)
  • Copy the Service Pack 1 and the Hotfix KB2793634 into the folder created

Following the script/command line I wrote, start from the root of the source files folder:

.setup.exe /ACTION=Install /IACCEPTSQLSERVERLICENSETERMS
/UpdateEnabled=1 /UpdateSource=.SQLUpdates
/features=”SQLEngine” “RS” “SSMS”
/installshareddir=”D:SQL(X64)”
/InstallsharedwowDir=”D:SQL(X86)”
/instancedir=”D:SQL(X64)”
/Instancename=MSSQLSERVER
/q
/AGTSVCACCOUNT=”NT AuthoritySystem”
/INSTALLSQLDATADIR=”D:SQL(X64)”
/SQLBACKUPDIR=”E:MSSQLSERVERBACKUP”
/SQLCOLLATION=SQL_Latin1_General_CP1_CI_AS
/SQLSYSADMINACCOUNTS=”labordomain admins” “laboradministrator”
/SQLSVCACCOUNT=”NT AuthoritySystem”
/SQLTEMPDBDIR=”E:MSSQLSERVERTEMPDB”
/SQLTEMPDBLOGDIR=”E:MSSQLSERVERLOGS”
/SQLUSERDBDIR=”E:MSSQLSERVERUSERDB”
/SQLUSERDBLOGDIR=”E:MSSQLSERVERLogs”
/RSSVCACCOUNT=”NT AUTHORITYSYSTEM”
/INDICATEPROGRESS
/PID=”xxxxx-xxxxx-xxxxx-xxxxx-xxxxx”

Now I explain the different switches I used:

/ACTION=Install –> install SQL
/IACCEPTSQLSERVERLICENSETERMS –> to accept the license terms
/UpdateEnabled=1…

View original post 209 more words

HP Proliant BL460c G8 PXE Boot Black screen SOLVED

When booting into Windows PE with the HP Proliant BL460C G8 server (and maybe many others), it will load WinPE and go into a black screen, nothing can be done.

HPProliantPXEBlackscreen

This is because this server does not support WinPE 5.0 (yet) which Configuration Manager 2012 R2 is using.

To fix this problem use the Boot.wim file from a Windows Server 2012 media, and import this into Configuration Manager by using the Console and right clicking “Boot Images” choosing “import”. (Remember to place it on the Distribution Points allso)

Use this image and the servers can now boot again, the downside is that Configuration Manager 2012 R2 does not give full administration possibilities with the WinPE 4.0 image, so it is not possible to import drivers using the console. But none the less it was not nessesary in my case.

I hope it will help you in your struggle.

Update: HP have supplied the following links for this issue, but i have not tested any of them.

  1. Media Driver is missing
  2. Technical White Paper

How to install SCCM 2012 prerequisites the easy way

Very simple, to install all the required components for an simple, easy and quick installation, start Powershell as administrator and run these commands:

Get-Module servermanager
Install-WindowsFeature Web-Windows-Auth
Install-WindowsFeature Web-ISAPI-Ext
Install-WindowsFeature Web-Metabase
Install-WindowsFeature Web-WMI
Install-WindowsFeature BITS
Install-WindowsFeature RDC
Install-WindowsFeature NET-Framework-Features
Install-WindowsFeature Web-Asp-Net
Install-WindowsFeature Web-Asp-Net45
Install-WindowsFeature NET-HTTP-Activation
Install-WindowsFeature NET-Non-HTTP-Activ

SCCMRequirementsInstallation

 

If you want to install SQL Server 2012 SP1 in a line for you lab, use this as an example:

E:\setup.exe /ACTION=Install /IACCEPTSQLSERVERLICENSETERMS /UpdateEnabled=1 /features=”SQLEngine” “RS” “SSMS” /installshareddir=”C:\Program Files\SQL” /InstallsharedwowDir=”C:\Program Files (x86)\SQL” /instancedir=”C:\Program Files\SQL” /Instancename=MSSQLSERVER /q /AGTSVCACCOUNT=”NT Authority\System” /INSTALLSQLDATADIR=”C:\Program Files\SQL” /SQLBACKUPDIR=”C:\Program Files\SQL\Backup” /SQLCOLLATION=SQL_Latin1_General_CP1_CI_AS /SQLSYSADMINACCOUNTS=”solvoit.com\domain admins” “solvoit.com\ml-admin” /SQLSVCACCOUNT=”NT Authority\System” /SQLTEMPDBDIR=”C:\MSSQLSERVER\TEMPDB” /SQLTEMPDBLOGDIR=”C:\MSSQLSERVER\LOGS” /SQLUSERDBDIR=”C:\MSSQLSERVER\USERDB” /SQLUSERDBLOGDIR=”C:\MSSQLSERVER\Logs” /RSSVCACCOUNT=”NT AUTHORITY\SYSTEM” /INDICATEPROGRESS

You can find all the commands at this site: http://msdn.microsoft.com/en-us/library/ms144259.aspx#roleparameters

Have a nice day 🙂

How to upgrade from Windows 8 to 8.1 in your enterprise

If you are running Windows 8 Pro or some versions below, you can start “STORE” and upgrade to version 8.1 trough here. But in Windows 8.1 Enterprise, you do not have this feature.

Instead: Download the source files for Windows 8.1 that fits your Windows 8 version. Run this  command from the media “setup.exe /auto:upgrade”

This way it is possible to use Configuration Manager to control this upgrade by creating a package with these source files and an installation sequence that has the above commands inside.

You can read this blog for more telling information regarding this feature.

http://windowsdeployments.net/upgrading-to-windows-8-1-in-the-enterprise/

Have a nice day 🙂

How to get drivers for HP Proliant G8 servers into SCCM 2012 R2

If you want to install HP Proliant servers with System Center 2012 (R2), look into the “HP Insight Control for System Center”

Only issue is that current version 7.3.1 only supports System Center 2012 SP1, and Windows Server 2012.

So instead, download the Tool and get hold of the drivers that are build into this ISO file and import them to SCCM 2012 R2.

If you try to install the Tool on SCCM 2012 R2,  you will get this error “CreateBootImagePackage(HP ProLiant Boot Image x64, x64, ) = failed to create wimfile” so decieded to find the drivers instead.

In my situation i needed drivers to do Bare Metal Deployment with Windows Server 2012 R2 on HP Proliant G8 Blades.

The Toolkit can be downloaded here: https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPICE

Documentation can be optained here: http://h17007.www1.hp.com/us/en/enterprise/servers/solutions/info-library/index.aspx?cat=insightmanagement&subcat=icms

When you Mount the ISO you will see these components:

HPInsightFiles

Open “HP SCCM 2012 Integration Kit” and use 7-zip to extract the one hpsccm2012kit-2013.09.0.4.exe file into a folder.

Inside this file you will find a folder called “DRIVERS” – choose your OS and import these drivers to you SCCM 2012 R2 server and choose the ones to import to your Boot Images.

I hope this helps you to find the drivers you need for SCCM 2012 R2 regarding HP Proliant servers.

How to use Powershell Deployment Toolkit – on one laptop

This post is not a step-by-step guide, it is a Collection of informations that i have gathered to make it work for me on one laptop.

Powershell Deployment Toolkit is not perfect, i have experienced a lot of errors, but the latest version 2.5.2509 is better than ever:

The tookit can be downloaded here: http://gallery.technet.microsoft.com/PowerShell-Deployment-f20bb605

Run all scripts in an elevated powershell command promt:

1. Run “Downloader.ps1” to get all required files – will take many hours.

2. Create the two reference OS VHDX files. Server 2012 R2 and Server 2008R2 SP1. All you need is the .ISO file and then follow my other post (EASY!): http://mcloud.info/convert-a-wim-or-iso-file-to-vhdx/

3. Modify the “VariablesAD.XML” with the settings you like, BUT rather move files that change here, the way of success i make as little changes as possible.

4. Change the VariableAD.XML file to Variable.xml and delete the other version.

5. Create the Virtual Switch on your HyperV Manager – Default “CorpNet01” (choose Private, internet access is not required)

6. run “VMCreator.ps1” and it will create all VM’s and push the installation files into the VM’s and the DC01 will be the one to drive the installation, it is save to log in on it when the other VM’s are booting up.

I ran this script on a Dell Pricision M6700 laptop with 32gb og memory and a raid 0 on two SSD drives on Windows 8.1 in a Workgroup. 16gb of memory is pushing it and requires that you pause the VMcreator.ps1 script when it is booting VM’s around half way, so the dynamic memory can drop a bit before resuming the powerhshell script.

So. One laptop, one private (closed) Virtual Network in hyper-v and time.

Troubleshooting PowerShell Deployment Toolkit: http://blogs.technet.com/b/privatecloud/archive/2013/02/27/deployment-troubleshooting-pdt.aspx

Of you want at step by step guide, i can recommend this one: http://adinermie.wordpress.com/2014/01/26/my-experience-with-the-powershell-deployment-toolkit-pdt-part-1-downloader-ps1/