Trying to give something back to the Community...
Ever wondered hoe to install the ConfigMgr Client on a workgroup machine that’s connected over the Internet? Well in this post on The Configuration Manager Support Team Blog Adnan Ezzi explains all:
I had an interesting case the other day and since I didn’t see it documented anywhere I thought I’d mention it here in case anyone else runs into it. What can happen is that when you try to install the Configuration Manager 2007 agent on a workgroup machine when connected over Internet, which does not have access to the Active Directory, the agent installation may fail with the following error:
client.msi.log
Action start 21:42:22: CcmValidateInternetConfigurations. [21:42:22] The 'CCMHOSTNAME' is passed as msi parameter and the value is 'sccm2007.scs.in'. [21:42:22] Client Internet MP Host Name is 'sccm2007.scs.in'. [21:42:22] The msi parameter 'CCMHTTPSSTATE' is missing . [21:42:22] Providing MSI parameter 'CCMHOSTNAME' means client is IBCM enabled. [21:42:22] Client must be in Native mode while it is IBCM enabled. [21:42:22] @@ERR:26001 MSI (s) (A0!BC) [21:42:22:523]: Product: Configuration Manager Client -- Error 26001. The Management Point (MP) must be in Native mode when client is internet enabled.
Error 26001. The Management Point (MP) must be in Native mode when client is internet enabled.
ccmsetup.log
MSI: Action 21:42:22: CcmValidateInternetConfigurations. Setting Security Configurations ccmsetup 6/30/2009 9:42:22 PM 1772 (0x06EC) MSI: The Management Point (MP) must be in Native mode when client is internet enabled. ccmsetup 6/30/2009 9:42:22 PM 1772 (0x06EC) Installation failed with error code 1603 ccmsetup 6/30/2009 9:42:23 PM 1772 (0x06EC) Next retry in 120 minute(s)... ccmsetup 6/30/2009 9:42:24 PM 1772 (0x06EC)
For some reason it seemed that specifying the /native switch was not kicking off. We next tried including the CCMHTTPSSTATE=1 property in the command line, so the command line looked like this:
ccmsetup.exe /source: C:\ccmclient /native: CCMALWAYSINF=1 SMSMP=sccm2007.scs.in SMSSITECODE=CEN DNSSUFFIX=scs.in CCMHOSTNAME=sccm2007.scs.in ccmhttpsstate=1
Only after we included the CCMHTTPSSTATE=1 property did the installation succeed.
Hope this helps,
Adnan Ezzi | System Center Support Engineer
http://blogs.technet.com/configurationmgr/archive/2009/07/07/installing-the-configmgr-2007-agent-on-a-workgroup-machine-when-connected-over-internet.aspx
Reproduced from the System Center Operations Manager blog:
One of the scenarios supported by the new Exchange 2007 MP (6.0.6623.0) is to keep the Exchange 2007 Converted MP (6.0.6461.0) installed. This allows you to keep your historical data from the old Exchange MP, while gaining the advantages of monitoring your Exchange 2007 servers with the new Management Pack. In order to do this you need to disable the monitoring from the old MP to avoid duplication of monitoring. This can be done with the attached unsealed management pack..
The management pack, Microsoft.Exchange.2007.Disable.xml, will disable all the rules and monitors in the converted Exchange 2007 MP. It uses enforced overrides to attempt to disable the monitoring even over any existing overrides you may have in your management group. Using this MP should avoid duplication of alerts, one raised by the old converted MP and one raised by the new MP and also avoid running the synthetic transactions from the old converted MP.
http://blogs.technet.com/momteam/archive/2009/07/06/new-exchange-2007-management-pack-and-keeping-old-management-pack-data.aspx
New Feature 15 courtesy of Michael:
When you perform a Lite Touch deployment, the task sequence runs through to completion, and then you will see a summary wizard that shows you any errors or warnings that may have occurred during the process. That wizard could be skipped by setting “SkipFinalSummary=YES” in CustomSettings.ini. (One behavior worth pointing out: With MDT 2010 Beta 2, if the task sequence fails, the SkipFinalSummary setting will be ignored and the wizard will be shown anyway.)
A common request we received was to provide a mechanism for specifying what should be done after the wizard is completed (or if it is skipped). With MDT 2010 Beta 2, we have provided that through a “FinishAction” variable that you can set in CustomSettings.ini. Valid values include:
If you don’t specify any value, the default is to just exit like was done in MDT 2008. The shutdown, restart, or logoff activities happen after the Lite Touch scripts have cleaned up the machine (copying logs to the network, removing MININT, removing autologon settings, etc.). In the case of restart or logoff, the machine will end up at the logon screen, ready for a user to log on.
View article...
When using Configuration Manager 2007 R2 with Service Pack 1, the R2 features are not accessible via the Admin Console and are not noted as being installed despite a successful R2 installation process.
This occurs when the site in question has a site code of SRS, OSD, or FCS. This is specific to R2 functionality once R2 is installed.
http://support.microsoft.com/default.aspx?scid=kb;en-us;973363
If you have installed Windows Vista Service Pack 2 on the system that you are using to manage Hyper-V – you should grab this update:
http://support.microsoft.com/kb/970203
Note that this is an “update” which means that you need to have the original version of the Hyper-V Management Tools installed first (you can get them from here: http://support.microsoft.com/kb/952627/).
For those of you who are curious as to why you have to do this as a separate download than the whole Windows Vista Service Pack 2 process – the reason is that as Hyper-V RTM’d after Windows Server 2008, we had to release the Vista management tools as an optional separate component on Windows Vista. The result is that we also have to service it separately – as we cannot assume that all users have it installed prior to installing Windows Vista Service Pack 2.
Cheers, Ben
Just a heads up that we have a fairly new virtual lab that will walk you through using the SCCM 2007 Administrator Console to verify the site configuration, identify the Software distribution and maintenance windows feature of SCCM 2007, identify the Software updates and WSUS integration feature of SCCM 2007, identify the Operating system deployment of Windows Vista feature of SCCM 2007, identify the Desired configuration management feature of SCCM 2007, and identify other miscellaneous SCCM features.
If you’re new to ConfigMgr or just looking to learn more, this is a great lab to get you started. For more information and to register online see TechNet Virtual Lab: Introduction to System Center Configuration Manager (SCCM) 2007.
J.C. Hornbeck | Manageability Knowledge Engineer
Some people are finding that when they install Windows Virtual PC, their Virtual Machines folder does not have the option to Create Virtual Machine. If this happens to you – there are three options that you can try:
Join the team from the Intel vPro Expert Center for an informative Webcast on the ROI savings and activation process for PCs with Intel® vPro™ technology and Microsoft System Configuration Manager.
This live TechRepublic Webcast, featuring Q&A, will be hosted by James Hilliard and feature special guest speakers from Intel Corporation, Jeff Marek, Director of End User Platform Engineering, Digital Office, and Jeff Torello, Staff Architect, Digital Office and Jeff Wettlaufer, Sr. Technical Product Manager for System Center, Microsoft Corporation. They will discuss the ROI possible with Intel vPro technology usage models activated, a review of the primary usage models supported by SCCM, and an overview of the activation process using SCCM. Q&A will follow.
Register Today!
J.C. Hornbeck | Manageability Knowledge Engineer View article...
Can I specify the directory name to Extract SMS 2003 SP3 to from the Command Line? Yes you can but the command line you need to use might not be what you'd expect...
Forefront Security for Exchange Server
961728 The MSExchange Transport and MSExchangeIS services do not start after a server restart
960465 Description of Forefront Security for Exchange Server with Service Pack 2
961397 Additional logging that is implemented in Forefront Security for Exchange Server SP1 Update Rollup 3 may cause queues on Exchange servers
961936 Worms are removed but not purged in Forefront Security for Exchange Server when you create a custom worm purge list and set the MaxCompressedFileInfections option to zero
961429 You cannot configure filtering in Forefront Security for Exchange Server
961868 An attachment is incorrectly detected as an .rar file in Forefront Security for Exchange Server
967051 The scan engines cannot update in Forefront Security for Exchange Server and a "Failed to extract the file(s)" error is logged in the ProgramLog.txt file
961385 Some default deletion messages in Forefront Security for Exchange Server may mislead a user or an administrator to assume that an error occurred or that a virus was found
967071 The FSCStarter.exe process in Forefront Security for Exchange Server stops responding and a Dr. Watson crash occurs that references Bucket ID 1051284231
961428 The Microsoft Forefront Security for Exchange Server Administrator crashes and a Dr Watson error with bucket ID 604195725 occurs
961440 Description of improved Active Directory query performance in Forefront Security for Exchange Server with Service Pack 2
961394 The keyword filter in Forefront Security for Exchange Server stops working when the keyword list contains over 32,767 entries
967075 E-mail notifications in Forefront Security for Exchange Server are sent from the wrong address
971434 After a scan engine fails to update in Forefront Security for Exchange Server, all e-mail messages are archived
968260 Description of the improved resource use that optimizes performance in Forefront Security for Exchange Server with Service Pack 2
961434 You cannot scan public folders in Forefront Security for Exchange Server, and event ID 5014 is logged in the Application log
967938 The FSCController.exe process stops and then restarts, and e-mail notifications stop working in Forefront Security for Exchange Server
968253 Forefront Security for Exchange Server cannot initiate Realtime scan jobs at startup, and error codes "0x80030020" and "0x80030021" are logged
961431 The scan engines do not update in Forefront Security for Exchange Server and an error is logged in the ProgramLog.txt file
961926 Forefront Security for Exchange Server may detect Office 2007 files as containing an UnwritableCompressedFile virus
967072 The FSCStatsServ.exe process in Forefront Security for Exchange Server stops responding and a Dr. Watson crash occurs that references Bucket ID 1085186554
967052 The Getenginefiles.exe process in Forefront Security for Exchange Server stops responding and a Dr. Watson crash occurs that references Bucket ID 796835995
963029 Forefront Security for Exchange Server does not correctly detect music files after you create a file filter by using selected file types
961432 Lots of LDAP queries occur, and e-mail message queues start to form in Forefront Security for Exchange Server
961425 Microsoft Forefront Security for Exchange Server stops responding, and a Dr. Watson error with a bucket ID 668683526 that references a crash of the FSCController.exe process is generated
967996 The filter name is missing in the keyword filter match notifications in Forefront Security for SharePoint
968267 Forefront Security for SharePoint may incorrectly detect an attachment as an .rar file
970513 You receive "out of memory" error messages in Forefront Security for SharePoint
969043 Forefront Security for SharePoint cleans infected documents even though the "Attempt to clean infected documents" option in SharePoint is not selected
969051 Detection of an Office 2007 file is logged two times in the Forefront Security for SharePoint logs
970676 When a manual scan job detects a keyword filter match, Forefront Security for SharePoint sends a notification that contains incorrect detection information
968117 You receive "out of memory" error messages in Forefront Security for SharePoint when the Realtime scan job scans documents
972072 Forefront Security for SharePoint detects a large compressed file as "CorruptedCompressed" even though the file is not corrupted
968154 The Getenginefiles.exe process in Forefront Security for SharePoint stops responding and generates a crash that references "Bucket ID 766111704"
968989 Manual scans and Quick scans do not mark .eml files as "ExceedinglyNested" files in Forefront Security for SharePoint
972074 Forefront Security for SharePoint returns an error when it scans a large compressed file that contains many smaller files
968317 The FSCController.exe process stops and then restarts, and e-mail notifications stop working in Forefront Security for SharePoint
968235 Forefront Security for SharePoint does not correctly detect MP3 files after you use selected file types to create a file filter
968237 Scan engines are not updated in Forefront Security for SharePoint, and an error is logged in the ProgramLog.txt file
968112 You receive a warning message when you try to uninstall Forefront Security for SharePoint hotfixes
967995 Description of Forefront Security for SharePoint with Service Pack 3
970607 You cannot enable a keyword filter list after you disable the list in Forefront Security for SharePoint
968231 You cannot configure filtering in Forefront Security for SharePoint
968169 Forefront Security for SharePoint may detect that 2007 Office files contain the UnwritableCompressedFile virus
968166 The scan engines are not updated as expected in Forefront Security for SharePoint, and a "Failed to extract the file(s)" error is logged in the ProgramLog.txt file
968156 Forefront Security for SharePoint cannot initiate the Realtime scan jobs at startup, and error codes "0x80030020" and "0x80030021" are generated
970677 The Realtime scan job may time out multiple times and then crash in Forefront Security for SharePoint
968261 The FSCController service in Forefront Security for SharePoint stops responding after a restart of the server, and the Realtime scan job becomes disabled
968238 The GetEngineFiles.exe process incorrectly deletes some files on a computer that is running Forefront Security for SharePoint
968163 You cannot download files from a SharePoint Web site when Forefront Security for SharePoint is installed, and you receive an "Unknown Error" error message
970884 Description of the Outlook 2003 hotfix package (Normui.msp, Olkintl.msp): June 30, 2009
971366 Description of the Outlook 2003 hotfix package (Outlook.msp): June 30, 2009
970945 Description of the Outlook 2007 hotfix package (Outlook-de-de.msp): June 30, 2009
972148 When you send an e-mail message from a shared mailbox in Outlook 2007, the sent message is not saved in the Sent Items folder of the shared mailbox
972574 Description of the Outlook 2007 hotfix package (Oms.msp; Outlook.msp): June 30, 2009
965229 A hotfix enables you to set the download mode for IMAP accounts in Outlook 2007 and to configure the setting to sync the mailbox when you exit Outlook 2007
971863 Description of the Outlook 2007 hotfix package (Outlook-en-us.msp): June 30, 2009
970944 Description of the Outlook 2007 hotfix package (Outlook.msp): June 30, 2009
971367 The BeforeFolderMove event is not called by a custom application after a while in Outlook 2007
971937 If a delegate sends a meeting request on behalf of the manager by using Outlook 2000, the organizer of the meeting is changed to the delegate unexpectedly after an attendee accepts the meeting by using Outlook 2007
972362 When you print a daily calendar in Outlook 2007, start and end times are not included before the subject of appointments
971786 Description of the Outlook 2007 hotfix package (Outlook-ja-jp.msp): June 30, 2009
971027 FIX: Error message when you upgrade a very large database to SQL Server Compact 3.5: "The database file is larger than the configured maximum database size. This setting takes effect on the first concurrent database connection only"
970915 FIX: Error message when you synchronize a merge replication with SQL Server 2005 Compact Edition subscribers: "A column ID occurred more than once in the specification. HRESULT 0x80040E3E (0)"
971408 Windows Server 2003 does not restart as expected if a recursive error occurs while writing a dump file
971280 Random Stop errors on a Windows Server 2003-based computer that performs input/output to file shares hosted on another computer or to a network-attached storage device
971067 Windows Server 2003 crashes during a shutdown if SharePoint Services Tracing is enabled
971314 All PCL inbox printer drivers become unsigned after you install the Microsoft .NET Framework 3.5 SP1 or XPS Essentials Pack in Windows XP or in Windows Server 2003
968356 Some email messages are moved incorrectly to the "Badmail" folder instead of being delivered on a computer that is running Windows Server 2003 if the P2 header fields of the e-mail messages are very large
955547 You cannot create or rename files as expected when you try to use similar file names that differ only in capitalization in an NFS shared directory that was exported from a Windows Server 2003 R2-based NFS Server
970480 The manufacturer's driver is not installed when you install a third-party device driver on a Windows Vista-based or Windows Server 2008-based computer
970520 The wmiprvse.exe process creates a memory leak on a computer that is running Windows Server 2008 if you remotely monitor this process by using the WMI interface on a computer that is running Windows Server 2003 or Windows XP
965497 You receive the Stop error 0x00000050 and then the computer restarts automatically if the OpenFileById function opens a folder and then the handle returned is used to rename files on a computer that is running Windows Server 2008 or Windows Vista
969670 SMB 2.0 protocol-related performance counters return extremely high values on computers that are running Windows Server 2008 or Windows Vista
970999 You may receive an error message when you try to access a multilevel entry in an MMC by using the Taskpad view on a computer that is running Windows Server 2008 or Windows Vista
968408 Network and Sharing Center does not display Windows Firewall domain policies in Windows Vista or in Windows Server 2008, you cannot browse the network
971046 A publisher name that has an ampersand (&) is not displayed correctly in the "File Download - Security Warning" dialog box on a computer that is running Windows Vista or Windows Server 2008
970186 Memory corruption occurs when you try to log off from a computer that is running Windows Vista or Windows Server 2008 after you sync the offline file in the Client-Side Caching folder
971307 A DHCP server that is running Windows Server 2008 handles incorrectly DHCPInform messages if relay agents forward these messages
972069 A terminal server that is running Windows Server 2008 cannot obtain terminal licenses from a Terminal Server license server that is running Windows Server 2008 after you enable the "License Server Security Group" Group Policy setting
971712 The optional "Label" field or "Description" field does not appear when you run the DIRQUOTA command in Windows Server 2008
970525 Cluster resources fail over before the time expires in the PDORemovePeriod parameter in Windows Server 2008
972516 A DirectAccess access failure occurs after the DNS servers that are running Windows Server 2008 return empty responses for AAAA queries in a WINS zone
970030 HD audio controller is consuming power during sleep or hibernation in Windows Vista
973206 Video recording and subsequent playback may not be smooth in Windows Movie Maker on a system running Microsoft Windows XP with an HD video camera
How do I Extract SMS 2003 SP3 to a specific directory? To extract SMS 2003 SP3 to a specific directory you can use a switch on the command line...
From the System Center Operations Manager blog:
We have updated the mp guide template that you can use for writing your own mp guides for your custom mps. The content has been updated for several topics and new content was added for disabled monitors. This is available on the opsmanjam site in the doc library, or link directly to the doc here.
http://blogs.technet.com/momteam/archive/2009/07/06/mpguide-template-external-updated.aspx
From Michael Niehaus’ blog:
There were two main database limitations in MDT 2008 Update 1:
With MDT 2010 Beta 2, we’ve fixed those limitations:
If you are looking for the database node in MDT 2010 Beta 2, you can find it under the deployment share’s “Advanced Configuration” node. That means that each deployment share can have its own database, too.
HP today announced the immediate integration of the highly anticipated Six-Core AMD Opteron™ 2400 Series processor into the award-winning family of HP Workstations. View article...
HP today announced the immediate integration of the highly anticipated Six-Core AMD Opteron™ 2400 Series processor into the award-winning family of HP Workstations.