July 2009 - Posts

[ConfigMgr 2007] Installing the ConfigMgr 2007 agent on a workgroup machine when connected over Internet

Ever wondered hoe to install the ConfigMgr Client on a workgroup machine that’s connected over the Internet? Well in this post on The Configuration Manager Support Team Blog Adnan Ezzi explains all:

fixI had an interesting case the other day and since I didn’t see it documented anywhere I thought I’d mention it here in case anyone else runs into it.  What can happen is that when you try to install the Configuration Manager 2007 agent on a workgroup machine when connected over Internet, which does not have access to the Active Directory, the agent installation may fail with the following error:

client.msi.log

Action start 21:42:22: CcmValidateInternetConfigurations.
[21:42:22] The 'CCMHOSTNAME' is passed as msi parameter and the value is 'sccm2007.scs.in'.
[21:42:22] Client Internet MP Host Name is 'sccm2007.scs.in'.
[21:42:22] The msi parameter 'CCMHTTPSSTATE' is missing .
[21:42:22] Providing MSI parameter 'CCMHOSTNAME' means client is IBCM enabled.
[21:42:22] Client must be in Native mode while it is IBCM enabled.
[21:42:22] @@ERR:26001
MSI (s) (A0!BC) [21:42:22:523]: Product: Configuration Manager Client -- Error 26001. The Management Point (MP) must be in Native mode when client is internet enabled.

Error 26001. The Management Point (MP) must be in Native mode when client is internet enabled.

ccmsetup.log

MSI: Action 21:42:22: CcmValidateInternetConfigurations. Setting Security Configurations    ccmsetup    6/30/2009 9:42:22 PM    1772 (0x06EC)
MSI: The Management Point (MP) must be in Native mode when client is internet enabled.    ccmsetup    6/30/2009 9:42:22 PM    1772 (0x06EC)
Installation failed with error code 1603    ccmsetup    6/30/2009 9:42:23 PM    1772 (0x06EC)
Next retry in 120 minute(s)...    ccmsetup    6/30/2009 9:42:24 PM    1772 (0x06EC)

For some reason it seemed that specifying the /native switch was not kicking off.  We next tried including the CCMHTTPSSTATE=1 property in the command line, so the command line looked like this:

ccmsetup.exe /source: C:\ccmclient /native: CCMALWAYSINF=1 SMSMP=sccm2007.scs.in SMSSITECODE=CEN DNSSUFFIX=scs.in CCMHOSTNAME=sccm2007.scs.in ccmhttpsstate=1

Only after we included the CCMHTTPSSTATE=1 property did the installation succeed.

Hope this helps,

Adnan Ezzi | System Center Support Engineer

http://blogs.technet.com/configurationmgr/archive/2009/07/07/installing-the-configmgr-2007-agent-on-a-workgroup-machine-when-connected-over-internet.aspx

[OpsMgr] New Exchange 2007 Management Pack and Keeping Old Management Pack Data

Reproduced from the System Center Operations Manager blog:

One of the scenarios supported by the new Exchange 2007 MP (6.0.6623.0) is to keep the Exchange 2007 Converted MP (6.0.6461.0) installed. This allows you to keep your historical data from the old Exchange MP, while gaining the advantages of monitoring your Exchange 2007 servers with the new Management Pack. In order to do this you need to disable the monitoring from the old MP to avoid duplication of monitoring. This can be done with the attached unsealed management pack..

The management pack, Microsoft.Exchange.2007.Disable.xml, will disable all the rules and monitors in the converted Exchange 2007 MP. It uses enforced overrides to attempt to disable the monitoring even over any existing overrides you may have in your management group. Using this MP should avoid duplication of alerts, one raised by the old converted MP and one raised by the new MP and also avoid running the synthetic transactions from the old converted MP.

http://blogs.technet.com/momteam/archive/2009/07/06/new-exchange-2007-management-pack-and-keeping-old-management-pack-data.aspx

[MDT] MDT 2010 New Feature #15: Finish actions

New Feature 15 courtesy of Michael:

When you perform a Lite Touch deployment, the task sequence runs through to completion, and then you will see a summary wizard that shows you any errors or warnings that may have occurred during the process.  That wizard could be skipped by setting “SkipFinalSummary=YES” in CustomSettings.ini.  (One behavior worth pointing out:  With MDT 2010 Beta 2, if the task sequence fails, the SkipFinalSummary setting will be ignored and the wizard will be shown anyway.)

A common request we received was to provide a mechanism for specifying what should be done after the wizard is completed (or if it is skipped).  With MDT 2010 Beta 2, we have provided that through a “FinishAction” variable that you can set in CustomSettings.ini.  Valid values include:

  • SHUTDOWN.  When the process is complete, turn off the computer.
  • RESTART or REBOOT.  When the process is complete, reboot the computer.
  • LOGOFF.  When the process is complete, log off.

If you don’t specify any value, the default is to just exit like was done in MDT 2008.  The shutdown, restart, or logoff activities happen after the Lite Touch scripts have cleaned up the machine (copying logs to the network, removing MININT, removing autologon settings, etc.).  In the case of restart or logoff, the machine will end up at the logon screen, ready for a user to log on.

View article...

[ConfigMgr 2007] When using Configuration Manager 2007 R2 together with Service Pack 1, the R2 features are not accessible by using the Admin Console

When using Configuration Manager 2007 R2 with Service Pack 1, the R2 features are not accessible via the Admin Console and are not noted as being installed despite a successful R2 installation process.


This occurs when the site in question has a site code of SRS, OSD, or FCS. This is specific to R2 functionality once R2 is installed.

http://support.microsoft.com/default.aspx?scid=kb;en-us;973363

[Hyper-V] Hyper-V Management Tools update for Windows Vista Service Pack 2 - Virtual PC Guy

If you have installed Windows Vista Service Pack 2 on the system that you are using to manage Hyper-V – you should grab this update:

http://support.microsoft.com/kb/970203

Note that this is an “update” which means that you need to have the original version of the Hyper-V Management Tools installed first (you can get them from here: http://support.microsoft.com/kb/952627/).

For those of you who are curious as to why you have to do this as a separate download than the whole Windows Vista Service Pack 2 process – the reason is that as Hyper-V RTM’d after Windows Server 2008, we had to release the Vista management tools as an optional separate component on Windows Vista.  The result is that we also have to service it separately – as we cannot assume that all users have it installed prior to installing Windows Vista Service Pack 2.

Cheers,
Ben

View article...

[ConfigMgr] TechNet Virtual Lab: Introduction to System Center Configuration Manager 2007

Just a heads up that we have a fairly new virtual lab that will walk you through using the SCCM 2007 Administrator Console to verify the site configuration, identify the Software distribution and maintenance windows feature of SCCM 2007, identify the Software updates and WSUS integration feature of SCCM 2007, identify the Operating system deployment of Windows Vista feature of SCCM 2007, identify the Desired configuration management feature of SCCM 2007, and identify other miscellaneous SCCM features.

If you’re new to ConfigMgr or just looking to learn more, this is a great lab to get you started.  For more information and to register online see TechNet Virtual Lab: Introduction to System Center Configuration Manager (SCCM) 2007.

J.C. Hornbeck | Manageability Knowledge Engineer

View article...

 

[Virtualisation] Virtual PC Guy - Fixing a missing “Create Virtual Machine” option [Windows Virtual PC]

Some people are finding that when they install Windows Virtual PC, their Virtual Machines folder does not have the option to Create Virtual Machine.  If this happens to you – there are three options that you can try:

  1. When in the Virtual Machines folder, press “Alt” to open the menu.  Select Tools and then Folder options…. On the dialog that is opened click Restore Defaults.  Once you have done this, log out and log back in to see if the Create Virtual Machine option is now present.
  2. If this doesn’t work – try running the registry file that is attached to this blog post, and restarting the computer.  This registry file deletes any custom settings for your folder views – and sets things back to their clean state.
  3. If neither of these options works – you can manually start the new virtual machine wizard by going to your system drive and running:
“\Windows\System32\VPCWizard.exe”

Cheers,
Ben
http://blogs.msdn.com/aggbug.aspx?PostID=9821034


View article...

 

[ConfigMgr 2007] Live Webcast: Activate Today! Realize ROI with Intel vPro Technology and ConfigMgr

Join the team from the Intel vPro Expert Center for an informative Webcast on the ROI savings and activation process for PCs with Intel® vPro™ technology and Microsoft System Configuration Manager.

This live TechRepublic Webcast, featuring Q&A, will be hosted by James Hilliard and feature special guest speakers from Intel Corporation, Jeff Marek, Director of End User Platform Engineering, Digital Office, and Jeff Torello, Staff Architect, Digital Office and Jeff Wettlaufer, Sr. Technical Product Manager for System Center, Microsoft Corporation. They will discuss the ROI possible with Intel vPro technology usage models activated, a review of the primary usage models supported by SCCM, and an overview of the activation process using SCCM. Q&A will follow.

Register Today!

J.C. Hornbeck | Manageability Knowledge Engineer       
View article...

[MS KBs] New KB Articles At Microsoft 7 Jul 2009 - Weekly Summary

Forefront Security for Exchange Server


961728 The MSExchange Transport and MSExchangeIS services do not start after a server restart

960465 Description of Forefront Security for Exchange Server with Service Pack 2

961397 Additional logging that is implemented in Forefront Security for Exchange Server SP1 Update Rollup 3 may cause queues on Exchange servers

961936 Worms are removed but not purged in Forefront Security for Exchange Server when you create a custom worm purge list and set the MaxCompressedFileInfections option to zero

961429 You cannot configure filtering in Forefront Security for Exchange Server

961868 An attachment is incorrectly detected as an .rar file in Forefront Security for Exchange Server

967051 The scan engines cannot update in Forefront Security for Exchange Server and a "Failed to extract the file(s)" error is logged in the ProgramLog.txt file

961385 Some default deletion messages in Forefront Security for Exchange Server may mislead a user or an administrator to assume that an error occurred or that a virus was found

967071 The FSCStarter.exe process in Forefront Security for Exchange Server stops responding and a Dr. Watson crash occurs that references Bucket ID 1051284231

961428 The Microsoft Forefront Security for Exchange Server Administrator crashes and a Dr Watson error with bucket ID 604195725 occurs

961440 Description of improved Active Directory query performance in Forefront Security for Exchange Server with Service Pack 2

961394 The keyword filter in Forefront Security for Exchange Server stops working when the keyword list contains over 32,767 entries

967075 E-mail notifications in Forefront Security for Exchange Server are sent from the wrong address

971434 After a scan engine fails to update in Forefront Security for Exchange Server, all e-mail messages are archived

968260 Description of the improved resource use that optimizes performance in Forefront Security for Exchange Server with Service Pack 2

961434 You cannot scan public folders in Forefront Security for Exchange Server, and event ID 5014 is logged in the Application log

967938 The FSCController.exe process stops and then restarts, and e-mail notifications stop working in Forefront Security for Exchange Server

968253 Forefront Security for Exchange Server cannot initiate Realtime scan jobs at startup, and error codes "0x80030020" and "0x80030021" are logged

961431 The scan engines do not update in Forefront Security for Exchange Server and an error is logged in the ProgramLog.txt file

961926 Forefront Security for Exchange Server may detect Office 2007 files as containing an UnwritableCompressedFile virus

967072 The FSCStatsServ.exe process in Forefront Security for Exchange Server stops responding and a Dr. Watson crash occurs that references Bucket ID 1085186554

967052 The Getenginefiles.exe process in Forefront Security for Exchange Server stops responding and a Dr. Watson crash occurs that references Bucket ID 796835995

963029 Forefront Security for Exchange Server does not correctly detect music files after you create a file filter by using selected file types

961432 Lots of LDAP queries occur, and e-mail message queues start to form in Forefront Security for Exchange Server

961425 Microsoft Forefront Security for Exchange Server stops responding, and a Dr. Watson error with a bucket ID 668683526 that references a crash of the FSCController.exe process is generated


Forefront Security for SharePoint

967996 The filter name is missing in the keyword filter match notifications in Forefront Security for SharePoint

968267 Forefront Security for SharePoint may incorrectly detect an attachment as an .rar file

970513 You receive "out of memory" error messages in Forefront Security for SharePoint

969043 Forefront Security for SharePoint cleans infected documents even though the "Attempt to clean infected documents" option in SharePoint is not selected

969051 Detection of an Office 2007 file is logged two times in the Forefront Security for SharePoint logs

970676 When a manual scan job detects a keyword filter match, Forefront Security for SharePoint sends a notification that contains incorrect detection information

968117 You receive "out of memory" error messages in Forefront Security for SharePoint when the Realtime scan job scans documents

972072 Forefront Security for SharePoint detects a large compressed file as "CorruptedCompressed" even though the file is not corrupted

968154 The Getenginefiles.exe process in Forefront Security for SharePoint stops responding and generates a crash that references "Bucket ID 766111704"

968989 Manual scans and Quick scans do not mark .eml files as "ExceedinglyNested" files in Forefront Security for SharePoint

972074 Forefront Security for SharePoint returns an error when it scans a large compressed file that contains many smaller files

968317 The FSCController.exe process stops and then restarts, and e-mail notifications stop working in Forefront Security for SharePoint

968235 Forefront Security for SharePoint does not correctly detect MP3 files after you use selected file types to create a file filter

968237 Scan engines are not updated in Forefront Security for SharePoint, and an error is logged in the ProgramLog.txt file

968112 You receive a warning message when you try to uninstall Forefront Security for SharePoint hotfixes

967995 Description of Forefront Security for SharePoint with Service Pack 3

970607 You cannot enable a keyword filter list after you disable the list in Forefront Security for SharePoint

968231 You cannot configure filtering in Forefront Security for SharePoint

968169 Forefront Security for SharePoint may detect that 2007 Office files contain the UnwritableCompressedFile virus

968166 The scan engines are not updated as expected in Forefront Security for SharePoint, and a "Failed to extract the file(s)" error is logged in the ProgramLog.txt file

968156 Forefront Security for SharePoint cannot initiate the Realtime scan jobs at startup, and error codes "0x80030020" and "0x80030021" are generated

970677 The Realtime scan job may time out multiple times and then crash in Forefront Security for SharePoint

968261 The FSCController service in Forefront Security for SharePoint stops responding after a restart of the server, and the Realtime scan job becomes disabled

968238 The GetEngineFiles.exe process incorrectly deletes some files on a computer that is running Forefront Security for SharePoint

968163 You cannot download files from a SharePoint Web site when Forefront Security for SharePoint is installed, and you receive an "Unknown Error" error message


Outlook 2003

970884 Description of the Outlook 2003 hotfix package (Normui.msp, Olkintl.msp): June 30, 2009

971366 Description of the Outlook 2003 hotfix package (Outlook.msp): June 30, 2009


Outlook 2007

970945 Description of the Outlook 2007 hotfix package (Outlook-de-de.msp): June 30, 2009

972148 When you send an e-mail message from a shared mailbox in Outlook 2007, the sent message is not saved in the Sent Items folder of the shared mailbox

972574 Description of the Outlook 2007 hotfix package (Oms.msp; Outlook.msp): June 30, 2009

965229 A hotfix enables you to set the download mode for IMAP accounts in Outlook 2007 and to configure the setting to sync the mailbox when you exit Outlook 2007

971863 Description of the Outlook 2007 hotfix package (Outlook-en-us.msp): June 30, 2009

970944 Description of the Outlook 2007 hotfix package (Outlook.msp): June 30, 2009

971367 The BeforeFolderMove event is not called by a custom application after a while in Outlook 2007

971937 If a delegate sends a meeting request on behalf of the manager by using Outlook 2000, the organizer of the meeting is changed to the delegate unexpectedly after an attendee accepts the meeting by using Outlook 2007

972362 When you print a daily calendar in Outlook 2007, start and end times are not included before the subject of appointments

971786 Description of the Outlook 2007 hotfix package (Outlook-ja-jp.msp): June 30, 2009


SQL Server 2005

971027 FIX: Error message when you upgrade a very large database to SQL Server Compact 3.5: "The database file is larger than the configured maximum database size. This setting takes effect on the first concurrent database connection only"

970915 FIX: Error message when you synchronize a merge replication with SQL Server 2005 Compact Edition subscribers: "A column ID occurred more than once in the specification. HRESULT 0x80040E3E (0)"


Windows Server 2003

971408 Windows Server 2003 does not restart as expected if a recursive error occurs while writing a dump file

971280 Random Stop errors on a Windows Server 2003-based computer that performs input/output to file shares hosted on another computer or to a network-attached storage device

971067 Windows Server 2003 crashes during a shutdown if SharePoint Services Tracing is enabled

971314 All PCL inbox printer drivers become unsigned after you install the Microsoft .NET Framework 3.5 SP1 or XPS Essentials Pack in Windows XP or in Windows Server 2003

968356 Some email messages are moved incorrectly to the "Badmail" folder instead of being delivered on a computer that is running Windows Server 2003 if the P2 header fields of the e-mail messages are very large

955547 You cannot create or rename files as expected when you try to use similar file names that differ only in capitalization in an NFS shared directory that was exported from a Windows Server 2003 R2-based NFS Server


Windows Server 2008

970480 The manufacturer's driver is not installed when you install a third-party device driver on a Windows Vista-based or Windows Server 2008-based computer

970520 The wmiprvse.exe process creates a memory leak on a computer that is running Windows Server 2008 if you remotely monitor this process by using the WMI interface on a computer that is running Windows Server 2003 or Windows XP

965497 You receive the Stop error 0x00000050 and then the computer restarts automatically if the OpenFileById function opens a folder and then the handle returned is used to rename files on a computer that is running Windows Server 2008 or Windows Vista

969670 SMB 2.0 protocol-related performance counters return extremely high values on computers that are running Windows Server 2008 or Windows Vista

970999 You may receive an error message when you try to access a multilevel entry in an MMC by using the Taskpad view on a computer that is running Windows Server 2008 or Windows Vista

968408 Network and Sharing Center does not display Windows Firewall domain policies in Windows Vista or in Windows Server 2008, you cannot browse the network

971046 A publisher name that has an ampersand (&) is not displayed correctly in the "File Download - Security Warning" dialog box on a computer that is running Windows Vista or Windows Server 2008

970186 Memory corruption occurs when you try to log off from a computer that is running Windows Vista or Windows Server 2008 after you sync the offline file in the Client-Side Caching folder

971307 A DHCP server that is running Windows Server 2008 handles incorrectly DHCPInform messages if relay agents forward these messages

972069 A terminal server that is running Windows Server 2008 cannot obtain terminal licenses from a Terminal Server license server that is running Windows Server 2008 after you enable the "License Server Security Group" Group Policy setting

971712 The optional "Label" field or "Description" field does not appear when you run the DIRQUOTA command in Windows Server 2008

970525 Cluster resources fail over before the time expires in the PDORemovePeriod parameter in Windows Server 2008

972516 A DirectAccess access failure occurs after the DNS servers that are running Windows Server 2008 return empty responses for AAAA queries in a WINS zone


Windows Vista Enterprise

970030 HD audio controller is consuming power during sleep or hibernation in Windows Vista


Windows XP Service Pack 2

973206 Video recording and subsequent playback may not be smooth in Windows Movie Maker on a system running Microsoft Windows XP with an HD video camera

[OpsMgr] MPguide_template_external updated

From the System Center Operations Manager blog:

We have updated the mp guide template that you can use for writing your own mp guides for your custom mps.  The content has been updated for several topics and new content was added for disabled monitors.  This is available on the opsmanjam site in the doc library, or link directly to the doc here.

http://blogs.technet.com/momteam/archive/2009/07/06/mpguide-template-external-updated.aspx

[MDT] MDT 2010 New Feature #14: Database improvements

From Michael Niehaus’ blog:

There were two main database limitations in MDT 2008 Update 1:

  1. We didn’t add any new “settings” columns – the list of available settings was still the same as it was originally in BDD 2007.
  2. To add new columns to the database and to have them show up in the Deployment Workbench required making code changes to Deployment Workbench, definitely not a trivial exercise.

With MDT 2010 Beta 2, we’ve fixed those limitations:

  • We’ve added lots of additional columns, enabling you to configure any setting that could be specified via CustomSettings.ini.
  • The upgrade process will modify any existing databases to add the new columns.
  • The user interface in the Deployment Workbench will show any new columns without making any code changes, so you can add your own columns to the Settings table fairly easily (some SQL Server knowledge is required, obviously).

image

If you are looking for the database node in MDT 2010 Beta 2, you can find it under the deployment share’s “Advanced Configuration” node.  That means that each deployment share can have its own database, too.

View article...

[HP] HP Introduces First Professional Workstation with Six-core AMD Opteron Processor

HP today announced the immediate integration of the highly anticipated Six-Core AMD Opteron™ 2400 Series processor into the award-winning family of HP Workstations.

 

View article...