Chris Stauffer at myITForum.com

So I started seeing an error on one of our sites today and this post fixed it.

Awesome fix Jarvis.

http://verbalprocessor.com/2008/06/18/mp-not-responding-to-http-requests-fixed/

This awesome little tool was posted on the email list today.

http://blogs.technet.com/deploymentguys/archive/2009/02/20/update-to-the-tasksequence-documentor.aspx

You can use it to document your MDT/OSD TS with little work on your part.

Simply right click each TS and choose Export.

Then follow the direction on the blog.

Once you have the file working simply select everything and paste it into excel.

I have 3 steps to deploy our images and this made documenting those steps simple.

So now i have a Sheet for each TS in the process in one XLS file. I created a workbook for each TS (we have 4 images) in about 20 min. Very handy :-)

Thanks for this Aly Shivji

Chris Stauffer <><

In the last post i showed you how to find WSUS client that were not working properly.

There are a few things that you can do to fix those clients.

1. Try and repair the client

2. Update the client to the newest version

First create a package and advertise this bat file to the broken clients (Machines that Failed to run the scan)

In my experience this works 90% of the time.

FixWSUS.bat

@echo off
net stop wuauserv /Y
net stop bits /Y
net stop cryptsvc /Y

REM Rename and Delete dircetories
rd /s /Q  %SystemRoot%\SoftwareDistribution
ren %systemroot%\System32\Catroot2 Catroot2.old

Rem Change Directory to System 32
CD /D %SystemRoot%\System32

Rem Reregister files

regsvr32 Actxprxy.dll /s
regsvr32 Atl.dll /S 
regsvr32 Browseui.dll /s
regsvr32 cryptdlg.dll /s
regsvr32 dssenh.dll /s
regsvr32 gpkcsp.dll /s
regsvr32 initpki.dll /s
regsvr32 jscript.dll /s
regsvr32 Mshtml.dll /s
regsvr32 Msjava.dll /s
regsvr32 Mssip32.dll /s
regsvr32 msxml.dll /s
regsvr32 msxml2.dll /s
regsvr32 Msxml3.dll /s
regsvr32 Oleaut32.dll /s
regsvr32 rsaenh.dll /s
regsvr32 sccbase.dll /s
regsvr32 shdocvw.dll /s
regsvr32 shell32.dll /s
regsvr32 slbcsp.dll /s
regsvr32 softpub.dll /s
regsvr32 Urlmon.dll /s
regsvr32 vbscript.dll /s
regsvr32 wintrust.dll /s
regsvr32 wuapi.dll /s
regsvr32 wuaueng.dll /s
regsvr32 wuaueng1.dll /s
regsvr32 wucltui.dll /s
regsvr32 wups.dll /s
regsvr32 wups2.dll /s
regsvr32 wuweb.dll /s

Rem Turn services back on

net start wuauserv
net start bits
net start cryptsvc
exit

Those that are not fixed by this should be updated to the latest client.

I actually have another collection and advertisement for that, because we update all the clients anyway.

Collection query:

ABC- WSUS Client need upgraded to 7.2.6001.788

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_WINDOWSUPDATEAGENTVERSION on SMS_G_System_WINDOWSUPDATEAGENTVERSION.ResourceId = SMS_R_System.ResourceId where SMS_G_System_WINDOWSUPDATEAGENTVERSION.Version not like "7.2.6001.788" and SMS_R_System.Client = 1

Create an package with this commandline and these files

SCCM package Commandline needed:

WindowsUpdateAgent30-x86_726001788.exe /WUForce /quiet /norestart

if you are adding this to your OSD deployment the switches are:

WindowsUpdateAgent30-x86_726001788.exe  /quiet /norestart

The three current links are:

x86:

http://download.windowsupdate.com/windowsupdate/redist/standalone/7.2.6001.788/windowsupdateagent30-x86.exe

x64:

http://download.windowsupdate.com/windowsupdate/redist/standalone/7.2.6001.788/windowsupdateagent30-x64.exe

Itanium:

http://download.windowsupdate.com/windowsupdate/redist/standalone/7.2.6001.788/windowsupdateagent30-ia64.exe

One of the questions i get a lot is:

“What is the status of our WSUS patch deployments?”

So i have a series of collections that tell me where things site. I’m not sure where i got the first 3 collections.

So thank you to whom ever posted them originally. The 4th one was created by Robert Jones, one of the admin that work on the sites that are connected to our central site.

Anyway here are the collections:

ABC - WSUS Client State –> place holder collection

-->ABC - Clients Pending reboot

-->ABC - Failed to install update

-->ABC - Machines that failed to scan

-->ABC - Waiting for another installation to complete

(note ABC stands for site code here)

Collection Queries

ABC - Clients Pending reboot

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from sms_r_system AS sms_r_system          inner join SMS_UpdateComplianceStatus as c on c.machineid=sms_r_system.resourceid      where          c.LastEnforcementMessageID = 9

ABC - Failed to install update

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from sms_r_system inner join SMS_UpdateComplianceStatus on SMS_UpdateComplianceStatus.machineid=sms_r_system.resourceid      where SMS_UpdateComplianceStatus.LastEnforcementMessageID = 11

ABC - Machines that failed to scan

This collection is based on http://www.myitforum.com/articles/1/view.asp?id=5578 

Create this collection and add a query but don't put anything in the query.

Then open the SQL Server Management Studio and connect to the SCCM DB

Then open the views and find the view that matches the collection number that you just created.

It should look something like this dbo._res_coll_ABC00123

Right click the view and choose edit.

Then paste this statement into the query, make sure that you change the collection ID to match your Collection ID

Then execute it. This will update the collection query.

USE [SMS_PA1]
GO
/****** Object:  View [dbo].[_RES_COLL_ABC00123]    Script Date: 06/18/2009 13:55:57 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
ALTER view [dbo].[_RES_COLL_PA100165] as
SELECT     cm.MachineID
, cm.ArchitectureKey
, cm.Name
, cm.SMSID
, cm.SiteCode
, cm.Domain
, cm.ClientType
, cm.IsDirect
, cm.IsAssigned
, cm.IsClient
, cm.IsObsolete
, cm.IsActive
, cm.IsDecommissioned
, cm.AMTStatus
, cm.AMTFullVersion
, cm.SuppressAutoProvision
, ck.ApprovalStatus AS IsApproved
, ck.IsRevoked AS IsBlocked
, ck.AlwaysInternet AS IsAlwaysInternet
, ck.InternetEnabled AS IsInternetEnabled

FROM         dbo.CollectionMembers AS cm INNER JOIN

                      dbo.Update_ScanStatus ON cm.MachineID = dbo.Update_ScanStatus.MachineID LEFT OUTER JOIN

                      dbo.ClientKeyData AS ck ON cm.SMSID = ck.SMSID

WHERE     (cm.SiteID = 'ABC00123') AND (dbo.Update_ScanStatus.LastErrorCode <> 0)

ABC - Waiting for another installation to complete

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from sms_r_system AS sms_r_system          inner join SMS_UpdateComplianceStatus as c on c.machineid=sms_r_system.resourceid      where          c.LastEnforcementMessageID = 3

See next Post for how to fix Machines that failed to scan.

http://myitforum.com/cs2/blogs/cstauffer/archive/2009/06/18/fixing-broken-wsus-clients.aspx

Ok this is an awesome article by Steve Thompson.

I never realized that MS did not put this into the backup until I ready this article.

http://www.myitforum.com/articles/42/view.asp?id=12666

Anyway I prefer to automate whenever possible if it is a repeatable task.

So I automated the directions in the article.

You will need to change the paths for your environment but it gets the job done :-)

First create a file called AfterBackup.bat

http://technet.microsoft.com/en-us/library/cc181721.aspx

and put it here

SMS\inboxes\smsbkup.box

Afterbackup.bat  (contents)

@echo Off
Echo Delete and Create folder to hold backup

RMDIR /S /Q D:\SCCM_Backup\Reporting_Service_SCCM
mkdir D:\SCCM_Backup\Reporting_Service_SCCM
mkdir D:\SCCM_Backup\Reporting_Service_SCCM\DB
mkdir D:\SCCM_Backup\Reporting_Service_SCCM\Files
mkdir D:\SCCM_Backup\Reporting_Service_SCCM\Files\ReportManager
mkdir D:\SCCM_Backup\Reporting_Service_SCCM\Files\ReportServer
mkdir D:\SCCM_Backup\Reporting_Service_SCCM\Files\Keys

Echo Create SCCM Reporting backup
D:
cd\ backup_SQL
sqlcmd -i D:\backup_SQL\backup.sql

Echo Copy Encrypted Keys
Echo y | rskeymgmt -e -f D:\SCCM_Backup\Reporting_Service_SCCM\Files\Keys\rsdbkey.snk -p L0ckD0wn01

Echo Backup Reporting Services Folder and File structures

Xcopy "C:\Program Files\Microsoft SQL Server\MSSQL.2\Reporting Services\ReportManager" D:\SCCM_Backup\Reporting_Service_SCCM\Files\ReportManager /E /H /K /Q /C /Y

Xcopy "C:\Program Files\Microsoft SQL Server\MSSQL.2\Reporting Services\ReportServer" D:\SCCM_Backup\Reporting_Service_SCCM\Files\ReportServer /E /H /K /Q /C /Y

backup.sql   (Content)

Backup Database ReportServer to disk = 'D:\SCCM_Backup\Reporting_Service_SCCM\DB\ReportServer.bak'
Backup Database ReportServerTempDB to disk = 'D:\SCCM_Backup\Reporting_Service_SCCM\DB\ReportServerTempDB.bak'
GO

I created a folder called  D:\backup_SQL to hold my Backup.sql but you could put it anywhere you want.

Once this runs you will have a complete backup of your SQL Reporting Services DB and Files.

I choose to copy all of the files in the 2 directories just in case I overlooked something. Better safe then sorry.

If anybody sees that I missed something let me know so I can add it to my backup and adjust this blog.

Chris Stauffer <><

My wife and I have been involved with an organization for the last few years called Soldiers’ Angels.

I just wanted to take a few seconds of your time to share this information with you.

If you are like us and want to sponsor a Soldier, Sailor, Airman or Marine but don't personally know anybody presently deployed, take a few minutes and check out this site.

I also added a link to the menu bar on the left.

Here is a little bit of information about the “ALL” volunteer organization:

Who They Are

As a volunteer-based nonprofit, they have over 30 different teams supporting all branches of the U.S. Armed Forces. Through special projects, dedicated teams and individuals supporting our troops, they make a visible difference in the lives of our service members and their families. To get involved, learn more here!

Projects we’ve done

Here is a link to one of the previous projects that we did with our scouts.

http://myitforum.com/cs2/blogs/cstauffer/archive/2008/07/29/soldiers-angels-blankets-of-hope-blankets-of-belief.aspx

My wife just finished a project with my sons class to complete a blanket as well.

We also adopted a soldier who is presently deployed.  Once again we have involved our scouts with sending special projects “care packages” like “Why I Like Spring!” and “Operation Super Hero”.

As you Celebrate Memorial Day, Armed Forces Day, the Independence Day / 4th of July and Veterans Day,  REMEBER that it is because of our men and women in the military that we have the freedom to enjoy life.

Thanks

Chris Stauffer <><