Chris Stauffer at myITForum.com

Live Writer Expiration issue (resolution)

cstauffer — Sat, 06 Sep 2008 19:39:14 GMT

I got this error today telling me that i needed a new version. I think one of the other MyITforum guys blogged about this a few days ago. So I went looking for a new version. Turns out it is just a bug.

Here is what I found on the Live Writer blog

**************************************

Technical Preview Triggers False Expiration

For those of you who downloaded the Technical Preview and have used Writer in the last couple of days, you may have seen a notification to upgrade to the new version only to be directed to http://get.live.com/writer to find that there is nothing new to install.

On Monday (September 1, 2008) the Technical Preview of Writer started erroneously triggering expiration for October 1, 2008. We have fixed the issue that was causing the false expiration. While the Technical Preview of Writer will not expire on October 1, you may still see this notification again.

When you see this notification, click the “Ask Me Later” button and you will be able to continue using Writer without any change.

We apologize for any confusion this may have caused.

The Windows Live Writer Team

SCCM Supplemental Reports

cstauffer — Sat, 06 Sep 2008 19:35:00 GMT

I just heard about this from Garth Jones and I thought I would share it. I had never heard of it. I think I will look further into this in the coming days.

*******************************************

About Supplemental Reports

Supplemental reports in Configuration Manager 2007 are reports that are created outside of Configuration Manager and added to the Supplemental folder on a reporting point. If there are multiple reporting points, the supplemental report must be copied to the folder on each of the reporting points from which users need access to the report. Supplemental reports do not appear in the Configuration Manager console; they appear only in Report Viewer. However, the Supplemental Reports item does not appear in the Report Viewer tree until you install at least one supplemental report file on the reporting point.

Supplemental reports can be Active Server Pages (ASP) files or any other file that can be displayed by using Internet Explorer 5.0 or later, such as HTML files, Microsoft Office files, or text files. Supplemental reports can be run directly from Report Viewer or from a link configured in a report, using the URL for the supplemental report as the target. For more information, see About Report Links.

Supplemental reports are not Configuration Manager database objects and therefore are not backed up routinely by the Configuration Manager backup service. These files must be backed up manually. If a reporting point is disabled, Configuration Manager automatically copies any supplemental reports to the root drive on the reporting point site system computer. If the reporting point is re-created on the computer, Configuration Manager automatically moves the supplemental reports from the folder to the designated supplemental reports folder on the reporting point.

SCCM R2 Eval Posted

cstauffer — Mon, 01 Sep 2008 02:58:00 GMT

SCCM R2 Eval is available for Download but it is only for eval according to Wally.

http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=3595784&SiteID=17

Wally [MSFT]

Moderator

Posts 3,838

Configuration Manager 2007 R2 RC is now available

Here's what a number of you have been waiting for - the RC build of the R2 release is now available on the connect site (https://connect.microsoft.com/Downloads/DownloadDetails.aspx?DownloadID=12988&SiteID=16).

It is the eval version, which I believe only works on an eval version of SP1 (and only the RTM release of SP1, not any pre-release builds).

Have fun!

Wally Mead

R2 is RTM But…

cstauffer — Mon, 01 Sep 2008 02:55:27 GMT

(Updated)

R2 for SCCM has been RTMed according to Wally but it isnt available for download yet because it you have to have SA or purchase it.

http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=3815526&SiteID=17

Wally [MSFT]

Moderator

Posts 3,838

Answer Re: sccm r2 out?

Yes, the R2 release of Configuration Manager 2007 did reach RTM the other day. The evaluation version is available for download. The non-evaluation product is not a free download unless you are a software assurance customer. If so, then you will be able to download the non-evaluation version. If not, you'll have to purchase the R2 software.

As to when the non-eval software will be downloadable, I don't know for sure, we don't control that part of the distribution process.

Wally Mead

What's New in Configuration Manager 2007 R2

cstauffer — Fri, 29 Aug 2008 13:07:37 GMT

R2 is suppose to be released today. I hope to begin playing with this in the lab in the next week.

See Rod Trent’s Blog for more Details or go to the System Center website for more info.

****************************************************************************

What's New in Configuration Manager 2007 R2

Topic last updated—January 2008

The following features are new to Configuration Manager 2007 R2:

Application Virtualization Management. For more information about managing virtual applications created using the Microsoft Application Virtualization platform, see About Virtual Application Packages.
Forefront Client Security Integration. For more information, see About Forefront Client Security Integration with Configuration Manager 2007 R2.
SQL Reporting Services Reporting. Allows you to report on Configuration Manager activity using SQL Reporting Services.
Client Status Reporting. Provides a set of tools and Configuration Manager 2007 reports to assess the status of client computers, sometimes referred to as "client health." Clients that show a change in activity patterns might need administrative intervention.
Operating System Deployment Enhancements. The following enhancements are included in Configuration Manager 2007 R2:
- Unknown computer support—In Configuration Manager 2007 R2, you can deploy operating systems to computers using a PXE service point without first adding the computer to the Configuration Manager database. For more information, see About Unknown Computer Support for Operating System Deployment.
- Multicast deployment—Previously, all operating system deployments used unicast. Multicast can make more efficient use of network bandwidth when deploying large images to several computers at the same time. For more information, see About Multicast for Operating System Deployment.
- Running command lines in task sequences with credentials other than the local system account.

http://technet.microsoft.com/en-us/library/cc161883.aspx

Force clients to check-in for advertisements

cstauffer — Wed, 20 Aug 2008 14:19:39 GMT

Always good material on the email list to blog on :-)

There are 2 ways to force the client to retrieve an advertisement before the site set interval.

First way (thanks to Anand Upadhyay for this tidbit.)

*********************

SCCM has new option "Enable collection specific policy polling interval" on Collection which allows you to override site setting. You can use that to force client to check for new policy.

Right click on collection and select "Modify collection settings".

Click on "Advanced" tab and check the box to enable collection specific policy interval.

Set the Policy polling interval time in minutes.

Second way

********************

Install the Right click tools for SCCM you can right click a collection or a single machine and force a "Refresh machine Policy"

Chris Stauffer <><

MMS 2008 DVD in a non office 2007 world

cstauffer — Wed, 20 Aug 2008 13:33:06 GMT

I got my new DVD and copied it to a share so that we could use it like a website to view the material as instructed here as instructed by Shaun Cassells.

But I could not open any of the files because they where office 2007 files but instead of being named pptx they are named ppt. So the compatibility pack for office 2007 doesn't recognize that they are Powerpoint 2007 files.

So here is what I had to do to get the issue fixed.

First:

First you will need to add PPTX to the mime cataloged for IIS6

Here are the directions for that: I found them here

Open Computer Management. (Right-click My Computer... Manage...)
Right-click Internet Information Services (IIS) Management... Properties...
Click MIME Types...
Click New... and add the following (see below):
Restart IIS

Extension	MIME Type
.xlsx	application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
.xltx	application/vnd.openxmlformats-officedocument.spreadsheetml.template
.potx	application/vnd.openxmlformats-officedocument.presentationml.template
.ppsx	application/vnd.openxmlformats-officedocument.presentationml.slideshow
.pptx	application/vnd.openxmlformats-officedocument.presentationml.presentation
.sldx	application/vnd.openxmlformats-officedocument.presentationml.slide
.docx	application/vnd.openxmlformats-officedocument.wordprocessingml.document
.dotx	application/vnd.openxmlformats-officedocument.wordprocessingml.template
.xlam	application/vnd.ms-excel.addin.macroEnabled.12
.xlsb	application/vnd.ms-excel.sheet.binary.macroEnabled.12

These MIME types were added to IIS7 as noted in KB936496.

Second

you will need to edit the xcgi.js file located in the root folder of each disk.

1. Do a search for ppt and rename it to pptx. there should be 2 instances.

Third

you will need to rename all of the ppt file in the MMS_2008\Disk1\assets\slides folder to pptx.

you can use this script to do that

'==========================================================================
' NAME: Renameppt to pptx
'
' AUTHOR: Chris Stauffer
' DATE : 8/20/2008
'==========================================================================

strComputer = "enhbgsccm01"
Strlocation = "F:\MMS_2008\Disk2\assets\slides"
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")

Set colFileList = objWMIService.ExecQuery _
("ASSOCIATORS OF {Win32_Directory.Name='"& Strlocation &"'} Where ResultClass = CIM_DataFile")

For Each objFile In colFileList
    strNewName = objFile.Drive & objFile.Path & objFile.FileName & "." & "PPTX"
    errResult = objFile.Rename(strNewName)
    WScript.Echo strNewName
Next

Enjoy

Chris Stauffer

Server Tracking tool

cstauffer — Tue, 19 Aug 2008 16:42:07 GMT

This tool will allow you to track information about servers that are built. it was created with SMS installer and it takes a little work to get it put together. It can also be altered to ask for additional information.

Server_tracking_Tool

Using SMS to track our Servers

DTE will be able to push this app out to all servers via SMS on a once a month basis or some other undecided schedule. Once a user logs onto a server via direct connect or Terminal Service the application will execute. If the application has never run before the Admin will be prompted with several question. If the admin doesn’t answer the question they will be prompted again.

When the App first starts it will give NON Admins a chance to exit out of the program. This will be done by using these 2 screens.

Once Admin status is determined the admin\ contact will be asked these questions.

Question 1 Question 2

Question 3 Question 4

Once the survey has been completed you will get this screen.

At the bottom of the screen you will be asked:

Is this information Correct?

If you answer yes the script will exit.

If you answer no it will loop though all of the questions again.

Once the program exits it will store this information in the registry so that SMS can pick it up with a small MOF modification. This MOF modification will allow us to create reports on the servers for tracking purposes. This should allow us to know who is running a server in the field. If the information is falsified, DTE will know who the person is that entered the wrong info because that information is also put in the

registry, along with the time of the modification.

DTE will need to decide on a reoccurrence schedule. Once this is done, the SMS staff will setup a loop that will, popup this window the next time it runs.

At the bottom of the screen you will be asked:

Is this information Correct?

If you answer yes the script will exit.

If you answer no it will loop though all of the questions again.

This would allow the SMS Admin the ability to create Reports that looks like this for tracking purposes.

IE Logon script

cstauffer — Tue, 19 Aug 2008 15:24:14 GMT

On the SMS List we were talking about the changes that occured in SCCM for remote control and I suggested that people use a logon script that actually creates a log so that you didnt need to see it run to ensure that things where ok. this script allows you to do just that and it can be troubleshot from Ron’s web console.

This script was created by me a few years back to run as a logon script. It uses IE to display what was happening. Every task creates an entry in a log file on the system.

Attached is the logon script.

Logon Script Logon Script

Then I used the Webconsole to open the log if needed by the helpdesk.

Here is the code for the web console

You will need to put trace32.exe in your remote$ share

then add this button to the list of buttons

‘********************************

‘*******************************

Add this to the bottom of the script where the other button numbers are.

You may need to change the button number if you have more then 21 buttons.

'*****************************************************************************
' Logon Survey

Sub Btnl21_OnClick

Dim CompName,oWshShell

CompName = trim(document.frmMain.txtValue.value)

if len(Trim(CompName)) = 0 then

MsgBox "Please type a Machine Name.",,"SMS 2003 Remote Control"

Else

set oWshShell = CreateObject("WScript.Shell")

Set objPing = GetObject("winmgmts://" & ServerName & "/root/default:PingPoller")

path = "\\{SMSServer}\remote$\Trace32.exe " & "\\" & CompName & "\C$\logonsurvey.txt"

objPing.Trace CompName, "30", "1000", "1", TraceResult, Addresses

if TraceResult <> 0 then

MsgBox "Machine did not respond to ping.",,"SMS 2003 Remote Control"

Else

oWshShell.run path

end If

End Sub

'*************************************************************************************

Enjoy

Chris Stauffer <><

ConfigMgr 2007 Remote Control differences from SMS 2003

cstauffer — Tue, 19 Aug 2008 13:44:00 GMT

There has been a lot of discussion on the email list lately. Unfortunately there is a major difference between SMS 2003 and ConfigMgr 2007. So I put together a document that contains all of the information that i could find on the new tools. I also included the handout that I gave to our Desktop admin that explains how to use RUN-AS and where to find info on the new helpdesk website I put together based on Ron’s web tool

Remote Tools in Configuration Manager

[Topics referencing Configuration Manager 2007 R2 are pre-release documentation and are subject to change in future releases.]

Configuration Manager 2007 remote tools allow you to remotely access and operate client computers in the Configuration Manager 2007 site which have the remote tools client agent components installed. Click the associated link in the following section for detailed information about configuring, managing and using Configuration Manager 2007 remote tools.

In This Section

Overview of Remote Tools
- http://technet.microsoft.com/en-us/library/bb693702.aspx
What's New in Remote Tools for Configuration Manager
- http://technet.microsoft.com/en-us/library/bb693635.aspx
How to Configure the Configuration Manager 2007 Remote Tools Client Agent
- http://technet.microsoft.com/en-us/library/bb680343.aspx
Tasks for Remote Tools
- http://technet.microsoft.com/en-us/library/bb680996.aspx
About the Configuration Manager Remote Control Client Viewer
- http://technet.microsoft.com/en-us/library/bb694029.aspx
About the Windows 2000 Remote Control Client Viewer
- http://technet.microsoft.com/en-us/library/bb632570.aspx
How to Remotely Administer a Client Computer
- http://technet.microsoft.com/en-us/library/bb680628.aspx
Remote Tools Security Best Practices and Privacy Information
- http://technet.microsoft.com/en-us/library/bb693761.aspx
Troubleshooting Remote Tools Using Custom Error Codes
- http://technet.microsoft.com/en-us/library/bb735873.aspx

Chris Stauffer <><

Saddleback Civil Forum for Presidency

cstauffer — Mon, 18 Aug 2008 14:28:09 GMT

As a Government employee I am not allowed to publicly support any government candidate or elected official publicly. So all I will say is that if you did not get a chance to watch this here is another opportunity. I found it to be very informative and I learned new things about the candidates that I did not know before.

Enjoy and be enlightened.

http://saddlebackcivilforum.com/index.html

Watch the forum: Part 1 | Part 2 | Part 3 | Part 4

At the candidates’ request, this two-hour event was held in a non-debate format, and was open to all media. Both candidates also requested that questions be posed exclusively by Warren rather than by a panel or members of the audience. Each candidate did converse separately with Warren for approximately an hour, beginning with Sen. Obama, as determined by a coin toss.

This historic forum will be the only joint event for the two, and the last public appearance for either candidate prior to the two-week hiatus during each party’s national convention.

Sherry’s Script to set ConfigMgr Client's 'Install required updates on a schedule'

cstauffer — Wed, 13 Aug 2008 12:36:41 GMT

Nice work Sherry.

http://myitforum.com/cs2/blogs/skissinger/archive/2008/08/13/script-to-set-configmgr-client-s-install-required-updates-on-a-schedule.aspx

SCCM Checklist

cstauffer — Tue, 12 Aug 2008 00:35:33 GMT

These are tasks usually preformed by SCOM MP for SCCM but incase you don’t have it like me you can at least have an idea of what to check.

Monthly Tasks for Configuration Manager 2007 Management Pack

http://technet.microsoft.com/en-us/library/cc655668.aspx

Weekly Tasks for Configuration Manager 2007 Management Pack

http://technet.microsoft.com/en-us/library/cc655677.aspx

Daily Tasks for Configuration Manager 2007 Management Pack
http://technet.microsoft.com/en-us/library/cc655695.aspx

Verifying WSUS Server Settings

cstauffer — Mon, 11 Aug 2008 16:07:09 GMT

http://technet.microsoft.com/en-us/library/cc708545.aspx

This topic covers typical WSUS Server settings.

Settings for Update File Synchronization and Download

This section covers the following issues which affect update file synchronization and download:

Registry settings
Configuration settings
IIS settings
Permissions

Interesting Live mail error

cstauffer — Thu, 07 Aug 2008 14:24:33 GMT

I just got this error when i tried to check my hotmail.

I am running IE7 and Firefox 3.0x

So why did i get this error?????

Upgrade your web browser

We recommend that you upgrade your web browser so you can get the most out of Windows Live Hotmail. Upgrading should only take a few minutes. To get started, choose one of the browsers below:

If you don’t want to upgrade right now you can still continue to Windows Live Hotmail, but some parts of it may not work and it may not be displayed properly.

New Exams

cstauffer — Tue, 05 Aug 2008 15:01:46 GMT

Find Out What Exams Are Available Now (Worldwide)
Visit Microsoft.com/learning to view a full list of English and localized exams that became available in recent months, including:

•Exam 70-236: TS: Exchange Server 2007, Configuring (Russian)

•Exam 70-502: TS: Microsoft .NET Framework 3.5, Windows Presentation Foundation Application Development (French)

•Exam 70-504: TS: Microsoft .NET Framework 3.5, Windows Workflow Foundation Application Development (Chinese [Simplified], French, Japanese, Spanish)

•Exam 70-630: TS: Microsoft Office SharePoint Server 2007, Configuring (Russian)

•Exam 70-646: Pro: Windows Server 2008, Server Administrator (German)

•Exam 70-656: TS: Microsoft Desktop Optimization Pack, Configuring (Chinese [Simplified], Chinese [Traditional], Italian, Portuguese [Brazil])

Free Second Shot Cert exams available again

cstauffer — Tue, 05 Aug 2008 15:00:21 GMT

Have you gotten your SCCM Cert yet? if not here is your chance to take it and get a second shot free if you don’t do so well.

http://www.microsoft.com/learning/mcp/offers/secondshot/default.mspx

**********************************************************

Register for Your Second Shot Now!

In the real world, you may need more than one chance at certification. This means that if you sign up for the Second Shot offer and you do not pass a certification exam on your first try, you have a free, second chance to pass it.

Microsoft Certifications recognize and validate your real-world IT skills, support you with access to unique resources that help you stay up to speed on the latest Microsoft technologies, and help you succeed in your IT career by developing skills that are relevant to your chosen field.

This offer is available for a limited time, so be sure to register now.

• Register for the Second Shot offer today

**********************************************************

Microsoft System Center

MCTS: For IT professionals who want to demonstrate their deep technical skills in one of two key System Center technologies: Configuration Manager or Operations Manager

Chris Stauffer <><

Live Writer Test

cstauffer — Fri, 01 Aug 2008 17:27:38 GMT

This is my first blog test from Live Writer.

So far this is nice now will it post correctly?

ConfigMgr 2007 Maintenance check list and Scripts

cstauffer — Wed, 30 Jul 2008 19:31:00 GMT

I put together an excel spreadsheet that is similar to the one that was created for SMS 2003. I also included 2 scripts that can be used to gather some of the information needed to fil in the spreadsheet. One script is just a VB script that someone wrote that will check the free space on a system. You will need to edit it to get the information. The other script is the Powershell Script that I posted the other day that will give you a lot more info in a txt file.

This is based on http://technet.microsoft.com/en-ca/library/bb680757(TechNet.10).aspx

Enjoy

Chris Stauffer

Soldiers Angels - Blankets of Hope / Blankets of Belief

cstauffer — Tue, 29 Jul 2008 13:59:00 GMT

As some of you know I am a Den leader for my son's cub scout den. We decided last November to make 3 blankets for the Blankets of Hope for wounded soldiers. These Blankets are hand made, we used a white piece of cloth divided into 9 blocks. Eight of the blocks where filled in with drawings from the boys with fabric markers and the center square was embroidered with the names of the boys involved with the project. Then the sheet was sown to a very soft and warm Felt. These Blankets are finally back from the embroiders after some set backs and will be sent out in the next few weeks. Along with a card and a way to get in tough with the Den in case the soldier the Blanket reaches wants pen pals. This was a great project for our boys it allowed them to do something simple but greater then they will know and understand until they are older. Here is an example of one of the 3 blankets. We hope that they Find there way to Heroes that need to know that they are thought of and believed in.

Remember that if it where not for our MEN and WOMEN in uniform we would not have the freedoms that we treasure.

OK so now you wonder how can you help. There is a new project called Blankets of Belief.

*************************************************************************************************************************

This winter, an estimated 180,000 U.S. military personnel will be serving in Iraq, Afghanistan, Kuwait, and other locations around the world, in combat environments or in support of combat operations. Some will be on their 3rd or 4th deployments--spending yet another Holiday away from the loving arms of family and friends. We want them to know that they are remembered, that we are thinking of them during the winter Holiday Season, and that we are grateful for their service. Since we can't wrap our arms around them in person to show how much we love and appreciate them, our goal is to wrap all 180,000 of our deployed service members in blankets representative of our support and faith in them, Blankets of Belief. The Blankets will be a physical reminder that they are not alone during the Holidays. When deployed service members receive a Blanket of Belief, they will know that somebody back home remembered them, that somebody labored over a handmade blanket with thoughts of them and hopes or prayers for their strength and comfort.

************************************************************************************************************************

This group is sponsored by the Boy scouts and Girl Scouts of America.

So be a Soldiers Angel and help by making a few Blankets with what ever group you are part of whether is be one of the scout groups or church or vet group. Even if you dont support the war, remeber that these men and women volenteered to server their country and they are simply following orders. Those of us that served this nation in time of peace and war know the great sacrifice that military members make.

Special Thanks To Viki S. for bringing this idea to our attention and for taking time out of her schedual to assist in creating these blankets.

Thanks,

Chris Stauffer <><

New Cuil Web Search Engine already overloaded

cstauffer — Mon, 28 Jul 2008 19:06:00 GMT

Wow i broke it on my first search "Chris Stauffer myitforum"

http://www.cuil.com/

We’ll be back soon...

Due to overwhelming interest, our Cuil servers are running a bit hot right now. The search engine is momentarily unavailable as we add more capacity.

Thanks for your patience.

PowerShell Resources

cstauffer — Mon, 28 Jul 2008 18:32:00 GMT

Now that I have had a chance to play with PowerShell V1, I though I would do a blog on different resources that I found usefull in my learning PowerShell. I am still a beginner but everybody has to start somewhere

So here you go:

The Script Center Script Repository: Sample Windows PowerShell Scripts

http://www.microsoft.com/technet/scriptcenter/scripts/msh/default.mspx?mfr=true

Scripting with Windows PowerShell

http://www.microsoft.com/technet/scriptcenter/hubs/msh.mspx

Microsoft® Windows PowerShell^TM Step By Step (The book I used to learn PS)

http://www.microsoft.com/MSPress/books/10329.aspx

Free Windows PowerShell workbook: server administration

http://download.microsoft.com/download/4/7/1/47104ec6-410d-4492-890b-2a34900c9df2/Workshops-EN.zip

Windows PowerShell Graphical Help File

http://www.microsoft.com/downloadS/details.aspx?FamilyID=3b3f7ce4-43ea-4a21-90cc-966a7fc6c6e8&displaylang=en

Windows PowerShell Tip of the Week

http://www.microsoft.com/technet/scriptcenter/resources/pstips/default.mspx

PowerShell Team Blog

http://blogs.msdn.com/powershell/

PowerGui (Best Free Powershell Tool available in my opinion)

http://www.powergui.org/index.jspa

Zone Alarm Fix release for patch MS08-037

cstauffer — Thu, 24 Jul 2008 15:19:00 GMT

Microsoft released an article recognizing the issue with Zone alarm.

http://support.microsoft.com/kb/953230

originally mention on my blog a few weeks ago.

http://myitforum.com/cs2/blogs/cstauffer/archive/2008/07/09/kb951748-breaks-zone-alarm-firewall.aspx

In response to the issue Zone alarm has released a new version.

http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html

Workaround to Sudden Loss of Internet Access Problem

Date Published : 8 July 2008

Date Last Revised : 14 July 2008

Overview : Microsoft Update KB951748 is known to cause loss of internet access for ZoneAlarm users on Windows XP/2000. Windows Vista users are not affected.

Impact : Sudden loss of internet access

Platforms Affected : ZoneAlarm Free, ZoneAlarm Pro, ZoneAlarm AntiVirus, ZoneAlarm Anti-Spyware, and ZoneAlarm Security Suite

Recommended Actions -

Download and install the latest versions which solve the loss of internet access problem here (English only):

Once you have installed the new version of your product go to "start > windows update" and re-install the Microsoft patch.

ZoneAlarm Internet Security Suite
ZoneAlarm Pro
ZoneAlarm Antivirus
ZoneAlarm Anti-Spyware
ZoneAlarm Basic Firewall
- or follow the directions below.

According to Harry Waldron there are exploits in the wild so get things patched ;-)

http://myitforum.com/cs2/blogs/hwaldron/archive/2008/07/24/new-dsn-exploits-are-being-developed-patch-your-servers-now.aspx

Chris Stauffer <><

ConfigMgr and SMS Powershell Script (Beta 1.3)

cstauffer — Fri, 18 Jul 2008 16:38:00 GMT

I put together this PS script to check information on my ConfigMgr 2007 Servers. It can also be used on the SMS 2003 servers. Please review it and let me know if anything needs changed or if you would like to see anything added.

Please be gental this is my first real PS script since learning PS last week so there are bound to be easier and faster ways to do what i am doing but i havent learned them yet so if you have input please keep that in mind.

Just save the attached file as SCCM_Info1.3.ps1 on your c drive

If you have powershell installed on you system you can fire this off by using this command at the command prompt:

powershell.exe -noexit c:\SCCM_Info1.3.ps1

Thanks

Chris Stauffer <><

My First PowerShell Script

cstauffer — Fri, 11 Jul 2008 12:09:00 GMT

Here is my first powershell script :-P

$strString = "Hello World"
$i=100;do {$i--; "$i"} until ($i -eq 0)
""
write-host $strString -ForegroundColor red

Microsoft Security Bulletin Major Revisions MS08-037 for Zone Alarm

cstauffer — Fri, 11 Jul 2008 11:42:00 GMT

Looks like MSFT released a revision for the patch that breaks Zone Alarm.

http://myitforum.com/cs2/blogs/cstauffer/archive/2008/07/09/kb951748-breaks-zone-alarm-firewall.aspx

********************************************************************
Title: Microsoft Security Bulletin Major Revisions
Issued: July 10, 2008
********************************************************************

Summary
=======
The following bulletins have undergone a major revision increment.
Please see the appropriate bulletin for more details.

* MS08-037 - Important

Bulletin Information:
=====================

* MS08-037 - Important

- http://www.microsoft.com/technet/security/bulletin/ms08-037.mspx
- Reason for Revision: V2.0 (July 10, 2008): Bulletin revised to
    inform users of ZoneAlarm and Check Point Endpoint Security
    of an Internet connectivity issue detailed in the section,
    Frequently Asked Questions (FAQ) Related to this Security
    Update. The revision did not change the security update files
    in this bulletin, but users of ZoneAlarm and Check Point
    Endpoint Security should read the FAQ entries for guidance.
- Originally posted: July 8, 2008
- Updated: July 10, 2008
- Bulletin Severity Rating: Important
- Version: 2.0

Powershell Scripting

cstauffer — Thu, 10 Jul 2008 19:32:00 GMT

Since I just finished reading the book for powershell that I got at MMS I will be adding Powershell scripts to my blog.

I hope to have my first SMS/SCCM Script tomorrow provided it is quiet enough for me to complete it.

kb951748 Breaks Zone alarm firewall

cstauffer — Wed, 09 Jul 2008 23:50:00 GMT

Zone alarm breaks after installing kb951748. I personally had this happen at home so i have fully tested the solution.

If you lower the internet security to Medium you can get out to the internet but you are not fully protected by your firewall. If you simply uninstall kb951748 and reboot your system you will be back in buisness. Also remeber if you have your patch setting to auto patch you need to change it to either download and alert or just alert so the patch doesnt re-install. Once MS has a solution i will update this post.

This Zone alarm forum post tells how to fix the issue.

http://forums.zonelabs.com/zonelabs/board/message?board.id=access&message.id=33853

http://forums.zonealarm.org/zonelabs/board/message?board.id=win_za_msgs&message.id=18667

I happen to disagree with part of the problem. The only patch that i found that needed to be removed was kb951748. After rebooting and setting my security back to high everything is working.

Chris Stauffer <><

Check for Disables Account with Ron's webconsole

cstauffer — Wed, 09 Jul 2008 14:51:00 GMT

This script will allow you to check for disabled accounts in AD. In our enviornment we are not allowed to reenable an account but we can check to see if it is disables and request that it be re-enabled though remedy. If the account wasn't disabled because of a security issue or a termination then the Domain team will re-enable it.

So this sub script simply allows you to check and see is a user is disabled.

open the Admin.asp file in notepad and add the following to the end of the text just before the </script> line

'*******************************************************************

'Check For Disabled account

Sub Btn4_OnClick
Dim User
Dim UserName
UserName = InputBox("Enter the Username you want to change the password for :","UserName","")
Set User = GetObject("WinNT://" & UserDomain & "/" & UserName & ",user")
IsAccountDisabled = User.AccountDisabled
If IsAccountDisabled = True Then
MsgBox("Account disabled")
End If
If IsAccountDisabled = False Then
MsgBox("Account enabled")
End If
End Sub

'****************************************************************************

Then to to line 18 it should look like this

Change it to look like this

or you can just replace the whole page with the file i have attached. be sure to change the domain to your domain.

Enjoy

Chris Stauffer <><

SCCM server trying to get to 169.254.158.173 port 34571

cstauffer — Wed, 09 Jul 2008 14:33:00 GMT

My SCCM SP1 server was trying to get to 169.254.158.173 port 34571. This didnt make much since because 169.254.0.0 is the default subnet for a miss configured DHCP address.

After some help from the guys on the MSSMS/ConfigMgr group we where able to determine that the IBM ServeRaid Manager agent was actually sending out this loopback check. I changed it to 127.0.0.1

Here are the details incase you run across it on a firewall scan.

http://publib.boulder.ibm.com/infocenter/eserver/v1r2/index.jsp?topic=/serveraid_5.20/fqy0_cagntcfg.html

Chris Stauffer at myITForum.com

Live Writer Expiration issue (resolution)

Technical Preview Triggers False Expiration

SCCM Supplemental Reports

See Also

Tasks

Concepts

SCCM R2 Eval Posted

R2 is RTM But…

What's New in Configuration Manager 2007 R2

Force clients to check-in for advertisements

MMS 2008 DVD in a non office 2007 world

Server Tracking tool

IE Logon script

ConfigMgr 2007 Remote Control differences from SMS 2003

In This Section

Saddleback Civil Forum for Presidency

Sherry’s Script to set ConfigMgr Client's 'Install required updates on a schedule'

SCCM Checklist

Verifying WSUS Server Settings

Settings for Update File Synchronization and Download

Interesting Live mail error

Upgrade your web browser

New Exams

Free Second Shot Cert exams available again

Register for Your Second Shot Now!

Live Writer Test

ConfigMgr 2007 Maintenance check list and Scripts

Soldiers Angels - Blankets of Hope / Blankets of Belief

New Cuil Web Search Engine already overloaded

We’ll be back soon...

PowerShell Resources

Zone Alarm Fix release for patch MS08-037

ConfigMgr and SMS Powershell Script (Beta 1.3)

My First PowerShell Script

Microsoft Security Bulletin Major Revisions MS08-037 for Zone Alarm

Powershell Scripting

kb951748 Breaks Zone alarm firewall

Check for Disables Account with Ron's webconsole

SCCM server trying to get to 169.254.158.173 port 34571