in

myITforum.com

This Blog

Syndication

SCUG at myITforum.com

August 2008 - Posts

  • SCCM 2007 R2 Releases !

    R2 Releases! – with Updated Documentation The Release 2 add-on for Configuration Manager 2007 SP1 is released today. Keep an eye on it being announced on the System Center Configuration Manager 2007 Web site with details of how to download it. R2 is available free of charge to customers who have Software Assurance, and it comes with our updated documentation help file (SMSv4.chm). However, everybody can access this latest documentation online from the TechNet Configuration Manager documentation library...(read more)
  • SCCM : Customizing the hardware inventory to report a custom registry file.

    Configuration Manager 2007 inventories hardware information about clients based on the contents of two Managed Object Format (MOF) files stored on the primary site server in the <ConfigMgr install directory>\inboxes\clifiles.src\hinv directory. The two MOF files used by hardware inventory processes are the Configuration.mof and SMS_def.mof MOF files. About the Configuration.mof File : The Configuration.mof file is used to define the data classes to be inventoried by the hardware inventory client...(read more)
  • ACS noise filter

    When you install ACS you will get a ton of events! Not all events are relevant for your environment. Securevantage has written a nice noisefilter guide. This guide introduces noise filters for Windows Servers 2000 & 2003 Security Events. Also interesting is the Secure Vantage Security Auditing Reference List : Over 1300 Windows security events and settings with interactive links to Randy Franklin Smiths online security wiki. The Service Account Authentication Success filter provides an example...(read more)
  • enable audit collection on opsmgr agents

    Depending on your auditing needs, you might have several hundred to thousands of computers from which you want to collect audit events. By default, the service needed for an agent to be an Audit Collection Services (ACS) forwarder is installed but not enabled when the Operations Manager agent is installed. After you install the ACS collector and database you can then remotely enable this service on multiple agents through the Operations Manager console by running the Enable Audit Collection task...(read more)
  • How to Deploy Operations Manager 2007 ACS Reporting

    Audit Collection Services (ACS) reporting can be installed in two configurations. A Microsoft SQL Server 2005 Reporting Services (SRS) SP1 or SP2 instance with Operations Manager Reporting already installed. A benefit of this is the ability to view ACS Reports in the Operations Console. A SRS instance without Operations Manager Reporting installed. The installation procedures for ACS Reporting do not differ, but the application of access control is different. By deploying ACS Reporting on the same...(read more)
  • Installing Audit Collection Services ( ACS )

    I'm going to make some procedures for ACS. First I'm going to install the audit collection services, after that I'm going to deploy the ACS reporting and last but not least enable the acs forwarding on the agents. I'm going to use the info on the technet site as a basis. The ACS database runs on Microsoft SQL Server 2005. The Audit Collection Services Collector Setup wizard creates the ACS database on an existing installation of Microsoft SQL Server 2005. To complete the installation...(read more)
  • SCCM : How to enable asset intelligence in SP1

    Within SCCM SP1 there is a new branch called "Asset Intelligence". You want this to work within your company , How do we do it . First of all we need to enable the asset intelligence into the inventory :

    1.To enable Asset Intelligence, you need to open the SMS_DEF.MOF file. Scroll to the bottom and work your way up and enable the 11 Asset Intelligence classes. By default they are set to False, change them to True. Save the .mof file and it will replicate to the other servers in the hierarchy after some time. You will now see new classes in Resource Explorer. Also, you will also then be able to run the Asset intelligence reports and get information. Without editing the .mof file, you cannot benefit for ANY of the reports on Asset Intelligence. 

    2. In SCCM, there is a new .mof file called Configuration.mof in the same folder as the sms_def.mof file. This .mof file controls several registry keys and also native mode settings. However, it also controls CAL inventory for clients. This can also be seen in the reports for Client Access License reports. By default, at the bottom of the .mof file, you will see a section called Instance of CCM_CALTRACKING. By default this is set to zero (0). You want to change it to 3. There is also a Set CALCollectionFrequency which by default is 7 days. You can leave that alone if you want to, but in a lab or in an instance where you want CAL reports to show up more often, you can change the number 7 to any other number of days, such as 2 if you like. Once again, once you save this file, it will replicate to your other site servers and you can now report on CAL's used by clients.

     After that you will need to install a Asset Intelligence Synchronization Point , but read further below :

    To be eligible for receiving the certificate, you need to have an active SA contract with Microsoft for SCCM 2007. It doesn't matter whether it covers client or server. The fact that you have SA for SCCM qualifies you for this benefit. If you do not have SA, you will not be able to deploy the new AI sync point and will need to continue getting bulk updates.You will need to ping a member of your account team (e.g. TAM or TS) and they will be able to get the certificate and send it to you in mail. If your account team is unaware of this internal site, please have them send mail to the distribution alias called "get ai cert". Please note that this secure secure alias automatically rejects all external mail and is for internal use only @ microsoft

     Hope it helps

     Best regards ,

     Kenny Buntinx.

     

  • SCCM : Software inventory failing due to symantec

    Today I was working at a customer that is still using symantec ghost instead of the OSD from SCCM .They are on the way of going from ghost to OSD and SCCM but during the inventory scan we have noticed some issues with software inventory.

    The culprit for this problem is Symantec Ghost. When imaging a workstation, certain version of ghost drop a temporary file that is not removed: ~0000.exe This file is located here:

    C:\Documents and Settings\All Users\Application Data\Symantec\Ghost\AutoInstall\Installed Applications\~0000.exe

    This file is dated with the year 1601. Apparently the Microsoft SCCM developers forgot to account for the all-to-common scenario of handling files that were created during the forming of Europe.

    Once this file was either removed or skipped and a full software inventory was run, the issue was resolved .

    There is an easy way of skipping the file during the software inventory.Create a blank text file & rename it to Skpswi.dat, exclude the file and make sure you check the box to make it hidden before deploying.
    Important note : A not so widely known fact is that software inventory will only exclude the directory if Skpswi.dat is hidden. ( Credit to Kim Oppalfens for this one )

    Article From Symantec:

     http://service1.symantec.com/SUPPORT/on-technology.nsf/docid/2008031311003660

    Hotfix for SCCM:

    http://support.microsoft.com/kb/950653/en-us

    Regards ,

     

    Kenny Buntinx

  • Microsoft.interop.security.azroles.dll error when installing opsmgr

    Yesterday I wanted to install my second management server on a windows 2003 R2 SP2 machine. I installed all the requirements and ran the prerequisite checker. I was really astonished! It was the first time I saw this error and didn't understand it! http://support.microsoft.com/default.aspx?scid=KB;[LN];937292 This problem occurs if the primary interoperability assembly (Microsoft.interop.security.azroles.dll) is no longer registered in the global assembly cache after you install Microsoft Windows...(read more)
  • Join us for Security Auditing & ACS Optimization

    Join us for Security Auditing & ACS Optimization Learn how your organization can maximize their investment in System Center to support security and regulatory compliance auditing requirements using Operations Manager and the Audit Collection Service (ACS). This is a great opportunity to learn about the latest in partner solutions that extend ACS to provide centralized security event management featuring ACS administration, security alerting, data archiving, multi-collector reporting, syslog event...(read more)
  • Opsmgr agent grayed out on domain controller

    Last week I deployed my scom agents on my domain controllers. The installation was succesful and of course I checked the agent proxing checkbox in the administration console. After 30 minutes I checked the status of my agent and it was grayed out!! So I looked at the event log of my dc and saw this error Event Type: Error Event Source: HealthService Event Category: Health Service Event ID: 7017 Date: 4/07/2008 Time: 11:49:36 User: N/A Computer: Description: The health service blocked access to the...(read more)
  • How to Enable Reporting in Virtual Machine Manager 2007

    This week I imported the virtual management pack in our opsmgr. Now I wanted to see my Opmsgr reports from my vmm 2007 console.

     

    Based on the info on technet this is the procedure the configure your vmm for reporting:

    Use the following procedure to enable reporting in Virtual Machine Manager after you deploy the Server Virtualization Management Pack for System Center Operations Manager 2007, set up your report server in Operations Manager, and have the Operations Manager administrator add you to the Report Operator role in Operations Manager. For more information about deploying the Management Pack, see Setting Up Reporting.

    Until you perform this procedure, Reporting view is not displayed and reports are not available in the Virtual Machine Manager Administrator Console.

    To enable reporting in Virtual Machine Manager

    1. In Administration view, click Settings in the navigation pane, and then, in the results pane, click Reporting Settings.

    image

    2. In the Actions pane, under Settings, click Modify.

    3. To enable reporting, in the Reporting Settings dialog box:

    a. Select the Enable reporting check box.

    b. Specify the URL for the Operations Manager report server in the following format: http://<OpsMgrReportServer>/reportserver, where <OpsMgrReportServer> is the name of your report server and /reportserver is the default name of the report server virtual directory.

    image

    4. To add Reporting view to the Administrator Console, close and reopen the console.

    5. To display Reporting view, click the Reporting button beneath the navigation pane.

    6. To display the Virtual Machine Manager reports, click Reports in the navigation pane.

    The results pane lists the Virtual Machine Manager reports. If you do not see any reports, you might not have been added to the Report Operator role in Operations Manager. Contact your Operations Manager administrator to arrange this.

     

    image  image  image

    image image

     

     

    Grtz,

    Alexandre Verkinderen

    http://scug.be/blogs

  • Why Is Microsoft Developing A Service Desk Product?

     

    Paul Ross

    Paul Ross and Travis Wright has given a session at teched 2008 on service manager.This session provides an update on the project and the timelines for the next beta and final release!

    That's really the tool we're all waiting for!

     

    Watch the session

     

     Greetz,
    ALexandre Verkinderen

    http://scug.be/blogs/

     

     

  • Customize the SCCM 2007 console - deep dive - 2

    Hi All,

    Part 1 of our console customizations explained how to add xml-file based actions to the Configmgr admin console, more specifically we looked at the "Executable" class. I promised to continue my console - deep dive posts with the group and report actions, so let's just dive into it.

    Let's start by looking at a sample report action class xml file. The report class opens a report in the details pane of the SCCM console, if you want to open a report in a new browser window, then use the Executable class and use the url of the report as the executable.

    <ActionDescription Class="Report" DisplayName="Test Action (report)" MnemonicDisplayName="Mnemonic" Description="Description">
        <ReportDescription Id="05874720-1D08-4CF7-B182-5F9D065BEAE5"></ReportDescription>
    </ActionDescription>

    The xml file starts with the actiondescription element just like the executable sample we saw in part 1. But this time the class attribute contains a value of "Report" instead of "executable". The displayname and mnemonicdisplayname attributes are again identical to their counterparts we talked about in the Executable class sample in part 1, and the description attribute is pretty self-explanatory.

    On the next line of the xml we find the reportdescription element which only has a single attribute, "Id". The Id is the Reportguid you can find in the sms_report class. Unfortunately the reportguid isn't exposed in the Configmgr admin console out-of-the-box, but you can add that yourself. Just open your Configmgr admin console, navigate to the Reporting \ Reports section and click the View menu. In the view menu of the SCCM console you'll see add/remove columns in which you can add the report guid column.

    That's about it for the Report class xml's and as with the executable sample, the only thing that is left to do is to copy it to the Program Files\Microsoft Configuration Manager\AdminUI\XmlStorage\Extensions\Actions\guid subfolder. Where guid is the guid of the node in the console where you want the report option action to appear.

     

    Now let's look at a group sample xml, which does nothing more than grouping multiple actions in a sub-menu in the action pane, or the right-click contect-menu of the SCCM console.

    <ActionDescription Class="Group" DisplayName="New Group Name" MnemonicDisplayName="MnemonicNewGroupName" Description="NewGroupNameDescription">
      <ActionGroups>
        <ActionDescription Class="Executable" DisplayName="Test Action (execute)" MnemonicDisplayName="A test item" Description="A test item Description">
          <Executable>
            <FilePath>http://go.microsoft.com/fwlink/?LinkId=67307</FilePath>
          </Executable>
        </ActionDescription>
        <ActionDescription Class="Report" DisplayName="Test Action (report)" MnemonicDisplayName="Mnemonic" Description="Description">
          <ReportDescription Id="05874720-1D08-4CF7-B182-5F9D065BEAE5">
          </ReportDescription>
        </ActionDescription>
      </ActionGroups>
    </ActionDescription>

    Our Class attribute this time is "Group" the displayname is the name you'll see in the Action pane root, or context-menu. Then we start the Actiongroups element which starts and ends the list of actions. As you can see, there is nothing much to the Group class.

    So, that's it for the second part of this deep dive theme.

     

    --

    Enjoy.

    "Everyone is an expert at something"

    Tags van Technorati: ,,


    Kim Oppalfens - Sms Expert for lack of any other expertise
    Windows Server System MVP - SMS
    http://www.scug.be/blogs/sccm/default.aspx

    http://www.linkedin.com/in/kimoppalfens

  • SCCM 2007 performance and scalability whitepaper

    Hi All, The Configmgr product team has released a whitepaper on performance and scalability with SCCM 2007 rtm and sp1 configurations. It contains hardware recommendations for different sizes of organizations and answers to common performance and scalability questions. All of this data is a result of strss test results. You can download the whitepaper at the SCCM website: http://download.microsoft.com/download/4/b/9/4b97e9b7-7056-41ae-8fc8-dd87bc477b54/Sample%20Configurations%20and%20Common%20Performance%20Related%20Questions.pdf PS: This was posted from a managed windows mobile 6.1 phone, which has gone through the testing process and is now a supported mobile client for both SCCM 2007 rtm and sp1 versions. -- Enjoy Kim Oppalfens
    Posted Aug 11 2008, 12:01 PM by SCUG.be
    Filed under: , ,
More Posts Next page »
Copyright - www.myITforum.com, Inc. - 2010 All Rights reserved.
Powered by Community Server (Commercial Edition), by Telligent Systems