How to Set AD Security Rights for the System Management Container

By Garth Jones Once the System Management container exists you can apply permissions to it; it doesn’t matter how the container was originally created (see my blog post from yesterday). When applying permissions to the System Management container, I recommend using a security group. If you are not using a security group for your server(s), then instead use your server...

Read More»

Creating the System Management Container

By Garth Jones There are two schools of thought about the best way to create the System Management container. The first school of thought recommends that the Active Directory (AD) Administrator creates the System Management container and then permissions are applied to it. However, it is the second school of thought which I prefer. In this option, the AD Administrator...

Read More»

Update SQL Always On Cluster with ConfigMgr and Powershell

How to update a cluster with a cluster-ignorant tool I’ve recently been tasked to create a process to patch SQL Always On Availability Groups (I guess calling it a cluster is not really accurate?!) with just the tools I had available, no new implementation of stuff. This meant to do a proper patching cycle (Operating System AND SQL) with graceful failovers of SQL roles from one node to the other, no data loss. So, quick inventory; what did I have? ConfigMgr 2012 R2 PowerShell Phew, PowerShell, you can do a lot with PowerShell. ConfigMgr, mhhh, ConfigMgr can do Software Updates and execute stuff on machines when it is told to … Continue reading

Read More»

McAfee Anti-Virus Software and SCCM

By Garth Jones The following two issues involving McAfee software keep coming up on all of my clients that use McAfee and any version of Configuration Manager. 1) DISM.exe generates an Error: 5 or Access Denied when VSE 8.8 Access Protection is enabled https://kc.mcafee.com/corporate/index?page=content&id=KB76867 2) Microsoft SMS Agent Host service (ccmexec.exe) triggers the Access Protection rule: Prevent termination of McAfee...

Read More»

ConfigMgr evaluation expired – what now?

I just rescued myself out of a pretty embarrassing situation… My home lab is managed by ConfigMgr and I am using the eval version for it, all good so far. System Center 2012 eval versions are valid for 180 days, after that you either need to reinstall them or add a license key, whichever you like.   How to add a license key to Configuration Manager post install Adding the license key to ConfigMgr post install is pretty easy. Just run the setup.exe from your local ConfigMgr Installation directory. DO NOT use the installation media, it won’t work! Choose “Perform Site Maintenance or reset this site”: The next page normally … Continue reading

Read More»

UI++ 2.2.0.0 Released

I’m still actively working on improving UI++ and adding features and functionality and thus, I bring you version 2.2.0.0. Based on feedback and production testing, I’m happy to call version 2.2.0.0 a final version (and thus no longer in beta). Download the latest version on the UI++ page. What’s New: Updated and reorganized the documentation a bit Added extended App Tree capabilities Default items Required items Hidden items Included items On-demand task sequence variable dump to a text file Large sizes for the Input and AppTree action dialogs Use of…read more

The post UI++ 2.2.0.0 Released appeared first on ConfigMgrFTW.

Read More»

Extracting the User Name From a Computer

By Garth Jones This question was asked in the Microsoft TechEd forum, “How do I get the user name from the PC name when the PC name has two different formats (XX-XX-XXX-XXXXXXX-X and XX-XX-XXX-XXXXXXX)?” In this particular case an extra character was added to certain PCs to indicate that they were rebuilt in order to avoid duplicate PC names in...

Read More»