Overrides not visible in SCCM Console

I have SCCM2007R2 en FEP2010 console installed on my management PC (Windows 7 enterprise 64-bit). I Also have the FEP2010 client installed. Now I can not see the Overrides in the FEP Policies I defined in the Antimalware tab on the SCCM server.
I'm getting a message instead which states that I have not installed the FEP client or that the client is not up to date. But the client is installed and up to date. All the other screens are working fine, just not the overrides.
Windows 7 rulez!

This is old post and there have been several changes in FEP, now the successor of FEP is System Center Endpoint Protection (SCEP) and several things been improved. Try reproduce your issue in SCEP and if problem persist, please post it as a new question.

Similar Messages

Servers not visible in admin console

Hello,
we have admin server and one managed server (soa_server1) up and running, but for some reason they are not visible in admin console Environment -> Servers. The list is empty...
Any idea why admin console cannot see these servers?
Can this be fixed any other way than recreating the domain?
As a consequence jdbc datasource cannot be created. Testing the database connection succeeds but after that setting the target cannot be done.
We have weblogic 10.3.3.
regards, Matti

Hello,
we rebooted the RedHat EL5 machine we have weblogic installed, after reboot Servers are visible as they should and datasource targeting for soa server succeeds.
In the same machine there's Oracle SOA Suite 11g in one domain (AdminServer, soa_server1), and Oracle Service Bus in another domain. It is a mystery why things did not work before reboot.
Thank you for the ideas how to debug and fix the problem.
regards, Matti

Problem with Out of Band Discovery resulting with Out of Band features not available in SCCM console for computers with provisioned AMT device

Hi,
We configured the Out of Band component, but are using Intel SCS RCS to provision AMT devices remotely. The remote configuration process with Intel SCS works fine; we are able to connect to the AMT web UI and we can use a free KVM tool to manage the computer
remotely.
The AMT devices are configured with AD integration, so an object is created for each of them in a specific OU. Also, an AD group is added to the AMT devices so remote PT Administration permission is granted to it. This group includes the ConfigMgr Site
Server account, the account of the server running the Out of Band Service Point and my own user account.
This configuration seems OK since when connecting to the AMT web UI, I use Windows Integrated authentication with my user account and can manage the device successfully.
So the only step remaining is running the OOB discovery to enable Out of Band features for the computers in the SCCM console. We want to use the ConfigMgr OOB console. I right-click a computer or a collection and launch the AMT discovery. I check the OOB
server log, I don't see errors; the OOB service point connects to the AMT device and discover a status of 4, which is Externally provisioned, as expected. The problem is the AMT Status, AMT Version and Provisioned AMT fields for the computer in the ConfigMgr
console doesn't get updated, even after doing display refresh.
Here's the amtopmgr.log (I changed computer name and IP address information to protect client privacy) :
General Worker Thread Pool: Work thread 364 started SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:25 364 (0x016C)
Discover COMPUTERA using IP address 192.168.12.7 SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:25 364 (0x016C)
AMT Discovery Worker: There are 1 tasks in pending list SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:25 2792 (0x0AE8)
AMT Discovery Worker: Wait 20 seconds... SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:25 2792 (0x0AE8)
AMT Discovery Worker: Wakes up to process instruction files SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:25 2792 (0x0AE8)
AMT Discovery Worker: There are 1 tasks in pending list SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:25 2792 (0x0AE8)
AMT Discovery Worker: Wait 20 seconds... SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:25 2792 (0x0AE8)
DoPingDiscoveryForAMTDevice succeeded. SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:25 364 (0x016C)
Flag iWSManFlagSkipRevocationCheck is not set. SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:25 364 (0x016C)
session params : https://COMPUTERA.contoso.com:16993 , 11001 SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:25 364 (0x016C)
DoWSManDiscovery succeeded with user name: admin. AMTStatus = 1. SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:32 364 (0x016C)
Start Kerberos Discovery SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:32 364 (0x016C)
Flag iWSManFlagSkipRevocationCheck is not set. SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:32 364 (0x016C)
session params : https://COMPUTERA.contoso.com:16993 , 484001 SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:32 364 (0x016C)
DoKerberosWSManDiscovery succeeded. AMTStatus = 4. SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:32 364 (0x016C)
Discovery to IP address 192.168.12.7 16 15:16:32 364 (0x016C)
CSMSAMTDiscoveryTask::Execute, discovery to STI17259CPCO succeed. AMT status is 4. SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:32 364 (0x016C)
CSMSAMTDiscoveryTask::Execute - DDR written to E:\SMS\MP\OUTBOXES\ddr.box SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:32 364 (0x016C)
CStateMsgReporter::DeliverMessages - Queued message: TT=1201 TIDT=0 TID='Fill Machine Property' SID=1 MUF=0 PCNT=5, P1='COMPUTERA' P2='' P3='COMPUTERA.contoso.com' P4='' P5='' SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:32 364 (0x016C)
CStateMsgReporter::DeliverMessages - Created state message file: E:\SMS\MP\OUTBOXES\StateMsg.box\6heghx71.SMX SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:32 364 (0x016C)
CStateMsgReporter::DeliverMessages - Queued message: TT=1201 TIDT=0 TID='Unspecified' SID=10 MUF=0 PCNT=1, P1='COMPUTERA.contoso.com' 16 15:16:32 364 (0x016C)
CStateMsgReporter::DeliverMessages - Created state message file: E:\SMS\MP\OUTBOXES\StateMsg.box\rmit91js.SMX SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:32 364 (0x016C)
General Worker Thread Pool: Succeed to run the task COMPUTERA.contoso.com 16 15:16:32 364 (0x016C)
General Worker Thread Pool: Work thread 364 has been requested to shut down. SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:32 364 (0x016C)
General Worker Thread Pool: Work thread 364 exiting. SMS_AMT_OPERATION_MANAGER 2014-06-16 15:16:32 364 (0x016C)
The Management Point is up and running.
Any suggestion or advice is welcomed!
Thank you
Patrick

I found something interesting on this problem, it seems the OOB discovery process is working fine, but for an unknown reason, the site server is not receiving the information from the OOB Service Point to update the AMT Status of the client in the SCCM
database.
The log tells me that a DDR file is created to be sent to the site server. When looking into the SMS\MP\Outboxes\ddr.box folder, I see about 50 DDR files, the oldest one is dated when I started testing OOB discovery.
So the server is unable to send the files to the site server.
Also, since I started this thread, I noticed another issue that could be related to this problem. The same server is also holding the State Migration Point role, it is working fine, but when doing USMT operations, the status of the computer association is
not updated in the console (In Progress, Completed, missing USMT store path, etc.). When looking into the SMS folder on the server, I see a big backlog of SVF files containing information related to the SMP.
I looked into the log files, but didn't find the errors yet to explain this.
The computer account of the server is a member of the SMS_SiteSystemToSiteServerConnection_Stat_XXX group on the site server.
Note that status messages are being sent successfully, I see them in the Monitoring node of the console under Component State, and there is no backlog in the SMS\MP\Outboxes\statemsg.box folder.
Tnx for your help
Patrick

Default Web Application is not visible in Weblogic Console

We are using Weblogic 5.1.0 SP7
          We moved our Application from the Implicitly Defined Default Web
          Application which is configurated by the
          weblogic properties to a Web Application. Because we don't want to
          change any URL in our Application, we
          decided to deploy it as Explicitly Defined Default Web Application.
          By this we recordniced that the weblogic.httpd.defaultWebApp property
          worked not that way descibed in the
          Weblogic Documentation. You have to write the path to the WebApp not the
          name!
          So we have the following Entry in the weblogic.properties:
          weblogic.httpd.defaultWebApp=i:/if_home2/web
          This works fine. The Server starts and serves the WebApp the way we
          expected. But wenn we start the Weblogic
          Console the WebApp ist not visible in the "myserver/HTTP/Servlet web
          applications" folder. This one is empty
          now! Previously the "General" Entry for the Implicitly Defined Default
          Web Application was shown here, which
          showed our Servlets and JSP's and their hit count and parameters.
          So there is no chance to monitor the Servlets and JSP's of the default
          Web Application.
          I tried to deploy our WebApp a secound time with
          weblogic.httpd.webApp.OurApp=i:/if_home2/web
          but this create a second independent WebApp. OurApp is shown in the
          Weblogic Console but it does not monitor
          the hits to the default WebApp. So this is not a solution!
          Any idea to make the default Web Application visible in the Weblogic
          Console?


in my development environment i checked in site collection feature, it isn't available in site collection feature but still i am getting those web parts in web part gallery while adding it on page.
Also, in Production environment, feature is available in /templates/features folder after deployment, but not available in web part gallery while adding it on page.
I tried with uploading .webpart file which is available in /templates/features production environment as i mentioned, is running for one web part. Not for second web part and giving me security error.
As, uploading .webpart file is not feasible solution, please tell me how could i do that with .wsp file?
please tell me what could be another workaround.

Default Web Application ist not visible in WebLogic Console

We are using Weblogic 5.1.0 SP7
          We moved our Application from the Implicitly Defined Default Web
          Application which is configurated by the weblogic properties to a Web
          Application. Because we don't want to change any URL in our Application,
          we decided to deploy it as Explicitly Defined Default Web Application.
          By this we recordniced that the weblogic.httpd.defaultWebApp property
          worked not that way descibed in the Weblogic Documentation. You have to
          write the path to the WebApp not the name!
          So we have the following Entry in the weblogic.properties:
          weblogic.httpd.defaultWebApp=i:/if_home2/web
          This works fine. The Server starts and serves the WebApp the way we
          expected. But wenn we start the Weblogic Console the WebApp ist not
          visible in the "myserver/HTTP/Servlet web applications" folder. This one
          is empty now! Previously the "General" Entry for the Implicitly Defined
          Default Web Application was shown here, which showed our Servlets and
          JSP's and their hit count and parameters.
          So there is no chance to monitor the Servlets and JSP's of the default
          Web Application.
          I tried to deploy our WebApp a secound time with
          weblogic.httpd.webApp.OurApp=i:/if_home2/web
          but this create a second independent WebApp. OurApp is shown in the
          Weblogic Console but it does not monitor the hits to the default WebApp.
          So this is not a solution!
          Any idea to make the default Web Application visible in the Weblogic
          Console?


Hello Nadar,
Tell me how are you starting server in the cluster, through nodemanager or commnadline.
Kuldeep

Patches not visible in SCCM 2007 Site server even after approving the patches in WSUS

Hi,
The patches are not appearing in SCCM 2007 site server after approving the same patches in WSUS.
Below are the patches.
MS14-080: Cumulative Security Update for Internet Explorer - Windows Server 2008 SP2 - IE 7 - KB3008923 [23,186.1]
MS14-018: Cumulative Security Update for Internet Explorer - IE 11 - KB2929437 - Windows Server 2008 R2 SP1 (x64) [4,32.4]
MS14-066: Vulnerability in Schannel Could Allow Remote Code Execution - Windows Server 2008 SP2 - KB2992611 (x64) - V2 [1,8.3]
MS14-038: Vulnerability in Windows Journal Could Allow Remote Code Execution - Windows Server 2008 SP2 - KB2971850 [1,8.1]
MS09-060: Vulnerabilities in Microsoft Active Template Library (ATL) ActiveX Controls for Microsoft Office Could Allow Remote Code Execution - Visio Viewer 2007 SP1/SP2 [1,8.1]
MS12-001: Vulnerability in Windows Kernel Could Allow Security Feature Bypass - Windows Server 2008 R2 Gold (x64) [1,8.1]
MS14-033: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure - Windows Server 2008 SP2 - KB2939576 [1,8.1]
MS14-025: Vulnerability in Group Policy Preferences Could Allow Elevation of Privilege - Windows Server 2008 SP2 - KB2928120 (x64) [1,7.8]
MS13-014: Vulnerability in NFS Server Could Allow Denial of Service - Windows Server 2008 R2 Gold/SP1 (x64) [1,7.7]
I have approved the above patches in WSUS and ran syncronization. The log wsyncmgr.log show that synchronization is done and even all child sites are syncronized. But I am unable to find the above even in the parent site. Checked all the SUP settings and
all the 2008 server updates are set and marked to download.
Please help me out on fixing this.

So you should NEVER approve anything in WSUS. This will cause problems with your clients. Honestly since you approved things in WSUS, I would uninstall WSUS and reinstall it, reinstall the SUP, this will clear up any issues that now exist.
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

Right Click not working on SCCM console

Hi All,
I have SCCM 2012 R2 CU4 in my lab were Right click is not working. I think there is a problem with the console, it was working fine after the upgrade so i am sure it was not an upgrade issue.
Please help.
Thanks,
Pranay.

Ya,
it's working on the monitoring tab, but not working for Administration, Software Library & Asset & Compliance.
I have full admin rights.
Thanks,
Pranay.

Enabled monitor through override not visible in custom management pack

Hello Everyone,
I've this requirement to enable a monitor which is disabled by default in its source sealed management pack. Using following article; via override; I enable the monitor and place it into a custom unsealed management pack.
https://technet.microsoft.com/en-au/library/hh212818.aspx
Now when I try creating subscription based on that monitor; and select the custom unsealed management pack; that monitor is not listed/available. However, this same monitor which is turned enabled by override; is listed; if its parent sealed management pack
is selected.
Questions:
1) Would selecting this monitor from its sealed management pack; safe to assume this monitor is now enabled?
2) Is this default behavior for monitors turned enabled via override?
Please provide input to this, how an enabled monitor through override can be referenced to be used? Thank you.

1) If the override is done properly, yes, it is enabled. You can check that it is actually enabled by opening the health explorer of an object targeted by this monitor : it should be green/yellow/red instead of blank when it was disabled
2) It is the default behavior. What happens is that you store the override (just a parameter that says "ok, the monitor is now enabled") in the unsealed management pack, not a copy of the actual monitor.

Weblogic Server not visible in Administration Console

Hello,
Forgive me if this is the incorrect location for this question but I could not find a relevant group to post this issue relating to the Administration Console, as it APPEARS.
We have a three node Weblogic 8.1 SP3 cluster in our environment and the issue we are facing is that one of the three Weblogic Servers (the other two have no issue) is not displaying any information about that server in the admin console (i.e. in "Monitoring"-> active thread queues, connections, performance stats etc. are not displayed). However, the BeaSVC service is running on that server and the server IS serving requests, as confirmed by the weblogic and application logs. It is as if the admin server cannot communicate or thinks the server is in a 'down' state, hence the behavior of not seeing the threads on the server.
Any suggestions, thoughts or ideas in resolving this matter would be greatly appreciated!
Many Thanks and Regards,
-Nader

Hello Nadar,
Tell me how are you starting server in the cluster, through nodemanager or commnadline.
Kuldeep

GDI Error - Charts not visible in sccm 2012 reports

I'm trying to run some default out of box reports for my sccm 2012 environment and finding that the raw data in table format is being provided but if there's any charts that should be included in the report they're not showing up. In the SSRS logs I see
the error below:
reportrendering!ReportServer_0-245!7e88!04/30/2015-11:09:07:: e ERROR: Throwing Microsoft.ReportingServices.ReportProcessing.RenderingObjectModelException: , Microsoft.ReportingServices.ReportProcessing.RenderingObjectModelException: A generic error occurred
in GDI+. ---> System.Runtime.InteropServices.ExternalException: A generic error occurred in GDI+.
In researching this I found similar issues out there where Hotfix-KB2823372 resolved the issue but this now looks to only be available for Windows8 as I tried to download the Hotfix and run on my server to only receive a message advising it's not applicable.
Please advise if you've seen this error before and what you've done to resolve it.
Jason

What operating system are you using? That hotfix should do the trick for Windows Server 2012, see also:
https://social.msdn.microsoft.com/Forums/sqlserver/en-US/8b47f28e-c6d5-497e-85db-d89a74fb27cd/a-generic-error-occured-in-gdi-error-ssrs-2012-sp1-on-windoes-server-2012?forum=sqlreportingservices
For Windows Server 2008 R2, see:
https://social.msdn.microsoft.com/Forums/sqlserver/en-US/50c071db-b4fc-4a2e-a9f4-e10e833c97d2/report-not-rendering-charts-in-pdf-a-generic-error-occurred-in-gdi?forum=sqlreportingservices
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

IOS devices not visible in Administration console

I just watched someone access our Filr site from iPhone app. But an hour later, when I log in to Filr as admin and go to Administration Console > Mobile Devices, I don't see that iPhone. Android devices do appear in the list, but no iPhones are listed. Are others seeing iPhones in the list?
I'm running Filr 1.1.0.653.

We saw that iOS devices only show up when they have the Filr 1.1 App installed. Using Filr 1.0.1 app, they do not show up.

Not Widely Deploying the SCCM Console?

Hello all -
We are in the process of implementing SCCM 2012 R2 and the company I work for is fairly spread out, with lots of geographically dispersed locations and IT staff. Ideally we were looking to not deploy the SCCM console to these folks, but instead find
ways to make the functionality work outside of it. A few examples are:
All needed Collections based off AD Security Groups (tested this works)
SCCM Remote Connection, pull out of the console (tested this works)
I had a few questions based on this scenario:
Is there any way to make the resource explorer accessible outside of the SCCM Console?
Do a lot of people try and extrapolate the functionality out of SCCM like we are, or do most people deploy and train on the console?
When we were just looking at the collections and remove connection, i'll admit that I was leaning towards not deploying the console. Once I found out folks needed the Resource Explorer I started to wonder if just deploying the console would be the best
bet. I am worried we will keep finding these scenarios and it may been beneficial to just go the route of the console from the beginning.
I appreciate any feedback. Thanks.

A couple of additional notes here. The console uses a "fat" RPC connection to the SMS Provider. This generally does not perform well over WAN links so if you truly have a very spread IT population of folks needing access to console, I highly
recommend you use an RDSH solution.
Next, resource explorer would be the last reason I would give anyone access to the console. It's a nice tool for sure, but you can get the exact same (and a whole lot more) information out of the reports. I'm not saying don't give them the console,
just that resource explorer is not all that useful at the end of the day and can easily be replaced by reports.
Jason | http://blog.configmgrftw.com | @jasonsandys

CLIENT TO THE SCCM CONSOLE

Hello
My SCCM 2012 client not appear in SCCM Console
LocationServices and ClientLocation is OK and the computer is assigned to Site
Help ??
Thank you . Regards

Try the steps in the following blog Posts:
http://trevorsullivan.net/2009/11/06/wmi-repository-corruption-sccm-client-fix/
No, please, please do not do this. There is no indication of any WMI issues here and the process outlined in the blog post is destruction and highly recommended against.
If you open the ConfigMgr control panel applet, how many actions are there under the Actions tab?
Jason | http://blog.configmgrftw.com | @jasonsandys

SCCM Console on Secondary Site 2012 R2

Hi all,
I just want to ask whether it is supported or not when install SCCM Console on Secondary Site Server in 2012 R2? I've searched over internet but does not find a conclusion about that.
From technet SCCM Console requirement and interoperability, there is no information that restrict install console from Secondary Site Server, but this link say it is not supported:
http://social.technet.microsoft.com/Forums/systemcenter/en-US/7c31b2d6-130c-46d6-b24d-108110cb0b61/install-sccm-admin-console-on-secondary-site-servers-failed-on-one-of-two-server?forum=configmgradminconsole
Has anyone try this, because today i installed console from one of my secondary site server and successfully connected with the primary site. Hope that does not break anything because with the ability of RBAC in 2012 R2, i can assign the admin at branch
site permission he need to manage the clients in this secondary site.
Thanks,

I've seen it working with multiple customer. Also, I can imagine that it wouldn't be a supported scenario, purely because it's not tested (both new installations as upgrades).
As, I'm not working for Microsoft and it's not documented, I can't give you any official statements.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Logs files are not visible through AS Server Console.

Hello,
Server = Solaris 10
Oracle AS 10.1.3.4 (clustered)
Logs are generated in "/apps/oracle/product/as1013/opmn/logs/EEW_DTP_EEW_DTP_1/EWII_DTP~EEW_DTP~EWII_DTP~1.log" but not visible in Oracle EM (AS console).
Applications in Instance: AS1013.oxdora20a
application type: OC4J
pid | name | state | rtid | classification | routable | parent
27711 | ascontrol | stopped | g_rt_id | external | false |
27711 | javasso | stopped | g_rt_id | internal | true |
27711 | datatags | started | g_rt_id | internal | true | default
27711 | default | started | g_rt_id | external | true | system
27711 | eew_dtp | started | g_rt_id | external | true | default
27711 | system | started | g_rt_id | external | true |
27710 | ascontrol | stopped | g_rt_id | external | false |
27710 | javasso | stopped | g_rt_id | internal | true |
27710 | datatags | started | g_rt_id | internal | true | default
27710 | default | started | g_rt_id | external | true | system
27710 | eew_tp | started | g_rt_id | external | true | default
27710 | system | started | g_rt_id | external | true |
27709 | system | started | g_rt_id | external | true |
27709 | default | started | g_rt_id | external | true | system
27709 | bc4j | started | g_rt_id | external | true |
27709 | ascontrol | started | g_rt_id | external | true | system
27709 | javasso | stopped | g_rt_id | internal | false |
Applications in Instance: AS1013.oxdora20b
application type: OC4J
pid | name | state | rtid | classification | routable | parent
831 | ascontrol | stopped | g_rt_id | external | false |
831 | javasso | stopped | g_rt_id | internal | true |
831 | datatags | started | g_rt_id | internal | true | default
831 | default | started | g_rt_id | external | true | system
831 | eew_dtp | started | g_rt_id | external | true | default
831 | system | started | g_rt_id | external | true |
830 | ascontrol | stopped | g_rt_id | external | false |
830 | javasso | stopped | g_rt_id | internal | true |
830 | datatags | started | g_rt_id | internal | true | default
830 | default | started | g_rt_id | external | true | system
830 | eew_tp | started | g_rt_id | external | true | default
830 | system | started | g_rt_id | external | true |
829 | system | started | g_rt_id | external | true |
829 | default | started | g_rt_id | external | true | system
829 | bc4j | started | g_rt_id | external | true |
829 | ascontrol | stopped | g_rt_id | external | false |
829 | javasso | stopped | g_rt_id | internal | false |
thanks,
Kam

How are they connecting? What Service?
Any particular APPs that do this? Adobe perhaps?

Overrides not visible in SCCM Console

Similar Messages

Maybe you are looking for