Adding Unknown computers resources by direct membership rule issue

Hi, everybody!
Finally, i've got issue discrabed here
http://blog.coretech.dk/kea/collections-not-being-refreshed-in-configmgr-2012-r2/
In situation with large count of primary sites and unknown computers accounts (two for each site certainly), it's placed to be a big problem deploying task sequences to unknown computers...The comfort and rigth decision in
my thought is deploying tasks to site's unknown collection that contains two of all unknows (only each site x86 and x64 account) directly. But after creating those/that collections/collection per sites becomes alive previously noticed trouble....How
can we add/devide unknown computers for deploying tasks on them....Situations with availiable lists of all task sequences (as you know right that occurs while deploying tasks to unkonow built-in collection) of all hierarchy in installing process misleads
primary sites sccm admins....there are situations with starting wrong tasks (belongs not to their site unknowns).....
I repeat, adding each sites unkonws to separate collection directly occurs upper link problem...
Is any idea, guys?

Jason, it is above 20 sites...
I've noticed one thing: when i use collection adding direct membership rule wizard using "unknown computer" and it's "site code" like criteria, collecton working fine. As soon as, i use console's "adding to existing collection"
capability clicking by right mouse click on one of the unknowns...it's gonna to be fail to update in previously described way.....

Similar Messages

Direct membership collection - get added date of a resource?

Hello, I was wondering if there is a way to get the date or time a resource (computer) was added to a collection (direct membership).
Reason : we are using OSD and some computers were not removed from that collection after being reimaged....so now our Imaging collection has around 85 members...some labs computers were added a couple of days ago and will be reimaged soon so I don't want
to delete them...but some computer were reimaged a while ago (so they were added a few weeks ago) so I would like to delete them... ?
Like, I would keep all the items that were added in the last five or ten days and delete all the other that have been added since more than 10 days ?
Thanks !

Not through the console, but you should be able to grab the direct membership rules via WMI (http://msdn.microsoft.com/en-us/library/hh949303.aspx) and check their creation date.
Jason | http://blog.configmgrftw.com

Collection Membership Rules - Query returns object, Collection shows no members..?

Hi All,
I'm hoping i have just made a simple error / change and not noticed, however at the moment and not for all Collections, i am having issues with Membership.
Problem:
Adding a Computer Object into an AD Group and using a Membership Query (Of the AD Group) to add members to a collection will not work.
Info:
I have added a PC to an AD Group "MS Office 2010", forced AD Group Discovery, made a Query and run it to test (Works, shows the member) and added the query to the Membership Rules Tab (Add Rule > Query Rule > Import Query)
If i then "Update Membership" and/or refresh the collection membership it still does not appear, thus not receiving the software i have advertised to it.
Any assistance would be greatly appreciated.
Brandon

Since this is CM07, it will take a while for new groups to be populated. If I remember right you MUST do the following in the following order.
Create the group and add members
Wait for AD replication to happened
Reboot the computers
Force AD group discovery to happen
Force Heartbeat discovery to happen
Create/ force the collection membership to up
Run the machine policies
If you use direct membership rule of the security Group:
Create the group and add members
Wait for AD replication to happened
Force AD group discovery to happen
Create/ force the collection membership to up
Reboot the computers (anytime after step 2)
Machine policies should run automatically
BTW, in CM12 this process has change and it now take ~2 minutes an applciaiton to show on on the computer.
Create the group and add members
Wait for AD replication to happened
Force AD group discovery to happen
Create/ force the collection membership to up
Run the machine policies
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

When Role is assigned to User through membership rule then it's membership is not added to OID ?

Hi All,
I have OIM 11gR2 installed with LDAPSync enabled.
When tried to assign Role to User through membership rule, Role is successfully assigned to User in OIM, but it is not added in OID.
Role membership is added in OID when User requests Role through Catalog search. Also, Role membership is added in OID after running job 'LDAPSync Post Enable Provision Role Memberships to LDAP '.
How can I add Role membership in OID as soon as Role is assigned to User through membership rule in OIM ?

Hi
It sounds like you have not selected anything on the Presentation & Data tab of the Workspace Startpoint/User Service.
You need to specify:
Your Asset (the form you want to present to the user)
An associated Action Profile (tells the server how you want the form rendered...typically it is set to Default which uses the Render PDF Form process)
The variable to hold your data(typically an xml variable)
Make sure these are set.
Diana

How to remove multiple identified computers from direct membership collection..

I have been askedd to remove a list of computers provided in a text file from a direct membership collection, normally this would be easy and I would use Collection Injector as it is a great solution which is pretty much foolproof, however for some reason
that is totally beyond me and who knows why, I have been told to see if there is a script to perform the same functionality, but why reinvent the wheel.....go figure
so in essence, does anyone know of a script to accomplish this????I can find them for a single computer but not for a list based solution, any help greatly appreciated
regards
many thanks

Also, if you are looking to remove a llist of machines from a collection. Why don't you try writing a query?
some like...
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System whereSMS_R_System.NetbiosName not in ("null")
here put the list of computers in the not in list..
----Please vote if this is helpful----- -----Knowledge is Power-------- Ajo Abraham [MCP] [MCTS]
Maybe because you can't remove computers from a collection with a select statement? You could do it in SQL but that would be VERY unsupported.
John Marcum | http://myitforum.com/myitforumwp/author/johnmarcum/

Report to list all computers and their collection membership

Hi
I am currently working on a site where direct membership is used for collections but a need has arisen to move to AD Queries.
I have created a simple powershell script that creates groups based on the contents of a csv file and another script which populates this with the members listed in another csv file.
To help speed up the process is there a way to generate a report that lists ALL Computers and their Collection membership?
The only reports I seem to find that are built in require an inputted value of either computer name of collection ID. I simply need a report that lists Computer Name is column 1 and Collection Name in column 2 for all computers and all collections.
Many Thanks,
Matt Thorley

select
FCM.Name,
C.Name
from
dbo.v_Collection C
join dbo.v_FullCollectionMembership FCM on C.CollectionID = FCM.CollectionID
Thanks to Garth for original query. I just modified it :)
Anoop C Nair (My Blog www.AnoopCNair.com)
- Twitter @anoopmannur -
FaceBook Forum For SCCM

No Task Sequence Advertised for Unknown Computers

Howdy,
i have a single MP, Single DP (Same box) SCCM 2012 R2 infrastructure running Server 2012.
i'm having an issue when trying to perform OSD deployments VIA boot media to clients. If the client had the SCCM agent on it before and it is known, no problems, i can load up my USB stick, boot to it and it finds my advertisement fine and can image no
problems. however if it is a bare metal that has not been imaged before at all, i get "No task sequence found for this device" in windows PE.
In checking the SMSTS log on the client, the error i see is "No assigned task sequence"
During the creation of the boot media i enabled (checked the box for) unknown computer support.
The Boot WIM, Image WIM, and TS have all been distributed to the site server and i have verified the content status of all dependencies to be correct.
The task sequence is advertised to a collection called "OSD Deployment Test" i have also added the "All Unkown Computers" Collection as a member of "OSD Deployment Test" I have verified that the "All Unknown Computers"
Collection DOES include the unknown 86, and unknown 64 computer collections. however if it is an unknown computer the darn thing STILL will not find the advertised TS.
what am i missing here?
Any help would be GREATLY appreciated!
Thanks!
Tainted.

Thank you for clarifying and clearing that up (sorry it took me a couple replies to understand!)
It seems it did fail the ONE time i tried to image again but now it is working again even for brand new VM's and the boundary is still removed! I'm at a complete loss. We didn't change anything with SCCM and it magically started working?!?!?
You were right though i checked a log from when it failed earlier and got:
Authenticator from the environment is empty.
TSMBootstrap 5/8/2014 9:31:15 AM
452 (0x01C4)
Need to create Authenticator Info using PFX
TSMBootstrap 5/8/2014 9:31:15 AM
452 (0x01C4)
Initialized CStringStream object with string: 4DD5CE6B-0164-4AC4-8D0D-569401048658;2014-05-08T17:31:15Z.
TSMBootstrap 5/8/2014 9:31:15 AM
452 (0x01C4)
Using user-defined MP locations: http://ghssccmisc03.ghs.org
TSMBootstrap 5/8/2014 9:31:15 AM
452 (0x01C4)
Set authenticator in transport TSMBootstrap
5/8/2014 9:31:15 AM 452 (0x01C4)
Set media certificates in transport TSMBootstrap
5/8/2014 9:31:15 AM 452 (0x01C4)
IP: 10.11.12.107 10.11.12.0 TSMBootstrap
5/8/2014 9:31:15 AM 452 (0x01C4)
CLibSMSMessageWinHttpTransport::Send: URL: ghssccmisc03.ghs.org:80 GET /SMS_MP/.sms_aut?MPLOCATION&ir=10.11.12.107&ip=10.11.12.0
TSMBootstrap 5/8/2014 9:31:15 AM
452 (0x01C4)
Error. Received 0x80072ee2 from WinHttpSendRequest.
TSMBootstrap 5/8/2014 9:31:36 AM
452 (0x01C4)
hr, HRESULT=80072ee2 (e:\qfe\nts\sms\framework\osdmessaging\libsmsmessaging.cpp,8919)
TSMBootstrap 5/8/2014 9:31:36 AM
452 (0x01C4)
sending with winhttp failed; 80072ee2
TSMBootstrap 5/8/2014 9:31:36 AM
452 (0x01C4)
m_pHttpTransport->Send (0, 0, pServerReply, nReplySize), HRESULT=80072ee2 (e:\qfe\nts\sms\framework\osdmessaging\libsmsmessaging.cpp,5564)
TSMBootstrap 5/8/2014 9:31:36 AM
452 (0x01C4)
CCM::SMSMessaging::CLibSMSMPLocation::RequestMPLocation failed; 0x80072ee2
TSMBootstrap 5/8/2014 9:31:36 AM
452 (0x01C4)
MPLocation.RequestMPLocation (szTrustedRootKey, sIPSubnets.c_str(), sIPAddresses.c_str(), httpS, http), HRESULT=80072ee2 (e:\qfe\nts\sms\framework\osdmessaging\libsmsmessaging.cpp,9565)
TSMBootstrap 5/8/2014 9:31:36 AM
452 (0x01C4)
CCM::SMSMessaging::GetMPLocations failed; 0x80072ee2
TSMBootstrap 5/8/2014 9:31:36 AM
452 (0x01C4)
Failed to query http://ghssccmisc03.ghs.org for MP location
TSMBootstrap 5/8/2014 9:31:36 AM
452 (0x01C4)
MpCnt > 0, HRESULT=80004005 (e:\qfe\nts\sms\client\tasksequence\tsmbootstrap\tsmbootstraputil.cpp,1931)
TSMBootstrap 5/8/2014 9:31:36 AM
452 (0x01C4)
QueryMPLocator: no valid MP locations are received
TSMBootstrap 5/8/2014 9:31:36 AM
452 (0x01C4)
TSMBootstrapUtil::QueryMPLocator ( true, sSMSTSLocationMPs.c_str(), sMediaPfx.c_str(), sMediaGuid.c_str(), sAuthenticator.c_str(), sEnterpriseCert.c_str(), sServerCerts.c_str(), nHttpPort, nHttpsPort, bUseCRL, httpS, http, accessibleMpCnt), HRESULT=80004005
(e:\qfe\nts\sms\client\tasksequence\tsmbootstrap\tsmediawizardcontrol.cpp,925)
TSMBootstrap 5/8/2014 9:31:36 AM
452 (0x01C4)
Exiting TSMediaWizardControl::GetPolicy. TSMBootstrap
5/8/2014 9:31:36 AM 452 (0x01C4)
pWelcomePage->m_pTSMediaWizardControl->GetPolicy(), HRESULT=80004005 (e:\qfe\nts\sms\client\tasksequence\tsmbootstrap\tsmediawelcomepage.cpp,303)
TSMBootstrap 5/8/2014 9:31:36 AM
452 (0x01C4)
Setting wizard error: An error occurred while retrieving policy for this computer (0x80004005). For more information, contact your system administrator or helpdesk operator.
TSMBootstrap 5/8/2014 9:31:36 AM
300 (0x012C)
WelcomePage::OnWizardNext() TSMBootstrap
5/8/2014 9:31:36 AM 300 (0x012C)
Skipping Confirmation Page. TSMBootstrap
5/8/2014 9:31:36 AM 300 (0x012C)
Skipping Task Sequence Selection Page. TSMBootstrap
5/8/2014 9:31:36 AM 300 (0x012C)
Skipping Variables Selection Page. TSMBootstrap
5/8/2014 9:31:36 AM 300 (0x012C)
Skipping Resolve Progress Page. TSMBootstrap
5/8/2014 9:31:36 AM 300 (0x012C)
Activating Finish Page. TSMBootstrap
5/8/2014 9:31:36 AM 300 (0x012C)
Loading bitmap TSMBootstrap
5/8/2014 9:31:36 AM 300 (0x012C)
Executing command line: X:\windows\system32\cmd.exe /k
TSBootShell 5/8/2014 9:31:40 AM
604 (0x025C)
The command completed successfully. TSBootShell
5/8/2014 9:31:40 AM 604 (0x025C)
Successfully launched command shell. TSBootShell
5/8/2014 9:31:40 AM 604 (0x025C)
It now seems that this could possibly be intermitant? Any advice on how to troubleshoot this going forward?

Execution of membership rules during creation event in OIM

Hi,
I have a question regarding the execution sequence of a role membership rule/s. As noted in the section "Orchestration Concepts" of the Oracle 11gR1 Developer's Guide (http://docs.oracle.com/cd/E21764_01/doc.1111/e14309/oper.htm#CCHJHFGE), there are 6 Orchestration stages:
1. Validation: Stage to perform validation on the orchestration, such as validity of orchestration parameters. Orchestration parameter is the data that is required to carry out the orchestration operation.
2. Preprocess: Stage to perform orchestration parameter manipulations or get approvals or perform Segregation of Duties (SoD) checks.
3. Action: Stage in which the action takes place.
4. Audit: Stage in which the auditing of operation is performed.
5. Postprocess: Stage in which consequent operations related to the current operation takes place. Examples of consequent operations are auto role membership and policy evaluation on a user creation.
6. Finalization: Last stage in the process to perform any clean up.
The question is: If a role membership rule has been set up so that a user will be assigned a role if a particular user attribute is set during the preprocess or postprocess stage, when is the actual execution of the membership rule performed? i.e. in which orchestration stage is the role membership rule executed?
regards,
Evangelo
Edited by: 953049 on 25-Sep-2012 22:04

Custom Preprocess handler doesn't work in 11g. Are you sure? The documentation only states that it will not work for trusted reconciliation (from Oracle support article ID 1262803.1 - OIM11g: Sample Code For A Custom Event Handler Implemented for Pre-Process Stage During Create User Management Operation).

Unknown computers showing up under "Shared" on secured wireless network.

After reading through the forums, it looks like I am not the only person who has encountered this, but I haven't found any real answers and my situation is a bit different.
Yesterday, unknown computers started showing up in the "Shared" sidebar in Finder. This happened both on my MacBook Pro and my iMac. I have a password protected wirelss network. I know these are other people's computers and not just printers or peripheral accessories on my wireless network because they have names like "John Doe's Mac Mini" and "Smith-pc."
I understand that this doesn't mean that someone is trying to hack into my computer, that they could just have sharing enabled on their computer and it is broadcasting its availability for a connection. However, I don't understand how these computers are broadcasting it. I live on a farm in an isolated area where it is not possible for someone else to be picking up the signal from my wireless router. I think I have established that these are Bonjour connections because I can make them disappear from the sidebar by unselecting "Bonjour Computers" in Finder Preferences. I have checked all of the MAC addresses that my wireless router (Apple AirPort) says are connected and I can account for all of them.
My ISP comes in through a wireless antenna system. Is it possible that they suddenly changed something yesterday that is letting Bonjour signals from other subscribers to be broadcast through their network? I have used this ISP for a couple of years now and this just suddenly started yesterday.
Should I be concerned? I have gone through and made sure that file sharing is not selected on our computers. I'm not sure what precautions I would need to make with our iPads, iPods, etc. Is the appearance of these computers simply an annoyance, or am I in any way at risk?
I would appreciate any insight anyone can give.

Please read this whole message before doing anything.
This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.
Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem. You must hold down the shift key twice: once when you turn on the computer, and again when you log in.
Note: If FileVault is enabled, or if a firmware password is set, or if the startup volume is a Fusion Drive or a software RAID, you can’t do this. Ask for further instructions.
Safe mode is much slower to start up and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal startup may also be somewhat slow.
The login screen appears even if you usually login automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
Test while in safe mode. Same problem?
After testing, restart as usual (not in safe mode) and verify that you still have the problem. Post the results of the test.

Event Handler not Triggered when user is assigned by Membership Rule

I have defined a post-processed event handler for RoleUser Entity.
The handler is triggered normally when a user is manually assigned a role.
However, it is not trigger, if users are assigned through membership rule.
I have tried both the single execute method and the bulk execute method.
OIM version: 11gR2

Hi,
Check the list of orchestration handlers triggered for this operation in the Diagnostic Dashboard. Check whether, if your custom event handler is present in the list. If its isn't, then there must be something wrong with your Plugin.
Thanks,
RK.

IDM : How to get the Resource name in Exclude Rule during Reconciliation?

Hi
Problem Statement => How to get the Resource name in Exclude Rule during Reconciliation.
Problem Description => Apparently, we use exclude rule for not consider some account during reconciliation.
I need the resource name in exculde rule during reconciliation. I tried with getResources() method which is an inbuilt method.But it gives all the resources are aviablable in the repository (IDM). I need only the current reconcilied resource name instead of fetching all the resouce.
Can any one please help how to get the resource name in exclude rule during reconciliation?
Thanks in advance for you help.
Thanks,
Chellappan

Hi,
Thanks for your reply.
I have 50 resouces and these resouces using the same kind of exclude rules. In the exclude rule, i am using resource name to do some work. If i get the resouce name in exclude rule, then i can use the same exculde rule for 50 resources. This will minimise the rule count from 50 to 1. For that, i need resouce name.
Thanks,
Chellappan Sampath.

Role membership rule not working

Hi guys,
When I create a role and assign 'membership rule' to it, the members are shown in preview screen.
But they are not show up in members screen of that role.
My environment is 11gR2 SP1.
It is working nicely in 11gR2 base. But from some bundle pack and after, it is not working.
1. is it right?
2. if then, why is it changed?
3. and how shoul I assign members to role?
(as a workaround I modified the memner arrtibute. => not working
and restart OIM, => still not working
and reboot the server.> still not working...)
can anyone help this?
regards,
dongsu

J,
It has been a critical issue in real customer project this year.
Certainly we informed it to local oracle team and they says it is intentional change and we have to accept it.
(means create role first and read in users by trusted recon from source again.. bra bra..)
But I do not get any documented information about it.
Actually in BP4 (may be..) if I change any attribute value of that user who supposed to belongs to that role, then it works.
But in BP7 and now in PS1, even that approach do not working.

Please note that i am seeking some assistance with adding the followng resource: A maximum of 4 resources can be added at an additional cost of $500 per day per resource.

Hi, Please note that i am seeking some assistance with adding the following resource to a task in Microsoft Project 2010:
A maximum of 4 resources can be added at an additional cost of $500 per day per resource.

Hi Clemence,
Your post has quite little details, but as far as I understand, you want to add 4 resources on a task, each resource costing 500$ a day. Since it is not mentionned if it is generic resources (skill or role) or named resources, I'll assume that it is generic
resources. Based on this understanding, here is a proposal:
Go to the resource sheet,
Create a work generic resource ("type" field set to "work", "generic" field to "yes"), typing in the resource name field the skill name,
In the max unit field, enter 400% for 4 resources (for just 4 if your Project 2010 is configured to display units in decimals),
Since the rate is an hourly rate, make the calculation : 500$ per day / 8 hours a day = 62,5$ per hour,
Go back to the Gantt Chart, split the window (click "detail" in the view tab of the ribbon),
Select your task and assign the newly created resource with a given % units.
Hope this helps.
Guillaume Rouyre - MBA, MCP, MCTS

Create an Unknown Computers Collection that has a limit

What I want to do is to create a smaller collection of Unknown machines that is limited to a site(or IP Range) so that it can limit the list of visible task sequences to the OSD groups at each site. Is this even possible?

I don't think you can do this using the Unknown Computers object.
Off the top of my head, the best solution I can think of is to use a pre-start script that lists Hidden task sequence deployments based off of IP Range. Niall blogged about the general process a few weeks ago, you'd just need to add logic for the sites/ip
ranges:
http://www.niallbrady.com/2014/04/15/how-can-i-make-multiple-hidden-task-sequences-available-on-demand-in-configuration-manager-2012-r2/
I hope that helps,
Nash
Nash Pherson, Senior Systems Consultant
Now Micro -
My Blog Posts
If you've found a bug or want the product worked differently,
share your feedback.
<-- If this post was helpful, please click "Vote as Helpful".

Failed to Run Task Sequence on unknown computers

Hey everyone i need some major help here. I am 99.9% sure that we dont have something configured properly but here goes. I have a the following:
A task sequence that is enabled to deploy a image to all platforms (Console, Boot media, PXE)
I have Boot Media created that has "Enable unknown computer support"
I have a workstation that has NEVER been on our network (Bare Metal
Now here is the problem on that workstation, I use the boot media, and get a "Failed to run Task Sequence" There are no Task Sequences available for this computer"
BUT, if it has/had the SCCM agent on it.. It works fine..
Ideas? Starting points?

A task sequence that is enabled to deploy a image to all platforms (Console, Boot media, PXE)
I have Boot Media created that has "Enable unknown computer support"
Step #2 alone is not sufficient. There has to be a deployment for the task sequence to the 'All Unknown Computers' collection too. You did not mention this ...
Torsten Meringer | http://www.mssccmfaq.de

Adding Unknown computers resources by direct membership rule issue

Similar Messages

Maybe you are looking for