List of recommended hotfixes/updates for SCCM 2012 R2 agents?

Hopefully I ask this correctly.
Is there a list of recommended hotfixes or updates for SCCM 2012 R2 agents? Things like .Net or WMI updates.
I am seeing the occasional agents lose connectivity, and I want to make sure I have a complete or recommended list of non-SCCM hotfixes before I move forward.
Thanks!
Andy

To my knowledge there aren't really any kind of recommended hotfixes to apply before a client installation, except for the prerequisites (that the client installs by itself). But as a best practice, always make sure that a client is up to date when it comes
to patches.
Regards,
Nickolaj Andersen | www.scconfigmgr.com | @Nickolaja

Similar Messages

Unable to install Cumulative Update 2 for SCCM 2012 R2

Hi,
I am trying to install the CU2 update for SCCM 2012 R2 and I am getting the following error during prerequisite checks:
Server update status: This update applies to product version 5.0.7958. The installed version on this computer is 5.0.7804.1000. This update is not applicable to this computer.
Console update status: No serviceable configuration manager role was found on the local system.
Can anyone provide me some guidance or thoughts on how to get to the correct version to install this update?
Thank you

You are running
ConfigMgr 2012 SP1 – 5.00.7804.1000 - build 7804
The CU2 you are trying to apply is for SCCM 2012 R2.
http://www.systemcenterdudes.com/sccm-2012-version-numbers/
For SP1 the latest CU is CU5 : http://support.microsoft.com/kb/2978017/en-us
Benoit Lecours | Blog: System Center Dudes

Cumulative Update 4 installation for SCCM 2012 R2

Hi all,
This is my first time installing a CU update on SCCM 2012.
We have an environment with 15 Servers, 1 is a Primary and the other are Site System Servers.
Would I need to install the CU4 update only to the Primary server? or would I have to deploy the CU4 to the other 14 Site Systems Servers.
I've been reading the following
http://support.microsoft.com/kb/3026739
http://dekeukelaere.com/2014/01/30/implementing-configuration-manager-2012-sp1-cumulative-update-4/
http://blogs.technet.com/b/configurationmgr/archive/2014/01/29/now-available-cumulative-update-4-for-system-center-2012-configuration-manager-service-pack-1.aspx
And also if they don't have CU3 on them would I need to do that first, or would
CU4 encompass previous updates.
Cheers for any help on this matter.

When they're only site systems with a role installed than those roles will be upgraded with the primary site installation. Here is one of the many nice posts about the installation process (and order):
http://www.scconfigmgr.com/2015/02/03/install-configmgr-2012-r2-cu4-in-your-hierarchy/
Also, you don't have to install CU3 first.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Configuring Reporting services for SCCM 2012

Hi,
I just finish create SQL reporting services ( configure Database, report manager URL) in SQL 2008 R2 for SCCM 2012. When I open the Report option in SCCM console (Monitoring --> Report), no report listed there and then I try to add in Reporting service
point for it, but get an error message
"There is a problem connecting to the specific reporting server. Please check the connection and make sure SQL reporting service is running on the specified server"
I manually browse to http://sqlserver/reportserver or
http://sqlserver/reports , that is no any folder exist there (I assume when I configure reporting service it will automatic create a folder for it with all report inside?). Anyone can guide me on how to solve this issue?
Regards,

Hi,
hi ,
I am new to SCCM 2012 group and i have knowledge on sccm2007. i want to discuss some issue what i have with SCCM2012 installtion. The issue is my machine got rebooted while installing sccm 2012 SP1.i have already installed all the prerequisites for SCCM2012.i
am installing sccm2012 on Hyper-V machine.
Please see my system configuration below:
DomainController(2008R2 server) : 512MB RAM, AD things and DNS ,DHCP has installed on it.
System center server(2008R2) : 1028MB RAM , Sql 2008 server installed on it.
i tried to install it many times but still i got the same issue.
Could anybody please help me with this ?
This is a new question. So please ask this question on a new thread in this forum.
Thank you.
Best Regards,
Joyce Li
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

How to setup IPV6 boundary for SCCM 2012 R2 Primary Site?

How to setup IPV6 boundary for SCCM 2012 R2 Primary Site?
I have Direct Access implemented in my environment. I have Windows 8.1 machine connecting through direct access.
I want to manage the windows 8.1 through SCCM. How do I setup IPV6 boundary. Can someone guide me through?
Below are the Windows 8.1 client IP Configuration
C:\Windows\system32>ipconfig
Windows IP Configuration
Wireless LAN adapter Local Area Connection* 3:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . :
Wireless LAN adapter Wi-Fi:
   Connection-specific DNS Suffix . : home
   Link-local IPv6 Address . . . . . : fe80::7466:11a5:39ed:ffb0%4
   IPv4 Address. . . . . . . . . . . : 192.168.1.5
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.1.1
Tunnel adapter isatap.home:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . : home
Tunnel adapter Teredo Tunneling Pseudo-Interface:
   Connection-specific DNS Suffix . :
   IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fd:1494:1339:93d6:439c
   Link-local IPv6 Address . . . . . : fe80::1494:1339:93d6:439c%9
   Default Gateway . . . . . . . . . :
Tunnel adapter iphttpsinterface:
   Connection-specific DNS Suffix . :
   IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1000:e1a7:9cc8:c3c7:d819
   Temporary IPv6 Address. . . . . . : fd64:fc00:d17b:1000:206c:f857:ddbe:2f2b
   Link-local IPv6 Address . . . . . : fe80::e1a7:9cc8:c3c7:d819%10
   Default Gateway . . . . . . . . . :
Below are the IPConfiguration details for Direct Access server
C:\Windows\system32>PsExec.exe \\MURA01 ipconfig
PsExec v1.98 - Execute processes remotely
Copyright (C) 2001-2010 Mark Russinovich
Sysinternals - www.sysinternals.com
Windows IP Configuration
Ethernet adapter Ethernet:
   Connection-specific DNS Suffix . :
   IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:3333::1
   Link-local IPv6 Address . . . . . : fe80::b1ad:1c29:b4a:9125%15
   IPv4 Address. . . . . . . . . . . : 10.192.1.25
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 10.192.1.1
Tunnel adapter Teredo Tunneling Pseudo-Interface:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . :
Tunnel adapter isatap.{3D6A5E86-D85A-46C8-B69B-FFCF6D5D849C}:
   Connection-specific DNS Suffix . :
   IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1:0:5efe:10.192.1.25
   Link-local IPv6 Address . . . . . : fe80::5efe:10.192.1.25%18
   Default Gateway . . . . . . . . . :
Tunnel adapter 6TO4 Adapter:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . :
Tunnel adapter IPHTTPSInterface:
   Connection-specific DNS Suffix . :
   IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1000::1
   IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1000::2
   IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1000:2552:e9f8:87d3:ed8e
   Link-local IPv6 Address . . . . . : fe80::2552:e9f8:87d3:ed8e%20
   Default Gateway . . . . . . . . . :
ipconfig exited on MURA01 with error code 0.
Below are the IPCONFIG Details for SCCM Server:
C:\Windows\system32>PsExec.exe \\sccm01 ipconfig
PsExec v1.98 - Execute processes remotely
Copyright (C) 2001-2010 Mark Russinovich
Sysinternals - www.sysinternals.com
Windows IP Configuration
Ethernet adapter Ethernet:
   Connection-specific DNS Suffix . :
   Link-local IPv6 Address . . . . . : fe80::9f0:86f9:441d:bc07%12
   IPv4 Address. . . . . . . . . . . : 10.192.1.30
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 10.192.1.1
Tunnel adapter isatap.{0749E47D-AE0A-4D47-9D37-BDDC848E56F6}:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . :
ipconfig exited on sccm01 with error code 0.
What will be the IPV6 values to configure boundary?

Depending on how the clients connect use the IPv6 prefix of their 6to4, Teredo, and/ or IP-HTTPS tunnel. Just keep in mind that it could become a long list...
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

SCCM 2012: enable powershell execution policy for SCCM 2012 console

Hi,
I always get stuck settings up the remote sccm 2012 powershell (cd psdrive sitecode:). Maybe not a real sccm 2012 question but Powershell but wonder what steps you take to make it work (it works on our production environment, setting up in a lab always gives
me headaches, will defintely write the solution down this time :-)).
Please advise what the steps are in configuring remote powershell for SCCM 2012.
1.my personal account "Myuser" has admin-rights in sccm 2012
2.I can open Powershell logged on to the sccm 2012 server then opening sccm 2012 console, connect via powershell
3.however, when I connect remote to the sccm server, I get the error:
. : File C:\Users\Myuser\Documents\WindowsPowerShell\Microsoft.PowerShell_profile.ps1 cannot be loaded. The file C:\Use
rs\MyUser\Documents\WindowsPowerShell\Microsoft.PowerShell_profile.ps1 is not digitally signed. You cannot run this scr
ipt on the current system. For more information about running scripts and setting execution policy, see about_Execution
_Policies at http://go.microsoft.com/fwlink/?LinkID=135170.
4.So I connect to the sccm-server and ask for the execution policy to unrestricted, I get this:
set-executionpolicy unrestricted
[Y] Yes [N] No [S] Suspend [?] Help (default is "Y"): y
Set-ExecutionPolicy : Windows PowerShell updated your execution policy successf
ully, but the setting is overridden by a policy defined at a more specific scope
There is no policy which sets any powershell configs.
Please advise.
J.
Jan Hoedt

Those client settings are only for the actions performed by the ConfigMgr client. Normal PowerShell actions are restricted to the configured execution policy on the machine.
Have a look at this post:
http://blogs.msdn.com/b/pasen/archive/2011/12/07/set-executionpolicy-windows-powershell-updated-your-execution-policy-successfully-but-the-setting-is-overridden-by-a-policy-defined-at-a-more-specific-scope.aspx
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Required access for SCCM 2012 R2 Client End

Hi all,
What is minimum level of access required for SCCM 2012 client machines management ( Deploy , Discovery , agent install …etc) , we have an account called clientdeploy , is that account is mandatory
to have local administrators privilege on all client machine to manage everything , is that Microsoft recommended one ?
Sengo

No, Not required this account to be local admin in all client.
If you want access required for sccm 2012, for deploying app., O.s and managing client, this account must be member of sms group such as configmgr remote control users for remote tool
For more details, you can refer below link
http://technet.microsoft.com/en-us/library/hh427337.aspx
Also I recommended to ask your question in
SCCM Forum
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical | Twitter:
Mai Ali

Pre-requisites for SCCM 2012 R2

Hi Experts,
I want to know is it mandatory to install and configure WDS, WSUS and MDT before deploying SCCM 2012 R2
Are the Above roles prerequisites....????
What would be the possible pre-requisites for SCCM 2012 R2..???

For the pre-requisites, you can refer to the article that Torsten already shared.
As Torsten already mentioned, the installation of WDS, WSUS and MDT is optional. However, if you are planning to do OS Deployment (OSD) then consider installing WDS and MDT (Of course, you can install MDT if you would like to take advantage of its use).
As for WSUS, you can consider installing it if you would like to ensure a central management of Software Updates. So, depending on your requirements, you can decide what to do.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Client not receiving the software update FROM SCCM 2012 R2

We have SCCM 2012 R2 installed and configured for SUP.and i have synchonice the SUP with WSUS server in the same which is there in the same machine.
Now i can able to deploy the software update from SCCM 2012 R2 without any erro to the windows 7clients, but client side when i check there is no update installed in the clients , but seems there is no error in the client logs

Hi,
I'd start with running a "Software Updates Scan Cycle" from the configuration manager control panel applet and check the log file Windowsupdate.log, WUAhandler.log.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Extending Schema for SCCM 2012 R2

I have looked everywhere for this information, but it's not listed in the LDF file nor is it notated on the MS documentation.
When extending the schema using extadsch.exe from the media for SCCM 2012 R2, does it touch the schema version or does it only add the classes required? Is there a difference in versions of extadsch.exe 5.0 and the exadsch.exe in the SCCM 2007 media?

Active Directory schema extensions for Configmgr 2012 are similar to the Active Directory schema extensions for Configmgr 2007.
If the schema was already extended for Configmgr 2007, you dont need to extend schema again for Configmgr 2012.
Eswar Koneti | Configmgr blog:
www.eskonr.com | Linkedin: Eswar Koneti
| Twitter: Eskonr

Query about expired updates in SCCM 2012

Hi,
We have requirement to include Feature pack updates in SCCM 2012.
For testing purpose, We have modified SUP settings in CAS to include feature packs and run the synchornization. so All feature packs update are synchornized and available(The icon with the green arrow) in SCCM 2012. Since this is for testing, we roll
back the changes in SUP (unchecked Feature packs) and after we run synchornication, Feature pack updates are showing as Expired in SCCM console.
I just want to know if we include Feature packs in SUP and run synshornization again, Will that expired feature pack updates show as normal updates(Green icon) in sccm console?

i have not testes this behavior but i think,it should work as you expected ,the expired feature pack updates will show as normal after you enable and sync is done as the metadata will be overwritten.
Eswar Koneti | Configmgr blog:
www.eskonr.com | Linkedin: Eswar Koneti
| Twitter: Eskonr

Trouble Deploying Windows updates via SCCM 2012

Hello
I'm testing Windows updates via SCCM 2012 - I have successfully deployed updates to 4 test PC's.
I then added another 15 Test PC's into the same group - Not one of them receive updates (they're all within the same Domain and even in the same room)
I reviewed "UpdatesDeployment.log -
1. I highlighted some points that stood out to me
2. I have the Maintenance window set to 24hours for this test
From the Server side and Clients side - What are the best .logs to look at.
CUpdateAssignmentsManager received a SERVICEWINDOWEVENT START Event   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
Suspend activity in presentation mode is selected   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
At least one user has elected to suspend non-business hours activity when in presentation mode. Checking for presentation mode.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
Proceeding to non-business hours activites as presentation mode is off.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
Auto install during non-business hours is disabled or never set, selecting only scheduled updates.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
A user-defined service window(non-business hours) is available. We will attempt to install any scheduled updates.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
Attempting to install 0 updates   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
No actionable updates for install task. No attempt required.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
Updates could not be installed at this time. Waiting for the next maintenance window.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)

Hi,
You could also check Windowsupdate.log on the client.
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Distribute Customer Updates in SCCM 2012 (CU's) using a Task Sequence

I want to utilize a Task Sequence to Distribute Customer Updates to SCCM 2012 Clients. I currently have 2 collections for pre-CU 4 clients, one for 32 Bit Clients (x86) , one for 64 Bit Clients (x64). I have a package pertinent to each collection
which I use to distribute the updates.
However, instead of segregating them by collection, I would like to have one big collection, and have the Task Sequence sort out which package should load on which collection.
I've tried using the RUN COMMAND LINE, and INSTALL PACKAGE options to no avail. Is there a way to utilize a Task Sequence for this undertaking, or should I just continue the way I'm currently doing it.
Thanks ,
Dan

You can set Collection Variables for the two collections, then add running condition in the Task Sequence Steps for corresponding collections.
Juke Chou
TechNet Community Support

Problem to generat an report on an SSRS for SCCM 2012 R2 SP1. I got error has occurred during report processing.

Hi,
Problem to generat an report on an SSRS for SCCM 2012 R2 SP1. I got error has occurred during report processing.
In general it is no problem to generat SSRS reports, but an custom one i get issue with.
The Error:
An
error has occurred during report processing. (rsProcessingAborted)
Query
execution failed for dataset 'DataSet1'. (rsErrorExecutingCommand)
ExecuteReader:
CommandText property has not been initialized

Hi SaiTech,
According to your description, when you render report on SCCM 2012 R2, you got the error message.
According to my knowledge, the issue can be caused by following reasons:
Select permission not granted to ConfigMgr reporting account. We need to open the SQL management console and open the properties dialog box of configmgr db, grant select and execute permission to ConfigMgr reporting account.
Reporting Services Web Service URL or Report Manager is false. Make sure Web Service URL and Report Manager URL are correct. Restart SMS_Executive service and reinstall Reporting Service Point, then please render the report again.
Report timeout. Increase query and report timeout.
If the problem remain unresolved, please provide detailed information of SRSRP.log (default location: %programfiles%\Microsoft and Configuration Manager\Logs) and reporting services error log(default location: %programfiles%\Microsoft SQL Server\<SQL
Server Instance>\Reporting Services\LogFiles), it will help us move more quickly toward a solution.
If you have any more questions, please feel free to ask.
Thanks,
Wendy Fu
If you have any feedback on our support, please click
here.
Wendy Fu
TechNet Community Support

Using a custom certificate store for SCCM 2012 clients and primary site server

I have read what seems to be all the pki related documentation out there for SCCM 2012. I have a PKI infrastructure up and running issueing certificates with an offline root through group policy autoenrollment. The problem that i'm faced with is we are migrating
from SCCM 2007 that was in native mode and we chose not to use the CA that we used for the old SCCM environment. When the clients attempt to communicate with the M.P. it runs through all of the different certificates and adds a tremendous amount of overhead
to the M.P. We will have ten's of thousands of clients by migration end. Could someone please point me to a document that goes over how to leverage a custom certificate store that I could then tell the new 2012 environment to use? I know that it's in there,
I've seen it in the console. The setup is one primary site server with SQL on box and the pki I just mentioned as well as the old 2007 environment that is still live.
I read that you can try and use SAN as a method of identifying the new certs but I haven't found a good document covering exactly how that works. Any info you could provide I would be very grateful for. Thanks.

Jason, thank you for your reply. I'm getting the impression that you have never been in the situation where you had to deal with 2 different PKI environments. Let me state that I understand what your saying about trust. We have to configure the trusted root
CA via GPO. That simply isn't enough, and I have a valid example to backup this claim. When the new clients got the advertisement and began the ccmsetup process I used the /pki switch among others. What the client end up doing was selecting a certificate that
had the longest validity period which was issued by our old CA. It checked the authentication chain, found it to be valid and selected it for communication. At that point the installation failed, period, no caveats as you say. The reason the install failed
because the new PKI infrastructure is integrated into the new environment, and the old is not. So when you said " that
are trusted and they can use *any* cert that is trusted because at the end of the day, there is no
difference between two valid certs that have the same purpose as long as they are trusted. "
that is not correct. Both certs are trusted, and use the same certificate template, but only one certificate would allow the install to complete successfully.
Once I started using the CCMCERTISSUERS
switch the client install went swimmingly. The only reason I'm still debating this point is because someone might read this thread see your comments and assume "well I've got my new PKI configured as a trusted root CA, I should be all set" and their
deployment will fail, just as my pilot did.
About Intune I'm looking forward to doing a POC in the lab i built with my Note 3. I'm hoping it goes well as I really want to have our MDM migrated into ConfigMgr... I think the
biggest obstacle outside of selling it to management will be the actual device migration from the current MDM solution. From what I understand of the enrollment process manual install and config is the only path forward.
Thanks Jason for your post and discussion.

List of recommended hotfixes/updates for SCCM 2012 R2 agents?

Similar Messages

Maybe you are looking for