NDES/SCEP for MDM via SCCM & Intune
We've recently deployed a NDES/SCEP server for certificate distribution via SCCM & Intune.
Can a single NDES server be used to deploy certificates from two templates (for example user and machine certificates)? Or do we need an additional NDES server for each template?
User or computer authentication is not an issue here - from the perspective of the SCEP servers these are all anonymous requests not tied to AD users or computers anyway.
The distinction - if the SCEP client can provide this - would be the key usages in the certificate signing request.
All these applications use certificates for signing but often certificates for signature + encryption are used. Standards here are often not very clear and applications don't handle that consistently.
I would rather not rely on a separation by key usages because you never know what happens with the next OS version, the next update of the SCEP client, the wireless client, if the SCEP client allows for submitting proper key usages.
Using three different URLs would be a robust separation.
Similar Messages
-
How can i deploy plugins for Firefox via SCCM
Hello All,
I've been asked to deploy some plugins for all our users (namely AdBlock, FireIE and NoScript) across the whole domain. We'd like to do this via SCCM as it is centrally managed and works the best for our environment, plus with people being offsite a lot we can also control and deploy through our VPN solution.
I've read many sources and found that it's not really centrally manageable (currently) or so straightforward. I've found a way to create a deployment that include the plugins which is sufficient in terms of deployment but not ideal, however the main problem is the automatic deployment of settings for the plugins. For example, in the FireIE plugin we have a number of internal websites that use SSO and having the ability to use these within Firefox is extremely advantageous not only for security reasons but also in terms of performance. I can export and import settings but don't want to have to do this for every single user as it would take an awful long time.
Is there a simple way to create a deployment in SCCM (whether it be MSI based, script based, whatever) that would allow this to happen.
All help is greatly appreciated!Check out the ESR community they will have better advice.
Other resources:
*[https://developer.mozilla.org/en-US/Firefox/Enterprise_deployment]
*[https://developer.mozilla.org/en-US/docs/Deploying_a_Plugin_as_an_Extension] -
Deploying ipa file via SCCM 2012 R2 / Intune
Hello Experts,
We recently set up a Windows Intune Subscription in our Configuration Manager 2012 R2 Environment. The MDM part (Configuration Items) and deploying app store deep links is working without any problems.
In our company we have a native iOS App which is currently distributed via a website. (Not App Store!). I tried to distribute the app via configuration manager 2012 r2 but the app doesn't show up in the company portal even after a day. I made the following
steps to distribute the app:
1. Received the ipa and plist File from the Developer.
2. Added the application to configuration manager 2012 r2
3. Deployed the application to my intune user collection (DP: manage.microsoft.com / Purpose: Available)
Did i miss any importent step? One thing i can say is that the app is not signed with our APN Certificate which is used in the Intune Subscription. According to our developer this should not be neccessary?!
Thanks for any advice.I redeployed the app and the following entries were in the logs:
dmpuploader.log:
Found sync start for replication group CloudDmp~~ $$<SMS_DMP_UPLOADER><04-08-2014 14:53:20.870-120><thread=1268 (0x4F4)>
StartUpload for replication group CloudDmp last sync version 102489 ...~~ $$<SMS_DMP_UPLOADER><04-08-2014 14:53:20.870-120><thread=1268 (0x4F4)>
Startload succeeded with transmission ID c3d5cd09-24ab-41ca-882b-16884cee269e~~ $$<SMS_DMP_UPLOADER><04-08-2014 14:53:21.198-120><thread=1268 (0x4F4)>
Expecting sync data or sync end message, however message type is DRS_SyncPing~~ $$<SMS_DMP_UPLOADER><04-08-2014 14:53:21.697-120><thread=1268 (0x4F4)>
EndUpload transmission c3d5cd09-24ab-41ca-882b-16884cee269e final data version 102490 succeeded~~ $$<SMS_DMP_UPLOADER><04-08-2014 14:53:21.822-120><thread=1268 (0x4F4)>
Found sync start for replication group CloudDmp~~ $$<SMS_DMP_UPLOADER><04-08-2014 14:53:21.822-120><thread=1268 (0x4F4)>
StartUpload for replication group CloudDmp last sync version 102490 ...~~ $$<SMS_DMP_UPLOADER><04-08-2014 14:53:21.822-120><thread=1268 (0x4F4)>
Startload succeeded with transmission ID fc4037f9-f99a-40a4-bf8a-a827a007228f~~ $$<SMS_DMP_UPLOADER><04-08-2014 14:53:21.947-120><thread=1268 (0x4F4)>
Expecting sync data or sync end message, however message type is DRS_SyncPing~~ $$<SMS_DMP_UPLOADER><04-08-2014 14:53:22.071-120><thread=1268 (0x4F4)>
EndUpload transmission fc4037f9-f99a-40a4-bf8a-a827a007228f final data version 102491 succeeded~~ $$<SMS_DMP_UPLOADER><04-08-2014 14:53:22.181-120><thread=1268 (0x4F4)>
outgoingcontentmanager.log
Computed hash: FD2EBFDE308A335BCC11B416A5069975CFB36244DA6398871BF284641F720F00 $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:17.272-120><thread=8604 (0x219C)>
Content hash validated for 'Content_25b08807-a83b-4736-ac0e-64e82cbd62bc'. $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:17.288-120><thread=8604 (0x219C)>
STATMSG: ID=9515 SEV=I LEV=M SOURCE="SMS Server" COMP="SMS_OUTGOING_CONTENT_MANAGER" SYS=SERVER.fqdn SITE=P01 PID=5104 TID=8604 GMTDATE=Di Apr 08 12:49:17.288 2014 ISTR0="P01001B7" ISTR1="["Display=\\manage.microsoft.com\"]MSWNET:["SMS_SITE=P01"]\\manage.microsoft.com\"
ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=2 AID0=400 AVAL0="P01001B7" AID1=404 AVAL1="["Display=\\manage.microsoft.com\"]MSWNET:["SMS_SITE=P01"]\\manage.microsoft.com\" $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014
14:49:17.288-120><thread=8604 (0x219C)>
STATMSG: ID=9516 SEV=I LEV=M SOURCE="SMS Server" COMP="SMS_OUTGOING_CONTENT_MANAGER" SYS=SERVER.fqdn SITE=P01 PID=5104 TID=8604 GMTDATE=Di Apr 08 12:49:17.288 2014 ISTR0="P01001B7" ISTR1="["Display=\\manage.microsoft.com\"]MSWNET:["SMS_SITE=P01"]\\manage.microsoft.com\"
ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=2 AID0=400 AVAL0="P01001B7" AID1=404 AVAL1="["Display=\\manage.microsoft.com\"]MSWNET:["SMS_SITE=P01"]\\manage.microsoft.com\" $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014
14:49:17.288-120><thread=8604 (0x219C)>
Uploading package P01001B7 from source D:\Program Files\Microsoft Configuration Manager\SMS_OCM_DATACACHE\P01001B7.1.9956.~~ $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:17.397-120><thread=8604 (0x219C)>
ICM Intializing...~~ $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:17.397-120><thread=8604 (0x219C)>
Found certificate with thumbprint 5432E7D0D36FAF934364B7E3AFC4BB181FE41185~~ $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:17.412-120><thread=8604 (0x219C)>
Content source directory is D:\Program Files\Microsoft Configuration Manager\SMS_OCM_DATACACHE\P01001B7.1.9956~~ $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:17.444-120><thread=8604 (0x219C)>
Creating a software distribution package for SCCM PackageId P01001B7 from location D:\Program Files\Microsoft Configuration Manager\SMS_OCM_DATACACHE\P01001B7.1.9956\Content_25b08807-a83b-4736-ac0e-64e82cbd62bc.1\App.ipa.~~ $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014
14:49:17.553-120><thread=8604 (0x219C)>
Phase: AuthoringMetadata started.~~ $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:18.270-120><thread=8604 (0x219C)>
Preparing files for upload for SCCM PackageId P01001B7, SCCM ApplicationId 283cb33f-177c-4957-9e2c-d376c2311b77, IntuneApplicationId 2c9a7e42-85e4-41a2-8754-ae971be40808~~ $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:19.628-120><thread=8604
(0x219C)>
Progress: 100% (phase), 16% (total). ~~ $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:19.643-120><thread=8604 (0x219C)>
Progress: 100% (phase), 16% (total). ~~ $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:19.659-120><thread=8604 (0x219C)>
Phase: EncryptingFiles started.~~ $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:19.659-120><thread=8604 (0x219C)>
Progress: Item type: EncryptedFiles. Completed: 1. Total: 1~~ $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:20.236-120><thread=8604 (0x219C)>
Progress: 100% (phase), 33% (total). ~~ $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:20.236-120><thread=8604 (0x219C)>
Files are ready for upload for SCCM PackageId P01001B7. Folder 'C:\Windows\TEMP\SoftwarePublishing\5104_46\12189ee0-304b-494d-b1e2-f45a61200e0b'.~~ $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:20.236-120><thread=8604 (0x219C)>
Uploading metadata for SCCM PackageId P01001B7, Intune PackageId 2c9a7e42-85e4-41a2-8754-ae971be40808~~ $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:20.252-120><thread=8604 (0x219C)>
Phase: UploadingMetadata started.~~ $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:20.298-120><thread=8604 (0x219C)>
Progress: 100% (phase), 50% (total). ~~ $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:20.860-120><thread=8604 (0x219C)>
Uploading files for SCCM PackageId P01001B7, Intune PackageId 2c9a7e42-85e4-41a2-8754-ae971be40808~~ $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:20.860-120><thread=8604 (0x219C)>
Phase: UploadingFiles started.~~ $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:20.860-120><thread=8604 (0x219C)>
Progress: 100% (phase), 66% (total). ~~ $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:43.808-120><thread=8604 (0x219C)>
Upserting MDMContent table for SCCM PackageId P01001B7.~~ $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:43.871-120><thread=8604 (0x219C)>
Upload is complete for SCCM PackageId P01001B7~~ $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:43.917-120><thread=8604 (0x219C)>
Successfully processed package ID P01001B7 for MDM distribution point ["Display=\\manage.microsoft.com\"]MSWNET:["SMS_SITE=P01"]\\manage.microsoft.com\. $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:43.917-120><thread=8604 (0x219C)>
~Successfully created/updated the package server in the data source. $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:43.933-120><thread=8604 (0x219C)>
STATMSG: ID=2330 SEV=I LEV=M SOURCE="SMS Server" COMP="SMS_OUTGOING_CONTENT_MANAGER" SYS=SERVER.fqdn SITE=P01 PID=5104 TID=8604 GMTDATE=Di Apr 08 12:49:43.949 2014 ISTR0="P01001B7" ISTR1="["Display=\\manage.microsoft.com\"]MSWNET:["SMS_SITE=P01"]\\manage.microsoft.com\"
ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=2 AID0=400 AVAL0="P01001B7" AID1=404 AVAL1="["Display=\\manage.microsoft.com\"]MSWNET:["SMS_SITE=P01"]\\manage.microsoft.com\" $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014
14:49:43.949-120><thread=8604 (0x219C)>
StateTable::CState::Handle - (2330:1 2014-04-08 12:49:43.949+00:00) >> (2331:1 2014-04-03 14:33:42.595+00:00) $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:43.949-120><thread=8604 (0x219C)>
CStateMsgReporter::DeliverMessages - Queued message: TT=1401 TIDT=0 TID='7F6041B0-3EE2-427F-AB72-B89610A6331C' SID=2330 MUF=0 PCNT=2, P1='P01' P2='2014-04-08 12:49:43.949+00:00' P3='' P4='' P5='' $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:43.949-120><thread=8604
(0x219C)>
CStateMsgReporter::DeliverMessages - Created state message file: D:\Program Files\Microsoft Configuration Manager\inboxes\auth\statesys.box\incoming\1mdiw5qb.SMX $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:43.995-120><thread=8604
(0x219C)>
Successfully send state change notification 7F6041B0-3EE2-427F-AB72-B89610A6331C $$<SMS_OUTGOING_CONTENT_MANAGER><04-08-2014 14:49:43.995-120><thread=8604 (0x219C)>
I searched the log file in the company portal for the app name but i couldn't find anything. -
Although I didn't lose any previously deployed policies or Exchange email profiles, new devices currently aren't able to receive certain deployments from SCCM/Intune due to iOS 8 not being a select-able platform. Given all the Zero day support articles
for iOS 8 i expected this would already be available. Now iOS 8 is released, anyone happen to know when the updates to manage iOS 8 are going to be released?Hey there Tjindarr,
I don't see any mention of it not being released in the UK from the article: http://blogs.technet.com/b/configmgrteam/archive/2014/09/29/ios-8-support-now-available-for-sc-2012-r2-configmgr-via-extension-for-intune.aspx
Stupid question: Have you closed and reopened your Admin Console? -
Silent Install for SQL 2008 admin tools, to be pushed out via SCCM 2012
Hi I would like to know if you have any information on Silent App installs for MS SOL fetchers only? I really need to know what MSI to use in my Application and any switched i can incorporate for deployment though SCCM 2012.
Thanks,
MannyHi,
do you want to install SQL 2008 admin tools? and what tools do you want to install? and what is your application? And do you want to deploy the installation script via SSCM? Please be more clear. -
Enabling Thesaurus for Microsoft Office 2012 via SCCM?
Hi guys,
We have Office 2012 with Windows 8.1 in our corporate environment but at the time of BOE/SOE creation, Thesaurus was left out with deployment.
If we want to enable Thesaurus across all the PC's what the easiest way to do this?
Via SCCM or Group Policy?
Thanks in advance!To be clear: this is an Office question, not an SCCM question. When it comes to app deployment and configuration SCCM basically dogmatically does what ever you tell it to do so what you really need to to know is: how will Office let me
do this?
The exact process is also going to vary depending on which office you have installed. Enterprise media will let you use setup /admin for example to create configurations you can push to workstations (adding missing components like the shared features
which I think will have the Thesaurus), Click-to-run from O365 will require the editing of a deployment xml (I'm blanking on the details but you can look it up) ...
.. at the end of the day there _is_ a silent way to update the deployments which will enable you to create a package/application that you can then push to workstations. Sadly exact syntax is not as straight forward as "how do i update Office"
... because frankly there's lots of ways depending on the flavor. -
Manual formatted for C: and D: drive Via SCCM 2012 task sequence
Dear All
i have a problem with the formatting of the HDD by using SCCM 2012 , our Co. have laptops with C: &
D: drive and we started to implement our W7 migration by using SCCM 2012 and we face the a problem which is how to keep the data of the D drive either during the deploy the new W 7 image our after we deployed the image with C and D drive .
we create a task sequence to format the whole HDD and then make two partition .
but our target to keep the old users data in D: drive in case of system crash .
so can we do the format issue manually via task sequence to can control the size of the HDD and just
format the C: drive
i read in internet there is a Disk partition script can be apply during the task sequence activity to control
the formate issue.
or to stop the formatte issue for D: drive via SCCM.Dear EminM
thanks
for your replay
you are right i mean the laptop has C and D partition
we make a TS which was configure to crate two partition
After we complete our Task sequence we face problem that TS format the two partition and that mean we will loss the data in D partition in case we need to apply this TS in the future to any laptop has system crash .
our target to have TS just format the C partition and leave the D partition without any action to be able to save the data in the D partition without any corrupted.
for that do you have an idea to do that TS . -
Running a Repair for Office 2010 via SCCM 2012
Hello,
We have come into a bit of an issue. We're attempting to deploy & install Service Pack 2 for Microsoft Office 2010, however it fails, after some research it looks like it works if we run a repair on Microsoft Office.
Is there anyway we can do this via SCCM? because we need to run a repair on 5000 machines.
Any ideas?
JayTake a look at the following.
http://social.technet.microsoft.com/Forums/office/en-US/75d50085-28b4-400b-97d4-77203c173352/repairremove-office-2010-silently
Only caveat is it states 'Make sure that no Office applications are running when you try to repair/remove Office 2010.' Not sure how you would control that in the real world.
Cheers
Paul | sccmentor.wordpress.com -
NDES - SCEP - Certificate Profile 0X87D1FDE8 Remediation failed - Deployment of Certificate Profiles
Hy all,
i have a problem with certificate profiles deployment via SCCM 2012 R2.
My Testlab:
Server 2012 R2 - DC
Server 2012 R2 - CA
Server 2012 R2 - SCCM 2012 R2, Intune Subscription ...
Server 2012 R2 - NDES, SCCM Site System with Certificate Registration Point, Policy Module
NDES Service Account (SPN for NDES Server)
CA:
Administrative Rights for NDES Service Account
CEP Encryption (Read&Enroll for NDES Service)
Exchange Enrollment Agent (Offline request) (Read&Enroll for NDES Service Account)
Webserver Certificate for NDES, SCCM Server (Dublicatet Webserver Template)
Client Authentication Certificate for NDES, SCCM Server (Dublicatet Template for Client Authentication)
"Custom IPSec V2" Template, (Dublicatet Template of IPSec (offline request), Read&Enroll for NDES Service Account)
Policy Module on NDES Server
In the Wizard i selected the Client Authentication Certificate
NDES Server
Installed "Network Device Enrollment Service" Role Service
SCCM Site System, SCEP Role
Location: HKLM\SYSTEM\CurrentControlSet\Services\HTTP\Parameters
Value: MaxFieldLength
Type DWORD
Data: 65534 (decimal)
Location: HKLM\SYSTEM\CurrentControlSet\Services\HTTP\Parameters
Value: MaxRequestBytes
Type DWORD
Data: 65534 (decimal)
SSL settings to “Require” SSL , “Ignore” client certificates.
NDES Service Account member of IIS_IUSRS
IIS - Webserver Certificate for :443 Binding
HKLM\SOFTWARE\Microsoft\Cryptography\MSCEP
EncryptionTemplate, GeneralPurposeTemplate, SignatureTemplate
i set it to "CustomIPSecV2"
SCCM:
Installed Certificate Registration Point on NDES Server
Certificate Registration Point Properties - URL for the Network Device Enrollment Service ...
I set it to: https://externalfqdn/certsrv/mscep/mscep.dll
Certificate Root CA Profile
Certificate Profile for "CustomIPSecV2" Certificate
Now i have following error for the deployment of the "CustomIPSecV2" Certificate: 0X87D1FDE8 Remediation failed
I can not find any error in the logs (SCCM, crp.log, NDESPlugin.log, crpctrl.log)
In the IIS log there are following entries:
2014-08-02 18:57:41 fe80::10b7:f62:ec3c:605d%12 POST /CMCertificateRegistration/certificate/generatechallenge - 443 - fe80::10b7:f62:ec3c:605d%12 SMS_CERTIFICATE_REGISTRATION_POINT - 201 0 0 3502
2014-08-02 14:07:40 172.16.0.8 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACert&message=MDM 443 - 144.11.115.119 - - 200 0 0 68
What can i do?
Thanks in Advance ..Hello!
I still have the same problem - Remediation failed - 0X87D1FDE8
Is this only a problem of the certificate template?
I also reinstalled NDES Server and CRP Role on Primary Site
Has anyone an idea?
CRPSetup, crpctrl, CRPMSI all ok.
IISLog:
#Software: Microsoft Internet Information Services 8.5
#Version: 1.0
#Date: 2014-10-13 13:09:35
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken
2014-10-13 13:09:35 172.16.0.6 GET /certsrv/mscep/mscep.dll - 80 - 172.16.0.5 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.3;+WOW64;+Trident/7.0;+.NET4.0E;+.NET4.0C) - 200 0 0 1179
2014-10-13 13:09:37 172.16.0.6 GET /favicon.ico - 80 - 172.16.0.5 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.3;+WOW64;+Trident/7.0;+.NET4.0E;+.NET4.0C) - 404 0 2 1384
2014-10-13 13:14:01 172.16.0.6 GET / - 80 - 172.16.0.4 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 200 0 0 1
2014-10-13 13:14:01 172.16.0.6 GET /iis-85.png - 80 - 172.16.0.4 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko
http://server.external.fqdn 200 0 0 6
2014-10-13 13:14:03 172.16.0.6 GET /favicon.ico - 80 - 172.16.0.4 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 404 0 2 1
#Software: Microsoft Internet Information Services 8.5
#Version: 1.0
#Date: 2014-10-13 13:15:24
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken
2014-10-13 13:15:24 172.16.0.6 GET /certsrv/mscep/mscep.dll - 443 - 172.16.0.4 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 200 0 0 2
2014-10-13 13:15:24 172.16.0.6 GET /favicon.ico - 443 - 172.16.0.4 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 404 0 2 4
2014-10-13 13:15:40 172.16.0.6 GET /certsrv/mscep/mscep.dll - 443 - 193.83.183.27 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 200 0 0 47
2014-10-13 13:15:40 172.16.0.6 GET /favicon.ico - 443 - 193.83.183.27 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 404 0 2 47
2014-10-13 13:20:08 172.16.0.6 GET /certsrv/mscep/mscep.dll - 443 - 193.83.183.27 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 200 0 0 49
2014-10-13 13:20:08 172.16.0.6 GET /favicon.ico - 443 - 193.83.183.27 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 404 0 2 47
2014-10-13 13:25:32 172.16.0.6 GET /certsrv/mscep/mscep.dll - 443 - 193.83.183.27 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 200 0 0 48
2014-10-13 13:25:32 172.16.0.6 GET /certsrv/mscep/mscep.dll - 443 - 193.83.183.27 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 200 0 0 50
2014-10-13 13:25:33 172.16.0.6 GET /certsrv/mscep/mscep.dll - 443 - 193.83.183.27 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 200 0 0 49
2014-10-13 13:35:17 172.16.0.6 GET /certsrv/mscep/mscep.dll - 443 - 193.83.183.27 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 200 0 0 49
#Software: Microsoft Internet Information Services 8.5
#Version: 1.0
#Date: 2014-10-13 13:43:25
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken
2014-10-13 13:43:25 172.16.0.6 GET /certsrv/mscep/mscep.dll - 443 - 193.83.183.27 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 200 0 0 150
2014-10-13 13:43:32 172.16.0.6 GET /certsrv/mscep/mscep.dll - 443 - 104.45.8.80 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 200 0 0 6
2014-10-13 13:43:42 172.16.0.6 GET /certsrv/mscep/mscep.dll - 443 - 172.16.0.4 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 200 0 0 1
2014-10-13 13:47:25 172.16.0.6 GET /certsrv/mscep operation=GetCACert&message=MyDeviceID 443 - 193.83.183.27 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 301 0 0 47
2014-10-13 13:47:25 172.16.0.6 GET /certsrv/mscep/ operation=GetCACert&message=MyDeviceID 443 - 193.83.183.27 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 200 0 0 50
#Software: Microsoft Internet Information Services 8.5
#Version: 1.0
#Date: 2014-10-13 13:52:22
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken
2014-10-13 13:52:22 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACert&message=MDM 443 - 193.83.183.27 - - 200 0 0 233
2014-10-13 13:52:22 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACaps&message=MDM 443 - 193.83.183.27 - - 200 0 0 46
2014-10-13 13:57:00 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACert&message=MDM 443 - 193.83.183.27 - - 200 0 0 56
2014-10-13 13:57:00 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACaps&message=MDM 443 - 193.83.183.27 - - 200 0 0 41
2014-10-13 14:03:26 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACert&message=MDM 443 - 193.83.183.27 - - 200 0 0 62
2014-10-13 14:03:26 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACaps&message=MDM 443 - 193.83.183.27 - - 200 0 0 46
#Software: Microsoft Internet Information Services 8.5
#Version: 1.0
#Date: 2014-10-13 14:19:25
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken
2014-10-13 14:19:25 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACert&message=MDM 443 - 193.83.183.27 - - 200 0 0 1278
2014-10-13 14:19:25 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACaps&message=MDM 443 - 193.83.183.27 - - 200 0 0 52
2014-10-13 14:19:31 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACert&message=MDM 443 - 193.83.183.27 - - 200 0 0 104
2014-10-13 14:19:31 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACaps&message=MDM 443 - 193.83.183.27 - - 200 0 0 74
2014-10-13 14:21:07 172.16.0.6 GET /certsrv/mscep/ operation=GetCACert&message=MyDeviceID 443 - 193.83.183.27 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 200 0 0 62
#Software: Microsoft Internet Information Services 8.5
#Version: 1.0
#Date: 2014-10-13 14:26:01
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken
2014-10-13 14:26:01 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACert&message=MDM 443 - 193.83.183.27 - - 200 0 0 294
2014-10-13 14:26:01 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACaps&message=MDM 443 - 193.83.183.27 - - 200 0 0 46
2014-10-13 14:26:07 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACert&message=MDM 443 - 193.83.183.27 - - 200 0 0 56
2014-10-13 14:26:07 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACaps&message=MDM 443 - 193.83.183.27 - - 200 0 0 52
#Software: Microsoft Internet Information Services 8.5
#Version: 1.0
#Date: 2014-10-13 14:46:41
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken
2014-10-13 14:46:41 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACert&message=MDM 443 - 193.83.183.27 - - 200 0 0 601
2014-10-13 14:46:41 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACaps&message=MDM 443 - 193.83.183.27 - - 200 0 0 47
2014-10-13 14:46:51 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACert&message=MDM 443 - 193.83.183.27 - - 200 0 0 99
2014-10-13 14:46:51 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACaps&message=MDM 443 - 193.83.183.27 - - 200 0 0 78
2014-10-13 14:50:40 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACert&message=MDM 443 - 193.83.183.27 - - 200 0 0 46
2014-10-13 14:50:40 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACaps&message=MDM 443 - 193.83.183.27 - - 200 0 0 66
2014-10-13 14:51:53 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACert&message=MDM 443 - 193.83.183.27 - - 200 0 0 46
2014-10-13 14:51:53 172.16.0.6 GET /certsrv/mscep/mscep.dll/pkiclient.exe operation=GetCACaps&message=MDM 443 - 193.83.183.27 - - 200 0 0 62
Christoph R 13 -
Hi All,
Has anyone used PI adapter for MDM 7.1.
what is the transport protocol, the technical details that we need to mention in the PI adapter communication channel.
is there any blog/howto guide on usage of MDM PI adapter.
thanks,
GaneshHi,
I was able to find some information on PI adapter with MDM 7.1
Streamlined Communication via PI Adapter:
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/604b3c0c-5b6c-2b10-cc83-a7af75c70eaf
/people/orit.prince/blog/2009/02/03/how-to-schedule-mdm-inbound-processes-with-pi-ccbpm
MDM 7.1 PI Adapter Guide:
https://websmp205.sap-ag.de/~sapidb/011000358700001890482008E
Hope this info helps.
Thanks and Regards
Nitin jain -
Deploying Office 365 Pro Plus via SCCM
Hi
I am trying to deploy Office 365 Pro Plus via SCCM, I followed this process https://gallery.technet.microsoft.com/How-To-Deploying-Office-70e8b1eb#content , we don't use the application catalogue but I made the application available to be run via system
center.
Though can't get it deployed, I keep getting some errors about checking internet connections ...though I can run the command manually and it'works.
Does anyone managed to install it via SCCM ?Thank you for the reply,
Where I am lost is where it downloads the Office C2R from ?
Logs from the Temp folder
03/04/2015 10:51:15.947 SETUP (0xf10)
0x107c Click-To-Run
anhmm Medium
Prereq::PrereqsFailed: No prereqs have failed.
03/04/2015 10:51:16.228 SETUP (0xf10)
0x107c Click-To-Run
aoh9t Medium
TryLaunchClient::HandleStateAction: Launching OfficeClickToRun.exe with parameters: scenario=unknown acceptalleulas="True" cdnbaseurl="http://officecdn.microsoft.com/pr/39168D7E-077B-48E7-872C-B232C3E72675" productreleaseid="none"
displaylevel="False" culture="en-us" baseurl="C:\WINDOWS\ccmcache\5l" lcid="1033" platform="x86" updatesenabled="False" o365proplusretail.excludedapps="access,groove,lync,project,sharepointdesigner,visio"
version="15.0.4675.1003" productstoadd="O365ProPlusRetail_en-us_x-none" trackedduration=280
03/04/2015 11:01:12.393 SETUP (0xf10)
0x107c Click-To-Run
aoh72 Medium
ExitBootStateMachine::HandleStateAction: Bootstrapper workflow exiting with result: 0x0
Logs from SCCM AppEnforce shows this (can't see it failing)
<![LOG[+++ Starting Install enforcement for App DT "Install - Microsoft Office 365 ProPlus" ApplicationDeliveryType - ScopeId_2A03C658-AF66-44B9-85ED-4FADE04A803B/DeploymentType_5a39078c-a7a3-438c-af16-0cb0a0674479, Revision - 7, ContentPath
- C:\WINDOWS\ccmcache\5l, Execution Context - System]LOG]!><time="10:50:45.222-600" date="03-04-2015" component="AppEnforce" context="" type="1" thread="5596" file="appprovider.cpp:1702">
<![LOG[ A user is logged on to the system.]LOG]!><time="10:50:45.243-600" date="03-04-2015" component="AppEnforce" context="" type="1" thread="5596" file="appprovider.cpp:2083">
<![LOG[ Performing detection of app deployment type Install - Microsoft Office 365 ProPlus(ScopeId_2A03C658-AF66-44B9-85ED-4FADE04A803B/DeploymentType_5a39078c-a7a3-438c-af16-0cb0a0674479, revision 7) for system.]LOG]!><time="10:50:45.247-600"
date="03-04-2015" component="AppEnforce" context="" type="1" thread="5596" file="appprovider.cpp:2148">
<![LOG[+++ Application not discovered. [AppDT Id: ScopeId_2A03C658-AF66-44B9-85ED-4FADE04A803B/DeploymentType_5a39078c-a7a3-438c-af16-0cb0a0674479, Revision: 7]]LOG]!><time="10:50:45.287-600" date="03-04-2015" component="AppEnforce"
context="" type="1" thread="5596" file="localapphandler.cpp:291">
<![LOG[ App enforcement environment:
Context: Machine
Command line: Setup.exe /configure Install.xml
Allow user interaction: No
UI mode: 1
User token: null
Session Id: 1
Content path: C:\WINDOWS\ccmcache\5l
Working directory: ]LOG]!><time="10:50:45.288-600" date="03-04-2015" component="AppEnforce" context="" type="1" thread="5596" file="appcontext.cpp:85">
<![LOG[ Prepared working directory: C:\WINDOWS\ccmcache\5l]LOG]!><time="10:50:45.290-600" date="03-04-2015" component="AppEnforce" context="" type="1" thread="5596" file="appcontext.cpp:189">
<![LOG[ Prepared command line: "C:\WINDOWS\ccmcache\5l\setup.exe" /configure Install.xml]LOG]!><time="10:50:45.340-600" date="03-04-2015" component="AppEnforce" context="" type="1"
thread="5596" file="appcontext.cpp:338">
<![LOG[ Executing Command line: "C:\WINDOWS\ccmcache\5l\setup.exe" /configure Install.xml with user context]LOG]!><time="10:50:45.341-600" date="03-04-2015" component="AppEnforce" context=""
type="1" thread="5596" file="appexcnlib.cpp:201">
<![LOG[ Working directory C:\WINDOWS\ccmcache\5l]LOG]!><time="10:50:45.341-600" date="03-04-2015" component="AppEnforce" context="" type="1" thread="5596" file="appexcnlib.cpp:215">
<![LOG[ Post install behavior is BasedOnExitCode]LOG]!><time="10:50:45.529-600" date="03-04-2015" component="AppEnforce" context="" type="1" thread="5596" file="appcommon.cpp:1094">
<![LOG[ Waiting for process 3856 to finish. Timeout = 120 minutes.]LOG]!><time="10:50:45.533-600" date="03-04-2015" component="AppEnforce" context="" type="1" thread="5596"
file="appexcnlib.cpp:1958">
<![LOG[ Process 3856 terminated with exitcode: 0]LOG]!><time="11:01:12.428-600" date="03-04-2015" component="AppEnforce" context="" type="1" thread="5596" file="appexcnlib.cpp:1967">
<![LOG[ Looking for exit code 0 in exit codes table...]LOG]!><time="11:01:12.429-600" date="03-04-2015" component="AppEnforce" context="" type="1" thread="5596" file="appexcnlib.cpp:505">
<![LOG[ Matched exit code 0 to a Success entry in exit codes table.]LOG]!><time="11:01:12.430-600" date="03-04-2015" component="AppEnforce" context="" type="1" thread="5596" file="appexcnlib.cpp:584">
<![LOG[ Performing detection of app deployment type Install - Microsoft Office 365 ProPlus(ScopeId_2A03C658-AF66-44B9-85ED-4FADE04A803B/DeploymentType_5a39078c-a7a3-438c-af16-0cb0a0674479, revision 7) for system.]LOG]!><time="11:01:12.621-600"
date="03-04-2015" component="AppEnforce" context="" type="1" thread="5596" file="appprovider.cpp:2148">
<![LOG[+++ Application not discovered. [AppDT Id: ScopeId_2A03C658-AF66-44B9-85ED-4FADE04A803B/DeploymentType_5a39078c-a7a3-438c-af16-0cb0a0674479, Revision: 7]]LOG]!><time="11:01:12.739-600" date="03-04-2015" component="AppEnforce"
context="" type="1" thread="5596" file="localapphandler.cpp:291">
<![LOG[++++++ App enforcement completed (627 seconds) for App DT "Install - Microsoft Office 365 ProPlus" [ScopeId_2A03C658-AF66-44B9-85ED-4FADE04A803B/DeploymentType_5a39078c-a7a3-438c-af16-0cb0a0674479], Revision: 7, User
SID: ] ++++++]LOG]!><time="11:01:12.748-600" date="03-04-2015" component="AppEnforce" context="" type="1" thread="5596" file="appprovider.cpp:2448"> -
Lync 2013 x64 silent client deployment via SCCM 2012 SP1
Greetings everyone!
I ran into a problem with Lync 2013 x64 silent deployment.
I need to provide every workstation with Lync 2013 client, so i decided to use deployment via SCCM 2012 sp1.
I created 2 msp files with OCT, one based on x86 Office 2013 Proplus, and other based on x64 Office 2013 Proplus.
Added them as applications to sccm software library.
Deployment of Lync 2013 x86 application was a success with over than 80% compliance.
But all Lync 2013 x64 automatic installations finish with different errors.
I created special device collection for workstations with office 2010 x64 and 2013 x64, because i can't install other architecture products once it has x64 product installed.
My membership query-rules for this collection:
Office 2013 x64
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_INSTALLED_SOFTWARE on SMS_G_System_INSTALLED_SOFTWARE.ResourceId
= SMS_R_System.ResourceId where UPPER(SMS_G_System_INSTALLED_SOFTWARE.SoftwareCode) = "{90150000-0011-0000-1000-0000000FF1CE}"
Office 2010 x64
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_INSTALLED_SOFTWARE on SMS_G_System_INSTALLED_SOFTWARE.ResourceId
= SMS_R_System.ResourceId where UPPER(SMS_G_System_INSTALLED_SOFTWARE.SoftwareCode) = "{90140000-0011-0000-1000-0000000FF1CE}"
My application deployment type points to setup.exe in office 2013 x64 installation folder, where i created msp file in updates folder via OCT and edited config.xml file in proplus.ww folder.
So my installation program looks like this setup.exe /adminfile updates\1lync.msp /config proplus.ww\config.xml
The same configuration works with Lync 2013 x86 deployment, except other setup folders.
When i try running installation program setup.exe with /adminfile and /config parameters locally, it installs successfully without errors or warnings.
I'm trying to find out problem source, does anyone have ideas what I am doing wrong?
Also i'm trying to reduce office 2013 installation folder size, what subfolders are necessary for Office 2013 proplus installation (still installing only lync with common files and tools)? Because now 3.5 GB package is quite hard to distribute to sccm secondary
sites with deployment point.
Thanks in advance.Hi,
Here are some tips and tricks for your reference.
Tips and Tricks: Deploying Lync 2013 client using SCCM 2012 | Lync 2013 Client Customization for SCCM 2012 Deployment Package
http://zahirshahblog.com/2014/01/08/tips-and-tricks-deploying-lync-2013-client-using-sccm-2012-lync-2013-client-customization-for-sccm-2012-deployment-package/
Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place. -
App-V 5.0 SP2 user applications published via SCCM 2012 to VDI workstations with roaming only
Hi,
The environment consists of App-V 5.0 SP2 (KB2956985) user based applications published via SCCM 2012 to Windows 7 VDI snapshotted workstations that are reset at user logoff.
When a user logs on the SCCM 2012 client initiates App-V client package publishing. After a couple of minutes after logon the shortcuts appear and the user can launch their applications.
The issue is that at logoff, even with roaming enabled, the publishing information disappears. This causes the next logon process for that user to repeat, the applications are not available until the SCCM client has completed it's publishing cycle.
Roaming profiles are implemented. %APPDATA% is redirected to a UNC path. The following registry key is set
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\AppV\Client\Integration\PreserveUserIntegrationsOnLogin=1
U-EV, global publishing of applications, and AppLocker rules are not an option. Also, I have read this already - http://technet.microsoft.com/en-us/library/dn659478.aspx#BKMK_PE
I do not want to wait for the SCCM client to kick in prior to the user applications being available. What do I need to roam or run to create a seamless transition for the user between sessions?
Eddie.Hi Tywin (bad username considering the last GoT Episode ;))
If you ask Microsoft, they always recommend using SCCM for deploying App-V packages and reuse your current SCCM infrastructure if that is already in place. Problem is, as you now experience, is that there is some big caveats both in regards to publishing
time and to roaming of settings.
As Nické states I would suggest looking into the Full Infrastructure Model for App-V 5.x, which gives you much better performance in what I call "from no apps" to "being able to click the shortcut" - the add and publishing phase. If you don't have the time/budget/whatever
to start looking into that, you could look into some community tools like App-V Scheduler which is developed specific by Citrix guys to ease the publishing and management in a Citrix world.
Microsoft have a great article about Performance Guidelines, which you have read, but it mostly presumes you work with Full Infrastructure. Have you looked into Steve Thomas' session from TechEd NA? It talks about "implementation trends".
Senior Consultant at Atea Denmark - http://Atea.dk Atea Technical Evangelist for App-V NoLightPeople - http://NoLightPeople.com Access Director - http://www.nolightpeople.com/index.aspx#accessdirector -
Silent install of Photoshop Elements 10 via SCCM fails
Hi all, hoping someone can help. I'm trying to push out deployment of Adobe Photoshop Elements 10 via SCCM. From Adobe's site I found details on adding an XML file to preconfigure various default settings and perform a silent install. I can push out
the package to my test PC's cache folder no problem, but the advertisement fails with "Failed (bad environment)" message ID 10003. The system cannot find the file specified."
However, I can install the program manually, running the same code from the command line. So, on my test PC, if I go to c:\windows\system32\cache\(package) from the command line, I can type the following "start /wait Setup.exe /UL1033 /V"SERIALNUMBER=xxxx-xxxx-xxxx-xxxx-xxxx-xxxx"
(as per Adobe's instructions) and Photoshop Elements 10 will silently install just fine.
I've read elsewhere that SCCM can have issues with server paths and making use of the %~dp0 variable but I'm unsure if that applies here. In SCCM, in the program properties for PE10, the drive mode is set to "Runs with UNC name." I tried changing to 'requires
drive letter" but it still failed. I'm guessing I'm dealing with some sort of environment issue but I'm stuck as to how to fix. Any suggestions?
Thanks in advance,
Sir_TimbitI used "start /wait" as that was what was listed on Adobe's silent install instructions at http://helpx.adobe.com/photoshop-elements/kb/silent-install-instructions-photoshop-elements-1.html
Again, it installs fine manually, *if* I point a command prompt to c:\windows\system32\ccm\cache\(cache folder)\ and run the start /wait setup.exe line below. But through SCCM, the advertisement report shows:
Message ID:10003. Failed (bad environment)
An error occurred while preparing to run the program for advertisement "ABC20074" ("ABC00041" - "Install Photoshop Elements 10"). The operating system reported error -2147024894: The system cannot find the file specified. Additional program properties: Command
line: start /wait Setup.exe /UL1033 /V"SERIALNUMBER=xxxx-xxxx-xxxx-xxxx-xxxx-xxxx" Working directory: Drive letter (? = any): Possible cause: This message most commonly occurs when the program's command-line executable file could not be found, when a required
drive letter connection to a distribution point could not be established, or when the program is configured to use the SMS Software Installation Account but the account is not specified, could not be found, or does not have the appropriate permissions. Solution:
Check each of the items listed above.
Execmgr.log on the client shows the following:
<![LOG[Successfully selected content location C:\WINDOWS\system32\CCM\Cache\ABC00041.1.System]LOG]!><time="12:01:25.056+360" date="08-13-2012" component="execmgr" context="" type="1" thread="3860" file="executioncontext.cpp:1703">
<![LOG[GetFileVersionInfoSize failed for file C:\WINDOWS\system32\CCM\Cache\ABC00041.1.System\start, error 1812]LOG]!><time="12:01:25.071+360" date="08-13-2012" component="execmgr" context="" type="2" thread="3860" file="executioncontext.cpp:119">
<![LOG[Executing program as a script]LOG]!><time="12:01:25.071+360" date="08-13-2012" component="execmgr" context="" type="1" thread="3860" file="executionengine.cpp:103">
<![LOG[Invalid executable file start]LOG]!><time="12:01:25.071+360" date="08-13-2012" component="execmgr" context="" type="3" thread="3860" file="scriptexecution.cpp:511">
<![LOG[Raising event:
[SMS_CodePage(437), SMS_LocaleID(1033)]
instance of SoftDistProgramBadEnvironmentEvent
AdvertisementId = "ABC20074";
ClientID = "GUID:8892F324-A104-4E4B-A3A1-0F2571233B59";
CommandLine = "start /wait Setup.exe /UL1033 /V\"SERIALNUMBER=xxxx-xxxx-xxxx-xxxx-xxxx-xxxx\"";
DateTime = "20120813180125.087000+000";
DriveLetter = "";
MachineName = "PCAB31";
PackageName = "ABC00041";
ProcessID = 268;
ProgramName = "Install Photoshop Elements 10";
SiteCode = "ABC";
ThreadID = 3860;
Win32ErrorCode = 2147942402;
WorkingDirectory = "";
]LOG]!><time="12:01:25.087+360" date="08-13-2012" component="execmgr" context="" type="1" thread="3860" file="event.cpp:525">
<![LOG[Raised Program Bad Environment Event for Ad:ABC20074, Package:ABC00041, Program: Install Photoshop Elements 10]LOG]!><time="12:01:25.087+360" date="08-13-2012" component="execmgr" context="" type="1" thread="3860" file="executioncontext.cpp:739">
<![LOG[EnterRsRuningState failed to run script start /wait Setup.exe /UL1033 /V"SERIALNUMBER=xxxx-xxxx-xxxx-xxxx-xxxx-xxxx" 0x80009106]LOG]!><time="12:01:25.087+360" date="08-13-2012" component="execmgr" context="" type="2" thread="3860" file="executionrequest.cpp:3318">
<![LOG[Fatal error 0x80009106 enountered for program Install Photoshop Elements 10. This program will not retry.]LOG]!><time="12:01:25.165+360" date="08-13-2012" component="execmgr" context="" type="1" thread="3860" file="executionrequest.cpp:3477">
<![LOG[CreateMandatoryRequestRecursively Install Photoshop Elements 10 failed at EvaluateRequestForExecution]LOG]!><time="12:01:25.227+360" date="08-13-2012" component="execmgr" context="" type="2" thread="3860" file="execreqmgr.cpp:3765">
<![LOG[Policy is updated for Program: Install Photoshop Elements 10, Package: ABC00041, Advert: ABC20074]LOG]!><time="12:01:25.243+360" date="08-13-2012" component="execmgr" context="" type="1" thread="3968" file="execreqmgr.cpp:6711">
Thanks in advance for any help you can provide,
Sir_timbit -
Adobe Flash Player 11.4 installation via SCCM(Batch File)
Hi Guys,
I need to install Adobe Flash Player 11.4 on 150+ Computers via SCCM
I am trying to run batch file in SCCM but doesn't work.
It says Program has started in reporting but nothing happens and eventually failed saying -> run time exceeded
SCCM program-> i m just calling ->
commandline --> flashinstall.bat
my code in batch file is,
@echo off
start \\sms01\source$\Adobe Flash Player 11.4.402.265\IE\flashplayer_11_ax_debug.exe /silent
start \\sms01\source$\Adobe Flash Player 11.4.402.265\Other Browser\flashplayer_11_plugin_debug.exe /silent
xcopy /y /q /s "\\sms01\source$\Adobe Flash Player 11.4.402.265\mms.cfg" "C:\windows\System32\macromed\flash\"
EXIT
Can you please help me out regarding how to run batch file in sccmOK , I just deployed flash player here and it ran like a charmy .
1 - Download the last version of flash ( msi )
- Go to this URL and Download the msi file : http://www.adobe.com/au/products/flashplayer/distribution3.html
2 - Create a "install.cmd" file .
- Create a folder , place the flash player msi file there ( install_flash_player_11_plugin.msi) . Inside this folder , create a file with the name "install.cmd" . Open this file and add the follow lines :
msiexec /qn /norestart /i "%~dp0install_flash_player_11_plugin.msi"
exit /B %EXIT_CODE%
Salve and close the file .
I assume that you know how to create a package / program .
3 - Create a new package
- After create the packge , create a new program for the package . In command line field , click in browse , make sure that you list "all files (*.*)" and click at install.cmd . Select the msi file (install_flash_player_11_plugin.msi) on "Windows Installer" option . also , make sure that "Run with administrative rights" is selected on "Environment" .
Thats should be enough , let me know how it go .
Cheers ,
Maybe you are looking for
-
Mac OS X 10.6.6(SnowLeopard)とAcrobat Pro 9(9.3.0)にて Adobe Acrobat 9をインストールすると 自動的にシステム環境設定の中の「プリンタとファックス」上に 「Adobe PDF 9.0」が表示されるそうですが.表示されません. また.プリンタの追加(+)をクリックしても. 名前が表示されないので.選択・追加することが出来ません. Acrobatのアンインストール・再インストールなどは試みたのですがダメでした. なにか表示させるための解決
-
How to undo CTRL+Right Click Personalization
Hello, I used CTRL+ Right Click to hide a button on an ESS iView, Family Members and Dependents. Now I want to unhide the button. But can't seem to find it. Any clue, how I should retrieve it back? I am using Web Dynpro Java. I used Administrator ID
-
Change login manager but still boot to same DE
Ok, here is the story. I have installed gnome and lxde. I made the gnome GDM screen my default login screen, so it boots straight to that. I also have x window manager installed which was originally started using startx, but with the GDM screen I no
-
Does anybody know the limitations to outlook 2000 signatures. I tried putting javascript in and its having non of it, yet it displays in the editor on outlook, but when you save and open a new email it dissapears. Also anybody got any good ideas for
-
I have a web based project that contains numerous JSPs base reports. I would like to schedule it to run every morning. How does one go about scheduling this and storing it into a place where Oracle Application Server would allow users to have access?