Sccm 2007 wsus spk2 updated now missing FCS in products

I have a TESTLAB with SCCM 2007 that has been running fine and deploying Forefront Client Security. In SCCM under SUP I can see FCS in the products. I installed the kb2720211 WSUS SPK 2 update and things are doing fine. So I do the same thing
in production and upgrade to WSUS 3.0 SPK2. Then I saw where I need to install KB2734608 to be able to work with Windows 8 and 2012 SERVER from SCCM 2007. I only installed it in production not in TESTLAB, I guess I broke my rule there.  a week or two
go by and I notice that the FCS definitions stopped gong to windows 7 clients. Only have one Windows 8.1 in testing right now. not deployed in Production yet.
Now I go trouble shooting and on the TESTLAB I can go to SUP and configure my Classification and PRODUCTS, I can still see FCS in the software update point component listed in products. I can also open WSUS in TESTLAB from Admin tools but I know not
to manage products from here. On Production I do not see FCS anymore, it shows Microsoft Client Protection and Forefront Endpoint Protection 2012 in the SUP Products. My question is do I continue to move forward with upgrading TESTLAB and production to
use Forefront Endpoint Protection which I have not read how to upgrade yet? Or can I just uninstall the KB 2734608 and fix FCS for now?

Again the ONLY support report is to use the CM07 restore procedures. Will everything work after your restore? Who know as there is no way to know what the problem was/is. There
will be gotcha when you restore your CM07 site and they sometime will fix themselves and other times it is just faster to force them to work. As such, I ALWAYS recommend to my clients that if they ever have to restore their CM environment that they contact
CSS directly for support. This way CSS can ensure that the site is healthy and working correctly. There is No way to do that within the forums in any meaningful way.
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

Similar Messages

  • SCCM 2007 R3 Software Updates Sync : 6703 WSUS server not configured

    Hi,
    We run SCCM 2007 R3 in native mode (Software Update Point and WSUS both reside on SCCM site server). We're having issues running Software Updates Synchronization which have previously worked fine. In SMS_WSUS_Control_Manager the errors appear as follows
    MessageID:6703
    SMS WSUS Synchronization failed.
    Message: WSUS server not configured.
    Source: CWSyncMgr::DoSync.
    The operating system reported error 2147500037: Unspecified error
    I've followed the suggested fixes in
    http://technet.micro...y/bb735874.aspx but still we have an issue.
    If I open the WSUS console directly and run a manual synchronization from Microsoft this completes successfully. However, I presume this will not be using SSL which is what SCCM will want to use in native mode. I've checked the bindings in IIS on WSUS Administration
    site to confirm that the certificate hasn't expired.
    Any ideas what else I can try?
    Cheers,
    Paul

    wsyncmgr.log repeatedly contains the following
    Performing sync on retry schedule SMS_WSUS_SYNC_MANAGER 13/10/2013 14:02:11 612 (0x0264)
    STATMSG: ID=6701 SEV=I LEV=M SOURCE="SMS Server" COMP="SMS_WSUS_SYNC_MANAGER" SYS=CCPSCCM02 SITE=WES PID=8084 TID=612 GMTDATE=Sun Oct 13 13:02:11.288 2013 ISTR0="" ISTR1="" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0 SMS_WSUS_SYNC_MANAGER 13/10/2013
    14:02:11 612 (0x0264)
    Sync failed: WSUS server not configured. Source: CWSyncMgr::DoSync SMS_WSUS_SYNC_MANAGER 13/10/2013 14:07:11 612 (0x0264)
    STATMSG: ID=6703 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_WSUS_SYNC_MANAGER" SYS=CCPSCCM02 SITE=WES PID=8084 TID=612 GMTDATE=Sun Oct 13 13:07:11.284 2013 ISTR0="CWSyncMgr::DoSync" ISTR1="WSUS server not configured" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6=""
    ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0 SMS_WSUS_SYNC_MANAGER 13/10/2013 14:07:11 612 (0x0264)
    Sync failed. Will retry in 60 minutes SMS_WSUS_SYNC_MANAGER 13/10/2013 14:07:11 612 (0x0264)
    Sync time: 0d00h05m00s SMS_WSUS_SYNC_MANAGER 13/10/2013 14:07:11 612 (0x0264)

  • SCCM 2007 WSUS patch

    I have successfullt install WSUS and i believe configure good with SCCM 2007.
    patchs downloaded but its not come in SCCM 2007 server how to sync to receive patchs in SCCM server.
    [email protected]

    Hi,When you say downloads where do you look then? you shouln't configure anything in the WSUS admin console as all configuration will be overwritten by sccm and you risk that clients install updates unexpecetdly.
    Check the wsyncmgr.log file for any errors? do the updates show up in the sccm console? have you run a Synchronization of the repository?
    The actual updates are donwloaded ones you select to download and deploy them and not when WSUS syncs.
    Regards,
    Jörgen
    -- My System Center blog ccmexec.com -- Twitter
    @ccmexec

  • SCCM 2007 Hardware Inventory v_GS_VIRTUAL_MACHINE table missing the PhysicalHostName0 and PhysicalHostNameFullyQualifi0 Columns

    Hi All,
    I went to run a query in SQL Management Studio the other day and realized that the
    v_GS_VIRTUAL_MACHINE table missing the PhysicalHostName0
    and PhysicalHostNameFullyQualifi0 Columns.
    I reviewed the Configuration.mof and SMS_def.mof files and they seem fine. The Configuration.mof file has the below in it where it should be gathering the PhysicalHostName0 and PhysicalHostNameFullyQualifi0 parameters.
    // Virtual PC
    #pragma namespace ("\\\\.\\root\\cimv2")
    [DYNPROPS]
    class Win32Reg_SMSGuestVirtualMachine
        [key]
            string InstanceKey;
            string PhysicalHostName;
            string PhysicalHostNameFullyQualified;
    [DYNPROPS]
    instance of Win32Reg_SMSGuestVirtualMachine
        InstanceKey = "VPCKey";
        [PropertyContext("local|HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Virtual Machine\\Guest\\Parameters|PhysicalHostName"),
                        Dynamic, Provider("RegPropProv")]
            PhysicalHostName;
        [PropertyContext("local|HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Virtual Machine\\Guest\\Parameters|PhysicalHostNameFullyQualified"),
                        Dynamic, Provider("RegPropProv")]
            PhysicalHostNameFullyQualified;
    [DYNPROPS]
    class Win32Reg_SMSGuestVirtualMachine64
        [key]
            string InstanceKey;
            string PhysicalHostName;
            string PhysicalHostNameFullyQualified;
    [DYNPROPS]
    instance of Win32Reg_SMSGuestVirtualMachine64
        InstanceKey = "VPCKey";
        [PropertyContext("local|HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Virtual Machine\\Guest\\Parameters|PhysicalHostName"),
                        Dynamic, Provider("RegPropProv")]
            PhysicalHostName;
        [PropertyContext("local|HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Virtual Machine\\Guest\\Parameters|PhysicalHostNameFullyQualified"),
                        Dynamic, Provider("RegPropProv")]
            PhysicalHostNameFullyQualified;
    I'm not really sure what to look at next and am hoping someone else has experienced this issue before.
    I have looked at other customers running SCCM 2007 and compared the Configuration.mof and SMS_def.mof files, which look pretty much the same.
    Thanks in advanced.
    Andrew

    Are they running on virtual pc or virtual server? Notice that I said virtual pc and virtual server, not Hyper-v. In CM12 this is fix and will show the physical server when running on Hyper-v.
    Garth Jones | My blogs: Enhansoft and
    Old Blog site | Twitter:
    @GarthMJ

  • Bandwidth usage details in SCCM 2007 during software update deployment

    Hi All,
    How can we know or check that how much bandwidth has been used during software update activity in SCCM 2007

    use performance monitor / performance counter perhaps
    http://social.technet.microsoft.com/Forums/en-US/473bf861-6d81-4a3b-b603-2dfdbfa80c62/is-there-a-perfmon-counter-for-network-utilization?forum=perfmon
    ---Pat

  • IOS updated & now missing...

    so, this has been happening to my iPhones and iPad as well but after the firmware update, some songs & playlists goes missing on my devices.  i've always sync & back up before hand but where does it go?  i can get the songs by restore?  what's the best way to get it back?  i buy songs from itune japan & usa, amazon, ripped & recordings of local artists so i can't really just pop it on icloud or itunes match since i'll lose those not on itunes right?  i hope someone or people can help this helpless out!  thanks ^_^

    If you can't find it on any of your homescreens or app folders, and you can't find it via the spotlight search screen (swipe your first home screen to the right), then is it hidden by Settings > General > Restrictions > Camera being set 'off' ?
    If not then have you tried a reset to see if you can find it after the iPad has restarted ? Press and hold both the sleep and home buttons for about 10 to 15 seconds (ignore the red slider), after which the Apple logo should appear - you won't lose any content, it's the iPad equivalent of a reboot.

  • WSUS updates issue in SCCM 2007.

    Hi Friends,
    I have SCCM 2007 infra with multiple sites having a central site server (Windows server 2003 SP2 standered). Earlier it was working fine till May 2014 but now it is not syncing with Microsoft updates.  Below are the steps i took-
    1. Checked the events logs and found the error with event ID 6703. " Cannot sync with WSUS server. WSUS server not configured" like this.
    2. After that I found WSUS server not configured on the box.
    3. In installed WSUS SP2 on the box and successfully synchronized with Microsoft updates (Proxy settings and port settings 8530 and 8531 configured).
    4. Active Software update point role reconfigured after WSUS.
    5. Now still these updates not synchronizing in SCCM console.
    6. Getting same errors nothing good happened.
    Can someone help me?

    Check all possible causes http://technet.microsoft.com/en-in/library/bb735874.aspx
    Narahari(Hurry) Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”

  • Patches not visible in SCCM 2007 Site server even after approving the patches in WSUS

    Hi,
    The patches are not appearing in SCCM 2007 site server after approving the same patches in WSUS.
    Below are the patches.
    MS14-080: Cumulative Security Update for Internet Explorer - Windows Server 2008 SP2 - IE 7 - KB3008923 [23,186.1]
    MS14-018: Cumulative Security Update for Internet Explorer - IE 11 - KB2929437 - Windows Server 2008 R2 SP1 (x64) [4,32.4]
    MS14-066: Vulnerability in Schannel Could Allow Remote Code Execution - Windows Server 2008 SP2 - KB2992611 (x64) - V2 [1,8.3]
    MS14-038: Vulnerability in Windows Journal Could Allow Remote Code Execution - Windows Server 2008 SP2 - KB2971850 [1,8.1]
    MS09-060: Vulnerabilities in Microsoft Active Template Library (ATL) ActiveX Controls for Microsoft Office Could Allow Remote Code Execution - Visio Viewer 2007 SP1/SP2 [1,8.1]
    MS12-001: Vulnerability in Windows Kernel Could Allow Security Feature Bypass - Windows Server 2008 R2 Gold (x64) [1,8.1]
    MS14-033: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure - Windows Server 2008 SP2 - KB2939576 [1,8.1]
    MS14-025: Vulnerability in Group Policy Preferences Could Allow Elevation of Privilege - Windows Server 2008 SP2 - KB2928120 (x64) [1,7.8]
    MS13-014: Vulnerability in NFS Server Could Allow Denial of Service - Windows Server 2008 R2 Gold/SP1 (x64) [1,7.7]
    I have approved the above patches in WSUS and ran syncronization. The log wsyncmgr.log show that synchronization is done and even all child sites are syncronized. But I am unable to find the above even in the parent site. Checked all the SUP settings and
    all the 2008 server updates are set and marked to download.
    Please help me out on fixing this.

    So you should NEVER approve anything in WSUS. This will cause problems with your clients. Honestly since you approved things in WSUS, I would uninstall WSUS and reinstall it, reinstall the SUP, this will clear up any issues that now exist.
    Garth Jones | My blogs: Enhansoft and
    Old Blog site | Twitter:
    @GarthMJ

  • WSUS Server settings and Migrating SCCM 2007 Clients to SCCM 2012 R2

    I am in the process of migrating a site from SCCM 2007 to SCCM 2012 R2.
    Whilst doing this I came across the following issue:
    The first issue is the workstations are woefully out of date, patch and update-wise, some have never had a patch applied as the branch IT staff are building them from the original disk. The policy is set in the SCCM 2007 client to point the machines at
    the 2007 WSUS server, which is not set to deliver any updates to 2007 clients and hasn't been for a while. So as soon as the client is installed they lose the ability to get updates from Microsoft and don't get them from the 2007 WSUS server either.
    Issue number 2 is the machines are a mixture of hand-built machines to SCCM 2007 delivered images, the SCCM image is patch using offline patching so they are somewhat up-to-date, but the hand-built machines are not and as there is no standardization on
    the Microsoft Update client settings, the IT person on-site sets it to whatever he/she feels like, as it makes no difference once the client is installed and the policy applied.
    So, when I come to update the client from 2007 to 2012, the following occurs
    The Client uninstalls, and the GPO policy settings for Windows Update are removed.
    Depending on the setup of the client initially, some machines are then going to Microsoft for their updates (literally 100s) and although the new client is installed the policy update does not fire to update the Windows Update Policy settings, sometimes
    for hours after the install finishes. My thoughts are that it just can't run the policy as it is bogged down by patches updating and, in some cases, rebooting and then updating some more.
    As a workaround I have had to go in an physically disable Microsoft Update on these machines, which stops the downloading and eventually allows the policy to apply, after which the machine then begins to receive patches from WSUS in a controlled method during
    maintenance windows.
    I have tried a number of approaches, even setting the Global Group Policy for Windows Update, but the install still removes the keys and basically sets Windows updates back to whatever it was set before the policy was applied and stays that way until the
    new client is installed and the Machine policy reapplied. This can be speeded up by initiating it on the client obviously, but that would mean going to each client or using right-click tools on each machine, which is not an option.
    What I would like to know is if there is something I am missing from my methods or is it just that I have never been on a site with such out of date workstations built in such different ways.
    Any help would be appreciated.

    First note that clients do *not* get updates from WSUS in ConfigMgr. The Windows Update Agent (WUA) must point to the WSUS integrated into ConfigMgr (by virtue of having the SUP installed on it) but this is only to make the update catalog/metadata available
    to it. Approving updates in WSUS is unsupported for ConfigMgr.
    What you've described above is all working as designed although these clients are falling into a gap between the 2007 and 2012 configuration and thus they are reaching out to Windows Update during this gap and installing updates. To prevent this, you
    need to disable automatic updates via a domain group policy. This will prevent all automated WUA activity including installing updates from any source automatically. This will not interfere with ConfigMgr Software Updates in any way though.
    Jason | http://blog.configmgrftw.com | @jasonsandys

  • Configure WSUS for SCCM 2007 to received patchs and deploy

    Dears,
    I have installled SCCM 2007 and WSUS server in another server now i want to confiure for patching.
    how to do that and and ensure SCCM 2007 server receiving patchs.
    Please assist.
    [email protected]

    Hi,
    Would suggest you read the below on how to create/configure a SUP
    http://technet.microsoft.com/en-us/library/bb633236.aspx
    Blog: http://theinfraguys.com
    Follow me at Facebook
    The Infra Guys Facebook Page
    Please remember to click Mark as Answer on the answer if it helps you in anyway

  • Change "Update distribution points on a schedule" in SCCM 2007 via powershell script

    Hi
    I would like to change the Custom Schedule start time in the "Update distribution points on a schedule" on a package in SCCM 2007 with out logging into the SCCM console.
    I have following line code to query the package.
    Get-WmiObject
    -Namespace
    "Root\SMS\Site_$sitecode"
    -Query
    "SELECT * FROM SMS_PackageBaseclass WHERE PackageID='$PackageID'"
    -ComputerName $ServerName
    The problem is I only get the "SourceDate" and "LastRefreshedTime" from the query. I am not sure if I change the "LastRefreshTime" that it would change the start time in the Custom Schedule

    Hi Jason
    I progressed a little bit with you help. I now have the following bit of code.
    $Package = Get-WmiObject  -class SMS_Package -Namespace "Root\SMS\Site_$sitecode" -Filter "PackageID='$PackageID'" -ComputerName $ServerName
    $RefreshPkg = $Package.RefreshSchedule()
    $RefreshPkg.RefreshSchedule
    I get the following error:
    Method invocation failed because [System.Management.ManagementObject] doesn't contain a method named 'RefreshSchedule'.
    At line:7 char:1
    + $RefreshPkg = $Package.RefreshSchedule()
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (RefreshSchedule:String) [], RuntimeException
        + FullyQualifiedErrorId : MethodNotFound

  • Deploy Java and Oracle updates using SCCM 2007 Software Updates

    Hi Team,
    I am using SCCM 2007 to deploy software updates on all my servers. Now i want deploy updates fro third party tools like Adobe, Java etc..Please suggest me on how to deploy these updates using SCCM.
    I am looking for other simple solution than SCUP 2011. Please suggest.
    Thanks
    Siva

    Hi,
    SCUP 2011 would be the way to do it or a package/program. There are commercial software solutions that plugins to configuration Manager like Secunia
    http://secunia.com/vulnerability_scanning/corporate/sc2012_plugin/ ,Solarwinds
    http://www.solarwinds.com/patch-manager.aspx and Shavlik
    http://www.shavlik.com/products/scupdates/ that offer a subscription of updates for these products for a cost of course.
    Regards,
    Jörgen
    -- My System Center blog ccmexec.com -- Twitter
    @ccmexec

  • SCCM 2007 with MDT 2012 Update 1 - LTI Build Process - "UserLocale" setting is all lowercase.

    Greetings all.  I'm trying to resolve a situation where the "UserLocale" property is being set to "en-us" opposed to "en-US".  Quick environment stats:  SCCM 2007, MDT2010, using LTI build process with a 
    custom UDI.  2 Build Sites (customer build sites), both sites have branch distribution points.
    Both sites are performing the exact same LTI builds.  Same task sequence. 
    Both sites have MDT location records that have the "UserLocale" property defined as "en-US".
    Both sites successfully build the same LTI build, but post build; Site A has correct UserLocale entry of "en-US", while Site B does not have correct UserLocale entry - it is set to "en-us".   This wouldn't normally be a big
    deal, however we have an enterprise application that is hard coded to look for case specific property of "en-US", so this application does not function as desired as Site B.
    Both builds use the same task sequence, same OS.WIM (Windows 7 x86), and same unattend.xml.  The unattend.xml does have UserLocale specified as "en-US" (and also the MDT location records for Site A and Site B both have "UserLocale"
    property defined as "en-US", so I do not understand where the lowercase "en-us" is being populated from during the client build for Site B, when it works correctly for Site A?
    Bdd.log for client build at Site A shows:
    Obtained USERLOCALE value from SQL:  USERLOCALE = en-USUpdated
    C:\WINDOWS\panther\unattend\unattend.xml with UserLocale=en-US (value was en-US)
    Property USERLOCALE is now = en-US
    Bdd.log for client build at Site B shows:
    Obtained USERLOCALE value from SQL:  USERLOCALE = en-US
    Property UserLocale_Edit is now = en-us;0409
    Property UserLocale is now = en-us
    Value for USERLOCALE is already set to en-us so database value of en-US will be ignored.
    Updated C:\WINDOWS\panther\unattend\unattend.xml with UserLocale=en-us (value was en-US)
    Value for USERLOCALE is already set to en-us so database value of en-US will be ignored.
    Can anyone offer insight as to my next troubleshooting steps? I'm not sure why Site B, bdd.log - unattend.xml shows updating UserLocale to en-us instead of en-US?
    (Please note I have verified that the OS.WIM, unattend.xml, and all MDT scripts that run during task sequence execution are exact matches on the BDP's for each site. Same size, date, and content)

    Well, there must be something that is different... If you zip up the logs (all of them) from each setup, and mail them to me, I can take a quick look.
    / Johan
    Regards / Johan Arwidmark Twitter: @jarwidmark Blog: http://www.deploymentresearch.com FB: www.facebook.com/deploymentresearch

  • Migate from Sccm 2007 to 2012 and WSUS functionality

    We are doing a side-by-side migration from 2007 to 2012.
    At present WSUS is installed on the same server as SCCM 2007.
    If we do a side-by-side migration, can we use the existing WSUS on the 2007 server whilst in co-existance?
    or will we have to install WSUS on the new SCCM 2012 as a full replica.
    cheers Mike

    You can migrate from 2007 but you need to configure the new environment with exactly the same products and classifications or the migration will fail - you cannot choose some and omit others.
    I agree with grundlichkeit and Jörgen. Why would you migrate years of updates for no good reason? Don't worry about XP.
    If we do a side-by-side migration, can we use the existing WSUS on the 2007 server whilst in co-existance?
    or will we have to install WSUS on the new SCCM 2012 as a full replica.
    So, in answer to your question, no you would not re-use the 2007 WSUS. You would also not have a replica on the 2012 server. You would start afresh.
    Gerry Hampson | Blog:
    www.gerryhampsoncm.blogspot.ie | LinkedIn:
    Gerry Hampson | Twitter:
    @gerryhampson

  • SCUP 2011 for SCCM 2007 - SUP, WSUS plus MS PKI certificates (not self-signed ones)

    I am installing System Center Updates Publisher 2011 for our SCCM 2007 R2 system.
    Our SCCM 2007 R2 system runs in mixed mode. We have a dedicated server for SUP/WSUS and OSD/PXE functions.
    Shall I install SCUP 2011 on the dedicated server? I have installed it on my Windows 7 computer. What is the best practice configuration? SCUP should be equivalent WSUS role for Microsoft Partners software updates. Am I right? In this case, I should install
    SCUP on the SUP/WSUS server in my opinion.
    We have used the SUP/WSUS to apply Microsoft updates without any problems so far.
    When I am investigating the certificate requirement for SCUP 2011 code signing, I have found out that our SUP/WSUS server has some self-signed certificates for SMS and WSUS.
    All our SCCM 2007 servers except one have self-signed SMS Encryption Certificate and
    SMS Signing Certificate - those certificates are issued to
    SMS by SMS. The SUP/WSUS server also has an extra self-signed certificate
    WSUS Publishers Self-signed for code signing.
    We do have our own Microsoft Active Directory Certificate Services internal PKI service which has been trusted by our AD domain. Therefore, I would like to use an certificate from the PKI service for SCUP 2011 server such that all our SCCM 2007 clients will
    trust the certificate for non Microsoft software updates.
    What should I do re the self-signed SMS or WSUS certificates on the SUP/WSUS server?
    I just want to add SCUP to our SCCM 2007 system without causing problems to Microsoft updates deployment via SUP/WSUS.
    Thanks,
    SJJ123

    Personally I have used the self signed certificate and used the AD Group policy to distribute the certificate. I think it would be possible to import a certificate from your PKI into SCUP. Have you tried this?
    Louis

Maybe you are looking for