SCCM 2012: enable powershell execution policy for SCCM 2012 console
Hi,
I always get stuck settings up the remote sccm 2012 powershell (cd psdrive sitecode:). Maybe not a real sccm 2012 question but Powershell but wonder what steps you take to make it work (it works on our production environment, setting up in a lab always gives
me headaches, will defintely write the solution down this time :-)).
Please advise what the steps are in configuring remote powershell for SCCM 2012.
1.my personal account "Myuser" has admin-rights in sccm 2012
2.I can open Powershell logged on to the sccm 2012 server then opening sccm 2012 console, connect via powershell
3.however, when I connect remote to the sccm server, I get the error:
. : File C:\Users\Myuser\Documents\WindowsPowerShell\Microsoft.PowerShell_profile.ps1 cannot be loaded. The file C:\Use
rs\MyUser\Documents\WindowsPowerShell\Microsoft.PowerShell_profile.ps1 is not digitally signed. You cannot run this scr
ipt on the current system. For more information about running scripts and setting execution policy, see about_Execution
_Policies at http://go.microsoft.com/fwlink/?LinkID=135170.
4.So I connect to the sccm-server and ask for the execution policy to unrestricted, I get this:
set-executionpolicy unrestricted
[Y] Yes [N] No [S] Suspend [?] Help (default is "Y"): y
Set-ExecutionPolicy : Windows PowerShell updated your execution policy successf
ully, but the setting is overridden by a policy defined at a more specific scope
There is no policy which sets any powershell configs.
Please advise.
J.
Jan Hoedt
Those client settings are only for the actions performed by the ConfigMgr client. Normal PowerShell actions are restricted to the configured execution policy on the machine.
Have a look at this post:
http://blogs.msdn.com/b/pasen/archive/2011/12/07/set-executionpolicy-windows-powershell-updated-your-execution-policy-successfully-but-the-setting-is-overridden-by-a-policy-defined-at-a-more-specific-scope.aspx
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude
Similar Messages
-
Set execution policy via CM 2012 SP1
Good afternoon everyone.
Sorry about the last question. I'd attempted to resolve this in so many ways that the last question was based on an old attempt.
I'm trying to set the PowerShell Execution Policy through a batch file. Specifically, the batch file contains one single command:
PowerShell -NoProfile -ExecutionPolicy Bypass -Command "& {Start-Process PowerShell -ArgumentList 'Set-ExecutionPolicy RemoteSigned -Force' -Verb RunAs}"
If I run this command standalone, either as local Admin or not, the batch file completes and the execpol is changed appropriately.
When deploying the batch file through CM, Software Center shows a successful installation but the ExecPol value does not change. The batch file within CM is configured to run as administrator.
Any suggestions as to what I may be doing wrong would be greatly appreciated.
Thanks very much.
IAmStringsHi Narco.
Yep, tried that as well. Tried Registry /s with a reg file and tried calling another PoSH script under a temp ExecPol of bypass that ran:
set-itemproperty-path"registry::HKLM\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell"-nameExecutionPolicy-value"UnRestricted"
If they're deployed, they don't change the value.
It's almost as if the deployment isn't really running as admin. I've looked at the execmgr.log but I never see any entries with "Failed" or anything like that. There are some entries stating that it's "WaitingServiceWindow" but then I later see
the state changing from "WaitingServiceWindow to Ready"
Thanks for replying.
IAmStrings -
Bypassing Execution Policy for a specific host
Is is possible to have the execution policy set to remotesigned but have specific hosts set to bypass? I am administering an SCCM 2012 environment and I want to be able to run Powershell to check for the existence of packages or applications but it keeps
erroring out that the script is not signed. I tried adding the server to wsman:\localhost\client\truestedhosts but that did not seem to work either. Is this possible?
Thanks!
TonyHi Tony,
I’m writing to just check in to see if the suggestions were helpful.
If you need further help, please feel free to reply this post directly so we will be notified to follow it up.
If you have any feedback on our support, please click here.
Best Regards
Anna
TechNet Community Support -
Microsoft DaRT Recovery Image Wizard - powershell execution policy
When I launch DaRT Recovery Image Wizard I get this message -
"Windows Powershell updated your execution policy successfully, but the setting is overridden by a policy defined at a more specific scope. Due to the override your shell will retain its current effective execution policy of AllSigned."
I want my powershell settings set this way.
But it wont let me continue to run the mDart wizard.
Why does it need to modify my powershell settings to less secure scope?
Is there a workaround for this? This seems like a bug.
Thanks for any helpWhich version of DaRT and what operating system?
Brandon
MDOP on the Springboard Series on TechNet -
Windows Server 2012 Essentials - Implement Group Policy for the 1st time
This is my first server. We have 15 users and 20 devices, all clients are running Win7 Pro.
On the Dashboard, Devices tab, when I click on each device there is an option to implement Group Policy in the right-hand task pane. Does this mean I can implement it for one device at a time? Or will it happen for everyone in the domain?
I'm hesitant to start. Is this something where I should wait for the weekend, so I can restore from a backup if need be?
Thanks for your help
AlanTime to get a basic Windows networking reference book and read up on group policy. Policies are applied by the system on a predicable refresh rate, which if memory servers is 15 minutes. This can be forced from the stations with the cli command "gpupdate
/force" but in most cases there is little need to do so.
Some, like folder redirection, only impact the stations on reboot/sign on
Larry Struckmeyer[MVP] If your question is answered please mark the response as the answer so that others can benefit. -
Hardware Sizing for SCCM 2012 R2
Hello,
I need your help to do Hardware Sizing for SCCM 2012 R2 environment (SCCM and SQL on same server) with 1000 clients. I have identified the Vm for this installation,
Kindly share the RAM, HDD (Partitions for OS, Data, Log etc..) and No.of CPU
Additionally kindly confirm SQL server 2012 SP1 requires any CU for SCCM 2012 R2 environment.Just an example...
At least 16GB RAM, 2 or more CPUs.
Basically your HDD configuration depends do you have fast disk or slow disk. HDD has to be fast, Johan has very good examples here:
http://www.deploymentresearch.com/Research/tabid/62/EntryId/115/Sizing-your-ConfigMgr-2012-R2-Primary-Site-Server.aspx
SQL Server 2012 SP1 doesn't require any CU for ConfigMgr 2012 R2. -
Pre-provision TRK for SCCM 2012 R2 client
Hello,
Clients have some troubles with establishing trusted relationship with management point, I found this article http://technet.microsoft.com/en-us/library/bb680504.aspx but this for SCCM 2007, where can I find for SCCM 2012 R2?Do you have AD extended and is the site information properly published to AD in the System Management container?
What happens when you manually "push" a client?
What exactly is the entire command-line you are using to install the client?
The message above is not about the trusted root key, it clearly shows that MP being communicated with is not in the MPLIST returned. I can't say I've ever seen that before, but it is indicative of some other configuration type error.
Jason | http://blog.configmgrftw.com
Hello,
thank you for your message,
yes, AD was extended and System Management container has site info,
I have the same problems with push and manual installation,
I tried this command (specify key and site server cert and without it): C:\Client\ccmsetup.exe /mp:SCCM /logon SMSSITECODE:CM1 SMSPublicRootKey=<key> SMSSIGNCERT=<path to cert>
where <key> from a file and cert which was exported from site server.
Where MPList is stored? We spent much time to solve this problem, even reinstalled SCCM on new servers with new site code but problem is not solved.
After installation client tries to register on management point but there are errors in the different logs at same time:
Failed to verify signature of message received from MP using name 'SCCM.contoso.com.'
Failed to verify message. Sending MP [SCCM] not in cached MPLIST.
RegTask: Failed to send registration request message. Error: 0x87d00309 -
Hi
We have one central site server and three primary site servers in SCCM 2007 and completed the SCCM 2012 migration as single hierarchy.
During the migration, We have configured SCCM 2007 Central site server as source hierarchy for data gathering process and configured the "Enable distribution-point sharing for this source site" to make SCCM 2007 distribution points
as SCCM 2012 content shares to serve SCCM 2012 migrated clients. Now we are facing a problem that one of the primary site server's data gathering process did not gather SCCM 2007 DPs even though we configured "Enable distribution-point sharing for this
source site" but data gathering process is completing successfully.
Is anyone have idea, why these SCCM 2007 DPs did not appearing as SCCM 2012 content shares under "Shared Distribution Points"
Thanks in Advance
srkrNow we are facing a problem that one of the primary site server's data gathering process did not gather SCCM 2007 DPs even though we configured "Enable distribution-point sharing for this source
site" but data gathering process is completing successfully.
Earlier all the shared DPs are showing under Shared Distribution Points ? Or since starting itself these DPs are not showing down? Have you checked migmctrl.log for some clue?
Anoop C Nair (My Blog www.AnoopCNair.com)
- Twitter @anoopmannur -
FaceBook Forum For SCCM -
Hi ,how can I get a list of all laptops or users with folder direction enabled or offline files enabled, be it sccm
or poerwshell . i have struggled for a week
tchocrHi,
There is no such PowerShell command can achiev this. Maybe you can use a script to get the user name with folder redirection enabled. However, I am not familiar with writing script, and it would be better for you to ask in script forum below for professional
assistance:
http://social.technet.microsoft.com/Forums/en-US/home?forum=ITCG&filter=alltypes&sort=lastpostdesc
Best Regards,
Mandy
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected] -
How can I get a list of all laptops or users with folder direction enabled or offline files enabled, be it sccm or poerwshell . i have struggled for a week.
Hi,
There is no such PowerShell command can achiev this. Maybe you can use a script to get the user name with folder redirection enabled. However, I am not familiar with writing script, and it would be better for you to ask in script forum below for professional
assistance:
http://social.technet.microsoft.com/Forums/en-US/home?forum=ITCG&filter=alltypes&sort=lastpostdesc
Best Regards,
Mandy
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected] -
Hi,
We try to install sccm 2012 serondary site in server 2012. It always failed.
I used the rereqchek tools to check system enviroment locally. All passed.
The primary site installed in server 2012. Both server had granted the administrator permission.
Anyone can help to check the below Configmgrprereq.log
<01-16-2015 08:47:55> ********************************************
<01-16-2015 08:47:55> ******* Start Prerequisite checking. *******
<01-16-2015 08:47:55> ********************************************
<01-16-2015 08:47:55> Commandline :
"D:\Microsoft Configuration Manager\bin\x64\smsexec.exe"
<01-16-2015 08:47:55> Check Type: Secondary site
Site Server: DPServer.ms.com,
SQL Server: DPServer.ms.com,
SQL Named Instance: ,
Install Folder: d:\Program Files\Microsoft Configuration Manager\,
Setup Source Folder: D:\SCCM2012\Source
<01-16-2015 08:47:55> INFO: Executing prerequisite functions...
<01-16-2015 08:47:55> ===== INFO: Prerequisite Type & Server: SITE_SEC:DPServer.ms.com =====
<01-16-2015 08:47:55> <<<RuleCategory: Access Permissions>>>
<01-16-2015 08:47:55> <<<CategoryDesc: Checking access permissions...>>>
<01-16-2015 08:47:55> INFO: CheckLocalSys is Admin of <DPServer.ms.com>.
<01-16-2015 08:48:08> DPServer.ms.com; Site server computer account administrative rights; Error; Configuration Manager Setup requires that the site server computer has administrative rights on
the SQL Server and management point computers.
<01-16-2015 08:48:08> <<<RuleCategory: System Requirements>>>
<01-16-2015 08:48:08> <<<CategoryDesc: Checking system requirements for ConfigMgr...>>>
<01-16-2015 08:48:08> INFO: Check Lanman service: <DPServer.ms.com>.
<01-16-2015 08:48:22> DPServer.ms.com; Check Server Service is running; Passed
<01-16-2015 08:48:30> INFO: OS version:0, ServicePack:0.
<01-16-2015 08:48:30> DPServer.ms.com; Unsupported site server operating system version for Setup; Error; Configuration Manager site systems can only be installed on systems running Windows Server
2008 SP2 or later.
<01-16-2015 08:48:34> INFO: Failed to get Active Directory membership information for computer DPServer.ms.com with 0.
<01-16-2015 08:48:34> DPServer.ms.com; Domain membership; Error; Configuration Manager site server components must be installed on computers that are members of a Windows domain.
<01-16-2015 08:48:40> INFO: Free disk space on target \\DPServer.ms.com\d$\. = 510158 MB
<01-16-2015 08:48:40> DPServer.ms.com; Free disk space on site server; Passed
<01-16-2015 08:48:47> DPServer.ms.com; Pending system restart; Passed
<01-16-2015 08:48:50> INFO: The server DPServer.ms.com is not read-only domain controller.
<01-16-2015 08:48:50> DPServer.ms.com; Read-Only Domain Controller; Passed
<01-16-2015 08:48:50> INFO: Check FQDN Length for site server: <DPServer.ms.com>.
<01-16-2015 08:48:50> DPServer.ms.com; Site Server FQDN Length; Passed
<01-16-2015 08:48:50> <<<RuleCategory: Dependent Components>>>
<01-16-2015 08:48:50> <<<CategoryDesc: Checking dependent components for ConfigMgr...>>>
<01-16-2015 08:48:57> DPServer.ms.com; Microsoft XML Core Services 6.0 (MSXML60); Warning; MSXML 6.0 or later libraries are required for Configuration Manager console and Configuration Manager site
server installations. MSXML 6.0 is available for download at http://go.microsoft.com/fwlink/?LinkId=215744
<01-16-2015 08:49:03> DPServer.ms.com; Microsoft Remote Differential Compression (RDC) library registered; Error; Microsoft Remote Differential Compression (RDC) library must be registered for Configuration
Manager site server installation. Details at http://technet.microsoft.com/library/cc431377.aspx#RDC_for_Site_Servers.
<01-16-2015 08:49:03> INFO: Checking Windows Installer version on DPServer.ms.com.
<01-16-2015 08:49:13> INFO: Path of Windows Installer is <\\DPServer.ms.com\C$\Windows\System32\msi.dll>.
<01-16-2015 08:49:19> ERROR: Failed to determine Windows Installer version from path:<\\DPServer.ms.com\C$\Windows\System32\msi.dll> .
<01-16-2015 08:49:19> DPServer.ms.com; Microsoft Windows Installer; Error; Setup failed to verify the Windows Installer version, or the installed version of Windows Installer does not meet the minimum
requirement. Configuration Manager requires at least Windows Installer version 4.5.
<01-16-2015 08:49:19> INFO: Start Checking InstallSQLExpress on site server: DPServer.ms.com, SQL Server instance CONFIGMGRSEC
<01-16-2015 08:49:28> INFO: SQL Server Instance Names value was not found
<01-16-2015 08:49:28> INFO: IsPortUsedByAnySqlInstance port 1433.
<01-16-2015 08:49:39> INFO: TCP port 1433 is not in use by any other SQL Server instances.
<01-16-2015 08:49:49> INFO: Sql express: OS version:0, ServicePack:0.
<01-16-2015 08:49:49> ERROR: Cannot install sqlexpress 2012, not meet OS requirement: Windows server 2008 sp2, Windows server 2008 R2 sp1 or higher.
<01-16-2015 08:49:49> DPServer.ms.com; SQL Server Express on Secondary Site; Error; A SQL Server instance is already installed on the secondary site server using the instance name CONFIGMGRSEC,
or the specified TCP port is being used by another SQL Server instance, or OS version is not Windows Server 2008 sp2, Windows Server 2008 R2 sp1 or higher. Setup is unable to install SQL Server Express on the secondary site.
<01-16-2015 08:49:55> ERROR: Failed to connect to registry of DPServer.ms.com
<01-16-2015 08:49:55> DPServer.ms.com; Existing Configuration Manager server components on site server; Error; A site server or site system role is already installed on the computer selected for
site server installation. Remove the site or site system role from the computer, or select another computer for site server installation.
<01-16-2015 08:49:55> DPServer.ms.com; Firewall exception for SQL Server (stand-alone primary site); Passed
<01-16-2015 08:49:55> INFO: SQL Server computer <DPServer.ms.com>
<01-16-2015 08:49:55> INFO: SQL Server named instance <>
<01-16-2015 08:49:55> INFO: Install SQL Server Express on secondary site, skip checking.
<01-16-2015 08:49:55> DPServer.ms.com; SQL Server service running account; Passed
<01-16-2015 08:49:55> INFO: Install SQL Server Express on secondary site, skip checking.
<01-16-2015 08:49:55> DPServer.ms.com; Dedicated SQL Server instance; Passed
<01-16-2015 08:49:55> INFO: CheckSQLCollationSecondary
<01-16-2015 08:49:55> INFO: Installing SQL Server Express; skipping
<01-16-2015 08:49:55> DPServer.ms.com; Parent/child database collation; Passed
<01-16-2015 08:49:55> INFO: Checking .NET framework versions 3.5...
<01-16-2015 08:50:05> INFO: .NET is installed
<01-16-2015 08:50:05> DPServer.ms.com; Minimum .NET Framework version for Configuration Manager site server; Passed
<01-16-2015 08:50:05> INFO: Checking .NET version required for installing SQL Server Express for Secondary Site.
<01-16-2015 08:50:05> INFO: Checking .NET framework versions 4.0...
<01-16-2015 08:50:10> INFO: .NET is installed
<01-16-2015 08:50:11> DPServer.ms.com; Minimum .NET Framework version for SQL Server Express edition installation for Configuration Manager Secondary Site; Passed
<01-16-2015 08:50:11> INFO: CheckInstallSourceVersion <D:\SCCM2012\Source>
<01-16-2015 08:52:29> ERROR: Could not read install map from \\DPServer.ms.com\D$\\SCCM2012\Source\SMSSETUP\install.map (result 2)
<01-16-2015 08:52:29> DPServer.ms.com; Setup Source Version; Error; The product version in the source folder specified for secondary site installation does not match the version of the primary site.
<01-16-2015 08:52:29> INFO:CheckInstallSourcePath <DPServer.ms.com>
<01-16-2015 08:52:55> ERROR: Failed to call GetResultByRunningService
<01-16-2015 08:52:55> DPServer.ms.com; Setup Source Folder; Error; The computer account for the secondary site must have Read NTFS and share permissions to the Setup source folder and share. We
recommend that you do not use administrative shares (for example, C$ and D$) because they require the secondary site computer account to be an administrator on the remote computer.
<01-16-2015 08:52:55> INFO: Enter CheckSecSiteSqlOnSameMachine.
<01-16-2015 08:52:55> INFO: Installing SQL Server Express, skipping SQL Server check.
<01-16-2015 08:52:55> DPServer.ms.com; SQL Server on the Secondary Site Computer; Passed
<01-16-2015 08:52:55> INFO:CheckSupportedFQDNFormat <DPServer.ms.com>
<01-16-2015 08:53:04> INFO: NetBIOS <NZWHKVMAS020>
<01-16-2015 08:53:04> DPServer.ms.com; Primary FQDN; Passed
<01-16-2015 08:53:04> INFO:CheckMachineAccountHasADAccess <DPServer.ms.com>
<01-16-2015 08:53:30> ERROR: Failed to call GetResultByRunningService
<01-16-2015 08:53:30> DPServer.ms.com; Verify site server permissions to publish to Active Directory.; Warning; The site server might be unable to publish to Active Directory. The computer account
for the site server must have Full Control permissions to the System Management container in its Active Directory domain. You can ignore this warning if you have manually verified these permissions. For more information about your options to configure required
permissions, see http://go.microsoft.com/fwlink/p/?LinkId=233190.
<01-16-2015 08:53:30> INFO:CheckRemoteWMIConnection <DPServer.ms.com>
<01-16-2015 08:53:44> DPServer.ms.com; Remote Connection to WMI on Secondary Site; Passed
<01-16-2015 08:53:44> INFO: Check required collation of Sql Server.
<01-16-2015 08:53:44> INFO: LangID <409>
<01-16-2015 08:53:44> INFO: NOT primary site or CAS install, skipping check for reqired collation of SQL Server.
<01-16-2015 08:53:44> DPServer.ms.com; Required SQL Server Collation; Passed
<01-16-2015 08:53:44> ===== INFO: Prerequisite Type & Server: SQL:DPServer.ms.com =====
<01-16-2015 08:53:44> <<<RuleCategory: Access Permissions>>>
<01-16-2015 08:53:44> <<<CategoryDesc: Checking access permissions...>>>
<01-16-2015 08:53:44> INFO: Installing SQL Server Express, skipping check for sysadmin role on SQL Server.
<01-16-2015 08:53:44> DPServer.ms.com; SQL Server sysadmin rights; Passed
<01-16-2015 08:53:44> INFO: Skip testing, no expand primary site specified.
<01-16-2015 08:53:44> DPServer.ms.com; SQL Server sysadmin rights for reference site; Passed
<01-16-2015 08:53:44> INFO: The rule 'Site server computer account administrative rights' has been run on server 'DPServer.ms.com', skipped.
<01-16-2015 08:53:44> INFO: Installing SQL Server Express, skipping Windows integrated security check.
<01-16-2015 08:53:44> DPServer.ms.com; SQL Server security mode; Passed
<01-16-2015 08:53:44> <<<RuleCategory: System Requirements>>>
<01-16-2015 08:53:44> <<<CategoryDesc: Checking system requirements for ConfigMgr...>>>
<01-16-2015 08:53:44> INFO: The rule 'Unsupported site server operating system version for Setup' has been run on server 'DPServer.ms.com', skipped.
<01-16-2015 08:53:44> INFO: The rule 'Domain membership' has been run on server 'DPServer.ms.com', skipped.
<01-16-2015 08:53:44> INFO: The rule 'Pending system restart' has been run on server 'DPServer.ms.com', skipped.
<01-16-2015 08:53:44> <<<RuleCategory: Dependent Components>>>
<01-16-2015 08:53:44> <<<CategoryDesc: Checking dependent components for ConfigMgr...>>>
<01-16-2015 08:53:44> INFO: Installing SQL Server Express, skipping SQL Server version check.
<01-16-2015 08:53:44> DPServer.ms.com; SQL Server version; Passed
<01-16-2015 08:53:44> DPServer.ms.com; SQL Server Edition; Passed
<01-16-2015 08:53:44> DPServer.ms.com; SQL Server Tcp Port; Passed
<01-16-2015 08:53:44> INFO: Checking if SQL Server memory is limited.
<01-16-2015 08:53:44> INFO: Installing SQL Server Express, skipping SQL Server memory check.
<01-16-2015 08:53:44> DPServer.ms.com; Configuration for SQL Server memory usage; Passed
<01-16-2015 08:53:44> INFO: Checking if SQL Server memory is configured to reserve minimum memory.
<01-16-2015 08:53:44> INFO: Installing SQL Server Express, skipping SQL Server memory allocation check.
<01-16-2015 08:53:44> DPServer.ms.com; SQL Server process memory allocation; Passed
<01-16-2015 08:53:44> INFO: Installing SQL Server Express, skipping SQL Server case insensitive validation.
<01-16-2015 08:53:44> DPServer.ms.com; Case-insensitive collation on SQL Server; Passed
<01-16-2015 08:53:44> INFO: Check Machine FQDN: <DPServer.ms.com>.
<01-16-2015 08:53:44> INFO: getaddrinfo returned success.
<01-16-2015 08:53:44> DPServer.ms.com; Validate FQDN of SQL Server Computer; Passed
<01-16-2015 08:53:44> INFO: The rule 'Primary FQDN' has been run on server 'DPServer.ms.com', skipped.
<01-16-2015 08:53:44> ===== INFO: Prerequisite Type & Server: MP:DPServer.ms.com =====
<01-16-2015 08:53:44> <<<RuleCategory: Access Permissions>>>
<01-16-2015 08:53:44> <<<CategoryDesc: Checking access permissions...>>>
<01-16-2015 08:53:44> DPServer.ms.com; Administrative share (Site system); Passed
<01-16-2015 08:53:44> INFO:CheckSiteSystemtoSQLConnectivity <DPServer.ms.com>
<01-16-2015 08:53:44> INFO: Installing secondary site, skipping SQL Server connectivity check.
<01-16-2015 08:53:44> DPServer.ms.com; Site System to SQL Server Communication; Passed
<01-16-2015 08:53:44> <<<RuleCategory: System Requirements>>>
<01-16-2015 08:53:44> <<<CategoryDesc: Checking system requirements for ConfigMgr...>>>
<01-16-2015 08:53:44> INFO: The rule 'Check Server Service is running' has been run on server 'DPServer.ms.com', skipped.
<01-16-2015 08:53:52> INFO: OS version:0, ServicePack:0.
<01-16-2015 08:53:52> DPServer.ms.com; Unsupported management point operating system version for Setup; Warning; Configuration Manager site systems can only be installed on systems running Windows
Server 2008 SP2 or later.
<01-16-2015 08:53:52> INFO: The rule 'Domain membership' has been run on server 'DPServer.ms.com', skipped.
<01-16-2015 08:54:05> INFO: Windows Cluster not found on DPServer.ms.com.
<01-16-2015 08:54:05> DPServer.ms.com; Windows Failover Cluster; Passed
<01-16-2015 08:54:05> INFO: The rule 'Pending system restart' has been run on server 'DPServer.ms.com', skipped.
<01-16-2015 08:54:05> <<<RuleCategory: Dependent Components>>>
<01-16-2015 08:54:05> <<<CategoryDesc: Checking dependent components for ConfigMgr...>>>
<01-16-2015 08:54:05> INFO: The rule 'Microsoft XML Core Services 6.0 (MSXML60)' has been run on server 'DPServer.ms.com', skipped.
<01-16-2015 08:54:10> DPServer.ms.com; IIS service running; Warning; Internet Information Services (IIS) is required for some site system roles. You have selected to install a site system role that
requires IIS. Install IIS on the site system to continue setup.
<01-16-2015 08:54:39> ERROR: Failed to get WEBSVCEXT from Remote Service on DPServer.ms.com.
<01-16-2015 08:54:39> INFO: Failed to get IIS BITS Server Extensions state on DPServer.ms.com.
<01-16-2015 08:54:39> DPServer.ms.com; BITS installed; Warning; Background Intelligent Transfer Service (BITS) is required for the management point and distribution point site system roles. BITS
is not installed, IIS 6 WMI compatibility component for IIS7 is not installed on this computer or the remote IIS host, or Setup was unable to verify remote IIS settings because IIS common components were not installed on the site server computer. Also, check
if IIS/BITS services are running properly. Setup cannot continue until BITS is installed and enabled in the IIS settings.
<01-16-2015 08:55:08> ERROR: Failed to get WEBSVCEXT from Remote Service on DPServer.ms.com.
<01-16-2015 08:55:08> INFO: Failed to get IIS BITS Server Extensions state on DPServer.ms.com.
<01-16-2015 08:55:08> DPServer.ms.com; BITS enabled; Warning; Background Intelligent Transfer Service (BITS) is required for the management point and distribution point site system roles. BITS is
not installed, IIS 6 WMI compatibility component for IIS7 is not installed on this computer or the remote IIS host, or Setup was unable to verify remote IIS settings because IIS common components were not installed on the site server computer. Also, check
if IIS/BITS services are running properly. Setup cannot continue until BITS is installed and enabled in the IIS settings.
<01-16-2015 08:55:08> DPServer.ms.com; IIS HTTPS Configuration for management point; Passed
<01-16-2015 08:55:08> INFO: Stand-alone primary site or secondary site. Skip checking firewall settings for SQL Server
<01-16-2015 08:55:08> DPServer.ms.com; Firewall exception for SQL Server for management point; Passed
<01-16-2015 08:55:08> DPServer.ms.com; Administrative rights on management point; Passed
<01-16-2015 08:55:08> INFO:CheckV4ClientNotInstalled <DPServer.ms.com>
<01-16-2015 08:55:36> ERROR: Failed to call GetResultByRunningService
<01-16-2015 08:55:36> DPServer.ms.com; Client Version on Management Point Computer; Warning; You cannot install the management point on a computer with an earlier version of the Configuration Manager
client installed. Upgrade the client to the current version, remove the client, or select a different computer for the management point installation, and then try again.
<01-16-2015 08:55:36> ===== INFO: Prerequisite Type & Server: DP:DPServer.ms.com =====
<01-16-2015 08:55:36> <<<RuleCategory: Access Permissions>>>
<01-16-2015 08:55:36> <<<CategoryDesc: Checking access permissions...>>>
<01-16-2015 08:55:36> <<<RuleCategory: System Requirements>>>
<01-16-2015 08:55:36> <<<CategoryDesc: Checking system requirements for ConfigMgr...>>>
<01-16-2015 08:55:49> DPServer.ms.com; Unsupported distribution point operating system version for Setup; Warning; Configuration Manager distribution point can only be installed on systems running
Windows Server 2003 or later.
<01-16-2015 08:55:49> INFO: The rule 'Domain membership' has been run on server 'DPServer.ms.com', skipped.
<01-16-2015 08:55:49> INFO: The rule 'Windows Failover Cluster' has been run on server 'DPServer.ms.com', skipped.
<01-16-2015 08:55:49> INFO: The rule 'Pending system restart' has been run on server 'DPServer.ms.com', skipped.
<01-16-2015 08:55:49> <<<RuleCategory: Dependent Components>>>
<01-16-2015 08:55:49> <<<CategoryDesc: Checking dependent components for ConfigMgr...>>>
<01-16-2015 08:55:57> DPServer.ms.com; Microsoft XML Core Services 6.0 (MSXML60) for distribution point; Warning; MSXML 6.0 or later libraries are required for Configuration Manager console and
Configuration Manager site server installations. MSXML 6.0 is available for download at http://go.microsoft.com/fwlink/?LinkId=215744
<01-16-2015 08:55:57> INFO: The rule 'IIS service running' has been run on server 'DPServer.ms.com', skipped.
<01-16-2015 08:55:57> DPServer.ms.com; IIS HTTPS Configuration for distribution point; Passed
<01-16-2015 08:55:57> DPServer.ms.com; Administrative rights on distribution point; Passed
<01-16-2015 08:55:57> ***************************************************
<01-16-2015 08:55:57> ******* Prerequisite checking is completed. *******
<01-16-2015 08:55:57> ***************************************************
<01-16-2015 08:55:57> INFO: Updating Prerequisite checking result into the registry
<01-16-2015 08:55:57> INFO: Connecting to DPServer.ms.com registry
<01-16-2015 08:56:09> INFO: Setting registry values
<01-16-2015 08:56:16> ERROR: Failed to update prerequisite results into the registry; error = 1.<01-16-2015 08:48:08> DPServer.ms.com; Site server computer account administrative rights; Error; Configuration Manager Setup requires that the site server computer has administrative rights
on the SQL Server and management point computers.
Actually the administrative permission had been granted. -
Hi,
Problem to generat an report on an SSRS for SCCM 2012 R2 SP1. I got error has occurred during report processing.
In general it is no problem to generat SSRS reports, but an custom one i get issue with.
The Error:
An
error has occurred during report processing. (rsProcessingAborted)
Query
execution failed for dataset 'DataSet1'. (rsErrorExecutingCommand)
ExecuteReader:
CommandText property has not been initializedHi SaiTech,
According to your description, when you render report on SCCM 2012 R2, you got the error message.
According to my knowledge, the issue can be caused by following reasons:
Select permission not granted to ConfigMgr reporting account. We need to open the SQL management console and open the properties dialog box of configmgr db, grant select and execute permission to ConfigMgr reporting account.
Reporting Services Web Service URL or Report Manager is false. Make sure Web Service URL and Report Manager URL are correct. Restart SMS_Executive service and reinstall Reporting Service Point, then please render the report again.
Report timeout. Increase query and report timeout.
If the problem remain unresolved, please provide detailed information of SRSRP.log (default location: %programfiles%\Microsoft and Configuration Manager\Logs) and reporting services error log(default location: %programfiles%\Microsoft SQL Server\<SQL
Server Instance>\Reporting Services\LogFiles), it will help us move more quickly toward a solution.
If you have any more questions, please feel free to ask.
Thanks,
Wendy Fu
If you have any feedback on our support, please click
here.
Wendy Fu
TechNet Community Support -
Using a custom certificate store for SCCM 2012 clients and primary site server
I have read what seems to be all the pki related documentation out there for SCCM 2012. I have a PKI infrastructure up and running issueing certificates with an offline root through group policy autoenrollment. The problem that i'm faced with is we are migrating
from SCCM 2007 that was in native mode and we chose not to use the CA that we used for the old SCCM environment. When the clients attempt to communicate with the M.P. it runs through all of the different certificates and adds a tremendous amount of overhead
to the M.P. We will have ten's of thousands of clients by migration end. Could someone please point me to a document that goes over how to leverage a custom certificate store that I could then tell the new 2012 environment to use? I know that it's in there,
I've seen it in the console. The setup is one primary site server with SQL on box and the pki I just mentioned as well as the old 2007 environment that is still live.
I read that you can try and use SAN as a method of identifying the new certs but I haven't found a good document covering exactly how that works. Any info you could provide I would be very grateful for. Thanks.Jason, thank you for your reply. I'm getting the impression that you have never been in the situation where you had to deal with 2 different PKI environments. Let me state that I understand what your saying about trust. We have to configure the trusted root
CA via GPO. That simply isn't enough, and I have a valid example to backup this claim. When the new clients got the advertisement and began the ccmsetup process I used the /pki switch among others. What the client end up doing was selecting a certificate that
had the longest validity period which was issued by our old CA. It checked the authentication chain, found it to be valid and selected it for communication. At that point the installation failed, period, no caveats as you say. The reason the install failed
because the new PKI infrastructure is integrated into the new environment, and the old is not. So when you said " that
are trusted and they can use *any* cert that is trusted because at the end of the day, there is no
difference between two valid certs that have the same purpose as long as they are trusted. "
that is not correct. Both certs are trusted, and use the same certificate template, but only one certificate would allow the install to complete successfully.
Once I started using the CCMCERTISSUERS
switch the client install went swimmingly. The only reason I'm still debating this point is because someone might read this thread see your comments and assume "well I've got my new PKI configured as a trusted root CA, I should be all set" and their
deployment will fail, just as my pilot did.
About Intune I'm looking forward to doing a POC in the lab i built with my Note 3. I'm hoping it goes well as I really want to have our MDM migrated into ConfigMgr... I think the
biggest obstacle outside of selling it to management will be the actual device migration from the current MDM solution. From what I understand of the enrollment process manual install and config is the only path forward.
Thanks Jason for your post and discussion. -
Download Reports from SCCM 2012 Using PowerShell
Hi,
I Wants to Download reports from SCCM 2012 using powershell but couldn't find a way.
I used Invoke-Cmreport but it says no reporting Service point on site code XYZ and server ABC
But Reporting Service is enabled and works fine as i can check/download report manually
ThanksHi,
You could have a look at the script in the blog below.
How to Download All Your SSRS Report Definitions(RDL files) Using PowerShell.
http://www.sqlmusings.com/2011/03/28/how-to-download-all-your-ssrs-report-definitions-rdl-files-using-powershell/
Note: Microsoft provides third-party contact information
to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
Best Regards,
Joyce -
Hello,
I'm very new to SQL concepts, I have recently installed a backend database for SCCM application with below configuration.
Installed the SQL on VM with 10GB RAM, 50GB(OS Partition), 400GB (SCCM DATA & SQL DATA) and 50GB (SQL Logs)
OS: WIn Server 2012 R2
SQL : SQL Server 2012 SP1 Std
Question: I want to know,how to configure the following things,
01. Limit memory utilization of SQL (Min & Max)
02. limit the maximum size of the log files
03. Limit Disk utilization for SQL etc...Hi Julie,
My friend Jorge Segarra has a blog about min and max memory that I'd recommend you look at. http://www.sqlchicken.com/2012/02/setting-memory-limits/
the best answer is "it depends", you want to define an amount other than the default. by default SQL Server installs with 2 TB of memory enabled regardless of what is on the source system.
With SCCM and 500 GB data files, you will probably find you have memory pressure with only 10 GB. I would leave a minimum of 1 GB per for every 4 dedicated to the OS, up to 4 GB for the OS. So in your case,
8 GB for SQL 2 GB for the OS. If you can add more for the VM that would be a good idea. Typically you would want 3 x your largest returned dataset in a query. When you do a checkdb or index rebuilds your memory with get thrashed.
Log files, make sure your database is in simple recovery model. Understand the type of backups you need to maintain transnational consistency. Grow them at a minimum of 4 GB increments. Transaction logs
are made up of VLF's and VLF fragmenation will cause slower writes on write heavy systems like SCCM. Here's a great blog for more on VLF's http://blogs.msdn.com/b/blogdoezequiel/
Disk limitation should be based on size. I like 100 GB of free space or 20%, whichever comes first. This will be determined by the amount of history you want to maintain though.
Convert DTS to SSIS |
Document SSIS |
30+ SSIS Tasks |
Real-time SSIS Monitoring |
Quick Starts |
BI Blitz
Maybe you are looking for
-
I'm trying to format a 160 GB hard drive. How long does that usually take? Any clues on why Disk Utilities has been grayed out for two hours now on my 4.5GB G5 and the status bar at the bottom has been showing about 5% "partitioning" for that long? W
-
Session Files ...is this a bug or by design?
Audition 3 Please let me know if the only files that are saved with a session are the ones actually inserted in a Multi Track ...TRACK? I drag , say 20, wav files into my Files bin so that I can access them in Multi Track or Edit Windows as and when
-
Cant save a page in illustrator 10
Help I have an illustration that I have drawn in Illustrator 10 and have coloured in, but I can save the Black and white version and save a copy. But I want to save a copy of the coloured version but the button is greyed out. Why?? Is it something to
-
Flasher player 10.1 needs to be reinstalled
This last month I have had a number of computers prompt the users that they need to install flasher player 10 when going to web sites that use flash player. These computers have flash player 10.1 installed. When I go that computer, and do an install
-
Problem partly solved: iPhoto slide shows on iPod
I have had my iPod 60 GB for a couple of days now and was first a bit shocked that iPhoto slide shows are not visible and displayable on the iPod, since I'd like to show my iPhotos thru the iPod on a TV set. This is all the more non-understandable si