SCCM 2012: enable powershell execution policy for SCCM 2012 console

Hi,
I always get stuck settings up the remote sccm 2012 powershell (cd psdrive sitecode:). Maybe not a real sccm 2012 question but Powershell but wonder what steps you take to make it work (it works on our production environment, setting up in a lab always gives
me headaches, will defintely write the solution down this time :-)).
Please advise what the steps are in configuring remote powershell for SCCM 2012.
1.my personal account "Myuser" has admin-rights in sccm 2012
2.I can open Powershell logged on to the sccm 2012 server then opening sccm 2012 console, connect via powershell
3.however, when I connect remote to the sccm server, I get the error:
. : File C:\Users\Myuser\Documents\WindowsPowerShell\Microsoft.PowerShell_profile.ps1 cannot be loaded. The file C:\Use
rs\MyUser\Documents\WindowsPowerShell\Microsoft.PowerShell_profile.ps1 is not digitally signed. You cannot run this scr
ipt on the current system. For more information about running scripts and setting execution policy, see about_Execution
_Policies at http://go.microsoft.com/fwlink/?LinkID=135170.
4.So I connect to the sccm-server and ask for the execution policy to unrestricted, I get this:
set-executionpolicy unrestricted
[Y] Yes  [N] No  [S] Suspend  [?] Help (default is "Y"): y
Set-ExecutionPolicy : Windows PowerShell updated your execution policy successf
ully, but the setting is overridden by a policy defined at a more specific scope
There is no policy which sets any powershell configs.
Please advise.
J.
Jan Hoedt

Those client settings are only for the actions performed by the ConfigMgr client. Normal PowerShell actions are restricted to the configured execution policy on the machine.
Have a look at this post:
http://blogs.msdn.com/b/pasen/archive/2011/12/07/set-executionpolicy-windows-powershell-updated-your-execution-policy-successfully-but-the-setting-is-overridden-by-a-policy-defined-at-a-more-specific-scope.aspx
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Similar Messages

  • Set execution policy via CM 2012 SP1

    Good afternoon everyone.
    Sorry about the last question.  I'd attempted to resolve this in so many ways that the last question was based on an old attempt.
    I'm trying to set the PowerShell Execution Policy through a batch file.  Specifically, the batch file contains one single command: 
    PowerShell -NoProfile -ExecutionPolicy Bypass -Command "& {Start-Process PowerShell -ArgumentList 'Set-ExecutionPolicy RemoteSigned -Force' -Verb RunAs}"
    If I run this command standalone, either as local Admin or not, the batch file completes and the execpol is changed appropriately.
    When deploying the batch file through CM, Software Center shows a successful installation but the ExecPol value does not change.  The batch file within CM is configured to run as administrator.
    Any suggestions as to what I may be doing wrong would be greatly appreciated.
    Thanks very much.
    IAmStrings

    Hi Narco.
    Yep, tried that as well.  Tried Registry /s with a reg file and tried calling another PoSH script under a temp ExecPol of bypass that ran:
    set-itemproperty-path"registry::HKLM\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell"-nameExecutionPolicy-value"UnRestricted"
    If they're deployed, they don't change the value. 
    It's almost as if the deployment isn't really running as admin.  I've looked at the execmgr.log but I never see any entries with "Failed" or anything like that.  There are some entries stating that it's "WaitingServiceWindow" but then I later see
    the state changing from "WaitingServiceWindow to Ready"
    Thanks for replying.
    IAmStrings

  • Bypassing Execution Policy for a specific host

    Is is possible to have the execution policy set to remotesigned but have specific hosts set to bypass? I am administering an SCCM 2012 environment and I want to be able to run Powershell to check for the existence of packages or applications but it keeps
    erroring out that the script is not signed. I tried adding the server to wsman:\localhost\client\truestedhosts but that did not seem to work either. Is this possible?
    Thanks!
    Tony

    Hi Tony,
    I’m writing to just check in to see if the suggestions were helpful.
    If you need further help, please feel free to reply this post directly so we will be notified to follow it up.
    If you have any feedback on our support, please click here.
    Best Regards
    Anna
    TechNet Community Support

  • Microsoft DaRT Recovery Image Wizard - powershell execution policy

    When I launch DaRT Recovery Image Wizard I get this message - 
    "Windows Powershell updated your execution policy successfully, but the setting is overridden by a policy defined at a more specific scope. Due to the override your shell will retain its current effective execution policy of AllSigned."
    I want my powershell settings set this way.
    But it wont let me continue to run the mDart wizard.
    Why does it need to modify my powershell settings to less secure scope?
    Is there a workaround for this? This seems like a bug.
    Thanks for any help

    Which version of DaRT and what operating system?
    Brandon
    MDOP on the Springboard Series on TechNet

  • Windows Server 2012 Essentials - Implement Group Policy for the 1st time

    This is my first server. We have 15 users and 20 devices, all clients are running Win7 Pro.
    On the Dashboard, Devices tab, when I click on each device there is an option to implement Group Policy in the right-hand task pane. Does this mean I can implement it for one device at a time? Or will it happen for everyone in the domain?
    I'm hesitant to start. Is this something where I should wait for the weekend, so I can restore from a backup if need be?
    Thanks for your help
    Alan

    Time to get a basic Windows networking reference book and read up on group policy. Policies are applied by the system on a predicable refresh rate, which if memory servers is 15 minutes. This can be forced from the stations with the cli command "gpupdate
    /force" but in most cases there is little need to do so.
    Some, like folder redirection, only impact the stations on reboot/sign on
    Larry Struckmeyer[MVP] If your question is answered please mark the response as the answer so that others can benefit.

  • Hardware Sizing for SCCM 2012 R2

    Hello,
            I need your help to do Hardware Sizing for SCCM 2012 R2 environment (SCCM and SQL on same server) with 1000 clients. I have identified the Vm for this installation,
            Kindly share the RAM, HDD (Partitions for OS, Data, Log etc..) and No.of CPU
    Additionally kindly confirm SQL server 2012 SP1 requires any CU for SCCM 2012 R2 environment.

    Just an example...
    At least 16GB RAM, 2 or more CPUs.
    Basically your HDD configuration depends do you have fast disk or slow disk. HDD has to be fast, Johan has very good examples here:
    http://www.deploymentresearch.com/Research/tabid/62/EntryId/115/Sizing-your-ConfigMgr-2012-R2-Primary-Site-Server.aspx
    SQL Server 2012 SP1 doesn't require any CU for ConfigMgr 2012 R2.

  • Pre-provision TRK for SCCM 2012 R2 client

    Hello,
    Clients have some troubles with establishing trusted relationship with management point, I found this article http://technet.microsoft.com/en-us/library/bb680504.aspx but this for SCCM 2007, where can I find for SCCM 2012 R2?

    Do you have AD extended and is the site information properly published to AD in the System Management container?
    What happens when you manually "push" a client?
    What exactly is the entire command-line you are using to install the client?
    The message above is not about the trusted root key, it clearly shows that MP being communicated with is not in the MPLIST returned. I can't say I've ever seen that before, but it is indicative of some other configuration type error.
    Jason | http://blog.configmgrftw.com
    Hello,
    thank you for your message,
    yes, AD was extended and System Management container has site info,
    I have the same problems with push and manual installation,
    I tried this command (specify key and site server cert and without it): C:\Client\ccmsetup.exe /mp:SCCM /logon SMSSITECODE:CM1 SMSPublicRootKey=<key> SMSSIGNCERT=<path to cert>
    where <key> from a file and cert which was exported from site server.
    Where MPList is stored? We spent much time to solve this problem, even reinstalled SCCM on new servers with new site code but problem is not solved.
    After installation client tries to register on management point but there are errors in the different logs at same time:
    Failed to verify signature of message received from MP using name 'SCCM.contoso.com.'
    Failed to verify message. Sending MP [SCCM] not in cached MPLIST.
    RegTask: Failed to send registration request message. Error: 0x87d00309

  • "Enable distribution-point sharing for this source site" did not showing SCCM 2007 DPs as SCCM 2012 content shares for CM12 clients

    Hi
    We have one central site server and three primary site servers in SCCM 2007 and completed the SCCM 2012 migration as single hierarchy.
    During the migration, We have configured SCCM 2007 Central site server as source hierarchy for data gathering process and configured the "Enable distribution-point sharing for this source site" to make SCCM 2007 distribution points
    as SCCM 2012 content shares to serve SCCM 2012 migrated clients. Now we are facing a problem that one of the primary site server's data gathering process did not gather SCCM 2007 DPs even though we configured "Enable distribution-point sharing for this
    source site" but data gathering process is completing successfully.
    Is anyone have idea, why these SCCM 2007 DPs did not appearing as SCCM 2012 content shares under "Shared Distribution Points"
    Thanks in Advance
    srkr

     Now we are facing a problem that one of the primary site server's data gathering process did not gather SCCM 2007 DPs even though we configured "Enable distribution-point sharing for this source
    site" but data gathering process is completing successfully.
    Earlier all the shared DPs are showing under  Shared Distribution Points ? Or since starting itself these DPs are not showing down? Have you checked migmctrl.log for some clue?
    Anoop C Nair (My Blog www.AnoopCNair.com)
    - Twitter @anoopmannur -
    FaceBook Forum For SCCM

  • Hi ,How can I get a list of all laptops or users with folder direction enabled or offline files enabled, be it sccm or poerwshell . i have struggled for a week.

    Hi ,how can I get a list of all laptops or users with folder direction enabled or offline files enabled, be it sccm
    or poerwshell . i have struggled for a week
    tchocr

    Hi,
    There is no such PowerShell command can achiev this. Maybe you can use a script to get the user name with folder redirection enabled. However, I am not familiar with writing script, and it would be better for you to ask in script forum below for professional
    assistance:
    http://social.technet.microsoft.com/Forums/en-US/home?forum=ITCG&filter=alltypes&sort=lastpostdesc
    Best Regards,
    Mandy
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • How can I get a list of all laptops or users with folder direction enabled or offline files enabled, be it sccm or poerwshell . i have struggled for a week.

    How can I get a list of all laptops or users with folder direction enabled or offline files enabled, be it sccm or poerwshell . i have struggled for a week.

    Hi,
    There is no such PowerShell command can achiev this. Maybe you can use a script to get the user name with folder redirection enabled. However, I am not familiar with writing script, and it would be better for you to ask in script forum below for professional
    assistance:
    http://social.technet.microsoft.com/Forums/en-US/home?forum=ITCG&filter=alltypes&sort=lastpostdesc
    Best Regards,
    Mandy
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • ERROR: Failed to update prerequisite results into the registry; error = 1 for sccm 2012 secondary site installation

    Hi,
    We try to install sccm 2012 serondary site in server 2012. It always failed.
    I used the rereqchek tools to check system enviroment locally. All passed.
    The primary site installed in server 2012.  Both server had granted the administrator permission.
    Anyone can help to check the below Configmgrprereq.log
    <01-16-2015 08:47:55> ********************************************
    <01-16-2015 08:47:55> ******* Start Prerequisite checking. *******
    <01-16-2015 08:47:55> ********************************************
    <01-16-2015 08:47:55> Commandline :
    "D:\Microsoft Configuration Manager\bin\x64\smsexec.exe"
    <01-16-2015 08:47:55> Check Type: Secondary site
     Site Server: DPServer.ms.com,
     SQL Server: DPServer.ms.com,
     SQL Named Instance: ,
     Install Folder: d:\Program Files\Microsoft Configuration Manager\,
     Setup Source Folder: D:\SCCM2012\Source
    <01-16-2015 08:47:55> INFO: Executing prerequisite functions...
    <01-16-2015 08:47:55> ===== INFO: Prerequisite Type & Server: SITE_SEC:DPServer.ms.com =====
    <01-16-2015 08:47:55> <<<RuleCategory: Access Permissions>>>
    <01-16-2015 08:47:55> <<<CategoryDesc: Checking access permissions...>>>
    <01-16-2015 08:47:55> INFO: CheckLocalSys is Admin of <DPServer.ms.com>.
    <01-16-2015 08:48:08> DPServer.ms.com;    Site server computer account administrative rights;    Error;    Configuration Manager Setup requires that the site server computer has administrative rights on
    the SQL Server and management point computers.
    <01-16-2015 08:48:08> <<<RuleCategory: System Requirements>>>
    <01-16-2015 08:48:08> <<<CategoryDesc: Checking system requirements for ConfigMgr...>>>
    <01-16-2015 08:48:08> INFO: Check Lanman service: <DPServer.ms.com>.
    <01-16-2015 08:48:22> DPServer.ms.com;    Check Server Service is running;    Passed
    <01-16-2015 08:48:30> INFO: OS version:0, ServicePack:0.
    <01-16-2015 08:48:30> DPServer.ms.com;    Unsupported site server operating system version for Setup;    Error;    Configuration Manager site systems can only be installed on systems running Windows Server
    2008 SP2 or later.
    <01-16-2015 08:48:34> INFO: Failed to get Active Directory membership information for computer DPServer.ms.com with 0.
    <01-16-2015 08:48:34> DPServer.ms.com;    Domain membership;    Error;    Configuration Manager site server components must be installed on computers that are members of a Windows domain.
    <01-16-2015 08:48:40> INFO: Free disk space on target \\DPServer.ms.com\d$\. = 510158 MB
    <01-16-2015 08:48:40> DPServer.ms.com;    Free disk space on site server;    Passed
    <01-16-2015 08:48:47> DPServer.ms.com;    Pending system restart;    Passed
    <01-16-2015 08:48:50> INFO: The server DPServer.ms.com is not read-only domain controller.
    <01-16-2015 08:48:50> DPServer.ms.com;    Read-Only Domain Controller;    Passed
    <01-16-2015 08:48:50> INFO: Check FQDN Length for site server: <DPServer.ms.com>.
    <01-16-2015 08:48:50> DPServer.ms.com;    Site Server FQDN Length;    Passed
    <01-16-2015 08:48:50> <<<RuleCategory: Dependent Components>>>
    <01-16-2015 08:48:50> <<<CategoryDesc: Checking dependent components for ConfigMgr...>>>
    <01-16-2015 08:48:57> DPServer.ms.com;    Microsoft XML Core Services 6.0 (MSXML60);    Warning;    MSXML 6.0 or later libraries are required for Configuration Manager console and Configuration Manager site
    server installations. MSXML 6.0 is available for download at http://go.microsoft.com/fwlink/?LinkId=215744
    <01-16-2015 08:49:03> DPServer.ms.com;    Microsoft Remote Differential Compression (RDC) library registered;    Error;    Microsoft Remote Differential Compression (RDC) library must be registered for Configuration
    Manager site server installation. Details at http://technet.microsoft.com/library/cc431377.aspx#RDC_for_Site_Servers.
    <01-16-2015 08:49:03> INFO: Checking Windows Installer version on DPServer.ms.com.
    <01-16-2015 08:49:13> INFO: Path of Windows Installer is <\\DPServer.ms.com\C$\Windows\System32\msi.dll>.
    <01-16-2015 08:49:19> ERROR: Failed to determine Windows Installer version from path:<\\DPServer.ms.com\C$\Windows\System32\msi.dll> .
    <01-16-2015 08:49:19> DPServer.ms.com;    Microsoft Windows Installer;    Error;    Setup failed to verify the Windows Installer version, or the installed version of Windows Installer does not meet the minimum
    requirement.  Configuration Manager requires at least Windows Installer version 4.5.
    <01-16-2015 08:49:19> INFO: Start Checking InstallSQLExpress on site server: DPServer.ms.com, SQL Server instance CONFIGMGRSEC
    <01-16-2015 08:49:28> INFO: SQL Server Instance Names value was not found
    <01-16-2015 08:49:28> INFO: IsPortUsedByAnySqlInstance port 1433.
    <01-16-2015 08:49:39> INFO: TCP port 1433 is not in use by any other SQL Server instances.
    <01-16-2015 08:49:49> INFO: Sql express: OS version:0, ServicePack:0.
    <01-16-2015 08:49:49> ERROR: Cannot install sqlexpress 2012, not meet OS requirement: Windows server 2008 sp2, Windows server 2008 R2 sp1 or higher.
    <01-16-2015 08:49:49> DPServer.ms.com;    SQL Server Express on Secondary Site;    Error;    A SQL Server instance is already installed on the secondary site server using the instance name CONFIGMGRSEC,
    or the specified TCP port is being used by another SQL Server instance, or OS version is not Windows Server 2008 sp2, Windows Server 2008 R2 sp1 or higher. Setup is unable to install SQL Server Express on the secondary site.
    <01-16-2015 08:49:55> ERROR: Failed to connect to registry of DPServer.ms.com
    <01-16-2015 08:49:55> DPServer.ms.com;    Existing Configuration Manager server components on site server;    Error;    A site server or site system role is already installed on the computer selected for
    site server installation. Remove the site or site system role from the computer, or select another computer for site server installation.
    <01-16-2015 08:49:55> DPServer.ms.com;    Firewall exception for SQL Server (stand-alone primary site);    Passed
    <01-16-2015 08:49:55> INFO: SQL Server computer <DPServer.ms.com>
    <01-16-2015 08:49:55> INFO: SQL Server named instance <>
    <01-16-2015 08:49:55> INFO: Install SQL Server Express on secondary site, skip checking.
    <01-16-2015 08:49:55> DPServer.ms.com;    SQL Server service running account;    Passed
    <01-16-2015 08:49:55> INFO: Install SQL Server Express on secondary site, skip checking.
    <01-16-2015 08:49:55> DPServer.ms.com;    Dedicated SQL Server instance;    Passed
    <01-16-2015 08:49:55> INFO: CheckSQLCollationSecondary
    <01-16-2015 08:49:55> INFO: Installing SQL Server Express; skipping
    <01-16-2015 08:49:55> DPServer.ms.com;    Parent/child database collation;    Passed
    <01-16-2015 08:49:55> INFO: Checking .NET framework versions 3.5...
    <01-16-2015 08:50:05> INFO: .NET is installed
    <01-16-2015 08:50:05> DPServer.ms.com;    Minimum .NET Framework version for Configuration Manager site server;    Passed
    <01-16-2015 08:50:05> INFO: Checking .NET version required for installing SQL Server Express for Secondary Site.
    <01-16-2015 08:50:05> INFO: Checking .NET framework versions 4.0...
    <01-16-2015 08:50:10> INFO: .NET is installed
    <01-16-2015 08:50:11> DPServer.ms.com;    Minimum .NET Framework version for SQL Server Express edition installation for Configuration Manager Secondary Site;    Passed
    <01-16-2015 08:50:11> INFO: CheckInstallSourceVersion <D:\SCCM2012\Source>
    <01-16-2015 08:52:29> ERROR: Could not read install map from \\DPServer.ms.com\D$\\SCCM2012\Source\SMSSETUP\install.map (result 2)
    <01-16-2015 08:52:29> DPServer.ms.com;    Setup Source Version;    Error;    The product version in the source folder specified for secondary site installation does not match the version of the primary site.
    <01-16-2015 08:52:29> INFO:CheckInstallSourcePath <DPServer.ms.com>
    <01-16-2015 08:52:55> ERROR: Failed to call GetResultByRunningService
    <01-16-2015 08:52:55> DPServer.ms.com;    Setup Source Folder;    Error;    The computer account for the secondary site must have Read NTFS and share permissions to the Setup source folder and share. We
    recommend that you do not use administrative shares (for example, C$ and D$) because they require the secondary site computer account to be an administrator on the remote computer.
    <01-16-2015 08:52:55> INFO: Enter CheckSecSiteSqlOnSameMachine.
    <01-16-2015 08:52:55> INFO: Installing SQL Server Express, skipping SQL Server check.
    <01-16-2015 08:52:55> DPServer.ms.com;    SQL Server on the Secondary Site Computer;    Passed
    <01-16-2015 08:52:55> INFO:CheckSupportedFQDNFormat <DPServer.ms.com>
    <01-16-2015 08:53:04> INFO: NetBIOS <NZWHKVMAS020>
    <01-16-2015 08:53:04> DPServer.ms.com;    Primary FQDN;    Passed
    <01-16-2015 08:53:04> INFO:CheckMachineAccountHasADAccess <DPServer.ms.com>
    <01-16-2015 08:53:30> ERROR: Failed to call GetResultByRunningService
    <01-16-2015 08:53:30> DPServer.ms.com;    Verify site server permissions to publish to Active Directory.;    Warning;    The site server might be unable to publish to Active Directory. The computer account
    for the site server must have Full Control permissions to the System Management container in its Active Directory domain. You can ignore this warning if you have manually verified these permissions. For more information about your options to configure required
    permissions, see http://go.microsoft.com/fwlink/p/?LinkId=233190.
    <01-16-2015 08:53:30> INFO:CheckRemoteWMIConnection <DPServer.ms.com>
    <01-16-2015 08:53:44> DPServer.ms.com;    Remote Connection to WMI on Secondary Site;    Passed
    <01-16-2015 08:53:44> INFO: Check required collation of Sql Server.
    <01-16-2015 08:53:44> INFO: LangID <409>
    <01-16-2015 08:53:44> INFO: NOT primary site or CAS install, skipping check for reqired collation of SQL Server.
    <01-16-2015 08:53:44> DPServer.ms.com;    Required SQL Server Collation;    Passed
    <01-16-2015 08:53:44> ===== INFO: Prerequisite Type & Server: SQL:DPServer.ms.com =====
    <01-16-2015 08:53:44> <<<RuleCategory: Access Permissions>>>
    <01-16-2015 08:53:44> <<<CategoryDesc: Checking access permissions...>>>
    <01-16-2015 08:53:44> INFO: Installing SQL Server Express, skipping check for sysadmin role on SQL Server.
    <01-16-2015 08:53:44> DPServer.ms.com;    SQL Server sysadmin rights;    Passed
    <01-16-2015 08:53:44> INFO: Skip testing, no expand primary site specified.
    <01-16-2015 08:53:44> DPServer.ms.com;    SQL Server sysadmin rights for reference site;    Passed
    <01-16-2015 08:53:44> INFO: The rule 'Site server computer account administrative rights' has been run on server 'DPServer.ms.com', skipped.
    <01-16-2015 08:53:44> INFO: Installing SQL Server Express, skipping Windows integrated security check.
    <01-16-2015 08:53:44> DPServer.ms.com;    SQL Server security mode;    Passed
    <01-16-2015 08:53:44> <<<RuleCategory: System Requirements>>>
    <01-16-2015 08:53:44> <<<CategoryDesc: Checking system requirements for ConfigMgr...>>>
    <01-16-2015 08:53:44> INFO: The rule 'Unsupported site server operating system version for Setup' has been run on server 'DPServer.ms.com', skipped.
    <01-16-2015 08:53:44> INFO: The rule 'Domain membership' has been run on server 'DPServer.ms.com', skipped.
    <01-16-2015 08:53:44> INFO: The rule 'Pending system restart' has been run on server 'DPServer.ms.com', skipped.
    <01-16-2015 08:53:44> <<<RuleCategory: Dependent Components>>>
    <01-16-2015 08:53:44> <<<CategoryDesc: Checking dependent components for ConfigMgr...>>>
    <01-16-2015 08:53:44> INFO: Installing SQL Server Express, skipping SQL Server version check.
    <01-16-2015 08:53:44> DPServer.ms.com;    SQL Server version;    Passed
    <01-16-2015 08:53:44> DPServer.ms.com;    SQL Server Edition;    Passed
    <01-16-2015 08:53:44> DPServer.ms.com;    SQL Server Tcp Port;    Passed
    <01-16-2015 08:53:44> INFO: Checking if SQL Server memory is limited.
    <01-16-2015 08:53:44> INFO: Installing SQL Server Express, skipping SQL Server memory check.
    <01-16-2015 08:53:44> DPServer.ms.com;    Configuration for SQL Server memory usage;    Passed
    <01-16-2015 08:53:44> INFO: Checking if SQL Server memory is configured to reserve minimum memory.
    <01-16-2015 08:53:44> INFO: Installing SQL Server Express, skipping SQL Server memory allocation check.
    <01-16-2015 08:53:44> DPServer.ms.com;    SQL Server process memory allocation;    Passed
    <01-16-2015 08:53:44> INFO: Installing SQL Server Express, skipping SQL Server case insensitive validation.
    <01-16-2015 08:53:44> DPServer.ms.com;    Case-insensitive collation on SQL Server;    Passed
    <01-16-2015 08:53:44> INFO: Check Machine FQDN: <DPServer.ms.com>.
    <01-16-2015 08:53:44> INFO: getaddrinfo returned success.
    <01-16-2015 08:53:44> DPServer.ms.com;    Validate FQDN of SQL Server Computer;    Passed
    <01-16-2015 08:53:44> INFO: The rule 'Primary FQDN' has been run on server 'DPServer.ms.com', skipped.
    <01-16-2015 08:53:44> ===== INFO: Prerequisite Type & Server: MP:DPServer.ms.com =====
    <01-16-2015 08:53:44> <<<RuleCategory: Access Permissions>>>
    <01-16-2015 08:53:44> <<<CategoryDesc: Checking access permissions...>>>
    <01-16-2015 08:53:44> DPServer.ms.com;    Administrative share (Site system);    Passed
    <01-16-2015 08:53:44> INFO:CheckSiteSystemtoSQLConnectivity <DPServer.ms.com>
    <01-16-2015 08:53:44> INFO: Installing secondary site, skipping SQL Server connectivity check.
    <01-16-2015 08:53:44> DPServer.ms.com;    Site System to SQL Server Communication;    Passed
    <01-16-2015 08:53:44> <<<RuleCategory: System Requirements>>>
    <01-16-2015 08:53:44> <<<CategoryDesc: Checking system requirements for ConfigMgr...>>>
    <01-16-2015 08:53:44> INFO: The rule 'Check Server Service is running' has been run on server 'DPServer.ms.com', skipped.
    <01-16-2015 08:53:52> INFO: OS version:0, ServicePack:0.
    <01-16-2015 08:53:52> DPServer.ms.com;    Unsupported management point operating system version for Setup;    Warning;    Configuration Manager site systems can only be installed on systems running Windows
    Server 2008 SP2 or later.
    <01-16-2015 08:53:52> INFO: The rule 'Domain membership' has been run on server 'DPServer.ms.com', skipped.
    <01-16-2015 08:54:05> INFO: Windows Cluster not found on DPServer.ms.com.
    <01-16-2015 08:54:05> DPServer.ms.com;    Windows Failover Cluster;    Passed
    <01-16-2015 08:54:05> INFO: The rule 'Pending system restart' has been run on server 'DPServer.ms.com', skipped.
    <01-16-2015 08:54:05> <<<RuleCategory: Dependent Components>>>
    <01-16-2015 08:54:05> <<<CategoryDesc: Checking dependent components for ConfigMgr...>>>
    <01-16-2015 08:54:05> INFO: The rule 'Microsoft XML Core Services 6.0 (MSXML60)' has been run on server 'DPServer.ms.com', skipped.
    <01-16-2015 08:54:10> DPServer.ms.com;    IIS service running;    Warning;    Internet Information Services (IIS) is required for some site system roles. You have selected to install a site system role that
    requires IIS. Install IIS on the site system to continue setup.
    <01-16-2015 08:54:39> ERROR: Failed to get WEBSVCEXT from Remote Service on DPServer.ms.com.
    <01-16-2015 08:54:39> INFO: Failed to get IIS BITS Server Extensions state on DPServer.ms.com.
    <01-16-2015 08:54:39> DPServer.ms.com;    BITS installed;    Warning;    Background Intelligent Transfer Service (BITS) is required for the management point and distribution point site system roles. BITS
    is not installed, IIS 6 WMI compatibility component for IIS7 is not installed on this computer or the remote IIS host, or Setup was unable to verify remote IIS settings because IIS common components were not installed on the site server computer. Also, check
    if IIS/BITS services are running properly. Setup cannot continue until BITS is installed and enabled in the IIS settings.
    <01-16-2015 08:55:08> ERROR: Failed to get WEBSVCEXT from Remote Service on DPServer.ms.com.
    <01-16-2015 08:55:08> INFO: Failed to get IIS BITS Server Extensions state on DPServer.ms.com.
    <01-16-2015 08:55:08> DPServer.ms.com;    BITS enabled;    Warning;    Background Intelligent Transfer Service (BITS) is required for the management point and distribution point site system roles. BITS is
    not installed, IIS 6 WMI compatibility component for IIS7 is not installed on this computer or the remote IIS host, or Setup was unable to verify remote IIS settings because IIS common components were not installed on the site server computer. Also, check
    if IIS/BITS services are running properly. Setup cannot continue until BITS is installed and enabled in the IIS settings.
    <01-16-2015 08:55:08> DPServer.ms.com;    IIS HTTPS Configuration for management point;    Passed
    <01-16-2015 08:55:08> INFO: Stand-alone primary site or secondary site. Skip checking firewall settings for SQL Server
    <01-16-2015 08:55:08> DPServer.ms.com;    Firewall exception for SQL Server for management point;    Passed
    <01-16-2015 08:55:08> DPServer.ms.com;    Administrative rights on management point;    Passed
    <01-16-2015 08:55:08> INFO:CheckV4ClientNotInstalled <DPServer.ms.com>
    <01-16-2015 08:55:36> ERROR: Failed to call GetResultByRunningService
    <01-16-2015 08:55:36> DPServer.ms.com;    Client Version on Management Point Computer;    Warning;    You cannot install the management point on a computer with an earlier version of the Configuration Manager
    client installed. Upgrade the client to the current version, remove the client, or select a different computer for the management point installation, and then try again.
    <01-16-2015 08:55:36> ===== INFO: Prerequisite Type & Server: DP:DPServer.ms.com =====
    <01-16-2015 08:55:36> <<<RuleCategory: Access Permissions>>>
    <01-16-2015 08:55:36> <<<CategoryDesc: Checking access permissions...>>>
    <01-16-2015 08:55:36> <<<RuleCategory: System Requirements>>>
    <01-16-2015 08:55:36> <<<CategoryDesc: Checking system requirements for ConfigMgr...>>>
    <01-16-2015 08:55:49> DPServer.ms.com;    Unsupported distribution point operating system version for Setup;    Warning;    Configuration Manager distribution point can only be installed on systems running
    Windows Server 2003 or later.
    <01-16-2015 08:55:49> INFO: The rule 'Domain membership' has been run on server 'DPServer.ms.com', skipped.
    <01-16-2015 08:55:49> INFO: The rule 'Windows Failover Cluster' has been run on server 'DPServer.ms.com', skipped.
    <01-16-2015 08:55:49> INFO: The rule 'Pending system restart' has been run on server 'DPServer.ms.com', skipped.
    <01-16-2015 08:55:49> <<<RuleCategory: Dependent Components>>>
    <01-16-2015 08:55:49> <<<CategoryDesc: Checking dependent components for ConfigMgr...>>>
    <01-16-2015 08:55:57> DPServer.ms.com;    Microsoft XML Core Services 6.0 (MSXML60) for distribution point;    Warning;    MSXML 6.0 or later libraries are required for Configuration Manager console and
    Configuration Manager site server installations. MSXML 6.0 is available for download at http://go.microsoft.com/fwlink/?LinkId=215744
    <01-16-2015 08:55:57> INFO: The rule 'IIS service running' has been run on server 'DPServer.ms.com', skipped.
    <01-16-2015 08:55:57> DPServer.ms.com;    IIS HTTPS Configuration for distribution point;    Passed
    <01-16-2015 08:55:57> DPServer.ms.com;    Administrative rights on distribution point;    Passed
    <01-16-2015 08:55:57> ***************************************************
    <01-16-2015 08:55:57> ******* Prerequisite checking is completed. *******
    <01-16-2015 08:55:57> ***************************************************
    <01-16-2015 08:55:57> INFO: Updating Prerequisite checking result into the registry
    <01-16-2015 08:55:57> INFO: Connecting to DPServer.ms.com registry
    <01-16-2015 08:56:09> INFO: Setting registry values
    <01-16-2015 08:56:16> ERROR: Failed to update prerequisite results into the registry; error = 1.

    <01-16-2015 08:48:08> DPServer.ms.com;    Site server computer account administrative rights;    Error;    Configuration Manager Setup requires that the site server computer has administrative rights
    on the SQL Server and management point computers.
    Actually the administrative permission had been granted.

  • Problem to generat an report on an SSRS for SCCM 2012 R2 SP1. I got error has occurred during report processing.

    Hi,
    Problem to generat an report on an SSRS for SCCM 2012 R2 SP1. I got error has occurred during report processing.
    In general it is no problem to generat SSRS reports, but an custom one i get issue with.
    The Error:
    An
    error has occurred during report processing. (rsProcessingAborted)
    Query
    execution failed for dataset 'DataSet1'. (rsErrorExecutingCommand)
    ExecuteReader:
    CommandText property has not been initialized

    Hi SaiTech,
    According to your description, when you render report on SCCM 2012 R2, you got the error message.
    According to my knowledge, the issue can be caused by following reasons:
    Select permission not granted to ConfigMgr reporting account. We need to open the SQL management console and open the properties dialog box of configmgr db, grant select and execute permission to ConfigMgr reporting account.
    Reporting Services Web Service URL or Report Manager is false. Make sure Web Service URL and Report Manager URL are correct. Restart SMS_Executive service and reinstall Reporting Service Point, then please render the report again.
    Report timeout. Increase query and report timeout.
    If the problem remain unresolved, please provide detailed information of SRSRP.log (default location: %programfiles%\Microsoft  and Configuration Manager\Logs) and reporting services error log(default location: %programfiles%\Microsoft SQL Server\<SQL
    Server Instance>\Reporting Services\LogFiles), it will help us move more quickly toward a solution.
    If you have any more questions, please feel free to ask.
    Thanks,
    Wendy Fu
    If you have any feedback on our support, please click
    here.
    Wendy Fu
    TechNet Community Support

  • Using a custom certificate store for SCCM 2012 clients and primary site server

    I have read what seems to be all the pki related documentation out there for SCCM 2012. I have a PKI infrastructure up and running issueing certificates with an offline root through group policy autoenrollment. The problem that i'm faced with is we are migrating
    from SCCM 2007 that was in native mode and we chose not to use the CA that we used for the old SCCM environment. When the clients attempt to communicate with the M.P. it runs through all of the different certificates and adds a tremendous amount of overhead
    to the M.P. We will have ten's of thousands of clients by migration end. Could someone please point me to a document that goes over how to leverage a custom certificate store that I could then tell the new 2012 environment to use? I know that it's in there,
    I've seen it in the console. The setup is one primary site server with SQL on box and the pki I just mentioned as well as the old 2007 environment that is still live.
    I read that you can try and use SAN as a method of identifying the new certs but I haven't found a good document covering exactly how that works. Any info you could provide I would be very grateful for. Thanks.

    Jason, thank you for your reply. I'm getting the impression that you have never been in the situation where you had to deal with 2 different PKI environments. Let me state that I understand what your saying about trust. We have to configure the trusted root
    CA via GPO. That simply isn't enough, and I have a valid example to backup this claim. When the new clients got the advertisement and began the ccmsetup process I used the /pki switch among others. What the client end up doing was selecting a certificate that
    had the longest validity period which was issued by our old CA. It checked the authentication chain, found it to be valid and selected it for communication. At that point the installation failed, period, no caveats as you say. The reason the install failed
    because the new PKI infrastructure is integrated into the new environment, and the old is not. So when you said " that
    are trusted and they can use *any* cert that is trusted because at the end of the day, there is no
    difference between two valid certs that have the same purpose as long as they are trusted. "
    that is not correct. Both certs are trusted, and use the same certificate template, but only one certificate would allow the install to complete successfully.
    Once I started using the CCMCERTISSUERS
    switch the client install went swimmingly. The only reason I'm still debating this point is because someone might read this thread see your comments and assume "well I've got my new PKI configured as a trusted root CA, I should be all set" and their
    deployment will fail, just as my pilot did.
    About Intune I'm looking forward to doing a POC in the lab i built with my Note 3. I'm hoping it goes well as I really want to have our MDM migrated into ConfigMgr... I think the
    biggest obstacle outside of selling it to management will be the actual device migration from the current MDM solution. From what I understand of the enrollment process manual install and config is the only path forward.
    Thanks Jason for your post and discussion.

  • Download Reports from SCCM 2012 Using PowerShell

    Hi,
    I Wants to Download reports from SCCM 2012 using powershell but couldn't find a way.
    I used Invoke-Cmreport but it says no reporting Service point on site code XYZ and server ABC
    But Reporting Service is enabled and works fine as i can check/download report manually
    Thanks 

    Hi,
    You could have a look at the script in the blog below.
    How to Download All Your SSRS Report Definitions(RDL files) Using PowerShell.
    http://www.sqlmusings.com/2011/03/28/how-to-download-all-your-ssrs-report-definitions-rdl-files-using-powershell/
    Note: Microsoft provides third-party contact information
    to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
    Best Regards,
    Joyce

  • SQL Server for SCCM 2012 R2

    Hello,
              I'm very new to SQL concepts, I have recently installed a backend database for SCCM application with below configuration.
    Installed the SQL on VM with 10GB RAM, 50GB(OS Partition), 400GB (SCCM DATA & SQL DATA) and 50GB (SQL Logs)
    OS: WIn Server 2012 R2
    SQL : SQL Server 2012 SP1 Std
    Question: I want to know,how to configure the following things,
    01. Limit memory utilization of SQL (Min & Max)
    02. limit the maximum size of the log files
    03. Limit Disk utilization for SQL etc...

    Hi Julie,
        My friend Jorge Segarra has a blog about min and max memory that I'd recommend you look at.  http://www.sqlchicken.com/2012/02/setting-memory-limits/  
    the best answer is "it depends", you want to define an amount other than the default.  by default SQL Server installs with 2 TB of memory enabled regardless of what is on the source system.
    With SCCM and 500 GB data files, you will probably find you have memory pressure with only 10 GB.  I would leave a minimum of 1 GB per for every 4 dedicated to the OS, up to 4 GB for the OS.  So in your case,
    8 GB for SQL 2 GB for the OS.  If you can add more for the VM that would be a good idea.  Typically you would want 3 x your largest returned dataset in a query.  When you do a checkdb or index rebuilds your memory with get thrashed.
    Log files, make sure your database is in simple recovery model.  Understand the type of backups you need to maintain transnational consistency.  Grow them at a minimum of 4 GB increments.  Transaction logs
    are made up of VLF's and VLF fragmenation will cause slower writes on write heavy systems like SCCM.  Here's a great blog for more on VLF's http://blogs.msdn.com/b/blogdoezequiel/
    Disk limitation should be based on size.  I like 100 GB of free space or 20%, whichever comes first.  This will be determined by the amount of history you want to maintain though.
    Convert DTS to SSIS |
    Document SSIS |
    30+ SSIS Tasks |
    Real-time SSIS Monitoring |
    Quick Starts |
    BI Blitz

Maybe you are looking for

  • Formatting a Hard Drive

    I'm trying to format a 160 GB hard drive. How long does that usually take? Any clues on why Disk Utilities has been grayed out for two hours now on my 4.5GB G5 and the status bar at the bottom has been showing about 5% "partitioning" for that long? W

  • Session Files ...is this a bug or by design?

    Audition 3 Please let me know if the only files that are saved with a session are the ones actually inserted in a Multi Track ...TRACK? I drag , say 20,  wav files into my Files bin so that I can access them in Multi Track or Edit Windows as and when

  • Cant save a page in illustrator 10

    Help I have an illustration that I have drawn in Illustrator 10 and have coloured in, but I can save the Black and white version and save a copy. But I want to save a copy of the coloured version but the button is greyed out. Why?? Is it something to

  • Flasher player 10.1 needs to be reinstalled

    This last month I have had a number of computers prompt the users that they need to install flasher player 10 when going to web sites that use flash player. These computers have flash player 10.1 installed.  When I go that computer, and do an install

  • Problem partly solved: iPhoto slide shows on iPod

    I have had my iPod 60 GB for a couple of days now and was first a bit shocked that iPhoto slide shows are not visible and displayable on the iPod, since I'd like to show my iPhotos thru the iPod on a TV set. This is all the more non-understandable si