Sccm 2012 query self encrypting drives

I have SCCM 2012 SP1, does anyone know of a way to query a collection, for self encrypting drives? All I really need to know is; of my "laptop" collection, which ones have Self Encrypting Drives.

For BitLocker you can use the following:
http://mssnet.wordpress.com/2012/07/25/bitlocker-reporting-in-configuration-manager-2012-8/
Cheers
Paul | sccmentor.wordpress.com

Similar Messages

Bitlocker, Windows 8 and self encrypting drives

I am trying to install a Seagate Constellation.2 self-encrypting drive with Windows 8 for use with Bitlocker. Articles that I've read imply that Bitlocker will recognise the SED.
There's no problem with the installation but there is no indication that Bitlocker sees it as anything other than a normal drive.
If I try to encrypt the full drive with Bitlocker, it's obvious, from the time it takes, that it is software encrypting it.
I have read the article about 'encrypted hard drives' and note that it says that SEDs are not the same thing. Frankly, I don't understand this and neither do other people on the web who have written saying that SEDs are now supported by Bitlocker.
Can you help with this please?
Thanks

The constellation ES.2 and ES.3 drives will not be able to be used as hardware encryption with Bitlocker on Windows Server 2012/8 they will just show as normal hard disks as your seeing and then you can use Bitlocker software encryption.
The reason they don't work is because Windows Server 2012/8 requires a OPAL 2 compliant drive and the Seagate constellation ES.2 and ES.3 drives are not OPAL 2 compliant drives. This is common across all vendors at the moment I was told, so until someone
releases a OPAL 2 compliant drive you will only be able to use bitlocker software encryption.
Niki Han
TechNet Community Support

IN NEED OF A SCCM 2012 QUERY THAT SHOWS LAST TIME SOFTWARE WAS USED OR OPENED

Hello
I am in need of an SCCM 2012 query that shows PCs that have Visio , Adobe Professional and Visual Studio and the last time each was used or opened. I have the query below which give me the PC name and the product. Any assistance will be very helpful
select distinct SMS_R_System.NetbiosName, SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName
like "%adobe acrobat%pro%"
select distinct SMS_R_System.NetbiosName, SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName
like "%visio%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%viewer%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%service pack%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%security
update%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%hydra%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%update%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%MUI%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName
not like "%amd%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%microsoft visio%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%vision%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%add-in%"
select distinct SMS_R_System.NetbiosName, SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName
= "Microsoft Visual studio 2012 devenv" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%hotfix%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%security%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName
not like "%update%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%service%"

Did you create a software metering rule for each software title? if not then you need you do that first and it will take over a week before you see results.
Also keep in mind that your query will only find x86 software titles.
http://www.enhansoft.com/

SCCM 2012 QUERY THAT SHOWS SOFTWARE INSTALLED AND LAST TIME IT WAS USED OR OPENED

Hello
I am in need of an SCCM 2012 query that shows PCs that have Visio , Adobe Professional and Visual Studio and the last time each was used or opened. I have the query below which give me the PC name and the product. Any assistance will be very helpful
select distinct SMS_R_System.NetbiosName, SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName
like "%adobe acrobat%pro%"
select distinct SMS_R_System.NetbiosName, SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName
like "%visio%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%viewer%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%service pack%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%security
update%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%hydra%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%update%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%MUI%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName
not like "%amd%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%microsoft visio%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%vision%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%add-in%"
select distinct SMS_R_System.NetbiosName, SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName
= "Microsoft Visual studio 2012 devenv" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%hotfix%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%security%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName
not like "%update%" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%service%

See me reply to your other post with the exact same details, in the CM07 forum.
http://www.enhansoft.com/

SCCM 2012 Default self signed Cert expired...

SCCM 2012 Default self signed Cert expired - how do I renew it?

The default selfsigned cert that gets generated with the installation - can be found in administration - security - Certificates (This is Sccm 2012 RTM)
Yes, I know this is an old post, but I’m trying to clean them up. Did you solve this problem, if so what was the solution?
I will bring this back to Kent point, which one of the Certs are you talking about. You can see form the screenshot that I have 6 certs, 3 DP and 3 Boot cert. You can also see that the 3 DP server have a 100 year life and the 3 Boot certs only have 1 year.
If you are talking about the boot certs then just create the boot image.
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

Create a query in SCCM 2012 R2 for NIC Driver Version

Hello,
Is there a way to create a query for the specific NIC driver versions with SCCM 2012 R2? For example I can do this and other descriptors for video i.e.,
select SMS_R_System.Name, SMS_R_System.LastLogonUserName, SMS_R_System.HardwareID, SMS_G_System_COMPUTER_SYSTEM.Manufacturer, SMS_G_System_COMPUTER_SYSTEM.Model, SMS_G_System_VIDEO_CONTROLLER.DriverVersion, SMS_G_System_VIDEO_CONTROLLER.Description, SMS_G_System_VIDEO_CONTROLLER.VideoProcessor
from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId inner join SMS_G_System_VIDEO_CONTROLLER on SMS_G_System_VIDEO_CONTROLLER.ResourceID = SMS_R_System.ResourceId where SMS_G_System_COMPUTER_SYSTEM.Model
like "HP EliteBook Revolve 810 G2" and SMS_G_System_VIDEO_CONTROLLER.Description like "%intel%"
Is there a script that will give the version for NICs?
Thanks Bill

This article provides one way to do it:
http://blogs.technet.com/b/configmgr_geek_speak/archive/2013/11/10/inventorying-and-reporting-network-adapter-driver-details-and-how-to-report-only-the-wireless-type-in-configuration-manager-2012.aspx
Jeff

SCCM 2012 OSD; Not finding driver package during deployment

I've been having some trouble setting up my OSD deployment using SCCM 2012 and hope someone can point me in the right direction. Specifically I am having trouble with device driver deployment while deploying my reference image.
I am running SCCM Config Manager 2012 SP1 CU2. This is running on a Server 2012 VM with SQL 2012.  I am building an OSD deployment and have successfully captured my reference image. I am not sure if it matters, but I manually built a reference
PC and using capture media (USB stick), I successfully captured my reference image. I have imported my drivers for the target PC into Config Manager and into a driver package. The driver package has been deployed to the distribution point
(DP).  I checked the status of the driver package within the console and verified it has been deployed to the DP.   I created a new task sequence (TS) to deploy the captured wim. Within the TS, I added an "Apply
Driver Package" step and pointed it to the aforementioned driver package. I added a WMI query to the step as follows
select * from Win32_ComputerSystem where Model like "HP Probook 6570b%."
Incidentally, I did a wmi query on the target PC to verify the model. I deployed the TS to the unknown computers collection and PXE booted the target PC. I ran through the OSD wizard and while OSD is verifying the deployment prerequisites,
the deployment fails with the error, "The task sequence cannot be run because a package referenced by the task sequence could not be found." I checked the smsts.log log and found the following:
Failed to find CCM_SoftwareDistribution object for AdvertID="CT120043", PackageID="CT100044", ProgramID="*"
After some research I found this error means Config Manager cannot find the driver package (PackageID="CT100044")
for deployment. After more research I have done the following:
Deleted the Driver Package and recreated it and updated the TS step to point to this package.
Deleted and recreated the TS along with the driver package.
Recreated the driver package and distributed content, only importing the NIC drivers as a way to make a simple test.
When distributing content I verified it was successfully completed each time as per the console.
Each time I recreated the driver package and the OSD failed, smsts.log is showing the appropriate package ID in the error. If I disable the Apply Driver Package step and configure a Apply Device Drivers step to install the best matched compatible drivers
and limit the driver matching to the specific driver package, the OSD completes but the drivers do not install. It is as if Config Manager is not seeing the imported drivers at all.
I have run out of options to try and hope someone can help point me in the next direction to take.  After reading numerous forums and guides, I am sure I am doing the OSD steps correctly but I am apparently missing something.
Thanks in advance,
Mike G.

Thanks for responding.
Yes after I posted the question I right-clicked on the driver package, and selected to update distribution points. I checked now (about 12 hours later) and the package is showing it has not finished updating. I checked the content status and
it is "waiting for content." I looked at distmgr.log and I found an error "Failed to start DP health monitoring task for package 'CT100044'. Error code: -1". This error would occur every 30 min after each time the DP retried to process
the package. After some research I found a post stating a file called "Microsoft" or "Program" on located on the root of the site server could cause this and renaming or deleting the file would resolve this. I renamed the file and after the next time
it retried, the error cleared, however the package status is still waiting for content. I tried doing a validation on the package but so far there has been no change.

How to inner join attribuet from user with system resource on sccm 2012 query

Hi , I am using SCCM 2012. Trying to create a WQL query to get list of computers with department name and netbios names,etc. these are in USER and SYSTEM RESOURCE object type seperately. The query wizard doesn't allow me to choose sytem
resource and USER attribute at same time. In JOIN, the inner join also doesn't have SYSTEM RESOURCE attribute class for me to join it with USER attribute class. Any way to resolve this issue so that I can get a query as mentioned?
I tried the wql below and pasted to my test query, it gave an error. I guess it's because that wql is on sccm2007.
Please advise,thanks!
http://social.technet.microsoft.com/Forums/en-US/8c47f069-5390-45bd-a619-5f5498947baa/sccm-query-which-joins-system-resource-and-user-resource?forum=configmgrgeneral
http://social.technet.microsoft.com/Forums/en-US/8c47f069-5390-45bd-a619-5f5498947baa/sccm-query-which-joins-system-resource-and-user-resource?forum=configmgrgeneral
Thanks and best regards, -- KF

Hi,
Try the suggestion by Garth Jones or post a new thread at
http://social.technet.microsoft.com/Forums/en-US/home?forum=ITCG
I am not familiar with WQL, maybe you could get better help at the forum above.
Juke Chou
TechNet Community Support

SCCM 2012 Query to find units with IPv6 Enabled?

We've found a need to locate computers that may have IPv6 enabled for audit purposes, and then we'll disable them at a later date.
Has anyone been able to create a successful query in SCCM 2012 to get that information?
I found this but it spit back the IPv4 info for all the units in our device collection, plus it's for SCCM 2007. http://www.myitforum.com/forums/Query-for-systems-with-IPv6-enabled-m227020.aspx
Appreciate any input, thanks!
This topic first appeared in the Spiceworks Community

If you're using % in the value field the operator must be "Like" . In your case, the query should look like
select SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain from SMS_R_User where SMS_R_User.UserPrincipalName Like
"TQA%" order by SMS_R_User.UserPrincipalName
Kindly mark as answer/Vote as helpful if a reply from anybody helped you in this forum. Delphin

SCCM 2012 - Query

Hi,
I have primary SCCM 2012 SP1, SCCM database server and standalone reporting SQL server separately.
1. I am trying to enable reporting service role in which it is detecting the primary database automatically. When i enter standalone reporting SQL server with instance name and i dont know what to enter in database name. I am getting an error while verifying.
Is it possible to configure the reporting services role if the reporting SQL server is different from primary SCCM database
2. I have a proxy server as per my understanding, i need to open WSUS user port 80 or 443 to connect to microsoft website to download the patches and client to WSUS is 8531 or 8532. Is this correct. Please correct me
3. In SCCM 2012 SP1 requires computer account and installation account needs to be added as a local admin on the primary database and reporting SQL server database.
4. I have MCAFEE antivirus enabled on all the servers. So for SCCM SQL replication is it fine to allow inbound rules for 1433 and 4022 on SQL service broker or i need to create exception for 1433 and 4022 on MCAFEE antivirus
Regards, Pratap

1. I got some information, i think SQL reporting person hasnt created a data source to point to site database. Because of which when i run the reporting services role it is not detecting the reporting server instance. Do we have doc on how to create a data
source. Hope this should be correct solution
2. So what happens in case if i use default website for WSUS. Which port i should open in proxy
3. But still component
/hierarchy component shows a critical error stating account doesnt have proper privelege on site system (database)
Regards, Pratap

SCCM 2012 Query report for specific software installed.

I have Reporting point installed and it seems to be working as I was able to run OS reports.
Here's what I would like to do.
1. I need a query/report to show us all the machines that do not have Microsoft Forefront Endpoint Protection installed.
2. I also need a query/report showing what machines still have Sophos AV installed.
Any help is greatly appreciated it.
Thanks,
Voev

I was not able to use the Reporting to get computers without FEP installed. So I did a workaround.
Create Device Collection for computers with FEP installed
1. Device Collections => Create Device Collection =>name it "Computers with FEP installed=> Query Rule Properties => Edit Query Statement => Criteria tab => Add the following statements
Criterion Type: Simple value
Where: Installed Software - ARPDisplay Name
Operator: is equal to
Value: System Center 2012 Endpoint Protection (as appeared in Add/remove program name)
Create Device Collection for computers without FEP installed
1. Device Collections => Create Device Collection => Name "Computers without FEP Installed" => Query Rule Properties => Add Rule => Include Collections => Tick "All Systems" => OK => then you need to add
the Exclude by => Add Rule => Exclude Collections => Tick " Computers with FEP Installed => OK
So in my "All Systems" Collection has 1000 members
Computers with FEP Installed collection has 900 members
Computers without FEP Installed collection has 100 members
Add the with FEP installed & without FEP installed collections together is equal to 1000 members of the All Systems.

SCCM 2012 - Query Local Admin Users

Hi Guys,
I´m trying to get all users that are local admins of my network using sccm12.
How it´s possible?
Thank you.

Hi,
We can use the following query as follows
SELECT DISTINCT SYS.Netbios_Name0, SYS.User_Name0, LocalAdminMembers.TimeStamp, LocalAdminMembers.Type0 as Object LocalAdminMembers.Account0, LocalAdminMembers.Domain0 FROM fn_rbac_GS_LocalAdminMembers0(@UserSIDs) LocalAdminMembers JOIN fn_rbac_R_System(@UserSIDs)
SYS ON SYS.ResourceID = LocalAdminMembers.ResourceID WHERE SYS.Netbios_Name0 LIKE @variable ORDER BY SYS.Netbios_Name0
To create a custom report
1. Go to SCCM console – Reports – Create report
2. Complete the Reporting Wizard. The MS SQL Report Builder will be opened up now
3. Double Click the Table or Matrix which will open to select a new dataset window. Select ‘Create a dataset’
4. Select the existing Data source connection and enter the data source credentials
5. Under Design a Query window, Select “Edit as text” and copy the above query
6. Next arrange the field as per the attached doc
7. Choose the Layout of the Report and complete the wizard
8. Right Click on report, where the empty area of report page and select properties. Go to reference tab, Click on assemblies.
Add following assemblie - SrsResources, culture=neutral
And Click OK.
9. Select UserSIDs under Paramter and edit the properties
10. Go to Default Value and select Specific Values and Add expression. Leave the rest of the tab as default and complete it
11. Select Variable under Parameter and edit the properties
12. Type Computer Name under Prompt field and leave the rest of the tab as default and complete it.
13. Type Computer Name under Prompt field and leave the rest of the tab as default and complete it.
You are done.
Regards,
Vinod

SCCM 2012 Query collection problem

Hi!
I have problem with query based collections. I want to create collection where is computers with db2 client and sql express installed. Query is like that:
select * from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceId = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.ProdID = "{63F6DCD6-0D5C-4A07-B27C-3AE3E809D6E0}"
and SMS_G_System_ADD_REMOVE_PROGRAMS.ProdID = "{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}"
When I choose one of them, then it finds workstations. Where is my mistake or I need to do it another way?
Best regards
Ronald

Hello Ronald,
your Question is important for me because, i search for an possibility to Install the DB2 Client over SCCM environment. My way is over an Command file:
@echo off
net use s: \\xxxxxxxxx\d$\SoftwareDeployment\DB2_Driver /PERSISTENT:NO
s:
setup -u PROD_CLIENT.rsp
timeout /T 600 /nobreak
net use s: /delete
But the Installation should not start, after some hours it failured with message ID 10006 and comment 1603.Do you know why it not start?

SCCM 2012 OSD with Multiple Drive letters using StandAlone Media

Hey guys I have a client who is required to partition their Windows 8.1 installation in three different partitions:
C:(OS Partition)
d:(SQLData Partition)
E:(Client Data Partition)
G:(CD-ROM)
I Already know that I should not use multiple drives for OSD but this is the requirement I have been given...
When I deploy my TS through PxE or USB Bootable Media all the drives are labeled correctly... C,D and E but if I Use Standalone USB Media then I end up with C, E and F and G as CDRom. I know that WinPE assigns a drive letter to the usb stick usually d: but
not always so how can I set the USB Standalone media to act the same way as PxE and Usb Boot Media? is there a way to have PE set the USB drive to drives latter in the alphabet? s, t or w?
Please help

Hey Joyce thanks for the response but I am not talking about the fact that the drives are labeled differently in PE I am stating that once the imaging process is complete the drive letters are not the same when doing a deployment through PxE or USB Bootable
media... When using Full standalone USB media to deploy the exact same TS the drive letter assignment is not consistent so to be as clear as I can I will explain again...
When doing a deployment from PxE, USB BOOT Media or USB BOOT Media attached to a VM, all the drives end up correct at the end of the deployment so C: is the OS drive D: is the Data Drive and E: is the Maps Drive (Keep in mind that if I do a usb
bootable media deployment and leave the USB in the computer I have the same issue as the standalone media)
But if I run the deployment from a STANDALONE USB Media then everything runs as it should but when I enter windows and look at my drive letter assignment the C: is the OS drive the D: drive is the USB the E: drive is the Data drive and G: is the Maps
Drive...
Which means to me that when windows is assigning drive letters it is assigning the USB Drive as D and not something less intrusive like y: or o:
So the question is: How can I have the drive letters assigned properly when using full standalone media So that my deployments are consistent when deploying through PxE, Usb Boot Media and USB Standalone media? Did no one ever test this out? and if so is
this what I can expect from SCCM 2012R2 For consistency to not be available across all deployment methods?

SCCM 2012 Query to list all office 2010 x86 architectures systems

Hi,
I am trying to find all the x86 versions of office 2010 in one query to install a x86 application to
and all the x64 versions of office 2010 in another query to install an x64 application to,
i got the x64 to work its just that my x86 query picks up every version of office and some are left out,
Can anyone assist me on the query for x86 version of office.
Kind Regards

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceId
= SMS_R_System.ResourceId where SMS_R_System.ResourceId in (select SMS_R_System.ResourceID from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName
like "%Microsoft Office Professional Plus 2010%") and SMS_G_System_COMPUTER_SYSTEM.SystemType = "X86-based PC"

Sccm 2012 query self encrypting drives

Similar Messages

Maybe you are looking for