SCCM 2012 R2-CU3 Collection Query not a report to generate Computers no longer logon to Active Directory for more than 90 Days.

Dear Brothers,
I want to use SCCM to have a
Query Collection to generate computers no longer active by detecting more than 90 days of no logon to our AD (Dead or not Pinging but still in AD), after this activity I will delete this computers
to completely clean both AD and SCCM records as Well.
Why instead of Reports I prefer collection is because, I want it to be more Dynamic and once you open the console the computers will be displayed immediately.
Regards,

It is not possible for a collection to be more dynamic than a report. If anything the collection will be behind what is listed in a report.
How exact do you think that you determine that a PC is not ping able via a collection? This might be possible via a report but it will be a very, very complex report to do this.
As for logon details this is NOT collect by CM12 by default and it is could be update 15-22 days out of sync with reality.
If I remember right there are a few scripts that will do this for you available via the favorite search engine.
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ
Thanks Garth,

Similar Messages

  • SCCM 2012 Secondary site client's are not doing hardware scan for more than 30 days

    Hi, 
    On our SCCM environment around 2500 active clients mapped for particular secondary site not performed hardware scan for more than 30 days. Can anyone provide suggestion how to fix this. 
    Regards,
    Madhan

    Yes i confirmed it is listing correct MP and software scan is working fine. we have around 8500 machines connected to that site buy only 3000 machines are having this issue. anyone has faced this issue ?
    Only 5000 Computers are supported by a secondary site.
    http://technet.microsoft.com/en-us/library/gg682077.aspx#BKMK_SupConfigClientNumbers
    Garth Jones | My blogs: Enhansoft and
    Old Blog site | Twitter:
    @GarthMJ

  • SCCM 2012 Secondary site some client's are scan hardware inventory for more than 30 days

    Hi, 
    In our SCCM 2012 environment we have secondary site configured which connected with 8500 computers, on those 5500 machines scanning hardware inventory and send latest inventory details to Secondary Site Management Point, but remaing 3000 machines are not
    sending latest hardware inventory for more than 30 days. I verified clients log  found it is generating report on inventory agent.log however it is not available with secondary site Management Point.
    Are anyone experienced this issue, please share your thought how to fix this issue.
    Thanks in advance. 
    Madhan

    Yes i did verify but the client isn't listed on both log files. Also i couldn't open IIS log because of it size has more than 800MB. currently this site has connected with 8500 machines do you think these many clients are supported by secondary site server. 
    If you can't open the IIS log then how do you know that the Client's IP is not listed within them?
    5000 is the max for a secondary site. You will need to secondary sites at this location.
    http://technet.microsoft.com/en-us/library/gg682077.aspx#BKMK_SupConfigClientNumbers
    Garth Jones | My blogs: Enhansoft and
    Old Blog site | Twitter:
    @GarthMJ

  • Quota deduction when EE has been inactive for more than 180 days / Advance quota days when employee does not have enough balance

    Dear experts,
    We have two requirements regarding to the "Anual leave" quota.
    1. Quota reduction when employee is inactive for more than 180 days
    2. Advance quota days when employeee does not have enough balance
    We have in place an "Anual Leave" quota related to a calendar year period, that gets generated dialy in time evaluation. This quota gets the employee entitlement from a set of rules that stored the corresponding balance in a period time type, that is the one that we defined in the customizing. This is working fine. The problems start when we try to incorporate the other two requirements.
    Regarding the first requirement, if the employee has been inactive for more than 180 days in a calendar year due to unpaid leave, we need to start quota reduction as follow,
    First, we need to clear the balance that was calculated above in the schema.
    Then, we need to calculate one leave day for every 20 days worked till the end of the year, considering as such, everyday the employee is expected to work, except days on which the employee has been absent on unpaid leave.
    For the second requirement we created a manual quota call "Advance Anual Leave". So, if the employee, wishes to take 20 working days holiday, but in his/her Anual Leave quota has only 10 days available, we have to create an "Advance Anual Leave" quota manualy for 10 days. When the quota for next year gets generated, we need to deduct these advanced 10 days from it. This deduction should stop the year after.
    The problem we are finding with these two requirements is that, due to the Anual Leave quota gets generated dialy, we can't get the balance right.
    Thanks in advance!
    Kind regards,
    Alex

    Hello binbingogoABC,
    Shopping on BestBuy.com should be easy and fun and not fraught with the kind of trouble that you describe. I regret very much that this has been your experience.
    Using the information you provided when you signed up for Best Buy Unboxed I was able to locate your cancelled orders. I have requested more information from my back-office partners. As soon as I have additional details about your situation, I will reply again to this message. In the interim, I'm sorry that I must impose upon your patience.
    I'm very grateful that you wrote to us with your concerns.
    Sincerely,

  • HP LaserJet 1300 not connected for more than 1 day

    Since Apple came out with the Yosemite printing system, I cannot print wirelessly for more than one day. I have reset my modem, changed the location of my network, unplugged and repowered Airport Extreme, started in Safe Mode, and more.
    No matter what I do: I either get:  a printer name with a number in parenthese or a long Bonjour number when deleting and adding a printer on my laptop.
    Whatever I do, it only works from about 24 to 36 hours. Then when i go to print it says Printer is Not Connected. I can delete and add again, usually it will find the printer, add it, print, and then a day or two later, the printer is not connected again.
    But I have to keep redoing this both to my laptop and my wife's, and we have not had reliable printing since Yosemite cane out about October 18, 2014.
    Equipment
    iMac:
    Operating Sysem: 10.10.1
    Printer: HP LaserJet 1300
    Network: Comcast
    Router: Airport Extreme
    The only thing I have not done I can think of is reset Airport Extreme.  I can do that, but don't know if I will then have additional problems.
    This all started with the YIosemite update but at this point I don't know if it is an HP-related problem or a general Yosemite-related problem.
    I appreciate any help I can get. Have wasted probably 40 hours over two-plus months trying to get this fixed. When Apple could not fix it back in October, the person referred me to HP. The person at HP Business did not know my printer was supported for Yosemite although his own web site said it was. So that was not much help And after resetting printers, deleting and adding printers, etc., I don't know what else to do.
    Thanks for listening.

    Did it start not syncing after the iOS 4.2 update?

  • Accounts that have not been logged into for more than 90 days

    Hi Folks,
    Good Day.
    Can anyone help me to update below powershel script?
    below script find in my domain all the AD users accounts that have not been logged into for more than 90 days and export the report to .csv file. in addition what I want:
    1. OU=Others, Sales --> exclude this OUs
    2. Disable all the user based on 90 days export report .csv file 
    import-module activedirectory 
    $domain = "test.com" 
    $DaysInactive = 90 
    $time = (Get-Date).Adddays(-($DaysInactive))
    $timer = (Get-Date -Format yyyy-mm-dd)
    # Get all AD User with lastLogonTimestamp less than our time and set to enable
    Get-ADUser -Filter {LastLogonTimeStamp -lt $time -and enabled -eq $true} -Properties LastLogonTimeStamp |
    # Output Name and lastLogonTimestamp into CSV
    select-object givenname,Name,@{Name="Stamp"; Expression={[DateTime]::FromFileTime($_.lastLogonTimestamp).ToString('dd-MM-yyyy_hh:mm:ss')}} | Export-Csv c:\temp\90DaysInactive-$(Get-Date -format dd-MM-yyyy).csv –NoTypeInformation
    Many thanks for advance Help:

    Hi Anna,
    Good Day.
    Many thanks for your responce.
    with your help i can manage to exclude the OUs as wellas can get the .csv report via mail.
    Now i want to disable all the user based on 90 days export report .csv file.
    could you help me on this please? the report will come everyday like below:
    filename=90DaysInactive-dd-mm-yyyy.csv
    sample output:
    Given name User Name
    Last LogOn
    Test User1 user1
    03-10-2006_05:30:59
    Test User2 user2
    02-10-2006_12:00:34
    import-module activedirectory 
    $domain = "test.com" 
    $DaysInactive = 1 
    $time = (Get-Date).Adddays(-($DaysInactive))
    $timer = (Get-Date -Format yyyy-mm-dd)
    $FileName="c:\temp\90DaysInactive-$(Get-Date -format dd-MM-yyyy).csv"
    $from = "[email protected]"
    $to = "[email protected]"
    $smtpHost = "smtpservername"
    $Subject = "90 Days Inactive Accounts"
    $body = "90 Days Inactive Accounts report"
    # Get all AD User with lastLogonTimestamp less than our time and set to enable
    Get-ADUser -Filter {LastLogonTimeStamp -lt $time -and enabled -eq $true} -Properties LastLogonTimeStamp | where {($_.distinguishedname -notlike "*OU=HR*") -and ($_.distinguishedname -notlike "*OU=OT*")} | 
    # Output Name and lastLogonTimestamp into CSV
    select-object givenname,Name,@{Name="Last Logon"; Expression={[DateTime]::FromFileTime($_.lastLogonTimestamp).ToString('dd-MM-yyyy_hh:mm:ss')}} | Export-Csv c:\temp\90DaysInactive-$(Get-Date -format dd-MM-yyyy).csv -NoTypeInformation
    Send-MailMessage -From $from -To $to -Subject $subject -cc $cc -SmtpServer $smtpHost -Attachments $FileName -Body $body -BodyAsHtml
    Thanks for your advance help.

  • Daily lot size not working for more than 5 days grouping

    Dear All,
    I want to create the procurement proposal for 6 days once. So I have created new lot size ZB by copying TB and maintained no of periods as 6.
    Assigned the lot size in Material master. After MRP run, the procurement proposal created for every two weeks on Monday. It is not created as expected (6 days once). Is there any other settings needs to be maintained to achieve the requirement?. The same problem happening for the no of periods 7,8,9 also with daily lot size.
    I don't want to use the planning calendar for this. Daily lot size is working only upto no of periods as 5.
    Could you please someone explain the standard functionality of daily lot size with combination of no of periods?
    Thanks in advance.
    Regards,
    Ganesh

    Ganesh,
    Check if your lot size is something similar to screenshot below. It is important that you have lot sizing procedure as 'Period lot size' and period as 'Daily lot size'
    With the above lot size (number of period as 8 days) I can see expected results.
    Regards,
    Himanshu

  • New-CMVhd error Not Found - SCCM 2012 R2 CU3

    When trying to execute New-CMVhd via powershell in SCCM 2012 R2 CU3 I get a "Not Found" error.
    This happens in our production and pre-production environments.
    Using the Console wizard works fine.
    Command is:
    New-CMVhd -Path "\\machine\D$\Windows2012R2Server_SCCM.vhd" -Name "Windows2012R2Server_SCCM" -Version "1.0" -VHDSize 100 -TaskSequencePackageId "XXX00123" -DistributionPointServerNames "server.contso.com" -Description "Built with Deploy Server To VHD Task Sequence." -Verbose
    Output:
    VERBOSE: Performing the operation "New" on target "Vhd: New".
    VERBOSE: Executing WQL query: Select * From SMS_TaskSequencePackageReference_All where PackageID='XXX00123'
    VERBOSE: Query options: None
    VERBOSE: Executing WQL query: Select * From SMS_DistributionPointInfo where Name='server.contoso.com'
    VERBOSE: Query options: None
    VERBOSE: Query 'Select * From SMS_DistributionPointInfo where Name='server.contoso.com'' processed 1
    results.
    VERBOSE: Executing WQL query: SELECT Distinct tspr.RefPackageID FROM SMS_TaskSequencePackageReference_All AS tspr WHERE
     tspr.PackageID='XXX00123' and tspr.RefPackageID Not In (SELECT PackageID FROM SMS_Package AS p WHERE
    p.PkgSourceFlag=1)
    VERBOSE: Query options: None
    New-CMVhd : Not found
    At line:1 char:1
    + New-CMVhd -Path \\machine\D$\Windows2012R2Server_SCCM.vhd -Name "Windows201 ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : NotSpecified: (Microsoft.Confi...s.NewVhdCommand:NewVhdCommand) [New-CMVhd], WqlQueryExc
       eption
        + FullyQualifiedErrorId : UnhandledExeception,Microsoft.ConfigurationManagement.Cmdlets.Osd.Commands.NewVhdCommand
    Can anyone else reproduce this? I have a feeling it will be a premier support call to Microsoft :-(
    Thanks

    Hi,
    Pls try to run the following command to import CM powershell module and change the path to be the CM server before your new-cmvhd command:
    import-module 'C:\Program Files (x86)\Microsoft Configuration Manager\AdminConsole\bin\ConfigurationManager.psd1'
    Set-Location CMserver:\
    “Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.”

  • New SCCM 2012 client machines still getting SCCM 2012 SP1 client not the new SCCM 2012 SP1 CU3 client

    Hi,
    I've successfully (as far as I can tell) deployed SCCM 2012 SP1 CU3 and all my existing clients are showing a client version of 5.00.7804.1400.  But when I setup a new client system recently I noticed that the client version was showing 5.00.7804.1000,
    and not 5.00.7804.1400. 
    For new client systems, do I need to redeploy the packages that were created for SCCM 2012 SP1 CU3 so that the new systems get the new SCCM 2012 SP1 CU3 client? 
    Thanks,
    Nick

    Hi,
    Here's some good information to look over:
    http://sccmfaq.wordpress.com/2013/09/24/sccm-2012-include-cu-in-osd/
    I haven't followed these instructions myself, since I haven't really had any good reason to include CUs during the initial installation process. I use this method instead and I've never run into any problems:
    http://www.ronnipedersen.com/2013/06/installing-sccm-2012-sp1-cu2-quick-start-guide/
    Don't retire TechNet! -
    (Don't give up yet - 12,575+ strong and growing)

  • CCMSETUP not updating on SCCM 2012 SP1 CU3/CU4 primary site

    I have a SCCM 2012 SP1 CU3 primary site and i can't upgrade the local installed SCCM Client.
    The error I get in ccmsetup.log is:
    <![LOG[MSI: Setup was unable to register the CCM_Service_HostingConfiguration endpoint
    The error code is 80041002]LOG]!><time="15:44:22.408-60" date="02-08-2014" component="ccmsetup" context="" type="3" thread="2496" file="msiutil.cpp:300">
    <![LOG[MSI: Action 15:44:22: Rollback. Rolling back action:]LOG]!><time="15:44:22.562-60" date="02-08-2014" component="ccmsetup" context="" type="0" thread="2496" file="msiutil.cpp:314">
    <![LOG[File C:\windows\ccmsetup\{59A0EA77-D28C-4286-83A6-04BB57B9CDD6}\client.msi installation failed. Error text: ExitCode: 1603
    Action: CcmRegisterHostingConfiguration.
    ErrorMessages:
    Setup was unable to register the CCM_Service_HostingConfiguration endpoint
    The error code is 80041002
    ]LOG]!><time="15:45:00.798-60" date="02-08-2014" component="ccmsetup" context="" type="3" thread="2496" file="msiutil.cpp:872">
    <![LOG[Client installation has failed too many times. Ccmsetup will now abort.]LOG]!><time="15:45:00.830-60" date="02-08-2014" component="ccmsetup" context="" type="3" thread="2496" file="ccmsetup.cpp:7941">
    <![LOG[Successfully deleted the ccmsetup service]LOG]!><time="15:45:05.831-60" date="02-08-2014" component="ccmsetup" context="" type="1" thread="2496" file="ccmsetup.cpp:3320">
    <![LOG[InstallFromManifest failed 0x80070643]LOG]!><time="15:45:05.831-60" date="02-08-2014" component="ccmsetup" context="" type="3" thread="2496" file="ccmsetup.cpp:7086">
    <![LOG[CcmSetup failed with error code 0x80070643]LOG]!><time="15:45:05.832-60" date="02-08-2014" component="ccmsetup" context="" type="1" thread="2324" file="ccmsetup.cpp:10544">
    I have this on my primary and secondary servers as well.
    Is upgrading to R2 recommended and will that solve this issue ?
    When googling to this issue i found that there is a solution for this: remove MP, upgrade Client, install MP.
    But this is my primary and secondary and on secondary i am not allowed to remove the MP. It is hardcoded enabled.

    Try the following steps to specify the hotfix when installing the client.
    1. Open an elevated command prompt.
    2. Run a command line similar to the following – if CU3 has already been installed, the MSP file below should be on the site server, in the
    \\servername\SMS_SITE\Client\hotfix folder:
    \ccmsetup.exe PATCH=\Configmgr2012ac-sp1-kb2882125-x64.msp 
    Juke Chou
    TechNet Community Support

  • Office 2013 Professional Plus - 32 bit Deployment takes an unacceptable time to deploy in SCCM 2012 - SP1 CU3

    We recently migrated over to SCCM 2012 SP1 - CU3 the first of the year from SCCM 2007 SP2.  We have used SCCM in the past to deploy Office 2010 and had deployed Office 2013 to our IT Dept. before moving over to SCCM 2012.  The deployment went as
    expected.  Now that we are ready to start deploying Office 2013 to our corporate workstations, the deployment time is running 4.5 hours to 5.5 hours from the local site server DP.  I am afraid to find out what time we are looking at for remote DP's. 
    The three factors that are different is that our SCCM site server is virtual, it is running 2012 for the OS, and obviously SCCM 2012-SP1 - CU3.   We are using the same package source files.   Previous to a successful deployment we were
    seeing hash mismatch errors which MS support pointed us to the nic driver on the VM was using E1000E and to change it to a VMX something driver.
    So I guess my question is anyone else out there deploying Office 2013 ProPlus - 32 bit from this type of environment?  Our previous deployment time for office was a little over an hour (not five hours).  Any suggestions where to look to improve
    the deployment time? 
    I am expected to deploy this in one week and have been working on these issues for weeks.

    I see now that you are using a combination of scripts and ConfigMgr package/program.
    The AppEnforce.log file is for use with the new ConfigMgr Application model.
    Is there any reason that you don't use the new model for deploying Office 2013? It's a single step process and perfect for it. If you use the Office Customisation Tool you can customise what you like. The process will then uninstall Office 2010 and install
    Office 2013.
    This is how you do it
    http://www.gerryhampsoncm.blogspot.ie/2013/03/sccm-2012-sp1-step-by-step-guide-part_9368.html
    Gerry Hampson | Blog:
    www.gerryhampsoncm.blogspot.ie | LinkedIn:
    Gerry Hampson | Twitter:
    @gerryhampson

  • SCCM 2012 R2 CU3 UPGRADE BROKE REMOTE ADMIN CONSOLE CONNECTIVITY

    I installed SCCM 2012 R2 CU3 on my site server but it broke a couple things. I've never had problems with SCCM upgrades before. The admin console works if you log into the site server and run it from there but not when you try it from anywhere else (another
    server or a workstation). When you open the admin console on the site server it does have the new version of 5.00.7958.1401. Of the five suggestions that appear when your console won't connect, here's what I know:
    1) the remote machines can all ping the site server (call it server 01)
    2) we know it's not my account that's a problem as I can open the console on the site server itself
    3) This problem happens on server 02, which I put the new admin console on. It also happens with other machines which still have the CU2 console
    4) Yes, I'm an admin role, shown by logging into the console on the site server
    5) I have another network where everything works. I have not put CU3 on it yet, of course. The WMI permissions on Root, Root\SMS, and Root\SMS\site_ABC are identical on both site servers yet it works on non-upgraded one and not on the upgraded one.
    WMI info-I can WMI connect from the site server to these other machines but not WMI connect from the other machines to the site server: not root, SMS, or SMS\site_ABC, nor cimv2, even though the permissions match what is on the working network.
    When I launch the console from the site server entries about loading the console loading ok are in SMSAdminUI.log, but when I try to launch the console from other machines no entries are made, even though I changed the SmsAdminSNapIN value to VERBOSE.
    I checked DCOM permissions and they are the same on both networks.
    Another issue that appeared with this upgrade: I can install the client upgrade to CU3 on other machines but on the site server it fails with "Internal Error 2503" and when you click OK it you get "Internal Error 2502".
    Ben JohnsonWY

    I'd suspected this WMI problem was only affecting our Server 2012 boxes. I compared RSOPs and noticed the ones having this problem were all under the same OU and getting few GPOs. Our GPO person found a GPO that has somehow become unlinked.  He relinked
    it. After a gpo update AND a reboot these machines start working again.  So CU3 did not cause this WMI after all.
    And yes, the CU2 consoles won't connect to a CU3 site server, you have to run the console upgrade.
    I fixed the "internal error 2503/2502" by doing this: open task manager, click details, end the explorer task (screen will look blank at first). Click File and select "start new task", enter "explorer.exe' and click the run as admin
    button. The msp for CU3 client installed and the screen looks normal again. I only saw this error on the site server and have never seen it before.
    Ben JohnsonWY

  • SCCM 2012 R2 CU3 PXE issue

    Hi,
    I have a SCCM 2012 R2 CU3 lab where pxe is not working, the clients are able to connect to SCCM server but the download gets stuck on the boot image & then it fails with the following error :-
    Don't find any specific error related to this deployment in SMSPXE.log.
    Thanks,
    Pranay.

    I've had some issues various places with NICs and the TFTP process.  One fix I implemented was to add the following registry entry:
    Location:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WDSServer\Providers\WDSTFTP
    Name: MaximumBlockSize
    Type: (REG_DWORD)
    Value range: 512–1456
    Base: (Decimal)
    I set it to 1024, but you need to determine what value works for your environment.
    This is documented here:
    http://support.microsoft.com/kb/975710/en-us
    Jeff

  • SCCM 2012 Password Age and if not set to Expire

    Hi,
    I browsed the Resource Explorer in SCCM 2012, and found that it shows the Age a person last changed their passwords.
    Can anyone assist me on how to get that data out of SCCM 2012?
    Kind Regards

    If you are talking about reports, First you need to configure sccm to collect that attribute from AD in the
    ad user discovery properties on Active directory Attributes tab. After the successful collection of those attributes you can query against "v_R_User" view and extract the information.
    Adding the attribute Pwd-Last-Set and msds-UserPasswordExpiryTime0 to user inventory would be of some help.
    Delphin

  • SCCM 2012 SP1 Update to CU5 not showing version 1600 for clients updated !

    Recently upgraded SCCM 2012 SP1 and its showing a version of 5.0.7804.1600 as it should be. Pushed out the CU 5 client manager update to few machines and they are also showing .1600 as the version, however in SCCM 2012 manager itself it is not updating the
    status of those machines from say .1000 or .1400 to .1600. Why is this happening and any solution for it ? I have also updated the CM on the server hosting the SCCM and is current to .1600 version.

    Because the client agent version is returned from clients via heartbeat discovery which only occurs by default every 7 days. Thus, you need to be patient. Note that I generally recommend reducing the heartbeat cycle to at least once a day partly for
    this reason.
    Jason | http://blog.configmgrftw.com | @jasonsandys

Maybe you are looking for