SCCM 2012 R2 Query for Cert's

Hi,
Is it possible to create a query to find the expiration dates of certificates on a collection of servers? 
Thxs

This isn't anything collected by default so you'll have to come up with a script to do this and either using compliance settings or hardware inventory to collect the information from which you then can create the report. This older post should get you
started:
https://social.technet.microsoft.com/Forums/systemcenter/en-US/44e2be21-b0f5-45d0-ad57-1f9fb1e68993/report-certificates-that-are-expired?forum=configmgrinventory
Jason | http://blog.configmgrftw.com | @jasonsandys

Similar Messages

  • Sccm 2012 collection query for software deployment failed PCs

    Hi,
    Let me know how can we create a collection of PCs which a particular advertisement failed.
    SCCM 2012 sp1 infra
    Midhun.PS

    See
    http://myitforum.com/cs2/blogs/gramsey/archive/2006/10/20/How-To_3A00_-Create-a-Collection-Based-on-an-Advertisement-Status.aspx. This will only work for program deployments, not applications.
    Torsten Meringer | http://www.mssccmfaq.de

  • SCCM 2012 Default self signed Cert expired...

    SCCM 2012 Default self signed Cert expired - how do I renew it?

    The default selfsigned cert that gets generated with the installation - can be found in administration - security - Certificates  (This is Sccm 2012 RTM)
    Yes, I know this is an old post, but I’m trying to clean them up. Did you solve this problem, if so what was the solution?
    I will bring this back to Kent point, which one of the Certs are you talking about. You can see form the screenshot that I have 6 certs, 3 DP and 3 Boot cert. You can also see that the 3 DP server have a 100 year life and the 3 Boot certs only have 1 year.
    If you are talking about the boot certs then just create the boot image.
    Garth Jones | My blogs: Enhansoft and
    Old Blog site | Twitter:
    @GarthMJ

  • SCCM 2012 Collection Query

    Hi All,
    I am using SCCM 2012 SP1 with SQL 2008 R2 SP1. I have scenario as below.
    App A is targeted to user based collection as Available (Optional).
    App B needs to be targeted to users who has successfully installed App A as Required(Mandatory).
    Note : As per application behaviour we cannot target App B to machine(Device) based collection, otherwise I would have created a query to pull out all the machines in a collection where App A is successfully installed on base of Add/Remove
    program display name.
    Question : I want to create a user collection query which will pullout last logged on user for all the machines where
    App A is installed successfully, so that I can target App B to this user based collection as Required(Mandatory). In this way if in future any other user is installing App A then that user will also get pulled out automatically to this user
    based collection.
    Its bit urgent for me. Request you please help me to get this query or let me know if there is any other way to achieve this.
    Thanks & Regards Uttam

    Hi Torsten,
    I really have not thought about supersedence but App B is not the upgrade or replacement for App A. If it would then we would have defined the relationship in supersedence. But App A and App B are entirely different applications. Functionality of App B depends
    upon App A, so both has to be there on the machine.
    Only the thing is App B should go to the users who has already installed App A on their machines. For this I would like to create user based collection but confused regarding query. How can we achieve this? I am thinking of to modify the below query
    to pull out last logged on user from the below collection query. I am using SCCM 2012 SP1 with SQL 2008 R2 SP1. How can I modify the below query?
    select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where ResourceId in  (select ResourceId from SMS_G_System_ADD_REMOVE_PROGRAMS
    where DisplayName="App A ARP name" and Version = "1.0.0")
    Thanks & Regards Uttam

  • SCCM 2012 - Export Query Results

    Hi guys, I have a query under "Monitoring" - "Overview" - "Queries" and have my results in the result pane however I want to print the report or export to a CSV file. I cant see an easy way to do this? Surely we dont have to create the query then
    create a report just so we can export or print the report? Information is on my screen and is exactly what I want but no obvious easy way to get this in a format that is usable
    I only see the export MOF option available
    Thanks
    Nick

    I know this is an old post but I see Garth replied a couple days ago - on this same theme I have just upgraded to Office 2013 and the cut and paste from Queries and Collections from SCCM 2012 (which worked fine in Office 2010) seems to now not
    work with my Excel 2013 - you do mention it works for you in your post.  The results I see that I have 4 columns in my results it just pastes them into 1 cell - it doesn't break up the columns.  I have tried pasting to notepad first then to Excel
    - doesn't work - also tried Paste - Special - Unicode Text or Text and still it all goes into one cell. Is there something I have to change with either SCCM or Excel to get this to work again?
    Let me know if you have run into this with Excel 2013....thanks
    Kevin
    I am seeing the same issue.  Win 7/Office 2013 fully patched.
    Edit: Got it to work by pasting into Notepad, saving as .txt and opening that file with Excel.

  • "Enable distribution-point sharing for this source site" did not showing SCCM 2007 DPs as SCCM 2012 content shares for CM12 clients

    Hi
    We have one central site server and three primary site servers in SCCM 2007 and completed the SCCM 2012 migration as single hierarchy.
    During the migration, We have configured SCCM 2007 Central site server as source hierarchy for data gathering process and configured the "Enable distribution-point sharing for this source site" to make SCCM 2007 distribution points
    as SCCM 2012 content shares to serve SCCM 2012 migrated clients. Now we are facing a problem that one of the primary site server's data gathering process did not gather SCCM 2007 DPs even though we configured "Enable distribution-point sharing for this
    source site" but data gathering process is completing successfully.
    Is anyone have idea, why these SCCM 2007 DPs did not appearing as SCCM 2012 content shares under "Shared Distribution Points"
    Thanks in Advance
    srkr

     Now we are facing a problem that one of the primary site server's data gathering process did not gather SCCM 2007 DPs even though we configured "Enable distribution-point sharing for this source
    site" but data gathering process is completing successfully.
    Earlier all the shared DPs are showing under  Shared Distribution Points ? Or since starting itself these DPs are not showing down? Have you checked migmctrl.log for some clue?
    Anoop C Nair (My Blog www.AnoopCNair.com)
    - Twitter @anoopmannur -
    FaceBook Forum For SCCM

  • SCCM 2012 - Network requirements for Client communication to primary in a Cross Forest Environment

    Hello, I have been trying to get some definitive answers on what network traffic is required between a client and a primary site versus a secondary in a cross forest scenario.
    Here is the scenario:
    Company A has an existing SCCM 2012 primary Site. Company B (Separate Forest) has now been brought in. One subnet on each side can route to each other and using that one subnet a two way forest
    trust has been setup. But the remote offices have IP address overlaps between companies. At some point in the future all assets on company B will be re-IP and brought over to Company A domain. But in the interim it would be nice to get SCCM cross forest clients
    working. Upgrading to a CAS model with two Primaries would not be preferred here as this is a temporary solution. 
    My questions are as follows.
    If a secondary site is deployed into Company B Forest/Network. I have seen people online elude to that clients will still need to communicate to the Primary located at Company A, even though they
    are assigned to a secondary on Company B’s network. Is this true? Is there any workarounds for this? Is a NAT back to the primary acceptable, or is reverse lookup required?
    Will the Primary need to communicate directly to the clients in Company B? If this is in fact a requirement, then this would be a show stopper. But if its only needed for things like client pushes,
    then we could work around it.
    Thanks

    "But the remote offices have IP address overlaps between companies"
    Technically, this is unsupported because clients, depending upon your boundaries, will not be able to find a local DP since they use IP addresses for this. The only way to work around this is to use AD Site boundaries.
    "though they are assigned to a secondary"
    Clients are *never* assigned to a secondary site -- that's not what secondary sites are for. Yes, clients require communication with an MP in the primary site where they are assigned. There is no way to change this or work-around this except to put
    an MP from the primary site closer to those clients and use the new MP affinity option in R2 CU3.
    Reverse lookups are only used to verify names by applications that wish to have this type of functionality (which are very few in number) and have nothing to do with true network traffic. NATing is an issue for the reason I gave above -- DP location.
    Remote control, client push, and WoL won't work either because there is no way for the traffic to reach the destination behind the NAT.
    All client *agent* communication in ConfigMgr is client initiated in ConfigMgr (remote control, client push, and WoL -- as just mentioned -- are sort of exceptions to this but they don't really involve the client *agent*.)
    Jason | http://blog.configmgrftw.com | @jasonsandys

  • SCCM 2012 R2 IP for Orchestrator 2012

    Hi,
    We have Orchestrator 2012 (7.0.1154.0) installed, and I would like to connect it to our SCCM 2012 R2 (5.0.7958.1303) installation with an integration pack.
    Does anyone know if I can connect a non-R2 Orchestrator to an R2 SCCM and if so, which IP I should use.
    I wish I could upgrade my SC'Orch to R2 but sadly we have some old SharePoint 2007 third-party IP's which do not work with R2, so I don't think that is an option.
    Your advice will be greatly appreciated.
    Tom

    Hi,
    you can register and deploy the System Center2012 R2 Integration Pack for SCCM, available here: http://www.microsoft.com/en-us/download/details.aspx?id=39622&WT.mc
    System Center 2012 Service Pack 1 - Orchestrator Component Add-ons and Extensions are available here:
    http://www.microsoft.com/en-us/download/details.aspx?id=34611
    Regards,
    Stefan
    www.sc-orchestrator.eu ,
    Blog sc-orchestrator.eu

  • Does sccm 2012 supports ibcm for linux and unix operating systems

    folks,
    does SCCM 2012 supports linux and unix operating system for IBCM ..........as per my knowledge it dont what i have learn t through bing........

    I thought it's not supported for Linux and Unix, see also:
    http://blogs.msdn.com/b/teju_shyamsundar/archive/2014/05/23/installing-the-system-center-2012-r2-configuration-manager-client-on-linux-part-2.aspx
    My Blog: http://www.petervanderwoude.nl/
    Follow me on twitter: pvanderwoude

  • SCCM 2007 database query for AD security group for machines

    dear,
    I am had created security DL in AD for machine to deploy software  and trying to link in SCCM 2007 with collection but could not
    i have tried query base following below link but its does not help
    http://www.windows-noob.com/forums/index.php?/topic/892-deploy-software-through-ad-groups-linked-to-collections-in-sccm/
    type all query but could not find in table (SystemGroupName).
    [email protected]

    Go to properties of you collection and add a new membership rule to add the security group
    SCCM use discovery methods to get information from AD. Make sure AD system discovery and AD security group discovery are enabled for the SCCM site. Once you add machines to the security group, you need to wait till the next discovery cycle is completed.
    The discovery cycle runs on a schedule set by SCCM administrator.

  • SCCM 2012 R2 Query

    Good morning everyone,
    I'm wanting to build a query collection to find all of the PC's in SCCM 2012 R2 that don't have the SCCM client installed on them. How would I go about doing that?
    Thanks,
    Dreday38

    Query
    select SMS_R_System.Active, SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, SMS_R_System.Client from  SMS_R_System where SMS_R_System.Client is null  order
    by SMS_R_System.Active
    Built in Report
    Monitoring > Overview > Client Status > Client Check
    Regards,

  • Sccm 2012 simulate deployment for task sequence / OS or applications

    Hi
    I have been getting a lot of problems with Os/Application Task Sequences and have been asked a few questions.
    I cannot find anything on the Web about Limitations for a simulated deployment in SCCM 2012.
    I know SCCM allows you to create them but does it work/Are the results accurate?
    I need to know the following: 
    Can you simulate an OS Deployment Task Sequence?
    Can you simulate an Application Deployment Task Sequence?
    Are there limitations to Simulated Deployments?
    Thanks guys Hope this makes sense and you can help.
    Regards
    Anthony

    If you have the MDT integration with SCCM 2012 you can simulate the settings used by the task sequence, but not the actual task sequence deployment. However, seeing the settings is often enough.
    Check this post:
    Save time (and avoid pain) - Create a MDT simulation environment
    http://www.deploymentresearch.com/Research/tabid/62/EntryId/155/Save-time-and-avoid-pain-Create-a-MDT-simulation-environment.aspx
    / Johan
    Regards / Johan Arwidmark Twitter: @jarwidmark Blog: http://www.deploymentresearch.com FB: www.facebook.com/deploymentresearch

  • SCCM 2012 vs WSUS for Windows Server Updates

    Hi, 
    Can anyone assist with clarifying the benefit of using SCCM 2012 for server patching over WSUS. As far as i understand SCCM can manage updates for third party applications if configured correctly. However if this is the only benefit I cannot see a clear
    reason for using it. 
    Any information on the benefits of SCCM for server patching would be much appreciated. 
    Regards, 
    Michael. 

    Hi,
    There are many reasons to use SCCM for patching instead of WSUS, I wrote a blog post a while ago listing 12 reasons why you should use it.
    http://ccmexec.com/2012/08/top-11-reasons-why-you-should-use-configmgr-2012-for-managing-software-updates/
    I hope that helps!
    Regards,
    Jörgen
    -- My System Center blog ccmexec.com -- Twitter
    @ccmexec

  • SCCM 2012 License query

    Hi,
    I need a SCCM 2012 report where it gives the following details
    OS, Vendor, Total License, Used License, Free License.
    To fetch the above details do we need to import and configure the software licenses.
    Thanks
    Sunny

    Suppose if i enabled and configured the above parameters as said by you then on which tables\views we can fetch these details (OS, Vendor, Total License, Used License, Free License.)
    Once you import the license statement , look at the built-in AI reports. if they don't give you what you want then you will need to create a custom report.
    Garth Jones | My blogs: Enhansoft and
    Old Blog site | Twitter:
    @GarthMJ

  • SCCM 2012 RS QUERY RULE OPTIONS

    How do i create a device collection query in SCCM2012 R2 wizard rule to find properties information for server object in Active Directory, such as query for description field?
    Example:

    You must first enable the discovery of this field in "Active Directory System Discovery". See the "Active Directory Attributes" tab.
    (Administration / Hierarchy Configuration / Discovery Methods)
    Once enable, run a synchronization on this component by right clicking on it.
    After the discovery you'll be able to query the "Description" field under "System Resources".
    Or use this WQL query
    "select * from SMS_R_System where SMS_R_System.description = "Your Description Goes Here"
    Benoit Lecours | Blog: System Center Dudes

Maybe you are looking for

  • How to print text in English & chinese lang in the same window in smartform

    Hi All, My requirement is in the Smartform for few windows i need the text in the English Language as well as corresponding Text in chinese Language. For Eg                               Buyer:                                                         

  • How to get the Text variables in the Columns Headings

    Hi,      My requirement is I need to get data for weekly wise and for the last 10 weeks also. For this purpose I used the restricted KF based on the variables (customer exit) and offset. Also used the text variable for displaying from and to days in

  • Unable to recognize computers via target disk mode

    I am trying to transfer files from my iBook G4 to my new intel-based iMac. I have successfully engaged my iBook in target disk mode (i.e. the firewire symbol moving around the screen) but my iMac does not recognize that the iBook is in target disk mo

  • Download CC versions for installation on a computer with no internet connection

    So I have just signed up with CC as I am wanting to get Photoshop and lightroom So I have a computer with no internet access, and so I would like to download the CC versions of the software on my work computer. Once downloaded, I will install the sof

  • Cannot view PDFs with Reader (11.0.06) on Safari

    Hi there, For some reason I can't view PDFs in Safari. I just updated my Adobe Reader to version 11 because I went to look at a file on a website and got this screen (below) instead of the actual file. I've already tried moving and trashing the plug-