SCCM 2012 report on computers with local shares and share permissions

Very new to SCCM 2012, want to put together a report to show computers with local shares and the permissions on those shares (for security purposes, need to investigate any systems that have open shares_.
Managed to add and now collecting information that populates v_gs_share and I have a handle on the report itself, just wondering how to collect the share permissions - I've seen other qustions on the boards that are similar but reference earlier versions
of SCCM so wondering how to do it in 2012.
Thanks

So, where are you at?  The script is running, and the clients have the data in their local WMI namespace, root\cimv2\sms_sharepermissions ?
So all that's left is to modify hardware inventory to pull that custom WMI Namespace in?  If so, it's not too horrid.  Take note of a workstation (or server) to which you have remote rights to; and which has run the script, so that on THAT specific
machine, root\cimv2\SMS_SharePermissions exists.
In your CM12 Console, Administration, Client Settings.  Right-click "Default Client Settings", Properties.  On the left, select "hardware inventory".  then on the right, Set classes..., now the fun part.
Add...
Connect..., and put in ThatServerOrWorkstation (for computername), and wmi namespace is root\cimv2.  Click the option "recursive", Connect.  (the trick here is rights to the target).
From the results, it might be easiest to click on "classname" at the top for sorting, then go find SMS_SharePermissions.  Select that, ok ok ok ok (however many times you need to agree); and... we're done here.  Sit and wait for inventory to report
that data up.  If you're paranoid, you can monitor dataldr.log; and force policy refreshes and hinv deltas on some boxes; but the key is patience.  if you think you've waited long enough; you probably haven't.  ;)
Standardize. Simplify. Automate.

Similar Messages

  • SCCM 2012 report with BitLocker status

    I am not an expert in SCCM 2012 Report Builder and i am trying to create a report with>
    computername(laptop),drive letter, bitlocker status
    I can't find the property to use in report builder to read the drive letter and bitlocker status. Is there someone who can help me out or had a rdl report file for me ?
    PS. creating a query in SCCM 2012 is easy and works...but how to create a report out of it ??

    SELECT dbo.v_R_System.Name0, dbo.v_GS_ENCRYPTABLE_VOLUME.DriveLetter0, dbo.v_GS_ENCRYPTABLE_VOLUME.ProtectionStatus0
    FROM dbo.v_GS_ENCRYPTABLE_VOLUME INNER JOIN
    dbo.v_R_System ON dbo.v_GS_ENCRYPTABLE_VOLUME.ResourceID = dbo.v_R_System.ResourceID
    Please use the query above, you need to create your own data source of this Report. For more information, please ask at SQL forum, there is a dedicated SSRS forum for this kind of question.
    Juke Chou
    TechNet Community Support

  • How to show a filter of the values in SCCM 2012 report?

    I didn't see a forum for SCCM 2012 reporting, only SCCM 2007 Reporting, so I hope I am posting in the correct forum for this.
    We upgraded to SCCM 2012 R2 and when running a report and entering values we can no longer type in a filter and then see a filtered list of values like in SCCM 2007.
    Is there a solution for this?  This was very useful especially in the Add/Remove report because many times we don't know exactly what to enter. 
    Below is a snapshot of what we did in SCCM 2007.

    Garth, unfortunately, I don't.   I was fair at SCCM 2007 reporting and modifying SQL statements, but it seems everything has changed with SCCM 2012 reporting.  For the specific SCCM 2012 report I mentioned,  "Computers with specific software
    registered in Add Remove Programs", is there some code I could paste in somewhere to get it to operate like the SCCM 2007 report?
    Are you using BIDS or Report Builder. (Keep in mind that I recommend BIDS over RP)
    Here are the basic steps:
    Review the SQL for the Prompt
    Add a variable to the prompt
    Import; refresh the SQL query within the dataset
    Move that the new variable is BEFORE the existing variable
    Enter in the Prompt text “Enter computer filer”
    Test to make sure everything is nice
    Upload the report.
    Garth Jones | My blogs: Enhansoft and
    Old Blog site | Twitter:
    @GarthMJ

  • SCCM 2012 Report Problem

    hi there,
    we are using sccm 2012 with reports functionality on SQL 2008 R2 since 2 weeks now and everything is working fine, including reports.
    most of the time i monitor the reports for "Status for a specified task sequence deployment on a specific computer"
    but since yesterday i noticed that i cannot see any data here anymore - all task sequence deployments (which are working fine without errors) are not shown here anymore. not only i cannot see the current deployments of computers, i am also not able to see
    data for deployments we had 2 weeks ago.
    there is no error; sccm 2012 reports are just showing me no data (just for 1,2 computers instead of 20 or 30).
    i rebooted sccm 2012 and also took a look at the component status; no error related to reporting system and reporting service is running.
    anyone has a clue?

    Since no one has answer this post, I recommend opening  a support case with CSS as they can work with you to solve this problem.
    Garth Jones | My blogs: Enhansoft and
    Old Blog site | Twitter:
    @GarthMJ

  • SCCM 2012 Report for Software registered in Add/Remove programs

    Hi
    Am looking to create an SCCM 2012 Report for Software registered in Add/Remove programs on windows 7 machines but dont have enough experience with report builder to do this.
    Was hoping someone could help.

    When i use the url i still only see the following categories
    Administrative Security
    Asset Intelligence
    Client Push
    Client Status
    Compliance and Settings ManagementHave looked through them all and that one is not there
    the only software ones are the following
    Report Software 01A - Summary of installed software in a specific collectionThis report provides a summary of installed software ordered by the number of instances found from inventory.
     Open Menu
    Report Software 02A - Product families for a specific collectionThis report lists the product families and the count of software in the family for a specific collection.
     Open Menu
    Report Software 02B - Product categories for a specific product familyThis report lists the product categories in a specific product family and the count of software within the category. This report is linked to Software 02C - Software in a specific product
    family and category.
     Open Menu
    Report Software 02C - Software in a specific product family and categoryThis report lists all software that is in the specified product family and category. This report is linked to Software 06B - Software by product name.
     Open Menu
    Report Software 02D - Computers with specific software installedThis report lists all computers with specific software installed. This report is linked to Software 02E - Installed software on a specific computer .
     Open Menu
    Report Software 02E - Installed software on a specific computerThis report lists all software installed on a specific computer.
     Open Menu
    Report Software 03A - Uncategorized softwareThis report lists the software that is either categorized as unknown or has no categorization.
     Open Menu
    Report Software 04A - Software configured to automatically run on computersDisplays a list of software configured to automatically run on computers.
     Open Menu
    Report Software 04B - Computers with specific software configured to automatically runDisplays all computers with specific software configured to automatically run.
     Open Menu
    Report Software 04C - Software configured to automatically run on a specific computerDisplays installed software configured to automatically run on a specific computer.
     Open Menu
    Report Software 05A - Browser Helper ObjectsThis report displays the Browser Helper Objects installed on computers in a specific collection.
     Open Menu
    Report Software 05B - Computers with a specific Browser Helper ObjectDisplays all of the computers with a specific Browser Helper Object.
     Open Menu
    Report Software 05C - Browser Helper Objects on a specific computerDisplays all Browser Helper Objects on the specific computer.
     Open Menu
    Report Software 06A - Search for installed softwareThis report provides a summary of installed software ordered by the number of instances based on search criteria for the product name, publisher, or version.
     Open Menu
    Report Software 06B - Software by product nameThis report provides a summary of installed software ordered by the number of instances based on selected Product Name.
     Open Menu
    Report Software 07A - Recently used executable programs by the count of computersThis report displays executable programs that have been used recently with a count of computers on which they have been used. The Software Metering client must be enabled for this
    site to view this report.
     Open Menu
    Report Software 07B - Computers that recently used a specified executable programThis report displays the computers on which a specified executable program has recently been used when you enable the software metering client setting.
     Open Menu
    Report Software 07C - Recently used executable programs on a specified computerThis report displays executables that have been used recently on a specified computer when you enable the software metering client setting.
     Open Menu
    Report Software 08A - Recently used executable programs by the count of usersThis report displays executable programs that have been used recently with a count of users that have most recently used them when you enable the software metering client setting.
     Open Menu
    Report Software 08B - Users that recently used a specified executable programThis report displays the users that have most recently used a specified executable program when you enable the software metering client setting.
     Open Menu
    Report Software 08C - Recently used executable programs by a specified userThis report displays executable programs that have been used recently by a specified user when you enable the software metering client setting.
     Open Menu
    Report Software 09A - Infrequently used softwareThis report displays software titles that have not been used during a specified period of time. You can specify a value that will represent the number of days that have elapsed since the last use (e.g. if you
    enter 90 days, you will see software that was not used in the past 90 days or more). You can also leave the Days not used field empty to see all software titles that were never used.
     Open Menu
    Report Software 09B - Computers with infrequently used software installedThis report displays computers which have software installed that has not been used for a specified period of time. The specified period of time is based on the value specified in the
    'Software 09A - Infrequently used software' report.
     Open Menu
    Report Software 10A - Software titles with specific multiple custom labels definedThis report allows you to view software titles based on matching of all selected custom label criteria. Up to three custom labels can be selected to refine a software title search.
     Open Menu
    Report Software 10B - Computers with a specific custom-labeled software title installedThis report shows all computers in this collection, that have the specified custom-labeled software title installed.
     Open Menu
    Report Software 11A - Software titles with a specific custom label definedThis report allows you to view software titles based on matching of at least one of the selected custom label criteria.
     Open Menu
    Report Software 12A - Software titles without a custom labelThis report displays all software titles that do not have a custom label defined.
     Open Menu
    Report Software 14A - Search for software identification tag enabled softwareThis report provides the count of installed software with a software identification tag enabled.
     Open Menu
    Report Software 14B - Computers with specific software identification tag enabled software installedThis report lists all computers that have installed software with a specific software identification tag enabled.
     Open Menu
    Report Software 14C - Installed software identification tag enabled software on a specific computerThis report lists all installed software with a specific software identification tag enabled on a specific computer.
     Open Menu

  • SCCM 2012 report w/ selectable collection

    I am trying to create a report with a selectable collection parameter.  The original query I'm using is as follows (Stolen from
    http://blogs.technet.com/b/infratalks/archive/2013/09/10/sccm-2012-reporting-get-system-serial-number-amp-create-custom-ssrs-report.aspx):
    Select sys.Name0 Machine, CS.UserName0 'User Name',OS.Caption0 OS, OS.CSDVersion0 'Service Pack',CS.Manufacturer0 Manufacturer,CS.Model0 Model,BIOS.SerialNumber0 'Serial Number',RAM.Capacity0 Memory, cs.SystemType0
    From v_R_System SYS
      left join v_GS_COMPUTER_SYSTEM CS on sys.Name0=cs.Name0
      left join v_GS_PC_BIOS BIOS on sys.ResourceID=bios.ResourceID
      left join v_GS_OPERATING_SYSTEM OS on sys.ResourceID=OS.ResourceID
      left join v_GS_PHYSICAL_MEMORY RAM on sys.ResourceID=ram.ResourceID
      --Where sys.Name0 = @variable
      order by sys.Name0
    This works fine, but it gives me that information for EVERY machine in our infrastructure globally.  I am only interested in getting this information from machines in certain collections and I want to be able to select the collection each time I run
    the report.  I found this article:
    http://it.peikkoluola.net/2013/06/02/report-with-a-selectable-collection-parameter-sql/ and followed the steps, but cannot run the report successfully.  I'm guessing it has something to do with needing to modify my query, but I am a newb with SQL and
    have no clue what or where I should be tweaking.  Just adding "WHERE(dbo.v_FullCollectionMembership.CollectionID
    = @COLLID)" gives me a syntax error.  Moving it above "Order by sys.name0" gives an error about not being bound to anything, which makes sense but as I mentioned, I don't know what to tweak.  Help!  Thanks.

    Select sys.Name0 Machine, CS.UserName0 'User Name',OS.Caption0 OS, OS.CSDVersion0 'Service Pack',CS.Manufacturer0 Manufacturer,CS.Model0 Model,BIOS.SerialNumber0 'Serial Number',RAM.Capacity0 Memory, cs.SystemType0
    From v_R_System SYS
      left join v_GS_COMPUTER_SYSTEM CS on sys.Name0=cs.Name0
      left join v_GS_PC_BIOS BIOS on sys.ResourceID=bios.ResourceID
      left join v_GS_OPERATING_SYSTEM OS on sys.ResourceID=OS.ResourceID
      left join v_GS_PHYSICAL_MEMORY RAM on sys.ResourceID=ram.ResourceID
      join v_fullcollectionmembership fcm on fcm.resourceid=sys.resourceid
      Where fcm.collectionid = @COLLID
      order by sys.Name0
    Try the above, note that @COLLID is a placeholder for a variable.  It is presumed that you are creating this using Report Builder 3.0 (or better) or some other SQL tool to create reports for use on your SRS reporting point.  If you happen
    to be using Report Builder, once you save the above, under parameters you'd have a place for COLLID.  Now, what you want is to be able to have that parameter be populated with your collection names, so that you can select from the list when the report
    is run.
    So... another DataSet, with a query like:
    select collectionid, name
    from v_collection
    order by name
    Then, back to your parameters, COLLID, available values, Get values from a query, and you'll want to use that dataset you just made, and Value field is collectionid, and Label field is Name.
    If you want to test the top query in regular sql, don't use @collID.  figure out the collectionid of a specific collection, and put in where fcm.collectionid='ABC00012'
    Standardize. Simplify. Automate.

  • SCCM 2012 Report equivalent of WSUS Report

    In the old WSUS admin console you could set your display under All Computers (and other computer groups) to show patches that were Failed/Needed/Applied. I found this EXTREMELY useful. I can not find an equivalent within SCCM 2012. Does such a report exist
    and if not, how do I go about making one? Software Updates A - Compliance, Compliance 1 is sort of close but it makes you click multiple times to get one report and you have to do it for each group. In WSUS all you had to do was click once or twice and I see
    no option equivalent to All Computers.
    Ben JohnsonWY

    Here's the whole set:
    http://social.technet.microsoft.com/Forums/en-US/78d145bb-81d2-45c7-9e23-d0980aaaf7ca/sccm-2012-r2-how-to-get-ipaddress-working-in-my-custom-report?forum=configmanagergeneral
    http://social.technet.microsoft.com/Forums/en-US/d27bf671-91b4-45e9-bbc9-a3da9a4fd628/sccm-2012-compliance-7-customize-for-total-updates-needed?forum=configmanagergeneral
    http://social.technet.microsoft.com/Forums/en-US/e865c492-9058-4141-9af7-26b280fbfe0b/sccm-2012-reporting-code-returns-same-value-for-total-number-of-required-updates-per-computer?forum=configmanagergeneral
    http://social.technet.microsoft.com/Forums/en-US/1e5a2644-4eb7-4bed-92a3-a07d670bbb51/software-update-compliance-report-in-sccm-2012?forum=configmanagersecurity
    http://social.technet.microsoft.com/Forums/en-US/3e3e0120-7e8c-4c9f-a1e0-4dc1fffe0618/sccm-2012-report-equivalent-of-wsus-report?forum=configmanagergeneral
    Hope it helps
    Ben JohnsonWY

  • SCCM 2012 Reporting Only

    Hello,
    I'm looking for a way to only allow some users to use the reporting function of SCCM 2012. So far it seems as I grant permissions they get access to other parts of SCCM as well. Is there a way to configure their account to only view and run reports as need?
    If so, could you please explain the process? Thanks!
    Pat
    Pat

    I'm having some issues. I wanted to take screen shots but it won't allow me to paste on the forum. I'm a full administrator of SCCM. When I view my different reporting options I have 58 category of reports which there are more reports inside each category.
    I followed the directions from the links provided but when my user goes to view the reports they do not see as much as I do. I don't know the exact amount of reports he can view but I think it's about 11. I'm not sure how to allow the rest of the reports to
    be visible. I went down each security setting and if it had the option to "Run Report" and made sure it said "Yes". Any help is appreciated.
    Pat

  • OS-Deployment to virtual servers with SCVMM 2012 R2 vs SCCM 2012 R2 or integration with both?

    Hi,
    OS-Deployment to virtual servers with SCVMM 2012 R2 vs SCCM 2012 R2 or integration with both?
    Is SCCM just for physical servers, and SCVMM for virtual?
    What are benefits of integrating them?
    /SaiTech

    Hi,
    Please refer to the links below:
    Introduction to Configuration Manager
    http://technet.microsoft.com/en-us/library/gg682140.aspx
    Virtual Machine Manager
    http://technet.microsoft.com/en-us/library/gg610610.aspx
    The System Center 2012 Integration Guide provides information about automating each of the System Center components and integrating them with each other and with other systems and applications.
    For more information, see the
    System Center 2012 Integration Guide.
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • What share and NTFS permissions must I give users to deploy software through SCCM?

    What share and NTFS permissions must I give users to deploy software through SCCM? I have one folder with all of the applications and would like to know.
    Thanks
    James A+, Network+, MCP

    That still doesn't help. We're not prying, we're trying to help but we honestly have no idea what you are talking about. The more and better details that you can provide, the better we can help.
    "Because I want to know" adds no value and does not help us help you. We need technical details -- we can't see what you are seeing and we can't read your mind.
    And, you didn't really answer any of my questions.
    I'll take another wild-guess though: If you are talking about the source file locations referenced within packages and applications, users do not access those. The computer account for the systems hosting the SMS Provider needs read access to the location(s)
    specified. Yes, this means both NTFS and share permissions assuming they are being referenced via a UNC.
    Finally, there is no service account. If you've changed the account that the SMS_EXECUTIVE is running under, you're are now in a completely unsupported state that will have many issues. If instead you are talking about the Network Access Account, that is
    *not* a service account and is *not* used to access content source files.
    Once again though, we're simply guessing because no one has any idea what you're doing. Please provide actual, technical details.
    Jason | http://blog.configmgrftw.com | @jasonsandys

  • SCCM 2012 Report that shows the users with specific software installed

    Hi,
    Is there a report in SCCM 2012 that shows the users with specific software installed? The report should show username, machine name and the software name. I am looking for a report that shows the users with the following softwares installed:
    1. Adobe(all versions)
    2. Photoshop(all versions)
    3. MS Project(all versions)
    4. MS Vision(all versions)
    Regards, Lorin Davis

    Take a look at the Asset Intelligence reports in the software section. You may get a list of computers with a product installed, and you might have to use that list to find the primary users based on user device affinity.

  • SCCM 2012 - Reporting Services - No Reports show up in Console!

    Hi,
    I’m in the process of building our new 2012 SCCM infrastructure and have hit a small issue. When installing the Reporting services Point it appears to run through ok however no reports are populated.
    So far I’ve checked the:
    srsrpMSI.log - No Errors
    srsrpsetup.log - No Errors
    However in the srsrp.log Im getting the following:
    Successfully checked that the SRS web service is healthy on server SCCMPRISERVER.LOCAL
    But on a periodic basis:
    Confirmed the configuration of SRS role [ConfigMgr Report Users]. SMS_SRS_REPORTING_POINT 26/07/2012 10:16:18 4272 (0x10B0)
    Confirmed the configuration of SRS role [ConfigMgr Report Administrators]. SMS_SRS_REPORTING_POINT 26/07/2012 10:16:18 4272 (0x10B0)
    Confirmed the security policy for folder [/]. SMS_SRS_REPORTING_POINT 26/07/2012 10:16:18 4272 (0x10B0)
    Confirmed the security policy for folder [/ConfigMgr_GBL]. SMS_SRS_REPORTING_POINT 26/07/2012 10:16:18 4272 (0x10B0)
    System.Web.Services.Protocols.SoapException: The path of the item 'Asset Intelligence' is not valid. The full path must be less than 260 characters long; other restrictions apply. If the report server is in native mode, the path must start with slash. --->
    Microsoft.ReportingServices.Diagnostics.Utilities.InvalidItemPathException: The path of the item 'Asset Intelligence' is not valid. The full path must be less than 260 characters long; other restrictions apply. If the report server is in native mode, the path
    must start with slash.~ at Microsoft.ReportingServices.WebServer.ReportingService2005Impl.GetPolicies(String Item, Policy[]& Policies, Boolean& InheritParent)~ at Microsoft.ReportingServices.WebServer.ReportingService2005.GetPolicies(String Item, Policy[]&
    Policies, Boolean& InheritParent) SMS_SRS_REPORTING_POINT 26/07/2012 10:16:18 4272 (0x10B0)
    Failed to retrieve existing folder security for folder [Asset Intelligence]. SMS_SRS_REPORTING_POINT 26/07/2012 10:16:18 4272 (0x10B0)
    System.Web.Services.Protocols.SoapException: The path of the item 'Compliance and Settings Management' is not valid. The full path must be less than 260 characters long; other restrictions apply. If the report server is in native mode, the path must start with
    slash. ---> Microsoft.ReportingServices.Diagnostics.Utilities.InvalidItemPathException: The path of the item 'Compliance and Settings Management' is not valid. The full path must be less than 260 characters long; other restrictions apply. If the report
    server is in native mode, the path must start with slash.~ at Microsoft.ReportingServices.WebServer.ReportingService2005Impl.GetPolicies(String Item, Policy[]& Policies, Boolean& InheritParent)~ at Microsoft.ReportingServices.WebServer.ReportingService2005.GetPolicies(String
    Item, Policy[]& Policies, Boolean& InheritParent) SMS_SRS_REPORTING_POINT 26/07/2012 10:16:18 4272 (0x10B0)
    Failed to retrieve existing folder security for folder [Compliance and Settings Management]. SMS_SRS_REPORTING_POINT 26/07/2012 10:16:18 4272 (0x10B0)
    System.Web.Services.Protocols.SoapException: The path of the item 'Administrative Security' is not valid. The full path must be less than 260 characters long; other restrictions apply. If the report server is in native mode, the path must start with slash.
    ---> Microsoft.ReportingServices.Diagnostics.Utilities.InvalidItemPathException: The path of the item 'Administrative Security' is not valid. The full path must be less than 260 characters long; other restrictions apply. If the report server is in native
    mode, the path must start with slash.~ at Microsoft.ReportingServices.WebServer.ReportingService2005Impl.GetPolicies(String Item, Policy[]& Policies, Boolean& InheritParent)~ at Microsoft.ReportingServices.WebServer.ReportingService2005.GetPolicies(String
    Item, Policy[]& Policies, Boolean& InheritParent) SMS_SRS_REPORTING_POINT 26/07/2012 10:16:18 4272 (0x10B0)
    The above is repeated for all the standard reports you would expect to find..
    The Primary site is windows 2008 R2(Fully Patched), SQL 2008 R2 Standard Sp1, with CU6 installed.
    I’ve confirmed security accounts etc. I’ve also tried uninstalling/reinstalling SSRS and re-applying sP1 and CU6.
    Any suggestions?
    Thanks,
    Pete

    Hi, The thing is my domain account has local admin rights on the box and is set as a "Full Administrator" on all nodes in the console? Ive just tried right clicking on the console 'Run As Administrator', tried to install Reporting services but im still getting
    the same problem.
    One thing I have noticed is that If i manually create the report directories it runs through ok and sets the permissions. However no reports are populated. I have alos tried manually importing one of the report.rdl files and this fails:
    When it comes back with 'Failed to retrieve existing folder security for folder [Network Access Protection]' what actual folder security is it supposed to be checking? Is this in the actual DB?
    Thanks, Pete

  • SCCM 2012 Reporting Code Returns Same Value For Total Number Of Required Updates Per Computer

    I'm trying to make a custom report in SCCM 2012 R2 with SQL 2012 since Microsoft took out the ability to list the number of updates needed per computer. This was in WSUS reporting but is not in SCCM reporting. I've made a custom report for this but can't
    quite get it to work. The report runs but the same value for total number of updates needed shows up for every computer. I took a query from one report and am trying to get it to run inside the select statement from another report. Here is the code as it is
    right now:
    declare @CI_ID int; select @CI_ID=CI_ID from fn_rbac_ConfigurationItems(@UserSIDs)  where CIType_ID=9 and CI_UniqueID=@AuthListID
              declare @StateID int
              select @StateID=StateID from fn_rbac_StateNames(@UserSIDs)  sn where sn.StateName=@StateName and TopicType=300
              declare @RequiredUpdateCount int
              select @RequiredUpdateCount=Count(v_StateNames.Statename) from   
    v_StateNames,   
    v_Update_ComplianceStatusAll   
    Inner Join v_R_System On (v_R_System.ResourceID = v_Update_ComplianceStatusAll.ResourceID)   
    Inner Join v_UpdateInfo On (v_UpdateInfo.CI_ID = v_Update_ComplianceStatusAll.CI_ID)   
    where   
    v_StateNames.TopicType = 500 and   
    v_StateNames.StateID = v_Update_ComplianceStatusAll.Status and   
    v_StateNames.Statename = 'Update is required'   
    Group By v_R_System.Name0
              select
                ccm.ResourceID,
                rs.Name0+isnull('.'+rs.Resource_Domain_or_Workgr0, '') as MachineName,
                rs.User_Domain0+'\'+User_Name0 as LastLoggedOnUser,
                asite.SMS_Assigned_Sites0 as AssignedSite,
                rs.Client_Version0 as ClientVersion,
    @RequiredUpdateCount as RequiredUpdates  
              from fn_rbac_ClientCollectionMembers(@UserSIDs)  ccm
              join fn_rbac_Update_ComplianceStatusAll(@UserSIDs)  cs on cs.CI_ID=@CI_ID and cs.ResourceID=ccm.ResourceID
                and (@StateID=0 and cs.Status=0 or @StateID=1 and cs.Status in (1,3) or @StateID=2 and cs.Status=2)
              join fn_rbac_R_System(@UserSIDs)  rs on rs.ResourceID = ccm.ResourceID
              left join fn_rbac_RA_System_SMSAssignedSites(@UserSIDs)  asite on asite.ResourceID = ccm.ResourceID
              where ccm.CollectionID=@CollID
              order by MachineName
    Ben JohnsonWY

    There's plenty wrong with it. It gives you no idea of how many patches each box needs. Then you have to click on each computer, click the sort arrow by the "required" column, and count the number needed. When you have hundreds of computers to work on this
    is a big deal as it's very time consuming. What's great about the view in WSUS that had this is that it listed this for you and you could sort the required column. So if have most computers needing 2 patches, you can go find the one that needs 40 and 150 (to
    over exaggerate) and put the time on them needed to see why they're so far behind. The WSUS format was quick, easy, and informative. SCCM makes getting this info a royal PITA which is why I'm (and many others) so royally peeved at MicroShaft for removing this
    functionality, but that's what we've all come to expect from MicroShaft--just like when then took the nice colorful themes out of Office 2010 and replaced them in Office 2013 with just white, gray, and a darker gray. That's super boring and actually hurts
    my eyes.
    Ben JohnsonWY

  • MBAM - SCCM 2012 Reports - Error: the 'MBAM Policy' view does not exist

    Hi
    I have installed MBAM with SCCM 2012 integration. A single server install with SQL server 2012. Mostly it has gone smoothly and laptops are being encrypted and pins stored and recoverable. The problem I have is reports are not showing. I get the following
    error message.
    "Error: the 'MBAM Policy' view does not exist"
    Any ideas why this is? I get the same error message with all 4 reports.

    Hi Slycy,
    There is another thread that seems to be a similar issue
    here that may help you. The last post in particular has a number of steps that you can use to speed up creation of the views:
    Just for future reference, there are quite a few things that have to happen before the view is created. This is merely how CM works.
    Make MBAM MOF changes
    Select TPM spec version in hardware inventory
    Install MBAM CM Integration feature
    Perform a machine policy refresh cycle on a client to get the MOF changes that need to be inventoried
    Perform hardware inventory
    Update MBAM Supported Computers collection membership.  The machine should appear if it meets the criteria
    Run another machine policy refresh on the client so that the Configuration Baseline will come down
    Make sure that the MBAM agent has woken up once
    Evaluate the Configuration Baseline
    The MBAM views should be created now.
    You don't have to do this for every machine, but this is the process to speed it up.  If you let CM do it, it could take over a week before the view is created the first time, depending on when Hardware inventory runs, etc.
    Hope this helps,
    David

  • SCCM 2012 R2 ADR issue with proxy authentication

    Hi,
    We're migrating SCCM 2007 to SCCM 2012 R2.
    In SCCM 2007, the proxy server is configured with user authentication, and this works.
    In SCCM 2012 R2, the Software Update Point is installed locally and connected with a local WSUS 4.0 (Server 2012)
    We use a proxy with user authentication for Update Deployment. (This user is the same as configured in SCCM 2007.)
    The Proxy Server is Blue Coat SG.
    The proxy account is used for:
    The Synchronization works, but Automatic Deployment Rule (ADR) doesn't work.
    When an Automatic Deployment Rule is started, it tries to authenticate 3 times.
    The Patchdownloader.log shows:
    Trying to connect to the root\SMS namespace on the <servername> machine.        Software Updates Patch Downloader        11/8/2013
    12:19:06        3608 (0x0E18)
    Connected to
    \\<servername>\root\SMS        Software Updates Patch Downloader        11/8/2013 12:19:06        3608
    (0x0E18)
    Trying to connect to the
    \\<servername.domain>\root\sms\site_ECM namespace on the <servername.domain> machine.        Software Updates Patch Downloader        11/8/2013
    12:19:06        3608 (0x0E18)
    Connected to
    \\<servername.domain>\root\sms\site_ECM        Software Updates Patch Downloader        11/8/2013 12:19:06        3608
    (0x0E18)
    Download destination =
    \\<servername.domain>\dp_wks_ms_updates$\3208bb5e-bcd9-4389-a0c9-02ef33ccb998.1\XPSEPSC-x86-en-US.exe .        Software Updates Patch Downloader        11/8/2013 12:19:07        3608
    (0x0E18)
    Contentsource =
    http://wsus.ds.www.download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/xpsepsc-x86-en-us_7ae70ca1330a099080c6c41c4d5b7f19b30dc0cd.exe .        Software Updates Patch Downloader        11/8/2013
    12:19:07        3608 (0x0E18)
    Downloading content for ContentID = 16819067, 
    FileName = XPSEPSC-x86-en-US.exe.        Software Updates Patch Downloader        11/8/2013 12:19:07        3608 (0x0E18)
    Try username <domain\ProxyAccount>        Software Updates Patch Downloader        11/8/2013 12:19:07        8364
    (0x20AC)
    Proxy enabled proxy server <proxyserver>:8080        Software Updates Patch Downloader        11/8/2013
    12:19:07        8364 (0x20AC)
    HttpSendRequest failed HTTP_STATUS_PROXY_AUTH_REQ        Software Updates Patch Downloader        11/8/2013
    12:19:07        8364 (0x20AC)
    Download
    http://wsus.ds.www.download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/xpsepsc-x86-en-us_7ae70ca1330a099080c6c41c4d5b7f19b30dc0cd.exe to C:\Windows\TEMP\CAB6FD2.tmp returns 407        Software Updates
    Patch Downloader        11/8/2013 12:19:07        8364 (0x20AC)
    ERROR: DownloadContentFiles() failed with hr=0x80070197        Software Updates Patch Downloader        11/8/2013
    12:19:07        3608 (0x0E18)
    Then the proxy user account is locked:
    Trying to connect to the root\SMS namespace on the <servername> machine.        Software Updates Patch Downloader        11/8/2013
    12:20:11        3608 (0x0E18)
    Connected to \\ <servername>\root\SMS        Software Updates Patch Downloader        11/8/2013
    12:20:11        3608 (0x0E18)
    Trying to connect to the
    \\<servername.domain>\root\sms\site_ECM namespace on the <servername.domain> machine.        Software Updates Patch Downloader        11/8/2013
    12:20:11        3608 (0x0E18)
    Connected to
    \\<servername.domain>\root\sms\site_ECM        Software Updates Patch Downloader        11/8/2013 12:20:11        3608
    (0x0E18)
    Download destination =
    \\<servername.domain>\dp_wks_ms_updates$\e0a54221-3ff2-4129-b7cf-89bf5cd1f726.1\Windows-KB943729-x86-ENU.exe .        Software Updates Patch Downloader        11/8/2013
    12:20:12        3608 (0x0E18)
    Contentsource =
    http://wsus.ds.download.windowsupdate.com/msdownload/update/software/updt/2009/10/windows-kb943729-x86-enu_e174c41ce3dcbd5c8922d6d1c39df1be425a70e0.exe .        Software Updates Patch Downloader        11/8/2013
    12:20:12        3608 (0x0E18)
    Downloading content for ContentID = 16824262, 
    FileName = Windows-KB943729-x86-ENU.exe.        Software Updates Patch Downloader        11/8/2013 12:20:12        3608 (0x0E18)
    Try username <domain\ProxyAccount>        Software Updates Patch Downloader        11/8/2013 12:20:12        12480
    (0x30C0)
    Proxy enabled proxy server <proxyserver>:8080        Software Updates Patch Downloader        11/8/2013
    12:20:12        12480 (0x30C0)
    HttpSendRequest failed HTTP_STATUS_FORBIDDEN or HTTP_STATUS_DENIED        Software Updates Patch Downloader        11/8/2013
    12:20:12        12480 (0x30C0)
    Download
    http://wsus.ds.download.windowsupdate.com/msdownload/update/software/updt/2009/10/windows-kb943729-x86-enu_e174c41ce3dcbd5c8922d6d1c39df1be425a70e0.exe to C:\Windows\TEMP\CAB6E4B.tmp returns 403        Software Updates
    Patch Downloader        11/8/2013 12:20:12        12480 (0x30C0)
    ERROR: DownloadContentFiles() failed with hr=0x80070193        Software Updates Patch Downloader        11/8/2013
    12:20:12        3608 (0x0E18)
    The RuleEngine.log shows:
    Failed to download the update from internet. Error = 403 SMS_RULE_ENGINE 11/8/2013 16:18:25 3608 (0x0E18)
    Failed to download ContentID 16824467 for UpdateID 16819978. Error code = 403 SMS_RULE_ENGINE 11/8/2013 16:18:25 3608 (0x0E18)
    It seems that the ADR uses a wrong password when authenticating with the proxy, but this same user works when synchronizing with WSUS.
    We performed the following actions with no result:
    run the ADR manually and automatic,
    reinstalled WSUS and SUP,
    changed proxy user account.
    Regards,
    Matthias

    Currently, the command shows:
    Current WinHTTP proxy settings:
        Direct access (no proxy server).
    We've been testing with:
    upddwnldcfg.exe /s:<proxyserver>:<port> /u:<user> /allusers
    psexec -i -s iexplore.exe, set Internet Explorer proxy manually
    All with same result, proxy user getting locked when ADR runs.
    (These settings have been removed after the test.)
    I think dekac99 would suggest netsh winhttp set proxy or import proxy.
    then turn off proxy use on the role SUP (this way not SCCM will send auth but all winhttp will use proxy)
    the problems with that for me are:
    - if MS implemented role-based proxy usage, why set at http layer - of course this might work as a workaround for the time being so it might be a good idea but I'm just not sure what unwanted issues it may cause
    - the other thing is where I'm not sure, with set proxy you cannot define authentication account. if you use import from IE and the IE prompted for proxy auth, the stored credential will be used on winhttp layer (though I'm not 100% sure of that) - so this
    is just too uncontrolled for me
    - upddwnldcfg.exe will need to run in the name of system account (it stores credentials under HKCU so far I know it will be a per user based setting)
    --> what confuses me, the catalog synch works which should use the same configured proxy and account(?), only ADR does not work. shouldn't they both use the same process for sending account auth info?

Maybe you are looking for

  • Hard Disk Partition Error.

    good evening bro, iam tried as u mentioned n created new volume when i click finish after  finish new simple volume it showing "the operation you selected will convert the selected basic disk to dynamic disk. if u convert the disk to dynamic , u wil

  • Getting Time Machine to work with NAS Drives

    Connect the drive and format it HFS+ for this example I will name it backup Set it up as the Time Machine drive once formatted. Go into system preferences and turn off Time Machine. Go into FrontView and create a share, for this example I will name i

  • HOW CAN I GET THE LOCATION OF MY CALLER

    HOW CAN I GET THE LOCATION OF MY CALLER pls its urgent

  • N95 8gb - Appointment view in standby mode

    Hello Please can someone help me. I use the calander option heavily on my n95 8gb phone. I have read somewhere that in standby mode it is supposed to display the next 3 appointments over the next 48 hours. Mine only shows one. Where do I set this up

  • Is the Oracle apps R12 can be installed with domain name like xyz .co.nz

    Dear all, I am installing R12 on Linux AS-4 I need to know the Oracle apps can be installed with domain name like <xyz>.co.nz on Linux AS-4 environment. if so please discuss anything other than normal procedure I have to take care? Till now I have in