SCCM 2012 - Wrong user in application catalog
Hi everybody,
i´ve got some strange things with my SCCM 2012 Server.
The Software deployment works nearly perfect but there is a different user logged in the application catalog then logged into Windows.
Is there any chance to change the logged in user in the application catalog? Or anybody knows where SCCM takes the information to set the account?
Thanks and Regards
Internet Explorer usually uses the credentials of the logged-in user to connect to the Application Catalog website. Any chance that there are pre-existing connection to the server hosting the app catalog?
Torsten Meringer | http://www.mssccmfaq.de
I´ve made a hole IE10 reset and cleared the browser cache. There are no other existing connections to the Server.
Is there any chance to manually set the user used for the apllication catalog? Maybe in the UserProfile?
Similar Messages
-
SCCM 2012 - Deploying Office 2013 Application - Setup Errors
dear SCCM admins,
i am trying to test deploying office 2013 to users in my company. i made the application and deployments. the application appeared in the software center and in the application catalog.
The problem is whenever a user "which is not a local administrator" tries to install this application, it gives me the setup errors message saying "You must have administrative privileges to install or uninstall this
product."
Is there any specific configuration to make to overcome this behavior???
appreciate your suggesstions
M.ZakariaAs you can see from the screenshot you need to add the ProductID after the uninstall command.
See here for finding the ProductID
http://blogmines.com/blog/2012/07/21/how-to-check-version-of-office-2013-products/
Gerry Hampson | Blog:
www.gerryhampsoncm.blogspot.ie | LinkedIn:
Gerry Hampson | Twitter:
@gerryhampson -
SCCM 2012 R2 User State Migration Win XP to Win 8.1 does not migrate Domain User Files
Hi @ all
i'm trying migrate Win XP Sp3 to Win 8.1 using SCCM 2012 R2. So i followed the how to from the SCCM Team.
https://blogs.technet.com/b/configmgrteam/archive/2013/09/12/how-to-migrate-user-data-from-win-xp-to-win-8-1-with-system-center-2012-r2-configmgr.aspx
All things worked fine, but the user files from my test Domain user are not restored.
Here some extracts of the loadstate log.
2014-01-07 15:49:16, Info [0x000000] User SCCM\test.user maps to S-1-5-21-2486663232-1734351201-1738771205-1113
2014-01-07 15:49:16, Info [0x000000] User TEST-COMPUTER\Administrator maps to TEST-COMPUTER\Administrator
2014-01-07 15:49:16, Error [0x000000] The account TEST-COMPUTER\User is chosen for migration, but the target does not have account TEST-COMPUTER\User. See documentation
on /lac, /lae, /ui, /ue and /uel options.
2014-01-07 15:49:16, Info [0x000000] Failed.[gle=0x00000006]
2014-01-07 15:49:16, Info [0x000000] Unable to create a local account because /lac was not specified[gle=0x00000006]
2014-01-07 15:49:16, Info [0x000000] Entering MigCloseCurrentStore method
2014-01-07 15:49:16, Info [0x0801dc] Closing catalog file
2014-01-07 15:49:16, Info [0x0801dd] Deleting catalog file at C:\Windows\Temp\tmpF6E7.tmp\Temp\tmp9F3.tmp
2014-01-07 15:49:16, Info [0x000000] Leaving MigCloseCurrentStore method
2014-01-07 15:49:16, Info [0x000000] USMT Completed at 2014/01/07:15:49:16.078[gle=0x00000057]
The user sccm\test.user is my test user but, i cannot see any error in relation to that user.
Has some some an idea?
Thank you
AdrianHi,
I found a similar article for your reference.
http://blogs.technet.com/b/sudheesn/archive/2009/12/28/in-place-upgrade-from-windows-xp-to-windows-7.aspx
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place. -
SCCM 2012 Clients not getting applications...
Hi
we have windows 7 clients getting applications deployments through SCCM 2012.
it was working fine...suddenly couple of clients on the particular collection not getting the applications and nothing is displayed on the software center.
verified the Site connections and re-pushed the policyes manually through config manager. restarted sms host agent service...still nothing is working out
getting "Policy does not yet exist on the client" in execmgr.log & CAS.log
where could be the issue? please help
thanks
ananthI realize that this is an old forum post but in my search to resolve a similar policy application issue I stumbled across it and noticed that anan2k's last question wasn't answered (and I can help). First of all you can check the custom client/user configuration
in the Administration Node. By default SCCM creates a Default Client Settings and sets a priority of 10,000 though this is not deployed by default.
The policy polling interval is actually configured as one of the policies. When you create and deploy a custom client device policy you can select Client Policy as one of the custom settings and within this setting you can establish the policy polling schedule.
I have mine set to 30 minutes which may be a bit high but it generally worked for my environment.
I hope this helps a little bit though I imagine by now that you found the settings or resolved your issue. If you found a solution please post it as I am plagued by policy not applying to my clients.
Thanks again,
Chris Bolton -
SCCM 2012 - Automatic User Device affinity - Not Working
Hi,
I need to enable the Automatic User Device affinity.
Have enabled following two group policy settings:
Audit account logon events
Audit logon events
In client settings User and Device Affinity
following is enabled:
User device affinity threshold (120 minutes)
User device affinity threshold (2 days)
Automatically configure user device affinity from usage data – True
However even after 2 days there is no user device relationship getting build.
Is there anything more required to be done?
Any logs or links to be referred for troubleshooting?
Regards,
Milind Dhuri.Hi,
Please post this in SCCM 2012 forum.
tx. -
How to configure SCCM 2012 discover user group only?
Hi,
I'm wondering if there is a way to discover user group only (ignore computer group) in SCCM 2012?
JasonHi,
Also note that by default, only security groups are discovered. However, you can discover the membership of distribution
groups when you select the checkbox for the option Discover the membership of distribution groups on
the Option tab
in the Active Directory Group Discovery Properties dialog box.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place. -
SCCM 2012 Recover "User State Recovery Key" after Deletion Policy has removed the key
I have a computer that was upgraded from Windows XP to 7 using SCCM 2012. The user's info was captured and restored, but found out a month later that some Outlook Archives are corrupt.
I had this happen before on a different user, but found out right away and was able to recover the User State Recovery Key and restore the files.
I have looked under Assets and Compliance, User State Migration, but the computer is not listed anymore.
I have done a file restore of the USMT.MIG file from three weeks ago, but can not extract the users files without the User State Recovery Key.
I have looked through the SQL tables and have only found the StateEncryptDecryptKey in the StateMigration table which will not work.
Environment:
Windows 2008 R2 SP1 SCCM 2012 Server
Windows 2008 R2 SP1 SQL 2012 Server
Any help would be appreciated.
Thanks,
WendellIt worked! Thank you Jason!
I restored the server's Storage Folder from "State Migration Point" (USMT Folder) from the same date as the SQL database was restored from. Shut the SCCM server down while doing the SQL restore. Turned on the Server and was able
to pull out the User State Recovery Key.
Then reverted back by shutting down the SCCM server and restoring SQL database back to previous backup taken before starting.
Only issue I'm getting now is that SMS_EN_ADSERVICE_MONITOR has a warning
8400 Enrollment Point AD Service Control failed to read and configure the registry keys necessary for this component.
With checking everything out to make sure no issues have arised. I looked through the log adctrl.log and found some more errors about Failed to create instance of ADService Managed Component. error = -2147024809
Any help would be appreciated.
Thanks,
Wendell -
SCCM 2012 Deployment Packages and Applications deployment order
Hello I have an application which deploys Office 2013 through SCCM 2012 I then want to copy some templates to two directories in Office. I have added a script the OFC tool which is suppose to run after the install. But the files don't appear. If I run the
same script manually all the files are copied. I ended up creating a package just for the Office Template files, but I have to run this manually afterwards. Should I Persist with the script or is there a way to run the package automatically after the application
deployed has run?Sounds like best solution is to create an MSI that can copy the template files and deploy as an application after Office Install. Is this something I can do in Install Shield?
Seems weird that they would have an option in the MSP to run a script but it doesn't work.
I wouldn't go to that trouble myself, but that's because I don't author MSIs as part of my role (we have a packaging team who do that task, and they seem to regard authoring an MSI as the solution for everything ;)
the ConfigMgr AppModel happily caters for all kinds of payloads, despite referring to them as "applications" there is no requirement for the payload to be an MSI.
MS have long documented that the "run scripts" and "chaining" features of the Office setup engine are "not robust" (i.e. not very tolerant, are a one-shot kind of thing). Some seem to work just fine, others have no joy with it. I don't use it myself, there
are plenty of other methods, but I find it comes down to what you are comfortable/confident/familiar with. Everything has pros and cons, and above all else, I've found that it's my/our assumptions/understandings that tend to be why things go off-course.
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!) -
SCCM 2012: remove App-v application
Hi,
I'm trying to setup a removal of an app-v application as soon as a user isn't member of a specific group.
*I targetted an install of an App-v application to a group of which testuser is member.
*I targetted an uninstall of an App-v application to a group of which testuser is member.
Now although the mechanism might work, when the user is member of both groups and I leave the deployment NOT hidden, the message in software center is "0x87D0128E or
"Could not uninstall the App-V deployment type because of conflict. The published components in this DT are still published by other DTs. This DT will be always detected as long as other DTs are still installed."
I can set the deployment to hidden, but what I understood is that install takes priority to uninstall so uninstall won't happen. Well, apparently it does happen.
Even though I could hide the uninstall, it is a messy setup.
Please advise how this is setup correctly.
J.
Jan HoedtHi,
Have you checked the log files AppDiscovery.log, AppEnforce.log? Maybe it can give us some clues.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place. -
SCCM 2012: create user/group which can only import computers, reset pxe boots
Hi,
We would like to give helpdesk some basic rights so they can add computers (via mac/pc name) and reset pxe-boots.
We might grant extra rights but would like to start with these basic ones.
I know the setup is fully different (RBAC) so your feedback how you implemented this would be highy appreciated.
J.
Jan HoedtYou can use "Custom Role Based Administration for Importing Computers" (http://blogs.technet.com/b/inside_osd/archive/2012/04/30/custom-role-based-administration-for-importing-computers.aspx)
as a starting point. Then use "RBA Viewer" (part of the toolkit) to create your own, custom roles.
Torsten Meringer | http://www.mssccmfaq.de -
SCCM Application Catalog re-direction
HI,
In our SCCM 2012 environment enabled with Application catalog. We wanted to redirect the same with easy remember url. So we created DNS alias name but when we access the URL and try to install applications it give security error. Is there a way to make this
work.
Regards,
Madhan
take look at this to see if it applies
http://thedesktopteam.com/blog/raphael/sccm-2012-application-catalog-https-error/
Blog: http://theinfraguys.com
Follow me at Facebook
The Infra Guys Facebook Page
Please remember to click Mark as Answer on the answer if it helps you in anyway -
Applocker with Windows Installer rules and SCCM 2012
Hi,
We have been running Applocker since two years on Windows 7 Enterprise clients with SCCM 2007 as management and distribution tool.
This setup was working fine until we migrated to SCCM 2012 and started to encounter problems with msi-packages not being able to self-heal when the source was the sccm client cache.
We have recreated this scenario in a lab environment.
Our setup is this:
Windows 2008 R2 (DC)
Windows 7 Enterprise SP1 (Client)
Standard user (not admin)
SCCM 2012 R2 (upgraded from 2007)
Applocker with these rules:
Executable Default rules enabled (Enforced)
Windows Installer Default rules enabled (Enforced)
Exception for %WINDIR% (where SCCM cache is located)
Script Default Rules enabled (Enforced)
Application msi-package with self-heal (omus) and advertised shortcuts
We install the application from the sccm cache (%windir%\ccmcache) and then trigger a self-heal (user components being copied to the user profile).
What we see on the client is: Error 1718. File C:\Windows\ccmcache\54\application.msi was rejected by digital signature policy.
Event log is showing: Event 1008: The installation of
C:\Windows\ccmcache\54\application.msi
is not permitted due to an error in software restriction policy processing. The object cannot be trusted.
It looks like the file cannot be evaluated by Applocker and therefore is not trusted. We get an Access Denied error when testing AppLocker-policy with the following PS-command,
Get-AppLockerPolicy -Effective | Test-AppLockerPolicy -Path C:\Windows\ccmcache\54\application.msi. This command works fine when accessing files in the cache-folder on a SCCM2007-client.
For testing purposes we recreated a similar folder structure: C:\Windows\Folder1\Folder2\application.msi where the user has no permissions on Folder2 and read on the other folders and the File.msi.
This is how the permissions look like in SCCM 2012 (no user permissions on %Windir%\ccmcache). Applocker cannot evaluate the trust-level of application.msi.
The GPO setting “Bypass traverse checking” is set to everyone.
As we can see, the permissions are the same on SCCM 2007 client cache (%Windir%\syswow64\ccm\cache) but we do not have this issue there.
Has anyone got Applocker (with windows installer rules actived) to work with SCCM 2012 and windows installer self-heal?More info. I found some people also encounter this same issue, but specific msi, take a look at
http://social.technet.microsoft.com/Forums/windowsserver/en-US/2ad92754-f01e-410e-97db-7a9bc81586db/msiinstaller-event-1008-when-trying-to-install-3ds-max-2011-after-group-policies-apply-on-domain?forum=winserverGP
Juke Chou
TechNet Community Support -
Uninstall utorrent 3.3 version Silently from SCCM 2012 Sp1
Hi All,
i am trying to uninstall utorrent application in my environment having 2000+ users from SCCM 2012 Sp1. The application will become available on client side but uninstallation not happening silently.
Please suggest something on this..
Thanks Rahul$Hi,
I created one batch file & create the package with no program for the same & deployed. It's successfully uninstall uTorrent application from client machines:
@echo off
REM Uninstall existing uTorrent Version
if exist "%Program Files%\uTorrent\uTorrent.exe" "%Program Files%\uTorrent\uTorrent.exe" /UNINSTALL /S
if exist "%Program Files (x86)%\uTorrent\\uTorrent.exe" "Program Files (x86)%\uTorrent\uTorrent.exe" /UNINSTALL /S
if exist "%USERPROFILE%\AppData\Roaming\uTorrent\uTorrent.exe" "%USERPROFILE%\AppData\Roaming\uTorrent\uTorrent.exe /UNINSTALL /S
SET ERRORCODE=0
Thanks Rahul$ -
SCCM 2012 - Distributing Flash 16 Active X & Plugin - Disables Play sound in Webpages
Hello,
We use MS SCCM 2012 R2 to distribute applications and some updates.
We have created the necessary packages to distribute adobe flash 16 active X & plugin.
Our end user environment consists of Win7 64bit, with a range of IE 9,10,11. Mostly 9 then 11 and a few 10s
A test deployment to approx 20 users told us that in about 33-50% of the time an IE setting was modified.
This setting is found at Internet Options, Advanced, Settings, (Scroll down) to Multimedia. Setting "Play sounds in webpages"
Is there a way to prevent this change from happening?Anyone? I am attempting to reach adobe support via phone... Seems adobe doesn't like to be called for flash.
-
How to uncheck "install new versions automatically" from INTERNET EXPLORER 11 from SCCM 2012
We have deployed "Internet Explorer 11" application through SCCM 2012 console .the deployed application was customized using "Internet Explorer customization wizard 11" tool.
issue:
we are getting "install new versions automatically" check box as checked
when we see from help about "about internet Explorer"
seeking solution:
how to uncheck "install new versions automatically" check box from SCCM 2012 console.
please let me know if we have any solution for this instant
thanks,
Gc.HanumareddyHi,
For option: "install new versions automatically", we can simply prevent it via GPO or registry (the registry entry can also be deployed via GPO)
Computer Configuration - Administrative Templates - Windows Components - Internet Explorer - Install new versions of Internet Explorer automatically
Or
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main]
"EnableAutoUpgrade"=dword:00000000
Yolanda Zhu
TechNet Community Support
Maybe you are looking for
-
Itunes movie doesn't show up on Apple TV
My movie shows up on itunes on my computer. I can play it and send it to view on Apple TV but it doesn't show up on Apple TV's menu and all the other movies on my iTunes do. Any thoughts? (I have checked different lists on Apple tv).
-
Why can't I play some of my movies?
I have a number of movies in my library that I bought from iTunes. I can't play half of them, despite having bought them a while ago and watching them several times. The window opens when I click on them, but then it just sits there, and it won't pla
-
Magsafe and iGo (or other third party adapter)
I'm not sure if this is the right place to post this plea, and I'm guessing it isn't, since I can't believe nobody else has said this before: Please either produce a Magsafe auto/car/air adapter for the or license the technology to a company like iGo
-
Hi Experts, I am the new to BI Publisher. So pls give some helpful links and also suggest me how to start by step by step. Regards, Sathyan
-
Hello Guys, Who is owner of Tempdb DBO or SA.In books online it is written DBO .IMO it should be SA .Below is fragment from BOL http://technet.microsoft.com/en-us/library/ms190768.aspx Changing the database owner. tempdb is owned by dbo. Can this be