SCCM Device Query for SCEP 2012 SP1 CU5

Dear all,
I want to create a device query rule for SCEP client agent installed machines , SCCM version we are using SCCM 2012 SP1 CU5. If any one has the query , please let me know.
Thanks,
Sengottuvel M

select distinct SMS_R_System.Name from SMS_R_System inner join SMS_G_System_SYSTEM_ENCLOSURE on SMS_G_System_SYSTEM_ENCLOSURE.ResourceID = SMS_R_System.ResourceId inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId full join SMS_G_System_ADD_REMOVE_PROGRAMS_64 on SMS_G_System_ADD_REMOVE_PROGRAMS_64.ResourceID = SMS_R_System.ResourceId where (SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName = "System Center 2012 Endpoint Protection" or SMS_G_System_ADD_REMOVE_PROGRAMS_64.DisplayName = "System Center 2012 Endpoint Protection")

Similar Messages

Best practice - Heartbeat discovery and Clear Install Flag settings (SCCM client) - SCCM 2012 SP1 CU5

Dear All,
Is there any best practice to avoid having around 50 Clients, where the Client version number shows in the right side, but client doesn't show as installed, see attached screenshot.
SCCM version is 2012 SP1 CU5 (5.00.7804.1600), Server, Admin console have been upgraded, clients is being pushed to SP1 CU5.
Following settings is set:
Heartbeat Discovery every 2nd day
Clear Install Flag maintenance task is enabled - Client Rediscovery period is set to 21 days
Client Installation settings
Software Update-based client installation is not enabled
Automatic site-wide client push installation is enabled.
Any advise is appreciated

Hi,
I saw a similar case with yours. They clients were stuck in provisioning mode.
"we finally figured out that the clients were stuck in provisioning mode causing them to stop reporting. There are two registry entries we changed under [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CCM\CcmExec]:
ProvisioningMode=false
SystemTaskExcludes=*blank*
When the clients were affected, ProvisioningMode was set to true and SystemTaskExcludes had several entries listed. After correcting those through a GPO and restarting the SMSAgentHost service the clients started reporting again."
https://social.technet.microsoft.com/Forums/en-US/6d20b5df-9f4a-47cd-bdc3-2082c1faff58/some-clients-have-suddenly-stopped-reporting?forum=configmanagerdeployment
Best Regards,
Joyce
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

IOS 5 OTA: Device query for mac address

Device query for attribute "MAC_ADDRESS_EN0" doesn't return any value on iOS 5. It use to work fine on iOS 4. Does anyone know the new attribute to query mac address on iOS 5. Appreciate any help.
Thanks,
Juzer.

That attribute was deprecated in iOS 4, and has been removed in iOS 5. There is no replacement for it.

SCCM 2012 SP1 CU5 PATCH Property

I've recently updated my site from SCCM SP1 to SCCM SP1 CU5 (http://support.microsoft.com/kb/2978017) successfully. I've verified through the registry that the Server is on CULevel 5 and
the consoles have been updated. In addition I have verified the MSP applies successfully and the clients report 5.00.7804.1600 for a client push through SCCM or manually running the patch. The problem is during OSD.
What I did was go to my original Client install folder under SMS_XXX folder. I created a folder called "hotfixes" and then inside there a folder called "amd64" and "x86". Inside their I copied "kb2978017.msp"
to the X86 and the AMD64 folder. I then updated the distribution points for the original client package (so they receive the new hotfixes folder I added). From there I went in the task sequence and on the "Setup Windows and Configuration Manager"
step I added the "Installation Properties" line as shown below:
SMSMP=XXX.xxx.com PATCH="C:\_SMSTaskSequence\OSD\XXX00003\hotfixes\%PROCESSOR_ARCHITECTURE%\kb2978017.msp"
When the computer finishes imaging it still reports "5.00.7804.1000" and not the .1600 version. All the guides I've seen mentioned using the PATCH= property and pointing it to the correct package ID number (I verified this). Not sure
what I'm doing wrong. I did see an alternative of a step to manually copy the patch to the local drive with xcopy and then the Setup CM Client step to just call the local machine for the patch instead off this "C:\_SMSTaskSequence". What
has other peoples experience been?
Be kind and Mark as Answer if I helped.

Yes, I did copy the hotfixes to the client source folder (I checked the data source of the package in SCCM to ensure I was updating files/folders in correct directory) and then I right clicked the package in SCCM and selected Updated Distribution Points
and verified they did get updated successfully. I checked the CCMSetup.log after a machine is imaged and it reports at the top of the log the command run to install SCCM Client and it just shows CCMSetup.exe without my SMSMP= property or the PATCH= property.
Its like the client install doesn't even recognize the commands I've used in the task sequence. Attached is a picture of the step in SCCM with the Server and Site name blanked out for obvious reasons:
CCMSETUP.log here : https://drive.google.com/file/d/0Bzodkg-HoMIhMHMwMnJZbkxpUHc/edit?usp=sharing
Be kind and Mark as Answer if I helped.

BIDS or SQL data Tools for SQL 2012 SP1 database

I want to start customising reports from my Win 7 workstations. The SCCM server is SQL 2012 SP1
Do I need to install SQL Server Data Tools onto the workstation or can you still use BIDS (Visual Studio) from SQL 2008 media
Also I have saved some custom report .RDL files from previous assignments. Can I convert these to point to this site's database for use in SQL 2012 ?
Ian Burnell, London (UK)

Thanks Garth - so if I install 2008 BIDS on my W7 workstation then I will be able to connect to the CM2012/SQL 2012 database?
Yes you will be able to do that. I do it all the time for SQL 2005 or 2008 to SQL 2012 and SQL 2014. :-)
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

Can SCEP 2012 SP1 detect malware name "Backdoor.Win32.Carbanak"

Hi all,
Basically I am working in bank and using System Center Endpoint protection 2012 Sp1. Antivirus is updating on daily basis. We just want to confirm that can SCEP 2012 detect the virus name
Backdoor.Win32.Carbanak.
Waiting your quick response guys.
Regards,
Kamran

I can't find any reference to Carbanak in the Microsoft Malware Encyclopedia, but this page from Trend Micro
http://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/bkdr_carbanak.a
says that Microsoft's alias for it is Trojan:Win32/Qadars.A
http://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=Trojan%3aWin32%2fQadars.A

Unable to move SCCM 2007 database to SQL 2012 SP1

Hi ,
We want to Move
SCCM 2007 R3 database to SQL Server 2012 SP1.
SCCM server Version :
4.00.6487.2000
Build Number : 6487
But it says fatal error during the move wizard.
In ConfigMgrSetup.log it says :
***SqlError: [42000][102][Microsoft][ODBC SQL Server Driver][SQL Server]Incorrect syntax near '99901'. : SiteControl_ins_upd
***SqlError: [42000][102][Microsoft][ODBC SQL Server Driver][SQL Server]Incorrect syntax near '99901'. : SiteControl_ins_upd
I already installed following updates on SCCM server , but still it failed to move.
2676737
2676776

This would be manual process. The simplest way to fix them is to reinstall the reporting point.
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

Stop SCOM services before installing UR5 for SCOM 2012 SP1?

Hello,
Shall I stop SCOM services on management server before upgrade to UR5?
ENV: 3 SCOM 2012 SP1 management servers without UR.

You didn't need to stop services within upgrade.
To upgrade to UR5, you can refer below link
http://www.ms-opsmgr.eu/?p=488
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical

SCCM 2012 SP1 CU5 - Unknown error code when deploying Bitlocker encryption (happens during check for Bitlocker partition)

Hi
It says in the smsts.log file from the laptop:
Evaluating a WMI condition expression TSManager 03-02-2015 13:34:58 7304 (0x1C88)
Expand a string: root\cimv2 TSManager 03-02-2015 13:34:58 7304 (0x1C88)
Expand a string: SELECT * FROM Win32_DiskPartition WHERE DiskIndex = 0 and Index = 0 and Size = 100 TSManager 03-02-2015 13:34:58 7304 (0x1C88)
The condition for the action (Create BitLocker partition) is evaluated to be true TSManager 03-02-2015 13:34:58 7304 (0x1C88)
Expand a string: smsswd.exe /run: cmd.exe /c bdeHdCfg.exe -target default -size 300 -quiet TSManager 03-02-2015 13:34:58 7304 (0x1C88)
Expand a string: TSManager 03-02-2015 13:34:58 7304 (0x1C88)
Start executing the command line: smsswd.exe /run: cmd.exe /c bdeHdCfg.exe -target default -size 300 -quiet TSManager 03-02-2015 13:34:58 7304 (0x1C88)
!--------------------------------------------------------------------------------------------! TSManager 03-02-2015 13:34:58 7304 (0x1C88)
Expand a string: WinPEandFullOS TSManager 03-02-2015 13:34:58 7304 (0x1C88)
Executing command line: smsswd.exe /run: cmd.exe /c bdeHdCfg.exe -target default -size 300 -quiet TSManager 03-02-2015 13:34:58 7304 (0x1C88)
Creation event received for process 7976 mtrmgr 03-02-2015 13:34:58 4564 (0x11D4)
[ smsswd.exe ] InstallSoftware 03-02-2015 13:34:58 4668 (0x123C)
PackageID = '' InstallSoftware 03-02-2015 13:34:58 4668 (0x123C)
BaseVar = '', ContinueOnError='' InstallSoftware 03-02-2015 13:34:58 4668 (0x123C)
ProgramName = 'cmd.exe /c bdeHdCfg.exe -target default -size 300 -quiet' InstallSoftware 03-02-2015 13:34:58 4668 (0x123C)
SwdAction = '0001' InstallSoftware 03-02-2015 13:34:58 4668 (0x123C)
Getting linked token InstallSoftware 03-02-2015 13:34:58 4668 (0x123C)
failed to get the linked token information. It may not be available. Error 1312 InstallSoftware 03-02-2015 13:34:58 4668 (0x123C)
Process ID 7976 is for process C:\Windows\CCM\smsswd.exe mtrmgr 03-02-2015 13:34:58 4564 (0x11D4)
No matching rule found for process 7976 mtrmgr 03-02-2015 13:34:58 948 (0x03B4)
Working dir 'not set' InstallSoftware 03-02-2015 13:34:58 4668 (0x123C)
Executing command line: Run command line InstallSoftware 03-02-2015 13:34:58 4668 (0x123C)
Creation event received for process 7452 mtrmgr 03-02-2015 13:34:58 4564 (0x11D4)
Process ID 7452 is for process C:\Windows\system32\cmd.exe mtrmgr 03-02-2015 13:34:59 4564 (0x11D4)
Found match against RuleID LGR00188 mtrmgr 03-02-2015 13:34:59 948 (0x03B4)
Creation event received for process 7940 mtrmgr 03-02-2015 13:34:59 4564 (0x11D4)
Tracked usage for process 7452 mtrmgr 03-02-2015 13:34:59 948 (0x03B4)
Process ID 7940 is for process C:\Windows\system32\conhost.exe mtrmgr 03-02-2015 13:34:59 4564 (0x11D4)
Creation event received for process 3104 mtrmgr 03-02-2015 13:34:59 4564 (0x11D4)
Found match against RuleID LGR00183 mtrmgr 03-02-2015 13:34:59 948 (0x03B4)
Tracked usage for process 7940 mtrmgr 03-02-2015 13:34:59 948 (0x03B4)
Process ID 3104 is for process C:\Windows\system32\BdeHdCfg.exe mtrmgr 03-02-2015 13:34:59 4564 (0x11D4)
Creation event received for process 7552 mtrmgr 03-02-2015 13:34:59 4564 (0x11D4)
No matching rule found for process 3104 mtrmgr 03-02-2015 13:34:59 948 (0x03B4)
Process ID 7552 is for process C:\Windows\System32\vdsldr.exe mtrmgr 03-02-2015 13:34:59 4564 (0x11D4)
Creation event received for process 7152 mtrmgr 03-02-2015 13:34:59 4564 (0x11D4)
No matching rule found for process 7552 mtrmgr 03-02-2015 13:34:59 948 (0x03B4)
Process ID 7152 is for process C:\Windows\System32\vds.exe mtrmgr 03-02-2015 13:34:59 4564 (0x11D4)
No matching rule found for process 7152 mtrmgr 03-02-2015 13:34:59 948 (0x03B4)
Termination event received for process 3104 mtrmgr 03-02-2015 13:35:00 4564 (0x11D4)
Termination event received for process 7452 mtrmgr 03-02-2015 13:35:00 4564 (0x11D4)
Process completed with exit code 3231711234 InstallSoftware 03-02-2015 13:35:00 4668 (0x123C)
Termination event received for process 7940 mtrmgr 03-02-2015 13:35:00 4564 (0x11D4)
BitLocker Drive Preparation Tool version 6.1.7601 InstallSoftware 03-02-2015 13:35:00 4668 (0x123C)
InstallSoftware 03-02-2015 13:35:00 4668 (0x123C)
opyright (C) 2006-2008 Microsoft Corporation. InstallSoftware 03-02-2015 13:35:00 4668 (0x123C)
InstallSoftware 03-02-2015 13:35:00 4668 (0x123C)
InstallSoftware 03-02-2015 13:35:00 4668 (0x123C)
Command line returned 3231711234 InstallSoftware 03-02-2015 13:35:00 4668 (0x123C)
Termination event received for process 7976 mtrmgr 03-02-2015 13:35:01 4564 (0x11D4)
Process completed with exit code 3231711234 TSManager 03-02-2015 13:35:01 7304 (0x1C88)
!--------------------------------------------------------------------------------------------! TSManager 03-02-2015 13:35:01 7304 (0x1C88)
Failed to run the action: Create BitLocker partition.
Unknown error (Error: C0A00002; Source: Unknown) TSManager 03-02-2015 13:35:01 7304 (0x1C88)
Set authenticator in transport TSManager 03-02-2015 13:35:01 7304 (0x1C88)
Set a global environment variable _SMSTSLastActionRetCode=-1063256062 TSManager 03-02-2015 13:35:01 7304 (0x1C88)
Set a global environment variable _SMSTSLastActionSucceeded=false TSManager 03-02-2015 13:35:01 7304 (0x1C88)
Clear local default environment TSManager 03-02-2015 13:35:01 7304 (0x1C88)
Failed to run the action: Create BitLocker partition. Execution has been aborted TSManager 03-02-2015 13:35:01 7304 (0x1C88)
Set authenticator in transport TSManager 03-02-2015 13:35:01 7304 (0x1C88)
Failed to run the last action: Create BitLocker partition. Execution of task sequence failed.
Unknown error (Error: C0A00002; Source: Unknown) TSManager 03-02-2015 13:35:01 7304 (0x1C88)
Set authenticator in transport TSManager 03-02-2015 13:35:01 7304 (0x1C88)
Termination event received for process 6188 mtrmgr 03-02-2015 13:35:03 4564 (0x11D4)
Termination event received for process 7552 mtrmgr 03-02-2015 13:35:06 4564 (0x11D4)
Task Sequence Engine failed! Code: enExecutionFail TSManager 03-02-2015 13:35:07 7304 (0x1C88)
**************************************************************************** TSManager 03-02-2015 13:35:07 7304 (0x1C88)
Task sequence execution failed with error code 80004005 TSManager 03-02-2015 13:35:07 7304 (0x1C88)

Hi Jason
See below. The problem is that on some of our laptops not anywhere geographically close to our IT department, the laptop has been setup with 2 partitions and on some only with 1 partition (we used another deployment system 2 years ago), so I am trying
to prepare all our corporate laptops for Bitlocker encryption. The reason why I made this task sequence was to hit all those laptops that is not being reinstalled / installed again in the near future.
Do you have any suggestions, should it help to remove the cmd.exe /c in front of the Bitlocker cmd line ?
We have tried the MBAM solution, but in my opinion too many problems with the MBAM client.

Network device configuration for SCOM 2012 Network Resource Pool

We are planning for two management servers in a Network Resource Pool.
So(considering failover situation) to send traps to both devices do we need to configure both management servers as SNMP servers on these devices?
If yes, Then it will definitely need double traffic for sending traps to two devices, isn’t it?
What SNMP server name we should use while configuring devices?
Thanks,
Vinayak

Hi,
>So(considering failover situation) to send traps to both devices do we need to configure both management servers as SNMP servers on these devices?
Yes, you need to configure both management servers as a trap recievers.
>If yes, Then it will definitely need double traffic for sending traps to two devices, isn’t it?
That's right.
http://OpsMgr.ru/

SCCM 2007 query for workstations with client status 1 and o

Hi everybody,
I would like to write a sql query which gives me workstations with status 1 if the client is installed and active and 0 if the client is not active.Any help please?
Thank you.
Regards,
Lebalbo

Here you go.
Select * from v_r_system R
where R.client0 =1 and R.active0=0
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

SCCM 2012 SP1 OSD in 802.1X environment

Dears,
we have SCCM 2012 SP1 CU5, and the network team has enabled the CISCO port security (802.1X network authentication) on the desktops VLAN and OSD is not working since then until port security is removed. i've seen some guides regarding how to make SCCM 2007
OSD, WinPE 3.0 and 802.1X work together like : http://myitforum.com/cs2/blogs/lakey81/archive/2011/07/06/configuring-802-1x-network-authentication-for-winpe-3-0-and-configmgr-deployments.aspx , but ot's very confusing.
does anybody have the same scenario with SCCM 2012, WinPE 5.0, and 802.1X . please help me.

Hello,
What confused you here? 802.1X authentication is to authenticate before sending network packages. That is why we need import netwrok profile to win pe for anthentication. The point is authenticate, so I think it won't be any difference between
ConfigMgr 2012 and 2007.
Another good article here:
http://blogs.technet.com/b/deploymentguys/archive/2010/03/02/adding-support-for-802-1x-to-winpe.aspx
Please also pay attention to the shared document in the blog.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Does Powershell 3.0 / Wmf 3 runs flawlessly with SCCM 2012 SP1

Hi the title says it all:
Does Powershell 3.0 / Wmf 3 runs flawlessly with SCCM 2012
SP1?
Thanks, Rob

Hi Rob,
WMF3 is required for ConfigMgr 2012 SP1:
http://support.microsoft.com/kb/2801416
(I posted the same link in your thread in the PowerShell forum).
Don't retire TechNet! -
(Don't give up yet - 12,575+ strong and growing)

No tabular entries appear under BI for SSDT in SQL Server 2012 SP1

Missing "Analysis Services Tabular Project", "Import From PowerPivot" and "Import From Server (Tabular)"
under BI/Analysis for SSDT 2012 SP1 using VS 2010 shell. I created a separate instance for Tabular. I see all selections in VS2012 but the book I'm using refers to the VS2010 shell which I would prefer to use. I've repaired all instances and reinstalled SSDT
all to no avail.

Hello,
We can download Business Intelligence for Visual Studio 2012 from the site below:
http://www.microsoft.com/en-us/download/details.aspx?id=36843
Here are the steps to install Business Intelligence templates for VS 2012:
http://msdn.microsoft.com/en-us/library/jj856966(v=sql.110).aspx
If you have any feedback on our support, please click
here.
Regards
Elvis Long
TechNet Community Support

SCEP 2012 System Center Monitoring Pack for Linux v4.5.10.1 Problem

Hi Everyone!
We are having a problem with OpsMgr 2012 R2 and the System Center Monitoring Pack for SCEP 2012 for Linux v4.5.10.1. We have successfully deployed the Linux OpsMgr 2012 R2 agent to our test CentOS 6.5 VM as well as SCEP 2012 v4.5.10.1. We have
imported the System Center Monitoring Pack for SCEP 2012 for Linux management packs into OpsMgr 2012 R2 which is successfully discovering SCEP on our Linux VM, but when looking at the details for the monitor, it indicates that SCEP is "not found"
as seen in the following screen shot...
As seen in the following screen shots, everything else seems to be installed, configured, and working properly...
Any assistance or guidance would be greatly appreciated!
Regards,
JJ

Magnus_001 (big ups) and I were able to get discovery to stop failing on the Linux side of things, but the SCOM MP is still highly problematic. Their pdf guides for SCEP implementation on Linux has a bunch of typos and errors -- for example, listing
'/bin/sh' instead of '/bin/bash', and one of the lines (the one that includes "export LANG=C" won't run no matter what. When we disassembled the SCOM MP, we found that there's an extraneous space at the end of the command, current thought is
that that's causing a regex to fail within sudo. All of their commands, from what I can tell, need to be specified as NOPASSWD within sudo; if you see errors about ssh-askpass with that you can confirm that there are likely typos in their guide sourced
from the pdf. We eventually allowed '/bin/bash' to get the programs to run since we couldn't get a regex match to catch their command (which should be in a script). We are out of failures that we can discover with logging on the Linux side; it's
likely to be an error within the MP at this point.
When we look at the powershell script in the MP library, the "not found" error is the default state, set immediately after stdout is captured from the discovery script. I'm guessing that there's some problem interaction between that script
and the parsing thereof, as when we run the script locally as root we see the output that we'd expect. For all I know that's a line ending or locale problem.
Troubleshooting on the linux end is problematic, as instead of distributing a script to check on the linux side (which makes the sudo part of things much easier), the script is hard-coded within the MP. From what I understand it would need to be disassembled
and recompiled to change.
The snippet below may be of use to someone for use in their sudoers file, it will make the checks work on the linux side at least. I wouldn't recommend this for anything beyond testing, as specifying that an account can run a full bash shell as root
without a password is a terrible idea.
#replace scomactionaccount with whatever your scom action account is called
User_Alias SCOM = scomactionaccount
Runas_Alias SCOM = root
SCOM ALL = (SCOM) NOPASSWD: /opt/microsoft/scx/bin/scxlogfilereader -p
SCOM ALL = (SCOM) NOPASSWD: /bin/bash

SCCM Device Query for SCEP 2012 SP1 CU5

Similar Messages

Maybe you are looking for