SCCM integration with Intune

Hi all,
We have a requirement to manage the mobile devices in our network for which we are using Windows Intune. We were having SCCM Installed & configured in our environment so, we thought of integrating Intune with SCCM so, that we have a single console management
ability.
The problem which we are facing at the design level is were to integrate Intune - we are having 1 CAS & 4 Primary Site. In this hierarchy should we integrate Intune with CAS or with the primary sites.
Please suggest.
Thanks,
Pranay.

The site system role should be installed on the CAS.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Similar Messages

SCCM Integration with SNOW (Service Now)

Hello,
I have implemented SCCM 2012 R2 for our client. Now I have to work with the Service Now(SNOW) team on SCCM integration with SNOW. I have no idea how this is done and what input/involvement is needed from my side. Can some one please let me know how is this
done. Are there any scripts that I need to provide the SNOW team?
Regards,
JD

Hi,
Please refer to the link below:
http://wiki.servicenow.com/index.php?title=Microsoft_SMS/SCCM_Integration_2.0
Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

SCCM 2012R2 with Intune - Remote Wipe iOS devices

Hi,
I have questions regarding Remote Wipe in SCCM 2012 R2 with Intune manage iOS-devices.
How often do the iOS device "talk" to SCCM/Intune environment?
Is that "value" possible to change? (client settings, Intune-admin console)
I've published applications in SCCM and installed these via "Company Portal", but when I manage to run Remote Wipe it wont delete the data installed by SCCM/Intune?
Has anyone tested this functionality?
Regards
Daniel

Microsoft has released and patch that effectively shortens the remote wipe task to seconds. I am currently testing in my environment. Please note you need to be running 2012 R2 CU3 for the update to be applicable
http://windowsitpro.com/configuration-manager/new-configmgr-hotfix-adds-immediate-client-notifications-speeds-remote-wipe-se

Error in Sync user from SCCM collection to Intune CLOUDUSERSYNC:LOG

Hello I'm trying to setup SCCM SP1 with Intune, al seems to work fine until I add or remove users to the Collection to permit device enrollment.
The errors are:
Starting user delta sync, raise failure status messages = True
SMS_CLOUD_USERSYNC 30/01/2014 18:11:39
5184 (0x1440)
Total received users from SCCM to be removed from cloud = 1
SMS_CLOUD_USERSYNC 30/01/2014 18:11:39
5184 (0x1440)
ERROR: RemoveLicensedUsers exception System.ServiceModel.FaultException: Fault occurred~~~~Server stack trace: ~~ at System.ServiceModel.Security.IssuanceTokenProviderBase`1.DoNegotiation(TimeSpan timeout)~~ at System.ServiceModel.Security.IssuanceTokenProviderBase`1.GetTokenCore(TimeSpan
timeout)~~ at System.IdentityModel.Selectors.SecurityTokenProvider.GetToken(TimeSpan timeout)~~ at System.IdentityModel.Selectors.SecurityTokenProvider.GetToken(TimeSpan timeout)~~ at System.ServiceModel.Security.SecurityProtocol.TryGetSupportingTokens(SecurityProtocolFactory
factory, EndpointAddress target, Uri via, Message message, TimeSpan timeout, Boolean isBlockingCall, IList`1& supportingTokens)~~ at System.ServiceModel.Security.TransportSecurityProtocol.SecureOutgoingMessageAtInitiator(Message& message, String
actor, TimeSpan timeout)~~ at System.ServiceModel.Security.TransportSecurityProtocol.SecureOutgoingMessage(Message& message, TimeSpan timeout)~~ at System.ServiceModel.Security.SecurityProtocol.SecureOutgoingMessage(Message& message,
TimeSpan timeout, SecurityProtocolCorrelationState correlationState)~~ at System.ServiceModel.Channels.SecurityChannelFactory`1.SecurityRequestChannel.Request(Message message, TimeSpan timeout)~~ at System.ServiceModel.Channels.ServiceChannel.Call(String
action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)~~ at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)~~ at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage
message)~~~~Exception rethrown at [0]: ~~ at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)~~ at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)~~
at Microsoft.WindowsIntune.SccmIdsUserSync.Proxy.ISyncIdsUser.RemoveLicensedUsers(Guid[] userIds)~~ at Microsoft.ConfigurationManager.DmpConnector.UserSync.UserSyncServiceClient.RemoveLicensedUsers(Guid[] userIds)
SMS_CLOUD_USERSYNC 30/01/2014 18:11:41
5184 (0x1440)
STATMSG: ID=10001 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_CLOUD_USERSYNC" SYS=systemcenter.domain.inet SITE=GFE PID=2540 TID=5184 GMTDATE=jue ene 30 17:11:41.103 2014 ISTR0="RemoveLicensedUsers" ISTR1="Fault occurred"
ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0
SMS_CLOUD_USERSYNC 30/01/2014 18:11:41
5184 (0x1440)
ERROR: User delta sync failed with exception: System.ServiceModel.FaultException: Fault occurred~~~~Server stack trace: ~~ at System.ServiceModel.Security.IssuanceTokenProviderBase`1.DoNegotiation(TimeSpan timeout)~~ at System.ServiceModel.Security.IssuanceTokenProviderBase`1.GetTokenCore(TimeSpan
timeout)~~ at System.IdentityModel.Selectors.SecurityTokenProvider.GetToken(TimeSpan timeout)~~ at System.IdentityModel.Selectors.SecurityTokenProvider.GetToken(TimeSpan timeout)~~ at System.ServiceModel.Security.SecurityProtocol.TryGetSupportingTokens(SecurityProtocolFactory
factory, EndpointAddress target, Uri via, Message message, TimeSpan timeout, Boolean isBlockingCall, IList`1& supportingTokens)~~ at System.ServiceModel.Security.TransportSecurityProtocol.SecureOutgoingMessageAtInitiator(Message& message, String
actor, TimeSpan timeout)~~ at System.ServiceModel.Security.TransportSecurityProtocol.SecureOutgoingMessage(Message& message, TimeSpan timeout)~~ at System.ServiceModel.Security.SecurityProtocol.SecureOutgoingMessage(Message& message,
TimeSpan timeout, SecurityProtocolCorrelationState correlationState)~~ at System.ServiceModel.Channels.SecurityChannelFactory`1.SecurityRequestChannel.Request(Message message, TimeSpan timeout)~~ at System.ServiceModel.Channels.ServiceChannel.Call(String
action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)~~ at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)~~ at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage
message)~~~~Exception rethrown at [0]: ~~ at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)~~ at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)~~
at Microsoft.WindowsIntune.SccmIdsUserSync.Proxy.ISyncIdsUser.RemoveLicensedUsers(Guid[] userIds)~~ at Microsoft.ConfigurationManager.DmpConnector.UserSync.UserSyncServiceClient.RemoveLicensedUsers(Guid[] userIds)~~ at Microsoft.ConfigurationManager.DmpConnector.UserSync.CloudUserUpload.RemoveLicensedUsers(List`1
userIds, List`1 userNames)~~ at Microsoft.ConfigurationManager.DmpConnector.UserSync.ConnectorUserSync.NotifyAccountRemoval(DatabaseOperation dbOperations, Dictionary`2 receivedUsers, Boolean sendStatusMessages, Boolean& statusMessagesSent)~~
at Microsoft.ConfigurationManager.DmpConnector.UserSync.ConnectorUserSync.PerformDeltaSync(Boolean sendStatusMessages)
SMS_CLOUD_USERSYNC 30/01/2014 18:11:41
5184 (0x1440)
STATMSG: ID=10002 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_CLOUD_USERSYNC" SYS=systemcenter.domain.inet SITE=GFE PID=2540 TID=5184 GMTDATE=jue ene 30 17:11:41.108 2014 ISTR0="" ISTR1="" ISTR2="" ISTR3=""
ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0
SMS_CLOUD_USERSYNC 30/01/2014 18:11:41
5184 (0x1440)
UserSync: Failed to perform delta sync. error = Unknown error 0x80131501, 0x80131501
SMS_CLOUD_USERSYNC 30/01/2014 18:11:41
5184 (0x1440)
The connector and the Site System Role seems to be fine.

After install CU3 for SCCM SP1 the issue is solved.

MBAM 2.5 with SCCM Integration

Hi
I've installed MBAM 2.5 and now need to roll back the changes as I didn't specify the -SsrsServer value and this is hosted on a different server. When I try to run Disable-MbamCMIntegration I'm getting the following error
Disable-MbamCMIntegration : Could not find System Center role settings for 'Reporting Services Point' role at site
'xxx' on server 'Value removed'
At line:1 char:1
+ Disable-MbamCMIntegration
+ ~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Disable-MbamCMIntegration], ReportingServicesNotConfiguredException
+ FullyQualifiedErrorId : Microsoft.Mbam.Setup.Common.CmIntegration.ReportingServicesNotConfiguredException,Micros
oft.Mbam.Server.Commands.DisableMbamCMIntegrationCommand
If I try to install the Web Applications on my MBAM server with SCCM integration it fails with the following
The web application prerequisite check found missing prerequisites
The specified Configuration Manager integration mode does not match the Configuration Manager integration mode currently in use

Sure
If you edit the following key in the registry on your SCCM server
HKLM\SOFTWARE\Microsoft\MBAM Server\Enabled\CMIntegration to 0 and then restart the server it will allow you to re-add the feature with a different config.

Unable to install MBAM 2.5 with SCCM integration on named SQL instance

Hi,
in production i am installing MBAM 2.5 with SCCM integration but during the installation it asks for the SCCM reporting services point and which it is unable to recognize.
whereas in my lab environment i have default SQL instance which has reporting installed, in that case it works fine.
can someone let me know why the issue is coming?
in the event log the issue is : Description = "user domain\username is not able to get the lock at this time.Error:0x40480732"

For the integration part, You need to install the MBAM SCCM Integration feature on SCCM server. For compliance reporting in integration, MBAM uses the Reporting service point for SCCM.
When installing the SCCM integration feature, you need to provide the name of the reporting Server where Reporting Service point role is installed for SCCM. But it does not provides any option for the instance but for the Server only. We have two instances
for SQL. One for CAS and other for Primary site. We need to run the installer on CAS and hence need to connect to the SQL instance for CAS.
We have also tried with the powershell commands but it is not working either.
Is there any way to install MBAM integration feature on a SQL instance. As far as I know, it automatically picks the instance but not happening for me.
Gaurav Ranjan

MBAM 2.0 with SCCM Integration: Recovery Audit Reports errors.

I have installed MBAM 2.0 with SCCM integration according to the following website:
http://myitforum.com/myitforumwp/2013/06/10/how-to-install-mbam-2-0-with-configmgr-integration/
Topology:
SCCM 2012
SCCM SQL Server
MBAM Server
MBAM SQL Server
Components installed:
Integration components on SCCM 2012 server
Compliance and Audit Reports on SCCM SQL Server
Recovery and Audit Databases on MBAM SQL Server
Self-Service and Administration Monitoring on MBAM Server
Everything is running correctly: SCCM sees compliance reports, keys are populating into the Recovery database. Self-service works correctly as tested.
However, the Recovery Audit Report in the /Helpdesk webpage reports an error:
"Cannot create a connection to data source 'DataSource1'. (rsErrorOpeningConnection)
Browsing to the /Reports page on the MBAM SQL server (with reporting) yields an empty page.
If I install the Audit and Compliance reports onto the MBAM SQL server, those populate (but are empty, as SCCM is handling that component), however, the Recovery Audit Report still yields the same error.
Ideas?
Thanks,
-Patrick

You can put the Audit Reports on the SSRS instance on SCCM Server. But it has its own limitations. What if you want to configure the encrypted configuration within the MBAM environment using SSL certificate. In that case you have to take special
care while using the SSL certificate for configuring the reporting Point as it has been also used by the SCCM.
Gaurav Ranjan
So, let me get this clear, I can install the Audit Reports onto the SRSS I am using for SCCM and not have to deploy an SRSS instance elsewhere? The SSL certificate detail is not an issue. I am desperately trying to avoid yet another instance of
SRSS.
Thanks

MBAM 2.5 integrated with SCCM 2012 SP1 compliance issue

Hi,
I have installed MBAM 2.5 in a SCCM integrated topology. GPO for encryption on the OS drive only have been deployed and encryption completed using the MBAM client. When running the compliance report and evaluating using the SCCM client the compliance comes
back as non-compliant. I have tried several tweaks to the GPO but had no luck getting it to report as compliant. Using the dashboard report to try and pin point why it is non-compliant shows as non-compliant but using the reasons in the top right corner all
have 0 instances.
Is there a log file on the local system that can tell me what aspect is causing the status?

In the Event Viewer, there is MBAM node, you will find all MBAM client events there.
Also, review your GPO and see what encryption types are allowed and which are required. Maybe one reason would be, that your GPO requires something, which your client hasn´t done yet, like PIN code.
I´ve seen issues with not being compliant to policy before, and there was some explanations of this, if you google around. I´m also intrested to get knowing this, because I couldn´t solve this compliance issue.
For customer reporting, I just did query in SCCM where I listed ecrypted status and drive letters, that was a "customized report method" to tell customer, are all their Computers encrypted or not.

Remote WSUS integration with SCCM 2012

Hi,
We are currently having WSUS already in place for Patching , but not used at all its just installed.
can remote WSUS be integrated with SCCM 2012 server which is on different server ? what is the best practice ? is it to have WSUS on same server as Primary server?
or I decommission it and install a new WSUS on same server as SCCM server.
what steps have to be taken care if remote WSUS is integrated ? any documents or steps to be taken care .
Thanks in Advance

When you install SUPs, they automatically configure the underlying WSUS instance to sync from an upstream server based upon your ConfigMgr hierarchy.
A couple of notes here though:
- You generally shouldn't use an existing instance of WSUS for ConfigMgr. Once integrated into ConfigMgr, WSUS should no longer manage approvals, update binary downloads, or update binary distribution as these are all handled by ConfigMgr separate from WSUS.
Using an existing WSUS instance where this was the case can be problematic at best and will cause unexpected behavior and results.
- Clients do not choose SUPs based upon boundaries or location so using a remote SUP is typically not beneficial and in many cases will cause additional network load. The exception to this is if the SUP is within a secondary site.
Jason | http://blog.configmgrftw.com | @jasonsandys

Intel vPro AMT integration with SCCM 2012R2 - Issues with SCCM finding the "ConfigMgr AMT Web Server Certificate"

Good evening all,
I'm attempting to get Intel SCS integrated with SCCM 2012 R2 and I have both sides working, doing what they do best, however, I have issues when I try to mate the two. I started with a single server for the site and then tackled the Intel side with success,
then I added another site server to run the Out of Band service point and Enrollment point. Up until this point I've had no issues with certificate templates, or issuance of those certs.
I have re-read the TechNet documents a few times regarding the PKI setup, some Intel documentation and three step by step articles and non of them seem to differ so I can't understand why I'm unable to choose my "ConfigMgr AMT Web Server Certificate"
when configuring the Out of Band Management Component Properties page. The "AMT web server certificate template:" dialog shows my CA FQDN and CA name, but the certificate template list is always blank. I've tried this from both the remote
and local ConfigMgr consoles. The site servers have rights on the CA to manage and issue certs, is there something I'm missing that isn't in the documentation or buried somewhere that I missed? Is there a Application policy that should be on the
cert that isn't mentioned anywhere?
Thanks in advance!
Tesfaye

Hi Joyce,
Thanks for responding. I pretty much have this error repeating in the log file and not much else:
[28, PID:13388][05/21/2014 15:17:15] :System.DirectoryServices.DirectoryServicesCOMException\r\nThere is no such object on the server.
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.get_AdsObject()
   at System.DirectoryServices.DirectorySearcher.FindAll(Boolean findMoreThanOne)
   at System.DirectoryServices.DirectorySearcher.FindAll()
   at Microsoft.ConfigurationManagement.AdminConsole.Common.ADUtils.EnumEnterpriseCACertificateTemplates(String domainEntryName, String certAuthorityFqdn, Boolean isServerAuthen)\r\n
I will look into this, but another hint would be greatly appreciated!
Thanks,
Tesfaye

Integration with SCCM 2012?

Does anyone have any experience in integrating SCCM 2012 with VSM? Any documents or learnings from an asset management standpoint so that the CMDB can be populated?
Thanks in advance.

Hi Chris,
Only the VMware documentation I'm afraid, which isn't at all comprehensive but is enough to get going I think.
I don't know how familiar you are with integration and the federated cmdb so forgive me if you have all this already, but check out the downloads section (https://my.vmware.com/group/vmware/details?downloadGroup=SM_919_DOC&productId=171&rPId=5685) and look for:
VMware Service Manager connector for Microsoft SCCM Technical Notes (VSM_90_Connector_for_SMS_SCCM_TN_v1.0.3.pdf)
Connector Installation Guide (vsm-91-connector-guide.pdf)
Integration Platform Configuration Guide (vsm-91-integration-platform-config-guide.pdf)
Check those out and if you have any questions, do shout and I'll do my best to help if I can!

OS-Deployment to virtual servers with SCVMM 2012 R2 vs SCCM 2012 R2 or integration with both?

Hi,
OS-Deployment to virtual servers with SCVMM 2012 R2 vs SCCM 2012 R2 or integration with both?
Is SCCM just for physical servers, and SCVMM for virtual?
What are benefits of integrating them?
/SaiTech

Hi,
Please refer to the links below:
Introduction to Configuration Manager
http://technet.microsoft.com/en-us/library/gg682140.aspx
Virtual Machine Manager
http://technet.microsoft.com/en-us/library/gg610610.aspx
The System Center 2012 Integration Guide provides information about automating each of the System Center components and integrating them with each other and with other systems and applications.
For more information, see the
System Center 2012 Integration Guide.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

SCCM 2012 integration with SCOM 2012 - Disable Alerts during patching

Have SCCM 2012 R2 and SCOM 2012 R2 and use the Software Update Patching process for servers. When using the checkbox to "Disable Operations Manager Alerts when this program runs" option have noticed on completion of the job and the target
server is rebooted, a scheduled task appears for a short time titled "SCOM 2007 Agent Resume Task". The task disappears and there is no history to view.
Is this a legacy naming convention from 2007 world when the maintenance mode is turned off from the SCCM patching process?
How do I see the actual code behind the SCCM and SCOM integration with Maintenance mode to validate it.

SCCM should use the following SCOM SDK to do that.
http://msdn.microsoft.com/en-us/library/bb437532.aspx
That's incorrect. There is no API or method to put an OpsMgr agent into maintenance mode on the client itself -- maintenance mode is a centrally controlled feature of OpsMgr. The API/code sample you linked is performing that activity on the management server
which assumes you know the management server name and have permissions to carry out the action -- neither of which is fulfilled by the ConfigMgr agent.
The ConfigMgr agent pauses the OpsMgr client agent service and also unloads the workflows from the OpsMgr agent (it only did the first part in ConfigMgr 2007). This effectively puts the agent in Maintenance Mode (although to my knowledge this is not directly
reflected in the OpsMgr console).
Jason | http://blog.configmgrftw.com

Remedy CMDB Integration with SCCM 2012

We are facing an issue with duplicate entries of Hostname after remedy is integrated with SCCM2012.We have created custom view in SQL database which mapped to remedy database.Below is the query used for the integration.Can I get any help on this?
SELECT DISTINCT
                      dbo.v_GS_COMPUTER_SYSTEM.Name0, CASE WHEN v_GS_SYSTEM_ENCLOSURE.ChassisTypes0 IN ('3', '4', '6', '7', '15')
                      THEN 'Desktop' WHEN v_GS_SYSTEM_ENCLOSURE.ChassisTypes0 IN ('8', '9', '10', '21') THEN 'Laptop' WHEN v_GS_SYSTEM_ENCLOSURE.ChassisTypes0
IN ('1')
                      THEN 'VDI' WHEN v_GS_SYSTEM_ENCLOSURE.ChassisTypes0 IN ('2', '17', '23') THEN 'Server' END AS Chassis, dbo.v_GS_PC_BIOS.SerialNumber0,
                      dbo.v_GS_COMPUTER_SYSTEM.Manufacturer0, dbo.v_GS_COMPUTER_SYSTEM.Model0, dbo.v_GS_OPERATING_SYSTEM.Caption0,
                      dbo.v_GS_OPERATING_SYSTEM.CSDVersion0, dbo.v_GS_SYSTEM_CONSOLE_USAGE_MAXGROUP.TopConsoleUser0,
                      dbo.v_R_System.User_Name0 AS [Last Logged], dbo.v_GS_PC_BIOS.ReleaseDate0, dbo.v_GS_NETWORK_ADAPTER_CONFIGUR.IPAddress0,
                      dbo.v_R_System.AD_Site_Name0, dbo.v_GS_NETWORK_ADAPTER_CONFIGUR.DefaultIPGateway0, dbo.v_GS_X86_PC_MEMORY.TotalPhysicalMemory0,
                      dbo.Processor_DATA.Name00, dbo.Processor_DATA.Manufacturer00 AS Expr2, dbo.Processor_DATA.ProcessorType00, dbo.Processor_DATA.NumberOfCores00,
                      dbo.CH_ClientSummary.LastHW, dbo.CH_ClientSummary.LastSW, dbo.v_R_System.Last_Logon_Timestamp0, dbo.v_GS_COMPUTER_SYSTEM.Domain0
FROM         dbo.v_GS_PC_BIOS INNER JOIN
                      dbo.v_GS_COMPUTER_SYSTEM ON dbo.v_GS_PC_BIOS.ResourceID = dbo.v_GS_COMPUTER_SYSTEM.ResourceID INNER JOIN
                      dbo.v_GS_NETWORK_ADAPTER_CONFIGUR ON dbo.v_GS_COMPUTER_SYSTEM.ResourceID = dbo.v_GS_NETWORK_ADAPTER_CONFIGUR.ResourceID INNER JOIN
                      dbo.v_GS_OPERATING_SYSTEM ON dbo.v_GS_OPERATING_SYSTEM.ResourceID = dbo.v_GS_COMPUTER_SYSTEM.ResourceID INNER JOIN
                      dbo.v_R_System ON dbo.v_GS_COMPUTER_SYSTEM.ResourceID = dbo.v_R_System.ResourceID LEFT OUTER JOIN
                      dbo.v_GS_SYSTEM_CONSOLE_USAGE_MAXGROUP ON
                      dbo.v_GS_COMPUTER_SYSTEM.ResourceID = dbo.v_GS_SYSTEM_CONSOLE_USAGE_MAXGROUP.ResourceID INNER JOIN
                      dbo.v_GS_SYSTEM_ENCLOSURE ON dbo.v_GS_COMPUTER_SYSTEM.ResourceID = dbo.v_GS_SYSTEM_ENCLOSURE.ResourceID INNER JOIN
                      dbo.v_GS_X86_PC_MEMORY on (dbo.v_gs_x86_pc_memory.ResourceID = .v_GS_COMPUTER_SYSTEM.ResourceID) inner JOIN
                      dbo.Processor_DATA ON dbo.Processor_DATA.MachineID = dbo.v_R_System.ResourceID INNER JOIN
                      dbo.CH_ClientSummary ON dbo.CH_ClientSummary.MachineID = dbo.v_R_System.ResourceID
WHERE     (dbo.v_GS_NETWORK_ADAPTER_CONFIGUR.IPEnabled0 = 1) AND (NOT (dbo.v_GS_NETWORK_ADAPTER_CONFIGUR.DefaultIPGateway0 IS NULL)) AND (dbo.v_GS_X86_PC_MEMORY.TotalPhysicalMemory0 >=512)
Thanks,
Shijil

Thank you Nash for your help.
I tried with dbo.v_R_System_Valid as suggested, still the same result.Is there any way to filter duplicate computer name in this query?
Below is the query.
SELECT
DISTINCT
dbo.v_R_System_Valid.Netbios_Name0,
CASE WHEN v_GS_SYSTEM_ENCLOSURE.ChassisTypes0
IN ('3',
'4',
'6', '7',
'15')
THEN 'Desktop'
WHEN v_GS_SYSTEM_ENCLOSURE.ChassisTypes0
IN ('8',
'9',
'10', '21')
THEN 'Laptop'
WHEN v_GS_SYSTEM_ENCLOSURE.ChassisTypes0
IN ('1')
THEN 'VDI'
WHEN v_GS_SYSTEM_ENCLOSURE.ChassisTypes0
IN ('2',
'17',
'23') THEN
'Server' END
AS Chassis, dbo.v_GS_PC_BIOS.SerialNumber0,
dbo.v_GS_OPERATING_SYSTEM.Caption0,
dbo.v_GS_OPERATING_SYSTEM.CSDVersion0, dbo.v_GS_SYSTEM_CONSOLE_USAGE_MAXGROUP.TopConsoleUser0,
dbo.v_R_System.User_Name0
AS [Last Logged], dbo.v_GS_PC_BIOS.ReleaseDate0, dbo.v_GS_NETWORK_ADAPTER_CONFIGURATION.IPAddress0,
dbo.v_R_System.AD_Site_Name0, dbo.v_GS_NETWORK_ADAPTER_CONFIGURATION.DefaultIPGateway0,
dbo.v_GS_X86_PC_MEMORY.TotalPhysicalMemory0,
dbo.Processor_DATA.Name00, dbo.Processor_DATA.Manufacturer00
AS Expr2, dbo.Processor_DATA.ProcessorType00, dbo.Processor_DATA.NumberOfCores00,
dbo.CH_ClientSummary.LastHW, dbo.CH_ClientSummary.LastSW,
dbo.v_R_System.Last_Logon_Timestamp0
from
dbo.v_GS_PC_BIOS
inner JOIN
dbo.v_R_System_Valid
ON dbo.v_GS_PC_BIOS.ResourceID
= dbo.v_R_System_Valid.ResourceID
INNER JOIN
dbo.v_GS_NETWORK_ADAPTER_CONFIGURATION
ON dbo.v_R_System_Valid.ResourceID
= dbo.v_GS_NETWORK_ADAPTER_CONFIGURATION.ResourceID
INNER JOIN
dbo.v_GS_OPERATING_SYSTEM
ON dbo.v_GS_OPERATING_SYSTEM.ResourceID
= dbo.v_R_System_Valid.ResourceID
INNER JOIN
dbo.v_R_System ON dbo.v_R_System_Valid.ResourceID
= dbo.v_R_System.ResourceID
LEFT outer
JOIN
dbo.v_GS_SYSTEM_CONSOLE_USAGE_MAXGROUP
ON
dbo.v_R_System_Valid.ResourceID
= dbo.v_GS_SYSTEM_CONSOLE_USAGE_MAXGROUP.ResourceID
INNER JOIN
dbo.v_GS_SYSTEM_ENCLOSURE
ON dbo.v_R_System_Valid.ResourceID
= dbo.v_GS_SYSTEM_ENCLOSURE.ResourceID
INNER JOIN
dbo.v_GS_X86_PC_MEMORY
on (dbo.v_gs_x86_pc_memory.ResourceID
= .v_R_System_Valid.ResourceID)
inner JOIN
dbo.Processor_DATA
ON dbo.Processor_DATA.MachineID
= dbo.v_R_System.ResourceID
inner JOIN
dbo.CH_ClientSummary
ON dbo.CH_ClientSummary.MachineID
= dbo.v_R_System.ResourceID
WHERE
(dbo.v_GS_NETWORK_ADAPTER_CONFIGURATION.IPEnabled0
= 1)
AND (NOT
(dbo.v_GS_NETWORK_ADAPTER_CONFIGURATION.DefaultIPGateway0
IS NULL))
AND (dbo.v_GS_X86_PC_MEMORY.TotalPhysicalMemory0
>=512)
Thanks,
Shijil

Intune, SCCM, and the Intune client installer

Hello,
Was wondering if there is a way to prevent users from Installing the Windows Intune Client agent?
Scenario:
SCCM 2012 R2 with integrated Windows Intune subscription. I have successfully enrolled an iPad and a Windows 8.1 computer. I was then able to download and install the Windows Intune Client agent on my Windows 8.1 device which redirected my device
to being managed by Intune exclusively, and no longer via SCCM. It also changed my System Center Endpoint Protection to Intune Endpoint protection. The only way to get it back was to go to the Intune Management Console and retire the device, which
triggers an uninstall of the Intune client. The good news is that it restored the previous information for the SCCM/Intune enrollment. However...
A significant and unfortunate side effect of this is that Endpoint protection was also removed as part of the Intune client uninstall leaving the computer without Anti-malware protection.
I would like to prevent this from happening for obvious reasons. In a BYOD scenario the user will have the permissions locally to do this and given its the same subscription for Intune there doesn't appear to be a way to ensure they cannot.
Am I missing something simple here?
Thanks!

I guess a couple of data points:
- Enrolling a Win 8.1 system using OMA-DM for management by ConfigMgr via Intune does not provide additional anti-virus above or beyond the built-in Windows Defender
- Removing the Intune agent reverts the system back to using Windows Defender the same as it was before Intune was installed
So, I would say that first, this statement is inaccurate: "leaving the computer without Anti-malware protection". And, also, there's no difference between the two states of pre-Intune agent installation and post-Intune agent uninstallation from an AV perspective.
As for explicitly preventing the Intune agent installation, obscurity is probably the the only way to go at this point to my knowledge -- simply don't tell folks about it or how to find it.
Jason | http://blog.configmgrftw.com

SCCM integration with Intune

Similar Messages

Maybe you are looking for