User Device Affintiy is set up in SCCM, but it is only dribbling into SCSM at about 150 machines per night???

Hi all,
Our Environment = System Centre Suite 2012 SP1, on the most recent CU release as appropriate
we have a PR1 site which is our desktop estate and in this one, Config Manager PR1 client settingshas been configured for user device affinity has been set to 900 mins over 7 days (we reduced this from the default in the hope it would speed things
up)
UDA was not configured initially in PR1 but it has been configured for almost 2 months and in an estate of just over 7000 machines in Service Manager there are only just over 3000 PC's with Primary Users. This number appears to increase by about
150 each night as the connector runs.
Configuration Manager on the other hand has primary user info for all machines.
Has anyone out there come across this and has a solution or can suggest a solution to this issue.
Thanks in Advance,
Ed
Ed

Have you checked the event log to see if there are any errors during the connector processing? The events will be logged in Application and Services Logs\Operations Manager. Look for any error messages during the time the connector was syncing. Most events
dealing with the ConfigMgr connector have a source of "Data Connectors" or "Lfx Service", but I would suggest looking through all of them from that time period. Let us know if you find anything there.
Matthew Dowst |
Blog | Twitter

Similar Messages

User Device Affinity PXE Setting

In the settings for PXE on a DP, there is an option for user device affinity with three possible choices. Do not use UDA, use UDA with manual approval or use UDA with automatic approval. What exactly do these settings do? The TechNet info
is a bit vague.
Select Do not use user device affinity to not associated users with the destination computer.
Select Allow user device affinity with manual approval to wait for approval from an administrative user before users are associated with the destination computer.
Select Allow user device affinity with automatic approval to automatically associate users with the destination computer without waiting for approval.
If I select do not use user device affinity, does that mean that the machine will not participate in UDA regardless of client settings?

Perhaps this blog post will share some light on what the settings are used for:
http://blogs.technet.com/b/inside_osd/archive/2011/06/20/configuration-manager-2012-user-device-affinity-and-os-deployment.aspx
Regards,
Nickolaj Andersen | www.scconfigmgr.com | @Nickolaja

HT200197 hi i just bought an Apple TV device and tried setting up the wireless but after i enter the 2WIRE Key Password the screen starts by saying connecting than the screen says Activating below says stting date & times and just sits there for an hour

Hi I just bought an Apple TV device i have detected the 2WIRE and entered the Product Key Password. It takes that okay the screen goes to Connecting followed by Activating below in small print it says Setting date and time but nevr leaves that screen it just clocks there for evr???

Welcome to the Apple Community.
Assuming this is not the first time you have used your Apple TV
You might try restarting the Apple TV by removing ALL the cables for 30 seconds.
Also try restarting the router. (Also try removing it’s power cord for at least 30 seconds)
If the problem persists, try a restore, you may want to try the previous procedures several times before doing this.
If restoring from the Apple TV doesn't help, try restoring from iTunes using a USB cable.
If this is a new Apple TV, in addition to trying the above, it may also be that your network router is not allowing access to the timeserver, check that your router allows access over port 123.

HT202213 I'm trying to set up "Home sharing" but i can not get into my old computer because of a virus. The old has Vista and an older version of iTunes. The new has Windows 7. Also this is my sons computer however I have made a new user account for me. H

I Have 2 issues;
1. I can't transfer my iTunes library from my old computer which I can't get into due to a virus. I'm trying to transfer my iTunes folder to my sons computer in which I now have a user account. Old is Vista and new is Windows 7. Therefore home sharing is impossible, right? Wrong?
2. I found my purchases from iTunes on my iPhone 4S. I can't seem to download them. There is no button to tap "download". Also, I'm unable to sync to iTunes because my phones default is to sync to my old computer which will not open!

Contact Apple customer support, they can reset your authorizations.
http://www.apple.com/contact

HT1692 I have my calendar sync set to "all events" but I can only see 4 months back, the rest is blank.

I need to be able to see last years calendar entries. The setting is already set to "all Events". Still I can only see 4 months back?

You should be syncing your contacts with an app on your computer or cloud service (iCloud, Gmail, Yahoo, etc), and not relying on a backup. If you haven't been doing this, start now and then restore your old backup. You will then be able to sync the new contacts back into the phone. However, you will lose all messages, etc newer thant the backup.

I got a new ipod touch 5th gen did the set up updated it but now the only thing the screen does is ask to be hooked up to itunes and is always in recovery mode and no matter how many times I try to restore it won't work?

If it help before this one I had an iopd touch gen 2

Maybe:
Restore loop (being prompted to restore again after a restore successfully completes)
Troubleshoot your USB connection. If the issue persists, out-of-date or incorrectly configured third-party security software may be causing this issue. Please follow Troubleshooting security software issues. .
Next try placing in DFU mode and then restoring.
How to put iPod touch / iPhone into DFU mode « Karthik's scribblings
Then try restoring on another computer.
Last, make an appointment at the Genius Bar of an Apple store.
Apple Retail Store - Genius Bar

Automatic User Device Affinity doesn't work

Hi, the automatic User Device Affinity doesn't work in my environment and I don't know why! The audit policies are enabled by GPO and User Device Affinity is correctly configured in SCCM. Below are some screenshots including de log of User Device Affinity.
Anybody could help-me please?

An old post but,
This can happened when activating
advanced audit policy in one of the GPO. once it was activated, it gets override the regular audit policy with different event id's that SCCM don't recognize. in addition, the machine tattooed with those settings so removing the GPO wont revert the settings.
Check out this thread for more information and help:
http://social.technet.microsoft.com/Forums/en-US/f3a4b675-e955-4cd2-bba6-d51ea06dd362/user-affinity-not-working-properly?forum=configmanagergeneral
Please take a moment to Vote as Helpful and/or Mark as Answer where applicable. Thanks.

Remove User Device Affinity via WMI ?

Is there currently a way to remove UDA via WMI? I have seen the Remove-CMDeviceAffinityFromUser powershell command, but from what i can tell, this requires at a bare minimum the dlls to be loaded from the admin console. It would be nice if
this could be done via wmi \ vbscript, so that it could be called from the system context over a connection established with alternative credentials.

While reading this I thought why not get the WMI/CIM instance of the class mentioned by Peter and pipe it to Remove-CIMInstance .
I tried this one and the below works for me (Note I have already set the PSDefaultCommonparameters to point to correct namespace and ConfigMgr Server ) using below :
$PSDefaultParameterValues =@{"get-cimInstance:computername"="DexSCCM";"get-ciminstance:namespace"="Root\SMS\site_DEX"}
Once the Parameter Values are set I used below to get the only UDA rule I have for a machine named DexDC. Once I am done removing the UDA the same can be verified via the Console as well.
PS DEX:\> Get-CimInstance -ClassName SMS_UserMachineRelationship
CreationTime : 10/28/2014 3:19:49 AM
IsActive : True
RelationshipResourceID : 25165824
ResourceClientType :
ResourceID : 2097152001
ResourceName : DEXDC
Sources : {2}
Types : {1}
UniqueUserName : DEX\DexterPOSH
PSComputerName : DexSCCM
PS DEX:\> Get-CimInstance -ClassName SMS_UserMachineRelationship | Remove-CimInstance -Verbose
VERBOSE: Performing the operation "Remove-CimInstance" on target "SMS_UserMachineRelationship (RelationshipResourceID =
25165824)".
VERBOSE: Perform operation 'Delete CimInstance' with following parameters, ''namespaceName' =
root/sms/site_dex,'instance' = SMS_UserMachineRelationship (RelationshipResourceID = 25165824)'.
VERBOSE: Operation 'Delete CimInstance' complete.
PS DEX:\>
Check the SMSProv.log for any errors (shouldn't be any). The advantage of using WMI/CIM here is that this can be run from any machine (doesn't need the CM PowerShell module) and with WMI/CIM you can pass alternate creds etc.
Hope this helps
Knowledge is Power{Shell}
DexterPOSH
My Blog

Giving Permission to Helpdesk so they can set users Primary Device (User Device Affinity)

Hi,
I am trying to give our helpdesk access so they can right click a computer object in the console and edit the Users Primary Device. They have the option to right click and select "Edit Primary Users", but when typing in Domain\Username it doesnt
populate with any usernames?
Its almost as though they dont have rights to search AD for the usersnames in our domain.
I am full administrator so it works fine for me.
I have set the following permissions for our helpdesk and thought this would be enough:
Collection = Read, Modify, Remote Control, Modify Resource, Delete Resource, Read Resource, Modify Collection Setting, Control AMT
Site = Read, Import Computers
User Device Affinities = Read, Modify, Delete, Create, Run Report, Modify Report
Helpdesk all have appropriate rights in AD so its definitely something within SCCM 2012 RBAC causing the issue, any ideas ?
Note: I already have automatic UDA in place but it takes the agent a week to pick this up so need a manual of doing this too.
Thanks

RESOLVED
I had to give them read permission to the All Users and Groups collection.
I thought it might enumerate the list of users straight from AD, but it does this from the all users collection which makes sense.
Cheers

SCCM 2012 - Automatic User Device affinity - Not Working

Hi,
I need to enable the Automatic User Device affinity.
Have enabled following two group policy settings:
Audit account logon events
Audit logon events
In client settings User and Device Affinity
following is enabled:
User device affinity threshold (120 minutes)
User device affinity threshold (2 days)
Automatically configure user device affinity from usage data – True
However even after 2 days there is no user device relationship getting build.
Is there anything more required to be done?
Any logs or links to be referred for troubleshooting?
Regards,
Milind Dhuri.

Hi,
Please post this in SCCM 2012 forum.
tx.

SCCM 2012 User Device Affinity : Insure affinity is not lost...opinions?

ok, so i'd like your opinions.
situation: i manage a school district environment of around 1500 computers, which is a good mix of labs/student laptops/teacher computers.
What I've done is set user device affinity by user to 60 minutes over 7 days. For helpdesk reasons, we obviously need to be able to bring up the teacher's primary computer through searching for that user's primary device (we use right click tools,
which is AMAZING...shout-out.) What happens is when we go on Thanksgiving/Christmas/Summer break, the teacher's are gone for 7/14/90 days respectively.
I do not want these user's to lose connection to their primary device, because when we just came back from our 2 week break we find NO connections using right click tools.
What I just did was set the days to 90, since 3 months is the longest we'll be away...is that a bad idea, or is there a better way to get this connection to stick?
Also, if there is a better way to do this, please let me know...i'm open to suggestions.
Thank you!

Due to our environment I have ours set to 80 hours in 30 days. I have checked machines that haven't reported in since before December of last year and those objects still have the appropriate user defined as the Primary User.
The thresholds don't define how long the data is held in the database for. It just means "If a user uses a device for x amount of minutes within the window of x amount of days then this device can be considered to be their device." What "X" should equal
is the variable that you have to make fit your environment. We had to increase the threshold here because techs and other users were getting pulled into too many devices due to their prolonged use of the machine.
As for why your devices lose their Primary Users, did you configure some sort of custom settings in the site maintenance tasks?
Dustin Estes - MCP | www.dustinestes.com

How to determine User Device Affinity without SCCM!?

Hard to know for sure. You can query the folder list at c:\users, and check the registry for the last logon dates of the various profiles. One would hope that the most recent logon(s) would be the primary user(s).

What are some ways I can create a user device relationship? Preferably with PowerShell of course. I'm working on an intraforest domain migration and want to correlate the user and devices for the migration. That way the local profiles will get merged before the user logs in.
This topic first appeared in the Spiceworks Community

How to determine best User Device Affinity Settings

We've configured User Device Affinity for our site based on the canned defaults. Initially we started with 14 days and 1440 minutes. But after a recent deployment, we discovered that our Antivirus service account is registering as a "Primary User"
on all of our machines which has triggered a very bad situation.
My question is how do you determine these settings? My first try was to find a report that showed how many minutes each user was registering in the given period so that I could adjust it accordingly. I assume that my regular users are using the computers
a lot more than my service account but I have no way of verifying this.
I've tried combing through the security logs, but I'm not sure what SCCM is picking up on to determine the time period.
To me, it seems that 24 hours is a really low threshold and that I could bump that up to 120 hours over 14 days pretty easily without issue. My concern is that there is a reason that they are setting it so low to begin with that I'm missing. Even then, I'm
just randomly trying things hoping to get it right as I don't have the proper information to make the right decisions.
Any ideas? Feedback?

Yeah, I saw those logs but it still seems mysterious to me. I'm not sure where it's getting it's info. I assume it's the security log for each machine but I have nothing to confirm that. It's odd because our service account for our antivirus solution isn't
actually logging onto the machines so I'm not sure how it decides that this user is a primary user.
Ultimately, we worked around the problem by switching antivirus solutions but that won't be an option next time.
My guess is that we could have fixed our problem by adjusting our security logging settings in windows. But it wasn't something I wanted to do without direct confirmation with how this all works.
Thank you for your help on this though.

User device affinity question

hi there,
I have a question around user device affinity with regards to users that have multiple devices due the usage of those machines.
in most of our cases, users have 1 machine so any targeting of software with the requirement of user being primary user works fine, but we have a number of cases, mainly IT guys and engineers, who run up multiple machines constantly and therefore have
many "primary" devices, although 1 will probably be their main computer. If I targeted those users with an uninstall program for, let say Visio, and lets say visio was indeed installed on all of a particular users computers, then, as all those
computers are regarded as primary device for that user, all visio installs will be removed from all computers. there is no way to differentiate that I only want visio uninstalled from a users "main" primary device. ie. it is a case
of all or nothing. is that correct, and if so, would it then be a better bet in these cases to uninstall using a computer based method rather then user based, or an SCCM technician would need to make sure that device affinity was cleaned up prior to
any uninstall deployment?
I can see how device affinity works nicely where users work as they are supposed to, ie with 1 device. but it is the groups that don't fit into this pattern that I'm trying to get my head around how to manage when deploying apps to users rather than the
old method of packages to computers.
also, as an aside, I assume that the uninstall program set up in a deployment type, runs the requirement tests before running in the same way that if you where running the install program it tests?
thanks
douglas

To specify a primary device, you would need to set the User Device Affinity threshold. By default, it is 2880 minutes over 30 days. Then, when you create your Deployment Type, you would use the Requirements tab to set Primary Device = True.
This way, it will only run on the primary device that was determined by that setting.
And yes, the Detection Method runs for uninstalls the same way as it does installs.
Mike Leach | http://blogs.catapultsystems.com/mleach/default.aspx

I am still using my Apple G4 1.25 Ghz MDD running Leopard 10.5.8 with iTunes 10.6.3 installed. Can I use an Phone 4s with iOS 5 with this set up? I have read the iPhone iOS 5 user guide and it appears that I can but is anybody actually doing it ?

Hello to all my readers.I am still using my Apple G4 1.25 Ghz MDD running Leopard 10.5.8 with iTunes 10.6.3 installed. Can I use an Phone 4s with iOS 5 with this set up? I have read the iPhone iOS 5 user guide and it appears that I can but is anybody actually doing it ? My current phone is a £10 Nokia and I've neither wish nor cash to spend more than a grand upgrading to an intel based machine (at the moment) ! Regards to you all.

If you can find an iPhone running iOS5 and those are the specs for iOS5, there is no reason it should not work.
If you want a more current version of iOS or a more current device, a Windows computer is always an option at significantly less cost.
Granted, there is no requirement to have a computer to use an iPhone.

User Device Affintiy is set up in SCCM, but it is only dribbling into SCSM at about 150 machines per night???

Similar Messages

Maybe you are looking for