SCCM 2012 R2 comes with 15 built-in roles. For most of you, this is plenty to fulfill your needs. However if you have custom needs, it’s possible to create your own. When creating your first role, you may be lost in all those security rights. Instead of doing your role directly in the console, I suggest to use the Role-based Administration Modelling and Auditing Tool which is available in the SCCM 2012 toolkit. This tool helps administrators to model and audit RBA configurations. It’s graphical, you can compare your custom based role with the built-in ones. You can see right away the impact visually in the console. Here’s an example. Let’s say I have someone in the company that need read access on the Application and packages only. Sure you can use the Read-Only Analyst role but this would let the user “see” much more than you want. Let’s open … Read More
SCCM deployment type cannot be deleted
In SCCM, you try to delete a deployment type and you receive the following error : sccm deployment type cannot be deleted. To delete this deployment type the following references must be deleted. An application has one or more deployment types. These deployment types include the installation files and information that are required to install software on devices. A deployment type also has rules, such as detection methods, and requirements. These rules specify when and how the client installs the software. You want to delete the referring object, you can’t find it because you have previously deleted it. Keep calm and do not cry… This can be resolve easily. The problem is that you created a deployment type, refer in another DT and then delete it. SCCM keeps a history of all changes in applications. Yes, each time you make a modification, SCCM records the change so that you can revert … Read More
OSD/MDT Supported Operating Systems
What OS can you deploy using the different SCCM/MDT version ? Pretty confusing ! One of the best deployment guy (Johan Arwidmark) has release this valuable information : ConfigMgr 2012 SP1 CU3 – Supports deploying the following Operating Systems as OS Images Windows XP SP3 x86 Windows XP SP2 x64 Windows Vista SP2 Windows 7 Windows 8 Windows 8.1 (assuming a custom WinPE 5.0 boot image, and no MDT integration) Windows Embedded Standard 2009 Windows Fundamentals for Legacy PCs (WinFLP) Windows Embedded POSReady 2009 WEPOS 1.1 with SP3 Windows Embedded Standard 7 with SP1 Windows Embedded POSReady 7 Windows Thin PC Windows Embedded 8 Windows Embedded 8.1 (assuming a custom WinPE 5.0 boot image, and no MDT integration) Windows Server 2003 SP2 Windows Server 2003 R2 Windows Server 2008 SP2 Windows Server 2008 R2 Windows Server 2012 Windows Server 2012 R2 (assuming a custom WinPE 5.0 boot image, and no … Read More
SCCM Distribution Point Network bandwidth limitation
This post will explain how to handle SCCM Distribution Point Network bandwidth limitation. One of my clients wanted to limit bandwidth on their package distribution. Their reflex was to go in the DP properties and limit the available bandwidth. This was the way to go but their interpretation of the rate limit was wrong. This is one misinterpreted (and not well documented) feature of SCCM. Here’s what you see: Most people think “Hey I’ve got a 100Mbps link so let’s put 50% to limit SCCM to 50Mbps”… Wrong ! This is not how it works. Let explain how you should read it. I’ve found 2 really good article on external site about this: In resume SCCM will use the % you specify as to when it can use 100% of the available bandwith. In my example, I’m telling SCCM to use 100% of the available bandwidth 50% of the time (0 … Read More
Use SCCM CMTrace like a Pro (Part 2)
What are you doing when you want to troubleshoot SCCM client locally on a computer? Connect your USB card with the cmtrace.exe on it? Copy the executable file from a network directory? Do you want to be smarter? Create an application with a file detection method that will copy the executable file automatically on any SCCM clients. Download the file from Configuration Manager Toolkit. Step 1: Create a script to copy the executable file into the Windows directory Use this command ‘Xcopy /y cmtrace.exe %windir%’ in a cmd file. Enter the cmd file into the application program. Step 2: Add a detection method in the application properties Click on ‘Detection Method’ tab and ‘Add Clause’ to your application. The idea is to detect if the file is already copied. %Windir% will go automatically in the windows folder depending on the operating version. Step 3: Deploy the application to all desktop and server clients Technical supports, administrators and users will benefit from it. You … Read More
SCCM KB2905002 installation guide and Useful Information
The first hotfix for SCCM 2012 R2 is out and it’s time to install it.I’ll document a step-by-step SCCM KB2905002 installation guide and gives some useful information. For those of you that are used to update SCCM, you won’t be disorientated. The first thing you need to know is that this hotfix will update the site’s servers, the consoles and the clients. This means that you’ll need to update those after the hotfix installation. Rest assured, the hotfix will create 3 updates packages for you during the installation. Start with the higher site in your hierarchy. You can use the update package that will be created for the other site systems or manually rerun this setup on all site systems. I see the update process in 3 distinct phases : Installation, review, component update Step 1 – Installation Download : http://support.microsoft.com/kb/2905002/en-us Technet Deployment guide : http://technet.microsoft.com/en-us/library/jj553405.aspx Once downloaded, extract the installation package to … Read More
SCCM 2012 R2 Application Uninstall Button is Grayed Out
I’ve found a bug in the latest SCCM release. SCCM 2012 R2 application uninstall button is grayed out An application cannot be uninstalled using Software Center when it contains more than one deployment type. I created an application to deploy Acrobat Reader using the msi The application contains 2 deployment type (Install for User) One DT has a requirement for English OS, the other DT is for French OS The installation is successful but it can’t be uninstalled using the Software Center (The uninstall button is grayed out) When a DT is deleted, the application can be uninstalled This scenario has been reproduce with other applications I recreated the same scenario in SCCM RTM version and the uninstall button is available even with 2 DT. I have submitted the bug to Microsoft through the connect portal, I’ll be following on this bug in this post. Stay tuned. Update Nov.18: Microsoft has … Read More
Add Server Requirement using Powershell
Before an installation of SCCM, you need to enable a couple of requirements in sccm 2012 server roles and features. You can add these using the server manager snap-in but since you are a good admin, you know that you can use Powershell ! Here’s the commands I use in the script to enable the required roles before my SCCM installations : Get-Module servermanager Install-WindowsFeature Web-Windows-Auth Install-WindowsFeature Web-ISAPI-Ext Install-WindowsFeature Web-Metabase Install-WindowsFeature Web-WMI Install-WindowsFeature BITS Install-WindowsFeature RDC Install-WindowsFeature NET-Framework-Features Install-WindowsFeature Web-Asp-Net Install-WindowsFeature Web-Asp-Net45 Install-WindowsFeature NET-HTTP-Activation Install-WindowsFeature NET-Non-HTTP-Activ Run it in a PowerShell prompt and get a coffee while the magic happens, you earn it ! You can have more details here. sccm 2012 server roles and features
sccm connect application catalog – Cannot Connect to the Application Server
The application catalog is one of the nice addition to SCCM 2012. It can be tricky to install, there’s numerous posts about the sccm connect application catalog eror but the common one is this one. After installing both roles to your site server, when trying to connect to http://yourserver/applicationcatalog you have the following error : sccm connect application catalog The webserver cannot communicate with the server. This might be a temporary problem. Try Again Later to see if the problem has been corrected. A good starting point is to look at both component status: SMS_PORTALWEB_CONTROL_MANAGER SMS_AWEBSVC_CONTROL_MANAGER I had the following error in SMS_AWEBSVC_CONTROL_MANAGER The WCF is not activated.Solution: Make sure WCF is activated. Pretty simple to fix ! Open server manager and add the WCF Activation feature under .NET Framework 3.5.1 (This is applicable to Windows 2008) Once activated, I reopen the application catalog… Same error ! In some scenarios, such … Read More
SCCM 2012 Reports not Running from the Console
SCCM reports are great way of getting information from SCCM 2012. Any users who has access to run reports can see them locally from SCCM Console on their computer. They can also use the reporting web portal to see them (Usually : http://SccmServerName/reports) Problem Your SCCM Reporting Point is running fine, you can see all reports in the console but SCCM 2012 Reports not running when you : Browse to the Monitoring / Reporting / Reports Right-click any SCCM 2012 report and select Run Running the same report from the web portal is working fine Cause Navigate to the console log file C:\Program Files(X86)\Microsoft Configuration Manager\AdminConsole\AdminUILog\smsadminui.log The following error will be displayed : Microsoft ReportViewer Winforms version 10.0.0.0 or one of its dependencies. The system cannot find the file specified This error means that Report Viewer is not locally installed on the computer. Resolution Close … Read More