Quantcast
Channel: System Center Configuration Manager Team Blog
Viewing all 338 articles
Browse latest View live

Computers upgraded to Windows 7 using OSD might generate a new SMS GUID

$
0
0

[Today's post is provided by Chaohao Xu.]

If Windows hotfix KB974571 is installed on a Windows 7 reference image, then it is highly likely that you would see the following log entries in smsts.log when deploying this image to an existing client. Notice that because the client certificates were not found, the end result is that the client uses a new certificate to register itself, losing its own identity in the process.

Installing SMS client
Clearing existing client configuration.
Cleaning existing client certificates from SMS certificate store
Restoring SMS client identity.
The client certificates were not found. New certificates will be generated.
Successfully restored the client identity.

This behavior is not desired when you refresh Windows using an operating system deployment task sequence. When an OSD Task Sequence is used to refresh a PC, the ConfigMgr 2007 client certificate should be migrated from the old Windows OS to the new Windows OS.

The problem is caused by the self-signed certificates automatically generated by the ConfigMgr 2007 client in mixed mode. If the KB977203 ConfigMgr 2007 client patch was not installed on the existing client when the certificates were generated, then the certificates will have an embedded NULL character in the friendly name as described in KB974571.

If the ConfigMgr 2007 client certificate on the original Windows OS has an embedded NULL character in the friendly name as described in KB974571, and if KB974571 is installed as part of the reference image being deployed by the Task Sequence, then when the new Windows OS is installed, KB974571 will block the ConfigMgr 2007 client certificate with the embedded NULL character in the friendly name from being migrated over. This will cause the above issue.

This can be fixed by installing ConfigMgr hotfix KB977203 to fix the client certificate prior to deploying Windows 7 or simply run ccmcertfix utility on client prior to Windows 7 deployment.

The instruction to fix the client certificate for any existing client is as follows:

  1. Install hotfix KB977203 on site server
  2. A utility called CCMCertFix.exe is placed in the directory
    <ConfigMgr_2007_Install_Directory>\Logs\KB977203
  3. Run CCMCertFix.exe on any existing client to fix the certificate, software distribution can be leveraged for distribution to a large number of clients. Another way is to add this as a step to the Windows 7 deployment task sequence.

The correct way to guarantee any new client has a fixed certificate is to make sure the client patch is installed before the newly installed client registers itself. The instruction detail is as follows:

  1. Install hotfix KB977203 on site server
  2. A ConfigMgr 2007 client patch is placed in the directory
    <ConfigMgr_2007_Install_Directory>\Client\i386\hotfix\KB977203
  3. Go to Client Push Installation Properties and specify the PATCH parameter
    PATCH=\\<SMSSiteServer>\SMS_<SiteCode>\Client\i386\hotfix\KB977203\sccm2007ac-sp2-kb977203-x86.msp
     
  4. The above configuration would make sure that any new clients installed using the client push method would include the client patch from KB977203 before the client registers itself.

After the existing client has the certificate issue fixed by hotfix KB977203, the Windows 7 deployment would successfully restore the client identity as shown by the following log entries in smsts.log.

Installing SMS client
Clearing existing client configuration
Cleaning existing client certificates from SMS certificate store
Restoring SMS client identity
Successfully restored SMS certificate store
Successfully restored the client identity

--Chaohao Xu

This posting is provided "AS IS" with no warranties, and confers no rights.


Announcement: Microsoft Virtualization for VMware Professionals – Free Online Classes – March 29 – 31

$
0
0

[We are posting information for virtualization training that may be interesting to our blog audience]

Just one week after Microsoft Management Summit 2011 (MMS), Microsoft Learning will be hosting an exclusive three-day Jump Start class specially tailored for VMware and Microsoft virtualization technology pros.  Registration for "Microsoft Virtualization for VMware Professionals" is open now and will be delivered as a FREE online class on March 29-31, 2010 from 10:00am-4:00pm PDT.

What's the high-level overview?

  • This cutting edge course will featureexpert instruction and real-world demonstrations of Hyper-V and brand newreleases from System Center Virtual Machine Manager 2012 Beta (many of which will be announced just one week earlier at MMS). Register Now!
  • Day 1 will focus on "Platform" (Hyper-V, virtualization architecture, high availability & clustering)
    • 10:00am - 10:30pm PDT: Virtualization 360 Overview
    • 10:30am - 12:00pm: Microsoft Hyper-V Deployment Options & Architecture
    • 1:00pm - 2:00pm: Differentiating Microsoft and VMware (terminology, etc.)
    • 2:00pm - 4:00pm: High Availability & Clustering
  • Day 2 will focus on "Management" (System Center Suite, SCVMM 2012 Beta, Opalis, Private Cloud solutions)
    • 10:00am - 11:00pm PDT: System Center Suite Overview w/ focus on DPM
    • 11:00am - 12:00pm: Virtual Machine Manager 2012 | Part 1
    • 1:00pm - 1:30pm: Virtual Machine Manager 2012 | Part 2
    • 1:30pm - 2:30pm: Automation with System Center Opalis & PowerShell
    • 2:30pm - 4:00pm: Private Cloud Solutions, Architecture & VMM SSP 2.0
  • Day 3 will focus on "VDI" (VDI Infrastructure/architecture, v-Alliance, application delivery via VDI)
    • 10:00am - 11:00pm PDT: Virtual Desktop Infrastructure (VDI) Architecture | Part 1
    • 11:00am - 12:00pm: Virtual Desktop Infrastructure (VDI) Architecture | Part 2
    • 1:00pm - 2:30pm: v-Alliance Solution Overview
    • 2:30pm - 4:00pm: Application Delivery for VDI
  • Every section will be team-taught by two of the most respected authorities on virtualization technologies: Microsoft Technical Evangelist Symon Perriman and leading Hyper-V, VMware, and XEN infrastructure consultant, Corey Hynes

Who is the target audience for this training?

Suggested prerequisite skills include real-world experience with Windows Server 2008 R2, virtualization and datacenter management. The course is tailored to these types of roles:

  • IT Professional
  • IT Decision Maker
  • Network Administrators & Architects
  • Storage/Infrastructure Administrators & Architects

 How do I to register and learn more about this great training opportunity?

  • Register: Visit the Registration Page and sign up for all three sessions
  • Blog: Learn more from the Microsoft Learning Blog
  • Twitter: Here are a few posts you can retweet:
    • Mar. 29-31 "Microsoft #Virtualization for VMware Pros" @SymonPerriman Corey Hynes http://bit.ly/JS-Hyper-V @MSLearning #Hyper-V
    • @SysCtrOpalis Mar. 29-31 "Microsoft #Virtualization for VMware Pros" @SymonPerriman Corey Hynes http://bit.ly/JS-Hyper-V #Hyper-V
    • Learn all the cool new features in Hyper-V & System Center 2012! SCVMM, Self-Service Portal 2.0, http://bit.ly/JS-Hyper-V #Hyper-V #Opalis

What is a "Jump Start" course?
A "Jump Start" course is "team-taught" by two expert instructors in an engaging radio talk show style format.  The idea is to deliver readiness training on strategic and emerging technologies that drive awareness at scale before Microsoft Learning develops mainstream Microsoft Official Courses (MOC) that map to certifications.  All sessions are professionally recorded and distributed through MS Showcase, Channel 9, Zune Marketplace and iTunes for broader reach.

Please join us for this fantastic event!

 -- Symon Perriman
Technical Evangelist
Microsoft System Center

This posting is provided "AS IS" with no warranties, and confers no rights.

 

Configuration Manager Support Announcements for February 2011

$
0
0

[Today's post is provided by Harini Muralidharan]

We are announcing support changes for the following releases.  Please look for these changes to be reflected in the Supported Configuration pages within a few months.

Configuration Manager 2007 R3 supports Microsoft SQL Server 2008 R2, Microsoft SQL Server 2008 SP2 and Microsoft SQL Server 2005 SP4

System Center Configuration Manager 2007 R3 now supports Microsoft SQL Server 2008 R2, Microsoft SQL Server 2008 SP2 and Microsoft SQL Server 2005 SP4 as a Configuration Manager 2007 site database. System Center Configuration Manager 2007 R3 also supports Microsoft SQL Server 2008 R2, Microsoft SQL Server 2008 SP2 and Microsoft SQL Server 2005 SP4 Reporting Services.

No software updates are required.

Configuration Manager 2007 SP2 supports Microsoft SQL Server 2005 SP4

System Center Configuration Manager 2007 SP2 now supports Microsoft SQL Server 2005 SP4 as a Configuration Manager 2007 site database. System Center Configuration Manager 2007 SP2 also supports Microsoft SQL Server 2005 SP4 Reporting Services.

No software updates are required.

--Harini Muralidharan

This posting is provided "AS IS" with no warranties, and confers no rights.

 

Announcement: System Center Configuration Manager 2012 Beta 2 has been released!

$
0
0

[Today's post is from Ken Pan]

I am very pleased to inform you that Brad Anderson (Corporate Vice President, Management & Security Division) has just announced the public availability of System Center Configuration Manager 2012 Beta 2 at the day 2 keynote for the Microsoft Management Summit 2011.  This is a huge milestone for the Configuration Manager team.  We started our journey toward Configuration Manager 2012 three years ago with a Billg Thinkweek paper around what "User-Centric Management" really meant, and how we needed to completely rethink the age old problem of, "users X need application Y" as a start.   

Now, we're announcing the feature complete System Center Configuration Manager 2012 Beta 2 that customers can download and evaluate in their labs today and for our TAP customers, start their production deployments. Read the official announcement here.  Below is a list of top-level features that were completed since the release of Beta 1 in May 2010: 

  • Application model - uninstall, supersedence, enhanced detection methods
  • Compliance settings - create settings from browse experience, user targeting of configuration baselines, in-console monitoring, conflict reporting
  • Software updates - in-console monitoring completed, superseded software update support, automatic deployment of software updates on a schedule
  • Power management - exclude virtual machines, allow end-user to "opt out"
  • Exchange Server connector for mobile devices
  • Collections - new include/exclude rules, organizational folders, incremental evaluation
  • Console - the ribbon is here!
  • Role-based administration - collections as a means to limit an administrative user
  • Boundary groups
  • More migrated objects (App-V packages, boundaries, metering, Asset Intelligence, inventory MOF files)
  • New UI for MOF editing
  • Hierarchy - replication monitoring

From a technology perspective, this will be the most significant release of Configuration Manager in its 16 year history.  We've rewritten our core software distribution around a set of user-centric design principles, redesigned our hierarchy model to meet today's and tomorrow's needs, and redesigned both our administrative and end-user experiences.  The most exciting things about building Configuration Manager 2012 have been the customer learnings.  Since our Beta 1 release last May, we've been on the road helping our TAP customers deploy and evaluate Beta 1, we've taken lots of feedback about both quality and functionality, and we have incorporated a lot of those learnings into the Beta 2 release. 

 I would like to thank all our Beta 1 participants and invite all our customers to download and evaluate Beta 2.

You can access more information and download the beta by registering for the Configuration Manager 2012 Open Beta Program on Connect https://connect.microsoft.com/ConfigurationManagervnext/program4346 .

The beta can also be downloaded from the Microsoft Download Center http://www.microsoft.com/downloads/en/details.aspx?FamilyID=4da60258-5e61-4d16-8fae-d3c9fccf56dc&utm_source=feedburner&utm_medium=twitter&utm_campaign=Feed%3A+MicrosoftDownloadCenter+%28Microsoft+Download+Center%29#tm

You will find the documentation for Configuration Manager 2012 at http://technet.microsoft.com/en-us/library/gg682041.aspx.

 Thanks
--Ken Pan
Product Unit Manager
Configuration Manager Product Group

This posting is provided "AS IS" with no warranties, and confers no rights.

 

Configuration Manager Support Announcements for March 2011

$
0
0

[Today's post comes from Harini Muralidharan]

We are announcing support changes for the following releases.  Please look for these changes to be reflected in the Supported Configuration pages within a few months.

Configuration Manager 2007 SP2, R2 and R3 supports Windows 7 SP1 and Windows Server 2008 R2 SP1:

System Center Configuration Manager 2007 SP2, R2 and R3 now supports the Windows 7 SP1 and Windows Server 2008 R2 SP1 operating systems for client installation.  The Configuration Manager console and branch distribution point are supported on these platforms. Windows Server 2008 R2 SP1 is supported for all core and feature-specific site system roles.

The following software update is required to add Windows 7 SP1 and Windows Server 2008 R2 SP1 to the Supported Platforms list:

  • KB 2489044 - Update rollup for System Center Configuration Manager 2007 SP2 to add support for Windows Server 2008 R2 SP1 and Windows 7 SP1 clients
  • KB 977203 - User state migration is unsuccessful on a SCCM 2007 SP1 client or on a SCCM 2007 SP2 client

Microsoft Application Virtualization 4.6 SP1 is now supported on Configuration Manager 2007 R2 with Configuration Manager 2007 SP2

System Center Configuration Manager 2007 R2 with System Center Configuration Manager SP2 now supports Microsoft Application Virtualization (App-V) 4.6 SP1 Desktop Client and Client for Remote Desktop Services. This client release enables support for Windows 7 SP1 and Windows Server 2008 R2 SP1.

The following are the limitations and workaround to import App-V packages using Configuration Manager.

Configuration Manager fails to import App-V packages when there is more than one XML in the package folder. App-V Sequencer 4.6 SP1 creates the file Report.xml when creating an App-V package. Configuration Manager expects to find only one xml file in the package folder and will fail when it identifies more than one XML file in the folder. To work around this problem delete the file report.xml manually from the package folder before you import the App-V package.

No software updates are required.

Configuration Manager 2007  SP2, R2 and R3 supports WinPE 3.1

System Center Configuration Manager SP2, R2 and R3 now supports WinPE 3.1 as the boot image used with operating system deployment. WinPE 3.1 is shipped with Windows 7 SP1 as a Windows Automated Installation Kit (WAIK) supplement.

Steps to upgrade to WinPE 3.1 within the existing Configuration Manager Environment and known limitations with Win PE 3.1 can be found here http://blogs.technet.com/b/configmgrteam/archive/2011/03/24/configuration-manager-2007-sp2-and-windows-pe-3-1.aspx 

No software updates are required.

--Harini Muralidharan

This posting is provided "AS IS" with no warranties, and confers no rights.

 

Configuration Manager 2007 SP2 and Windows PE 3.1

$
0
0

[Today's post is provided by Chaohao Xu.]

The Windows Automated Installation Kit (AIK) for Windows 7 SP1 is released and can be downloaded from the following location:
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=0aee2b4b-494b-4adc-b174-33bc62f02c5d

You don't have to upgrade to Windows PE 3.1 to deploy Windows 7 SP1 and Windows Server 2008 R2 SP1. But if you want to upgrade to Windows PE 3.1, this post provides information about how you can do this with your existing Configuration Manager 2007 SP2 site. We also list some known issues that you might encounter when you use Configuration Manager operating system deployment with Windows PE 3.1.

Upgrade Steps:

  1. Use the following instructions to upgrade to Windows PE 3.1: from http://go.microsoft.com/fwlink/?LinkId=139690.
  2. Add a boot image based on Windows PE 3.1:
    1. In the Configuration Manager console, navigate to Computer Management -> Operating System Deployment -> Boot Images -> Add Boot Images.
    2. Specify the UNC path for the Windows PE 3.1 .wim file and select the image from the WIM file.
    3. Use the wizard to create the x86 and x64 boot images.
  3. Update the source of the default boot image to Windows PE 3.1 by running the ExportDefaultBootImage() WMI method:
    1. WMI Namespace is root\sms\site_<site_code>
    2. WMI Object is SMS_BootImagePackage
    3. WMI Method is ExportDefaultBootImage
    4. Parameters:
      • Architecture (x86 or x64)
      • ExportImagePath (\\<site _server>\sms_<site_code>\OSD\boot\i386 or \\site_server>\sms_<site_code>\OSD\boot\x64)
      • ImageIndex (1)
  4. Update the distribution points for the default boot images.

Known Issues:

  1. Configuration Manager does not support using Windows PE 3.0 as a boot image after Windows PE 3.1 is upgraded. This means any boot images, including the default boot images, that are based on Windows PE 3.0 cannot be updated in Admin UI anymore. In this scenario, you will see the following error because the Windows PE 3.0 images are not compatible with the optional component (OC) and language packs from Windows PE 3.1:
     

    To resolve this problem, update all the boot images to use Windows PE 3.1.

  2. Task sequence fails when trying to apply drivers. You might see the following errors logged if task sequence fails to apply drivers.

    Failed to find the certificate context.. Cannot find object or property. (Error: 80092004; Source: Windows)
    Failed to initialize the online driver catlog.  Code 0x80092004
    Failed to auto provision drivers.  Code 0x80092004
    Failed to run the action: Apply Device Drivers. Cannot find object or property. (Error: 80092004; Source: Windows)

    This problem is caused by the Configuration Manager 2007 client generating an embedded NULL character into the friendly name for the certificate that is related to the driver apply. To resolve this issue, see KB977203 and run CCMCertFix.exe either before you run the task sequence or add it as a step in the task sequence.

--Chaohao Xu

This posting is provided "AS IS" with no warranties, and confers no rights.

Active Directory Forest Discovery and Publishing in Configuration Manager 2012 Beta 2

$
0
0

[Randy Xu provides our first Config Manager 2012 beta 2 post]

Background

In many large organizations, network configuration and Active Directory Domain Services are managed separately from Configuration Manager. Changes to the network topology or AD  structure must be communicated between these teams to ensure Configuration Manager boundary settings are accurate.  Up to date boundary information results in efficient application and software update deployments to all managed client computers.  This is especially critical for roaming scenarios, which require boundary information to always be available and up to date.  Now in Configuration Manager 2012 Beta 2, Active Directory Forest Discovery and publishing improvements enable organizations to centrally manage distribution of key site system roles across forests without the requirements to deploy additional sites.

Forest Discovery and Publishing Overview

To improve manageability of an ever-changing network environment, Active Directory Forest Discovery is added in Configuration Manager 2012 Beta 2. With it, Configuration Manager can discover Active Directory forests, their domains, AD Sites and IP subnets. Because domain users (or domain computer accounts) have permission to query forest relationships, Active Directory Forest Discovery can return information about other forests and their trust direction. The system can programmatically connect to all the forests and build a complete mapping of the corporate environment. It can also cross forest boundaries using specific credentials for each forest regardless of the trust type. The information obtained through Active Directory Forest Discovery can be directly exported as boundaries or boundary groups. Changes to discovered data are updated dynamically and aged out from the database if no longer present in Active Directory Domain Services. The discovered data is also used when clients request a management point or distribution point to ensure they receive the best possible site system. 

Credentials specified for each Active Directory forest are used for both discovery and publishing and enable Configuration Manager 2012 sites to publish Configuration Manager site information in remote trusted or untrusted forests. Publishing stores information such as site system locations and capabilities, boundaries, and security information required by client computers to establish trusted connections with site systems and information such as the client's trust relationship with the forest, and the management point's communication mode (HTTPS/HTTP) and the network information (boundaries) that are used to locate the most appropriate management point or distribution point to communicate with. This enables client computers to more readily locate servers in a trusted forest to ensure user targeted applications.

How to use AD Forest Discovery 

  1.  Enable Forest Discovery

    Active Directory Forest Discovery is a new discovery method located in the Administration workspace of the Configuration Manager console.  It can be enabled on the central administration site and primary sites.  It is not supported on secondary sites.

     

    To enable Active Directory Forest Discovery, open the Active Directory Forest Discovery method properties dialog, and enable the method by checking "Enable Active Directory Forest Discovery".  Active Directory Forest Discovery discovers AD Sites and IP Subnets from the forests, so there are two more flexible options asking whether you want to create the AD Site or IP Subnet boundaries automatically based on the discovery results. Discovery can be scheduled by hour/day/week. Discovery will automatically create the boundaries, but it will still be necessary for you to add the boundaries to a boundary group and to associate them with a site system to ensure content is available to your clients or the boundaries are used for site assignment. 

     

    Active Directory Forest Discovery can be run on demand by selecting the "Run full discovery now" action from the ribbon or a right-click menu.

     

  2. Monitor Forest Discovery Running Status

    Active Directory Forest Discovery progress can be monitored by viewing forest discovery log located in (SMS Installation Directory)\Logs\ADForestDisc.log or by viewing Active Directory Forest Discovery component status messages.  In the Configuration Manager console, click Monitoring, expand System Status, click Component Status, select SMS_AD_Forest_Discovery_Manager, and click Show Messages to see status messages for this component.

  3. Check Forest Discovery Results and Leverage Them to Create Boundary Groups

    After Active Directory Forest Discovery completes, discovered information can be viewed in the Administration workspace by selecting Active Directory Forests.  Each discovered forest's information and status is listed.  The details pane shows the same information and status.  By default, the Domains tab lists all discovered domains in this forest. If you right-click on one of the available column headers, you can select Functional Level to add this information to the display. The Active Directory Sites tab lists all discovered AD Sites in this forest. The IP Subnets tab lists all discovered IP Subnets.  IP Subnets are associated with each AD Site and retained in the database. Discovery Status includes discovery status and publishing status.  

    From the Active Directory Sites tab, you can select one or more AD Sites and IP Subnets from the detail pane list.  Right-click or use the ribbon actions to add these items to a new or existing boundary group. 

     

  4. Discover Additional Forest Resources

    Forests with a trust relationship to the forest containing the site used to perform Active Directory Forest Discovery will be discovered automatically by using the default settings. To use Active Directory Forest Discovery for forests that do not have any trust relationship to the forest containing the site used to perform Active Directory Forest Discovery, add a new Active Directory forest and specify an account that has Read permissions in the forest. 

      

  5. Publish Site Information to the Forest

    Forest publishing saves site and site system role information in Active Directory Domain Services.  Forest publishing requires that the target forest AD Schema is extended with Configuration Manager schema extensions and the Active Directory Forest Account has Full Control permissions to the System Container in the Active Directory for that forest.  You can enable forest publishing from the Properties of the forest in Active Directory Forests, by using the "Publish sites to the Active Directory forest" option.  

    The Publishing Status shown in the Active Directory Forests list view is a status summary of all sites in the hierarchy.  The status will show 'Failed' if any sites in the hierarchy failed to publish to the forest.  To view published site information, open Active Directory Users and Computers, connect to a domain controller in the forest, and go to View-> Advanced Features. Site and management point information is published under the System-> System Management node.

Troubleshooting Guide

To troubleshoot problems with forest publishing, check the component status messages for SMS_Hierarchy_Manager and  SMS_Site_Component_Manager on the site performing the publishing.  Each site will publish its information into any forests enabled for publishing.  The hman.log file and sitecomp.log file for each site may also indicate why publishing failed.  Here are the typical reasons for publishing failures.

  1. The forest's AD Schema is not extended. To remedy this, run extadsch.exe from the Configuration Manager 2012 source media to extend the schema while you are logged in with an account that has Schema Administrator permissions to the forest.
  2. The site server's computer account has insufficient permissions to write into the System Container of the target forest AD. To remedy this, give the site server's computer account Full Control to System Container and all child objects.
  3. The specific account used for publishing has insufficient permissions to write into the System Container of the target forest AD. To remedy this, give the specific account Full Control to the System Container and all child objects.
  4. Publishing using alternate credentials (a specific account as the Active Directory Forest Account) will only work for a single site. In Beta 2, there is a functional limitation that prevents the account set in one site from being used by another site. To remedy this, connect the Configuration Manager console to the site that cannot publish its information and select the Administration workspace. In the Active Directory Forests node, modify the properties of the Active Directory forest and set the account again. In the Discovery Methods node, run Active Directory Forest Discovery to trigger publishing from that site.
  5. Publishing status is a summary of all sites in hierarchy. When publishing status indicates "Failed", verify that each site, including the central administration site, primary sites, and secondary sites, have completed publishing by viewing the sites status messages or log files.

For more information about System Center Configuration Manager 2012, see the Configuration Manager 2012 Documentation Library on TechNet.

 --Randy Xu

This posting is provided "AS IS" with no warranties, and confers no rights.

 

Announcement: Configuration Manager Documentation Library Update for April

$
0
0

[Today's post is from the Configuration Manager Writing Team

The Configuration Manager 2007 documentation library (http://technet.microsoft.com/en-us/library/bb680651.aspx) has been updated on the Web with updates for April. Topics that were updated have Updated: April 1, 2011 at the top of the topic.

You will see updates to the supported configuration information, including support for SQL Server 2005 SP4, Windows 7 SP1, and Windows Server 2008 R2 SP1, and a number of updates made as a result of customer feedback.

We've also created a new topic, Configuration Manager 2007 Quizzes, which provides information and links to the downloadable quizzes and new web-based quizzes.

Although we can't promise to make the docs perfect for everybody, we are committed to continual improvement.  So, keep that feedback coming, and feel free to contact us about anything related to the documentation by using our usual address of SMSDocs@Microsoft.com.

And if you're interested in learning more about Configuration Manager 2012 (Beta 2 announced last month) be sure to check out the new Configuration Manager 2012 Documentation Library.

  

What's New in the Configuration Manager 2007 Documentation Library for April 2011

The following information lists the topics that contain significant changes since the January 2011 update.

Configuration Manager 2007 SP2 Supported Configurations

- Updated to add support statements for SQL Server 2005 SP4, and support for Windows 7 SP1 and Windows Server 2008 R2 SP1.

Configuration Manager 2007 R2 Supported Configurations

- Updated to add a support statement for the Application Virtualization 4.6 SP1 Desktop Client for the Application Virtualization Client for Remote Desktop Services.

Setup Prerequisite Checks

- Updated to include a link to the installation files for Microsoft Core XML Services (MSXML) version 6.0.

What's New in Configuration Manager 2007 R3

- Updated to clarify that Configuration Manager 2007 R3 includes all the features from Configuration Manager 2007 R2.

Best Practices for Software Updates

- Updated with the best practice that fewer than 500 software updates are added to a single software update deployment. This information has also been added to About Software Update Deployments and About Software Update Deployment Packages.

About Configuration Manager Client Installation Properties

- Updated to the /config:<configuration file> installation property.

Prerequisites for SQL Reporting Services

- Updated with information about using SQL Reporting Services using SQL Server versions later than SQL Server 2005.  This information is also in How to Configure Microsoft SQL Server for SQL Reporting Services.

Registry Key Object Properties: General Tab

- Updated to include information about how to enter values for desired configuration management in the One Of field. This information is also in Setting Properties: Validation Tab and Object Properties: Validation Tab.

How to Configure the Client Policy Polling Interval for a Specific Collection

- Updated to clarify that if a client is a member of multiple collections with different policy polling intervals, it will use the shortest configured polling interval or the site-wide policy polling interval if this is shorter.

How to Configure the Temporary Program Download Folder (Cache) for Configuration Manager Clients

- Updated with a link to Frequently Asked Questions for Software Distribution that contains more information about the temporary program download folder.

Example Scenario for Implementing Software Metering

- Updated to clarify that software metering information is collected only after the software metering rule has been created and activated.

Installing International Client Packs (ICPs)

- Updated to clarify that the Configuration Manager client must be reinstalled to upgrade an international client pack installation. This information is also clarified in Designing the International Client Pack (ICP) Deployment.

How to Manage Windows Embedded Write Filters Using Configuration Manager 2007

- Updated to include revised command lines for running the script that disables Windows Embedded write filters.

 

-- The Configuration Manager Writing Team

This posting is provided "AS IS" with no warranties and confers no rights.

 


Client Health in Configuration Manager 2012 Beta 2

$
0
0

[Today’s post is provided by Abraham Wang]

It’s often the case that many customer-reported issues with a Configuration Manager feature are because the Configuration Manager client itself is not working, rather than a problem with the specific feature. However, it’s not always easy for administrators to know that this is the root cause and be able to answer the following questions:

  • How many clients are healthy in my hierarchy?
  • How many clients are inactive in my hierarchy because they have been powered off for a long time or because the Configuration Manager client is uninstalled?
  • What is the main cause of unhealthy clients in my hierarchy?

These questions are very important for Configuration Manager administrators. However, in Configuration Manager 2007 and previous versions, it’s not easy to find the answers to these questions. Configuration Manager 2012 addresses this problem with the improved Client Health feature.

Client Health Overview

The Configuration Manager 2012 client runs a scheduled task to evaluate its client health status (by default at mid night) and sends evaluation result to the site server by using state message if there is any change in the evaluation result. If state messages fail to send, FSP (Fallback status point) will be used to deliver the evaluation results. So it is a good idea to deploy FSP in the hierarchy. Otherwise some evaluation results may not be received by site server. The site server summarizes the client health evaluation results and the client activities, and displays these in the Configuration Manager console.

Client Health Data in the Configuration Manager Console

You’ll see the client status data (client health and client activity) in the Monitoring workspace when you click the Client Status node, as shown in the following picture.

  

Note: This is prerelease UI and is subject to change.

When you click the Client Status node, the results pane displays some statistics and the Recent Alerts section. The statistics have a graphical display of how many clients are healthy, unhealthy or unknown; active or inactive. The Recent Alerts show the alerts that have been generated as a result of meeting defined thresholds for client health and client activity.

If you click different areas of the pie charts, this creates temporary collections for selected areas and the console automatically changes to the Assets and Compliance workspace. For example, if you click the red area in the Client Health pie chart (clients that failed the Client Health checks), this creates a temporary collection for these unhealthy clients that is automatically selected, as shown in the following picture.

 

In the results pane, when you select a computer, you will see three tabs available in the details pane: Summary, Client Activity Detail and Client Health Detail. The next picture shows example data for the Client Health Detail tab where the computer failed the client health evaluation rule “Verify/Remediate client and client prerequisites installation.” You can use this information as a starting point for more detailed trouble-shooting on the client. In our example, this might involve checking the ccmsetup.log file for errors to help identify the root cause of the problem.

In addition to this information in the Configuration Manager Console, you can also use the Client Health reports. After you have installed and configured a reporting services point role, the Client Health reports are located in the “Client Health” path, as shown in the following picture.

 

 

How to Configure Client Health: Client Status Settings

In the Configuration Manager console, in the Monitoring workspace, click the Client Status node. On the ribbon, in the Home tab, you’ll see three buttons for Client Health, as shown in the following picture.

  

When you click Client Status Settings, you see the Client Status Settings Properties dialog box, as shown in the next picture.

The General tab contains the thresholds settings, such as “Client policy requests” and “Heartbeat discovery”. These thresholds determine if the client is active. For example, when the hardware inventory threshold is set to 7 days and the site server has not received hardware inventory data from a client for more than 7 days, the threshold is reached and the client is considered inactive for hardware inventory. When a client is inactive for all the listed activities, it is considered an inactive client.

The Inactive Clients tab allows you to enable the option for the site server to retrieve the LastLogonTimeStamp data from Active Directory Domain Services. This information indicates whether the computer is still active in Active Directory Domain Services.

 

 

 

How to Configure Client Health: Refresh Client Status and Schedule Client Status Update

Each primary site server runs a SQL stored procedure (CH_UpdateAll) to summarize the client health and client activity information.  By default, this runs once a day. The charts in the Client Status node use this summarized information, which means that the charts are not real-time and by default, they have up to a day’s delay.

To see the latest information, click the Refresh Client Status button, which runs the stored procedure. When this finishes, the charts are refreshed with the latest summarized data. You can also configure how often the stored procedure runs by clicking the Schedule Client Status Update button. However, we recommend that you use the default setting for the schedule because the site server performance decreases when the procedure runs too frequently.

How to Configure Client Health: Create Alerts

The Client Health feature is integrated with the alerts that you see in the Configuration Manager console. To configure alerts for Client Health, follow these steps:

1. In the Assets and Compliance workspace, click Device Collections. Right-click the collection for which you want to create alerts, and then click Properties.

2. Click the Alerts tab. Select and configure the options for the client health and activity alerts, and then click OK. An example configuration is shown in the following picture.

 

After you have configured the alerts for a collection, the alerts that are generated display in the Alerts node in the Monitoring workspace. You will also see the alerts in the Client Status node if the alerts are triggered, as shown in the following picture.

 

Note that the alerts are based on data from the hierarchy and not just the site. So when an alert is active, it means that the threshold is reached for hierarchy. It’s possible that the threshold is not reached for the primary site that you are currently connected to.

Client Health: Client Component

The Client Health evaluation engine is an executable file named ccmeval.exe, which is installed with the Configuration Manager client and runs on computers. It does not run on mobile devices. When the Configuration Manager client is installed, the install process creates a scheduled task named “Configuration Manager Health Evaluation”. This task runs ccmeval.exe at a time between 12:00 AM and 1:00 AM.

 

When ccmeval.exe runs, it loads a configuration file named ccmeval.xml. This file contains the Client Health evaluation rules. You can open the file to read the rules but it’s not supported to change this file. If you do so, the evaluation might fail or the site server might reject the evaluation results.

If the computer is powered off or in sleep mode when the scheduled Configuration manager Health Evaluator task is due to run, it automatically runs as soon as it can – for example, when the operating system is loaded or brought out of sleep mode.

Conclusion

The Client Health feature in Configuration Manager 2012 offers some exciting improvements over previous versions, which can help to keep your Configuration Manager hierarchy running smoothly. You can quickly see the Client Health data in the Configuration Manager console by using the pie charts, temporary collections, and alerts. You can also use the reports for more detailed information.

To configure Client Health, configure the Client Status Settings to define the thresholds for client health and client activity. Then configure alerts for the collections. There is nothing to configure on the client; this is done automatically by Configuration Manager when the client is installed.

--Abraham Wang

This posting is provided "AS IS" with no warranties, and confers no rights.

 

Announcement: Update your System Center Online Authentication Certificate for Asset Intelligence

$
0
0

[Yvette O’Meally has provided today’s post]

When the Configuration Manager 2007 Asset Intelligence synchronization point first connects to System Center Online, it presents the System Center online authentication certificate to enroll in the service.  This is a public certificate that is used by all Configuration Manager 2007 installations.  As part of the enrollment process, the service returns a certificate that is specific to that Asset Intelligence synchronization point. This specific certificate is then used for subsequent activity when Asset Intelligence synchronizes with System Center online, for example, when it uploads and downloads software titles.

The public certificate for System Center online authentication was distributed by Microsoft for Configuration Manager 2007 Service Pack 1 and it was automatically installed and configured with Configuration Manager 2007 Service Pack 2. In both cases, this certificate has a validity period of 3 years and an expiration date of 4/25/2011.  The expiry date of the specific certificate is based on when it was issued. It has a validity period of 1 year. The validity dates can be viewed in the certificate properties using Certificates MMC Snap-in.

Because the public certificate for System Center online authentication has now expired, it will be rejected by System Center online.  The specific per-installation certificates for customers will expire based on when the Asset Intelligence synchronization point first connected to System Center online.  Because you cannot automatically renew the specific per-installation certificate when the public certificate for System Center online authentication has expired, you must take manual steps to renew your certificate before it expires. If you do not renew your certificate and it expires, you will no longer be able to synchronize with System Center online.

If both the public certificate and specific certificate have expired you will see the following entries in the AIUpdateSvc.log when the Asset Intelligence synchronization point attempts to renew the specific per-installation certificate.

Asset Intelligence Catalog Sync Service Warning: 0 : Tue, 26 Apr 2011 04:51:58 GMT:WebException trying to enroll: Status = ProtocolError
Asset Intelligence Catalog Sync Service Error: 0 : Tue, 26 Apr 2011 04:51:58 GMT:Exception attempting sync - The request failed with HTTP status 403: Forbidden.

 You may also see a 'Connection Failed - bad certificate' error on the Asset Intelligence home page in the Configuration Manager console as shown below.

To renew your certificates for Asset Intelligence, you must first obtain an updated public certificate for System Center online authentication. When this updated certificate is installed, your specific certificate will automatically renew.

How to Update the Certificates for Asset Intelligence

  • Configuration Manager 2007 Service Pack 2: Install hotfix KB2483225. This hotfix installs the updated public certificate for System Center online authentication and no further action is required. As part of the hotfix installation, the updated certificate is configured for the Asset Intelligence synchronization point and your specific certificate will be automatically renewed.  For more information about this hotfix, see http://support.microsoft.com/kb/2483225/en-us.
  • Configuration Manager Service Pack 1: Obtain a certificate file and manually configure the Asset Intelligence synchronization point to use the updated public certificate for System Center online authentication. Use the following steps:
    1. Email ai-cert@microsoft.com to request a certificate file that contains the updated public certificate for System Center online authentication.  Please note that this alias is for certificate distribution only and not for support questions.
    2. Store the certificate file in a location that is accessible to the site server.
    3. In the Configuration Manager console, navigate to System Center Configuration Manager / Site Database (<site code> - <site name>) / Site Settings / Site Systems.
    4. Click the Asset Intelligence Synchronization point site system computer name.
    5. Select the Asset Intelligence synchronization point, and click Properties.
    6. On the General tab of the Asset Intelligence Synchronization Point Properties, specify the path to the new System Center Online authentication certificate (.pfx) file, and click OK.

 For additional information about the Asset Intelligence synchronization point, see the following topic in the Configuration Manager 2007 Documentation Library: About the Asset Intelligence Synchronization Point.

 -- Yvette O'Meally

This posting is provided "AS IS" with no warranties and confers no rights.

Announcement: Configuration Manager Documentation Library Update for May 2011

$
0
0

[Today's post is from the Configuration Manager Writing Team]

The Configuration Manager 2007 documentation library and the Configuration Manager 2012 documentation library have been updated on the web and the latest content has Updated: May 1, 2011 at the top of the topic.

This month’s updates incorporate customer feedback for Configuration Manager 2007, and some new information (and updates) for the prerelease version of Configuration Manager 2012. 

We will continue to add more information for Configuration Manager 2012 as we get that information from the product group and in response to customer feedback.  At the moment, some topics are published without any content to let you know that they are planned.  We also monitor page hits and search results to help us plan when to publish the information.  To help you find the right information, use the Configuration Manager 2012 search portal.

Note that we are writing for the released product, rather than for any pre-release version, such as Beta 2.  As such, there might be some discrepancies with the pre-release version that you are testing and the documentation.

We value customer feedback and try to incorporate it when possible.  Although we can’t promise to make the docs perfect for everybody, we are committed to continual improvement.  So, keep that feedback coming, and feel free to contact us about anything related to the documentation by using our usual address of SMSDocs@Microsoft.com

  

What's New in the Configuration Manager 2007 Documentation Library for May 2011

 The following information lists the topics that contain significant changes since the April 2011 update.

How to Configure the WSUS Web Site to Use SSL

- Updated to clarify that the site must be configured to ignore client certificates.

How to Set Address Schedules

- Updated to clarify that the schedule applies to the site that is sending data and not the destination site. This information is also added to the Sender Address Properties: Schedule Tab.

Computer Client Agent: BITS Tab

- Updated to clarify that when you configure the throttling window start and end time to be the same, BITS throttling is always on.

How to Create a Fallback Status Point in Configuration Manager

- Updated to correct the log file locations. 

 

What's New in the Configuration Manager 2012 Documentation Library for May 2011

The following information lists the topics that contain significant changes since the initial March 2011 publication.

Configuring Software Updates in Configuration Manager 2012

- Updated with more information and restructured to accommodate different hierarchy scenarios.

Configure Sites and the Hierarchy for Configuration Manager 2012

- Now contains procedures for configuring role-based administration. Before you use these procedures, read the corresponding planning topic: Planning for Security in Configuration Manager 2012

How to Create Windows Configuration Items for Compliance Settings in Configuration Manager 2012

- New topic with procedures to create configuration items for Windows clients.

How to Create Configuration Baselines for Compliance Settings in Configuration Manager 2012

- Now contains information about how to create a configuration baseline and configure the new purpose option and use the new change revision option.

How to Enroll Mobile Device Clients in Configuration Manager 2012

- Now contains the steps to enroll mobile devices by using the two new site system roles and PKI certificates.

How to Configure Client Settings in Configuration Manager 2012

- Updated with clarifications for configuring custom client settings for when you want different settings for some computers or users.

About Client Settings in Configuration Manager 2012

- Updated for several settings, such as the Computer Agent settings Application Catalog, Install permissions, Suspend Bitlocker PIN, and Agent extensions manage the deployment of applications and software updates.

Frequently Asked Questions for Configuration Manager 2012

- Updated to include the following questions:

  • Are there new Active Directory schema extensions for Configuration Manager 2012?
  • Where do I configure the Network Access Account?
  • Does Configuration Manager 2012 support the same client installation methods as Configuration Manager 2007?
  • I want to move my Intel AMT-based computers that I provisioned with Configuration Manager 2007 to Configuration Manager 2012. Can I use the same Active Directory security group, OU, and web server certificate template?
  • How do I re-enroll mobile devices in Configuration Manager?
  • What action must I take if I no longer want a mobile device enrolled in Configuration Manager?

How to Provision and Configure AMT-Based Computers in Configuration Manager 2012

- Now contains the steps to provision and configure AMT-based computers, including preparing Active Directory Domain Services, the PKI certificates, the two site system roles, and the out of band management component.

Example Scenario for Implementing Out of Band Management in Configuration Manager 2012

- Now contains suggested step-by-step instructions for how you might deploy Out of Band Management for AMT-based computers, by using a three-phased approach.

How to Manage AMT-based Computers Out of Band in Configuration Manager 2012

- Now contains procedures for managing AMT-based computers out of band by running the Out of Band Management console, powering off computers, powering on and restarting computers, configuring BIOS settings, and running commands, repair utilities, and diagnostic applications to troubleshoot computers.

How to Monitor Out of Band Management in Configuration Manager 2012

- Now contains procedures for monitoring Out of Band Management activities.

About the AMT Status and Out of Band Management in Configuration Manager 2012

- Now contains information about the AMT status values that you can monitor in the console and in reports, including information about the new value, “Externally Provisioned”.

 

-- The Configuration Manager Writing Team

This posting is provided "AS IS" with no warranties and confers no rights.

 

Configuration Manager Support Announcements for May 2011

$
0
0

[Today's post comes from Harini Muralidharan] 

We are announcing support changes for the following releases. Please look for these changes to be reflected in the Supported Configuration pages within a few months.

Microsoft Application Virtualization 4.6 SP1 is now supported on Configuration Manager 2007 R3 with Configuration Manager 2007 SP2

System Center Configuration Manager 2007 R3 with System Center Configuration Manager SP2 now supports Microsoft Application Virtualization (App-V) 4.6 SP1 Desktop Client and Application Virtualization Client for Remote Desktop Services. This client release enables support for Windows 7 SP1 and Windows Server 2008 R2 SP1.

The following are the limitations and workaround to import App-V packages using Configuration Manager.

Configuration Manager fails to import App-V packages when there is more than one XML in the package folder. App-V Sequencer 4.6 SP1 creates the file Report.xml when creating an App-V package. Configuration Manager expects to find only one xml file in the package folder and will fail when it identifies more than one XML file in the folder. To work around this problem delete the file report.xml manually from the package folder before you import the App-V package.

No software updates are required.

--Harini Muralidharan

This posting is provided "AS IS" with no warranties, and confers no rights.

Test your knowledge of Configuration Manager 2007 (yet again)

$
0
0

[Today's post is provided by Rob Stack]

 The Configuration Manager Information Experience (iX) team has just published an update to the Configuration Manager 2007 Quiz Application. The quizzes are a fun way to learn about some of the features in the product. Each quiz contains 10 questions that can be answered Yes or No. Regardless of your answer, the quiz will display the correct solution and provide links to the Configuration Manager online documentation.

This new version of the application includes three new quizzes:

  • Configuration Manager 2007 Active Directory Quiz
  • Configuration Manager 2007 R3 Quiz
  • Configuration Manager 2007 Documentation Quiz

The quizzes are compatible with any computer running Windows XP, Windows Vista or Windows 7 and will download the correct version of Silverlight if it is not installed.

You can now install the quiz application locally or run the new web-based quizzes.

To install a local version of the quiz application, see http://www.microsoft.com/downloads/details.aspx?FamilyID=b9fb478a-ec98-47f2-b31e-57443a8ae88f&DisplayLang=en

To run the quizzes directly from the web, visit http://quizapp.cloudapp.net/configmgr2007.aspx

We hope you enjoy these new quizzes and would love to hear your feedback about them and any of our other content. Contact us by emailing smsdocs@microsoft.com.

 -- Rob Stack

This posting is provided "AS IS" with no warranties and confers no rights.

Role-Based Administration Provides “Show Me” Behavior in Configuration Manager 2012 Beta 2

$
0
0

[Today’s post is provided by Lilian Xuan]

Every person who uses the Configuration Manager 2007 console has to work with a complicated tree that has more than fifty nodes and hundreds of actions, even if they have permission to operate on just one node. Instead of this experience, how cool would it be to have your own console based on your assigned role? Configuration Manager 2012 provides this capability with role-based administration and what we call “Show Me” in the Configuration Manager console.

What is “Show Me”?

“Show Me” is the Configuration Manager behavior that shows the administrative user only what is relevant to them. Instead of seeing all workspaces, nodes, and objects when you run the Configuration Manager console, you see only those that you need to see, based on your job role. Role-based administration in Configuration Manager hides any workspaces, nodes, and objects that you do not need to see.

Why “Show Me”?

Imagine that you have one key chain with 10 keys attached to it. One of them is to the door of your office and you don’t use the other nine keys. What would you do? Bring the whole key chain and find your office key from 10 keys, every day? I would pick out the key to my office and bring it with me, leaving the other nine at home (or throw them away).

“Show Me” in the Configuration Manager console lets you leave those keys at home that you don’t use, and bring only the one key that you need. As an example, let’s assume that you have been assigned the role-based administration security role of Asset Manager, because your job role is to collect and report on software licenses by using the Asset Intelligence feature. When you run the Configuration Manager console, would you prefer to see everything, or only objects that are relevant to this role?  

Without the “Show Me” behavior, you see all the workspaces and nodes, as shown in the following picture:

 

Note: This is prerelease UI and is subject to change

With “Show Me”, only the relevant workspaces and nodes are shown, as in the next picture, where you can no longer see the Software Library workspace or the Configuration Items node.

 

Note: This is prerelease UI and is subject to change

Benefits of “Show Me”:

  • Automatic custom Configuration Manager console.
  • Shows the administrative user only the objects and actions that they need to perform their job.  
  • The reduced display makes it easier and more efficient for administrative users to manage Configuration Manager.

How “Show Me” works

“Show Me” behavior is the result of configuring role-based administration in Configuration Manager 2012.  First, your Windows user account is granted access to the Configuration Manager console as an administrative user.  Then, when your account opens the Configuration Manager console, only the nodes and objects that you have permission to manage are displayed.  Objects you do not have permission to view or manage are hidden.  This is controlled by the association of security roles, security scopes, and collections to your administrative user configuration:

  • Security roles define the actions, or permissions, you have for different object types. For example, a security scope can grant an associated user the right to create, deploy, and delete an application.  Access and visibility to the following are controlled by security role configurations:
    • Workspaces
    • Console nodes and folders
    • The type of objects that you can access
    • Available actions for accessible objects (such as which actions are displayed on the ribbon)
  • Security scopes are sets of objects. Each securable object in Configuration Manager 2012 must be assigned to at least one security scope. When you are associated with a security scope, you gain access to manage the specific objects that are assigned to that security scope.
  • Collection associations determine which collections are displayed when you take actions such as deploying content or viewing a list of collections.

Shown, Hidden, or Disabled

With the “Show Me” experience, administrative users might see different behaviors for objects in the Configuration Manager console. These behaviors include objects that are shown and accessible, shown but disabled, or hidden from view:

Shown

  • All objects:  All objects are shown when an administrative user has permission to manage them. If this is a node or folder, parent objects in that workspace are also displayed.

Hidden

  • Workspace: A workspace is hidden if the administrative user doesn’t have any permissions to view or operate any node in that workspace.
  • Node: A node is hidden if the administrative user doesn’t have permissions to create, modify, delete, view, or configure anything in that node.
  • Object: Objects are hidden if the object is not in a security scope associated with the administrative user.  Objects are also hidden when the security roles do not provide any permissions to this object type.
  • Action: Actions are hidden if the administrative user doesn’t have permission to operate the specific action for the object. Permissions to take actions on objects are granted by the administrative users’ associated security roles.

Disabled

  • Action:   There are two scenarios when an object or action is disabled (not available).

1)  First, you might have permissions to an object and specific actions, but the action is displayed as disabled. The action is shown as disabled because the action is not currently available, but might become available if prerequisites are met or changed.

For example, in the following picture, the action Enable or Disable Asset Intelligence Synchronization Point is disabled because the Asset Intelligence synchronization point is not installed. However,  when the Asset Intelligence synchronization point is installed, the administrative user’s assigned security roles grants them permissions to enable or disable this site system role. 

 

Note: This is prerelease UI and is subject to change

 2)  Second, you might have permissions for some objects, but not the selected object.  This can occur when you are associated with multiple security roles, and your role-based administration configuration associates your associated security roles with specific security scopes or collections. 

Troubleshooting Tips

When you use the “Show Me” behavior, watch out for these commonly reported issues:

  1. You can’t see the workspaces, nodes or actions that you expect to see.
    Solution: Make sure that your administrative user account is associated with a security role that grants permissions to the correct object types.
  2. You can’t see the objects that you expect to see in the console:
    Solution: Make sure that your administrative user account is associated with the correct security scopes and collections.

You can also use the following two logs files to troubleshoot Configuration Manager console problems:

  • <smsprovider setup dir>\Logs\SMSProv.log
  • <adminconsole setup dir>\AdminUILog\SmsAdminUI.log

For information about configuring role-based administration, see Configure Role-Based Administration in Configuration Manager 2012 in the Configuration Manager 2012 TechNet library

--Lilian Xuan

This posting is provided "AS IS" with no warranties and confers no rights.

 

Tips for Finding Objects in the Configuration Manager 2012 Console

$
0
0
[Today's post comes from Min Yang ] 1. Introduction In System Center Configuration Manager 2012, the Configuration Manager console has been greatly improved to enhance its usability. In addition to improvements in performance and layout, there are...(read more)

Announcement: Configuration Manager Documentation Library Update for June 2011

$
0
0
[Today's post is from the Configuration Manager Writing Team ] The Configuration Manager 2007 documentation library and the Configuration Manager 2012 documentation library have been updated on the web and the latest content has Updated: June 1, 2011...(read more)

Configuration Manager 2007 Documentation Library Downloadable Update for June 2011

$
0
0
[Today's post is provided by Rob Stack ] The latest downloadable update for the Configuration Manager 2007 Documentation Library has been posted to the Microsoft Download Center. The June 2011 version is the newest downloadable update available and...(read more)

How to create Prestaged Media for WES 7.1, PosReady7 and ThinPC in ConfigMgr 2007 R3

$
0
0
[Today’s post comes from Chaohao Xu ] This blog post introduces how to create prestaged media for Windows Embedded Standard 7.1, PosReady7 and ThinPC with ConfigMgr 2007 R3. First, you need to setup a reference machine that runs the operating...(read more)

Configuration Manager Support Announcements for July 2011

$
0
0
[Today's post comes from Harini Muralidharan] We are announcing support changes for the following releases. Please look for these changes to be reflected in the Supported Configuration pages within a few months. Microsoft Windows Embedded Standard...(read more)

Announcement: Configuration Manager Documentation Library Update for July

$
0
0
[Today's post is from the Configuration Manager Writing Team ] The Configuration Manager 2007 documentation library and the Configuration Manager 2012 documentation library have been updated on the web and the latest content has Updated: July1, 2011...(read more)
Viewing all 338 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>