goo.

gl/YBVQwU

System Center
Configuration
Manager 2012
MAEDS Spring PD May 08, 2015
CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

INTRODUCTION

SCCM/SCSM Nerd
PowerShell Evangelist

Chris Thomas
Technical Systems Coordinator
Bloomfield Hills Schools
p: 248.341.6362
chthomas@bloomfield.org
CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

RESOURCES YOURE NOT ALONE

No One Knows What Theyre Doing

jangosteve.com/post/380926251/no-one-knows-what-theyre-doing
Along these lines, wisdom may be defined as the ability to not be dangerous.

In fact, if you never feel clueless, and you always know better than everyone else,
please let me know, so that I can be aware of how dangerous you are.

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

RESOURCES BOOKS & VIDEOS

Books
Mastering System Center 2012 Configuration Manager
R2 Version - Mastering System Center 2012 R2 Configuration Manager
Microsoft System Center 2012 Configuration Manager: Administration Cookbook
Training Videos
CBTNuggets
Greg Shields
70-243 : Administering and Deploying System Center 2012 Configuration
Manager
70-247 : Configuring and Deploying a Private Cloud with System Center 2012
70-246 : Monitoring and Operating a Private Cloud with System Center 2012

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

RESOURCES FORUMS & OTHER

Google Plus Community (MAEDS - SCCM)

plus.google.com/communities/100712945044941178842
Michigan System Center User Group (MISCUG)
miscug.org
Forums
myITforum - ConfigMgr 2012
windows-noob
edugeek.net
blogs.technet.com/b/configurationmgr
Other

Illinois State University - SCCM 2012 Guides

Evaluation VHD

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

RESOURCES

Conferences
systemcenteruniverse.com

Speakers/Forums Contributors/Bloggers

Rod Trent
windowsitpro.com/systems-management/system-center
Kent Agerlund
blog.coretech.dk/category/confmgr/
youtube.com/watch?v=9hDFqcPjjSA <<< Watch this. Seriously.
Jrgen Nilsson
Community Tools List
Jason Sandys
Client Installation Startup Script

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

DIRECTACCESS

DirectAccess
technet.microsoft.com/en-us/library/bb632890.aspx
DirectAccess Requirements
technet.microsoft.com/en-us/library/dd637797(v=ws.10).aspx
DirectAccess client computers that are running Windows 7 Enterprise or Windows 7
Ultimate. DirectAccess clients must be members of an AD DS domain.
Direct Access - SCCM - Managing Internet Clients
blogs.msdn.com/b/steverac/archive/2010/07/31/direct-access-sccm-managinginternet-clients.aspx
A simple demo but a great way to show how powerful Direct Access is and how
seamlessly SCCM can work with it. Intrigued? I hope so its an awesome technology.

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/YBVQwU
PowerShell
App Deployment
Toolkit
goo.gl/gYozF3
CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

WHATS CHANGED? PADT

MAEDS 50 Fall 2014

goo.gl/gYozF3
PowerShell App Deployment Toolkit Main Page
psappdeploytoolkit.com
PSAppDeployToolkit 3.6.3 Direct Download
github.com/PSAppDeployToolkit/PSAppDeployToolkit/releases/download/3.6.3
/PSAppDeployToolkit_v3.6.3.zip
Release Notes
github.com/PSAppDeployToolkit/PSAppDeployToolkit/blob/master/CHANGELOG.
txt

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

WHATS CHANGED? DEV-ENDORSED GUIDE

Installing Applications with PowerShell App Deployment Toolkit - Part 1

replicajunction.github.io/blog/2015/04/07/installing-applications-with-psadt-part1/
Be sure to read through the Word document included with the toolkit download, as it
contains a lot of helpful information and references for toolkit functions.
Im well aware that in the grand scheme of things, Firefox is a pretty easy example of
software deployment. I will almost certainly be writing a follow-up to this article with
some more chewy examples. In the mean time, though, dig in! Get your hands dirty and
try building some deployment scripts on your own. Its almost always easiest to learn by
doing.

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

WHATS CHANGED? JEFFREY SNOVER

The Future of Windows Server with Jeffrey Snover

youtube.com/watch?t=5556&v=9ySz_Xxe-08
MCP Insider Series: Ask Me Anything (AMA), Featuring Jeffrey Snover
microsoftvirtualacademy.com/training-courses/mcp-insider-series-ask-me-anythingama-featuring-jeffrey-snover
Nano Server Is 'Most Significant Change' Since Windows NT
rcpmag.com/articles/2015/05/04/nano-server-most-significant-change.aspx
Inside the guts of Nano Server, Microsoft's tiny new Cloud OS
theregister.co.uk/2015/05/01/microsoft_nano_server_deep_dive/

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

WHATS CHANGED? DON JONES

IT Ops Career 2015: Where to Point Your Eyes

donjones.com/2015/03/31/it-ops-career-2015-where-to-point-your-eyes/
In my new role at Pluralsight
Youll no longer automate tasks youll simply describe what you want. Yes, therell be
some ridiculously highly-paid people who write the automation code that enables the
environment to adjust itself on command, but if youre not already doing that kind of
coding, youre not likely to be one of them. Youre about 5 years behind already, so youll
probably just consume what theyre doing. But this changes how you manage your
environment at a fundamental level so start paying attention.

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/YBVQwU

Offline Updates

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

OFFLINE UPDATES CUSTOMIZATION

Customizing Offline Servicing of Operating System Images

blogs.technet.com/b/configmgrteam/archive/2013/07/15/customizing-offlineservicing-of-operating-system-images.aspx
Offline servicing stages temporary data on the site server when the process runs, and
uses the drive on which Configuration Manager is installed. One common request is to
configure offline servicing to use the specified drive of the site server. Lets say you want
to specify the F: drive for offline servicing to stage and mount the OS image and store
software updates files. Heres how to do this using the Windows Management
Instrumentation Tester utility (wbemtest.exe).

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/YBVQwU

Task Sequences

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

TASK SEQUENCES TECHNET GREG SHIELDS DEC 2009

A Case for a Layered Approach

to Deploying Windows Desktops
Simply put, the old monolithic
approach to desktop deployment
just isnt practical these days.
Creating dozens of individual
images for each type of desktop
hardware or software set creates
a nightmare of customized images that are time-consuming to update, difficult to
manage and clog up space on your file servers.
Whats needed to replace those images is a layered approach to deploying your
Windows desktops, one with a single Windows image as its core. By taking advantage of
multiple services you already have in place today, even the smallest IT environment can
use this approach to create a powerful and highly-extensible infrastructure for quickly
deploying new operating systems to users. If youre considering making the jump from
Windows XP or Windows Vista to Windows 7, now is the time to start rethinking the very
basics of desktop deployment. With a little effort, youll be surprised at how automated
your final solution can be.
CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

TASK SEQUENCES THICK vs THIN

Thin vs Thick images

Thin is all packaged based and arguably offers the most flexibility and scalability
Thick included Office 2010, Adobe CS6 Web and Design Premium, Adobe
Presenter and Adobe Captivate in the base WIM
start and finished txt file in task sequence
THIN
Size:

THICK
3.5GB Size:

9.6GB

TS Start:

2:00 pm TS Start:

2:00 pm

App Start:

2:21 pm App Start:

2:57 pm

TS Finish:

4:12 pm TS Finish:

4:07 pm

5 minute savings!!!

Still need to maintain thin AND thick as kitchen staff/kiosks/custodial/maintenance

dont need that software installed, so just maintain thin.

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/YBVQwU

Troubleshooting

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

TROUBLESHOOTING RESOURCES

eBook
Troubleshooting Configuration Manager
blogs.msdn.com/b/microsoft_press/archive/2013/11/12/free-ebook-microsoftsystem-center-troubleshooting-configuration-manager.aspx
SQL 2012 and System Center 2012 R2
gallery.technet.microsoft.com/SQL-2012-and-System-Center-553b5161
Log Reader (CMTRACE)
For workstation:
\\<SCCMSERVER>\SMS_<SITECODE>\Tools\CMTrace.exe
During OSD:
x64:
[BootDiskDrive; usually x:]\sms\bin\x64\cmtrace.exe
x86:
[BootDiskDrive; usually x:]\sms\bin\i386\cmtrace.exe
Prevent SCCM From Using Specific Drives
technet.microsoft.com/en-us/library/bb632890.aspx

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

TROUBLESHOOTING SCCM LOGS

Log Locations
blogs.msdn.com/b/lxchen/archive/2009/04/03/a-list-of-sccm-log-files.aspx
Task Sequence Specific
Windows PE before HDD format:
x:\windows\temp\smstslog\smsts.log
Windows PE after HDD format:
x:\smstslog\smsts.log
and copied to:
c:_SMSTaskSequence\Logs\Smstslog\smsts.log
Full version Windows before SCCM agent installed:
c:_SMSTaskSequence\Logs\Smstslog\smsts.log
Full version Windows after SCCM agent installed:
c:\windows\ccm\logs\Smstslog\smsts.log
Full version Windows (x64) after SCCM agent installed:
c:\windows\sysWOW64\ccm\logs\Smstslog\smsts.log
After Task Sequence has finished running:
c:\windows\ccm\logs\smsts.log
After Task Sequence has finished running (x64):
c:\windows\sysWOW64\ccm\logs\smsts.log
CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

TROUBLESHOOTING IIS LOGS

Symptom: SCCM C: Drive Filling Up

Cause:
IIS Logs
Resolution:
social.technet.microsoft.com/Forums/systemcenter/en-US/d989b249-0159-41fcb78c-1f1d91ce8bb3/inetpublogslogfilesw3svc1-getting-very-large
Scheduled task to delete any logs over 30 days old
at 12:00 /EVERY:Su Forfiles.exe -p C:\inetpub\logs\LogFiles\W3SVC1
-m *.log -d -30 -c \"Cmd.exe /C del @path\"

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

TROUBLESHOOTING 0x80070570

Symptom: 0x80070570
Cause:
Hard Drive Issue
Resolution:
Option 1:
F8 (open CMD in OSD)
diskpart
select disk 0
select partition 1
clean
create partition primary
format fs=ntfs quick
Option 2:
Recycle the hard drive

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

TROUBLESHOOTING 0x80070002

Symptom: 0x80070002
Cause:
B&C Workgroup / Updates Anonymous Auth
Resolution:
Check to see if the IIS Site: SMS_DP_SMSPKG$ (Expand Default Site) has
Anonymous Authentication turned on:
Server Manager
Web Server (IIS)
Internet Information Services (IIS) Manager
Expand SCCM Site
Expand Sites
Expand Default Web Site
Select SMS_DP_SMSPKG$
Double-click Authentication in IIS section
Enable Anonymous Authentication

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

TROUBLESHOOTING 0x80070002 AGAIN!

Symptom: 0x80070002 AGAIN!

Cause:
DP Disables Anonymous Auth in IIS
Resolution:
support.microsoft.com/en-us/kb/2682514
In the ConfigMgr console, check the Distribution Point configuration:
Site Database\Site Management\xxx-Site name\Site Settings\Site
Systems\Site server
Right Click ConfigMgr Distribution Point and Select Properties
Verify whether the checkbox Allow Clients to connect Anonymously is
selected. If it is unchecked, please check it.

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

TROUBLESHOOTING 0x80040104

Symptom: 0x80040104
Cause:
Hash Empty/Mismatch
Resolution:
managedux.com/2011/06/17/failed-to-resolve-selected-task-sequencedependencies-code0x80040104-or-failed-to-find-ccm_softwaredistribution-objectfor-an-osd-driver-package-that-is-on-a-distribution-point
Update hash by updating content on distribution point
Right click the driver package and choose Manage Distribution Points
Choose update all distribution points with a new package source version

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

TROUBLESHOOTING PROVISIONING MODE

Symptom: Software Center Empty/No Client Certificate

Cause:
Multi-Reboot Software Updates or Short Restart
Resolution:
Server:
Fix:
Eliminate known updates from TS packages
support.microsoft.com/en-us/kb/2894518
Hide:
Force client out of provisioning mode at end of TS
danielclasson.com/how-to-force-an-sccm-2012-client-out-ofprovisioing-mode-during-osd
Client:
Reimage
psexec @C:\listofcomputers.txt -u <USER> -p <supersecretpassword> -i d cmd /c "\\<NETWORK>\fixprovisioingmode.bat"
(I know, but I havent had time to turn it into PowerShell)

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

TROUBLESHOOTING NO TASK SEQUENCES

Symptom: No Task Sequences Available To This Computer

Cause:
Bad Policy in Database
Resolution:
windows-noob.com/forums/index.php?/topic/7595-sccm-2012-ts-failedthere-notask-sequences-available-to-this-computer
Microsoft provided me with two SQL queries to run against the database.
This one will check for bad policies in the database. if no results are returned
from this query then you don't have the same issue.
SELECT * FROM ResPolicyMap WHERE machineid = 0 and PADBID IN
(SELECT PADBID FROM PolicyAssignment WHERE BodyHash IS NULL)
This one will remove any bad policies if there are any.
Delete FROM ResPolicyMap WHERE machineid = 0 and PADBID IN
(SELECT PADBID FROM PolicyAssignment WHERE BodyHash IS NULL)
After that restart the management point and everything should be working
normally.
CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

TROUBLESHOOTING 0x8004005 WITH USMT

Symptom: 0x8004005 With USMT

Cause:
Virtual Machine
Resolution:
Run on physical machine
fearthemonkey.co.uk/task-sequence-error-0x00004005-when-using-usmt
The solution and it took a while for me to figure this one out, was that I was
trying this all out in Hyper-V. It suddenly dawned on me that I had not tried to
run the task sequence on a real ie physical computer and as soon as I did
bingo! Success!

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU
Symptom:

TROUBLESHOOTING VMWARE PSOD

VMWare Host PSOD
$PF Exception 14 in world xxx
E1000 NIC Polling Issue with Server 2012 R2 and Windows 8.1

Cause:
Resolution:
Change hosts to VMXNET3 NIC
kb.vmware.com/selfservice/microsites/search.do?
language=en_US&cmd=displayKC&externalId=2059053
communities.vmware.com/thread/459220
longwhiteclouds.com/2013/03/14/hp-advisory-vsphere-hosts-disconnectingfrom-network
NIC disconnections and PSODs of this type should be extremely rare in the
overall scheme of things. --- But when you come across these types of
problems they need to be resolved as soon as possible.

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

TROUBLESHOOTING STRANGE CLIENT ISSUES

Powershell Delete Computer from AD and SCCM

elderec.org/2012/09/powershell-delete-computer-from-ad-and-sccm
Sometimes a computer record becomes corrupt in SCCM or SCCM is denying that
computer the permission to PXE boot. You can follow these steps to delete a computer
from SCCM.

Start Configuration Manager Console

Select the Assets and Compliance workspace
Expand the Overview node
Select the Devices node
Type the barcode in the Search field and hit Enter
Right-click on the computer and select Delete
Click the Delete on the Confirm Deletion window

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

TROUBLESHOOTING - APPLICATION PACKAGING

Application Error Codes

msdn.microsoft.com/en-us/library/windows/desktop/ms681381.aspx
blog.configmgrftw.com/error-codes
Working around CryptoLocked SRP
Run failed installer, but click no prompts
Run %appdata% , then step back a folder and open \Local\Temp
Sort by Date modified
Copy the appropriate folder to c:\temp
Run extracted installer from c:\temp
Silent Installer Parameters
unattended.sourceforge.net/installers.php
Force Policy Updates
control smscfgrc

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/YBVQwU

Community
Tools
CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

COMMUNITY TOOLS

SCCM 2012 Support Center Tool

blogs.technet.com/b/configmgrteam/archive/2014/05/06/system-center-2012configuration-manager-support-center-tool-has-been-released.aspx

Right Click Tools

nowmicro.com/recast/right-click-tools

SCCM 2012 R2 CU4 Inventory Report

david-obrien.net/2014/01/update-inventory-script-makes-configmgr-life-easier

Cireson Remote Manage

cireson.com/apps/remote-manage

System Center 2012 Configuration Manager Tools

social.technet.microsoft.com/wiki/contents/articles/22802.aspx
CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/YBVQwU

Roundtable

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

Questions

What went well?

What went horribly?

Ideas for future sessions?

ROUNDTABLE

CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU

goo.gl/
YBVQwU

CLOSING REMARKS

ramblingcookiemonster.github.io/DealingWith-The-Click-Next-Admin

You basically have choices at this point.

Choice A, bitch about it. Choice B, bitch
about it and adapt anyway. Either way,
you get to bitch about it but Choice B
gives you a career in 10 years, and
Choice A makes you a relic.
- Don Jones CHRIS THOMAS BLOOMFIELD HILLS SCHOOLS CHTHOMAS@BLOOMFIELD.ORG goo.gl/YBVQwU