Using Windows PowerShell to convert collection membership rules

I developed some automation for a customer to help them manage the lifecycle of collections used for assignment of DCM baselines as they are revised.  Part of this required the ability to convert a collection from query-based membership to direct membership rules and vice versa.  I realize this is a very niche piece of automation,…

0

Verifying Configuration Manager Backup Task with Windows PowerShell

A seemingly simple requirement for a Desired Configuration Management configuration item is to verify that the Configuration Manager 2007 site backup maintenance task is enabled.  What became the difficult part of this was tracking down the specific location in WMI that this data exists.  I have to give credit to Jamie Moyer for pointing me…

0

Using SMBIOS GUID to import computer information for VMware guest

To import computer information into Configuration Manager for OS deployment you have to enter the computer name and then one or both of the following unique identifiers: MAC address or SMBIOS GUID, aka UUID.  Many customers use the MAC address because it is shorter and typically more accessible.  However, if the UUID is required this…

4

ConfigMgr query for blocked or approved clients

This is nothing new; I’m typically not one to repost information that can be found elsewhere online.  This is just so that I have an easy place to find it in the future! select SMS_R_SYSTEM.ResourceID, SMS_R_SYSTEM.ResourceType, SMS_R_SYSTEM.Name, SMS_R_SYSTEM.SMSUniqueIdentifier, SMS_R_SYSTEM.ResourceDomainORWorkgroup, SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_CM_RES_COLL_SMS00001 on SMS_CM_RES_COLL_SMS00001.ResourceId = SMS_R_System.ResourceId where SMS_CM_RES_COLL_SMS00001.IsBlocked = ‘1’ Replace IsBlocked…

0

Identifying a system deployed via OSD

I’m starting a DCM project for a customer and one of the requirements is to determine whether a system was deployed via a ConfigMgr task sequence.  This seemed like a simple request but initially stymied me as to how to best implement it with a significant level of authority that cannot be easily circumvented.  I…

0

DCM Error for Invalid or Inconsistent Data

I created a relatively simple Configuration Manager 2007 Desired Configuration Management (DCM) configuration baseline with twenty configuration items (CIs) each with a handful of settings.  In trying to move it from a development environment into production, the baseline would fail to import on the first page of the wizard with the following error: The following…

0

Maximizing Security in Configuration Manager

This post details my experience and lessons learned with hardening a System Center Configuration Manager system.  I’ll review the risks and then describe the various technical components of a ConfigMgr system: Windows Server host, Internet Information Service (IIS), SQL Server and ConfigMgr itself.  Make sure to review the current product documentation on Security for Configuration…

0

MMS 2011 Session

A little self-promotion….  BF21 Accelerated Scripting with the MDT Framework Speaker(s): Aaron CzechowskiTrack(s): Server Management Technologies, Solution Accelerators, Systems ManagementSession Type: Breakout SessionProduct(s): Configuration Manager 2007 R2 & R3, Microsoft Deployment Toolkit, Solution Accelerators, Windows PowerShell This session will help you accelerate and standardize your VBScript or Windows PowerShell scripts using a proven framework. We…

4

Running netsh in ConfigMgr task sequence on x64 client

In deploying Windows 7 x64 via a ConfigMgr 2007 SP2 task sequence I have a custom script to change the TCP Global Receive Window Auto-Tuning Level.  The command that is executed via the script is: cmd /c netsh interface tcp set global autotuning=highlyrestricted This unfortunately returned the following error: Set global command failed on IPv4…

2

Failure on invalid user context with DCM permission evaluation

I’m a huge fan of the Desired Configuration Management (DCM) feature of ConfigMgr.  However, I found that it can be quite literal with the input data, and the result is not always very user friendly.  For example, I created a new General Configuration Item (CI) with a single object rule to evaluate just the exclusive…

1