SCCM Configmgr how to manage clients in untrusted forest

Few weeks ago ,i was assigned with task to manage clients in untrusted forest using Configuration Manager 2012 R2 SP1.Yes, we are still running on Configmgr 2012 but soon (next few weeks) on Configmgr Current Branch . Scenario is ,I have a forest (intranet.asia) where SCCM 2012 R2 SP1 is installed and this is being…
Configmgr PowerShell script to create deployments for multiple software update groups to multiple collections

Introduction: Updated: This post is valid only if your Configmgr is running Current Branch 1702 and above versions due the change in powershell cmdlet New-CMSoftwareUpdateDeployment . Software update groups provide you with an effective method to organize software updates in your environment. Software update group consists of multiple software updates (metadata Only) .You can manually add software…
SCCM Configmgr How to get list of deployments set to OverrideServiceWindows and RebootOutsideOfServiceWindows

Introduction: Few months ago ,we had an issue with one of the deployment (it was software updates) that was deployed to collection with override service window due to emergency patch to be installed on the clients. Deployment went fine and results were positive .All good ,but after few days ,some clients were added to the…
SCCM Configmgr troubleshooting guides for reference

  Since few months ,Microsoft publishing some great guides (deep dive) on SCCM Configmgr understanding and troubleshooting process ,tips and tricks that will help Configmgr administrators in solving issues. It is really hard to find these useful links through search engines when needed for reference and to  send it internally for the team to go…
SCCM Configmgr 2012 R2 SP1 download content from Microsoft updates causing client stuck at downloading policies

Since few days ,have been working on case with Microsoft on client issue wherein ,some clients stuck at downloading the policies/jobs and remain in Queued state without any reason and they never get deployments. When you deploy the software update group to collection ,you will have to put a special attention to configuration setting in…
SCCM Configmgr software update scan failed OnSearchComplete – Failed to end search job Error 0x80072ee2

Other day,I was looking at the client health dashboard which I published long ago https://gallery.technet.microsoft.com/SCCM-Configmgr-2012-SSRS-2863c240 . From the dashboard report ,noticed that couple of clients were having software update scan issues . If client fail to perform success software update scan ,it is out of patching window and client will never send or receive any…
SCCM Configmgr SQL query to find Top X missing updates for specific collection for specific update group

Since few days ,I am working on a customized Software update compliance dashboard report with some Pie charts for management to see how the patch compliance progress for each Business Unit (I say business unit means for each country). Management are interested to see the overall patch compliance summary for each country (focused on servers…
SCCM Configmgr Get the Update Compliance Status for multiple Update groups against Multiple collections using SQL query without reporting

Recently ,we had an issue with SCCM Configmgr Reporting services role (Remote SQL sitting on VM was crashed ,blog post coming soon ) and we were unable to generate reports mainly for the Software update compliance status that happens every month. This post is about ,how to check the software update compliance status for the…