About Author

Hi, Welcome to the Blog.

Eswar Koneti, the author of this blog post, holds a Bachelor of Technology degree from JNTU University, India. He began his career as an Infrastructure Engineer with a global company, where he had the opportunity to explore various Microsoft technologies, including Active Directory, SMS 2003, MOM 2005, and Symantec Antivirus.

After gaining experience in these technologies, Eswar developed a keen interest in SMS 2003, specifically in deployment, patching, OSD (Operating System Deployment), and client troubleshooting. This passion led him to pursue opportunities in SMS 2003/SCCM (System Center Configuration Manager), and he is delighted to still be working with the SCCM/Intune/AzureAD/Security product to this day.

In 2009, Eswar started his blog, www.eskonr.com, as a platform to share technical insights and knowledge on SCCM/Configmgr and related topics like Active Directory and MBAM (Microsoft BitLocker Administration and Monitoring). He also uses the blog as a personal library for future reference.

During his free time, Eswar dedicates himself to exploring different aspects of SCCM/Configmgr, Office 365, and Intune. He enjoys sharing his experiences and findings on his blog, providing valuable information to the community. Beyond blogging, Eswar actively participates in technical forums such as TechNet, MyITForum, and windows-noob, LinkedIn, Reddit among others, where he responds to queries and gathers insights on various deployment technologies related to SCCM/Configmgr/Intune.

Beyond blogging, Eswar actively participates in technical forums such as TechNet, MyITForum, and windows-noob, LinkedIn, Reddit among others, where he responds to queries and gathers insights on various deployment technologies related to SCCM/Configmgr/Intune.

In recognition of his technical contributions to Microsoft technical forums, blogging, and other online communities, Eswar was honored with the title of "Microsoft Most Valuable Professional" in 2017. This accolade highlights his expertise and dedication to sharing knowledge in the field of deployment technologies.

Community Activities:

In my spare time, I strive to share and absorb as much IT knowledge as possible. I actively engage in the following forums, pages, and communities:

Certificates and Awards:

Microsoft Certifications:
Credential Certification Name /Version
MCTS (Microsoft Certified Technology Specialist ) Microsoft® System center Configuration manager 2007 (70-401)

Microsoft® System Center 2012 Configuration manager (70-243)

Microsoft® System center Operations Manager 2007 (70-400)
MCP (Microsoft Certified Professional) Microsoft® Server Virtualization with Windows Server Hyper-V and System Center (70-409)

To view my full certification transcript, please go to http://www.microsoft.com/learning/mcp/transcripts
Transcript ID: 886095 and  Access Code: transcript

Disclaimer :The opinions expressed herein are my own personal opinions and do not represent anyone else's view in any way, including those of my employer and are  provided "AS IS" with no warranties.The Scripts that are posted here in this Blog are worked in my environment .Please test in Non-Production system before you execute it on any.

             The Official Microsoft MVP Community - Home | Facebook

53 Responses to "About Author"

  3. Dee · Edit

    Hi Eswar,
    You have great content. Thank you for your blogs.
    I was reading one of your blogs Powershell script to delete computer records from SCCM. I know it won't be the same version as to the one we have now, but I am trying to find a script to delete multiple devices from sccm. I ran into your blog and when I clicked the link to get the script, it doesn't show up anymore. Is there a way to get a copy of that script?

    Thanks,
    Dee

    Reply
    1. Eswar Koneti · Edit

      Hi Dee,
      Thanks for your kind words.
      can you send me the link that you are using to download the script, i will check and upload the script?

      Thanks,
      Eswar

      Reply
  4. Timbo · Edit

    Hello, I have an issue with some of the servers where the packages can't get installed with the "SCCM Configmgr Powershell script to install software updates on remote clients". I get the "pending patches - nn but unable to install them, check the Server" and on the server from where the script is ran I get the Event Error 10028 "DCOM was unable to communicate with the computer x using any of the configured protocols; requested by PID (C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe)." All the servers have the same configuration (firewall/rights/domain) but somehow only a few are affected. Do you have any tip what else could be checked? Thanks!

    Reply
    1. Eswar Koneti · Edit

      Hi,
      It seems to be like firewall or dcom issue. you can check wbemtest from run command try to connect to remote server wmi (\\servername\root\CCM\ClientSDK) if it works or not.

      Thanks,
      Eswar

      Reply
  5. JK · Edit

    Hi Easwar
    Hope you are doing well and recognize me.
    I’m looking for some SCCM reporting on patch complaince , can you please help.

    regards,
    JK

    Reply
    1. Eswar Koneti · Edit

      Hi JK,
      What kind of patch complaince are you looking for? Have you looked at default sccm reports and also custom reports in my blog? There are plenty of reports exist. Am sure they will help you. If you looking for some customization, I can work with you offline for consulting and deliver the needed reports.

      Thanks,
      Eswar

      Reply
  6. Gaurav Garg · Edit

    Hi Eswar

    I am intrusted in perusing exam 70-703 - Administering Microsoft System Center Configuration Manager and Cloud Services Integration.

    Can you please advise good institute in India those conduct this for this, I am more interested in face to face rather than online training.

    Any help would be greatly appreciated

    Reply
    1. Eswar Koneti · Edit

      Hi,
      some of the concepts in 70-703 are being retired or no support such as MDM by SCCM & Intune (there is no hybrid management) and must use standalone intune .also 70-703 exam still in beta hence it may change any point of time.
      for the classes, i do not have any training centers who can give class on this but i would recommend to start reading technet documentation ,being active in technet forums ,social networking site to seek information and finally LAB . LAB is must and you have lot of step by step guides available which is far better to learn than attending training's in my way.

      Thanks,
      Eswar

      Reply
  7. Kristopher · Edit

    Eswar,
    WSUS allows you to get a Tabular Status report detailing device name patches needed/ installed/ failed. Similar to this:

    Computer Name Needed Installed Failed N/A
    odsjsrv122 2 234 1 23
    odsjsrv123 2 222 1 23
    odsjsrv124 2 237 1 23
    odsjsrv125 2 245 1 23
    odsjsrv126 2 267 1 23

    Can we pull a report like this in SCCM?

    Reply
  9. Shijin Mohammed · Edit

    Hi Eswar
    We have deployed a new task sequences and my manager asked me to pull out a report of the task sequence on a particular collection.
    Report which we created is giving the output as below.

    Execution State Number of Computers Percent of Total Deployment ID
    Accepted 54 76.10% GSXXXXX
    Failed 1 1.40% GSXXXXX
    No Status 4 5.60% GSXXXXX
    Running 2 2.80% GSXXXXX
    Succeeded 10 14.10% GSXXXXX

    But the requirement is to get a report as below.

    Computer Name Execution-state Deployment_ID Last_Acceptence_Time LastStatustime

    Client1 Success GS2XXXXXX DD/MM/YYYY HH:MIN:SEC DD/MM/YYYY HH:MIN:SEC

    Client2 Failure GS2XXXXXX DD/MM/YYYY HH:MIN:SEC DD/MM/YYYY HH:MIN:SEC

    Reply
    1. Eswar Koneti · Edit

      This is more of customized report .need to review the information that is stored in what SQL views/tables and build it.
      I dont have any custom report for it and due to time limitation ,i can add to to-do list which takes time.

      Regards,
      Eswar

      Reply
      1. Shijin Mohammed · Edit

        Thanks Eswar for the Reply!!!
        Below query helped me to achieve this.

        SELECT[Name0]

        ,[Full_Domain_Name0]

        ,[LastStateName]

        ,[LastAcceptanceStatusTime]

        ,[LastStatusTime]

        ,[User_Name0]

        FROM [osdp232a].[dbo].[v_R_System] Hostname

        JOIN [osdp232a].[dbo].[vSMS_ClientAdvertisementStatus] Numbers

        ON Numbers.[ResourceID] = Hostname.[ResourceID]

        where AdvertisementID = 'XXXXXX'

        Order by [LastStateName]

        Reply
  10. AROVBUKAY · Edit

    Hi Eswar, great blog - always helpful, keep it up.

    Have a question related to User Device Affinity - we have an issue where certain applications that have a requirement set (Primary device = true) the application installs for some users on their primary device, but on others where the user is the primary user of the device - the deployment status shows - Requirement : Primary device equals true - Actual Value = false.

    Have confirmed that the user is the primary user of the device, have removed and re-added.

    The AppIntentEval.log shows the following :

    Current State = NotInstalled, Applicability = NotApplicable, ResolvedState = None, ConfigureState = NotNeeded, Title =

    Any idea why this happens for some users and not all, also on some applications and not all that have this requirement?

    Any pointers to what the issue might be?

    Thanks

    Arov

    Reply
  11. VIGNESH MECH · Edit

    Hi Eswar

    I appreciate your efforts of giving useful stuffs to all.

    We are using Intune+SCCM i.e.Hybrid Intune for mobile device management. We are in need of report consist of Managed/Compliant devices from SCCM DB. We are able to pull the report with devices but it has both compliant/Non compliant and unmanaged devices of users. We found the query "SMS_R_System.MDMStatus" returns 0,1,2 as values. Could you please tell me the actual meaning of these int values

    Thanks in advance

    Reply
  12. Asanka · Edit

    Hi Eswar,

    How are you? I'm Asanka from Sri Lanka. It's a nice blog related specially to SCCM. I'm need a help from you and this is not related to any Technical issues. I'm also planing to start a blog and I like your WordPress Theme but coudn't find it from WordPress.com. Possible to share the Theme Name..

    Reply
  13. mrinmoy · Edit

    Hi Eswar,

    i am trying to deploy an application (msi) 'Symantec encription desktop' via sccm application model. the command line is as below
    msiexec /i "PGPDesktop.msi" TRANSFORMS= Symantec_Encryption_Desktop_10.4.1_R01_X64.mst /qn
    but it got stuck as installing and i am getting details in appenforce is as below
    Waiting for process 2328 to finish. Timeout = 120 minutes.
    after 120 minutes its getting failed with timeout error.
    please suggest

    Reply
      1. Gary Lok · Edit

        Hi Eswar, Great reports on MS counts. I downloaded your latest Count of MS office Version and notice that the result of 32 bit and 64 bit got flipped-flopped. Any thoughts? Thank you!! b Gary.

        Reply
        1. Eswar Koneti · Edit

          what you mean by flipped-flopped ? reverse the count ? Did you check the SQL code for how 32bit and 64bit is calculated have a check to see if the logic wrong or not.
          How do you say the results are not correct ?

          Regards,
          Eswar

          Reply
          1. Gary · Edit

            Thank you for the reply. Yes, 64 bit office has the number count of 32 bit and vice versa (e.g. i have 600 copies of 32bit office but listed under the 64bit row). Will look into the SQL code. Thanks again for your help.

            Reply
            1. Eswar Koneti · Edit

              where did they installed ? is it under c:\program files or C:\program files(x86) .
              SQL Code used to determine 32 and 64bit is below

              Case substring(sof.SoftwareCode0,21,1)
              When '0' Then '32-bit'
              When '1' Then '64-bit'
              Else 'Unknown'
              End
              from v_GS_INSTALLED_SOFTWARE sof

              Can you pick any one client that is installed with office and find the SoftwareCode0 listed in v_GS_INSTALLED_SOFTWARE as part of troubleshooting.

              Regards,
              Eswar

            2. Gary · Edit

              Will look into it. Your earlier scripts has the right output. Just the latest one that you posted that I am having problem. Will look into your suggestion and keep you posted. Thank you!!

  14. Senthil Kumar J · Edit

    Hi Eswar,
    This is Senthil(worked with you in Logica).Hope you remember me?
    Need help, we are facing issue in SCEP where 1901 statemessage is not sending,
    and how to repair SCEPinstall.exe

    Reply
    1. Eswar Koneti · Edit

      Hi Senthil,
      Yes ,i do remember,How are you ? for SCEP ,did you check the logs ? try to initiate the state messages on client.

      Regards,
      Eswar

      Reply
  15. sohaib · Edit

    Unable to connect to WMI (root\ccm) on remote machine ” “, error = 0x8004100e.

    Execute query exec [sp_CP_SetLastErrorCode] 2097152003, 0

    these lines are red. what could be the problem?

    Reply
  16. Tejas Patel · Edit

    Hi Eswar, I am looking for a query generating report for Required patches based on collection, the query I am using is not filtering servers based on collection, it shows list of all servers those are having SCCM agents installed and those servers needed patches, below is my query:

    Can you please help:

    1. Update_Dataset1

    elect Name0 as Machinename , CAST(DATEPART(yyyy,ui.DatePosted) AS varchar(255)) + '-' + RIGHT('0' + CAST(DATEPART(mm, ui.DatePosted) AS VARCHAR(255)), 2) AS MonthPosted,
    ui.bulletinid [BulletinID],ui.articleid [ArticleID], ui.Title,
    IsRequired=(case when css.Status=2 then 'YES' else '' end),
    ui.InfoURL as InformationURL,
    ui.dateposted [Date Posted]
    from V_UpdateComplianceStatus css
    join v_UpdateInfo ui on ui.CI_ID=css.CI_ID
    left join v_CITargetedMachines ctm on ctm.CI_ID=css.CI_ID and ctm.ResourceID = css.ResourceID
    left join v_FullCollectionMembership fcm on fcm.resourceid=fcm.resourceid
    and fcm.Collectionid= @Collection
    INNER join v_CICategories_All catall2 on catall2.CI_ID=css.CI_ID
    INNER join v_CategoryInfo catinfo2 on catall2.CategoryInstance_UniqueID = catinfo2.CategoryInstance_UniqueID
    and catinfo2.CategoryTypeName='UpdateClassification'
    JOIN dbo.v_R_System AS vrs ON vrs.ResourceID = css.ResourceID
    outer apply (
    select Deadline=min(a.EnforcementDeadline)
    from v_CIAssignment a
    join v_CIAssignmentToCI atc on atc.AssignmentID=a.AssignmentID
    and atc.CI_ID=css.CI_ID
    ) cdl
    WHERE
    css.Status=2
    ORDER BY vrs.Name0

    2. CollectionIDParameterinputDataset

    Select CollectionID, Name from v_Collection Order by Name

    Reply
      1. Tejas Patel · Edit

        Hello Eswar,

        Thank you for the update, I have used the query you provided and it looks good and shows the same result which query I am using

        I came to know that both queries (yours and mine) are showing same result for 43 servers out of 8000+ servers in "All Systems" collection especially for missing patches(compliant/non-compliant servers)

        However if I use WSUS console (old Separate server - not SCCM) and get the Needed patch report at that time I am getting needed patch report where for the same servers I do not see the missing patch (no data available) in SCCM

        the query I am using is:
        --------------------------------

        Dataset1
        =========

        Select Name0 as Machinename , CAST(DATEPART(yyyy,ui.DatePosted) AS varchar(255)) + '-' + RIGHT('0' + CAST(DATEPART(mm, ui.DatePosted) AS VARCHAR(255)), 2) AS MonthPosted,
        ui.bulletinid [BulletinID],ui.articleid [ArticleID], ui.Title,
        IsRequired=(case when css.Status=2 then 'YES' else '' end),
        ui.InfoURL as InformationURL,
        ui.dateposted [Date Posted],
        fcm.Collectionid
        from V_UpdateComplianceStatus css
        join v_UpdateInfo ui on ui.CI_ID=css.CI_ID
        left join v_CITargetedMachines ctm on ctm.CI_ID=css.CI_ID and ctm.ResourceID = css.ResourceID
        INNER join v_CICategories_All catall2 on catall2.CI_ID=css.CI_ID
        INNER JOIN v_FullCollectionMembership fcm on fcm.resourceid=css.resourceid
        INNER join v_CategoryInfo catinfo2 on catall2.CategoryInstance_UniqueID = catinfo2.CategoryInstance_UniqueID
        and catinfo2.CategoryTypeName='UpdateClassification'
        JOIN dbo.v_R_System AS vrs ON vrs.ResourceID = css.ResourceID
        outer apply (
        select Deadline=min(a.EnforcementDeadline)
        from v_CIAssignment a
        join v_CIAssignmentToCI atc on atc.AssignmentID=a.AssignmentID
        and atc.CI_ID=css.CI_ID
        ) cdl
        WHERE
        css.Status=2
        and fcm.Collectionid= @Collection
        ORDER BY vrs.Name0
        --------------------------------------------
        Dataset2 - Query - to prompt collection Name
        --------------------------------------------

        Select CollectionID, Name from v_Collection Order by Name

        I am stuck at this point and it delays my project deployment... So seeking your help

        Thank you
        Tejas Patel

        Reply
        1. Eswar Koneti · Edit

          you need to drill down why other servers not showing in the report.the query which i sent works in my lab and production as well.I dont see any issues. You may have to troubleshoot further on this . It will be difficult to guide you without actually looking into the environment .

          Regards,
          Eswar

          Reply
          1. Tejas Patel · Edit

            I have found the issue and resolved as well, it was not the query . The report was stuck at somewhere else..

            Thank you so much for your help in this regards....

            Tejas Patel

            Reply
            2. Tejas Patel · Edit

              Hey, I ran the update scan report where I found the suspect that my default domain policy was conflicting message appeared (as old WSUS settings still placed under Default policy)

              I have tested by changing the group policy and it worked for me, however it took sometime to populate the report correctly but it did finally

              Thank you so much

              Tejas Patel

  17. Justin Keeling · Edit

    Hi Eswar - First off, your blog is amazingly helpful. As a person tasked with moving our environment from vCM to SCCM I have spent many an hour combing this site for information. Thank you.
    Secondly, I have a question. Our business units like to see what updates will be applied to each machine before they sign off on the monthly patch window. Your "Computer Updates Status" report fits very closely to what I need... Is there a way to report on required updates for each server within a collection as a total report other than specifically choosing a server within said collection? I would love to have the formatting of the Computer Updates Status report but have it list each server within the chosen collection.

    Thank you for any advise.
    Justin Keeling

    Reply
    1. Eswar Koneti · Edit

      Hi Justin,
      sorry for the delay in reply but yes ,it is possible to get to know about what updates needed by which server after the software update scan successfully finished by the client (server) .There is post which i did last month about similar requirement ,have you looked at it ? http://eskonr.com/2016/02/sccm-configmgr-how-to-generate-patch-compliance-report-that-shows-all-updates-for-specific-collection/ take a read,see if you still need such kind of report ,if so , you can use the SQL code to get through the required patches before you deploy.

      Reply
    2. Uday Kumar · Edit

      Hi Eswar,

      I would need a help in generating system last reboot servers after patching. Even through we were able to generate the report by using SQL query but the report does not capturing correct information about last reboot of servers. After discussion with multiple team members who have build sccm in our environment they had suggested me that their would be some issue in agent side or hardware inventory it could be the reason report shows wrong.. The problems is after patching the server we are getting report generated but it is not showing as rebooted instated it showing as server last rebooted on year of 2017 like that which is wrong.

      We are unable to identify issue could you please help me rectifying the issue..I am follower of your blog and I dont find any issue like this google..

      Reply

Post Comment