This is quick post to show you ,how to compare 2 or more collections to find clients that are not member of other collections. The reason for me to write this collection is ,for server patching ,we have been using direct membership rules ( I know AD sec groups is good way to automate this but lets leave this for now ) due to multiple business units with different maintenance windows . There could be multiple scenarios to compare 1 collection with another collection for application deployment ,OSD etc. So i want to compare the list of servers that are…
Author: Eswar Koneti
I had a requirement to generate report to list members (users/groups) of local administrators group on servers for auditing purpose. Finding the users/groups who are member of local administrator group manually or scripting is tedious task on all servers .If you are managing the devices with configuration manager ,you can leverage Configmgr tool to get this task done so easily . By default ,Configmgr do not have inbuilt solution /provide any report to get members of local administrator group ,but you we can achieve this using custom solution . The only solution that i have tried earlier and seen people…
With Configuration manager 1606 ,new feature was added to software updates section which is called ‘Run software updates compliance scan immediately after a client installs software updates and restarts’ . This feature really helps to run a software update compliance scan immediately after a client installs software updates and restarts.This feature enables the client to check for additional software updates that become applicable after the client restarts, and then to install them (and become compliant) during the same maintenance window. To set this up for a deployment, on the User Experience page of the Deploy Software Updates Wizard, select…
Today I just finished in-place upgrade for one of my SCCM Configmgr 2012 R2 SP1 Site to Configmgr Current Branch 1606 and upgrade was very smooth without any issues. After the in-place upgrade completed successfully,launch the console, check for updates under updates and servicing node for 1610. For some reason update 1610 stuck at downloading for longer time . To troubleshoot this ,open dmpdownloader.log ,check the download status . As you can see below ,it is trying to extract autorun.inf from the cab file that was downloaded (update 1610) but it failed for some reason. Why does it fail…
Microsoft released February update 1702 for SCCM Configmgr Technical Branch with some new features and improvements to the existing features that are reported through user voice . These technical preview updates will help you to test in lab environment and report feedback to Microsoft before they make into current Branch (Production Version). You can install this version to update and add new capabilities to your Configuration Manager technical preview site. To see these preview updates in your Configmgr console,you must have the base version of SCCM Configmgr Technical preview 1610 (not applicable to current branch).These Technical Preview updates are intended…
Few weeks ago ,i was assigned with task to manage clients in untrusted forest using Configuration Manager 2012 R2 SP1.Yes, we are still running on Configmgr 2012 but soon (next few weeks) on Configmgr Current Branch . Scenario is ,I have a forest (intranet.asia) where SCCM 2012 R2 SP1 is installed and this is being used to manage clients in this forest .Now ,I have a requirement to manage clients in untrusted forest (life.net) which is completely isolated from the existing forest and there is no trust between these 2 . So the task is ,how to manage the clients…
If you are using SCCM Configmgr in your environment, you can accomplish lot manual /administrative tasks using Configmgr using deployment/compliance method. Recently I was working on task to update the DNS records (Primary DNS server IP ) for lot of servers as servers use static IP and is required to change it on all where needed. As there was change in network segment for DNS server ,the IP of the DNS server changed from Class B to Class A. How do I update the old DNS server record with the new one on all the servers ? Before you…
Introduction: Updated: This post is valid only if your Configmgr is running Current Branch 1702 and above versions due the change in powershell cmdlet New-CMSoftwareUpdateDeployment . Software update groups provide you with an effective method to organize software updates in your environment. Software update group consists of multiple software updates (metadata Only) .You can manually add software updates to a software update group or automatically add software updates to a software update group by using an ADR. One of the major advantage using software update group is ,easier to track the compliance status using reports or console method for multiple updates that…