Forum Widgets
Latest Discussions
Site drop down missing when trying to push client
Good afternoon, all. I just changed permissions for my helpdesk. For some reason they were nearly full admins from historical setup. Created a collection that is a copy of "all PC Clients" and called it "All PC clients for deployments" added a new security role called "Helpdesk" Setup a new group in AD and placed the helpdesk in said group under administration > overview > security > Administrative users, i've added the group, gave them security roles as "helpdesk" Set security groups to only the specified collection of "all PC clients for deployments", Security scope for Helpdesk and all unknown computers. Under security roles, i copied the same security role they had previously and created the name "helpdesk" I've looked at everything under both within "permissions" and everything matches as far as i can see. Does anyone know what sets this specific permission? Mine is perfectly fine, but i am a full administrator.
Windows 11 23H2 Cumulative Updates not shown in WSUS/SCCM
Hi everyone, I want to start rolling out devices in my company with Windows 11 23H2 via SCCM. However, I first need to update the existing 23H2 image with the November 24 cumulative update (KB5046633). In SCCM and WSUS, I can't find the 23H2 product categories for synchronization, but 24H2 is showing up. What could be the reason for this?SCCM Server fails Windows 11 24H2 upgrade package download
SCCM Server 2403 fails Windows 11 24H2 upgrade package download (both 2024-09B and 2024-10B). Running MP, DP, Site and WSUS database, several other roles on the same Windows Server 2022 VM. Running SUP/Wsus on another dedicated VM in the same subnet. When running ADR, GUI shows error message: 0x87d20417 ADR rule download failed When downloading the updates manually to new deployment package, error message: Failed to download content id 666666666 Cannot create a file when that file already exists Here is a sample from Patchdownloader.log file: Downloading content for ContentID = 18696696, FileName = professional_en-us.esd. Software Updates Patch Downloader 09.10.2024 13:26:50 11808 (0x2E20) Proxy is enabled for download, using registry settings or defaults. Software Updates Patch Downloader 09.10.2024 13:26:50 11808 (0x2E20) Connecting - Adding file range by calling HttpAddRequestHeaders, range string = "Range: bytes=0-" Software Updates Patch Downloader 09.10.2024 13:26:50 8052 (0x1F74) Download file size : 553783259 bytes Software Updates Patch Downloader 09.10.2024 13:26:50 8052 (0x1F74) Download http://dl.delivery.mp.microsoft.com/filestreamingservice/files/75ac9ad5-f29b-4e95-af3f-8a321bd39b92/public/professional_en-us_98014c58afbd29a57aed4f5eb6819f5cc5bce4a4.esd in progress: 10 percent complete Software Updates Patch Downloader 09.10.2024 13:26:51 8052 (0x1F74) ....... Download http://dl.delivery.mp.microsoft.com/filestreamingservice/files/75ac9ad5-f29b-4e95-af3f-8a321bd39b92/public/professional_en-us_98014c58afbd29a57aed4f5eb6819f5cc5bce4a4.esd in progress: 90 percent complete Software Updates Patch Downloader 09.10.2024 13:27:00 8052 (0x1F74) InternetReadFile() return true and pdwNumberOfBytesRead equals to 0, but ulTotalFileRead=553703152 still less than ulFileSize=553783259, treat it as a retriable error. Software Updates Patch Downloader 09.10.2024 13:27:01 8052 (0x1F74) InternetQueryDataAvailable return code = 183 - Can still retry for 3 times. Will retry in 10 seconds. Software Updates Patch Downloader 09.10.2024 13:27:01 8052 (0x1F74) the same kind of error is logged for several other files related to the upgrade package, but not all. Downloading using Edge browser on the same machine directly from url "[http://dl.delivery.mp.microsoft.com/filestreamingservice/files/75ac9ad5-f29b-4e95-af3f-8a321bd39b92/public/professional_en-us_98014c58afbd29a57aed4f5eb6819f5cc5bce4a4.esd]" works fine, so it should not be a connectivity issue. Downloading Windows 11 23H2 upgrade package works fine. Has anybody else faced the same issue?
two sccm to one tenant intune
I have a number of devices configured in SCCM "A" co-management with an intune tennant "A" I have a number of devices configured in SCCM "B" co-management with an intune "B" tennant. Now I need to undo the SCCM comanagement "A" and make a new co-management the intune tenant "B" What are the risks and process to do this?
Programmatically retrieve the list of applications deployed to a Distribution Point Group
I'm looking for a way on how to retrieve the list of applications that are deployed a Distribution Point Group. It seems that there's no out-of-the-box cmdlet for Configuration Manager that can achieve that. Invoking a report in Reporting Services is also not an option, as well as querying directly to the SQL Server. Is there any other way to accomplish this using PowerShell?
CM Client on VM's
We have around 2000 VM's which have CM Client installed, we are seeing a strange issue on about 5% of these. Software Center fails to open, when trying to resolve the issue by performing a client removal and reinstall or a client repair, we are seeing last installation error codes 2147942405 within the console. On a repair in the clients ccmrepair log file we see: Could not get registration for product "Configuration Manager Client". Repair required. WMI returned (80041010) CcmGetOSVersion failed with 0x80041010 Failed with unhandled error code 6 Upon an install in the CCMsetup log we are seeing: CcmSetup failed with error code 0x80041010 We have tested the WMI and this shows as no issues, anyone have an thoughts on this? Could we be seeing the issues with CM as a symptom of a bigger issues. I seem to just be going round in circles. We are using CM2303 with eHTTP.
SCDPM workgroup(untrusted domain) machine system state backup can't restore application.
I've encountered an issue with DPM Workgroup untrusted machine backup. After backing up the system state, I couldn't locate my application. While I can see that all the programs are installed, I'm unable to find the shortcut to run the program. I'm uncertain whether a workgroup untrusted machine can successfully back up the application/program.AAD devices can't communicate with the CMG
Hybrid domain joined computers can e.g. download software from the CMG but AAD computers can't. The AAD devices have root and intermediate certs via PKI installed and as a test I installed the actual cmg cert (from windows certificate authority service) on an AAD device and checked that the certificate chain is ok for the device. The root and intermediate certs were also specified when creating the CMG. Connection analyser is green ticks everywhere. The site is HTTPS only and we use certificates on all devices. The CMG has been recreated from scratch using a scale set and with new app registrations and we use a cname dns entry to map to Azure CMG dns name, The devices appear to install ok via autopilot co-management using this script: CCMSETUPCMD="CCMHOSTNAME=ourcmg.company.com/CCM_Proxy_MutualAuth/xxx57594037927xxx SMSSiteCode=555" The main errors are these in ccmMessaging log: Failed to get CCM access token while token auth is required. Error 0x87d00231 [CCMHTTP] ERROR: URL=https://ourcmg.company.com/CCM_Proxy_MutualAuth/xxx57594037927xxx/ccm_system/request, Port=443, Options=448, Code=12175, Text=ERROR_WINHTTP_SECURE_FAILURE Post to https://ourcmg.company.com/CCM_Proxy_MutualAuth/xxx57594037927xxx/ccm_system_windowsauth/request failed with 0x87d00231. Thanks for any ideas - the case has been with Microsoft support for weeks and no answer as yet.
