Here is my powershell script to get primary user data from McAfee ePo database, then use Add-CMUserAffinityToDevice to import them into SCCM, and remove any primary user begins with “adm” or “!”. This can be an additional source to enhance your SCCM device affinity data. # Remove & Add Device Affinity # Rui Qiu […]
SCCM
SCCM Report for User Device Affinity
Since we are switching to target users instead of machines with SCCM, here is my SQL Query for finding devices with no primary user and devices with more than 1 primary user: — Check for duplicates select MachineResourceName, count(*) from v_UserMachineRelationship group by MachineResourceName having count(*) > 1 order by count(*) — Detailed Data […]
Cannot Remove a DP – Old Site System from SCCM
The most simple and stupid solution is to just wait 24h, and then SCCM will let you remove it 🙂 If you want it fast, you can try this: Open your regedit: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\SMS_SITE_COMPONENT_MANAGER\Component Servers Find out your old DP, and on each “Deinstallation Start Time” REG_DWORD value to 1.. then restart SMS_SITE_COMPONENT_MANAGER. However, if […]
- Powershell
- ...
Prompt to Rename Computer During Task Sequence via Powershell
Here is my powershell script to prompt to rename computer during SCCM OSD Task Sequence. It will first auto popular machine name according to serial number, and then ask user to rename computer. If user do not do anything, the pop out window will auto close within 30 seconds. # Smart Computer Re-name System # […]
SCCM Compliance Rule For Checking CredSSP Envryption Oracle Remediation Status
Here is my powershell detection script for checking machines with CredSSP Envryption Oracle Remediation Status with SCCM Compliance Rule: # Check CredSSP Envryption Oracle Remediation Status # Rui Qiu # 8/21/2018 # ver1.4 $osversion = Get-WmiObject -Class Win32_OperatingSystem | Select BuildNumber -ExpandProperty BuildNumber $matches = “KB4103718”, “KB4103712”, “KB4103730”, “KB4103726”, “KB4103725”, “KB4103715”, “KB4103723”, “KB4103731”, “KB4103727” $fix […]
E_SMPERROR_MIGRATIONID_NOT_FOUND (204)
When I was using state migration point for user data backup and recover during OSD, it failed multiply times today. and the error message was “SMP request to failed with error: E_SMPERROR_MIGRATIONID_NOT_FOUND (204)” Not sure what went wrong, just tried again and failed again. Then I realized that I was backing up user data in […]
SCCM PXE Boot TFTP Issue
My SCCM PXE Boot environment was working fine a few months ago, and but it broke and showing this when I boot up any machines: Client Mac Addr: xxx GUID: xxx Client IP: xxx MASK: xxx DHCP IP: xxx Gateway IP: xxx TFTP… PXE-M0F: Exiting Intel Boot Agent. So the client can get an IP. […]
SCCM DP Installation Notes
distmgr.log CWmi::Connect() failed to connect to \\DP-name.dm.xxx.yyy.corp\root\CIMv2. Error = 0x800706BA 0x800706BA = the RPC server is unavailable. Failed to install DP files on the remote DP. Error code = 1722 – primary site computer account is in local admin group – windows firewall disabled on both computers (firewall set service remoteadmin enable, file sharing) – […]
SCCM Package for Registry Permissions Change
Orignally I have Powershell script for doing that, but it turns out not so good: if (!(Test-Path HKCC:)) {New-PSDrive -PSProvider registry -Root HKEY_CURRENT_CONFIG -Name HKCC} $RegPath= ”HKCC:\SOFTWARE\XXX” New-Item -Path ”HKCC:\SOFTWARE\” -Name Encompass -Force $acl = Get-Acl $RegPath $rule = New-Object System.Security.AccessControl.RegistryAccessRule (“BUILTIN\Users”,”FullControl”,”Allow”) $rule2 = New-Object System.Security.AccessControl.RegistryAccessRule (“Everyone”,”FullControl”,”Allow”) $acl.SetAccessRule($rule) $acl.SetAccessRule($rule2) Here is the bath file to […]