Shell Script to Install Cisco Anyconnect VPN via Intune

Thu, 02 Feb 2023 20:20:21 GMT

There is an excellent article talks about how to deploy the Cisco Anyconnect VPN client via Intune:

Cannot Login Windows with AAD Joined Devices via Okta Federation

Fri, 06 Jan 2023 01:25:48 GMT

If your Azure is federated to Okta, your windows 10 devices may not able to log in to Windows with just a purely Azure AD joined environment. The error message will tell you that you have the wrong...

Fix CMG Conversion Failed from Classic to VM Scale Set

Thu, 01 Sep 2022 19:21:07 GMT

I am trying to convert our CMG from classic to virtual machine scale set for the MECM infrastructure upgrade and it failed. From the SCCM console itself, the CMG was in error state, and if I check...

How to check who make changes in MECM/SCCM Infrastructure?

Thu, 01 Sep 2022 16:43:30 GMT

Sometimes things just broke, and after hours of troubleshooting, you realize that someone made some changes to the SCCM infrastructure, and you want to find out who made the changes. How? Under the...

Some typical issues with internet only mode(CMG) SCCM clients

Sun, 24 Apr 2022 16:45:47 GMT

1. Cannot install SCCM agent via CMG MP Recently I found out that I cannot install sccm agents on our DMZ zone, when I checked the ccmsetup.log, it showed that it is trying to grab the SCCM MP from...

Use Powershell to check Website Connectivity

Tue, 18 Jan 2022 02:49:22 GMT

We have some issues that some systems cannot reach our MECM server, and that was due to the new network changes. I wrote this script to find out which machines cannot reach our MECM server. Here is...

Detailed SCCM Patching Report via Powershell Universal & HTML

Fri, 03 Sep 2021 20:08:36 GMT

This interactive Powershell SCCM Patching Report will show the overall compliance rate in a bar graphic, and then list the all non compliance machine with detailed failure reasons. '$Session:value

Diskspace Checker via Powershell Universal and HTML

Fri, 03 Sep 2021 20:03:38 GMT

This online tool will show the diskspace of a computer you specified. It is using PowerShell Universal as web server and HTML code to show the graphic bar. It has the disk capacity, free space and...

SCCM Clients Cleanup

Fri, 03 Sep 2021 19:56:38 GMT

I run this monthly to clean up staled sccm clients. There are 3 parts: Computer Objects no longer in AD but still in SCCM; Inactive clients ( over 30 days, defined inside SCCM collection query);...

Powershell Script Running Result Log Viewer

Fri, 03 Sep 2021 18:50:53 GMT

I have lots of scheduled PowerShell script running regularly. This code will show all the Powershell running result log via webpage online.

Online SCCM Client Log Viewer

Fri, 03 Sep 2021 18:30:29 GMT

This is one of my favorite code to run client log viewer online in an interactive way. Instead of use the CMTrace to see the client log, going through all the hoops, you can just type in client name...

SCCM Component Log Viewer

Fri, 03 Sep 2021 18:03:38 GMT

This page will show all the detailed SCCM component logs if they are on warning or critical status. It requires PowerShell Universal to display the data on the website. ( You can also just use the...

SCCM Server Storage Report

Fri, 03 Sep 2021 17:50:08 GMT

This page will show all the disk space info from all the SCCM servers. You just need to specify all the sccm servers you have in the parameters part in the PowerShell script. It will auto search all...

Overall SCCM Component Status

Fri, 03 Sep 2021 17:13:36 GMT

This page is to show all the SCCM component status.

Preventative SCCM Monitor and Troubleshoot Website

Fri, 03 Sep 2021 17:03:41 GMT

As a SCCM admin, you might have to check SCCM health on a regular basis, and troubleshoot lots of client issues. Normally I have to UNC into the client machine, goes into C:\Windows\CCM\Logs, and...

How to find Network Connection Profile via SCCM

Wed, 01 Sep 2021 18:25:11 GMT

If you need to find out the "domain/public/private" network connection profile on each machine, you need to set a custom hardware inventory class from SCCM. This class is called MSFT\...

Powershell Script to Auto Upload and Process Autopilot 4k Hardware Info

Wed, 21 Jul 2021 14:21:10 GMT

It was quite a journey setting up autopilot, and I have wrote a powershell script to get the autopilot 4k hardware info from the user machine, upload to Azure blob storage, and then using runbook to...

How to setup Azure LDAP via Azure AD Domain Services

Thu, 17 Jun 2021 17:43:31 GMT

We have an application sits in our DMZ zone, and we are planning to let our vendors to authenticate from our internal AD. So I have set up a LDAP service using Azure AD Domain Services. Basically I...

How to Create SCCM Application for Rapid7 Insight Agent

Fri, 30 Apr 2021 15:35:37 GMT

Rapid7 Insight agent is not an easy application to pack via SCCM :) For detection rule, I have tried a few times, and here is the working one: (If you tried to use file detection rule, even if...

SCCM Detection Rule for Google Drive File Stream

Thu, 29 Apr 2021 16:08:33 GMT

So it is a bit of mess for Google Drive File Stream as every time it does the self upgrade, it keeps the existing folder and create a new folder for each version. And SCCM doesn't like this at all....

Azure AD Connector 8344 Permission Issue

Mon, 26 Apr 2021 20:51:28 GMT

If you see some user has 8344 permission issues on your Azure AD Connector log, the fix is simple: https://powerscripter.wordpress.com/2015/02/25/enable ad inheritance on all users in an ou and all...

SCCM Client Network Tab has Wrong IBCM FQDN Address

Sat, 17 Apr 2021 15:56:09 GMT

I don't know what caused this issue, the only recent change was me upgrading our SCCM environment to 2010. Then I found out some of our internet only clients (SCCM CMG) cannot connect to our SCCM...

Setup NDES with Intune and SCCM

Wed, 24 Mar 2021 20:43:51 GMT

We are planning to issue certificate to clients over the Internet, thus we need to setup NDES Infrastructure. Steps to configurate NDES: 1. NDES Service Account(Just default regular account is fine)...

SCCM CMG Setup

Tue, 01 Dec 2020 16:51:14 GMT

A few months back I was setting up SCCM IBCM with AWS EC2s. However, as our management only wants one way communication from our corporate network to DMZ, and the SQL database push based replication...

Install SCCM Internet Only Client(CMG) via Group Policy and Powershell

Mon, 23 Nov 2020 17:29:29 GMT

We have a special domain that is only used for contractors, and they have strict network rules, so I set up SCCM internet only client by our CMG via Group Policy and Powershell. You may think that...

MP Control Manager detected DMP is not responding to HTTP requests

Tue, 13 Oct 2020 23:36:27 GMT

When I was setting up our DMZ SCCM Server, I came into this issue: MP Control Manager detected DMP is not responding to HTTP requests So I went ahead and check mpcontrol.log under C:\SMS\logs. I...

How to Configure Two-tier CA with High Availability

Mon, 12 Oct 2020 15:29:15 GMT

This is the gold guide I used for setting up my two tier CA in our DMZ environment: https://techblog.ptschumi.ch/windows server/install an offline root ca with an enterprise subordinate ca 2/ These...

Certificate Existence and Removal via SCCM Compliance Rules

Wed, 30 Sep 2020 17:07:25 GMT

I need to find some certificates by the template name and thumbprint. Here are two SCCM compliance rules to for detection: Certificate Detection based on Template Name: Certificate Detection based on...

How to Change Office2016 Author Info

Tue, 29 Sep 2020 17:29:44 GMT

Here are my thought process to create a SCCM Application to change Office 2016 author info: 1. How do we know the current name for office? 2. Discover Script 3. Fix In our environment, our current...

Implement WinRM HTTPS by GPO and SCCM

Tue, 29 Sep 2020 15:47:39 GMT

Basically I use these 3 steps to implement WinRM HTTPS: 1. Setup certificate for WinRM HTTPS via GPO: https://www.darkoperator.com/blog/2015/3/24/bdvjiiw1ybzfdjulc5pprgpkm8os0b 2. Enable WSMan...

How to Setup OCSP and Internet Access

Mon, 28 Sep 2020 17:14:37 GMT

Here is the OCSP Architect Diagram: Here are the guides I used to setup OCSP: Microsoft Certificate Services Configuring OCSP

SCCM DMZ IBCM vs Cloud Management Gateway Architecture Diagram

Fri, 18 Sep 2020 17:22:04 GMT

I tried to setup the SCCM as secure as possible for our internet facing clients, and here are two architect diagram by using IBCM(Internet Base Client Management) and Microsoft's new Cloud Management...

SCCM Query for Browsers

Fri, 28 Aug 2020 16:47:43 GMT

Here are my SCCM queries for all the browsers. Firefox SCCM Query Chrome SCCM Query: Edge Legacy: Edge Chromium IE For IE it is a bit complicated, as we have to customize the hardware inventory to...

Automated Patching for Amazon Workspaces via SCCM and Powershell - Day 1

Mon, 30 Sep 2019 20:17:10 GMT

Do you have hundreds of Amazon Workspaces to patch monthly? and you are so tired of manually power them on to patch, and only reboot at a certain time? Here are my PowerShell scripts to automate all...

How to Find Out If SCCM Rebooted Your Machine?

Thu, 06 Jun 2019 15:57:41 GMT

Open event viewer, "Windows Logs" "System", and filter your logs with event ID 1074.

ASUSTOR NIMBUSTOR 2 (AS5202T) Review - A Comparison of 2 Bay NAS

Fri, 31 May 2019 16:06:54 GMT

My 2 year old [amazon link="B078Z4MSQW" title="QNAP TS 473e" /] died a few weeks, and unfortunately, it was just one month passed the 2 year warranty from QNAP, they told me to repair the QNAP, which...

Handheld Blender

Thu, 16 May 2019 15:56:59 GMT

I was looking for some handheld blenders to mix my drink in office and at home. So I did a research on all the portable blenders on Amazon. Bellemain Professional Milk Frother 2 Speed Battery...

DNS Management Tool Missing in RSAT Windows 10 1809 - SCCM Package

Mon, 13 May 2019 17:48:51 GMT

If you upgraded to Windows 10 1809, and re installed RSAT, but the DNS Management tool is missing from RSAT, you can use this Powershell Script to make it a SCCM Application in your Software Center...

SCCM Shockwave Uninstaller

Mon, 29 Apr 2019 20:35:08 GMT

Here is my script to uninstall shockwave 12.2 and 12.3. Haven't tested on other versions though: Shockwave Uninstaller Rui Qiu 4/29/2019 Check for newer or older version of Shockwave if exist...

How to Remove Wordpress Malware src="//deloplen.com/apu.php?

Sat, 27 Apr 2019 18:14:00 GMT

Here is the fix for the malware deloplen/pushqwer on your Wordpress: 1. Remove all unused Wordpress Themes because they are infected already 2. In your active theme edit your functions.php file and...

How to hide shared folders under DFS Namespaces

Mon, 26 Nov 2018 18:23:28 GMT

Solution is here: https://pcmusings.wordpress.com/2010/12/09/how to hide shared folders under dfs namespaces/ attrib –r +h +s

Powershell Script to Find Primary User from McAFee ePo and Feed Data into SCCM Device Affinity

Mon, 26 Nov 2018 17:48:10 GMT

Here is my powershell script to get primary user data from McAfee ePo database, then use Add CMUserAffinityToDevice to import them into SCCM, and remove any primary user begins with "adm" or "!"....

SCCM Report for User Device Affinity

Mon, 29 Oct 2018 17:25:38 GMT

Updated: Here is a better sccm query for creating a device collection based on primary users:

Cannot Remove a DP - Old Site System from SCCM

Fri, 14 Sep 2018 20:56:45 GMT

The most simple and stupid solution is to just wait 24h, and then SCCM will let you remove it :) If you want it fast, you can try this: Open your regedit: HKEY\ LOCAL\...

Prompt to Rename Computer During Task Sequence via Powershell

Fri, 24 Aug 2018 19:44:17 GMT

Here is my powershell script to prompt to rename computer during SCCM OSD Task Sequence. It will first auto popular machine name according to serial number, and then ask user to rename computer. If...

SCCM Compliance Rule For Checking CredSSP Envryption Oracle Remediation Status

Tue, 21 Aug 2018 18:18:52 GMT

Here is my powershell detection script for checking machines with CredSSP Envryption Oracle Remediation Status with SCCM Compliance Rule: Check CredSSP Envryption Oracle Remediation Status Rui Qiu...

E_SMPERROR_MIGRATIONID_NOT_FOUND (204)

Mon, 25 Jun 2018 22:06:56 GMT

When I was using state migration point for user data backup and recover during OSD, it failed multiply times today. and the error message was "SMP request to failed with error: E\ SMPERROR\...

SCCM PXE Boot TFTP Issue

Thu, 31 May 2018 17:48:11 GMT

My SCCM PXE Boot environment was working fine a few months ago, and but it broke and showing this when I boot up any machines: Client Mac Addr: xxx GUID: xxx Client IP: xxx MASK: xxx DHCP IP: xxx...

My Shavlik Filter (Ivanti)

Fri, 20 Apr 2018 22:14:56 GMT

This is my Shavlik Filter for auto publishing

SCCM DP Installation Notes

Wed, 18 Apr 2018 21:11:20 GMT

distmgr.log CWmi::Connect() failed to connect to \\DP name.dm.xxx.yyy.corp\root\CIMv2. Error = 0x800706BA 0x800706BA = the RPC server is unavailable. Failed to install DP files on the remote DP....

SCCM Package for Registry Permissions Change

Wed, 18 Apr 2018 20:51:34 GMT

Orignally I have Powershell script for doing that, but it turns out not so good: if (!(Test Path HKCC:)) {New PSDrive PSProvider registry Root HKEY\ CURRENT\ CONFIG Name HKCC} $RegPath=...

Fix WPAD Vulnerability by Changing Host File with SCCM

Wed, 11 Apr 2018 15:17:57 GMT

It was a bit more diffcult than I thought, originally I was using compliance settings, but then it didn't work so well. So I go back to the classic application deployment by SCCM. Here is the...

Rapid7 Insight Agent Update Fix Discover Script

Thu, 05 Apr 2018 20:54:38 GMT

Rapid7 Insight Agent Update Fix Discover Script Rui Qiu v1.1 4/3/2018 $folder = "C:\Program Files\Rapid7\Endpoint Agent" if (test path $folder) { $content = (get content config.json | where { $\...

Issues Installing Shavlik (Ivanti Patch)

Fri, 30 Mar 2018 18:02:01 GMT

I didn't realize a simple issue can cause a big issue with Shavlik: When launching the installer from Shavlik, you have to "Unblock" the file before running the isntaller, otherwise you will get...

How to Set up SCCM SSRS Email Notification

Fri, 30 Mar 2018 17:56:32 GMT

First go to your SQL Reporting server, and launch "Reporting Services Configuration Manager": It is best to use an internal SMTP server. And once you have set it up, you can use this Powershell...

SCCM WSUS Update Failed with 0x80244022

Thu, 15 Mar 2018 19:17:19 GMT

When I checked the error code, it said HTTP error 503 from WUAHandler.log, it turned out that the Wsuspool was stopped in IIS, and I have to changed the "Private Memory Limit" to 4194304....

How to Uninstall NoMAD

Tue, 16 Jan 2018 14:14:44 GMT

Here is a simple shell script to uninstall NoMAD: /bin/ls l /dev/console | /usr/bin/awk ‘{ print $3 }' And you can use this to search files after uninstallation just to verify it is gone:

Force Install macOS Update

Mon, 08 Jan 2018 09:04:11 GMT

Here is a simple command to force install macOS updates in the background: softwareupdate i a After running that, you can use casper to notify user to reboot :) and here is a useful link to enable...

Extract a JSON value from a BASH script

Thu, 04 Jan 2018 10:54:27 GMT

find the simple bash script for extracting JSON value from this GitHub:

Shell Script to Remove Centrify, Move Wifi/LAN, and Request 802.1 Certificate

Tue, 12 Dec 2017 10:38:57 GMT

Here is a long script of doing a lot of things, it deletes the Centrify Binding, Centrify certificates and itself, binds the machine to AD via native plugin and requests a 802.1x certificate via...

Casper Configuration Profiles Auto Renewal

Tue, 12 Dec 2017 10:06:31 GMT

If you are using AD certificates inside a configuration profile, here is the easiest way to make it auto renewal: sudo defaults write /Library/Preferences/com.apple.mdmclient...

How to Troubleshoot 802.1x Mac Authentication Issues

Tue, 07 Nov 2017 10:15:16 GMT

It is quite complex to troubleshoot 802.1x authentication issues for Mac. Here are a few sections you can look for errors: 1. RADIUS Server Log This is the most convenient and efficient way to...

802.1X Network Authentication for Mac

Mon, 06 Nov 2017 09:59:59 GMT

Cannot believe I spent so much time just to figure out how to do 802.1x network authentication for Mac :) So for managing macs, we have two ways of setup 802.1x, one is using Apple Profile Manager to...

How to Check Macs with Office 2011 & Office 2016 Installed in Casper

Thu, 13 Jul 2017 20:06:16 GMT

Here are the Casper Smart Groups to see how many office 2011 and office 2016 users:

SCCM SQL Report for All Office Users

Wed, 28 Jun 2017 17:29:53 GMT

Here is the sccm sql report statement to finding out all office users, I have used "Microsoft Office Professional" as the keyword, you can change to any software title you want :) SELECT DISTINCT TOP...

SCCM Package for Tableau & Tableau Reader

Fri, 23 Jun 2017 20:58:09 GMT

Installation command line: TableauReader 64bit 10 3 1.exe /quiet /norestart AUTOUPDATE=0 ACCEPTEULA=1 Detection method: File exist and version equal: C:\Program Files\Tableau\Tableau Reader 10.3\bin

Cannot Install SCCM client - Setup was unable to compile Sql CE

Thu, 18 May 2017 17:09:15 GMT

It turns out the solution is easy : Just delete everything under C:\Windows\CCM

Another way to check Update Installed via Powershell

Fri, 12 May 2017 21:08:28 GMT

I have to check if machine has MS March update installed, and SCCM cannot make my job simpler :( So I created a new compliance rule to check the result, here is the code: $error.clear() try {...

More Accurate SCCM Software Metering Report

Wed, 05 Apr 2017 19:17:32 GMT

I found out that the sccm table view v\ MonthlyUsageSummary is not really accurate, actually v\ GS\ CCM\ RECENTLY\ USED\ APPS.LastUsedTime0 is the best accurate one to determine user's application...

My Automated Powershell Script for SCCM Patching Process

Fri, 31 Mar 2017 17:48:12 GMT

we are slowing moving every machine to SCCM patching lately, and I have to move 100 machines each week, so I created this automated powershell script to run weekly. 1.My first script is to move...

SCCM Visio / Project Uninstaller Package

Fri, 31 Mar 2017 17:07:16 GMT

It was such a pain to create a sccm visio/project package for this ! I tried a few different ways of msi uninstall via the product code, all failed. then I started using the setup /uninstall ,...

How to use NetSUS to Netboot a VM

Tue, 14 Mar 2017 21:04:05 GMT

1. Check the “Model Identifier” from your already installed Mac VM, usually it is VMware7,1. 2. Add this into your NBImageInfo.plist of your boot image:

Find A File with Random Characters and Send Email by SCCM Compliance Rule

Fri, 17 Feb 2017 18:55:47 GMT

Here is my Powershell script for Finding a file with random characters in the end, if the system find the file, it will email to our alert mailbox as well. This is done by SCCM Compliance Rule: File...

SCCM Compliance Rule for Finding Process Running

Fri, 17 Feb 2017 17:08:35 GMT

Here is my powershell script for finding if a process is running with SCCM compliance rule. $process = Get Process Process name xxx ErrorAction SilentlyContinue if ($process) { Write Host "Running" }...

Casper Debug Log Location

Mon, 13 Feb 2017 19:31:13 GMT

Here is the full listing of enabling DEBUG Modes: Enabling and Generating a Debug Log for Admin, Imaging & Remote 1) Create Debug Folder in Casper Application Directory:...

Casper MalwareBytes Package

Mon, 13 Feb 2017 19:28:31 GMT

Here are my two scripts for install and scan with MalwareBytes on Casper. First one is to download, install and register MBBR: /bin/sh MBBR Scanner Ray Qiu Feb 2, 2017 Download Installer cd /tmp curl...

Casper MDM Enrollment Issue

Wed, 01 Feb 2017 18:53:00 GMT

we have a few macs that cannot enroll MDM, when I check the jamf log from the mac, it said Error installing the computer level mdm profile: profiles install for file:'/Library/Application...

SCCM Report for Disk Free Space Under 20%

Tue, 24 Jan 2017 19:13:40 GMT

Here is the SQL statement for my SCCM Report on disk free space under 20%, it will display the user machine AD Site, PC Name, Last Logon User, Total Disk Space, Free Space, Free Space Percent( All in...

SCCM Report - Software Metering Report for Last Usage Over 30 Days Ago

Fri, 20 Jan 2017 23:36:29 GMT

Here is my SQL Statement for SCCM Report Software Metering Report for Last Usage Over 30 Days Ago SELECT DISTINCT TOP (100) PERCENT RV.AD\ Site\ Name0, v\ R\ User\ 1.description0, RV.Netbios\ Name0,...

Casper NetSUS Not Working on CentOS 7

Thu, 19 Jan 2017 22:05:26 GMT

I thought there is something wrong with my config, it turned out that the Casper NetSUS cannot config well with CentOS. modify /lib/systemd/system/tftp.service and then: setsebool P tftp\ anon\ write...

SCCM Troubleshooting Guide

Fri, 06 Jan 2017 21:58:44 GMT

Here are some useful articles for SCCM troubleshooting: SCCM Issues by Category:

SCCM WSUS Error 80072EE2

Fri, 16 Dec 2016 21:36:30 GMT

We started using SCCM WSUS for workstation patches, but I always saw half machines success with half machines waiting for updates. It was always the typical error 80072EE2. on the logs from WSUS, you...

How to find CORRECT pending reboot machines

Fri, 09 Dec 2016 23:41:15 GMT

https://blogs.technet.microsoft.com/smartinez/2014/06/27/reboot pending report how to create the report/

SCCM Reports - Software Update Status

Fri, 09 Dec 2016 23:40:47 GMT

This SCCM report is really a complicated one, I used lots of views to do the information I need, such as : AD Site, Machine Name, Last Logon User, Last Update Scan, Last Logon Timestamp, Update...

SCCM Reports - No SCCM agent workstation client

Fri, 09 Dec 2016 23:21:14 GMT

select all SMS\ R\ System.Name0,SMS\ R\ System.Last\ Logon\ Timestamp0,SMS\ R\ System.Resource\ Domain\ OR\ Workgr0,SMS\ R\ System.Client0,SMS\ R\ System.Operating\ System\ Name\ and0 from vSMS\ R\...

SCCM Reports - Last Hardware Scan Over 37 Days

Fri, 09 Dec 2016 23:19:32 GMT

I am working on SCCM reports a lot lately, here is the SQL statement for Last Hardware Scan Over 37 Days SELECT dbo.v\ R\ System.AD\ Site\ Name0, dbo.v\ R\ System.Name0, dbo.v\ R\ System.User\ Name0,...

Wordpress Update Failed - Wp-admin Blank

Fri, 09 Dec 2016 22:38:53 GMT

When you tried to log in your wp admin from your wordpress after a update, and you got "upgrade.php?\ wp\ http\ referer=%2Fwp admin%2F". Here is the super fast easy fix: 1. Rename /Wp content/plugins...

WSUS - Index was outside the bounds of the array

Fri, 02 Dec 2016 21:27:54 GMT

I didn't Microsoft is so bad at WSUS....the issue was KB3159706 was recently installed on our SCCM WSUS Server...and everything broke after that...

WSUS SUSDB Recovery Pending

Fri, 02 Dec 2016 18:00:07 GMT

Saw this issue when I logged into the WSUS database via management studio: SUSDB(Recovery Pending). When I checked SoftwareDistribution.log with my WSUS, then I realized that NT\Network Service...

How to Install DMG Application via Shell Script

Wed, 30 Nov 2016 22:40:02 GMT

Sometimes we have to install a DMG application via shell script, here is mine: /bin/sh Cisco Meeting Installer Ray Qiu Nov 28, 2016 Download & Extract Installation Files cd /tmp curl LOk...

More Intelligent Application Catalog - IIS URL Rewrite

Wed, 30 Nov 2016 22:35:06 GMT

We often got complaints from users that application catalog not working on chrome or Mac. Well, it didn't! But people always ask about that...so I made a few changes in our SCCM server, now the...

Find Current User via Powershell

Fri, 18 Nov 2016 21:55:52 GMT

sometimes if you run as local admin, but your current user is not a local admin, then you need some special way of finding the current username: $user = (gwmi Query "Select \ from Win32\ Process...

Cisco IP Communicator SCCM Package

Fri, 18 Nov 2016 19:55:47 GMT

Cisco IP Communicator has MSI file, but it needs command line switches to finish the installation, otherwise it will prompt user to type in those information, and strangely enough, you have to be...

SCCM WSUS Software Updates Troubleshooting Log Locations

Fri, 11 Nov 2016 00:39:29 GMT

WSUS Server: C:\Program Files\Update Services\LogFiles\SoftwareDistribution.log SCCM: D:\Program Files\Microsoft Configuration Manager\Logs\WSUSCtrl.log and wsyncmr.log Client:...

How to enroll already encrypted mac into Casper Encryption

Thu, 10 Nov 2016 23:54:47 GMT

We have a user already enabled FileVault2 before enrolling Casper encryption policy. Here is the simple steps to inject our institutional key into their macs: 1. Create a new configuration profile,...

SCCM WSUS Client Issue - Failed to end search job. Error = 0x80072ee2

Fri, 04 Nov 2016 22:20:16 GMT

When I tried to testing SCCM WSUS Software patching, and checked the WUAhandler.log, it showed "OnSearch Complete Failed to end search job. Error = 0x80072ee2. Scan failed with error = 0x80072ee2."...

WSUS Installation Error - Cannot find the file specified

Fri, 04 Nov 2016 21:57:46 GMT

We have some issues with our WSUS, so I uninstalled it under "Add roles and features" in Server Manager, but it always failed with post installation with "System.ComponentModel.Win32Exception...

Add a SCCM deployment with Powershell

Mon, 24 Oct 2016 16:16:43 GMT

Here is a powershell command for creating a SCCM deployment Start CMApplicationDeployment CollectionName "Collection Name" Name "Softwarename" DeployAction Install DeployPurpose Available...

Multiple Mac VMs in ESXi Can Only Enroll One in Casper

Thu, 13 Oct 2016 23:20:54 GMT

I have a Mac Mini running 3 Mac VMs as testing machines, but at the same time, only one mac can enroll in Casper. After I google some info, it turned out that these 3 VM shared same UDID , thus...

Adding Lock to Menu Bar

Thu, 06 Oct 2016 21:48:11 GMT

Add Dock Items in Casper

Thu, 06 Oct 2016 21:09:56 GMT

Originally I added an application to the dock, and it didn't work. So I changed the location a few times, it still didn't work. It turned out that when you changed the location, the plist file didn't...

How to Get Current User as Assigned User in Casper

Fri, 26 Aug 2016 16:53:00 GMT

here is an excellent article to do that:

ccmsetup was unable to compile the file DiscoveryStatus.mof

Tue, 23 Aug 2016 22:05:47 GMT

Had one machine just cannot get SCCM agent installed, so when I checked the logs, it said : MSI: Setup was unable to compile the file DiscoveryStatus.mof The error code is 80041002 it turned out the...

Mac Office 2011 Casper Package

Fri, 19 Aug 2016 23:20:10 GMT

Here is the steps I got from JAMF Nation:

Time Update (includes Timezone) on Mac

Mon, 15 Aug 2016 18:18:14 GMT

Here is a very useful script for auto timezone update ( will enable location service) and time update from JAMF Nation:

Remote Control SCCM Package

Fri, 12 Aug 2016 22:47:05 GMT

With SCCM 2012, I love the Remote Control function, so much better than RDP! and it comes with SCCM console. For those don't have SCCM console, I have wrote a Powershell script to just to run Remote...

CCMSETUP Failed with 403, Cannot find DP

Fri, 12 Aug 2016 22:39:23 GMT

We have an office having issues with SCCM client auto install via group policy. Every time a machine is online, and ccmseutp tried to install the sccm agent, it failed with code 403, cannot find SCCM...

How to Setup NFS Server on Mac

Thu, 04 Aug 2016 04:28:10 GMT

1.Open terminal on your mac and edit exports file: sudo nano /etc/exports 2. Edit the file to add the share folder: /LocalSharedFolderPath mapall=ID alldirs ID is your account ID, you can just...

SCCM Mac Client Auto Enrollment Script

Tue, 12 Jul 2016 17:40:13 GMT

Since our SCCM server got updated, the old sccm mac client won't working anymore ( needs to support El Caption), and our certificate expired as well...so basically I have to uninstall the old sccm...

SCCM Server Update Guide

Tue, 12 Jul 2016 17:19:57 GMT

here is a good article on how to upgrade SCCM server: https://www.systemcenterdudes.com/step by step sccm 2012 r2 sp1 cu3 installation guide/ https://support.microsoft.com/en us/kb/3135680

How to Enable Email Notification in SCCM Reporting

Thu, 30 Jun 2016 22:42:37 GMT

here are two great articles on how to configure email notification in SCCM Reporting

Casper Logs too big

Tue, 28 Jun 2016 16:51:44 GMT

When I first setup Casper, it was only 700KB of database file, now my casper logs went up to 17GB...it turned out to be the issue of JDS. Here is how you can check which tables are blown up: Log into...

Cool MAC OSX BASH PROFILE

Thu, 23 Jun 2016 17:30:56 GMT

How to Make Mac OS X Runs Faster in VM

Thu, 23 Jun 2016 17:08:06 GMT

this beamoff seems working good: https://derflounder.wordpress.com/2014/12/13/improving yosemite vm performance in vmware fusion/

SCCM Application Catalog DPI Scaling Issues

Thu, 23 Jun 2016 16:17:46 GMT

I didn't know there is a simple fix for that:

Casper Failover + Database Recovery Plan

Wed, 22 Jun 2016 21:25:38 GMT

Currently we are using 2 mac mini as our Casper servers, and we want to setup casper failover + database recovery plan. When the main Casper server failed(east), we want to quickly do the failover...

How to Create a SCCM Application Catalog Usage Report?

Fri, 10 Jun 2016 23:50:58 GMT

It is an interesting experience to write SQL query about SCCM Application Catalog Usage Report, as we need to use a function query: (fn\ ListLatestApplicationCIs(1033) from this function, we can get...

How to Create a Custom SCCM Report (Not Query)

Fri, 10 Jun 2016 23:42:42 GMT

I am sure you already tried building for some queries in SCCM, it is very easy and convenient, however if you want something looking nice and can export easily or subscribe, SCCM Reporting is the...

AD SelfService Plus Configuration Notes

Fri, 10 Jun 2016 22:49:18 GMT

Here to download AD SelfService Plus:

Package Powershell 5.0 in SCCM

Fri, 10 Jun 2016 22:47:49 GMT

A Surprisingly very easy SCCM Package, the command line is just wusa.exe Win7AndW2K8R2 KB3134760 x64.msu /quiet /norestart You can download Powershell 5.0 from here:

Using SCCM Compliance Settings to Install ESET on Macs

Sun, 05 Jun 2016 21:28:45 GMT

Again, another shell script to install ESET using SCCM compliance settings on Macs Discovery Script: !/bin/bash Rui Qiu’s ESET Script V1 11012015 FOLDER=/Library/Application\ Support/ESET/esets if [...

Using SCCM Compliance Settings to Install Root Certificate on Macs

Sun, 05 Jun 2016 21:17:35 GMT

Here is one of my old shell scrips...it is very hard to use sccm to manage Macs, as Microsoft really doesn't support Mac platform that well...last year, I even discovered a bug that SCCM has...and...

How to load balance a Web server farm by using one SSL certificate

Fri, 03 Jun 2016 22:47:16 GMT

https://support.microsoft.com/en us/kb/313299

How to Setup Auto Backup on Mac using RSYNC

Fri, 03 Jun 2016 18:04:43 GMT

Update your Rsync on mac: First install Homebrew on your mac, then brew tap homebrew/dupes brew install rsync edit /private/etc/paths and put /usr/local/bin ahead of /usr/bin and then restart...

Better Way to Find Drivers for SCCM OSD Image

Fri, 03 Jun 2016 18:03:45 GMT

There are lots of ways to find drivers, such as from the manufacturer website(Lenovo, HP, Dell), vendor website(Intel, Nvidia), or from Microsoft Update Catalog. At first I was downloading the SCCM...

Casper Imaging

Fri, 03 Jun 2016 18:01:06 GMT

Here are two excellent articles on the whole Casper Imaging:

Junos Pulse (Pulse Secure) Casper Package

Fri, 03 Jun 2016 16:58:46 GMT

Here is an excellent guide on how to package Pulse Secure for Casper https://derflounder.wordpress.com/2015/03/13/deploying a pre configured junos pulse vpn client on os x/

CrashPlan Custom Package for Casper

Fri, 03 Jun 2016 16:48:40 GMT

I was working on automated CrashPlan package for Casper, the official document from Casper is very helpful, but unfortunately didn't work on our Casper. so I actually used my own way to package...

Windows Password Reset Tool

Wed, 25 May 2016 03:29:21 GMT

Offline Windows Password & Registry Editor

SCCM Troubleshooting with Distribution Point Issues

Tue, 24 May 2016 20:33:33 GMT

Recently I found out that no matter where is the user's computer is, it always download the SCCM package from our Management Point SCCM Server, which is also a distribution point server. First and...

Communication with the client service has been lost - SCCM Mac client

Tue, 24 May 2016 18:01:53 GMT

Recently some of our scam mac client has been prompted to input username/password to enroll, but even after the successful sccm enrollment, when I check the SCCM agent in system preference on user's...

Salesforce Outlook Plugin for SCCM Install

Fri, 20 May 2016 22:18:26 GMT

It is a little tricky for salesforce outlook plugin in our environment, as we don't have local admin rights on the system. and this salesforce plugin includes two parts: 1. Prerequisites (Install as...

How to Skip F12 When PXE Boot

Thu, 12 May 2016 18:43:24 GMT

It's a little annoying for me to press F12 each time during PXE Boot as I do testing all the time. Here are the steps to skip F12 : On your WDS server(s) navigate to...

How to make PXE TFTP Boot Faster?

Thu, 12 May 2016 17:42:18 GMT

Usually it takes a long time for PXE Boot during the downloading boot image file, you can change the registry settings to make it faster: HKEY\ LOCAL\ MACHINE\Software\Microsoft\SMS\DP\...

An error occurred while trying to initialize provider WDSMDMGR

Thu, 12 May 2016 17:34:38 GMT

Recently I set up two SCCM OSD Distribution Point, one is booting up well, but the other one has issues with WDS, the error message is "An error occurred while trying to initialize provider WDSMDMGR...

How to Setup Requirment Rules for Outlook 32 bit or 64 bit

Wed, 11 May 2016 21:04:18 GMT

here is a good one: https://www.ronnipedersen.com/2012/11/application requirement for microsoft office 32 or 64 bit/

Casper - Clear out user's broken Keychain

Fri, 06 May 2016 23:37:10 GMT

Just realized that there are so many useful scripts from JAMF Nation, here is a easy one you can deploy to Self Service to fix those annoying Keychain issues with AD......

Software Approval Process in Casper

Fri, 06 May 2016 23:14:06 GMT

There's no direct software approval process like Application Catalog in SCCM, but we have a workaround for this:

Casper Notes

Fri, 06 May 2016 22:36:04 GMT

Mac enrolled into Casper, but "Self Service" not showing up on the Mac? Has to enable "Install Automatically" on "Installation" Tab under "Computer Management" "Self Service" How to create a Casper...

Casper JSS Setup Notes

Fri, 06 May 2016 21:42:43 GMT

Certainly Casper is much more fun comparing to SCCM ! I love it already, so easy to use, and very good tech support. We use Mac Minis to be the Casper server, and I used Homebrew to install MySQL( at...

Failed to Add Update Source for WUAgent of type (2) and Error = 0x87d00692.

Thu, 05 May 2016 18:15:25 GMT

When I tried to push some software updates via SCCM, I can successfully deploy, but the client has no activities on the software update. First I found out that Windows update is not enabled in...

How to Delete Hiden Drivers for SCCM OSD Imaging

Mon, 11 Apr 2016 23:44:35 GMT

I have to use an existing image to make the SCCM OSD image disk...even though I uninstalled all those drivers inside "Program and Features", there are still some hiden drivers inside the system. It...

WIM GUI Mount Tools

Fri, 08 Apr 2016 21:40:51 GMT

sometimes we need an easy WIM file mount tools in GUI... I found out these two are quite good:

How to use SCCM to deploy Office 2010 / Project / Visio / Office 2016

Mon, 04 Apr 2016 21:40:30 GMT

When it comes to Microsoft Office, it is actually quite easy to deploy it with SCCM. For Office 2007 / 2010, Project or Visio 2007 / 2010. Just open command line and get into the installation folder,...

How to Install Shavlik in SCCM

Tue, 29 Mar 2016 17:44:27 GMT

The Shavlik installation is pretty simple, but the configurations may take a while. If you already installed WSUS, you have to use SSL connections to your WSUS server. But first we have to setup a...

SCCM LOG_Backup Full

Mon, 28 Mar 2016 17:52:11 GMT

One day I found out the SCCM Server harddrive is full... and when I used a folder size software to find out the large files, I found out it is only because the SCCM Log\ backup file (ReportServer\...

How to use SCCM to find specific KB installed ?

Fri, 18 Mar 2016 19:03:54 GMT

There are lots of ways to find if some windows update KB installed via SCCM, such as compliance report( Console Monitoring Reporting Reports Software Updates A Compliance Compliance 2 Specific...

Features need to install to Set up SCCM Distribution Points

Mon, 14 Mar 2016 17:49:58 GMT

\ Setup SCCM Distribution Point Remote Differential Compression IIS Configuration: Application Development: ISAPI Extensions Security: Windows Authentication IIS 6 Management Compatibility: IIS 6...

How to use same network adapter for SCCM OSD purpose?

Thu, 03 Mar 2016 17:57:40 GMT

first just need to find out the mac address of your network adapter, then go to the register of your sccm server: HKEY\ LOCAL\ MACHINE\SOFTWARE\Microsoft\SMS\Components \SMS\ DISCOVERY\ DATA\ MANAGER...

How to get the users in the local Administrators group by SCCM ?

Thu, 18 Feb 2016 00:05:54 GMT

My manager wants to know which users have local admin rights on the workstation for audit purpose, but SCCM doesn't have this build in function. Thanks for the internet, here is an article on how to...

Backup My Website to Synology via LFTP

Tue, 29 Dec 2015 22:38:38 GMT

There is no FTP in Synology, so I have to use LFTP Here is my backup.sh !/bin/bash vx lftp u username,password ftp.xxx.com<

SCCM Pulse Secure Silent Install Script

Mon, 05 Oct 2015 23:43:15 GMT

Here is the batch script for pulse secure silent install in SCCM: REM Pulse Secure Install REM Ray Q REM Oct 2, 2015 ECHO Get current folder path pushd %~dp0 ECHO Install and create log msiexec i...

SCCM Cisco Anyconnect Silent Install Script

Mon, 05 Oct 2015 23:38:56 GMT

Here is the batch file to install cisco anyconnect silent install script. For auto install VPN profiles, you can export the existing profile XML from the ASDM console, or use the anyconnect profile...

SCCM UEFI OSD for Surface Pro 3

Tue, 22 Sep 2015 22:21:52 GMT

Update : this method only worked a few months, and later we had issues booting up. After talking to Microsoft, the best way to do OSD is using IP Helpers . Point the OSD DP server to the IP range you...

rbenv: no such command 'install'

Tue, 22 Sep 2015 15:47:19 GMT

If you see rbenv: no such command 'install', the solution is to run exec $SHELL l

SCCM Query to Join User Resources and System Resources

Wed, 26 Aug 2015 00:02:24 GMT

Very few information on sccm query to join both user resources and system resources database together. However my manger wants to see the device and is owner's job title, manger, etc. so I have this...

SCCM Query to See Device Owner Using User Device Affinity (uda)

Tue, 25 Aug 2015 23:56:39 GMT

When I google online, lots of information there. but none worked :( here is the sccm query to see device owner by using User Device Affinity. it will list computer name, the device's owner, user's...

How to Enable Interactive Way of User Input During OSD Task Sequence

Fri, 21 Aug 2015 21:56:22 GMT

http://www.scconfigmgr.com/2013/10/02/prompt for computer name during osd with powershell/

.Net Framework 4.5.2 SCCM Application Package

Tue, 11 Aug 2015 21:24:14 GMT

I have to say, Microsoft's .Net framework installation is SOB! so many different settings need to done to get this .net 4.5.2 work in SCCM. Here is how: I downloaded the offline installer from MS...

How to Setup PXE Server for SCCM OSD

Thu, 06 Aug 2015 00:07:53 GMT

Here are some notes from our Microsoft SCCM trainer a few months ago, really helpful on setting up PXE Server. How to set up Option 66 & Option 67 on the DHCP Server Open DHCP management console...

How to Deploy MSU file in SCCM?

Wed, 05 Aug 2015 23:39:17 GMT

wusa.exe xxx.msu /quiet /norestart

SCCM OSD Gets 401 unsuccessful with anonymous access error message

Wed, 05 Aug 2015 23:34:49 GMT

When I was doing SCCM OSD, it was successful on my SF location, but it failed in the east coast. It seems it was downloading image at first, then it failed at applying image with error code...

Avaya One-X Communicator SCCM Application Package

Thu, 23 Jul 2015 20:48:07 GMT

It was such a pain to pack Avaya One X Communicator SCCM Application Package! It is using InstallShield, but it is not a typical installation package. When I was reading the admin manual, I can use...

Using SCCM to Auto Install IP Printer According to Location

Mon, 06 Jul 2015 04:06:22 GMT

Imagine a user travels a lot for different locations in a same location, what if every time his laptop log on the local branch office network, and SCCM can auto install the local network printer...

Mac SCCM 2012 R2 Auto Enrollment

Mon, 06 Jul 2015 03:18:07 GMT

We need to get all the Mac managed by SCCM, but we don't want people manually type their username and password to enroll. so I have to work a quite script to let mac enroll automatically. I got the...

ESET Mac SCCM Custom Installer Package

Mon, 06 Jul 2015 02:39:47 GMT

We have ESET 5 for Mac in our environment, we can use ESET Remote Install on all the macs, but since we have SCCM and planning to use it manage macs, I decided to create a custom ESET install package...

Mac Deployment One Click Script

Mon, 06 Jul 2015 01:56:41 GMT

We don't have Casper in our environment, so everything is still quite manual when deploying a mac. One day I was so tired of endless click to join a mac to AD. then I start working on mac deployment....

Get IP Addresses from a List of Machines

Sun, 05 Jul 2015 22:16:01 GMT

I need to get IP addresses from a list of machines, so I googled it...needs to use test connection command, and here is the full script: Get IP Addresses from a List of Machine Name 07052015 $pcs =...

Mysql2::Error: Can't connect to local MySQL server through socket '/tmp/mysql.sock' (2)

Sun, 05 Jul 2015 18:03:37 GMT

Yesterday I was using Migration Assistant to move my data from my old Macbook Air to my new Macbook Pro. I assumed Migration Assistant can do a perfect job. However when I ran my rails server, it...

How to Create An Application in SCCM 2012 and Publish in Application Catalog

Fri, 03 Jul 2015 05:34:41 GMT

In SCCM 2012 we have two ways to deployments : packages and applications. If we have the original MSI file, and needs to detect if the application has been installed already, application is the best...

How to Create Custom Java MSI Installer with Auto Update Disabed for SCCM

Fri, 03 Jul 2015 03:37:06 GMT

Here is the simple guide on how to create custom java msi installer for SCCM with auto update disabled. 1. Go to www.java.com/en/download/manual.jsp to download the windows offline version installer....

Collection Query for clients without SCCM Agent Installed

Tue, 30 Jun 2015 21:43:10 GMT

just build an empty sccm collection with " Query Rule " when select the "Membership Rules" if you want to query with non sccm agent machines. select SMS\ R\ SYSTEM.ResourceID,SMS\ R\...

SCCM Toad 12 Upgrade Package with AutoIt Script

Mon, 22 Jun 2015 03:59:58 GMT

Here is an old script I wrote last year to upgrade our Toad for oracle from 11 to 12. It is certainly one of the most complex package I pushed. When you download the original Toad for oracle package,...

SCCM Maintenance Queries

Mon, 22 Jun 2015 03:45:38 GMT

Here are 3 queries that I use often for SCCM maintenance: All Workstations with a heartbeat within last 30 days: select SMS\ R\ SYSTEM.ResourceID,SMS\ R\ SYSTEM.ResourceType,SMS\ R\ SYSTEM.Name,SMS\...

Force Reboot AutoIt Script

Mon, 22 Jun 2015 03:29:31 GMT

Sometimes in our environment we need to force reboot some machines, here is the AutoIt script to do the job for us. The reboot command will be first to run before user gets the notification about the...

Powershell Script to Find Email Address from Username in a Text File

Mon, 22 Jun 2015 03:25:24 GMT

Here is the simple powershell script to grab email address from AD. In a text file,just put username there. Q's email script $names= get content c:\pc.txt foreach ($name in $names) { Get ADUser $name...

Powershell Script to Check Live Bitlocker Encryption Status from Text File

Mon, 22 Jun 2015 03:23:02 GMT

If you have a list of computers and want the check the current bitlocker encryption status, here is a powershell script to do that: Rui Qiu PS Script 052014 $pcs= Get Content "c:\pc.txt" foreach ($pc...

Powershell Script to Export All Bitlocker Key to Local Disk

Mon, 22 Jun 2015 03:04:14 GMT

Sometimes we need to save bitlocker key in our environment locally to do some backup, comparison,etc. Here is a simple powershell script to export all the Bitlocker Keys to C:\. Please run this...

Deploy Apttus in SCCM with Autoit

Mon, 22 Jun 2015 02:18:14 GMT

Autoit is a great tool in terms of sccm deployment. We can use the quiet switch "/s /v/qn" for installation, so it's relatively simple. But as this is a Word plugin, we want to make it effective...

SCCM Collection by IP Range

Mon, 22 Jun 2015 01:57:24 GMT

How to build a sccm collection of computers based on IP Range? Here is the sccm query you can use: just first create a collection, and choose " query rule " in "Membership Rules". change the IP range...

Rui Qiu's Tech Blog

How to Automate SharePoint Site Requests — Part 4: The Form and Lessons Learned

How to Automate SharePoint Site Requests — Part 3: The Creation Engine

How to Automate SharePoint Site Provisioning with Power Platform (Part 1: Setup)

Power Automate Approval Workflows for SharePoint Provisioning (Part 2)

Building a Self-Service SharePoint Permission Checker

Unmanaged devices in Entra Conditional Access Policy

Automated Intune Devices Report via Azure Automation with Managed Identity

Use Microsoft Graph API to upload files to Sharepoint

Some Simple Shell Scripts to Install Mac Apps for Intune