Hi,

I am wondering is there a way to uninstall for example Office 2013 (or any other bigger SW) without downloading first 960MB to ccmcache folder and then executing the command? Theoretical situation would be that we first offer our users Office 2013 for instllalation and then after couple of months new Office comes out and I want to deinstall it. SO that is 2x960MB.

I am interested in application and package way to do it.

Not sure how long is the data kept in ccmcache folder and for how long? If it is automatically deleted then it does not matter.

Thanks,

Hi All,

We are implementing sccm 2012 r2 hotfix 4 and I am struggling to be able to use powershell detection rules in deployment types.

My domain GPO is set to require signed powershell and we are used to signing our scripts and executing them via Altiris.

With SCCM I can't seem to get a powershell detection script to run whether I sign it or not.   I get the following item in the Appdiscovery.log

C:\Windows\CCM\SystemTemp\52f2244b-e507-4bad-9379-0d73946acb26.ps1 is not 
digitally signed. You cannot run this script on the current system. For more 
information about running scripts and setting execution policy, see 
about_Execution_Policies at http://go.microsoft.com/fwlink/?LinkID=135170.

I have seen some stuff about not being able to import a script that is signed because when you add it in,  some blank spaces get added and that invalidates the signing,  so I'm stuck there.

I've also seen stuff about setting up a client policy to bypass the requirement for signing,  but I get the same exact errors in the logs if I use an unsigned script with the bypass policy.    I've used policy spy and can confirm that the bypass setting should be applied.

uint32 PowerShellExecutionPolicy = 1;

I've also seen stuff about this not working on less than CU2,  we applied CU4 to hopefully resolve this and it doesn't seem to make a difference.

Any suggestions???   Iv'e got a bunch of apps that I need to query content within an .xml file to see if an app is installed.    I really don't want to re-write the scripts in .vbs

I am trying to setup an application that will install RDC and BITS using powershell and the ServerManager module.  I have set the PowerShell execution policy to Bypass.  From the deployment I am runningpowershell.exe -file .\script.ps1.  This does not seem to work.  If I change the command topowershell.exe -ExecutionPolicy ByPass -file .\script.ps1 then that seems to work.  Can someone explain how this client setting referenced below is supposed to work?  I assumed that setting this to "Bypass" would allow the PowerShell script to run without having to customize the command line.  Also what about the powershell scripts that can be used to determine if an application is already installed?

http://technet.microsoft.com/en-us/library/gg682067.aspx

-Jason Dye Consultant - Systems Management

Is is possible to have the execution policy set to remotesigned but have specific hosts set to bypass? I am administering an SCCM 2012 environment and I want to be able to run the Powershell Detection Method for applications but it keeps erroring out that the script is not signed. I tried adding the server to wsman:\localhost\client\truestedhosts but that did not seem to work either. Is this possible?

Thanks!

Tony

Is there a feature in R2 SP1 one can enable to prevent accidental deployments to [large] collections?

Since I want our Help Desk to deploy applications to individual users/computers, I just need to know how much I need to bang the "don't accidentally deploy to an entire office" drum.

Hi All,

I've got a question/problem regarding a Logon Package.

Problem:

I've a problem with a SCCM 2012 (R2) Package that's scheduled with a Logon Assignment Schedule (alway rerun).

My Goal:

What i want to create from SCCM 2012 (R2), is a script/job that will always run when a user logs on .. whatever the result of the script/job will be.  This is working in our SCCM 2007 environment, but it's not giving the same results with SCCM2012 (R2).

To to this with SCCM 2012 (R2), i'm using a package .. because you can't deploy an application with a Logon Assignment. So (for testing) i've created a Package in it's simplest form, that only runs a command to create a directory .. there's no content, so this cannot be an issue. I created the package with the following base configuration:

-- CONFIGURATION ------------------------------------------

[PACKAGE]
All default

[PROGRAM]

#General:
Command line: cmd /c md C:\TestDir
Run: Hidden

#Requirements:
Default

#Environment:
Program can run: Only when a user is logged on (also tested it with whether or not a user is logged on)
Run mode: Run with administrator rights (also tested it with user's rights)
                 Allow users to interact with this program (also tested it without)

Drive mode: Run with UNC name

#Advanced
When this program is assigned to a computer: Run once for every user who logs on (also tested it with run once for the computer)

[Deployment]

I tried the following with a User Collection and a Device Collection:

#Deployment Setting:
Required, Install

#Scheduling:
Assignment Schedule: Log On
Rerun behaviour: Always rerun program

# User Experience
Default

# Distribution points
Default

-------------------------------------------------------------------------------------------

Whatever (working) combination i use, the package will only run once for a user. These are my test steps when i change a configuration variable:

- Delete existing deployment
- Create new deployment

- Delete C:\TestDir if exist
- Reboot machine a wait a couple of minutes
- Logon .. at this moment the 'TestDir' directory is not created yet
- initiate all client actions and wait a couple of minutes
- Logoff
- Logon .. at this moment the Package will run and creates the 'TestDir'
- Delete C:\TestDir
- Logoff
- Logon .. No Package Run
- Initiate all client actions and wait a couple of minutes
- Reboot machine a wait a couple of minutes
- Logon .. No Package Run
- And so on ......

As said before ... in our SCCM 2007 environment our Logon Package is working well!

So my question is:
Is it possible with SCCM 2012 (R2) to create a Logon Package, that will always run when (whatever) user logs on. So it's actually a logon script we are using. The reason we are not using this logonscript from a GPO or a Scheduled Task is that we need administrative credentials and have user interaction with a message box(and of course because it works in SCCM2007 ;-)

With kind regards,

Hayo Veenstra (Haytec)

With reference to https://technet.microsoft.com/en-gb/library/gg682082.aspx

We want to deploy a new version of an app for testing as an update using supersedence.
How may we restrict a "Required" update to a list of devices please?

We're concerned the supersedence will mean that any new users installing the application for the first time on a new (to them) device will install the new version rather than the "current" version.

We'd rather not just set the new version as "Available", simply to avoid asking our users to manually install the update.

Thanks in advance of your kind response.

Hi! In our SCCM environment we are observing issue with one of ours Distribution Point. Machine isn’t receiving any distributed content. When we checked distmgr log on the Site Server (win2012) we observed error entries mentioned below:

We have checked permissions on DP (win2008R2) and in Local Groups under Administrators, account related to The Site Server is available. Also shares on DP are active. BITS, WMI, IIS and SCCM agent are running, but from time to time we have got Event ID 5189 error

The Windows Process Activation Service failed to generate an application pool config file for application pool 'SMS Distribution Points Pool'. The error type is '7'. To resolve this issue, please ensure that the applicationhost.config file is correct and recommit the last configuration changes made. The data field contains the error number.

We have checked integrity for applicationhost.config (https://technet.microsoft.com/en-us/library/cc734988%28v=ws.10%29.aspx) and we cannot find any issues in that file.

Communication between Site Server and Distribution Point take place using 8090 port. On both servers this port is opened. Issue isn’t intermittent. Any ideas what we have omitted during DP check?

I would like to also add that under Administration->Distribution Points->XXX, we don't see any drivers on Drivers tab.

pmj88 - TechNet

Hi there

Hoping someone can shed some light on an issue I am struggling to find indepth information about:

1) Application revisions and Deployment Type revisions.

The revision number of an Application is easy to view in the SCCM 2012 console, in the summary area. 

The revision number of a Deployment Type only seems to be visible in certain CCM logs when an application is being deployed.

Based on what I've read, any changes to an Application or its Deployment Type which is updated to the Distribution Points results in the revision number of the APPLICATION being incremented.

That being so, where does the Deployment Type revision get updated? What activity results in the Deployment Type revision being incremented?

The Application revision and Deployment revision on the same app I have looked at are different - how does this come to be?

Do both revisions start out the same number, 1, then if a change ONLY to the Application is made, the Application revision is incremented, and likewise if the Deployment Type is changed ONLY does that objects revision get incremented? That doesn't sound plausible.

I have tried to find an indepth explanation of the differences between Application and Deployment Type revision numbers but haven't been able to do so.

If anyone can link to a detailed explanation I'd appreciate it.

2) We had an OSD outage some time ago, whereby one application in a task sequence failed to install and crashed the task sequence. After looking into it, the task sequence was trying to download an older Application revision i.e. not the latest revision. Why would this happen? There are various sites which cover this issue out there but although all are helpful they frankly admit they know what happens and how to fix it, but not WHY it happens. Why would a task sequence try to download an older revision of an application and not automatically try to download the latest revision? Is it the case that any changes to applications which are referenced in a task sequence should result in the application being removed and re-added to the task sequence?

Right now I'm more interested in a detailed explanation of the differences between Application revisions and Deployment Type revisions - if anyone can shed some light I'd appreciate it.

Thanks

John

Glasgow

So I'm trying to package up and install the remote admin console from the application catalog but I'm failing at every turn. EArlier it would complain that the DefaultSiteServerName was empty, even though it wasn't. After switching the parameters round, it seems that it's now complaining about EnableSQM, which again is not empty.

My first though after seeing this was that I'm hitting a max character limit, so I dropped it all into an install.bat and found the same thing. Even though the full. When checking ConfigMgrAdminUISetup.log it still complains about EnableSQM being empty

I'm trying to install ConfigMgr 2012 R2 console on a Win8.1 x64 machine. Content location is \\server\SMS_PRI\tools\ConsoleSetup\

Really can't fathom this one out!

----------------

<![LOG[UI Setup invoked with args - "C:\Windows\ccmcache\h\ConsoleSetup.exe" /q DEFAULTSITESERVERNAME=server.contoso.com TargetDir="C:\Program Files (x86)\Microsoft Configuration Manager\" EnableSQM=0]LOG]!><time="15:05:26.147-600" date="06-03-2015" component="" context="" type="1" thread="5040" file="uisetup.cpp:434">
<![LOG[ENABLESQM cannot be empty for silent UI. Set Value ENABLESQM=0 or ENABLESQM=1]LOG]!><time="15:05:26.147-600" date="06-03-2015" component="" context="" type="3" thread="5040" file="uisetup.cpp:108">

----------------

<![LOG[UI Setup invoked with args - "C:\Windows\ccmcache\h\ConsoleSetup.exe" /q TargetDir="C:\Program Files (x86)\Microsoft Configuration Manager\" EnableSQM=0 DefaultSiteServerName="server.contoso.com"]LOG]!><time="14:55:15.011-600" date="06-03-2015" component="" context="" type="1" thread="6256" file="uisetup.cpp:434">
<![LOG[DEFAULTSITESERVERNAME cannot be empty for silent UI]LOG]!><time="14:55:15.011-600" date="06-03-2015" component="" context="" type="3" thread="6256" file="uisetup.cpp:101">

----------------

Hi,

I'm trying to replace Application A with Application B but allow the user to chose when this happens (using Install and Available as deployment options). If I set supersedence rules then App A automatically gets uninstalled and App B installed. I've seen the option 'automatically upgrade any superseded versions of this application' but this is greyed out when deploying to device collections (although it can be configured when deploying to user based collections). Why is this option greyed out - is there any way to select this (if not, why would Microsoft put it there?). I have seen that this is by design but I'm not sure why you wouldn't allow the a user to upgrade when they choose.  I guess a way round it is to set a deadline for a not later date but this isn't a clean solution.

Thanks.

Engineers, 

When I logged ABC user ID into one machine and try to open SCCM Admin Console and Software center 

In same machine with XYZ User ID , I am getting error "SCClient has stopped working ". 

I check both machines COM permission also it's both same 

Anyone can help 

Best Regard's Krishna

We have an AD security group setup already that includes all our Enterprise Vault users.  I want to create a query in SCCM that will reference the AD security group and determine what version of MS Office each user in the group has installed.  Is this possible?    

Hi,

I have a software updates deployment that I setup with the 'Suppress the system restart on the following devices" ticked. The updates installed ok but the systems rebooedt after they install the updates even though I have it suppressed to do so.

Any anyone else experienced this? 

Hi folks,

I have an intermittent issue and can't figure out the reason so far.

I have a primary server and multiple distribution points. The primary does not have a DP configured. When I deploy a new distribution point, I have the following messages:

Distribution Manager failed to connect to the distribution point. Check your network and firewall settings.

and

Distribution Manager failed to find or create the defined share or volume on distribution point.

DistMgr.log shows the following:

CWmi::Connect() failed to connect to \\AMB-SCCM-E.domain.name\root\CIMv2. Error = 0x800706BA

STATMSG: ID=2391 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_DISTRIBUTION_MANAGER" SYS=BBD-SCCM-E.domain.name SITE=IDC PID=2120 TID=3376 GMTDATE=do jun 28 07:24:17.463 2012 ISTR0="["Display=\\AMB-SCCM-E.domain.name\"]MSWNET:["SMS_SITE=IDC"]\\AMB-SCCM-E.domain.name\" ISTR1="" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=1 AID0=404 AVAL0="["Display=\\AMB-SCCM-E.domain.name\"]MSWNET:["SMS_SITE=IDC"]\\AMB-SCCM-E.domain.name\"

ERROR DPConnection::ConnectWMI() - Failed to connect to  AMB-SCCM-E.domain.name. error = 0x800706ba

Failed to find a valid drive on the distribution point ["Display=\\AMB-SCCM-E.domain.name\"]MSWNET:["SMS_SITE=IDC"]\\AMB-SCCM-E.domain.name\

Cannot find or create the package share.

Error occurred. Performing error cleanup prior to returning.

However, after a while (couple of hours), it looks like everything is distributed on the DP. But this message keeps on coming back during the course of the day and every time a new DP is deployed.

I checked permissions, IIS, WMI, but I can't find out the cause of this behavior. I have events about WMI (id 5605) but I can connect to the WMI workspace (root\MicrosoftIISv2) with no issues.

Can anyone shed some light on this please? It would be greatly appreciated.

Cheers,

Safdar.

I have a test client that I have deployed some applications to via SCCM2012 CU5. These applications have been deployed internally without issue.They sit at Downloading (0% complete) and do not error out.

This machine happens to be connected via DirectAccess 2012 IPHTTPS connection. The DirectAccess Connectivity 2.0 is reporting that connectivity is working. I can browse the SCCM Server Shared Drives without issue. I can ping the SCCM Server and receive it's IPv6 transition address. I have no problem seeing and managing the client via SCCM Console (RDP, Remote Control, Browse Client Admin Shares, etc.).  Does anyone have any direction for me regarding this issue?

Thanks in advance,

-Scott

Scott M. Phoenix, AZ

Good Afternoon all; first time poster here, so hopefully I have everything right.

I am looking for a bit of advice concerning a set of packages I have configured within SCCM 2012. (I have some more generic questions unrelated to my issue at the end of the post; if someone has the time to answer as well)

I'm quite new to SCCM, and have been learning as I go. I have created a package to remove all versions of Citrix (Receiver Cleanup Utility directly from Citrix's website) and another to install Citrix Receiver 4.2. The installation package is checked to run the Receiver Cleanup Utility prior to running the actual installation package for which no reboots are actually required. I built a test collection within our department and deployed successfully to about twenty machines (small note: the test deployment was deployed as required to a device collection.) I have since moved this into a production test phase, and deployed it to a small subset of users here on site, and I am seeing mixed results (production environment was deployed as available to a device collection; I provided the users with instructions on how to manually initiate this process and the reason for making it available is so that it doesn't interrupt a user's use of Citrix.)

The package downloads successfully which I verified within the CAS.log file. However, most clients in the test deployment seem to be reporting that the CCM service is stopped during the Receiver Cleanup Utility, and subsequently cannot find the MIF file to verify that the uninstall was successfully completed:

OpenProcess failed for process 4312, error 80070057 execmgr 3/3/201512:20:58 PM 5068(0x13CC)Cannotcontinue monitoring the program after service restart because the process exited. Assume failed execmgr 3/3/201512:20:58 PM 5068(0x13CC)Lookingfor MIF file to get program status execmgr 3/3/201512:20:58 PM 5068(0x13CC)Raisingevent:[SMS_CodePage(437), SMS_LocaleID(1033)]
instance of SoftDistProgramUnexpectedRebootEvent{AdvertisementId="SWG20054";ClientID="GUID:C78C7F13-6801-438A-A668-16FCD8D11D0A";DateTime="20150303172058.096000+000";MachineName="B1668";PackageName="SWG00076";ProcessID=4776;ProgramName="Remove All Citrix Versions CLEAN";SiteCode="SWG";ThreadID=5068;};
execmgr 3/3/201512:20:58 PM 5068(0x13CC)

The obvious problem here is; without there being a clear communication that the event was successful, the installation of the Receiver 4.2 is not occurring. Furthermore, this problem is not occurring 100% of the time, but is definitely the majority of the clients that are reporting this back. I cannot find anything online about this particular issue in relation to a deployed software package. For reference, here is one of the clients which worked all of the way through: 

Requestin running or report status found for program RemoveAllCitrixVersions CLEAN package SWG00076 execmgr 2/27/20151:56:09 PM 5344(0x14E0)Service stopped while program RemoveAllCitrixVersions CLEAN is running execmgr 2/27/20151:56:09 PM 5344(0x14E0)Continue monitoring the program after service restart execmgr 2/27/20151:56:09 PM 5344(0x14E0)Programexit code 0 execmgr 2/27/20151:56:18 PM 5092(0x13E4)Lookingfor MIF file to get program status execmgr 2/27/20151:56:18 PM 5092(0x13E4)Scriptfor Package:SWG00076,Program:RemoveAllCitrixVersions CLEAN succeeded withexit code 0 execmgr 2/27/20151:56:18 PM 5092(0x13E4)Raisingevent:[SMS_CodePage(437), SMS_LocaleID(1033)]
instance of SoftDistProgramCompletedSuccessfullyEvent{AdvertisementId="SWG20054";ClientID="GUID:6C60B109-7844-4045-BA41-73140F7161BA";DateTime="20150227185618.604000+000";MachineName="B0088";PackageName="SWG00076";ProcessID=6900;ProgramName="Remove All Citrix Versions CLEAN";SiteCode="SWG";ThreadID=5092;UserContext="NT AUTHORITY\\SYSTEM";};
execmgr 2/27/20151:56:18 PM 5092(0x13E4)RaisedProgramSuccessEventforAd:SWG20054,Package:SWG00076,Program:RemoveAllCitrixVersions CLEAN execmgr 2/27/20151:56:18 PM 5092(0x13E4)

Hi Team,

             I would like to deploy uninstall Application/Program/package from SCCM for Office 2010 & 2013 Separately.

            I tested the command Setup.exe /uninstall Proplus /config Uninstall.xml which is working fine Locally

           Kindly help me to understand which option to choose while deploying the above command usingApplication/Program/package and any reference article or Link should be really helpful.

Hi Everyone.

I have been reading through posts etc. , but can't seem to get a clear answer. I want to know if it is possible for all deloyments to show up in one place, App Cat. of Software Center.  I know that the behavior is that deployments to machines go to the software center and deployments to users to the Catalog.

Background info.  Migrating from SCCM 2007 to SCCM 2012 CU5. We do not have enough time to migrate packages and convert them to applications. For now, all deployments are legacy packages.  Now, we migrated user and machine based collections, so I know that is why I see certain things in each place.  Many of my collections are queries based on AD user groups.

I know we need to move into the modern age and make everything an application and target users only, but that isn't going to happen anytime soon.  Management is concerned about users go to 2 places, that have multiple tabs.  The idea is to have one place to see what is available and what is already installed ( like old Advertised Programs).

If this is totally not doable, is there any user guide that can be give to describe this? ( to stupid users who know know thing about computers) I need to make this simple an easy using what I got.

Thanks

I want to deploy Chrome with SCCM 2012 and disable the user ability to log into their personal Google account. Is this possible?

Thanks

Pat