Hi all,

Apple iTunes just attempted to reinstall on a few hundred computers. The only deployments are to the 'UDI deployment' device collection and an 'All Users' group. Both deployments are set to Available. We are trialling the deployment to All Users so we can use the App Catalog so users can install un-restricted software at will.

I checked the AppDiscovery.log and it is not shown attempting to discover, I checked the AppIntentEval.log and it is not detecting that it is not installed. But the AppEnforce is clearly showing it attempting to install.

What could cause this to happen?

The update had no impact as the MSI failed because a newer version was already installed. If the user updated iTunes themselves, or iTunes auto-updated would this cause the computer to attempt to reinstall the application.

I would have thought not as the Deployment is not Mandatory, and is just Available so no enforcement could be possible.  I could understand a re-evaluation, but not a re-install? The only reason this has come to light is that the deployment was not hidden and a command prompt popped up with the error message.

This has greatly worried myself as I do not understand how this could have happened? The deployment for All Users has been there for about 3 weeks but this is the first issue we have had - about 100 computers all about the same time.

I would really appreciate if someone could shed some light on how this would have happened.

Regards,

Michael

How can i deploy a appx package to all my desktops using SCCM.

Here is the scenario, I received an appx package and management wants to deploy it out to the Windows 10 desktops and tablets. They want to make it available in "Software Center" and when the user need the application they can install it.

Another request is that they want the application to populate in the start menu of the device. I am trying to avoid using anything other than SCCM.

Thanks appreciate the help

I am deploying the portal to our end users and what I want to do is to deploy the application and have a short cut in the Start menu.

I have set up the application in SCCM, I am able to successfully deploy the app to the clients, but what I am having a problem doing is getting the short cut in the "Start Menu" I need the short cut to be "Medium Size" in the start menu after it has installed.

I have done some research and I have seen a lot of information about adding the icon using a xml layout file but these are to add the icon/s during OSD. Most of the information doesn't mention Windows 10, only Windows 8 and 8.1 I need to be able to do this on Windows 10. The clients are already installed I just need to add it.

Is there way to do this through SCCM or can I use group policy. I was looking at GP but the console is telling me it is only supported on Windows server 2012 R2, Windows 8.1 and Windows RT 8.1 only. Any help would be appreciated.

Hi Everyone,

I live in Delhi and I am planning to study SCCM2012. Please suggest the best training institute in Delhi with a competitive course fee.

Hello,

So I feel that I am not the only one who has ever run into this, but I cannot find a viable solution anywhere. Here is what we have been asked to do:

"Please remove all instances of X software from the organization. However, before you do, we need to notify those users VIA company email that you are removing the software and what to expect." Now, I do not find this unreasonable by any stretch until I find myself deep in a VLOOKUP in excel for 1200 users!

What I have done so far, is created a query to detect the presence of the application. I have created an application to remove the application as well and all of that works great! In my output of the query, I have the Top Console User to show who is the primary user of the device. What I am missing is their email address, so I am going through the entire list, making sure I have the right email address and user. Some people have multiple machines, or are on loaners, so there is that as well.

Why not do a user deployment? I would love to, but I cannot do a query against a user. I need to build a collection based off of who has a software installed. 

I am aware that it is possible that Orchestrator may be able to auto email people xx days in advance of a deployment with a workflow, but sadly we do not have that option (yet, but hopefully soon!). 

Anyone run into this and how have you tackled it in the past?

Thanks!

Hi all,

Apple iTunes just attempted to reinstall on a few hundred computers. The only deployments are to the 'UDI deployment' device collection and an 'All Users' group. Both deployments are set to Available. We are trialling the deployment to All Users so we can use the App Catalog so users can install un-restricted software at will. The application is deployed during the task sequence using a 'Install Application' task.

I checked the AppIntentEval.log and it is not shown attempting to discover in some people's logs. In other people's it is. It shows as follows:

ScopeId_3DC406D9-1516-4892-8098-AD9397DAAC34/Application_53c1ea7b-5f49-4747-9ec9-9ffcb932e08b/3 :- Current State = NotInstalled, Applicability = Applicable, ResolvedState = Available, ConfigureState = NotNeeded, Title = Apple iTunes 12.1.2.27

I checked the AppDiscovery.log and it is saying that it cannot detect the x86 version, and then schedules an install - the x64 bit version IS installed. There is a requirement for this deployment type for only x86 machines so I am not sure why this is evaluating?

+++ Did not detect app deployment type iTunes - Windows Installer (*.msi file) x86(ScopeId_3DC406D9-1516-4892-8098-AD9397DAAC34/DeploymentType_1b9b0636-e453-463f-9346-cb2c63d27818, revision 2) for S-1-5-21-507458164-764769483-1846952604-62790

   ActionType - Install will use Content Id: Content_c9eb1bde-b5a2-476e-9f95-e13c49907341 + Content Version: 1 for AppDT "iTunes - Windows Installer (*.msi file) x64" [ScopeId_3DC406D9-1516-4892-8098-AD9397DAAC34/DeploymentType_9e17c1ca-7d45-44db-bd92-2f15c2967021], Revision - 1

AppEnforce.log then attempts to install.

+++ Starting Install enforcement for App DT "iTunes - Windows Installer (*.msi file) x64" ApplicationDeliveryType - ScopeId_3DC406D9-1516-4892-8098-AD9397DAAC34/DeploymentType_9e17c1ca-7d45-44db-bd92-2f15c2967021, Revision - 1, ContentPath - C:\WINDOWS\ccmcache\c, Execution Context - Any

Why would this happen if the deployment is set to Available?

The update had no impact as the MSI failed because a newer version was already installed. If the user updated iTunes themselves, or iTunes auto-updated would this cause the computer to attempt to reinstall the application?

I would have thought not as the Deployment is not Mandatory,  and is just Available so no enforcement could be possible.  I could understand a re-evaluation, but not a re-install? The only reason this has come to light is that the deployment was not hidden and a command prompt popped up with the error message.

This has greatly worried myself as I do not understand how this could have happened? The deployment for All Users has been there for about 3 weeks but this is the first issue we have had - about 100 computers all about the same time.

I would really appreciate if someone could shed some light on how this would have happened.

Regards,

Michael

I'm having to create a quick script that will set the modify permission of a folder on the root of C drive. I want to deploy via the application method, and for the detection, I'm setting the script to only run if the permissions have not already been set on the folder in question.

I created a quick VBScript that when tested works well when I run it through manually, but when deploying the application (and I tested via the Application Catalog), it appears to fail during the detection method.  I'm open to ideas.  Here's what I have in place. 

dim strText

strComputer = "."

Set fso = CreateObject ("Scripting.FileSystemObject")
Set stdout = fso.GetStandardStream (1)

Set objShell = WScript.CreateObject("WScript.Shell")
Set objExecObject = ObjShell.Exec("icacls ""C:\Teleresults""")
Do While Not objExecObject.StdOut.AtEndOfStream
    strText = objExecObject.StdOut.ReadLine()

    If Instr(1, strText, "BUILTIN\Users:(OI)(CI)(M)", VBTextCompare) > 0 Then
 stdout.WriteLine "Compliant"
 Else
 Wscript.Quit
End if
Loop

Hello,

I am trying sccm on one laptop first before deploying it out to others and setup Software Updates in SCCM and deployed them but nothing is coming to the client.

Here are the logs from the client: https://www.dropbox.com/sh/nd41uaf6ajkksjs/AADvmD2ooSYQ5Qroe_l3-9NNa?dl=0

The link contains "UpdatesHandler.log",  "UpdatesStore.log" and "UpdatesDeployment.log"

Thanks in advance.

Hi All,

I am trying to configur our Application Catalog to be available on the Internet with HTTPS. The Application Catalog is working OK internally, and I am happy with it. So to make this happens, I have configured the Firewall and NATing to the out SCCM server. But, I couldn't access our Application Catalog from the Internet. It just said The Page can't be displayed.

When I monitored the Firewall, it has allowed the traffic properly to SCCM server, as well as NATed correctly. No traffic has been dropped.

I have a feeling the issue is actually with the IIS not accepting the traffic. So what I have done are:

1. I checked the IIS log files, and I only can find Timer_ConnectionIdel in HTTP Error log.
2. I have setup redirection to from http to https address internally and externally.
3. SSL certificate checked and confirmed OK. I can browse to Application Catalog internally with https and no issues at all.
4. I checked the binding, and it has been configured to All Unassigned IP Address. Our SCCM server just hosts SCCM only.
5. Firewall using Intel Security checked and confirmed has passed the traffic to SCCM server.
6. When I tried to access the Application Catalog from the Internet, it has successfulle redirected to https, but Page can't be displayed.

Am I missing something here? I have spent 2 days in attempt to make this works. Any help will be appreciated. Thank you.

I understand that SHA1 will not be supported starting next year 2017 January. My customer who are using the CA with SHA1 would like to migrate to SHA2. 

1. How do we migrate the the SHA1 to SHA2. The services which are using this hash is Exchange 2013 and NPS server. Do we need to generate new Certificate at the CA authority server altogether with the SHA2 hash?

2. What are the impacts when migrating the certificates to SHA1 to SHA2

3. Will there any downtime?

Thanks

I'm using PowerShell App Deployment Toolkit as a wrapper with applications I deploy with Configuration Manager. How  is Configuration Manager able to show messageboxes to logged on user when deploying applications with PowerShell App Deployment Toolkit? I'm wondering this because ConfigMgr agent is running in system contex and somehow messageboxes can be presented to logged on user from PowerShell App Deployment Toolkit? I have tried to use this same toolkit with another management solution that is also running in system contex and it's not able to show any messageboxes to logged on user

Hi,

i am trying to install WSUS role on my secondary server and while adding role i am getting below error message:

event logs:

Good morning,

We've recently deployed .NET 4.5.2 to our estate.

The deployment included laptops that have the Configuration Manager client installed however have not yet been connected to the network.

As the laptops are part of the collection will this be installed when they are connected to our network?

Thank you.

Using a specific AD account, when I attempt to view the properties of any Applications, any Deployment Types, any Task Sequences or edit any Task Sequences, I see errors similar to below.

Appears to be specific to that account as my own works fine.

Thoughts on what might be happening?

The requested object information could not be retrieved.  Refresh the Configuration Manager console to verify that another administrator has not moved or deleted the object, or that the role-based administration security scopes or security roles for the object or current user have not changed.


ConfigMgr Error Object:
instance of SMS_ExtendedStatus
{
	Description = "ObjectLockContext has not been set.";
	ErrorCode = 1078462229;
	File = "e:\\nts_sccm_release\\sms\\siteserver\\sdk_provider\\smsprov\\sspsedo.cpp";
	Line = 961;
	ObjectInfo = "ObjectLockContext";
	Operation = "ExecMethod";
	ParameterInfo = "SMS_ObjectLock";
	ProviderName = "WinMgmt";
	StatusCode = 2147749889;
};

-------------------------------
Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlQueryException
The SMS Provider reported an error.


Stack Trace:
   at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlConnectionManager.ExecuteMethod(String methodClass, String methodName, Dictionary`2 methodParameters, Boolean traceParameters)
   at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlConnectionManager.ExecuteMethod(String methodClass, String methodName, Dictionary`2 methodParameters)
   at Microsoft.ConfigurationManagement.AdminConsole.ConsoleUtilityClass.CheckSedoLock(ActionDescription action, IResultObject resultObject, Boolean& objectIsReadOnly, IResultObject& subCollection)
   at Microsoft.ConfigurationManagement.AdminConsole.SccmTaskHandlerBase.DoTask(IList`1 navigationNodes, NavigationModelNodeTask task)
   at Microsoft.EnterpriseManagement.ConsoleFramework.WindowTaskHandler.WindowTaskOperation.ExecuteTaskJob(Object sender, ConsoleJobEventArgs jobArguments)
   at Microsoft.ConfigurationManagement.AdminConsole.ConsoleJobExceptionHandler.ExecuteJob(IComponent component, EventHandler`1 job, Object sender, ConsoleJobEventArgs args)

-------------------------------

System.Management.ManagementException
Generic failure


Stack Trace:
   at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlConnectionManager.ExecuteMethod(String methodClass, String methodName, Dictionary`2 methodParameters, Boolean traceParameters)
   at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlConnectionManager.ExecuteMethod(String methodClass, String methodName, Dictionary`2 methodParameters)
   at Microsoft.ConfigurationManagement.AdminConsole.ConsoleUtilityClass.CheckSedoLock(ActionDescription action, IResultObject resultObject, Boolean& objectIsReadOnly, IResultObject& subCollection)
   at Microsoft.ConfigurationManagement.AdminConsole.SccmTaskHandlerBase.DoTask(IList`1 navigationNodes, NavigationModelNodeTask task)
   at Microsoft.EnterpriseManagement.ConsoleFramework.WindowTaskHandler.WindowTaskOperation.ExecuteTaskJob(Object sender, ConsoleJobEventArgs jobArguments)
   at Microsoft.ConfigurationManagement.AdminConsole.ConsoleJobExceptionHandler.ExecuteJob(IComponent component, EventHandler`1 job, Object sender, ConsoleJobEventArgs args)

-------------------------------

Hi

 I deployed MS Office 2013 application to more than 700 client all of them has received application successfully

  but 1 client downloading the application but installing gets failed, how should I start trouble shooting

I checked contenttransfer.log file but seems there is no error found

Hi All,

Please could you confirm whether Application deployment evaluation cycle which runs after every 1 day is "Non-interactive".

We have an application which displays a prompt(msgbox)to user to close outlook if opened. If user ignores prompt, installation is failing after 120 minutes maximum allowed runtime . we can see evaluation cycle is running and this application tries to install but same prompt is not displayed. During first time installation, it is showing prompts but not when Application deployment evaluation cycle is triggered.

Thanks,

Ashu

challa

Hi

 I have set hardware inventory in our sccm console, now how should generate a report to know about client details

including it serial no and everything

Hi, 

We are using SCCM 2012 SP1 primary server. We are facing issue for the past 2 days that the collections are not getting updated. Whenever i try to update the collection membership, its keeps on updating and no actions was happening. I tried to restart the server and no luck. There was no error in any of the log files. I tried to restart the service "SMS_EXECUTIVE" and it hanged with stopping status. Again restarted the service which fixed the service issue. Can you please help us with the update collectionship issue

We are suddenly seeing this on all our applications. We only have one DP. I've checked and tried several things suggested in similar posts. 

1) Reviewed Boundaries and Boundary Groups. We have and have always had just one of each. The Boundary is our Active Directory site. The Boundary Group has one member (the AD site Boundary). The DP properties show the correct BG. Allow fallback is checked. 

2) Rebuilt and redeployed a couple apps making sure to set Distribution Settings to "Distribute the content for this package to preferred DP and on the deployment type > Content  "Allow clients to use a fallback source location"

3) I'm able to validate content on the DP.

On the client when I initiate an application install the CITaskMgr.log shows these steps and then hangs