Justin Chalfant's SCCM Guides https://setupconfigmgr.com/ Just Another SCCM Blogger Fri, 11 Mar 2022 19:54:31 +0000 en-US hourly 1 https://wordpress.org/?v=6.5.2 https://setupconfigmgr.com/wp-content/uploads/2018/05/Logo-150x150.png Justin Chalfant's SCCM Guides https://setupconfigmgr.com/ 32 32 Remove a Central Administration Site in Configuration Manager (SCCM) https://setupconfigmgr.com/remove-a-central-administration-site-in-configuration-manager-sccm https://setupconfigmgr.com/remove-a-central-administration-site-in-configuration-manager-sccm#comments Fri, 11 Mar 2022 19:49:12 +0000 https://setupconfigmgr.com/?p=33181 The post Remove a Central Administration Site in Configuration Manager (SCCM) appeared first on Justin Chalfant's SCCM Guides.

]]>

Overview

  • In this video, we will review how to remove a central administration site in SCCM. We will cover the requirements for the removal and how to perform the removal.

Topics in Video

  • Introduction: (0:00)
  • DJam – History of CAS and Why They May Need to be Collapsed: (0:57)
  • Overview of Our Current Lab Environment & Plan for the CAS Removal: (11:26)
  • Reassigning Clients Before Uninstalling Second Primary Site: (14:11)
  • Removing Boundaries & Site System Roles Before Uninstalling Second Primary Site: (18:30)
  • Optional Step – Uninstall Client Agent Before Uninstalling Second Primary Site: (21:52)
  • Uninstall Second Primary Site: (22:55)
  • Removing Reporting Services Role from CAS & Reconfiguring on Standalone Primary Site: (25:36)
  • Going Over Site Roles That Do Not Need to be Removed from the CAS: (32:54)
  • Looking at Prerequisites to Remove the CAS: (34:26)
  • Removing the CAS: (34:50)
  • Unpublish CAS Object from Active Directory: (37:20)
  • Reviewing Standalone Primary Site after Removal of the CAS: (38:33)
  • Performing Post-Setup Tasks: (39:26)
  • Overview of Potential Hash Errors if you Manage Third-Party Updates: (41:44)
  • Exporting Patch My PC Publisher Settings & Certificate from CAS: (46:58)
  • Importing Publisher Settings & Certificate to Standalone Primary Site: (49:52)
  • Solution for Third-party Update Hash Errors After Removing the CAS: (52:24)
  • Reconfiguring Boundaries and Boundary Groups: (57:02)
  • Wrap-up: (59:03)

The post Remove a Central Administration Site in Configuration Manager (SCCM) appeared first on Justin Chalfant's SCCM Guides.

]]>
https://setupconfigmgr.com/remove-a-central-administration-site-in-configuration-manager-sccm/feed 3
Getting Started with Justin Chalfant’s SCCM/ConfigMgr Guides https://setupconfigmgr.com/getting-started-with-justin-chalfants-sccm-guides https://setupconfigmgr.com/getting-started-with-justin-chalfants-sccm-guides#comments Thu, 09 Sep 2021 16:54:00 +0000 https://setupconfigmgr.com/?p=32947 The post Getting Started with Justin Chalfant’s SCCM/ConfigMgr Guides appeared first on Justin Chalfant's SCCM Guides.

]]>

First, thank you for visiting my blog. My name is Justin Chalfant. You can learn a little more here about me. In short, I worked at Microsoft as an engineer supporting Configuration Manager for about 5 years, and I’m currently the Founder/CEO at Patch My PC.

Topics and Order for New ConfigMgr Learners 🤓

If you are new to ConfigMgr, I would start with the videos in the Install ConfigMgr and Setting the Basics Setup first. After that, you could bounce around to topics that interest you the most. If you have a suggestion for a topic, please contact me!

The post Getting Started with Justin Chalfant’s SCCM/ConfigMgr Guides appeared first on Justin Chalfant's SCCM Guides.

]]>
https://setupconfigmgr.com/getting-started-with-justin-chalfants-sccm-guides/feed 1
Deploy the Configuration Manager Client Agent to Windows Computers in SCCM https://setupconfigmgr.com/deploy-the-configuration-manager-client-agent-to-windows-computers-in-sccm https://setupconfigmgr.com/deploy-the-configuration-manager-client-agent-to-windows-computers-in-sccm#comments Thu, 09 Sep 2021 14:42:42 +0000 https://setupconfigmgr.com/?p=33150 The post Deploy the Configuration Manager Client Agent to Windows Computers in SCCM appeared first on Justin Chalfant's SCCM Guides.

]]>

Overview

This video tutorial will look at the different options we have to deploy a Configuration Manager client to Windows computers. We’ll cover the following methods:

  • Install Method 1:Client push installation
  • Install Method 2: Software update-based installation
  • Install Method 3: Group Policy installation
  • Install Method 4: Manual installation

Topics in Video

  • Introduction: (0:00)
  • Reviewing Prerequisites for deploying clients to Windows Computers: (0:54)
  • Best practices for deploying clients: (2:23)
  • Have you extended the Active Directory Schema?: (2:30)
  • Client Push Installation Method: (5:01)
  • Advantages and Disadvantages of the Client Push Installation Method: (5:13)
  • Overview of the current lab setup: (6:50)
  • Attempting a client push installation: (7:40)
  • Reviewing the ccm.log: (9:07) Creating Group Policy for Firewall Rules: (10:37)
  • Running gpupdate /force on Demo Client: (12:29)
  • Second attempt at client push installation: (13:23)
  • Reviewing the ccm.log after the second attempt: (13:50)
  • Configuring a Client Push Account: (14:07)
  • Creating a local admin Group Policy: (15:24)
  • Final attempt at client push installation: (17:50)
  • Verifying installation of client: (18:04)
  • Performing an Automatic Client Push Installation: (22:45)
  • Verifying Installation of client: (27:55)
  • Software Update-Based Installation: (29:05)
  • Advantages and Disadvantages of Software Update-Based Installation: (29:29)
  • Best Practices for Software Update-Based Installation: (30:35)
  • Initiating the Software Update-Based client installation: (31:50)
  • Viewing the Configuration Manager Client update in the Patch My PC Publisher: (33:37)
  • Creating a policy to scan against the Software Update Point: (34:53)
  • Verifying policy applied on the client machine: (40:57)
  • Running a Windows Update check: (41:37)
  • Verifying installation of client: (41:59)
  • Configuring site assignment by creating an SCCM Site Assignment Policy: (43:55)
  • Group Policy Installation Method: (47:00)
  • Verifying installation of client: (54:00)
  • Manual Installation Method: (56:02)
  • Advantages and Disadvantages of the Manual Installation Method: (56:02)
  • Initiating Manual Installation of client: (58:23)
  • Verifying installation of client: (1:00:12)
  • Performing manual installation when you do not have your site information published to Active Directory: (1:00:23)
  • Verifying installation of client: (1:02:21)
  • Wrap-up: (1:03:03)

Registry Updates

Note: A full guide for this process in the video is available on: https://www.anthonyfontanez.com/index.php/2021/09/01/configmgr-client-deployment-via-software-update/ 

  • SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
    WUServer
    • WUServer
    • String
  • SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
    • WUStatusServer
    • String
  • SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    • UseWUServer
    • DWORD = 1
  • SYSTEM\CurrentControlSet\Services\CcmExec

Command Lines and Other Examples

  • ccmsetup.exe command lines options = SMSSITECODE=DM1 FSP=DEMO1.CONTOSO.LOCAL MP=DEMO1.CONTOSO.LOCAL
  • gpresult /R /SCOPE COMPUTER /Z

The post Deploy the Configuration Manager Client Agent to Windows Computers in SCCM appeared first on Justin Chalfant's SCCM Guides.

]]>
https://setupconfigmgr.com/deploy-the-configuration-manager-client-agent-to-windows-computers-in-sccm/feed 1
How to Perform a Configuration Manager (ConfigMgr) Site Migration https://setupconfigmgr.com/how-to-perform-a-configuration-manager-configmgr-site-migration https://setupconfigmgr.com/how-to-perform-a-configuration-manager-configmgr-site-migration#comments Tue, 24 Aug 2021 12:09:08 +0000 https://setupconfigmgr.com/?p=33100 The post How to Perform a Configuration Manager (ConfigMgr) Site Migration appeared first on Justin Chalfant's SCCM Guides.

]]>

 

Overview

In this video, we will be covering how to migrate from one ConfigMgr site to another. Specifically, we will look at migrating a ConfigMgr 2103 Site to another 2103 Site. This process is similar if you were migrating from a different version of ConfigMgr (Source Site) to the ConfigMgr Current Branch (Destination Site). All the same concepts would apply to those situations.

Topics in Video

  • Introduction – (0:00)
  • Reviewing Microsoft Doc on Migrating data between hierarchies in ConfigMgr – (0:39)
  • Lab Overview – (1:22)
  • Reviewing the requirements, concepts, and prerequisites for the ConfigMgr Site Migration – (2:09)
  • Reviewing the objects we plan to migrate from the source site – (5:35)
  • What objects can you migrate? – (7:37)
  • Configuring the source hierarchy on the destination site – (8:30
  • Going over the migmctrl.log – (10:48)
  • Configuring the Infrastructure Administrator role on the source site – (11:28)
  • Attempting another data gathering on the destination site – (13:12)
  • Revisiting the migmctrl.log – (13:29)
  • Configuring the Source Site Database Account – (14:01)
  • One more attempt at gathering data – (16:47)
  • Successful data gather – (17:15)
  • Creating a Migration Job – (17:30)
  • Reviewing migmctrl.log to view permission errors – (21:12)
  • Taking a look at the built-in Infrastructure Administrator security role – (21:42)
  • Options for how to fix the permission errors – (22:20)
  • Restarting the Migration Job – (23:22)
  • Creating another Migration Job – (24:33)
  • Deploying application to see what it looks like to also migrate deployments to the destination site – (25:22)
  • Running another Data Gather to re-evaluate the source site – (26:15)
  • Creating another Migration Job – (27:02)
  • Looking at the migmctrl.log after creating the Migration Job – (29:55)
  • Reviewing the Object Migration Progress – (30:33)
  • Digging into the objects that failed – (31:11)
  • Starting the Migration Job again – (35:13)
  • Digging into the remaining failed Object – (36:50)
  • Let’s talk about the content source location – (39:15)
  • Overview of the ConfigMgr Content Source Update Tool – (40:02)
  • Wrap-up – (41:41)

    Helpful Resources:

    The post How to Perform a Configuration Manager (ConfigMgr) Site Migration appeared first on Justin Chalfant's SCCM Guides.

    ]]>
    https://setupconfigmgr.com/how-to-perform-a-configuration-manager-configmgr-site-migration/feed 2
    Deep Dive Configure a Software Update Point (WSUS) Server to Require SSL in SCCM https://setupconfigmgr.com/configure-a-software-update-point-wsus-server-to-require-ssl-in-configuration-manager https://setupconfigmgr.com/configure-a-software-update-point-wsus-server-to-require-ssl-in-configuration-manager#respond Wed, 05 May 2021 13:24:17 +0000 https://setupconfigmgr.com/?p=32918 The post Deep Dive Configure a Software Update Point (WSUS) Server to Require SSL in SCCM appeared first on Justin Chalfant's SCCM Guides.

    ]]>

     

    Overview

    • This video tutorial will describe how to configure WSUS to require SSL. This setting will ensure client scan for updates via your WSUS/SUP in Configuration Manager.

    Topics in Video

    • Introduction: (0:00)
    • Review SUP/WSUS server that does not require SSL: (0:45)
    • Review the SCCM and WSUS Lab Setup: (2:30)
    • Create the certificate template to create an SSL certificate for WSUS: (3:00)
    • Issue the template for enrollment: (6:06)
    • Request the SSL certificate on the WSUS server using certlm.msc: (6:17)
    • Bind the SSL certificate to the WSUS Administration website in IIS: (8:30)
    • Verify WSUS is using SSL/HTTPS: (9:03) Configure SSL to be required on the WSUS server: (10:26)
    • Run wsusutil configuressl to configure WSUS to use SSL: (12:11)
    • Set the software update to point setting to require SSL communication to the WSUS server: (13:20)
    • Validate clients are now using SSL to scan against WSUS: (14:17)

      Helpful Resources:

      The post Deep Dive Configure a Software Update Point (WSUS) Server to Require SSL in SCCM appeared first on Justin Chalfant's SCCM Guides.

      ]]>
      https://setupconfigmgr.com/configure-a-software-update-point-wsus-server-to-require-ssl-in-configuration-manager/feed 0
      Deep Dive Into Automatic Deployment Rule (ADR) Components (RuleEngine and PatchDownloader) in SCCM https://setupconfigmgr.com/deep-dive-into-automatic-deployment-rule-adr-components-ruleengine-and-patchdownloader-in-sccm https://setupconfigmgr.com/deep-dive-into-automatic-deployment-rule-adr-components-ruleengine-and-patchdownloader-in-sccm#respond Mon, 26 Apr 2021 13:31:00 +0000 https://setupconfigmgr.com/?p=32901 The post Deep Dive Into Automatic Deployment Rule (ADR) Components (RuleEngine and PatchDownloader) in SCCM appeared first on Justin Chalfant's SCCM Guides.

      ]]>

       

      Overview

      • In this video guide, we will look in detail at what happens on the site server when ADR’s evaluation is run. This covers in detail the RuleEngine and PatchDownloader components. We will look at how these components work with Verbose, Debug, and SQL Tracing enabled.

      Topics in Video

      • Introduction of deep-dive automatic deployment rule video topics: (0:00)
      • How to Enable Debug and Verbose Logging and SQL Tracing in SCCM:(2:58)
      • Review the RuleEngine component in the Configuration Manager Service Manager: (6:40)
      • Run an ADR and review the logging of the RuleEngine.log: (7:45) Review SQL Query criteria generated by RuleEngine: (10:13)
      • Review How RuleEngine determines if updates need to be downloaded to a deployment package: (13:00)
      • The PatchDownloader component used for ADRs and review PatchDownloader.log: (15:50)
      • RuleEngine creating software update groups: (20:50)
      • How deployments are created for ADRs by RuleEngine: (23:20)
      • Add to an existing software update group ADR setting in SCCM: (26:15)

      Helpful Resources:

      The post Deep Dive Into Automatic Deployment Rule (ADR) Components (RuleEngine and PatchDownloader) in SCCM appeared first on Justin Chalfant's SCCM Guides.

      ]]>
      https://setupconfigmgr.com/deep-dive-into-automatic-deployment-rule-adr-components-ruleengine-and-patchdownloader-in-sccm/feed 0
      Deep Dive into How the Site Server Works in Configuration Manager (SCCM) https://setupconfigmgr.com/deep-dive-into-the-site-server-in-configuration-manager-sccm https://setupconfigmgr.com/deep-dive-into-the-site-server-in-configuration-manager-sccm#respond Tue, 08 Dec 2020 14:45:00 +0000 https://setupconfigmgr.com/?p=32869 The post Deep Dive into How the Site Server Works in Configuration Manager (SCCM) appeared first on Justin Chalfant's SCCM Guides.

      ]]>

       

      Overview

      Download Excel Log Sheet

      Topics in Video

      • Intro: (0:00)
      • What is the ConfigMgr site server: (0:36)
      • Functions of the Site Server SMS_EXECUTIVE Treads: (2:37)
      • Review a site system: (3:40)
      • Review Configuration Manager Service Manager and the threads running under SMS_EXECUTIVE service: (4:20)
      • Review components and log files used by the site server: (8:30)
      • How we enabled verbose and debug logging on the ConfigMgr site server: (10:45)
      • Review SMS_AD_SYSTEM_DISCOVERY_AGENT | adsysdis.log: (13:00)
      • What are ConfigMgr inboxes on the site server: (14:25)
      • Review SMS_AD_USER_DISCOVERY_AGENT | adusrdis.log: (16:12)
      • Review AD group discovery: (17:19)
      • Review SMS_CLIENT_CONFIG_MANAGER used for Client Push CCM.log | Records activities for client push installation.: (18:08)
      • Review SMS_COLLECTION_EVALUATOR | colleval.log | Records details about when collections are created, changed, and deleted by the Collection Evaluator.: (20:40)
      • Review SMS_INVENTORY_DATA_LOADER | dataldr.log: (23:30)
      • Review SMS_DISTRIBUTION_MANAGER and SMS_PACKAGE_TRANSFER_MANAGER | distmgr.log | Records details about content distribution requests. & PkgXferMgr.log – Records the actions of the SMS_Executive component that is responsible for sending content from a primary site to a remote distribution point.: (28:44)
      • Review SMS_HIERARCHY_MANAGER | hman.log | Records information about site configuration changes, and about the publishing of site information in Active Directory Domain Services.: (33:25)
      • Review SMS_SITE_COMPONENT_MANAGER – sitecomp.log | Records details about the maintenance of the installed site components on all site system servers on the site.: (35:00)
      • Review SMS_STATE_SYSTEM | statesys.log | Records the processing of state system messages. (39:00)
      • Review SMS_WSUS_CONTROL_MANAGER: (41:00)
      • Review SMS_WSUS_SYNC_MANAGER: (43:30) 

      The post Deep Dive into How the Site Server Works in Configuration Manager (SCCM) appeared first on Justin Chalfant's SCCM Guides.

      ]]>
      https://setupconfigmgr.com/deep-dive-into-the-site-server-in-configuration-manager-sccm/feed 0
      Deep Dive Third-Party Update Considerations with Cloud Management Gateway (CMG) in SCCM https://setupconfigmgr.com/third-party-update-considerations-with-cloud-management-gateway-cmg-in-sccm https://setupconfigmgr.com/third-party-update-considerations-with-cloud-management-gateway-cmg-in-sccm#respond Wed, 15 Apr 2020 12:00:00 +0000 https://setupconfigmgr.com/?p=32807 The post Deep Dive Third-Party Update Considerations with Cloud Management Gateway (CMG) in SCCM appeared first on Justin Chalfant's SCCM Guides.

      ]]>

      Overview

      • In this video guide, Cody Mathis and Justin Chalfant from Patch My PC will review common issues that can arise with third-party patch management through Cloud Management Gateway in Microsoft Configuration Manager (SCCM). We will review common issues that can arise with third-party updates such as content not distributed to CMG, CMG authentication to the SUP site system, certificates, content lookups, policy, and more.

        Helpful Resources

        The post Deep Dive Third-Party Update Considerations with Cloud Management Gateway (CMG) in SCCM appeared first on Justin Chalfant's SCCM Guides.

        ]]>
        https://setupconfigmgr.com/third-party-update-considerations-with-cloud-management-gateway-cmg-in-sccm/feed 0
        Deep Dive Token-Based Authentication for Cloud Management Gateway in Configuration Manager https://setupconfigmgr.com/token-based-authentication-for-cloud-management-gateway-in-configuration-manager https://setupconfigmgr.com/token-based-authentication-for-cloud-management-gateway-in-configuration-manager#comments Thu, 02 Apr 2020 11:55:31 +0000 https://setupconfigmgr.com/?p=32796 The post Deep Dive Token-Based Authentication for Cloud Management Gateway in Configuration Manager appeared first on Justin Chalfant's SCCM Guides.

        ]]>

        Overview

        Topics in Video

        Helpful Resources

        The post Deep Dive Token-Based Authentication for Cloud Management Gateway in Configuration Manager appeared first on Justin Chalfant's SCCM Guides.

        ]]>
        https://setupconfigmgr.com/token-based-authentication-for-cloud-management-gateway-in-configuration-manager/feed 24
        Deep Dive How to Configure a Shared WSUS Database for Multiple SUPs in SCCM https://setupconfigmgr.com/how-to-configure-a-shared-wsus-database-for-multiple-sups-in-sccm https://setupconfigmgr.com/how-to-configure-a-shared-wsus-database-for-multiple-sups-in-sccm#comments Mon, 11 Feb 2019 14:21:14 +0000 https://setupconfigmgr.com/?p=28390 The post Deep Dive How to Configure a Shared WSUS Database for Multiple SUPs in SCCM appeared first on Justin Chalfant's SCCM Guides.

        ]]>

        Overview

        • In this video guide, we will be covering how to use a shared WSUS database for multiple software update points in SCCM. Using a shared WSUS Database is generally considered a best practice in well-connected scenarios since this offloads the vast majority of network impact if a client were to switch SUPs in SCCM.

        Topics in Video

        Commands and Notes:

        • Powershell command to see WSUS installed role services: Get-WindowsFeature -Name UpdateServices*
        • Powershell command to remove WSUS WidDB: Remove-WindowsFeature -Name UpdateServices-WidDB
        • Powershell command to install WSUS SQL Database Connectivity: Install-WindowsFeature -Name UpdateServices-DB
        • WsusUtil command: WsusUtil.exe postinstall SQL_INSTANCE_NAME=”SCUP.CONTOSO.LOCAL” CONTENT_DIR=”\\SCCM3-DPMPSUP-1.CONTOSO.LOCAL\WSUS”
          • SQL_INSTANCE_NAME and CONTENT_DIR should be changed to for your environment details

        Helpful Resources:

        The post Deep Dive How to Configure a Shared WSUS Database for Multiple SUPs in SCCM appeared first on Justin Chalfant's SCCM Guides.

        ]]>
        https://setupconfigmgr.com/how-to-configure-a-shared-wsus-database-for-multiple-sups-in-sccm/feed 19
        Deep Dive How to Migrate a WSUS Database from WID to SQL in SCCM https://setupconfigmgr.com/how-to-migrate-a-wsus-database-from-wid-to-sql-in-sccm https://setupconfigmgr.com/how-to-migrate-a-wsus-database-from-wid-to-sql-in-sccm#comments Mon, 14 Jan 2019 11:58:15 +0000 https://setupconfigmgr.com/?p=28371 The post Deep Dive How to Migrate a WSUS Database from WID to SQL in SCCM appeared first on Justin Chalfant's SCCM Guides.

        ]]>

        Overview

        • In this video guide, we will be covering how to migrate WSUS Database (SUSDB) from Windows Internal Database instance to SQL Server instance.

        Topics in Video

        Commands and Notes:

        • Connect to WID instance in SQL Management Studio of sqlcmd (Server 2012 or Newer): \\.\pipe\MICROSOFT##WID\tsql\query
        • Connect to WID instance in SQL Management Studio of sqlcmd (Server 2008 R2 or Older): \\.\pipe\MSSQL$MICROSOFT##SSEE\sql\query
        • Powershell command to see WSUS installed role services: Get-WindowsFeature -Name UpdateServices*
        • Powershell command to remove WSUS WidDB: Remove-WindowsFeature -Name UpdateServices-WidDB
        • Powershell command to install WSUS SQL Database Connectivity: Install-WindowsFeature -Name UpdateServices-DB
        • WsusUtil command: WsusUtil.exe postinstall SQL_INSTANCE_NAME=”SCUP.CONTOSO.LOCAL” CONTENT_DIR=”J:\WSUS”
          • SQL_INSTANCE_NAME and CONTENT_DIR should be changed to for your environment details

        Helpful Resources:

        The post Deep Dive How to Migrate a WSUS Database from WID to SQL in SCCM appeared first on Justin Chalfant's SCCM Guides.

        ]]>
        https://setupconfigmgr.com/how-to-migrate-a-wsus-database-from-wid-to-sql-in-sccm/feed 10
        Deep Dive Into the Content Library, Content Location Request, DPs, IIS in Microsoft SCCM https://setupconfigmgr.com/deep-dive-into-the-content-library-content-location-request-dps-iis-in-microsoft-sccm https://setupconfigmgr.com/deep-dive-into-the-content-library-content-location-request-dps-iis-in-microsoft-sccm#respond Mon, 22 Oct 2018 01:49:18 +0000 https://setupconfigmgr.com/?p=28239 The post Deep Dive Into the Content Library, Content Location Request, DPs, IIS in Microsoft SCCM appeared first on Justin Chalfant's SCCM Guides.

        ]]>
         

        Overview

        • In this video guide, we will be covering the way content is stored in distributed in Microsoft Configuration Manager. This video will go deep into how the content library on the site server works, the way content is distributed to remote DPs, how clients submit content location request, IIS, content troubleshooting and more!

        Topics in Video

        • Understanding the Content Library (PkgLib, DataLib, and FileLib) – https://youtu.be/A9K9_NPQL_o?t=99
        • Review an applications deployment types and how the content binaries are stored in the DataLib and FileLib – https://youtu.be/A9K9_NPQL_o?t=228
        • Review how content is distributed from the site servers content library to remote distribution points content library (distmgr.log and PkgXferMgr.log) – https://youtu.be/A9K9_NPQL_o?t=422
        • Review boundaries and boundary groups and how that the corresponds to distribution points and client location request – https://youtu.be/A9K9_NPQL_o?t=594
        • Review a content location request for an applications deployment type from a client and why it received content not found due to boundary and boundary group configurations – https://youtu.be/A9K9_NPQL_o?t=689
        • Review how client location request for content come in from a management point perspective and how the management point runs a stored procedure against the database to see if the requested content is available based on the client boundary groups and distribution points the client is part of (MP_Location.log) – https://youtu.be/A9K9_NPQL_o?t=786
        • Setting an applications deployment type to allow the download to fallback to the default site boundary group and any neighboring boundary groups – https://youtu.be/A9K9_NPQL_o?t=1046
        • Review how the default-site-boundary-group and how other boundary group relationships work – https://youtu.be/A9K9_NPQL_o?t=1142
        • Review how to allow software update group deployment to allow fallback to the default-site-boundary-group and neighboring boundary groups – https://youtu.be/A9K9_NPQL_o?t=1281
        • Resolving the boundary to match the IP Range the client is located in and how a successful application deployment without fallback enabled would work – https://youtu.be/A9K9_NPQL_o?t=1442
        • Copy content URL and review how IIS translates the content library files for client downloads – https://youtu.be/A9K9_NPQL_o?t=1599
        • Review how to use content library explorer – https://youtu.be/A9K9_NPQL_o?t=1751

        Helpful Resources:

        The post Deep Dive Into the Content Library, Content Location Request, DPs, IIS in Microsoft SCCM appeared first on Justin Chalfant's SCCM Guides.

        ]]>
        https://setupconfigmgr.com/deep-dive-into-the-content-library-content-location-request-dps-iis-in-microsoft-sccm/feed 0
        Deep Dive into Application Deployment on the Client Side in Microsoft SCCM https://setupconfigmgr.com/deep-dive-into-application-deployment-on-the-client-side-in-microsoft-sccm https://setupconfigmgr.com/deep-dive-into-application-deployment-on-the-client-side-in-microsoft-sccm#comments Tue, 18 Sep 2018 15:06:12 +0000 https://setupconfigmgr.com/?p=28217 The post Deep Dive into Application Deployment on the Client Side in Microsoft SCCM appeared first on Justin Chalfant's SCCM Guides.

        ]]>
         

        Overview

        • In this video guide, we will be doing a deep-dive into the application deployment process in SCCM from a client-side perspective. This video will cover the components involved on the SCCM client to evaluate, download, and install applications.

        Topics in Video

        Helpful Resources:

        The post Deep Dive into Application Deployment on the Client Side in Microsoft SCCM appeared first on Justin Chalfant's SCCM Guides.

        ]]>
        https://setupconfigmgr.com/deep-dive-into-application-deployment-on-the-client-side-in-microsoft-sccm/feed 14
        PKI Code-Signing Certificate for Third-Party Updates in Microsoft SCCM/SCUP https://setupconfigmgr.com/pki-code-signing-certificate-for-third-party-updates-in-microsoft-sccm-scup https://setupconfigmgr.com/pki-code-signing-certificate-for-third-party-updates-in-microsoft-sccm-scup#comments Mon, 17 Sep 2018 14:43:23 +0000 https://setupconfigmgr.com/?p=28212 The post PKI Code-Signing Certificate for Third-Party Updates in Microsoft SCCM/SCUP appeared first on Justin Chalfant's SCCM Guides.

        ]]>

        Overview

        • In this video guide, we will cover how you can use a code-signing certificate from an Active Directly Certificate Services infrastructure or using a public certificate authority such as DigiCert for signing third-party software updates in Microsoft System Center Configuration Manager (SCCM). Using a trusted PKI based code-signing certificate can be an alternative to using a self-signed certificate.

        Topics in Video

        Helpful Resources:

        The post PKI Code-Signing Certificate for Third-Party Updates in Microsoft SCCM/SCUP appeared first on Justin Chalfant's SCCM Guides.

        ]]>
        https://setupconfigmgr.com/pki-code-signing-certificate-for-third-party-updates-in-microsoft-sccm-scup/feed 2
        Deep Dive into OSD Task Sequence Client Side Troubleshooting in Microsoft SCCM https://setupconfigmgr.com/deep-dive-into-osd-task-sequence-client-side-troubleshooting-in-microsoft-sccm https://setupconfigmgr.com/deep-dive-into-osd-task-sequence-client-side-troubleshooting-in-microsoft-sccm#comments Mon, 27 Aug 2018 12:01:22 +0000 https://setupconfigmgr.com/?p=28194 The post Deep Dive into OSD Task Sequence Client Side Troubleshooting in Microsoft SCCM appeared first on Justin Chalfant's SCCM Guides.

        ]]>
         

        Overview

        In this video guide, we cover what’s actually happening on a client during OSD in Configuration Manager. This deep dive guide covers what is going on and how to troubleshoot different stages of an OSD task sequence failure on the client. This should be an excellent resource for seasoned ConfigMgr admin’s as well non-ConfigMgr admin’s who want to understand how to troubleshoot OSD errors in SCCM. Topic’s in this session include wpeinit.log, winpeshl.ini, SMSTS.LOG, DiskPartScript.txt, unattend.xml, DISM, SetupACT, NetSetup.LOG, AppEnforce.log, WUAHandler.log, UpdatesDeployment.log, CAS.log and many more components involved in OSD!

        Topics in Video

        Helpful Resources:

        The post Deep Dive into OSD Task Sequence Client Side Troubleshooting in Microsoft SCCM appeared first on Justin Chalfant's SCCM Guides.

        ]]>
        https://setupconfigmgr.com/deep-dive-into-osd-task-sequence-client-side-troubleshooting-in-microsoft-sccm/feed 5
        How to Enable Third-Party Software Updates in SCCM Technical Preview 1806 https://setupconfigmgr.com/how-to-enable-third-party-software-updates-in-sccm-technical-preview-1806 https://setupconfigmgr.com/how-to-enable-third-party-software-updates-in-sccm-technical-preview-1806#comments Mon, 20 Aug 2018 23:10:00 +0000 https://setupconfigmgr.com/?p=27906 The post How to Enable Third-Party Software Updates in SCCM Technical Preview 1806 appeared first on Justin Chalfant's SCCM Guides.

        ]]>
        Overview In this video guide, we will walk through the process of enabling third-party software updates in the SCCM technical preview 1806. Topics in Video Resources for This Guide:

        The post How to Enable Third-Party Software Updates in SCCM Technical Preview 1806 appeared first on Justin Chalfant's SCCM Guides.

        ]]>
        https://setupconfigmgr.com/how-to-enable-third-party-software-updates-in-sccm-technical-preview-1806/feed 3
        Free Software Update Compliance Dashboard Reports for Microsoft SCCM https://setupconfigmgr.com/free-software-update-compliance-dashboard-reports-for-microsoft-sccm https://setupconfigmgr.com/free-software-update-compliance-dashboard-reports-for-microsoft-sccm#comments Mon, 20 Aug 2018 18:30:43 +0000 https://setupconfigmgr.com/?p=28184 The post Free Software Update Compliance Dashboard Reports for Microsoft SCCM appeared first on Justin Chalfant's SCCM Guides.

        ]]>
         

        Overview

        • In this video, we will cover how to set up our free software update compliance dashboard reports for Microsoft System Center Configuration Manager (SCCM). Learn more about the reports and download the installer from https://patchmypc.net/reports

        Topics in Video

        The post Free Software Update Compliance Dashboard Reports for Microsoft SCCM appeared first on Justin Chalfant's SCCM Guides.

        ]]>
        https://setupconfigmgr.com/free-software-update-compliance-dashboard-reports-for-microsoft-sccm/feed 12
        Deep Dive in Microsoft SCCM Software Updates Client and Server Components https://setupconfigmgr.com/deep-dive-in-microsoft-sccm-software-updates-client-and-server-components https://setupconfigmgr.com/deep-dive-in-microsoft-sccm-software-updates-client-and-server-components#comments Fri, 08 Jun 2018 06:46:02 +0000 https://setupconfigmgr.com/?p=27921 The post Deep Dive in Microsoft SCCM Software Updates Client and Server Components appeared first on Justin Chalfant's SCCM Guides.

        ]]>
         

        Overview

        • In this video guide, we will be performing a deep dive in the software updates feature in Microsoft SCCM. This will include client and server-side components. Some topics covered are client policy, scanning, WMI, StateMessages, StateMgr, Summarization and more!

        Topics in Video

        Notes From Justin

        • Helpful Logs for Software Updates
          • PolicyAgent.log – Records requests for policies made by using the Data Transfer Service.
          • PolicyEvaluator.log – Records details about the evaluation of policies on client computers, including policies from software updates.
          • LocationServices.log – Records the client activity for locating management points, software update points, and distribution points.
          • UpdatesHandler.log – Records details about software update compliance scanning and about the download and installation of software updates on the client.
          • RebootCoordinator.log – Records details about the coordination of system restarts on client computers after software update installations.
          • WUAHandler.log – Records details about the Windows Update Agent on the client when it searches for software updates.
          • UpdatesStore.log – Records details about compliance status for the software updates that were assessed during the compliance scan cycle.
          • ScanAgent.log – Records details about scan requests for software updates, the WSUS location, and related actions.
          • StateMessage.log – Records details about software update state messages that are created and sent to the management point.
          • UpdatesDeployment.log – Records details about deployments on the client, including software update activation, evaluation, and enforcement. Verbose logging shows additional information about the interaction with the client user interface.
          • statesys.log – Records the processing of state system messages. This log also shows the software update summarization task that run.
        • Helpful WMI Namespace and Classes
          • ROOT\ccm\Policy\Machine\ActualConfig:CCM_UpdateCIAssignment – This shows that we have the policy for the SUG Deployment ID
          • ROOT\ccm\ScanAgent:CCM_SUPLocationList – Shows SUP SCCM is set to use for scanning
          • ROOT\ccm\SoftwareUpdates\DeploymentAgent:CCM_TargetedUpdateEx1 – Shows all software updates targetting the device and the relevant information about the updates
          • ROOT\ccm\SoftwareUpdates\DeploymentAgent:CCM_AssignmentCompliance – Shows the different software update group deployments targetting the device and their compliance
          • ROOT\ccm\StateMsg:CCM_StateMsg – Shows all the state messages logged in WMI
        • Windows Update Log File PowerShell CMDlet
          • get-windowsupdatelog

        Helpful Resources:

        The post Deep Dive in Microsoft SCCM Software Updates Client and Server Components appeared first on Justin Chalfant's SCCM Guides.

        ]]>
        https://setupconfigmgr.com/deep-dive-in-microsoft-sccm-software-updates-client-and-server-components/feed 19
        Deep Dive Maintaining the WSUS Catalog by Declining Updates for Better Update Scanning https://setupconfigmgr.com/deep-dive-maintaining-the-wsus-catalog-by-declining-updates-for-better-update-scanning https://setupconfigmgr.com/deep-dive-maintaining-the-wsus-catalog-by-declining-updates-for-better-update-scanning#comments Mon, 04 Jun 2018 16:50:05 +0000 https://setupconfigmgr.com/?p=27895 The post Deep Dive Maintaining the WSUS Catalog by Declining Updates for Better Update Scanning appeared first on Justin Chalfant's SCCM Guides.

        ]]>

         * Updates * 

        • Do NOT remove the “all” in the language script (Decline-Windows10Languages.ps1) as I did in the video at 25:14. This change is not required or recommended.
        • It’s recommended to first run the script with the -Whatif switch or option in the config.ini to see what will be declined.
        • Update: in the latest script, you can use a config.ini file rather than a bunch of PowerShell parameters. Here’s the config.ini I’m now using instead of parameters.
          • Here’s what the updated script folder structure looks like
            • wsuscleanupscript-newfiles

         

         

         

        Overview

        In this video guide, we will walk through the process of maintaining our WSUS catalog to reduce the catalog size and client scanning issues. In this guide, we will cover ensuring the IIS AppPool for WSUS is improved, indexing the SUSDB, setting up a task to run a script to automatically decline any superseded updates, change the wsyncmgr purge of expired updates from 7 days to 0. and compare the initial catalog download size on a client.

        There’s a lot of good WSUS maintenance scripts out there now. In my video, I used Bryan Dam’s scriptSee the resources below for a lot of great information that will be helpful in addition to what I cover.

        Creating a Scheduled Task to Automate the Declining of Updates

        • Scheduled Task Options for Bryan Dam’s WSUS Scripts

        Topics in Video

        Resources for This Guide:

        Arguments for Scheduled Task:

        Note: you will need to change the script path


        -NoLogo -NoProfile -NonInteractive -ExecutionPolicy ByPass -command J:ScriptsInvoke-DGASoftwareUpdateMaintenance.ps1 -DeclineSuperseded -UpdateListOutputFile J:ScriptsDeclinedUpdates.csv -DeclineByTitle @('*Itanium*','*ia64*','*Beta*') -DeclineByPlugins -CleanSUGs -RemoveEmptySUGs -RunCleanUpWizard -Force

        The post Deep Dive Maintaining the WSUS Catalog by Declining Updates for Better Update Scanning appeared first on Justin Chalfant's SCCM Guides.

        ]]>
        https://setupconfigmgr.com/deep-dive-maintaining-the-wsus-catalog-by-declining-updates-for-better-update-scanning/feed 35
        Troubleshooting Microsoft Intune Win32 Application Deployments https://setupconfigmgr.com/troubleshooting-microsoft-intune-win32-application-deployment https://setupconfigmgr.com/troubleshooting-microsoft-intune-win32-application-deployment#respond Sat, 02 Jun 2018 17:55:00 +0000 https://setupconfigmgr.com/?p=32788 The post Troubleshooting Microsoft Intune Win32 Application Deployments appeared first on Justin Chalfant's SCCM Guides.

        ]]>

        Overview

        • In this video guide, we will review how line-of-business (LOB) and Win32 applications get installed through Microsoft Intune. We will be covering what logs are used and where application installation information is stored in the registry.

        Topics in Video

        Helpful Resources

        The post Troubleshooting Microsoft Intune Win32 Application Deployments appeared first on Justin Chalfant's SCCM Guides.

        ]]>
        https://setupconfigmgr.com/troubleshooting-microsoft-intune-win32-application-deployment/feed 0
        How to Set Up Co-Management in Microsoft SCCM to Connect to Microsoft Intune https://setupconfigmgr.com/how-to-set-up-co-management-in-microsoft-sccm-to-connect-to-microsoft-intune https://setupconfigmgr.com/how-to-set-up-co-management-in-microsoft-sccm-to-connect-to-microsoft-intune#comments Sat, 02 Jun 2018 17:50:00 +0000 https://setupconfigmgr.com/?p=28251 The post How to Set Up Co-Management in Microsoft SCCM to Connect to Microsoft Intune appeared first on Justin Chalfant's SCCM Guides.

        ]]>
         

        Overview

        • In this video guide, we will be covering how to setup Co-management in Microsoft SCCM. Co-management will allow you to use the full Configuration Manager client as well as the Microsoft Intune MDM.

        Topics in Video

        Helpful Resources:

        The post How to Set Up Co-Management in Microsoft SCCM to Connect to Microsoft Intune appeared first on Justin Chalfant's SCCM Guides.

        ]]>
        https://setupconfigmgr.com/how-to-set-up-co-management-in-microsoft-sccm-to-connect-to-microsoft-intune/feed 7
        How to Enable Site Server High Availability in SCCM https://setupconfigmgr.com/how-to-enable-site-server-high-availability-in-sccm https://setupconfigmgr.com/how-to-enable-site-server-high-availability-in-sccm#comments Sat, 02 Jun 2018 17:30:00 +0000 https://setupconfigmgr.com/?p=28337 The post How to Enable Site Server High Availability in SCCM appeared first on Justin Chalfant's SCCM Guides.

        ]]>

        Overview

        • In this video guide, we will be covering how to configure site server high availability in Microsoft System Center Configuration Manager Current Branch. We will cover the prerequisites to install a passive site server, how to perform the installation, and how to fail over to the passive server.

        Topics in Video

        Helpful Resources:

        The post How to Enable Site Server High Availability in SCCM appeared first on Justin Chalfant's SCCM Guides.

        ]]>
        https://setupconfigmgr.com/how-to-enable-site-server-high-availability-in-sccm/feed 17
        Using CMPivot in SCCM for Real-Time Data and Taking Real-Time Action Using Scripts https://setupconfigmgr.com/using-cmpivot-in-sccm-for-real-time-data-and-taking-real-time-action-using-scripts https://setupconfigmgr.com/using-cmpivot-in-sccm-for-real-time-data-and-taking-real-time-action-using-scripts#comments Sat, 02 Jun 2018 17:12:00 +0000 https://setupconfigmgr.com/?p=32648 The post Using CMPivot in SCCM for Real-Time Data and Taking Real-Time Action Using Scripts appeared first on Justin Chalfant's SCCM Guides.

        ]]>

        Overview

        • In this video guide, we will be reviewing how to use CMPivot in SCCM to query entities in real-time and take action on results using the Scripts feature in SCCM. CMPivot is a new in-console utility that now provides access to real-time state of devices in your environment. It immediately runs a query on all currently connected devices in the target collection and returns the results. Then filter and group this data in the tool. By providing real-time data from online clients, you can more quickly answer business questions, troubleshoot issues, and respond to security incidents. (From MS Docs)

        Topics in Video

        Helpful Resources:

        The post Using CMPivot in SCCM for Real-Time Data and Taking Real-Time Action Using Scripts appeared first on Justin Chalfant's SCCM Guides.

        ]]>
        https://setupconfigmgr.com/using-cmpivot-in-sccm-for-real-time-data-and-taking-real-time-action-using-scripts/feed 4
        Third-Party Software Updates in ConfigMgr when SUP/WSUS is Remote and not Running in SSL/HTTPS https://setupconfigmgr.com/third-party-software-updates-in-configmgr-when-sup-wsus-is-remote-and-not-running-in-ssl-https https://setupconfigmgr.com/third-party-software-updates-in-configmgr-when-sup-wsus-is-remote-and-not-running-in-ssl-https#respond Sat, 02 Jun 2018 16:31:00 +0000 https://setupconfigmgr.com/?p=32891 The post Third-Party Software Updates in ConfigMgr when SUP/WSUS is Remote and not Running in SSL/HTTPS appeared first on Justin Chalfant's SCCM Guides.

        ]]>
         

        Overview

        • This guide covers considerations for third-party software updates in Configuration Manager when using a remote software update point (SUP) that is not configured for SSL.

        Topics in Video

        • Intro: (0:00)
        • Review remote site system running SUP in HTTP mode: (1:30)
        • Enable third-party updates and Configuration Manager managed the certificate: (2:15)
        • wsyncmgr.log error Warning: Remote WSUS connection is not HTTPS. This prevents software update point from getting the signing certificate for third-party updates.: (2:50)
        • Review the SMS_ISVUPDATES_SYNCAGENT.log: (3:45)
        • Stage the content for selected categories automatically: (6:00)
        • SMS_ISVUPDATES_SYNCAGENT.log syncing catalog: (7:15)
        • SMS_ISVUPDATES_SYNCAGENT.log: error NO_SIGNING_CERT: (8:00)
        • Create a WSUS Signing Certificate using Patch My PC’s Publisher: (11:00)
        • Export and Deploy WSUS Signing Certificate using a GPO: (14:15)

        Helpful Resources:

        The post Third-Party Software Updates in ConfigMgr when SUP/WSUS is Remote and not Running in SSL/HTTPS appeared first on Justin Chalfant's SCCM Guides.

        ]]>
        https://setupconfigmgr.com/third-party-software-updates-in-configmgr-when-sup-wsus-is-remote-and-not-running-in-ssl-https/feed 0
        Cloud Management Gateway (CMG) Community Session with the Patch My PC Team https://setupconfigmgr.com/cloud-management-gateway-cmg-community-session-with-the-patch-my-pc-team https://setupconfigmgr.com/cloud-management-gateway-cmg-community-session-with-the-patch-my-pc-team#comments Sat, 02 Jun 2018 16:30:00 +0000 https://setupconfigmgr.com/?p=32833 The post Cloud Management Gateway (CMG) Community Session with the Patch My PC Team appeared first on Justin Chalfant's SCCM Guides.

        ]]>

        Overview

        Here’s a playback of the community session with the Patch My PC team about Cloud Management Gateway in Configuration Manager. In this session, we cover common configurations and possible issues with CMG including:

        – CMG server authentication certificate
        – CMG trusted root certificate to clients
        – Server authentication certificate issued by public provider
        – Server authentication certificate issued from enterprise PKI
        – Client authentication certificate
        – Client trusted root certificate to CMG
        – CRL checking
        – Q&A

          The post Cloud Management Gateway (CMG) Community Session with the Patch My PC Team appeared first on Justin Chalfant's SCCM Guides.

          ]]>
          https://setupconfigmgr.com/cloud-management-gateway-cmg-community-session-with-the-patch-my-pc-team/feed 6