Sccm-2012 on Anything About IT

SCCM 2012 SP1 Client Settings only configurable within the Default Client Settings

Tue, 04 Jun 2013 20:14:48 +0000

While preparing and documenting the System Center Configuration Manager 2012 SP1 Client settings for our clients and servers I noticed that there are a few settings that cannot be configured within custom client settings meaning they can only be configured within the Default Settings.

The following table lists the settings I identified as only configurable within the Default Client Settings.

 **Agent** **Setting** Compliance Settings Schedule compliance evaluation Hardware Inventory Maximum custom MIF File Size in KB   Collect MIF Files Software Inventory Configure the display names for manufacturer or product Related content: [About Client Settings in Configuration Manager](http://technet.microsoft.com/en-us/library/gg682067.aspx#BKMK_Compliance)

How to change the SCCM 2012 Package Source Path with PowerShell

Mon, 13 May 2013 20:08:57 +0000

Let’s assume you’ve just created a larger number of packages within SCCM 2012 and then you’re asked to move the package sources to a different location. I guess no-one on earth would want to visit each package and update the data source manually, So I wrote 2 scripts that automate this task. It could actually be done with one script, but when it comes to changing such things I prefer to validate things.

PowerShell: Script to Retrieve SCCM 2012 Client Settings

Tue, 30 Apr 2013 22:16:54 +0000

4/3/2017 - Update: here’s a better version: https://www.verboon.info/2017/03/configmgr-client-policy-settings-get-cmclientpolicysettings/

To make documenting the configured SCCM Client configuration settings a bit easier I wrote a small script that retrieves all the configured settings for the Default and custom configuration settings.

To run this script the Configuration Manager powershell module must be loaded and connected to the site.

# Get the different Client settings Names
$a = Get-CMClientSetting | select Name

foreach ($a in $a ) 
{
	# Get all possible values for the Get-CMClientSetting -Setting parameter
	$xsettings = [Enum]::GetNames( [Microsoft.ConfigurationManagement.Cmdlets.ClientSettings.Commands.SettingType])

	# dump the detailed configuration settings
	foreach ($xsettings in $xsettings ) {
 	#write-host $a.Name
	 Get-CMClientSetting -Setting $xsettings -Name $a.Name | format-table
 }

}

Integrating DaRT 8.0 SP1 Remote Connection into the SCCM 2012 OSD Process

Mon, 22 Apr 2013 22:13:09 +0000

While preparing for an SCCM 2012 upgrade, I thought it might be a good idea to consider implementing some of the best practices that are around such as integrating the DaRT Remote Connection tool into the OSD deployment process. I’m sure it comes in handy when having to troubleshoot OSD related tings, as it allows us to access the client remotely without having to give lengthy instructions to an onsite engineer.

How to automate SCCM 2012 Task Sequence Media Creation

Mon, 15 Apr 2013 20:46:29 +0000

Just recently I went through the CM12 Console Task Sequence media creation wizard several times a day, so at some point I thought, this is a good candidate for automation.

If you have CU1 for SCCM 2012 SP1 already installed, you can take advantage of the new cmdlet **New-CMTaskSequenceMedia **Below an example.

CreateTaskMedia.ps1

import-module ($Env:SMS_ADMIN_UI_PATH.Substring(0,$Env:SMS_ADMIN_UI_PATH.Length-5) + '\ConfigurationManager.psd1')
cd NL1:

New-CMTaskSequenceMedia -BootableMediaOption -MediaInputType CDDVD -ProtectPassword $false -BootImageId NL100002 -DistributionPointServerName labsccm01.labhome.local -ManagementPointServerName labsccm01.labhome.local -MediaMode Dynamic -MediaPath C:\Sources\TSMedia\batchcreatedmedia1.iso -MediaSize SizeUnlimited -EnableUnknownSupport $false  -CreateMediaSelfCertificate $true -AllowUnattendedDeployment $false -UserDeviceAffinity DoNotAllow

If you haven’t installed CU1 yet, no worries. the command line tool CreateMedia.exe located in the SCCM Administrator Console’s bin directory does the same thing.

How to create a custom antimalware policy in SCCM 2012 for your App-V sequencing clients

Fri, 22 Feb 2013 16:33:44 +0000

Today I wanted to start sequencing an application for App-V within my lab environment where I have deployed SCCM 2012 SP1 including Endpoint Protection. As I went through the Sequencing Wizard I got the well-known warning that I have Antivirus software running.

Not an issue, just turn it off right?. Well since I have configured a custom Antimalware policy that is applied to all my clients to not allow configure the real-time protection settings, this setting can’t be changed. .

How to create a SCCM 2012 SP1 Configuration Baseline with Security Compliance Manager (SCM) 3.0

Mon, 04 Feb 2013 12:56:59 +0000

Most enterprises take advantage of Group Policies to manage security configuration settings across their server and desktop infrastructure. Usually once tested and implemented it’s assumed they get applied correctly. But can we be 100% sure that our clients and servers do actually receive these settings?

With the help of the Microsoft Security Compliance Manager 3.0 and SCCM 2012 SP1 we can configure a security baseline to monitor security group policy settings compliance. To do so we need the following: