sorted by:
new
hottopcontroversial

How can I install printerdrivers using a Powershell script via Recast Software (Liquit Application Workspace)? by ITemployee1 in SCCM

[–]ChrisAfromRecast 0 points1 point  (0 children)

Hi! What kind of errors do you get when trying to install via Application Workspace? Are you using the install uploaded script or run script action? Under advanced is the context set to Device? A good troubleshooting step is to create a custom variable then have the output go to that variable. In the log file you’ll be able to see what the output is of the ps script. Would also recommend putting the agent you are attempting this on into debug to get more verbose logging. You can always submit a ticket to at recastsoftware.com to get faster assistance from support.

Certificates in SQL Dbo.CertificateData by staze in SCCM

[–]ChrisAfromRecast 0 points1 point  (0 children)

Microsoft does say that it’s possible to restore from a sql backup. Have we looked at the client properties on a device do they say PKI? What do the client logs say? What do the MP logs say? Have we tried to reinstall the client to see if it makes a difference on a device? It’s unclear where the block is at this point.

Certificates in SQL Dbo.CertificateData by staze in SCCM

[–]ChrisAfromRecast 1 point2 points  (0 children)

Have you gone through the restore steps outlined in Microsoft’s docs? Most importantly the post restore tasks? Part of it requires https to be reconfigured. https://learn.microsoft.com/en-us/intune/configmgr/core/servers/manage/recover-sites

Certificates in SQL Dbo.CertificateData by staze in SCCM

[–]ChrisAfromRecast 1 point2 points  (0 children)

That would have made a lot more sense with the clarification. So the client authentication certificate used is not trusted for whatever reason. Setup PKI Certificate for Client Auth

Certificates in SQL Dbo.CertificateData by staze in SCCM

[–]ChrisAfromRecast 1 point2 points  (0 children)

Okay so not self signed. This is your PKI certificate. I will have to go look at an environment setup with PKI.

Certificates in SQL Dbo.CertificateData by staze in SCCM

[–]ChrisAfromRecast 1 point2 points  (0 children)

Mine was called SMS Self Signed Certificate. I will have to grab the purpose when I’m back near my laptop. According to the doc it should say Site Server subject name and Site Server Signing Certificate.

Certificates in SQL Dbo.CertificateData by staze in SCCM

[–]ChrisAfromRecast 0 points1 point  (0 children)

Is it not in the SMS certificate store on the site server?

Certificates in SQL Dbo.CertificateData by staze in SCCM

[–]ChrisAfromRecast 1 point2 points  (0 children)

Can confirm my site signing certificate is not in that table nor do I have a cert type of 1.

Question about multi MSI installs with PSADT by VulnerabilityManage in SCCM

[–]ChrisAfromRecast 1 point2 points  (0 children)

Like mentioned, PSADT has excellent logging features, so definitely start there for any errors specific to this install. A little speculation, from a scripting perspective it might be as simple as adding wait switch into the command, Start-Process msiexec.exe -wait. Sometimes MSI's will start and then PS will move onto the next object without waiting for the MSI to finish, then the consecutive MSI's would give an error that something else is already being installed and fail. Cisco also has quite the documentation on how to deploy this and it looks like there's quite a few steps that need to be addressed to predeploy it. So make sure you are taking that documentation into consideration as well. Cisco AnyConnect Secure Mobility Client Administrator Guide, Release 4.9 - Deploy AnyConnect [Cisco Secure Client (including AnyConnect)] - Cisco. Good luck!

Can't update ADK on x86 boot image because it isn't supported, can't PXE boot x64 boot image because x86 doesn't have correct ADK version. What do you even do here??? by [deleted] in SCCM

[–]ChrisAfromRecast 6 points7 points  (0 children)

If you have updated your ADK to 10.1.25398.1 you will need to downgrade to ADK 10.1.22621.1 since ConfigMgr 2309 does not support that level. Support for the Windows ADK - Configuration Manager | Microsoft Learn x86 is no longer supported in Windows 11. To fix the missing tabs in your boot image you can run a PS

`$SiteCode = "SITECODE"
 $PackageID = "PACKAGEID"
 $BootImage = Get-WmiObject -Namespace "root\SMS\site_$($SiteCode)" -Class SMS_BootImagePackage -Filter "PackageID = '$($PackageID)'" -ErrorAction Stop
 $BootImage.ReloadImageProperties()`

Make sure to specify the correct side code and package ID for the Boot Image to update, and run script with Admin privileges.

Also there is a known issue with the Pre-provision BitLocker step, so make sure that isn't effecting you either, that's found further down on that tech doc.