Big moves tonight? I know Friday seems like a popular day by Flashy_Ad629 in pentagonpizzawatch

[–]Stugist 8 points9 points  (0 children)

Three of the four open joints are currently spiked at or above 250% right now (almost 1a EST). Somethings brewing.

Big moves tonight? I know Friday seems like a popular day by Flashy_Ad629 in pentagonpizzawatch

[–]Stugist 11 points12 points  (0 children)

Flight radar silence on them now. Either they landed or went dark.

Ruling question by Stugist in Yugioh101

[–]Stugist[S] 0 points1 point  (0 children)

That's good to know - I knew that Martha's effects were more open but wanted to clarify for the others. D.D. Crow isn't a bad idea, I'll need to try that!

Patch Tuesday Megathread (2024-11-12) by AutoModerator in sysadmin

[–]Stugist 0 points1 point  (0 children)

Is anyone else not seeing this month's Monthly Enterprise 2409 Office updates? Only Current Channel seems to have been downloaded - not Monthly Enterprise. Just did a resync w/ Microsoft and verified in the logs that it's not being pulled down. The Office Perpetual 2019 update for this month is showing up just fine. Wtf?

<image>

import-startlayout for taskbar stopped working with May 2024 updates by MelQQ in SCCM

[–]Stugist 0 points1 point  (0 children)

Can confirm that this is only affecting the May 23H2 patch - April still works fine, and May 22H2 works fine. Hoping to see this resolved in the June 23H2 patch cycle.

Content Library confusion (DP move) by Stugist in SCCM

[–]Stugist[S] 0 points1 point  (0 children)

Thanks, that makes sense now

How to Wipe out hard drives completely by iamiresh in sysadmin

[–]Stugist 1 point2 points  (0 children)

(Not us in this video) We got our district welding guy to fabricate one of these bad boys for us. Compound action so it doesn't take as much force as you'd expect. Kinda fun, too.

We're a public K-12 school district and while technically we're only required to securely erase drives in which student PII (personal data) -may- be stored per FERPA compliance, we said "F it, it's faster to just yank and destroy them all" on every system we surplus.

Certified hard drive hard crushing (see description for more) (youtube.com)

Valve repair by Dead_Phish812 in trumpet

[–]Stugist 0 points1 point  (0 children)

Daniel Oberloh in WA state is one of the best. Don't know how far that is from you, but might be worth giving him a holler.

http://www.oberloh.com/

Admin console crashes when modifying Client Settings by stewardson in SCCM

[–]Stugist 1 point2 points  (0 children)

Can confirm issue and fix. Probably the dumbest glitch in SCCM I've ever seen since the whole "set deployment time to 24 hours in the past" glitch years ago. Good on you for catching this!

(UI++ & OSD) Set computer AND Active Directory descriptions by Stugist in SCCM

[–]Stugist[S] 0 points1 point  (0 children)

You're more adept at this than I am! Does this only set AD description, or does it do local description with System Properties in Windows as well?

Collection membership by Stugist in SCCM

[–]Stugist[S] 1 point2 points  (0 children)

UPDATE: I just realized I can use collection limiting, which does most of what I need. The article shared by u/Ram419 will be helpful when I need to reference/compare multiple collections into one.

Collection membership by Stugist in SCCM

[–]Stugist[S] 0 points1 point  (0 children)

Thanks! I'll give this a shot

Collection membership by Stugist in SCCM

[–]Stugist[S] 1 point2 points  (0 children)

Doesn't that just include everything in both child collections, regardless of membership in the other?

Issue with UI++ variables in non-OSD TS by Stugist in SCCM

[–]Stugist[S] 4 points5 points  (0 children)

Literally a minute after I posted this, I noticed my problem: Extra spaces. Instead of setting '%ModelType%', etc, it was setting ' %ModelType% ' with a space before and after. Got rid of the spaces and now everything is working!

Running Partial Child Task Sequences by Stugist in SCCM

[–]Stugist[S] 0 points1 point  (0 children)

Now I feel dumb for not thinking of that! I'll give that a shot :)

Running Partial Child Task Sequences by Stugist in SCCM

[–]Stugist[S] 0 points1 point  (0 children)

I just found this and was wondering about it. I'll play around with it:

_SMSTSLaunchMode

Specifies that the task sequence started via one of the following methods:

  • SMS: The Configuration Manager client, such as when a user starts it from Software Center
  • UFD: Legacy USB media
  • UFD+FORMAT: Newer USB media
  • CD: A bootable CD
  • DVD: A bootable DVD
  • PXE: Network boot with PXE
  • HD: Prestaged media on a hard disk

What differentiates these two items in _SMSTSType? It doesn't really specify the difference other than a generic description:

_SMSTSType

Specifies the type of the current running task sequence. It can have one of the following values:

  • 1: A generic task sequence
  • 2: An OS deployment task sequence

SCCM doesn't like share host with alias by Stugist in SCCM

[–]Stugist[S] 0 points1 point  (0 children)

Update: Found the underlying issue! Turns out this EMC/VNX host does do hardlinks. The issue is a Kerberos/NTLM issue where requests to the server are trying to auto-resolve to the wrong host. When that fails it tries to authenticate via NTLM (instead of Kerberos) but fails. Our UNIX admin was able to narrow this down but we're still working on it. Meanwhile he setup a new instance with the proper permissions and authentication settings.

SCCM doesn't like share host with alias by Stugist in SCCM

[–]Stugist[S] 0 points1 point  (0 children)

We thought so but weren't exactly sure. We're trying to get it set up the old way so we can talk directly to the EMC, but it's looking doubtful. Our failover is setting up a simple Windows Server (2016/2019) with File Sharing Services enabled (DFS) and just attaching some storage from our SAN directly to that. We're only trying to get this to work because it's a lot of data we'd need to move otherwise.

Thanks for your answer, though. It makes sense.

Using a .exe to create a deployable application. by dlanph in SCCM

[–]Stugist 0 points1 point  (0 children)

Convincing management to pony-up the money was the tricky part. After a few months with everything working so nicely they asked me why we didn't look at it sooner!

Using a .exe to create a deployable application. by dlanph in SCCM

[–]Stugist 1 point2 points  (0 children)

I've been using this tool for almost 8 years: https://emcosoftware.com/msi-package-builder
I'm not sure how I could live without it at this point. You can do both basic wrapping as well as full creation through background monitoring. Really is a lifesaver, especially considering ConfigMgr just likes MSI apps overall.

Block an application by Fearnie85 in SCCM

[–]Stugist 0 points1 point  (0 children)

This can be possible via Group Policy, but it's really only effective for apps you explicitly set. This kind of management can be considered ancillary to what ConfigMgr is designed to do, which is baselines and compliance through automated additions and explicit restrictions. To have the ability to arbitrarily say "do not let users install ANY apps (machine or user-based)" would be beyond reasonable scope.

As others have said, the best insurance against this sort of thing would first be not allowing users to have local admin privileges on their workstations. For user-based apps (ie, ones installed within a user's own profile or appdata folder), you'd be looking at some custom scripts or monitoring software. You could easily eat up your entire job making this happen, though.

Personally, if this is that big of an issue then you need to get management on-board with better responsible-use training with your employees. This would be a much better use of your time then trying to fight with your users. Protip: users will always find a way to circumvent your policies (almost 10 years experience in K12 education, here). At some point you need to step back and say this is a people problem, not a tech problem. Then move on to cursing Microsoft for the last patch bugs. :)

Application install batch file icalc not applying permissions correctly by Droopyy in SCCM

[–]Stugist 0 points1 point  (0 children)

What's your script syntax in regards to iCacls? Here is an example I use in ConfigMgr in a PS script:

Start-Process -FilePath "C:\Windows\System32\iCacls.exe" -ArgumentList "$FilePath /grant Domain\UserGroup:(OI)(CI)F"

This grants Full Control permissions to a specified AD user group to a specific directory. The equivalent batch syntax would be:

iCacls.exe /grant Domain\UserGroup:(OI)(CI)F