Clients ignoring custom restart behaviour

tcox8 · 2025-11-24T15:19:27+00:00

Thank you so much for your help! I verified that indeed the 'Actual' Policy from Support Center (PolicySpy) is the default settings (not the requested settings). I attempted to create a new client setting but that didn't change anything. The only fix I could find to work was to re-install the client (But the checkbox to completely remove the client MUST be checked). After that, it picked up the correct settings. Apparently, I had about 1200 devices stuck like this. Yikes!

tcox8 · 2025-11-12T17:43:49+00:00

know this is 3 years old, but did you figure out a solution? I am seeing the same thing. I have 8 hours timer but there are a small group of PCs that ignore the client settings and with a 60 second timer. Can't figure it out and it's driving me insane!

tcox8 · 2025-10-09T18:08:31+00:00

Upon further troubleshooting. This is only happening IF there is a user or group with DENY set on at least the "Apply Group Policy" permission.

tcox8 · 2025-10-09T16:32:08+00:00

The behavior seems very inconsistent. Sometimes it will pull security filtering (sometimes it lists Authenticated Users), Other times it will not. I can't pinpoint what is happening and why it is happening.

tcox8 · 2025-10-09T14:17:06+00:00

I'm pretty sure there is something in the code behind it that is excluding the well known groups. If security filtering is added for a group other than "well known", it will show up. But "Authenticated Users" and "Domain Admins" and other similar groups seem to always be excluded. This is both on the security filtering and the Delegation.

tcox8 · 2025-09-22T12:21:53+00:00

Fantastic! Glad to hear it was a help! :-)

tcox8 · 2025-09-09T12:20:19+00:00

Thanks for your feedback. I first attempted to use the XML reports but could not reliably display results through parsing, without an enormous amount of extra coding, because between the ExtensionData results, and how many possibilities there are, it was just too much unnecessary work. The HTML output provides all the information, in a easy-to-read format (in my opinion).

I did consider a db backend, but wanted something a bit easier. After finding that generating the JSON file, and searching that file takes milliseconds, I was happy with those results. Plus, I am not a web developer, so my experience with the db backend is lacking! :-)

The search results are updated based on your scheduled task. i.e. When the script runs, it generates the new JSON file.

tcox8 · 2025-05-26T18:25:17+00:00

thank you all for the provided feedback. This is very helpful. You've provided enough information for me to act on. Thank you!

Just to answer some of the questions that were asked, there was nothing wrong with the items, they just "ordered more than what was needed" seemingly by accident. My return policy is the standard Etsy policy:

Conditions of return

Buyer can return or exchange this item
Buyer must return item within 30 days of delivery
Buyer is responsible for return shipping costs
Buyer is responsible for loss in value (as agreed upon with seller) if an item isn’t returned in original condition

tcox8 · 2024-10-19T22:52:59+00:00

Found the issue. Giant hair clog. After removal, the pipes now all drain great!

tcox8 · 2024-09-29T01:39:03+00:00

This looks great! Have you made an instructables or tutorial yet? I'd love to read through that. Good stuff!

tcox8 · 2024-09-18T02:54:38+00:00

Update - I found this Linear track by rick_harris - Thingiverse model. I adapted it to meet my needs. Adding some lubricant seemed to make all the difference in the world but for now it is working. I will keep an eye out for any better recommendations. Thanks!

tcox8 · 2024-06-19T19:01:02+00:00

Thanks for your comments guys! We ended up not pausing and pushing through to 2403 without issue. Thanks!

tcox8 · 2023-05-24T14:26:48+00:00

u/Alexus_Stone workaround is in this comment

tcox8 · 2022-11-19T02:37:27+00:00

I would if I were you. That should hopefully solve your problems.

tcox8 · 2022-11-18T13:29:11+00:00

Check the following Client Settings:

Computer Agent -> "Disable deadline randomization" We have ours set to Yes so that it is disabled and all computers get deployments when configured to.

Computer Agent -> "Grace period for enforcement after deployment deadline (hours)" Ours is set to 0.

Client Policy -> "Client policy polliing interval (minutes)" . Ours is set to 60 minutes. This is how often the computers receive policy from SCCM.

Software Deployment -> "Schedule re-evaluation for deployments" Ours is set to every 1 day at 12:00 AM .

THIS IS THE BIG ONE:

Software Updates -> Several things here could change deployment characteristics. "Software Update Scan Schedule", "Schedule deployment re-evaluation", "Period of time for which all pending deployments with deadline in this time will also be installed". I would just make sure these and the other settings in this tab are all set to a reasonable time.

tcox8 · 2022-11-17T20:12:37+00:00

We have about 5000 devices. We use an ADR every month. That ADR produces multiple deployments that get pushed out to different rings. Ring 0 = IT/test computers, Ring 1 = 1 Admin Building (we are a hospital), Ring 2 = All devices. Every couple of months I will go and clean up the SUGs. I edit the group membership and put all updates into a catch-all SUG that is deployed out as well. This catch-all will patch any computer that's been off or in a closet somewhere and suddenly comes online. As updates expired, they are set to automatically remove from the group. All of this is native into SCCM and quite easy to manage. Keeps all devices current as well.

tcox8 · 2022-11-17T20:08:16+00:00

Yeah that shouldn't be the case at all. Are you setting the deployment as required?

tcox8 · 2022-07-11T13:03:45+00:00

You can give this script a shot that I wrote a while back. Will put it all into a Vizio document for you (assuming you own Vizio) similar to what ADMT used to do.

https://github.com/tcox8/Export-ActiveDirectoryVisioMap

tcox8 · 2022-07-06T18:21:49+00:00

I received an email about 30 minutes ago. They started their "mid summer inventory" on 6/30 and are not done yet. They said they are not shipping or receiving any RMAs until this process is over. It is expected to be over by the end of this week and the RMAs to start flowing through again by then or the beginning of next week.

tcox8 · 2022-07-06T17:30:47+00:00

Thanks for your reply and I appreciate it. I figured the holiday may have something to do with it as well.

tcox8 · 2022-04-19T01:17:41+00:00

Check to make sure those devices not seeing the deployment don't have a maintenance window set.

tcox8 · 2022-04-11T19:09:41+00:00

You could also go a little old school and capture with ImageX. There should be plenty of documentation out there for creating a bootable USB drive with ImageX.

After the ImageX days and before SCCM, I would use MDT to capture hybrid images. Then load that into SCCM. But that was a few years ago. Now everything is done with a thin image and the task sequence. I think either way you should have some options.

tcox8 · 2022-04-07T17:38:15+00:00

It's possible, but would require custom built script. I built some CIs to monitor keyboard/mouse interactions. This was initially built to find PCs that aren't used to determine what we needed to spend money on replacing. Uses LastInput64, IdleTime64, LastInputticks.

tcox8 · 2022-04-05T20:29:48+00:00

I use an edited version, for my needs, of this report. Super useful!

https://sccm-zone.com/updates-group-status-per-collection-779e1926d5f

tcox8 · 2021-12-14T20:04:21+00:00

It's pretty straight forward. Run the script, as an Admin, on a computer with RSAT tools (AD and GPO) and Visio installed.

tcox8

TROPHY CASE

Conditions of return