SMS provider doesn't have permission to the package source path

When running a migration job (object migration) in ConfigMgr 2012 it's possible that the following errors are displayed in MIGMCTRL.LOG.

"SMS provider doesn't have read, write or delete permission to the package source path"
"Failed to get the image property from the source WIM file due to error 80070005"
"SMS_TaskSequencePackage.PackageID='' was skipped with: One of its dependency objects failed to migrate"

All errors has a specific reason: Permissions!

Just make sure that the Computeraccount holding the SMS Provider role has Local Administrator permissions on the ConfigMgr 2007/2012 server. After that errors are gone and the migration job will complete.

To change the Package Source locations use this tool:
Coretech Package Source Changer

How to remove an Instance on a SQL Server

Sometimes it's needed to remove an Instance on a SQL Server, because of database migration or SQL Server cleanup. When doing this in a production environment, this is a exciting action. This because of other production databases, which may be running in a different Instance. I've done this a few months ago, and it all went fine.

Just read the guides on Microsoft TechNet first before doing this:

-To uninstall an instance of SQL Server 2008 http://technet.microsoft.com/en-us/library/ms143412(v=sql.100).aspx

-To uninstall an instance of SQL Server 2008 R2 http://technet.microsoft.com/en-us/library/ms143412(v=sql.105).aspx

-To uninstall an instance of SQL Server 2012 http://technet.microsoft.com/en-us/library/ms143412(v=sql.110).aspx

Here are the steps which are needed to remove the Instance. Just make sure which one must be removed and there are no databases on it.

-Open Control Panel, Programs and Features
-Select "Micosoft SQL Server {version}"
-Choose "Uninstall/Change"
-Choose "Remove"
-Setup Support Rules > Next
-Remove SQL Server {version}
-Select Instance > Choose "SQL Instance"
-Select Features > Choose "Specific features" (not shared features)
-Removal Rules > Next
-Ready to Remove > Next
-Removal Progress
-Complete

After following this steps the selected Instance is removed. There's no reboot needed on the SQL Server, and other databases will still have connection. Just make sure reading the guides, and you are fine!

Remote configuration failed on WSUS Server

Last week I upgraded my ConfigMgr 2012 environment to SP1. All went fine, but after the upgrade Endpoint Protection wouldn't update anymore. Strange thing is my environment was already provided with KB2720211 and KB2734608, and was working okay before the SP1 upgrade. Looking in the logfiles the following error messages were seen in: "Remote configuration failed on WSUS Server".

WindowsUpdate.log

wsyncmgr.log

WCM.log (before)


Looking on MS TechNet I found the following post: Remote configuration failed on WSUS Server.

For me this did the trick:

1) Uninstall WSUS (without database, logfiles, updates)
2) Install WSUS again + KB2720211 + KB2734608 updates
3) Reboot the server (you never know)
4) Start "Synchronize Software Updates"


WCM.log (after)

After that WSUS synchronization is working again and Endpoint Protection is up-to-date on all servers now. Good thing to know when you update your environment to SP1 I think.

Update 8-1-2013: For it seems it's a known issue in SP1 when using specific WSUS ports. Just change the ports back to the ports configured earlier on your Software Update Point and you'll be fine!

Happy New Year !!

From today I'm back in business again. Doing Microsoft System Center will be great again in 2013. This because of the System Center 2012 release last year and Service Pack 1, which is generally available from tomorrow! Also Windows Intune will have a quick release, which ensures Mobile Device Management in ConfigMgr. You've already guessed it:
2013 will be a great Microsoft System Center year!

From this place I want everybody wish a healthy, happy and successful 2013.

May this new year all your dreams turn into reality and all your efforts into great achievements.

Happy New Year !!

Samsung ATIV S review

Last week I found a great review on Samsung ATIV S mobile phone. Besides of Nokia and HTC, Samsung is the third vendor with a Windows Phone 8 device. Because of the business kind of look and great specs this is the device I want. The device will be in January for sale in the Netherlands. In Europe the pricing will probably be 549 euro.

Samsung was the first manufacturer to officially announce a Windows Phone 8 device, but has since been suspiciously quiet about its plans. Plagued by delays and a missed launch period with HTC and Nokia, Samsung’s carrier deals, release dates, and exact pricing haven’t been forthcoming. Microsoft rarely mentions the company's devices in marketing materials, and it feels like Samsung's Windows Phone 8 efforts have been all but forgotten.

Source: Samsung Ativ S review

Searching on the web I found the specifications for Samsung ATIV S with Windows Phone 8. Here it is:

A Windows Phone 8 comparison between HTC, Nokia and Samsung phones can be found HERE also.

Delayed till 2013: The ATIV S could be delayed to begin January for Europe! The ATIV S uses the same display as the Galaxy S III. Because the Galaxy S III is extremely hot at the moment. Samsung could have decided to move back the ATIV S for public release because of production switch in build and materials.

Nokia Lumia 620 specifications

After unveiling two big Windows Phone 8 powered devices, Lumia 820 and Lumia 920, Nokia has announced a budget Windows Phone 8 device for the masses. Nokia unveiled Nokia Lumia 620 at Paris on December 5 with a price tag of $249 only. This made us all aware that like Windows Phone 7, Windows Phone 8 devices can also have budget models.

Lumia 620 is the third and most affordable Windows Phone 8 device by Nokia. With its price tag, it will be a highly competitive smartphone. Lets take look at the smartphone.

Nokia Lumia 620 press pictures (all colors):

• Nokia Lumia 620 - Color Combo
• Nokia Lumia 620 - Color Combo 2

Searching on the web I found the specifications for Nokia Lumia 620 with Windows Phone 8. Here it is:

Another search shows browser benchmarks (Sunspider and BrowserMark 2), where Lumia 620 beats the Galaxy S III:

In Europe the pricing will probably be 259 euro. The 620 will be released in January in Asia and the Middle East. Then comes the phone to Europe, but exactly when is not known. The Lumia 920 and 820 are in the Netherlands in January in sales.

Upgrade ConfigMgr 2012 to Service Pack 1

Last week on december 12, Service Pack 1 (SP1) was available on TechNet or MSDN subscriptions. Because my lab environment is running on SP1 Beta, I thought the whole installation must be done again. Good news is that the upgrade from SP1 Beta to SP1 RTM can be done without any issues at all. The only thing important is, it isn't supported in any way. But because it's my lab environment that doesn't count.
 
Let's have a look at the upgrade:
 

Choose "Upgrade this Configuration Manager site" to start installation

 

A new feature in SP1 is that more Server languages are available now

 

 During Prerequisite check a new warning message is shown on collections

 

And finally after a "few" minutes waiting the installation is done! :)

 

Very nice to have a lab environment with ConfigMgr 2012 SP1 now!!

 

Just start to download the bits and experience the new features and functionality yourself. More on the new stuff can be found HERE. Hope you like it as much as I do! More to come about SP1 later.



System Center 2012 SP1 available now!

Great news! System Center 2012 SP1 is available now! It can be download on Microsoft TechNet if you have a TechNet or MSDN subscription. Lucky me I have one because of my Microsoft Certified Trainer (MCT) status.

With Service Pack 1, Windows 8 and Windows Server 2012 support are available. Just connect to Microsoft TechNet and download the bits!

A New Year's Gift from Veeam!

Sponsor post


A New Year’s Gift from Veeam!

In December you may become the winner of the ULTIMATE NEW YEAR’s RESOLUTION from Veeam which includes a VEEAM DREAM LAB and more!

Enter for a free chance to win – and WIN BIG:

• TWO HP ProLiant ML 310e G8 Servers
• NETGEAR ReadyNAS storage system with 4 SSDs drives
• HP V1410-16G Ethernet switch
• TechNet Plus subscription for 1 year
• Online course, books and test from
• VMware Education Services or Microsoft Learning
• ...and a MICROSOFT SURFACE!

REGISTER TO WIN

*The winner will be selected on January 14.

Register just once and you’ll automatically be entered in every monthly drawing!

Updates and New Features in ConfigMgr 2012 SP1

Last month I was at System Center User Group (SCUG) NL day with Wally Mead. Wally Mead has been with Microsoft for more than 20 years, and working with Systems Management Server since SMS 1.0 was in development. The following Updates and New Features for ConfigMr 2012 SP1 were mentioned: 
 
Deployment of Windows 8:

• Core OS Deployment Scenarios (Windows 8/ 2012 support)
• Windows To Go support (create and build by ConfigMgr)
• Managing Windows 8 Apps (for both x86 and RT)
• Always-on Always connected (preserves battery life)
• Metered Connections support (for paid networks)
• Used Space BitLocker (saves time during OSD)
• Bitlocker pre-provisioning from WinPE mode (5 minutes versus 3 hours)

 
Management Capabilities of Windows RT and Windows Phone 8:

• Windows 8 Apps (easier and faster to deploy)
• Windows 8 Apps in the Windows Store (new type of software)
• Pull Software Distribution (MDM)
• Settings Management (with ConfigMgr policy)
• Compliance Monitoring (MDM)

 
Embedded Device Support in SP1:

• Better support for write filters
• Write filter orchestration for updates and OSD
• SCEP support for installation and updates
• Desired Configuration Management extensions
• OS deployment optimized for embedded devices

 
And many many more:

• User Data and Settings Management (User policy)
• Windows Intune management in ConfigMgr console (!)
• Distribution Point for Windows Azure (in the cloud)
• Database Replication Controls (make the hierarchy easier to control)
• Security and Compliance for Endpoint Protection
• Real-time Administrative Actions (force machine policy)
• Support for App-V 5.0, PowerShell, Non-Windows devices
• Support for SCEP on MAC, UNIX and Linux systems

 
Service Pack 1 isn't just an update on ConfigMgr. It will provide a lot of new functionality above of existing ConfigMgr 2012 features.
The General Availability release of System Center 2012 SP1 is scheduled for early January.

System Center 2012 SP1 release date

System Center 2012 Service Pack 1 has reached RTM, Microsoft announced recently. RTM refers to feature-complete products. The General Availability release of System Center 2012 SP1 is scheduled for early January. Because Q1 2013 was mentioned last months, this is way earlier then expected. 

Windows Intune is set for an "early 2013" update also. With Windows Intune, Mobile Device Management in ConfigMgr becomes available.

A few notes to make the upgrade path crystal clear: 

• General Availability is targeted for early January;
• Upgrade from SP1 Beta is only supported for TAP customers who installed RC;
• Non-TAP customers will only be able to upgrade from DPM 2012 RTM to DPM 2012 SP1 RTM;
• There is no upgrade path from BETA SP1 to RTM SP1, you must reinstall DPM 2012 RTM, then upgrade to SP1 RTM.

Availability of SP1 RTM for SA costumers is probably January 3, 2013. Great news we can download the bits within a few weeks from now!
 

Source: Redmond Channel Partner

Update 2-1-2013: System Center 2012 SP1 is now available for download from the Microsoft Volume Licensing site.

How to update ConfigMgr 2012 RTM to SP1 (Beta)

Next year (Q1 2013) System Center 2012 Service Pack 1 (SP1) becomes available. This Service Pack will be released for System Center 2012 and not just for ConfigMgr only. SP1 for ConfigMgr will bring a lot of new features and functionalities, which are described HERE.
 
To update a ConfigMgr 2012 RTM environment to SP1 (Beta) the following is needed: 

• Uninstall Windows Automated Installation Kit (Windows AIK)
• Download Windows Assessment and Deployment Kit (Windows ADK) for Windows 8 which is available HERE
• Install Windows ADK by adksetup.exe and choose Install (which download the files needed online first) or choose Download (which download all files for offline usage)
• The only features needed are Deployment Tools, Windows PE and USMT.
• Upgrade the SQL Server installation from SP1 CU4 to SP2 which is available HERE or SP1 CU6 which is available HERE

 
After that the prerequisite check should not display any errors anymore:

When both Deployment Tools and Windows PE must be installed on other Site servers too, it's because of multiple SMS Providers that are installed. Otherwise you will be fine and setup can be started immediately.

During installation boot images will be upgraded from WinPE 3.0 to 4.0 automatically. Just remember to update ALL Distribution points after the upgrade, because this will not be done automatically (!)

Remember: After the upgrade all ConfigMgr 2012 RTM clients must be updated to SP1 (Beta) too. Not that it won't work otherwise, but because new features and functionalities will not be functional then.
It can be done automatically with Site Hierarchy settings (Client Installation Settings).

SP1 for ConfigMgr will bring a lot of new features and functionalities!

Microsoft Management Summit 2013 Registration Open

Today I received the following message:

Microsoft Management Summit 2013 Registration Open

http://www.2013mms.com/

Why Attend MMS?
At the Microsoft Management Summit the brightest and most skilled IT professionals from around the world meet to increase their technical expertise. It's an intensive week of technical training, so get your geek on. You'll be first to test drive new products and solutions, accelerate your career, and you'll experience the power of community. Pretty sweet, huh?

About MMS
The Microsoft Management Summit (MMS) brings together the brightest IT professionals from around the world to increase their technical expertise through deep hands-on training, best-practice sharing, and interaction with innovators in desktop, device, and datacenter management, as well as cloud technologies.

When we say deep, we mean it – with session content delving into the 300 and 400 level. Only hard-core geeks will feel comfortable in this exclusive setting. With keynotes, sessions, hands-on labs, certification opportunities, and face-to-face access to Microsoft and industry experts, MMS provides a “can’t-miss” opportunity to be among the first to learn about new technologies.

Registration
Register now: http://www.2013mms.com/register
April 8-12 @ Mandala Bay, Las Vegas, Nevada

Hope to be there for the third time! For me it's the best event on Microsoft System Center & Client Device Management.

Book review: ConfigMgr Administration Cookbook

Recently I received a review request for the "Microsoft System Center 2012 Configuration Manager Administration Cookbook". For me a change to review a ConfigMgr 2012 book and acquire some new skills. This practical cookbook shows you how to administer ConfigMgr 2012 and understand how to solve particular problems/scenarios.

Packed with over 50 task-based and immediately reusable recipes, this book starts by showing you how to design a ConfigMgr Infrastructure. The book then dives into topics such as recommended SQL configuration for ConfigMgr, deploying Windows 7 with OS Deployment, deploying Applications and Software Updates, managing Compliance Settings, managing Sites and managing Inventory amongst others.

In addition to its cookbook style, which ensures the solutions are presented in a clear step-by-step manner, its explanations go into great detail, which makes it good learning material for everyone who has experience in ConfigMgr and wants to improve. The book is designed in such a way that each recipe is presented as a separate, standalone entity and reading of other, prior recipes is not required.

The authors are Brian Mason (a Systems Engineer at Wells Fargo where he manages over 350,000 resources with ConfigMgr) and Greg Ramsey (a Systems Engineer specializing in global systems management for Dell Services). A book page link can be found HERE.

Note: Personally I think it's a good book for administrators who are familiar with ConfigMgr, and want to improve their knowledge on known and also new functionalities. Therefore a lot of recipes are added, which can be used for practical purposes. That way both theory and practice are combined in this book, which is certainly an added value.

ConfigMgr 2012 Site Backup failure

In ConfigMgr 2012 Site Maintenance, the Backup Site Server can be enabled. That way a backup is created from your ConfigMgr Site Server. ConfigMgr provides a backup maintenance task that runs on a schedule and backs up the site database, specific registry keys, and specific folders and files. The Backup Site Server maintenance task does not include a backup for the content library or the package source files. When a site server fails, the information about the content library files is restored to the site database, but you must restore the content library and package source files on the site server.

During backup the SMS Writer service is used. This is a service that interacts with the Volume Shadow Copy Service (VSS) during the backup process. The SMS Writer service must be running for the Configuration Manager site back up to successfully complete. Just make sure that this service is running!

When creating a Maintenance plan in ConfigMgr there is a choice for Destination options. When selecting "Network path (UNC name) for site data and database" a UNC path is needed where both ConfigMgr data and SQL data is saved. Just create one folder, place a (hidden) share on it, and data will be saved. When selecting "Local drives on site server and SQL server" a local drive on both ConfigMgr and SQL server is needed for backup. Backup data for ConfigMgr will be saved on the local drive specified on the ConfigMgr server. Backup data for SQL will be saved on the local drive on the SQL server.

Microsoft recommends as a best practice, to keep multiple archives of the backup snapshot. You can create the AfterBackup.bat file to perform post-backup actions automatically after the backup maintenance task runs successfully. The AfterBackup.bat file is most frequently used to archive the backup snapshot to a secure location. However, you can also use the AfterBackup.bat file to copy files to your backup folder and start other supplemental backup tasks.

 

Sometimes there are ConfigMgr alerts created, that no Site Backup is possible. Error message: "Backup folder does not exist or backup service does not have permission to access the folder." Just make sure that NTFS and Share permissions are in place and the following workaround is used: Create a sub-folder under the existing Backup folder and configure the backup task accordingly to this folder. Note: This issue is schedule to be addressed in Service Pack 1 and is described HERE.

Additional information on Backup Site Server task can be found HERE. Hope it helps!

Windows 8 support in ConfigMgr 2007 SP2

For ConfigMgr 2007 their a lot of hotfixes available. Besides of having Service Pack 2 (SP2) and Release 3 (R3) installed, a lot of issues can be solved with installing hotfixes. These can be found on this website:
List of Public KB Articles and Hotfixes for Configuration Manager 2007 SP2

Last week a new hotfix was released for ConfigMgr 2007. This time Windows 8 support for client computers becames available. Very nice, because Windows 8 support wasn't planned for ConfigMgr 2007 first. Let's have a look at the features.
 
Additionally, this update adds Windows 8 and Windows Server 2012 to the supported platform list in the following features:

- Software distribution;
- Software update management;
- Desired Configuration Management (DCM).

This update also fixes the following issues:
 
- Discovery Data Manager (DDM) does not create Client Configuration Requests (CCRs) for Windows 8-based computers that are discovered by using the Active Directory System Discovery.
- When the system processes a new power profile, the SMS Agent Host service (Ccmexec.exe) or the WMI Provider Host service (Wmiprvse.exe) stops unexpectedly.
 
This means that the ConfigMgr client can now be installed on Windows 8 and Windows Server 2012 systems. On these systems applications and software updates can be deployed and DCM can be used. In ConfigMgr 2012 this isn't supported yet. Windows 8 and Windows Server 2012 support will be added in System Center 2012 SP1 (Q1 2013).

Very nice to have more possibilities in ConfigMgr 2007 again. 
Hotfix Request

ConfigMgr 2012 Service Pack 1 features

Next year (Q1 2013) System Center 2012 Service Pack 1 (SP1) becomes available. This Service Pack will be released for System Center 2012 and not just for ConfigMgr only. It containes updates for compatibility with Windows 8, Windows Server 2012 and other enhancements including support for Azure VM and capabilities for Hosted Service Providers. For ConfigMgr 2012 it will be a big step forwards, because of multiple new features and functionalities!

In this blogpost I will mention these:

– Support for Windows 8 (for both ConfigMgr/SCEP client installation and Operating System deployment);
– Support for Windows To Go (Full Windows 8 installation on a certified 32GB USB-stick);
– User data & profile configuration by means of folder redirection, offline files & roaming profiles;
– New deployment types for Windows 8 applications, including standalone applications and links to the Windows Store;
– Support for Windows Server 2012 (for both ConfigMgr client installation and Operating System deployment);
– Support for SQL Server 2012 (installation of ConfigMgr database);
– ConfigMgr client installation on MAC computers, Linux and UNIX servers;
– Possibility for Windows PowerShell cmdlets (to automate ConfigMgr tasks);
– Support for cloud services, including a new Distribution Point for Windows Azure;
– A more flexible hierarchy management for Central Administration Site (CAS) and Primary Site servers;

– Support for multiple Software update points (SUPs), with automatic  redundancy (same as Management points);
– Console Extensions integration in ConfigMgr console (downloading computer policy and initiating a malware scan to be performed as soon as possible);
– Support for virtual environments that allow multiple virtual applications (App-V packages) to share file system and registry information instead of running in an isolated space;
– Email alert subscriptions are now supported for all features, not just Endpoint Protection (useful for the Application Catalog);
– Multiple application types for Software Catalog usage and deployment, Mobile Device APP stores and App-V 5.0 (!) support;
– Support for App-V 5.0 packages (release: Q1 2013);
– Windows Intune integration (finally a Mobile Device Management solution for cloud device management);
– Support for Windows Embedded devices, because of Windows Embedded Device Manager (WEDM) integration.

As you can see a lot of new features and functionalities are added in ConfigMgr 2012 SP1. I'm very enthusiastic that this already great product (compared to previous versions), will be more advanced with every release. Stay tuned for more information early next year!

Files necessary to run the Office Customization Tool were not found

When starting Setup.exe /admin from Microsoft Office 2013 RTM, I got the message "Files necessary to run the Office Customization Tool were not found.  Run Setup from the installation point of a qualifying product." When doing the same in Microsoft Office 2010 the Office Customization Tool (OCT) is started. With OCT you can create a MSP (answer) file for silent installation.

Looking on the web I found the following solution for this HERE.

This occurs when the admin folder is missing from the installation point. For it seems Office 2013 Preview Administrative Template Files are needed to start the Office Customization Tool. Just download the tools (x86/x64 choice) and start it to create a admin and admx folder. The admin folder must be copied in the Office 2013 source afterwards. After that OCT is working as usual again. Strange thing that admin files are not included by default!?

The Office 2013 Preview Administrative Template files (ADMX/ADML) and Office Customization Tool can be download HERE.

How to install a multiple SMS Provider in ConfigMgr 2012

In ConfigMgr the SMS Provider is installed during installation. The SMS Provider is the interface between the ConfigMgr console and the Site database. In ConfigMgr 2007 there can be only one SMS Provider installed per ConfigMgr Site. In ConfigMgr 2012 however multiple installations of the SMS Provider are supported. Just remember: It cannot be installed on a clustered SQL server database server or on the same computer as the SMS Provider for another site.

For example: ConfigMgr 2012 is installed already and the SMS Provider is installed on your Primary Site server. Now you want to install another one on your SQL server, which isn't installed on a clustered SQL server database server. Here are the steps which must be followed:

1) Open the Start Menu on the ConfigMgr server and select Microsoft System Center 2012 > Configuration Manager > Configuration Manager Setup
2) Getting Started > Select "Perform site maintenance or reset this Site" and click Next
3) Site Maintenance > Select "Modify SMS Provider configuration" and click Next
4) Manage SMS Providers > Select "Add a new SMS provider" and "Enter the FQDN of the server where the SMS Provider is to be installed" and click Next
5) Configuration > After a few minutes the SMS Provider will be installed on another server

Good news that the SMS Provider can be installed multiple times now, and isn't a Single-point-of-failure anymore! With above steps multiple SMS Providers can be installed or uninstalled. Just choose to divide ConfigMgr roles also to have a High Available ConfigMgr environment.
Good luck with your installation!

System Center 2012 Endpoint Protection (part 3)

Last time I wrote a blogpost about System Center 2012 Endpoint Protection (SCEP) functionality. I mentioned the installation/configuration and deploying SCEP agents (Part 1), and deploying antimalware policies & definition updates (Part 2). This time the SCEP series continues with monitoring, dashboard views and reports. When antimalware policies and definition updates are in place, it's time to have a look at monitoring the SCEP agents. There are multiple functionalities for that.

Let's start with the SCEP dashboard first.

Beneath Monitoring, the "System Center 2012 Endpoint Protection Status" can be found. This is THE dashboard for viewing Security State (Client status, Malware remediation status, Top 5 malware by number of computers) and Operational State (Operational status of clients, Definition status on computers). It can be viewed for all collections where an anti-malware policy is deployed too. Because I deploy it to ALL servers and clients (most of time), I've selected the "All Desktop and Server Clients" collection here.

Nice thing is, it's completely dynamic. You can click on all Links and graphical stuff to go to the relevant system(s). After clicking a Link or graphical item, a specific SCEP collection is showed with systems and ALL (Deployment state, Policy name, Policy application state, Definition last version, Remediation status) Endpoint Protection information. From default collections there are buttons for SCEP available too. Both Endpoint Protection status and Malware details can be watched here. SCEP is integrated on multiple places in the console.

When looking at Reports, there are six SCEP reports available. Most usable ones are "Antimalware activity report" and Dashboard. Both have a nice graphical layout by default. When rightclick on a report it's possible to select "Create Subscription", which generates a report on a scheduled time. Reports can be delivered by Windows File Share and E-mail this way. You can define the Render format also, which can be: XML, CSV, TIFF, PDF, (M)HTML, RPL, Excel and Word files.

My personal conclusion:
Microsoft did a great job with SCEP integration in ConfigMgr 2012, with: automatic SCEP client deployment, multiple policies which can be merged, a very nice dynamic dashboard, automatic deployment rules for definition updates & beautiful reports which can be delivered multiple ways and saved in multiple formats! Therefore I recommend customers for using SCEP all the time. SCEP integration in ConfigMgr 2012 is the best antivirus solution there is!