I'm using SUM 5.3.5, and in the HTML report I see Mezz#1, Mezz#2, Mezz#3 in the header. Further down in the "BLADE SERVERS (Quick Glance)" section I see values for the type of mezzanine card, when installed. Where is it hiding the firmware VERSION of the mezzanine card?
Thanks
I'm trying to figure out why "netsh dump" produces different scripts on 2003 versus 2008. In output below, I've used "netsh interface ip dump" to keep the length of this post reasonable. I've searched the full dump, and the DNS settings have not moved outside of the "interface ip" context.
Specifially why the 2008 dump does not include the DNS settings?
Also seems strange that the 2008 dump does not include a "gateway" setting on the "set address" command
Does the "nexthop" setting in the 2008 output replace the "gateway" setting of 2003?
It's easy enough to write your own script, if you want the same settings everywhere But I would like to use this to backup the config on servers with unusual NIC configs in different DMZ's where I'm not sure I completely trust some of the app owners who are administrators to not some day make their own NIC changes. So I'm not just looking for one config script that I create manually and run on hundreds of targets. It seems like NETSH DUMP should be able to produce a backup of the current NIC configuration on a specific server, and thats what I'm looking for.
I've searched the kb, and see there are numerous articles for issues with NETSH
The following two had hotfixes that I applied hoping there was some hidden overlap with my issue.
However I still have the problem after they have been applied
http://support.microsoft.com/kb/979101
http://support.microsoft.com/kb/2472264
Thanks
# ----------------------------------
# IPv4 Configuration from static 2008 R2 SP1
# ----------------------------------
pushd interface ipv4
reset
set global icmpredirects=enabled
add route prefix=0.0.0.0/0 interface="Local Area Connection" nexthop=10.9.8.7 publish=Yes
add address name="Local Area Connection" address=10.9.8.6 mask=255.255.255.0
popd
# End of IPv4 configuration
# ----------------------------------
# Interface IP Configuration from static 2003 Sp2
# ----------------------------------
pushd interface ip
# Interface IP Configuration for "Local Area Connection"
set address name="Local Area Connection" source=static addr=10.9.8.7 mask=255.255.255.0
set address name="Local Area Connection" gateway=10.9.8.6 gwmetric=0
set dns name="Local Area Connection" source=static addr=10.9.8.1 register=PRIMARY
add dns name="Local Area Connection" addr=10.9.8.2 index=2
popd
# End of interface IP configuration
Having a problem with the WSUS part of SCCM 2012 not working on agents in our DMZ. These agents have PKI certificates from internal PKI, and are appearing in the console as active inventory.
Because many parts of the SCCM roles must be configured for HTTP or HTTPS and not both at the same time:
1 - these agents are on a boundary that assign them to a MP that is configured for SSL. Agent control panel shows correct MP.
2 - these agents are also in a collection with different client settings to assign them an 8531 appcat.
SDCSCMP23 is the HTTP WSUS/Appcat/MP for internal agents
SDCSCMP25 is the SSL WSUS/Appcat/MP with PKI certs for DMZ agents
The problem is that SCCM is configuring these agents to use the HTTP parts of the Infrastructure for WSUS, and not the HTTPS parts. Per MS Doc, Client Settings are supposed to auto assign an HTTPS appcat before an HTTP one, but this was not happening, so I made my own client settings to assign the HTTPS appcat.
Simply modifying the firewall config to permit 443, 8531 to this other server is NOT an option, because those servers are listening on 80, 8530 (for internal HTTP agents) not 443, 8531. We have a requirement to use only 443, 8531 for the DMZ agents. Have verified that 443, 8531 are open through the firewall to SDCSCMP25 from the agents. This is SCCM 2012 SP1. We are NOT assigning WSUS servers through GPO.
How do I get SCCM to assign the correct WSUS servers to these agents?
WUAHandler.log
Enabling WUA Managed server policy to use server: HTTP://SDCSCMP23.ACME.COM:8530
m_spSearchJobUpdateSearcher->EndSearch(m_spSearchJob, &spSearchResult), HRESULT=80072ee2 (e:\nts_sccm_release\sms\client\updatesmgmt\wuahandler\cwuahandler.cpp,3064) WUAHandler 4/11/2013 6:09:59 PM 1480 (0x05C8)
OnSearchComplete - Failed to end search job. Error = 0x80072ee2. WUAHandler 4/11/2013 6:09:59 PM 1480 (0x05C8)
Scan failed with error = 0x80072ee2. WUAHandler 4/11/2013 6:09:59 PM 1480 (0x05C8)
WindowsUpdate.log
2013-04-11 18:09:05:376 828 15fc Agent *********** Agent: Refreshing global settings cache ***********
2013-04-11 18:09:05:376 828 15fc Agent * WSUS server: HTTP://SDCSCMP23.ACME.COM:8530 (Changed)
2013-04-11 18:09:05:376 828 15fc Agent * WSUS status server: HTTP://SDCSCMP23.ACME.COM:8530 (Changed)
2013-04-11 18:09:35:641 828 1668 PT +++++++++++ PT: Synchronizing server updates +++++++++++
2013-04-11 18:09:35:641 828 1668 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = HTTP://SDCSCMP23.ACME.COM:8530/ClientWebService/client.asmx
2013-04-11 18:09:59:235 828 1668 Misc WARNING: Send failed with hr = 80072ee2.
2013-04-11 18:09:59:235 828 1668 Misc WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2013-04-11 18:09:59:235 828 1668 PT + Last proxy send request failed with hr = 0x80072EE2, HTTP status code = 0
2013-04-11 18:09:59:235 828 1668 PT + Caller provided credentials = No
2013-04-11 18:09:59:235 828 1668 PT + Impersonate flags = 0
2013-04-11 18:09:59:235 828 1668 PT + Possible authorization schemes used =
2013-04-11 18:09:59:235 828 1668 PT WARNING: GetConfig failure, error = 0x80072EE2, soap client error = 5, soap error code = 0, HTTP status code = 200
2013-04-11 18:09:59:235 828 1668 PT WARNING: PTError: 0x80072ee2
2013-04-11 18:09:59:235 828 1668 PT WARNING: GetConfig_WithRecovery failed: 0x80072ee2
2013-04-11 18:09:59:235 828 1668 PT WARNING: RefreshConfig failed: 0x80072ee2
2013-04-11 18:09:59:235 828 1668 PT WARNING: RefreshPTState failed: 0x80072ee2
2013-04-11 18:09:59:235 828 1668 PT WARNING: Sync of Updates: 0x80072ee2
2013-04-11 18:09:59:235 828 1668 PT WARNING: SyncServerUpdatesInternal failed: 0x80072ee2
2013-04-11 18:09:59:235 828 1668 Agent * WARNING: Failed to synchronize, error = 0x80072EE2
2013-04-11 18:09:59:235 828 1668 Agent * WARNING: Exit code = 0x80072EE2
Trying to install an agent through a firewall. Have verified 443 & 8531 are open via telnet. CCMsetup.log shows the setup using HTTP, not HTTPS. Thought it was supposed to try using both HTTP and HTTPS. I can find the switch to specify the HTTPS port number, but cannot find a switch to make it use HTTPS over HTTP. We are new to SCCM2012, not an existing SCCM2007 shop. Have edited hosts file so that it can resolve the name of the mgmt point server on the inside of the firewall (cfgman23.acme.com).
Launch setup
ccmsetup.exe smssitecode=XXX dnssuffix=dmz.acme.com /mp:cfgman23.acme.com CCMLOGLEVEL=3
Hilights from the log, particularly the last line written. CCMsetup prcocess never exits. Keeps retrying, failing.
Log would not paste as is. Too many <> chars? Replaced with {}
{![LOG[MSI properties: SMSSITECODE="XXX" DNSSUFFIX="dmz.acme.com" CCMLOGLEVEL="3" CCMHTTPPORT="80" CCMHTTPSPORT="443" CCMHTTPSSTATE="224" CCMFIRSTCERT="1"]LOG]!}{time="12:59:49.446+300" date="08-01-2012" component="ccmsetup" context="" type="1" thread="3872" file="ccmsetup.cpp:3738"}
{![LOG[Sending message body '{ContentLocationRequest SchemaVersion="1.00"}
{ClientPackage/}
{ClientLocationInfo LocationType="SMSPACKAGE" DistributeOnDemand="0" UseProtected="0" AllowCaching="0" BranchDPFlags="0" AllowHTTP="1" AllowSMB="0" AllowMulticast="0" UseInternetDP="0"}
{ADSite Name="SITE1"/}
{Forest Name="dmz.acme.com"/}
{Domain Name="dmz.acme.com"/}
{IPAddresses}
{IPAddress SubnetAddress="10.11.12.0" Address="10.11.12.66"/}
{/IPAddresses}
{/ClientLocationInfo}
{/ContentLocationRequest}
']LOG]!}{time="12:59:49.587+300" date="08-01-2012" component="ccmsetup" context="" type="0" thread="1096" file="util.cpp:2205"}
{![LOG[Sending message header '{Msg SchemaVersion="1.1"}{ID}{644FC761-CC17-4F41-8BA1-43C211AA497F}{/ID}{SourceHost}DUMMY{/SourceHost}{TargetAddress}mp:[http]MP_LocationManager{/TargetAddress}{ReplyTo}direct:DUMMY:LS_ReplyLocations{/ReplyTo}{Priority}3{/Priority}{Timeout}600{/Timeout}{ReqVersion}5931{/ReqVersion}{TargetHost}cfgman23.acme.com{/TargetHost}{TargetEndpoint}MP_LocationManager{/TargetEndpoint}{ReplyMode}Sync{/ReplyMode}{Protocol}http{/Protocol}{SentTime}2012-08-01T17:59:49Z{/SentTime}{Body Type="ByteRange" Offset="0" Length="1054"/}{Hooks}{Hook3 Name="zlib-compress"/}{/Hooks}{Payload Type="inline"/}{/Msg}']LOG]!}{time="12:59:49.587+300" date="08-01-2012" component="ccmsetup" context="" type="0" thread="1096" file="util.cpp:2286"}
{![LOG[CCM_POST 'HTTP://cfgman23.acme.com/ccm_system/request']LOG]!}{time="12:59:49.587+300" date="08-01-2012" component="ccmsetup" context="" type="1" thread="1096" file="httphelper.cpp:802"}
I have a GPP for file association aka "open with". It works as expected on Server2008/Win7 but does nothing on Server2003/WinXP that has both the GPP Client KB943729 and GPP hotfix KB982051 installed. I have tested it on one target of each type.
The GPO also contains the GPP debug logging for "folder options", however on the older clients, the log path is created, but no log file is written.
The GPO is linked to the User OU for the folder options, and to the computer OU for the debug options. GPResult shows the GPO is being applied to the computer & the user. Looking for any ideas on why this works for the newer OS, but not on older OS's where GPP support has been installed. Thanks.
Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.System/Group Policy/Logging and tracing
Policy Setting Comment
Configure Folders preference logging and tracing Enabled
Event logging Warnings and Errors
Tracing Off
User trace %COMMONAPPDATA%\GroupPolicy\Preference\Trace\User.log
Computer trace %COMMONAPPDATA%\GroupPolicy\Preference\Trace\Computer.log
Planning trace %COMMONAPPDATA%\GroupPolicy\Preference\Trace\Planning.log
Maximum size of trace file (KB) 1024
User Configuration (Enabled)
Preferences
Control Panel Settings
Folder Options
Open With (Extension: pl, Program: N:\Perl\5.10.1\bin\perl.exe %1 %*)
pl (Order: 1)
General
Action Update
PropertiesFile Extension pl
Associated Program N:\Perl\5.10.1\bin\perl.exe %1 %*
Set as default Enabled
I am trying to research a problem and would like to use Logparser to remotely query one of the newer 2008 log types against many remote servers. I want to query the Setup log, not application, system, security. Logparser seems ignorant of these new log types, and I have been unable to find a way to do this without certain hacks.
I've see some posts about other hacks to make this possible. Because I need to query around 100 servers the hacks I've found are less than ideal. Wevtutil to convert the whole file before query is inefficient and not practical to do this remotely against many machines. Adding regkeys to HKLM\SYSTEM\CurrentControlSet\services\eventlog is tedious because each time you want to query a different one of these new log types, you need to new key.
Using the full path to the EVTX file does treats it as text, and doesn't produce useful output. Specifying the input as EVT gives a file in use error. Query is being made from a 2008 R2 machine, where another post said Logparser would support EVTX files. Is it possible to use Logparser remotely against these newer logs without these hacks?
PS C:\> .\LogParser.exe "SELECT * FROM \\NOBODY\admin$\System32\winevt\Logs\setup.evtx"
WARNING: Input format not specified - using TEXTLINE input format.
LogFilename Index Text
-------------------------------------------------- ----- -------
\\NOBODY\admin$\System32\winevt\Logs\Setup.evtx 1 ElfFile
\\NOBODY\admin$\System32\winevt\Logs\Setup.evtx 2 ♦A à
\\NOBODY\admin$\System32\winevt\Logs\Setup.evtx 3 ╫
Press a key...
Task aborted by user.
PS F:\apps\Logparser> .\LogParser.exe /i:evt "SELECT * FROM \\NOBODY\admin$\System32\winevt\Logs\setup.evtx"
Task aborted.
Cannot open <from-entity>: Error opening event log "\\?\UNC\SDCBOOP22\admin$\
System32\winevt\Logs\Setup.evtx": The process cannot access the file
because it is being used by another process.
PS C:\> .\LogParser.exe /i:evt "SELECT * FROM \\NOBODY\Setup"
Error: Error retrieving files: Error searching for files in folder \\NOBODY\Setup: The network na
me cannot be found.
PS C:\> .\LogParser.exe "SELECT * FROM \\NOBODY\Setup"
WARNING: Input format not specified - using TEXTLINE input format.
Task aborted.
Cannot open <from-entity>: Error opening files: Error searching for files in
folder \\NOBODY\Setup: The network name cannot be found.