Target an advertisement base on software version in SCCM

Let's say we want to advertise an update to Adobe Reader only to clients with outdated versions (anything older than 10.0.1).

1. Create a new collection.
2. Edit the membership rules.
3. Click on Edit Query Statement.
4. At the bottom press "Show Query Language".
5. Paste the following:
   select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName like "Adobe Reader %" and SMS_G_System_ADD_REMOVE_PROGRAMS.Version != "10.0.1"
6. Make edits to match the DisplayName and Version according to the results you want.

You're good to go.

Namaste.

Read More

Unable to run reports in ConfigMgr?

You may get the following error message when trying to generate reports:

"The page you are requesting cannot be served because of the extension configuration. If the page is a script, add a handler. If the file should be downloaded, add a MIME map."

To solve that, add the ASP Role Service to IIS in addition to ASP.net.

Namaste.

Read More

ConfigMgr Firewall exceptions for Client deployment.

To enable ConfigMgr client deployment, create the following GPO (or update if you already have one):

Computer Configuration > Policies > Administrative Templates > Network > Network Connections > Windows Firewall > Domain Profile

Windows Firewall: Allow inbound file and printer sharing exception: Enabled

Allow unsolicited incoming messages from these IP addresses: SCCM IP Address

Windows Firewall: Allow inbound remote administration exception Enabled

Allow unsolicited incoming messages from these IP addresses: SCCM IP Address

Namaste.

Read More

Missing IIS sites in SCCM 2007 SP2 R3?

After installing SCCM I noticed that IIS was not populated with the different websites needed to run ConfigMgr properly.

I took me hours to figure out until I found the ConfigMgr Toolkit. Run the MP Troubleshooter, it will solve the issues.

Of course MS could fix that easily but that must be too much to ask for.

Namaste.

Read More

[UPDATED] Adobe Reader 9/X Clean Deployment

What I wrote about Adobe Reader MSI patching has a major flaw: you cannot under any circumstances update Adobe Reader after installing it with the modified MSI. I had to find another way...

Good news, it's a lot easier now.

• First of all obtain the latest Adobe Reader Installer from this page: http://get.adobe.com/reader/
• Extract the contents of the downloaded archive using the following command: InstallerName.exe -nos_ne which will extract the contents to: %userprofile%\AppData\Local\Adobe\Reader 9.0\Setup Files\READER9 for Reader 9 and C:\ProgramData\Adobe\Setup\... for Reader X.
• Optional for X (since Adobe seems to have caught up): download updates from this page, then add them to the default install by editing the setup.ini file with the following line in the [Product] section:
  PATCH=AdbeRdrUpd932_all_incr.msp;AdbeRdrUpd933_all_incr.msp;AdbeRdrUpd934_all_incr.msp
  This should allow you to install Adobe Reader in its most up to date version without too much headache.
  
• Download the Adobe Customization Wizard for 9 or Adobe Customization Wizard for X and set the settings you like, make sure an AcroRead.mst file is created next to the MSI. That will enable you to run setup.exe without switches in a completely unattended mode.

Namaste.

Read More