Search This Blog

Thursday, December 17, 2015

Multiple PowerShell commands at the same command line

In some situations I want to be able to run 2 or more PowerShell statements on the same line, without using a script (PS1 file).

Semicolon can be used to chain Commands in PowerShell.

powershell -command get-date;get-host

image

This could for example come in handy in a Task Sequence as shown her:

PowerShell -command "&{Import-Module ServerManager;Add-WindowsFeature -Name AS-Ent-Services,AS-Tcp-Port-Sharing,AS-NET-Framework}"

image

Thursday, December 10, 2015

No more security updates for .NET Framework 4, 4.5 and 4.5.1

Just a quick warning so that we all remember to take action on this challenge.

Starting January 12, 2016 Microsoft will no longer provide security updates or hotfixes for .NET 4, 4.5, and 4.5.1 framework.

Support Ending for the .NET Framework 4, 4.5 and 4.5.1

This was previously announced in 2014:

Moving to the .NET Framework 4.5.2

image

Microsoft .NET Framework 4.6.1 (Offline Installer) for Windows 7 SP1, Windows 8, Windows 8.1, Windows 10, Windows Server 2008 R2 SP1, Windows Server 2012 and Windows Server 2012 R2

Monday, December 7, 2015

System Center 2012 R2 Configuration Manager Toolkit

Microsoft has released an updated version of System Center 2012 R2 Configuration Manager Toolkit.

The Microsoft System Center 2012 R2 Configuration Manager Toolkit contains fifteen downloadable tools to help you manage and troubleshoot Microsoft System Center 2012 R2 Configuration Manager.

System Center 2012 R2 Configuration Manager Toolkit

image

The new version addresses the following issues reported with tools since the release of Service Pack 2 for System Center 2012 Configuration Manager, and Service Pack 1 for System Center 2012 R2 Configuration Manager.

  • The Role-based Administration Modeling and Auditing Tool (RBAViewer.exe) terminates unexpectedly on startup after installing Service Pack 1 for System Center 2012 Configuration Manager R2. RBAViewer has stopped working
    image
  • Collection Evaluation Viewer still lists collections on the incremental tab even after incremental updates are disabled for a given collection.
  • The Power Viewer Tool (PowerVwr.exe) terminates unexpectedly when run on Windows 10 systems.
  • The revised toolkit now creates shortcuts under Microsoft System Center->Configuration Manager in the Start Menu, as instead of Microsoft System Center 2012
    image

From the download link:

The Microsoft System Center 2012 R2 Configuration Manager Toolkit contains fifteen downloadable tools to help you manage and troubleshoot Microsoft System Center 2012 R2 Configuration Manager. The following list provides specific information about each tool in the toolkit.

Note: Items with an * are new in the R2 Toolkit and require Microsoft System Center 2012 R2 Configuration Manager for full functionality.

Server Based Tools

* DP Job Manager - A tool that helps troubleshoot and manage ongoing content distribution jobs to Configuration Manager distribution points.

* Collection Evaluation Viewer - A tool that assists in troubleshooting collection evaluation related issues by viewing collection evaluation details.

* Content Library Explorer - A tool that assists in troubleshooting issues with and viewing the contents of the content library.

Security Configuration Wizard Template for Microsoft System Center 2012 R2 Configuration Manager - The Security Configuration Wizard (SCW) is an attack-surface reduction tool for the Microsoft Windows Server 2008 R2 operating system. Security Configuration Wizard determines the minimum functionality required for a server's role or roles, and disables functionality that is not required.

Content Library Transfer – A tool that transfers content from one disk drive to another.

Content Ownership Tool – A tool that changes ownership of orphaned packages (packages without an owner site server).

Role-based Administration Modeling and Auditing Tool – This tool helps administrators to model and audit RBA configurations.

Run Metering Summarization Tool - The purpose of this tool is to run the metering summarization task to analyze raw metering data

Client Based Tools

Client Spy - A tool that helps you troubleshoot issues related to software distribution, inventory, and software metering on System Center 2012 Configuration Manager clients.

Configuration Manager Trace Log Viewer – A tool used to view log files created by Configuration Manager components and agents.

Deployment Monitoring Tool - The Deployment Monitoring Tool is a graphical user interface designed help troubleshoot Applications, Updates, and Baseline deployments on System Center 2012 Configuration Manager clients.

Policy Spy - A policy viewer that helps you review and troubleshoot the policy system on System Center 2012 Configuration Manager clients.

Power Viewer Tool – A tool to view the status of power management feature on System Center 2012 Configuration Manager clients.

Send Schedule Tool - A tool used to trigger a schedule on a client or trigger the evaluation of a specified DCM Baseline. You can trigger a schedule either locally or remotely.

Wakeup Spy – A tool that provides a view of the power state of Configuration Manager client computers and which operate as managers or manages.

Supported Operating System
Windows Phone 7, Windows Phone 8, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2
These releases are compatible with System Center 2012 Configuration Manager and later.

image

Friday, December 4, 2015

Windows 10 1511 feature upgrade and WSUS

Microsoft has released an update for WSUS on Windows 2012 and 2012 R2 server. This update is required to support deployment of the Windows 10 1511 upgrade by WSUS or the upcoming Configuration Manager (vNext).

Update to enable WSUS support for Windows 10 feature upgrades

Before installing this hotfix on Windows Server 2012 R2, verify that you already has this hotfix installed https://support.microsoft.com/en-us/kb/2919355

More information can be found here:

Important update for WSUS 4.0 (KB 3095113)

image

After installing the update your WSUS console (Windows Server Update Services) will report a new version number 6.3.9600.18057

image

image

Thursday, December 3, 2015

Licensing grace period

When playing around with RDS in your LAB, you might run in to the problem that you have exceeded your grace period.

The RDS server will show the message: Remote desktop licensing mode is not configured. Remote desktop Services will stop working because this computer is past its licensing grace period. On the RD connection Broker server, use Server Manager to specify the Remote Desktop licensing mode and the license server.

image

If you try to connect from a client you will se this message: The remote session was disconnected because there are no Remote Desktop License Servers available to provide a license. Please contact the server administrator.

image

Given that this is just for testing and not production, you might not be able to specify a valid license server.

Open registry editor and go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\RCM\GracePeriod right click on the key and select Permissions

image

Grant your self or the administrators group Full Control as shown here:

image

Now delete the key (GracePeriod)

image

Confirm that you want to delete the key:

image

If you don't grant your self full control you will get this error while deleting:

image

After a server restart you will get a new full grace period: Remote Desktop Services will stop working in 119 days. On the RD connection Broker server, use Server Manager to specify the Remote Desktop licensing mode and the license server.

image

Friday, November 20, 2015

Unable to get Insider builds, Get started greyed out

 

When working with Windows 10 you might find your self in a situation where you are unable to get insider Builds because the button Get Started is grayed out another sign of this problem is that you will see the text Some settings are managed by your organization in the top of the window.

image

One reason for this problem could be that you are worried about your privacy settings and because of that changed your privacy settings. Open Settings - Privacy and then Feedback & diagnostics, if Send your device data to Microsoft is set to Basic, this is your problem.

image

Change the setting to at least Enhanced

 image

And go back to check if your now are able to click Get started

image

This might be your next problem Windows 10 Domain Admin problems

Wednesday, November 18, 2015

Administrative Templates (.admx) for Windows 10

Microsoft has now released ADMX files from Windows 10 Update 1511 as a downloadable file.

Administrative Templates (.admx) for Windows 10

image

image

When I compare the downloaded ADMX files with my previous downloaded files, the following ADMX files are deleted

These ADMX files are changed:

  • avsvalidationgp.admx
  • biometrics.admx
  • controlpaneldisplay.admx
  • credentialproviders.admx
  • deviceguard.admx
  • errorreporting.admx
  • explorer.admx
  • lanmanserver.admx
  • lanmanworkstation.admx
  • microsoftedge.admx
  • passport.admx
  • searchocr.admx
  • settingsync.admx
  • startmenu.admx
  • terminalserver.admx
  • volumeencryption.admx
  • w32time.admx
  • windows.admx
  • windowsupdate.admx
  • wlansvc.admx

And these ADMX files are brand new:

  • AppPrivacy.admx
  • CloudContent.admx
  • FeedbackNotifications.admx
  • WindowsStore.admx
  • WinMaps.admx

You still need to copy the files to your central store:

http://larslohmann.blogspot.dk/2013/02/create-central-store-for-gpo.html

If you previously has copied ADMX files for Windows 8.1 you might see this error:

Namespace 'Microsoft.Policies.WindowsStore' is already defined as the target namespace for another file in the store.

image

At the moment, just delete the old files winstoreui.adml and winstoreui.admx they are replaced by WindowsStore.admx and WindowsStore.adml

Thursday, November 12, 2015

Has SCCM 2012 R2 SP1 CU2 been installed?

Cumulative Update 2 for System Center Configuration Manager 2012 R2 SP1 has been released https://support.microsoft.com/en-us/kb/3100144

image

So once again it’s time to take a closer look at how to determine the installation status of this cumulative update, this time for SP1 CU2.

Remember that you will only see the prompt about Automatic Client Update if you have automatic client upgrade feature is enabled.

image

image

Read more about Automatic Client Update her Automatically updating the Configuration Manager client

After upgrading to System Center Configuration Manager 2012 R2 SP1 CU2, you will be able to identify the update as shown here.

First let us take a look at the console, after the update the console reports version 5.0.8239.1301

image

The console reported version 5.0.8239.1203 before updating which is 2012 R2 SP1 CU1.

image

The Console update is also listed in Control Panel as an Installed Update.

image

The site will still report version 5.00.8239.1000 after the update.

image

In order to check if the update has been applied we must look in the registry.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Setup\CULevel

CULevel reports 2 after CU2 has been applied.

image

Before updating CULevel reported 1 because Cumulative Update 1 was installed.

image

This update is also visible under Installed Updates in Control Panel.

image

The client will report 5.00.8239.1301 after it has been updated.

image

With these components updated:

image

Before updating the client reported 5.00.8239.1203 for a 2012 R2 SP1 CU1 client

image

CU2 includes the same update for SCEP as CU1.

See Has SCCM 2012 R2 SP1 CU1 been installed?

All SCEP client should never the less be at version 4.8.204.0 from may 2015.

http://larslohmann.blogspot.dk/2015/07/system-center-endpoint-protection.html

https://support.microsoft.com/en-us/kb/3049560

image

Finally be aware of this statement from the support page:

After this cumulative update is installed on site servers, any operating system boot image should be updated!

 

 

Monday, November 2, 2015

Windows 10 Domain Admin problems

You might discover that you are not able to fully administrate your domain joined Windows 10 computer using a domain administrator account.

Just as an example when you click on Change product key nothing happens:

image

Clicking Get Started (Get Insider Builds) again nothing happens:

image

In a local policy (gpedit.msc) or in a GPO change Security Settings\Local Policies\Security Options\User Account Control: Admin Approval Mode for the Built-in Administrator account to Enabled

image

image

Restart the computer and try again, this time you will get a UAC prompt when trying to change product key:

image

And answering YES at the UAC prompt will give you the Enter a product key dialog:

image

Clicking Get Started (Get Insider Builds) will now prompt you for a Microsoft account:

image

Thursday, October 22, 2015

Install Software Updates fails in OSD

You might see this error when deploying Windows with SCCM 2012 R2 SP1, Task Sequence has failed with the error code (0x80004005)

image

When you look at the Installation Progress you will notice the the task sequence is installing updates and last status is Detecting Updates:

image

In smsts.log you will see that the step failed and that the Process completed with exit code 2147500037

image

One possible solution might be to take a closer look at your Software Update Deployment Packages, in this scenario one of the update packages was not available from any Distribution points.

image

After distributing the Deployment Package everything worked as expected.