Details on the meeting:

We're proud to let you know that MISCUG is hosting our next meeting on February 27th at the Microsoft Technology Center in Southfield Michigan! Come meet our Gold sponsor 1E.com If you're just learning ConfigMgr or already have had success, this will be a great event to join! We are running an afternoon session for this event, just trying different formats to see what works best for members. We will be starting @ 11:00AM (food provided) and running through 4pm.

MISCUG will be hosting the event, at the Microsoft Southfield Office:

1000 Town Center - 19th Floor

Suite 1930

Southfield Michigan 48075 

Session and Topics Covered:

• Analyze and summarize status messages in ConfigMgr!
• Patch Tuesday...a Group therapy session on Software Updates!
• Stump the ConfigMgr experts. Bring your questions!
• Say hello to our Gold Sponsor -- 1E.com 

Catering will be provided!

Twitter:  www.twitter.com/miscug

Website: www.miscug.org - sign up for the news letter!

Link to Sessions: https://miscug-feb2015.eventday.com/sessions

Sign up here for the February Meeting: https://miscug-feb2015.eventday.com/

Cheers,

Mike-

Here are the things I wanted to capture in my dashboard:

• Software Update Deployment Compliance
• System Center Endpoint Definition Compliance
• Client Health
• Top 5 Threats Detected
• Overall Definition Status
• Count of OS Type

If a ConfigMgr administrator needed to, they could view each of those items, in difference places, in the ConfigMgr console. However, it becomes interesting if this data is needed by someone who doesn't have access to the console. With SSRS, and using the SMSProv.log we can easily build a simple dashboard! That dashboard could then be used with a subscription in SSRS and delivered on a schedule, etc.

When a node in the console is viewed, the underlying SQL that is running will be exposed in the SMSProv.log. For example, let's look at our Software Update Groups node in the console and view the SMSProv.log:

Here are the  SQL queries grabbed from the SMSProv.log and used for my datasets in SSRS:

Dataset1:

select  all
SMS_AuthorizationList.ApplicabilityCondition,SMS_AuthorizationList.AssociatedAutoRuleID,SMS_AuthorizationList.CI_ID,

SMS_AuthorizationList.CI_UniqueID,SMS_AuthorizationList.CIType_ID,SMS_AuthorizationList.CIVersion,SMS_AuthorizationList.ContainsExpiredUpdates,

SMS_AuthorizationList.ContainsSupersededUpdates,SMS_AuthorizationList.CreatedBy,SMS_AuthorizationList.DateCreated,SMS_AuthorizationList.DateLastModified,

SMS_AuthorizationList.EffectiveDate,SMS_AuthorizationList.EULAAccepted,SMS_AuthorizationList.EULAExists,SMS_AuthorizationList.EULASignoffDate,SMS_AuthorizationList.EULASignoffUser,

SMS_AuthorizationList.IsUserCI,SMS_AuthorizationList.InUse,SMS_AuthorizationList.IsBroken,SMS_AuthorizationList.IsBundle,SMS_AuthorizationList.IsChild,SMS_AuthorizationList.IsDeployed,

SMS_AuthorizationList.IsEnabled,SMS_AuthorizationList.IsExpired,SMS_AuthorizationList.IsHidden,SMS_AuthorizationList.IsLatest,SMS_AuthorizationList.IsProvisioned,SMS_AuthorizationList.IsQuarantined,

SMS_AuthorizationList.IsSuperseded,SMS_AuthorizationList.IsUserDefined,SMS_AuthorizationList.LastModifiedBy,SMS_AuthorizationList.LastStatusTime,SMS_AuthorizationList.Description,

SMS_AuthorizationList.DisplayName,SMS_AuthorizationList.CIInformativeURL,SMS_AuthorizationList.LocaleID,SMS_AuthorizationList.ModelID,SMS_AuthorizationList.ModelName,

SMS_AuthorizationList.NumberOfCollectionsDeployed,SMS_AuthorizationList.NumCompliant,SMS_AuthorizationList.NumNonCompliant ,

SMS_AuthorizationList.NumTotal,SMS_AuthorizationList.NumUnknown ,SMS_AuthorizationList.PercentCompliant,SMS_AuthorizationList.PermittedUses,

SMS_AuthorizationList.PlatformType,SMS_AuthorizationList.SDMPackageVersion,SMS_AuthorizationList.SedoObjectVersion,

SMS_AuthorizationList.SourceSite from fn_ListAuthListCIs(1033) AS SMS_AuthorizationList  where SMS_AuthorizationList.CI_ID = 16829449

Dataset2:

select  all SMS_CH_SummaryCurrent.ClientsActive,SMS_CH_SummaryCurrent.ClientsHealthUnknown,SMS_CH_SummaryCurrent.ClientsHealthy,

SMS_CH_SummaryCurrent.ClientsHealthyActive,SMS_CH_SummaryCurrent.ClientsHealthyInactive,SMS_CH_SummaryCurrent.ClientsInactive,SMS_CH_SummaryCurrent.ClientsRemediationSuccess,

SMS_CH_SummaryCurrent.ClientsRemediationTotal,SMS_CH_SummaryCurrent.ClientsTotal,SMS_CH_SummaryCurrent.ClientsUnhealthy,SMS_CH_SummaryCurrent.ClientsUnhealthyActive,

SMS_CH_SummaryCurrent.ClientsUnhealthyInactive,SMS_CH_SummaryCurrent.CollectionID from v_CH_ClientSummaryCurrent AS SMS_CH_SummaryCurrent  where SMS_CH_SummaryCurrent.CollectionID = N'SMSDM003'

Dataset3:

select  top 5 SMS_TopThreatsDetected.CollectionID,SMS_TopThreatsDetected.MemberCount,SMS_TopThreatsDetected.Rank,SMS_TopThreatsDetected.ThreatCategoryID,SMS_TopThreatsDetected.ThreatID,

SMS_TopThreatsDetected.ThreatName,SMS_TopThreatsDetected.TotalMemberCount from vSMS_TopThreatsDetected AS SMS_TopThreatsDetected  where SMS_TopThreatsDetected.CollectionID = N'SMS00001' order by SMS_TopThreatsDetected.Rank

Dataset4:

select  all __ointProtectionHealthStatus0.ApplyPolicyFailedCount,__ointProtectionHealthStatus0.ApplyPolicySucceededCount,__ointProtectionHealthStatus0.CollectionID,__ointProtectionHealthStatus0.InstallFailedCount,__ointProtectionHealthStatus0.InstallRebootPendingCount,

__ointProtectionHealthStatus0.NoSignatureCount,__ointProtectionHealthStatus0.OverallNotClientCount,__ointProtectionHealthStatus0.OverallStatusAtRiskCount,__ointProtectionHealthStatus0.OverallStatusInactiveCount,__ointProtectionHealthStatus0.OverallStatusNotSupportedCount,

__ointProtectionHealthStatus0.OverallStatusNotYetInstalledCount,__ointProtectionHealthStatus0.OverallStatusProtectedCount,__ointProtectionHealthStatus0.OlderThan7DaysCount,__ointProtectionHealthStatus0.UpTo1DayOldCount,__ointProtectionHealthStatus0.UpTo3DaysOldCount,

__ointProtectionHealthStatus0.UpTo7DaysOldCount,__ointProtectionHealthStatus0.TimeLastUpdated,__ointProtectionHealthStatus0.TotalMemberCount,__ointProtectionHealthStatus0.TotalOperationalIssueCount,__ointProtectionHealthStatus0.UnhealthyCount from vSMS_EndpointProtectionHealthStatus AS __ointProtectionHealthStatus0  where __ointProtectionHealthStatus0.CollectionID = N'SMS00001'

Dataset5:

select  all
SMS_AuthorizationList.ApplicabilityCondition,SMS_AuthorizationList.AssociatedAutoRuleID,SMS_AuthorizationList.CI_ID,SMS_AuthorizationList.CI_UniqueID,SMS_AuthorizationList.CIType_ID,SMS_AuthorizationList.CIVersion,

SMS_AuthorizationList.ContainsExpiredUpdates,SMS_AuthorizationList.ContainsSupersededUpdates,SMS_AuthorizationList.CreatedBy,SMS_AuthorizationList.DateCreated,SMS_AuthorizationList.DateLastModified,

SMS_AuthorizationList.EffectiveDate,SMS_AuthorizationList.EULAAccepted,SMS_AuthorizationList.EULAExists,SMS_AuthorizationList.EULASignoffDate,SMS_AuthorizationList.EULASignoffUser,

SMS_AuthorizationList.IsUserCI,SMS_AuthorizationList.InUse,SMS_AuthorizationList.IsBroken,SMS_AuthorizationList.IsBundle,SMS_AuthorizationList.IsChild,SMS_AuthorizationList.IsDeployed,

SMS_AuthorizationList.IsEnabled,SMS_AuthorizationList.IsExpired,SMS_AuthorizationList.IsHidden,SMS_AuthorizationList.IsLatest,SMS_AuthorizationList.IsProvisioned,SMS_AuthorizationList.IsQuarantined,

SMS_AuthorizationList.IsSuperseded,SMS_AuthorizationList.IsUserDefined,SMS_AuthorizationList.LastModifiedBy,SMS_AuthorizationList.LastStatusTime,SMS_AuthorizationList.Description,

SMS_AuthorizationList.DisplayName,SMS_AuthorizationList.CIInformativeURL,SMS_AuthorizationList.LocaleID,SMS_AuthorizationList.ModelID,SMS_AuthorizationList.ModelName,SMS_AuthorizationList.NumberOfCollectionsDeployed,

SMS_AuthorizationList.NumCompliant,SMS_AuthorizationList.NumNonCompliant ,SMS_AuthorizationList.NumTotal,SMS_AuthorizationList.NumUnknown ,SMS_AuthorizationList.PercentCompliant,SMS_AuthorizationList.PermittedUses,

SMS_AuthorizationList.PlatformType,SMS_AuthorizationList.SDMPackageVersion,SMS_AuthorizationList.SedoObjectVersion,SMS_AuthorizationList.SourceSite from fn_ListAuthListCIs(1033) AS SMS_AuthorizationList 

where SMS_AuthorizationList.CI_ID = 16829448

Dataset6:

SELECT Caption0 as 'Operating System', COUNT(*) AS 'Total'
FROM v_GS_OPERATING_SYSTEM OS
GROUP BY Caption0
ORDER BY Caption0

(Dataset1 and Dataset5 will need the CI_ID to be modified if used in another environment, Dataset6 is a simple custom query. The data source for your environment will have to be defined.)

After getting a little creative inside SSRS I came up with a color scheme that looked similar to the Core Tech Dashboard and here is what the finished result looks like:

I've included the RDL for download below.

UPDATE: Some of the above queries are cutoff. But you can find the complete query in the RDL, under the properties of each dataset:

Disclaimer: The information on this site is provided "AS IS" with no warranties, confers no rights, and is not supported by the authors or Microsoft Corporation. Use of included script samples are subject to the terms specified
in the Terms of Use.

ConfigMgr Dashboard - Quick Example.zip

"The Servicing Extension provides the following capabilities:

• Notifies you of Configuration Manager updates as they become available, with the ability to filter updates according to which major product release they apply to
• Provides version details on the sites in your environment, including the last major Configuration Manager version installed and the most recently installed Cumulative Update
• Provides a list of Configuration Manager client versions that may be present in your environment, and makes it easy to create queries to locate these clients
• Provides a built-in RSS reader to display recent blog postings from the System Center Configuration Manager Team Blog and The Configuration Manager Support Team Blog, with the ability to follow other RSS feeds"

Here is what things look like in the console after the Servicing Extensions are installed:

Site Servicing Node:

Releases:

Site Versions:

Client Targeting:

Blogs:

User Guide:

https://technet.microsoft.com/en-us/library/dn877970.aspx

Grab them here:

https://www.microsoft.com/en-us/download/details.aspx?id=45033

Enjoy!

Disclaimer: The information on this site is provided "AS IS" with no warranties, confers no rights, and is not supported by the authors or Microsoft Corporation. Use of included script samples are subject to the terms specified
in the Terms of Use.

mms.mnscug.org/

Check it out:

In distmgr.log the customer was seeing a few entries related to files and trust - here is a sanitized error:

• Error in verifying the trust of file '\\SERVER.DOMAIN.COM\SMS_DP$\sms\Tools\ExtractContent.exe'. SMS_DISTRIBUTION_MANAGER 

• Error in verifying the trust of file '\\SERVER.DOMAIN.COM\SMS_DP$\sms\bin\smsdpusage.exe'. SMS_DISTRIBUTION_MANAGER 

  After these errors appeared, the console would display an error “failed to update binaries”. What gives?

  During our troubleshooting, the customer was able to disable their Anti-Virus solution as a test.  Once AV was disabled....content started converting and the DP reassignment completed successfully!  It turns out, there were some missing AV exclusions. If they aren’t setup properly, there could be unexpected behavior where ConfigMgr and your AV solution might not play nice together...

  Here is a great Wiki list of Anti-Virus exclusions that might be defined for Windows Server and a few other products:

  https://social.technet.microsoft.com/wiki/contents/articles/953.microsoft-anti-virus-exclusion-list.aspx

  Whoa! That's a lot of files, folders, paths, etc. that have to be excluded!?  You might be asking yourself: Is there is an easy way to create these exclusions?  With System Center Endpoint Protection, it’s very easy to create Antimalware policies, by simply importing them. A lot of the heavy lifting has  already been done! 

  Just navigate in the CM12 console under Assets and Compliance>Endpoint Protection > Antimalware Policies, right click and select import:

  

  After selecting import, the console will present you a list of canned xml files available to import:

  

  Here is what the policy looks like after it is imported:

  

  Here is another view of the console after importing the Endpoint Protection Configuration Manager 2012 policy:

  

  Don't forget to set those exclusions so that ConfigMgr 2012 R2 and your AV solution will play nice together!

   

  Disclaimer: The information on this site is provided "AS IS" with no warranties, confers no rights, and is not supported by the authors or Microsoft Corporation. Use of included script samples are subject to the terms specified
  in the Terms of Use.

PowerShell to the rescue!

We can simply use the SMS_BoundaryGroup Class in WMI, like so:

$BGID = (get-wmiobject -class sms_boundarygroup -Namespace root\sms\site_C12 -Filter "SiteSystemCount = '0'").GroupID

This will grab all of the boundary groups in WMI, that have a site system count of 0.

Then we can use the Remove-CMBoundaryGroup cmdlet within a function, to remove the

boundarygroup(s):  

Function RemoveBoundaryGroups {

  Foreach ($BGID in $BGID)

  {

    Remove-CMBoundaryGroup -ID "$BGID" -Force

    Write-Host Removing Boundary Group with ID number: $BGID

  }

Here is a visual of my console, that shows I have two boundary groups with site systems defined:

Here is what things look like in WMI for my test lab, that shows I have 72 Boundary Groups:

The final results when the script is ran. As expected, 70 Boundary Groups were removed:

Remove-CMBoundaryGroup 

https://technet.microsoft.com/en-us/library/jj822002(v=sc.20).aspx

I've attached a sample script that will need to be edited to fit your environment.

Disclaimer: The information on this site is provided "AS IS" with no warranties, confers no rights, and is not supported by the authors or Microsoft Corporation. Use of included script samples are subject to the terms specified
in the Terms of Use.

RemoveBoundaryGroup.zip

I thought this would be a great way to give back to the community and help me remember things I'm learning and have done in the past with ConfigMgr. I'm really stoked and hope to have some blog post for the world to see shortly...

Stay tuned,

Mike D-