|
Those of you who didn't like SCCM have you looked at System Center Essentials? We're rolling out SCE2010 to 225 clients and 45 servers shortly it doesn't support Zero Touch Installations like SCCM but it rolls most of SCCM, SCOM and SCVMM into one interface. The only caveat I have is that we have an existing SCVMM 2008 R2 infrastructure and the SCVMM and SCE administration consoles can't exist on the same machine [or i'm retarded and can't seem to make them work]
|
# ¿ Mar 11, 2011 22:16 |
|
|
# ¿ Apr 26, 2024 15:47 |
|
quackquackquack posted:I found SCE was missing a lot of the software deployment options I would want when I looked (SCE2007, iirc). I could see that, it's pretty basic. Deploy .msi or .exe, add switches, record success/fail/notneeded, uninstall, record same.
|
# ¿ Mar 12, 2011 00:12 |
|
lol internet. posted:How is this different from SCCM lol? Doesn't do version tracking? I was under the impression you could version track in full blown SCCM, might be wrong though. Doesn't allow for different steps (forget what SCCM calls them) during configuration, it's just install/uninstall. Also doesn't deploy the OS in any form.
|
# ¿ Mar 12, 2011 20:58 |
|
Anyone want to tell me why my USMT xml is being retarded? It doesn't copy the Default User profile, but still copies user2. What am I missing? code:
|
# ¿ Apr 7, 2011 20:01 |
|
Spudman posted:My first instinct would be using an IP-helper setting in the router to forward the broadcasts, but this is a half-baked idea and probably is not at all the solution. (Edit: might search for an RRAS / DHCP Relay solution instead.) As for the WDS/DHCP Error. When you load into WinPE it reinits the network stack and forces it to get another DHCP address. We had this issue on Dell Optiplex 745/755 machines with the onboard Intel Gigabit NIC. We ended up having to enable spanning tree port fast on all of our switch ports in order to fix it. I'm not a networking guy so I'm not entirely sure what that did but it did resolve the issue for us.
|
# ¿ May 9, 2011 15:21 |
|
Telex posted:So I've got a System Center Essentials server up and running (I think, mostly it looks like I need to just get people to install their updates and that's my only glaring set of errors).. By default SCE doesn't collect that information that I'm aware of. I also couldn't find a way to get it in the console on SCE2010. A quick search turns up this that may function? http://social.technet.microsoft.com/Forums/en-US/systemcenter/thread/4d1a9603-be45-412e-ba2d-8c057cdca820/
|
# ¿ May 12, 2011 20:50 |
|
Intoxication posted:Just a quick question, ist it possible to run a mix of Win7 Enterprise and Win7 Professional clients within a domain? Quite possible, we do it. A majority of our machines were purchased with Win7 pro from dell, the remainder are on our new SA/Enterprise agreement
|
# ¿ May 16, 2011 12:10 |
|
Cpt.Wacky posted:I have some Windows licensing questions. The licensing thread was archived, so I hope this is a good place for them. Why would you buy double licenses? Purchase Pro OEM licenses on your machines (it's cheaper this way) buy one VLK license for ease of installation and have at it. If you need SA then you're required to buy something that's 'upgradeable'.
|
# ¿ Jun 30, 2011 16:59 |
|
Honey Im Homme posted:Oh and gently caress SCE 2010 its a piece of poo poo! so so so true
|
# ¿ Sep 16, 2011 19:33 |
|
Misogynist posted:We avoid this problem by not running NTFS file servers. There's too many good storage platforms out there to waste time trying to roll our own and have them subject to these sorts of problems. What the hell does that have to do with NTFS? NTFS supports volume size of 256TB using a GPT disk. As long as your server is windows 2003 SP1 and above this hasn't been an issue in years.
|
# ¿ Dec 21, 2011 06:20 |
|
Misogynist posted:NTFS lacks end-to-end integrity checking and other availability features that are implemented in higher-end filesystems like ZFS, GPFS2, OneFS and (ugh) btrfs that are built to scale. As a result, it's very poor at detecting corruption while the filesystem is online. That means that when the poo poo hits the fan, NTFS has to take the disk offline to run chkdsk. Have you ever tried to run chkdsk on a disk that's more than a few terabytes in size? It typically takes weeks where most proper filesystems take literally zero time because it's something they just constantly do in the background. TMYK. I've not run anything over 15TB in production. I've run CHKDSK on 3-5TB volumes and it does take a while.
|
# ¿ Dec 21, 2011 23:13 |
|
FISHMANPET posted:So you run a NAS with a better FS underneath? As long as the underlying host supports SMB I don't see why it would be an issue. I'm going to do some testing in our lab and see if it's worth the migration.
|
# ¿ Dec 22, 2011 21:17 |
|
Wicaeed posted:Isn't that what File Screens are for in the first place? Prevent users from saving .wav .mp3 .flac .mp4 files, voila! Sadly some people have legit uses for those files :\
|
# ¿ Dec 27, 2011 17:09 |
|
Honey Im Homme posted:Anyone using SCDPM here, any major pitfalls? My boss seems to have a major hardon for it and I just know I'm going to be told to set it up. Have used DPM since 2006, currently 2007 in production and rolling out 2010 in the next month. I have no major issues with it it runs and does its thing just fine. You backing up to disk only or to tape as well?
|
# ¿ Mar 1, 2012 21:50 |
|
IT Guy posted:What makes a service start with the Local System Account and not a Domain Admin account? Does your domain admin have Log on as a service rights to the machine you're trying to start the service on? You can find this out by running secpol.msc > Local Policies > User Rights Assignment > Log on as a service. By default this access is not given to domain admins
|
# ¿ Mar 9, 2012 01:42 |
|
Spermy Smurf posted:Yes, you would need 30 device CALs for 2008, and 30 more for 2003 access. Total of 60. You cant use 30 2008 CALs for 2008 and 2003. Once downgrade rights have been applied to those 30 CALs for 2003 server access, you cant un-downgrade them when you feel like accessing 2008 servers. There is a reason microsoft offers certification exams in licensing their products. It's loving complicated
|
# ¿ Jun 4, 2012 08:42 |
|
InfiniteDonkey posted:Does anybody have DirectAccess implemented and in use? If so do you use Oracle? I'm getting ready to set it up, are you using Forefront UAG with it to do NAT64/DNS64? Did you have an existing PKI or did you stand one up just for DirectAccess? I'd love to pick your brain on how you like it.
|
# ¿ Jun 19, 2012 21:41 |
|
InfiniteDonkey posted:Yay Feedback! Thanks for that I'm forced to stand up a new PKI for this and it needs to happen 'right now' so I've spent the better part of a week brushing up on PKI to see if I can roll that out in the next month or so and then move on to UAG/DirectAccess.
|
# ¿ Jun 20, 2012 23:03 |
|
Gravitom posted:Does anyone have a good method of checking 150+ servers for what accounts are logged in a services on them? http://techibee.com/tag/query-service-logon-account-using-powershell You can run that or modify it as needed. Should do what you want I think.
|
# ¿ Jun 27, 2012 18:43 |
|
If my memory serves, you do have to extend the schema to add a newer DC to the domain, it doesn't change the functional level of the forest or the domain, but it does change the schema version. If by some chance, like me, you have some rear end old program that checks the schema version and refuses to work once you've changed the schema version it's a bit of a pain to roll back. Most of the time extending the schema doesn't break anything. All you're doing is adding more containers to place poo poo in that the Domain Controllers can use. For example extending the Schema to 2008 enables a container for certificates and therefore, you can have certificate roaming. This changes the schema version from v31 (2003 R2) to V44 (2008 RTM). It also adds some other containers but you get the general idea. Doing this on my domain, breaks a custom piece of CMS software that was written when we were running Windows 2000 and it apparently checks to verify that the schema version isn't above 39, once you increment it to 40 it stops functioning. Also since you have the permissions to install a DC anyway. Check the schema version yourself. If it's above v44 than install 2008 and tell your admin to jump off a bridge. (http://support.microsoft.com/kb/556086) Nebulis01 fucked around with this message at 16:49 on Jul 17, 2012 |
# ¿ Jul 17, 2012 16:35 |
|
incoherent posted:Has anyone effectively used an Managed Service Account at all? Every time I read about them it seems like they are silver bullet for creating service accounts, but nothing Microsoft makes uses them. SQL Server 2012 added support for the Managed Service Account.
|
# ¿ Sep 5, 2012 19:26 |
|
Swink posted:Is it only supposed to service intranets, fileshares and emails, or is it designed to support our main database applications as well? It's designed to let you do anything you would normally do on the corporate network. We're testing it with a database based application and it works just dandy
|
# ¿ Nov 5, 2012 21:23 |
|
Frozen-Solid posted:Is that right? Will that get everything? Or am I better off using the GUI to schedule a weekly full bacup, and using wbadmin.exe to just backup the F:\ and E:\ drives? That should get everything on C:, E:, F:, P: as well as critical system volumes and the system state using the 'Full' volume shadow copy which will reset the backup flag of the files Nebulis01 fucked around with this message at 18:11 on Nov 21, 2012 |
# ¿ Nov 21, 2012 18:07 |
|
Frozen-Solid posted:Which should be everything to restore if we lose the whole thing, right? (those are all the drives, minus the CDROM) That will provide you with a file that will let you do a bare metal recovery using Windows Server Backup. I have no idea on the backup flag + bacula though
|
# ¿ Nov 21, 2012 19:23 |
|
Frozen-Solid posted:I'm setting up a bare metal install of Windows Server 2008 R2 for the first time, and am having an oddity with the fiber channel. If I setup a redundant path Windows is seeing each path as individual drives, rather than seeing two paths to the same drive. Is there something special I have to do in Windows to make it see the redundancy, or did I somehow setup my fiber wrong? You may need to install the DSM from your hardware provider for MPIO to work properly. Also verify the MPIO feature in windows is enabled. Hopefully I understood your question correctly. http://technet.microsoft.com/en-us/library/ee619734%28v=ws.10%29.aspx
|
# ¿ Feb 11, 2013 17:28 |
|
Mierdaan posted:I can't find it anymore, but I thought I read that SCCM 2012 for small environments doesn't require full-blown SQL. Am I crazy, or can you run a standalone site for ~250 clients off of express somehow? If you own the license to install SCCM it should come with the rights for whatever SQL you need as long as you just use that SQL installation for SCCM e;fb
|
# ¿ May 21, 2013 16:23 |
|
Bob Morales posted:What's the recommended book for Windows server? Something that covers AD and GPO and bonus points for getting into WSUS and other stuff. I've been away for two years and am not really sure what all has improved or changed since Server 2003. If you want the book on AD and GPO. I would highly recommend Jeremy Moskowitz's group policy book (http://www.amazon.com/Group-Policy-Fundamentals-Security-Managed/dp/1118289404/ref=la_B001ILM9BS_1_1?ie=UTF8&qid=1371829668&sr=1-1) As for server, which version will you be working with? 2008R2 is significantly different than 2012. My go to for Server 2012 has been the unleashed book which has been a great resource (http://www.amazon.com/Windows-Server-2012-Unleashed-Morimoto/dp/0672336227/ref=sr_1_1?s=books&ie=UTF8&qid=1371829778)
|
# ¿ Jun 21, 2013 16:50 |
|
EAT THE EGGS RICOLA posted:Why the heck is Group Policy + IE 10 so ridiculously stupid to get going? Because everything useful is moved to the IEAK and you set preferences now instead.
|
# ¿ Aug 15, 2013 17:20 |
|
EAT THE EGGS RICOLA posted:Wait, there must be a way that doesn't suck to manage proxy config settings and stuff. That's ridiculous. Let me know if you find one We had to custom deploy IE10 using the IEAK to get our settings out there because it refused to respect the old GPO's we had in place for IE7/8/9
|
# ¿ Aug 16, 2013 20:55 |
|
Sacred Cow posted:Has anyone used Dell KASE System Deployment (K2000)? You'd really want to stand up SCCM to do Zero Touch well, if you need the rest of the configuration tools provided it's probably worth looking in to.
|
# ¿ Nov 7, 2013 20:16 |
|
Karthe posted:I can't find an anti-virus thread anywhere so I guess this is as good a place as any to ask: What are you guys using for AV? The place I'm at now has been using Kaspersky for forever, but after three years of dealing with its bullshit I'm finally in a position to evaluate alternatives. I know SCCM/Forefront is pretty popular, but I think it's overkill for our small company in terms of complexity and cost. I've used ESET's NOD32 at a number of companies and really like it quite a bit. Another admin friend of mind recommended Vipre by Threat Track Security (http://www.threattracksecurity.com/) and we're giving it a shot for a year, it replaced Kaspersky for us and we've been very happy so far. They also include 3rd party patch management (Java, iTunes, Firefox, Flash, etc) in their business premium license.
|
# ¿ Jan 14, 2014 16:55 |
|
zapateria posted:Lenovo has "SCCM packages" of drivers for most of their models, which is a nice thought. Except they have a bunch of "gotcha"s where you have to install one driver before the other etc. And the touchpad driver made OSD crash. Dell does the same thing http://en.community.dell.com/techcenter/enterprise-client/w/wiki/2065.dell-driver-cab-files-for-enterprise-client-os-deployment.aspx
|
# ¿ Feb 3, 2014 22:31 |
|
Zero VGS posted:Is there a good site for understanding Microsoft licensing. This poo poo is a horrible nightmare. I'd call Microsoft directly at that quantity you're a fit for a Select agreement if Windows is the only thing you're going to purchase. If you have a trusted VAR for MS you could call them as well. Since every license Microsoft sells via Open/Select/Enterprise agreements is an upgrade they will be Windows Enterprise Upgrades. Also since you mentioned wanting to use Bitlocker (and I assume MBAM to manage it?) the product you're after is microsft p/n CX2-00024 (Windows Enterprise Upgrade w/ MDOP and SA) Sacred Cow posted:Its weird that they stopped requiring an SA to even get a license for Enterprise. Its not much better then Pro without all the SA benefits. I'm sure it's pretty much for Anywhere Access and Bitlocker in Win7. Nebulis01 fucked around with this message at 15:05 on Oct 21, 2014 |
# ¿ Oct 21, 2014 15:01 |
|
Zero VGS posted:Some Googling suggests that Select has been phased out for Software Assurance. Also, kill me, I've been researching this poo poo for 12 hours straight. Call and talk with them, we just renewed and signed a new one in September. Unless they've changed drastically in 30 days (possible, but unlikely) you should be able to sign an agreement.
|
# ¿ Oct 22, 2014 03:01 |
|
Gyshall posted:Does Office 2013 need to "phone home" to some server that might be blocked on our LAN? We just had about 10 copies of Office Home & Business 2013 stop working (like uninstall themselves) and they're all tied to the same MS account for activation. If they're retail/oem or other form a click to run installations I believe they function very similar to this - http://technet.microsoft.com/en-us/library/gg982959%28v=office.14%29.aspx Clients will need the ability to reach the office.com servers to verify activation every 30 days.
|
# ¿ Dec 19, 2014 06:46 |
|
Wicaeed posted:Per server to use SCCM? Holy gently caress, I'm used to Microsoft gouging but At list which is a base Open Agreement with 2 years of Software Assurance - $1,323 for Standard (up to 2 physical processors and 2 Managed OSEs) $3,607 for Datacenter (2 physical processors - unlimited cores, unlimited OSEs) but that includes the *entire* system center stack in the new licensing model.
|
# ¿ Jan 7, 2015 16:21 |
|
I'm pretty sure (according to a quick googling) that Samba supports DFS or similar. So I'd even take it further and go \\domain.here\namespacehere\stuff - that way down the road you can replace the server(s) underneath the shares and nobody is the wiser, no shortcuts to update or anything. You can keep the letter maps if you need to.
|
# ¿ Jan 20, 2015 20:41 |
|
mayodreams posted:Just because you can doesn't mean you should. I've seen that cause a lot of trust issues with the domain controllers. This sounds like you have a multitude of replication issues then. Tab8715 posted:If I rename a pc in AD, will this rename the local pc too and leave everything else as-is? You can do it from powershell on anything relatively current and it saves time over the GUI's multiple screen process. code:
|
# ¿ Feb 25, 2015 23:26 |
|
Zero VGS posted:I'm still in MS Licensing Hell...: Nebulis01 fucked around with this message at 19:31 on Mar 22, 2015 |
# ¿ Mar 22, 2015 19:23 |
|
|
# ¿ Apr 26, 2024 15:47 |
|
Sacred Cow posted:Has anyone here worked with System Center 2012 R2 Data Protection Manager? I'm about to start a new job and the manager wants me to take on the task of fixing their old System Center guy's "sloppy" implementation. Are there any good resources out there for learning it? I've already downloaded the evaluation version to add to my lab at home. I've used it all the way back to 2006 as orange sky says it's very strait forward. If you've never used the product and don't like/want to fiddle with anything to try it out. Steve Buchanan's 2012 SP1 book is a good generalist overview of the product, there aren't a ton of UI changes in R2 just some stuff under the hood. http://www.amazon.com/Microsoft-System-Center-Protection-Manager/dp/1849686300
|
# ¿ Mar 31, 2015 00:13 |