Search This Blog

Sunday, January 29, 2017

Audit who made changes to WSUS configuration

If you need to find an admin, who made changes to WSUS configuration, then the first place to look is %programfiles%\Update Services\LogFiles\Change.log

You will see there an entry which user has made the change, but there will not be written specific configuration change made:
(I am using SCCM CMTrace tool to view the log)


How to fix "Scan failed with error = 0x8024401c" error on Windows 10 v1607 clients

If your Windows 10 v1607 machines are getting "Scan failed with error = 0x8024401c" error in WUAHandler.log when performing SCCM software updates scan then most likely you need to install KB3159706 on your WSUS server.

And don't forget to perform steps described in "Manual steps required to complete the installation of this update" section of the KB.

Friday, January 27, 2017

How to perform SCCM Updates full synchronization

To perform full SCCM updates synchronization you can place a file called FULL.SYN in SCCM install directory .\inboxes\wsyncmgr.box folder.

It looks like this:

In few seconds after such file is created, SCCM will start full updates synchronization. You can monitor the process in WSYNCMGR.log, which is located in SCCM install directory Logs folder.


Thursday, January 26, 2017

Script to completely uninstall Microsoft Intune client

Here is a script to completely uninstall Microsoft Intune client. Just put these lines in a .cmd file and run as administrator:

wmic product where name="Microsoft Endpoint Protection Management Components" call uninstall
wmic product where name="Microsoft Intune Notification Service" call uninstall
wmic product where name="System Center 2012 - Operations Manager Agent" call uninstall
wmic product where name="Microsoft Online Management Policy Agent" call uninstall
wmic product where name="Microsoft Policy Platform" call uninstall
wmic product where name="Microsoft Security Client" call uninstall
wmic product where name="Microsoft Online Management Client" call uninstall
wmic product where name="Microsoft Online Management Client Service" call uninstall
wmic product where name="Microsoft Easy Assist v2" call uninstall
wmic product where name="Microsoft Intune Monitoring Agent" call uninstall
wmic product where name="Windows Intune Endpoint Protection Agent" call uninstall
wmic product where name="Windows Firewall Configuration Provider" call uninstall
wmic product where name="Microsoft Intune Center" call uninstall
wmic product where name="Microsoft Online Management Update Manager" call uninstall
wmic product where name="Microsoft Online Management Agent Installer" call uninstall
wmic product where name="Microsoft Intune" call uninstall
wmic product where name="Windows Endpoint Protection Management Components" call uninstall
wmic product where name="Windows Intune Notification Service" call uninstall
wmic product where name="System Center 2012 - Operations Manager Agent" call uninstall
wmic product where name="Windows Online Management Policy Agent" call uninstall
wmic product where name="Windows Policy Platform" call uninstall
wmic product where name="Windows Security Client" call uninstall
wmic product where name="Windows Online Management Client" call uninstall
wmic product where name="Windows Online Management Client Service" call uninstall
wmic product where name="Windows Easy Assist v2" call uninstall
wmic product where name="Windows Intune Monitoring Agent" call uninstall
wmic product where name="Windows Intune Endpoint Protection Agent" call uninstall
wmic product where name="Windows Firewall Configuration Provider" call uninstall
wmic product where name="Windows Intune Center" call uninstall
wmic product where name="Windows Online Management Update Manager" call uninstall
wmic product where name="Windows Online Management Agent Installer" call uninstall
wmic product where name="Windows Intune" call uninstall

Tuesday, January 24, 2017

How to find when AD user password expiration date

If you want to know when AD user's password will expire then check MsDs-UserPasswordExpiryTimeComputed attribute. To find this attribute:
1. Open "Active Directory Users and Computers" console and enable View -> Advanced Features
2. Find user, click Properties, and select Attribute Editor tab
3. Find MsDs-UserPasswordExpiryTimeComputed attribute, to view this in the Filter section, make sure Constructed is selected.

You cannot manage Intune with Microsoft Edge browser

Microsoft Intune new portal (manage.microsoft.com) currently does not support Microsoft's latest browser Edge.
If you open it with Edge, following error appears:

Tuesday, January 10, 2017

VM live migration fails using SCVMM 2012 with error 0x8007274D

If you are using SCVMM 2012 and try to migrate a VM from one cluster to another, then migration will probably fail with error 0x8007274D.
The extended error message is:
Migration check for virtual machine <serverName> failed to create a planned virtual machine in the target host.  Detailed error message: The Virtual Machine Management Service failed to establish a connection for a Virtual Machine migration with host serverName.contoso.com: No connection could be made because the target machine actively refused it. (Ox8007274D).

To solve this - go to destination host in SCVMM, select Properties and in the Migration Settings click to "Use any available network":


The issue is explained in this KB2853203 article