Compliance Manager Collection Creation

How to create Compliance Manager automated collection with compliance manager status

SCCM / WSUS clients not to check from Microsoft updates

Most of the time when you have sccm in placed you do not wanted your clients to go to internet and get patches

in this situations you can disable below setting so that clients do not go to internet, however if you have sccm or wsus configured it will go to their web server scan and install.

Click Computer Configuration, click Administrative Templates, click System, click Internet Communication Management, and then click Internet Communication settings. In the details pane, double-click Turn off access to all Windows Update features

 open and enable as shown below

AZURE Point to Site VPN Create -Certificates

AZURE Point to Site VPN Create

makecert -sky exchange -r -n "CN=MyNet" -pe -a sha1 -len 2048 -ss My

makecert -n "CN=MyNetClient" -pe -sky exchange -m 96 -ss My -in "MyNet" -is my -a sha1

In the screen that pops up, click 'Certificate' and then on 'add'.

Select 'My User Account' and click on 'Finish'.

Expand 'Current User' in the left panel, then 'Personal' and then 'Certificates'.

Right click on certificate and click 'All Tasks' and then 'Export'.

 one with private key and one with no key just the .cer file

Installing SCCM 1606 Secondary Site

First thing is First Why and When We needSCCM Secondary Site ?

When do we need SCCM (1606) Secondary Site ?

It required if we are talking about below...

The remote location is between 500 and 5000 clients

Needs to compress traffic going to the site

Needs to control the upward flowing traffic

Needs a local Management Point

Needs a local Software Update Point

Below are the PreRequirements for installing Secondary site.

 Secondary Site requires SQL Server for its site database.

From Server Features below

Net 3.5 Framework

.Net 4 Framework

Remote Differential Compression

BITS

AD publishing Rights required

for System Management Container

Ports to be open in Firewall

TCP 1433 (for SQL)

TCP 4022 (For SQL)

TCP 135 (RPC/WMI)

TCP 445 (SMB)

Once you installed everything above run the below and review C:\ConfigMgrPrereq.log

prereqchk.exe /SEC SCCMSecondaryServerName /INSTALLSQLEXPRESS /Ssbport 4022 /Sqlport 1433

SQL Ports and sql collation

SQL Collation SQL_Latin1_General_CP1_CI_AS is required as for sccm installation

SQL_Latin1_General_CP1_CI_AS

Below are the ports required for SCCM installation - these are related to SQL 

netsh advfirewall firewall add rule name="SQL Server" dir=in action=allow protocol=TCP localport=1433
netsh advfirewall firewall add rule name="SQL Admin Connection" dir=in action=allow protocol=TCP localport=1434
netsh advfirewall firewall add rule name="SQL Service Broker" dir=in action=allow protocol=TCP localport=4022
netsh advfirewall firewall add rule name="SQL Debugger/RPC" dir=in action=allow protocol=TCP localport=135
netsh advfirewall firewall add rule name="Analysis Services" dir=in action=allow protocol=TCP localport=2383
netsh advfirewall firewall add rule name="SQL Browser" dir=in action=allow protocol=TCP localport=2382
netsh advfirewall firewall add rule name="HTTP" dir=in action=allow protocol=TCP localport=80
netsh advfirewall firewall add rule name="SSL" dir=in action=allow protocol=TCP localport=443
netsh advfirewall firewall add rule name="SQL Browser" dir=in action=allow protocol=TCP localport=1434
netsh advfirewall firewall add rule name="ICMP Allow incoming V4 echo request" protocol=icmpv4:8,any dir=in action=allow


if you still get error like below " path not found" it means SMB ports are not open..

just enable file and print services in the firewall exception of SQL Server... see my youtube videos for this...

error:

sccm 2012 / 1511 /1606 Install Site Server Prerequisites

Below are the pre requirements 

Install Site Server Prerequisites

The following roles and features need to be installed onto the SCCM Site Server prior to installation:

• BITS
• Remote Differential Compression
• IIS Components*
• .Net Framework 3.5
• .Net Framework 4.5

*Add the following IIS components

Common HTTP Features Default Document Directory Browsing HTTP Errors Static Content HTTP Redirection Health and Diagnostics HTTP logging Logging tools Request Monitor Tracing Performance Static Content Compression Security Request Filtering Basic Authentication IP and Domain Restrictions URL Authorization Windows Authentication Application Development .NET Extensibility 3.5 .NET Extensibility 4.5 ASP ASP.NET 4.5 ISAPI Extensions ISAPI Filters Management Tools IIS Management Console IIS 6 Management Compatibility IIS 6 Metabase Compatibility IIS 6 Management Console IIS 6 Scripting Tools IIS 6 WMI Compatibility IIS Management Scripts and Tools Management Service

Feb 29th, Feb 29th, 20122012

 A Special day for big developers with small mistakes :) 

Feb 29th, 2012

 

​

More to explain :) 

https://azure.microsoft.com/en-in/blog/summary-of-windows-azure-service-disruption-on-feb-29th-2012/