Posts

Showing posts from September, 2014

SCCM PXE Error after booting – The certificate associated with this media has expired

Image
Issue: OSD Stops working as "Client Distribution point certificate" has expired
Error: PXE-053 No boot file name received.
Description:  Today when i tried to boot a computer we started witnessing above error message. Immediately i opened "SMSPXE.log" file and found following string Certificate [Thumbprint A0CADB6E2DA5CBAFB8860F5054A50FC011F80D53] issued to 'PRI' Server has expired.SMSPXE9/29/2014 4:05:02 PM2472 (0x09A8). 




















Also you'll start receiving this error message on TS before certificate gets expired.




Solution: Renew the Distribution Client Certificate using below steps:

1. Log in to Primary site server, open mmc and Add "Certificates Snap-in" 
2. Under Personal Ceretificate store, you will find distribution point certificate
3. Right click on it "Request Certificate with New key and Click enroll".
4. Export this certificate with private key and import in distribution point settings under Server and Site System Rooles under Admini…

Query to find both x64 and x86 system with a program installed.

The following query returns all the x64 and x86 systems that are installed with VMWare tools. You can replace “VMware Tools” with your program Add Remove Program’s to query for other programs.

Select SMS_R_System.NetbiosName from SMS_R_System where SMS_R_System.ResourceId in (select SMS_R_System.ResourceID from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName = "VMware Tools") or SMS_R_System.ResourceId in (select SMS_R_System.ResourceID from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS_64 on SMS_G_System_ADD_REMOVE_PROGRAMS_64.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS_64.DisplayName = "VMware Tools") order by SMS_R_System.NetbiosName

This is a WQL Collection query so there will be no Version# column, but you could query for version by adding this line after the DisplayName query inside…

What to do when your USB device doesn't work

Image
Clearly, something is broken. But is it hardware, software, the device or the computer? That's going to take some experimentation.

First, let's get the obvious out of the way: Unplug the device, then plug it again. Did that fix the problem?

If not, unplug it again, reboot your PC, and then plug it in again. Did that help? How about trying another port?

No? Well, it was worth a try. Since the problem persists, let's get on to more serious tests.

Try the same device on another PC, and try another USB device on your PC.

If the device fails to work on both PCs, you have a defective device. You might be able to fix the problem with a driver update. USB devices are supposed to install their own drivers when you plug them into a PC, but occasionally that doesn't work.

Go to the device manufacturer's website and see if there is a Windows driver available. If you there is, download and install the driver.

If that won't solve the problem, accept that you've got a defective…

Windows Update issue - enforecement state unknown

Issue: - Software updates to the any of the servers not going thru.. Whereas software distribution works fine, deployment states report says "Enforcement state unknown"

Error Message: - Below error found in “WUAhandler logs."

Enabling WUA Managed server policy to use server: http://server1.contoso.com:80
waiting for 2 mins for Group Policy to notify of WUA policy change...
Timed out waiting for Group Policy notification.
Group policy settings were overwritten by a higher authority (Domain Controller) to: Server and Policy NOT CONFIGURED
Failed to Add Update Source for WUAgent of type (2) and id ({08250946-C9EB-443F-87A4-6AD5B2E5FB2D}). Error = 0x80040692.


Solution: - Firstly check below GPs details? It can be a gpo conflict:

These three policies mentioned should not be configured from domain level. The SCCM client will apply the policy whenever it is required.

a. Allow signed content from intranet Microsoft update service location.

b. Specify intranet Microsoft update se…