Software updates not installing-Install not allow as another job is still in progress in updates deployment

Ig you get this error--Install not allow as another job is still in progress, and the updates do not install, then there is something wrong with the WMI.

Connect to the computer through SCCM Client Center, and on the Install/Repair Tab, delete the Root\CCM namespace.









After that, run the SCCM client repair.
The updates will then start to install.
You should also monitor running executions in the Running Executions workspace.

Failed to create instance of Microsoft.SystemsManagementServer.WSUS.WSUSServer. error = The parameter is incorrect.

I was getting this error on one of the Child Primary site servers (Windows server 2008), with WSUS/SUP installed. the error was reported in wsusctrl.log

Solution: This KB article by microsoft helped:
http://support.microsoft.com/kb/962224

To resolve this issue re-register the wsusmsp.dll and the wsyncact.dll files.  To do this follow these steps:

1.       Open a CMD window and navigate to c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\.
2.       Run the following command lines in the order listed:

·         RegAsm.exe C:\Program Files\Microsoft Configuration Manager\bin\i386\wsyncact.dll /unregister
·         RegAsm.exe C:\Program Files\Microsoft Configuration Manager\bin\i386\wsyncact.dll

·         c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe C:\Program Files\Microsoft Configuration Manager\bin\i386\wsusmsp.dll /unregister
·         c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe C:\Program Files\Microsoft Configuration Manager\bin\i386\wsusmsp.dll

The above commands register the Microsoft.SystemsManagementServer.SoftwareUpdatesManagement.WSyncAction.WSyncAction  class  and the Microsoft.SystemsManagementServer.WSUS.WSUSServer class successfully.

3.       Run regedit.exe and verify that the following registry keys exist:

HKEY_CLASSES_ROOT\Microsoft.SystemsManagementServer.SoftwareUpdatesManagement.WSyncAction.WSyncAction
HKEY_CLASSES_ROOT\CLSID\{E5272449-2083-4020-ACEE-18A145F79A75}

  4.       Wait for the next Sync status to see if the sync is working now.

After reregistering, I restarted the SMS service.



Note Uninstalling and reinstalling the SUP will not resolve this issue.

querying AD using custom queries

Here is how you can use AD custom queries from querying AD objects. I wanted to query user name, email.

1. Launch Active Directory users and Computers, and select Saved Queries. Right Click Saved Queries – > new – > query

2. Give a name to the Query

3. Select the Define Query Button, Under Find select Custom Search.

After selecting Custom Search select the Advanced Tab

In the Enter LDAP query window paste the following basic query string and hit OK
(&(objectcategory=person)(objectclass=user)(!userAccountControl:1.2.840.113556.1.4.803:=2))

4. The Query will display the result

In order to extract more data follow the next step
5. Go to View and Select Add/Remove Columns ..

6. Add or remove the Columns You need

7. Right Click on the Query and select Export List


Save as a CSV.

Thanks to http://pdtechguru.wordpress.com/2012/10/15/how-to-query-active-directory-objects-3/

Also, the complete list of UAC bits:
http://social.technet.microsoft.com/wiki/contents/articles/5392.active-directory-ldap-syntax-filters.aspx#Examples