Technical articles on SCCM/CM2012/Powershell: July 2015

Thursday, July 30, 2015

SCCM 2012-Find out who created a Collection

Recently I came across a badly created Collection in our environment and wanted to know who had created it.
It is not possible from Collection properties to find out.

So, to find the person who created it, open SCCM reports, go to Status Messages > All messages for a specific message ID.

In the report parameters, put "30015" and run the report. You get the details of all Collection created messages and you can search for your Collection.

Other message Ids:

Message ID	Description

30015	User “<>” created a collection named “Collection Name” (CollID)
30016	User “<>” modified the Collection Properties for a collection named “Collection Name” (CollID)
30017	User “<>” deleted a collection named “Collection Name” (CollID)
30104	User “<>” requested that the membership be refreshed for collection “Collection Name” (CollID)
30107	User “<>” requested that the CCRs be generated for collection “Collection Name” (CollID)
30066	User “<>” deleted a discovered resource named “ComputerName” ResourceID

Friday, July 17, 2015

DFS error-The DFS Replication service stopped replication on replicated folder xxxxxx at local path xxxxx due to Error ID: 9073

While configuring DFS replication on a 2012 server, I was constantly getting this error in the Eventlog

The DFS Replication service stopped replication on the replicated folder at local path XXX

Additional Information:
Error: 9073 (Content set initialization is pending journal wrap task to resume journal read)
ID 4004

I tried removing DFSR, reinstalling DFSR, removing the server from replication members, but could not fix it.

Solution:
Take a backup of any required folders.
Stop DFS Replication Services
Unhide and grant yourself access to the C:\System Volume Information folder. To Unhide, from the folder options, unselect "hide system folders".
Open a command prompt with elevated privileges.
Change to the System Volume Information directory where replication target folders are present.
Run the following command RMDIR DFSR /S
Choose yes if you are sure to continue.
Rrestart DFS Replication Services

To check DFS status, open command prompt with elevated privileges and run

wmic /namespace:\\root\microsoftdfs path dfsrreplicatedfolderinfo get replicatedfoldername,state

Monday, July 13, 2015

SCCM2012-Removing orphaned DP server from Primary Console and DB

Recently, we had two servers with DP roles, to be removed. But, I could not do a clean uninstall as they were already down.
I removed the DP role from the Console, but when trying to delete the server, I got this error:

The server “\\<server_fqdn>” cannot be deleted because it contains the following site system roles:

Component server

I remember installing PXE role on it and then removing it.

Resolution:

1. Make sure all the roles apart from Component Server and Site System are removed.
2. On the Primary Server open regedit, go to

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Components\SMS_SITE_COMPONENT_MANAGER\Component Servers\OFFLINESERVERNAME

Under Components/each sub key there will be a value called Deinstallation Start Time.
This indicates how long server has been trying to reach the DP.
Change this to 1.
3. Stop and restart the SMS_SITE_COMPONENT_MANAGER service .

Again wait for some hours, and the Component server will be removed and you can delete the Server.

The server “\\<server_fqdn>” cannot be deleted because it contains the following site system roles:
Component server
- See more at: http://www.faqshop.com/wp/configmgr-2012-unable-remove-component-server-site-system-role#sthash.d2I35KS6.dpuf