Software updates not installing-Install not allow as another job is still in progress in updates deployment

Ig you get this error--Install not allow as another job is still in progress, and the updates do not install, then there is something wrong with the WMI.

Connect to the computer through SCCM Client Center, and on the Install/Repair Tab, delete the Root\CCM namespace.









After that, run the SCCM client repair.
The updates will then start to install.
You should also monitor running executions in the Running Executions workspace.

Failed to create instance of Microsoft.SystemsManagementServer.WSUS.WSUSServer. error = The parameter is incorrect.

I was getting this error on one of the Child Primary site servers (Windows server 2008), with WSUS/SUP installed. the error was reported in wsusctrl.log

Solution: This KB article by microsoft helped:
http://support.microsoft.com/kb/962224

To resolve this issue re-register the wsusmsp.dll and the wsyncact.dll files.  To do this follow these steps:

1.       Open a CMD window and navigate to c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\.
2.       Run the following command lines in the order listed:

·         RegAsm.exe C:\Program Files\Microsoft Configuration Manager\bin\i386\wsyncact.dll /unregister
·         RegAsm.exe C:\Program Files\Microsoft Configuration Manager\bin\i386\wsyncact.dll

·         c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe C:\Program Files\Microsoft Configuration Manager\bin\i386\wsusmsp.dll /unregister
·         c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe C:\Program Files\Microsoft Configuration Manager\bin\i386\wsusmsp.dll

The above commands register the Microsoft.SystemsManagementServer.SoftwareUpdatesManagement.WSyncAction.WSyncAction  class  and the Microsoft.SystemsManagementServer.WSUS.WSUSServer class successfully.

3.       Run regedit.exe and verify that the following registry keys exist:

HKEY_CLASSES_ROOT\Microsoft.SystemsManagementServer.SoftwareUpdatesManagement.WSyncAction.WSyncAction
HKEY_CLASSES_ROOT\CLSID\{E5272449-2083-4020-ACEE-18A145F79A75}

  4.       Wait for the next Sync status to see if the sync is working now.

After reregistering, I restarted the SMS service.



Note Uninstalling and reinstalling the SUP will not resolve this issue.

querying AD using custom queries

Here is how you can use AD custom queries from querying AD objects. I wanted to query user name, email.

1. Launch Active Directory users and Computers, and select Saved Queries. Right Click Saved Queries – > new – > query

2. Give a name to the Query

3. Select the Define Query Button, Under Find select Custom Search.

After selecting Custom Search select the Advanced Tab

In the Enter LDAP query window paste the following basic query string and hit OK
(&(objectcategory=person)(objectclass=user)(!userAccountControl:1.2.840.113556.1.4.803:=2))

4. The Query will display the result

In order to extract more data follow the next step
5. Go to View and Select Add/Remove Columns ..

6. Add or remove the Columns You need

7. Right Click on the Query and select Export List


Save as a CSV.

Thanks to http://pdtechguru.wordpress.com/2012/10/15/how-to-query-active-directory-objects-3/

Also, the complete list of UAC bits:
http://social.technet.microsoft.com/wiki/contents/articles/5392.active-directory-ldap-syntax-filters.aspx#Examples

FEP sub reports error - Sub report could not be opened

While running  FEP reports, specially Antimalware Protection Summary Report, I was getting this error - Sub Report could not be opened.

If you open the report directly, you get this error - Query execution failed for dataset 'dsAMProtectionBreakdown'. (rsErrorExecutingCommand) Error 7202, Procedure -, Line 1, Message Could not find server 'FEPDW_ODU_FEPDW_ODU_OLAPProvider_FEP' in sys.servers.

Solution:
Open SQL Management Studio and try to do a test connection for the linked server - FEPDW_ODU_FEPDW_ODU_OLAPProvider_FEP and for the other one also.

The Test Connection should succeed. Check why it is not succeeding. I had my SQL Analysis Services stopped. Maybe delete the linked server and create it with correct database name.

GPO Preferences: Scheduled Tasks not appearing

Recently, I was required to create scheduled tasks for Windows 7 computers through GPO.

I did it through GPO:


But, the task was not appearing on the target workstation, no matter what.

After checking everything, I changed the logon credentials.By default tasks configured via the Computer section of Group Policy will run as %LogonDomain\%LogonUser%. But I changed it to BUILTIN\SYSTEM.

It's wrong. It should be NT AUTHORITY\SYSTEM, which works perfectly. The task appears on the target computers.

Export Bitlocker Recovery Keys for a list of computers

If you want to generate a list of computers and their Bitlocker keys, then you can use this command. This will generate the keys in CSV format:


Adfind -b ou=xxx,ou=xxxxxx,ou=xxxx,ou=xxxxx,dc=xxx,dc=xxxx -csv -csvdelim # -f "(msFVE-RecoveryPassword=*)" msFVE-RecoveryPassword > bitlocker_keys.txt


Replace xxx with correct distinguished names of the required OU.
You need to have access to Bitlocker recovery keys.

Running VBScripts on Vista/Win 7 64 bit computers

Sometimes while running vbscripts on Win 7 64 bit computers, the script gives errors in creating objects or unable to access shares.

The reason is that vbscripts are being executed as 64 bit scripts.

Some DLLs do not support 64 bits, so the script has to be run wit hthe 32 bit version of WScript.exe from the directory %SystemRoot%\SysWOW64 or the global Registry setting has to be changed:
HKEY_CLASSES_ROOT\VBSFile\Shell\Open\Command
(Standard) from
"%SystemRoot%\System32\WScript.exe" "%1" %*
to
"%SystemRoot%\SysWOW64\WScript.exe" "%1" %*