Kitaab

We use citrix gateway Plugin+ nedsacler as our full VPN solution . The gateway is configured to check for device certificate issued by the PKI infrsatructre In one of the machines we found that the gateway plugin was not requesting to choose the certificate the first time it was opened. So it was failing the EPA check. We tried uninstall and resinstall of the plugin however it still would not open request to choose the device certifciate . We manullay edited the config.js at C:\Users\ User01 \AppData\Local\citrix\AGEE  and placed the dummy devCert highlighted in bold in the example: {"auto open homepage":false,"connectingTo":"https://vpn.domain.com","connections":[{ "devCert":"1846168a1880868155848661825646166a1868868155848a8c664e6f121468284f606c28416f6d18666e10166a186086815584818c624e4f412846151468656e1460616614606f6e,a88212e0808f64e4aa5e500e88", "name":"vpn.domain.com","url":"https://vpn.d...

While trying to run the command Get-CSTeamsMeetingPolicy,  i received follwoing errrors on the domain joined machine. PS C:\WINDOWS\system32> Get-CsTeamsMeetingPolicy Get-CsTeamsMeetingPolicy : The term 'Get-CsTeamsMeetingPolicy' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. At line:1 char:1 + Get-CsTeamsMeetingPolicy + ~~~~~~~~~~~~~~~~~~~~~~~~     + CategoryInfo          : ObjectNotFound: (Get-CsTeamsMeetingPolicy:String) [], CommandNotFoundException     + FullyQualifiedErrorId : CommandNotFoundException PS C:\WINDOWS\system32> $sfbSession = New-CsOnlineSession Please enter the user principal name (ex. User@Domain.Com ): a @no.onmicrosoft.com New-PSSession : [admin2e.online.lync.com] Connecting to remote server admin2e.online.lync.com fa...

While installing OOS got this error "Certificate not found" PS C:\Users\admin> New-OfficeWebAppsFarm -InternalUrl "https://oos.domain.com" -ExternalUrl "https://oos.domain.com" -CertificateName "oos.domain.com" -EditingEnabled New-OfficeWebAppsFarm : Office Online was unable to find the specified certificate. At line:1 char:1 + New-OfficeWebAppsFarm -InternalUrl "https://oos.domain.com" -ExternalUrl "https://oo ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~     + CategoryInfo          : ObjectNotFound: (:) [New-OfficeWebAppsFarm], ArgumentException     + FullyQualifiedErrorId : CertificateNotFound,Microsoft.Office.Web.Apps.Administration.NewFarmCommand The certificate was already installed  ,however we didnt have the root and intermediate certificate added on the server once we installed root/intermediate certificate on the oos server , the command completed successfully H...

While using VMware customization wizard to deploy new machines using a template we found out the new machines are not joining the domain. As checked the netsetup log found that it had the following error NetpModifyComputerObjectInDs :  ldap_add_s failed :  0x35 Doing some searching online found that this may be because of the permission issue of the domain join account for the particular OU where you are trying to join the machine. Made sure that the join account had correct permissions delegated on the OU level After that the domain join step worked fine. Hope this helps

We were not seeing any new updates under "updates and servicing"  node in configmgr 1606 CB console Checked the logged on user had correct permissions and scopes assigned. When looking at the dmpdownloader.log file found the following The site is under offline mode SMS_DMP_DOWNLOADER 5/29/2018 3:49:36 PM 16416 (0x4020) Looking for file D:\SCCM\EasySetupPayload\offline\ConfigMgr.Update.Manifest.cab SMS_DMP_DOWNLOADER 5/29/2018 3:49:36 PM 16416 (0x4020) Looking for file D:\SCCM\EasySetupPayload\offline\ConfigMgr.Update.Manifest.cab SMS_DMP_DOWNLOADER 5/29/2018 3:50:36 PM 16416 (0x4020) HasIntuneSubscription: Site has no Intune subscription. SMS_DMP_DOWNLOADER 5/29/2018 3:51:07 PM 13800 (0x35E8) Looking for file D:\SCCM\EasySetupPayload\offline\ConfigMgr.Update.Manifest.cab SMS_DMP_DOWNLOADER 5/29/2018 3:51:36 PM 16416 (0x4020) Looking for file D:\SCCM\EasySetupPayload\offline\ConfigMgr.Update.Manifest.cab SMS_DMP_DOWNLOADER 5/29/2018 3:52:36 PM 164...

Faced an issue where in a ESXi host keep disconnecting form the vCenter When we reconnect , it does connect back however loses connectivity again after few minutes Although we could still ping and connect (RDP) to the VM's on the host. It felt somehow the heartbeats form the host to vCenter were lost as the Host was behind the firewall We needed to enable UDP/902 between the host and vCenter to get the issue fixed Hope this help

Every time i was running the Configmgr console i was getting the following error Microsoft.ConfigurationManagement has stop working. Please close the program The issue in our case was C: was running out of space. Add some more space/cleared logs solved the issue for us Hope this helps

For patching issues caused by Mar 2018 KB's on Server 2008 This is what have worked for us for now: Create a sccm package to deploy the following vbs script on all 2008 R2 servers collection Run it before the patches are applied (it will delete SlotPersistentInfo key if that exists under HKLM\System\CurrentControlSet\Enum\PCI\<deviceid>\<subdeviceid>\Device Parameters Let patches install Reboot The key will be recreated automatically after the reboot ************************** Script: Dim strPciFileVersion Dim WindirFilePath set WshShell = WScript.CreateObject("WScript.Shell") WindirFilePath = WshShell.ExpandEnvironmentStrings("%WinDir%")   Dim fs Set fs = CreateObject("Scripting.FileSystemObject")   strPciFileVersion = fs.getfileversion(WindirFilePath & "\\system32\\drivers\\pci.sys") Dim strAryFileVersion1 strAryFileVersion1 = Split(strPciFileVersion, ".") If (strAryFileVersion1(0) = 6...

Was facing a strange issue where in some of the patches were failing to download . When checked the patchmanager.log found the follwoing error message Download destination = \\sccmshare\patches\ebbbd800-1e36-4aa5-8b61-8c7f049ba548.1\EnableTask.exe . Software Updates Patch Downloader 3/14/2018 5:01:20 PM 7716 (0x1E24) Contentsource = http://download.windowsupdate.com/d/msdownload/update/software/updt/2018/02/enabletask_ca8afac7f3ba90ff72a10a27fcfa3a67edcb83a3.exe . Software Updates Patch Downloader 3/14/2018 5:01:20 PM 7716 (0x1E24) Downloading content for ContentID = 16798547,  FileName = EnableTask.exe. Software Updates Patch Downloader 3/14/2018 5:01:20 PM 7716 (0x1E24) HttpSendRequest failed HTTP_STATUS_FORBIDDEN or HTTP_STATUS_DENIED Software Updates Patch Downloader 3/14/2018 5:01:20 PM 5440 (0x1540) Download http://download.windowsupdate.com/d/msdownload/update/software/updt/2018/02/enabletask_ca8afac7f3ba90ff72a10a27fcfa3a67edcb83a3.exe to It was specif...

Issues while installing Updates on one of the machines Following entries were showing up in the logs FATAL: Completed install of CBS update with type=0, requiresReboot=0, installerError=1, hr=0x800719f3 WARNING: Exit code = 0x00000000; Call error code = 0x80240022 I added an addition vCPU to the machine and after that the installation went fine. Hope this helps

Was getting this error message on a SCCM client Failed to raise state message for state Id = 3, error = 0x8004103b Even after adding disk space could not get to install the updates Finally a reboot fixed it Hope this helps

We faced an issue with Discovery wizard getting stuck on discovering Windows objects in SCOM 2016 Turned out that we were running out of space for OpsmgrDB Make sure OpsmgrDB is set for autogrowth as it is not by default Hope this helps

After Installing new CM CB 1606 i was unable to fetch the updates in the console The issue seemed to be with the proxy we use. from dmpdownloader.log Failed to call AdminUIContentDownload. error = [error code: -2147467261, error message: Invalid pointer] SMS_DMP_DOWNLOADER 3/19/2017 1:38:45 PM 3632 (0x0E30) AdminUI Content Download thread is exiting... SMS_DMP_DOWNLOADER 3/19/2017 1:38:45 PM 3632 (0x0E30) ERROR: GetSccmConnectedServiceUrl Exception System.Net.WebException: The remote server returned an error: (407) Proxy Authentication Required.~~   at System.Net.HttpWebRequest.GetResponse()~~   at Microsoft.ConfigurationManager.DmpConnector.Connector.SCCMConnectorUtility.GetSccmConnectedServiceUrl(IWebProxy prx) SMS_DMP_DOWNLOADER 3/19/2017 1:38:45 PM 3976 (0x0F88) There is no sccmConnected service reachable SMS_DMP_DOWNLOADER 3/19/2017 1:38:45 PM 3976 (0x0F88) Generating state message: 1 for package 00000000-0000-0000-0000-000000000000 SMS_D...

Recently had to create a Windows Server 2008 R2 SP1 template If you install Mcafee  VSE 8.8 the VMware customization to deploy a VM from the template fails. As checked Mcafee for now do not have nay solution for this problem and the only way to get the deployment using the VMware customization wizard working is by removing VSE 8.8 from the master image of Server 2008 R2 SP1 Hope this helps

Needed to export the Computer Name and all the local Admins for a particular OU Used the following Powershell script to export the details $computers = Get-ADComputer -SearchBase "OU=Servers,OU=Computers,OU=ABC,DC=XYZ,DC=Domain,DC=com" -Filter * | %{$_.name} foreach($computer in $computers) { $computer $s1 = $null $ADSIComputer = [ADSI]("WinNT://$computer,computer") $adminGroup  = $ADSIComputer.psbase.children.find('Administrators', 'Group') $adminMembers = $adminGroup.psbase.invoke("members") | %{$_.GetType().InvokeMember("Name",'GetProperty',$null,$_,$null)} | %{$s1 += $_ + ","} $computer + "," + $s1.Trim(",") >> .\LocalAdmins.csv } Hope this helps

We noticed that one of the updates kept failing to download  Logs were showing this: Successfully moved C:\Users\USER01~1\AppData\Local\Temp\7\CAB23C3.tmp to \\apps\Windows_Updates\Server_Updates\2016-12\c47f6681-2bec-4549-8b8c-29abb32467aa.1\windows8.1-kb3210137-x64.cab Software Updates Patch Downloader 19-12-2016 08:14:53 361508 (0x58424) Could not delete file '\\apps\Windows_Updates\Server_Updates\2016-12\c47f6681-2bec-4549-8b8c-29abb32467aa\windows8.1-kb3210137-x64.cab'.  Code 0x80070020 Software Updates Patch Downloader 19-12-2016 08:14:53 357888 (0x57600) Could not delete directory '\\apps\Windows_Updates\Server_Updates\2016-12\c47f6681-2bec-4549-8b8c-29abb32467aa'.  Code 0x80070091 Software Updates Patch Downloader 19-12-2016 08:14:53 357888 (0x57600) ERROR: DownloadContentFiles() failed with hr=0x80004005 Software Updates Patch Downloader 19-12-2016 08:14:53 357888 (0x57600) Even retrying download was not fixing this. In t...

One of our servers was losing the Local Admin settings as we control them using GPO (restricted Groups) We were receiving the following event on this particular server : Event ID 4098 Application Event Log The computer 'Administrators (built-in)' preference item in the 'Servers Local Admins {odjd9DBD-22AF-48EA-ADF5-F42ADE4182hst}' Group Policy Object did not apply because it failed with error code '0x80070534 No mapping between account names and security IDs was done.' This error was suppressed. To fix the issue we deleted all the folders from the following location and rebooted the server C:\ProgramData\Microsoft\Group Policy\History Hope this helps.

We have a ePO superAgent serving as repository to another ePO deployment across Firewall. The repository was shared and permissions were in place to access it from the ePO server. When we added the repository as source for the ePO it did validate the credentials , however the ePO Wizard failed to list the content of the repositiry in the console. In order to get this working , we needed to create a new share on the SuperAgent instead of utilizing the SuperAgnet repository Then the ePO server configuration was modified to include the new share and everything worked fine after that. Hope this helps/

We faced issue where in Checkpoint IPS flagged certain traffic between ePO server and a remote repository (SuperAgent) and was rejected , thus causing file replication fail between ePO and SuperAgent over Port 8081 When we checked firewall for logs , it was particular identifying the traffic as SQL injection for HIPS content. As we checked HIPS content included files for HIPS and the ePO part that require SQL code for rules to be added / removed or modified in the ePO DB. In the end we had to put exception in IPS to  trust ePO traffic and everything worked fine. Hope this helps

If you wish to deploy a VM from template that resides on a host in one network to a host in another network across firewall you would need to open TCP/902 from the host where you have the Template to the one where you need to deploy the VM over. Hope this helps.