Manage SCCM Software Center remotely

This week I decided to investigate the art of writing Powershell Modules.
After doing some research on the internet I decided to write me a Module for remote managing the SCCM Software Center.

We currently use Cireson Remote Manage App for this.
But the problem with that product is that it loads a lot of unneeded info when you connect to the client you want to manage.
Which obviously takes too much time!
So that’s how I got to the idea to write my own Powershell Module.

Read More “Manage SCCM Software Center remotely”

IOS “Account not onboarderd” while enrolling

Recently I reinstalled my Intune connector after some problems.
So I had to recreate my APN certificate request and renew my Apple Push Certificate.
After going through this steps I ended up with iPads who couldn’t enroll anymore.
They gave the following error: “Account not onboarderd”

After executing the steps below everything started working again.

  • Go to Administration -> Cloud Services -> Microsoft Intune Subscriptions
  • Select your connector and go to Configure Platforms -> IOS
  • Uncheck “Enable IOS and Mac OS X (MDM) enrollment” and press OK”

Now connect to your site database and execute the following statements:

update SC_ClientComponent_Property set Value2 = '' where Name like '%APNS%'
delete from MDMPolicy where PolicyType = 7
delete from MDMPolicyAssignment where PolicyType = 7
update SC_ClientComponent_Property set Value2 = '' where Name like '%APNS%'
delete from MDMPolicy where PolicyType = 11
delete from MDMPolicyAssignment where PolicyType = 11
DELETE Drs_Signals

Now recreate your APN Certificate Request, renew you Apple Push Certificate and add it to the IOS tab in Configure Platforms.

Perflib counter causes EventID 1008 flood in eventlog

Several months ago we started to implement SCOM in our environment.
When we added SQL Server Management Packs to monitor our SQL infrastructure we started to get the follow errors in the eventlog:

The description for Event ID 1008 from source Microsoft-Windows-Perflib cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event: 

The handle is invalid

After searching for weeks and a lot of trial and error we finally found a solution that worked. Read More “Perflib counter causes EventID 1008 flood in eventlog”

Decline / exclude an update in SCCM 2012

Recently I needed to decline an update in SCCM 2012 so it wouldn’t install.

Remove / Decline Update

  • Go to All Software Updates
  • Find the Update you want to decline
  • Highlight and right-click, then select Edit Membership
  • Uptick all of the Software Update Groups and click OK

Stop automatic approval via Automated Deployment Rule

  • Set the Custom Severity for the update you want to exclude to Low
  • In the Automated Deployment Rule, add the Custom Severity field and set it to None. This will exclude any update(s) that are set to Low.


Publishing large updates to WSUS

Yesterday I was struggling while publishing SQL updates to WSUS with SCUP.
I bumped into the following error message:

CabUtilities.CheckCertificateSignature File cert verification failed for 
with 2147943792

After long hours of searching for a solution I finally found one.
It seems that the default cab size limit of WSUS is 384MB.
So i found some powershell code to resize the maximum cab size to 1024MB.


$wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer()
$size = $wsus.GetConfiguration().LocalPublishingMaxCabSize
Write-host "Current Max Size: " $size
$config = $wsus.GetConfiguration()
$config.LocalPublishingMaxCabSize = 1024