Posts about SystemCenter:

Enable and Activate TPM for BitLocker Pre-Provisioning in WinPE

I have to say this one caught me out. I’m just setting up a task sequence to deploy Windows 8 and pre-provision BitLocker (which is wicked fast by the way!) and got caught with enabling and activating the TPM from WinPE.  The solution I came up with works for me, on a Samsung Series 7 Slate but might not work for all hardware vendors (TPM is a little tricky like that).

The process turned out to be pretty simple.

  1. Download the EnableBitLocker.vbs script from MSDN.
  2. Copy the file to my Configuration Manager 2012 SP1 Site Server.
  3. Edit the file and change the reference to “setup.exe /s” and “setup.exe /r” (shutdown and reboot in full Windows) to “wpeutil shutdown” and “wpeutil reboot” respectively. I did this because WinPE doesn’t include shutdown.exe but instead uses wpeutil to do the same(ish) thing.
  4. Created an Application Management package containing only the EnableBitLocker.vbs script and distributed it to my DPs.
  5. Added a Run Command Line task to my Windows 8 deployment task sequence, after Restart in Windows PE and before Pre-provision BitLocker.
  6. PXE booted and deployed my task sequence to my target machine.

The final effect takes advantage of Windows 8’s used space only encryption and starts encryption before the OS is even deployed, encrypting as the OS deploys – the net result is a fully encrypted machine within minutes!

Don’t forget to download Windows Server 2012, System Center and Windows 8 Enterprise to try this out and take a look at my other posts on System Center.

Enable and Activate TPM for BitLocker Pre Provisioning in WinPE

Announcing System Center SP1, our UK MVPs

Last night we announced general availability of System Center 2012 SP1, it’s great, expansive product that is absolutely key to delivering your Private Cloud, Managing your Public cloud and managing the consumerisaiton of IT. You can get the trail VHDs at the bottom of this post or download the installers– go give it a try. We’re also announcing our System Center 2012 IT Camps schedule today too!

As System Center 2012 is such a large stable of technology I thought, rather than try to cover the expanse myself, I’d get some of our MVPs to write about some of their favourite features. These guys have been using SP1 for months, their thoughts, comments, expectations and experiences helping to form the SP1 update.

We’ll start with Patrick Lownds, MVP. You can find Patrick on twitter.

System Center Virtual Machine Manger 2012 (VMM 2012) introduced the concept of being able to deploy a bare metal host. This feature allows customers to order servers from their vendor of choice and simply plug in that server and automate the deployment of Hyper-V. The Hyper-V host could either be a standalone domain joined host or it could form or be part of an already formed cluster at a later stage.

If you’re not familiar with the process, VMM 2012 leverages the baseboard management controller (BMC) to deploy an operating system image, which is contained in a VHD, together with any specific OEM drivers, that are contained in the VMM 2012 library, applies those drivers to the operating system image, enables Hyper-V, and then restarts the server.

New in System Center Virtual Machine Manager 2012 SP1 (VMM 2012 SP1) is the ability to do deep discovery of that bare metal host. This process boots the server to perform an inventory of the hardware, using a WinPE image. Once the information is collected the server shuts down and provides VMM 2012 SP1 with information about that host i.e.  processor, memory and network interface cards.

This provides VMM 2012 SP1 with a greater insight into the hardware and allows you to configure in advance the more complex aspects of Virtual Machine Manager. For example, you could configure the use of DHCP or the use of an IP address from a pool of addresses managed by VMM, for each of the network interfaces detected, prior to deploying Hyper-V.

Next up is Graham Davies, System Center Cloud and Datacenter Management MVP, you can find Graham’s blog, System Center Solutions here.

As SCOM 2007 R2 gave way to SCOM 2012, we saw the Avicode .Net monitoring capability evolving into Application Performance Monitoring (APM). In SCOM 2012 this was initially focused on WCF based web applications although some flexibility in what was discovered was available by configuring the relevant overrides.

SCOM 2012 SP1 has seen a huge jump forward in functionality not only in terms of what can now be discovered and monitored out of the box but also in terms of integration with Team Foundation Server (TFS). So what exactly does SCOM 2012 SP1 bring to the table:

  • The ability to monitor Windows Services, not just IIS-hosted applications.
  • Automatic Discovery of ASP.NET MVC3 and MVC4 Applications.
  • The ability to monitor SharePoint web front-end components.
  • Integration of Operations Manager and TFS

You can configure Operations Manager to allow APM alerts to generate and synchronise with TFS work items and APM exception events can be saved in IntelliTrace file format directly from Application Diagnostics enabling Developers to stay within their familiar environment to examine the complete exception call stack.

So SCOM 2012 SP1 both extends APM functionality improves the workflow between development and IT operations teams, improving efficiency and reducing the mean time to recovery for the problems detected by APM.

.Net Application Performance Monitoring Template

Integrating Operations Manager with Development Process

Finally in this post Raphael Perez, Configuration Manager MVP , you can find him on his System Center blog

Windows 8, Windows Phone 8, Windows RT, iPhones, Androids, Linux/Unix, Mac? How can we manage them? Application Virtualization, PowerShell, Mobility, Cloud, VDI, Security, Bring your Own Device (BYOD)? How can we integrate it?

These are only few of many questions business need answer and it is simple: Configuration Manager 2012.

The Service Pack 1 of Configuration Manager brings the world together, putting in a single console for management of Microsoft and non-Microsoft systems as well as a Microsoft Cloud and any device connected to it.

SP1 also support Windows to GO USB devices, roaming profiles, folder redirection, intelligent mobile network detection, it means that SP1 will detect mobile networks (3G/4G) to prevent software deployment when data charges may apply, and many other features.

As many other Microsoft systems, SP1 gives you support for PowerShell, it means that the administrator does not need to connect to the Configuration Manager console to perform the day-to-day tasks.

We’ll hear more from the UK and Irelands MVPs here soon! Go give the Evaluation’s a try, we’ve already done most of the installation work for you! and don’t forget to sign up for our IT Camp events to learn more.

System Center 2012 Service Pack 1 – Configuration Manager – Evaluation (VHD)

System Center 2012 Service Pack 1 – Service Manager – Evaluation (VHD)

System Center 2012 Service Pack 1 – Service Manager (Data Warehouse) – Evaluation (VHD)

System Center 2012 Service Pack 1 – Operations Manager – Evaluation (VHD)

System Center 2012 Service Pack 1 – Orchestrator – Evaluation (VHD)

System Center 2012 Service Pack 1 – Data Protection Manager – Evaluation (VHD)

Announcing System Center SP1, our UK MVPs

Error Code1 in Windows Update & 0×80004005 in ccmsetup.log

Today I’ve been playing with my System Center Configuration Manager SP1 lab and came across a very painful little bug.  A little searching and I came across this thread on the TechNet forums.  Essentially the problem I suddenly started having today, after it was working fine last week, was that my Config Manager client wasn’t installing through Windows Update.

It started by giving me a Code 1 message, as below:

Error Code1 in Windows Update & 0x80004005 in ccmsetup.log

That 1 update is the Config Man client being deployed through WSUS.  So the next thing I did was ran the ccmsetup.exe install from my Primary Site Server.  Nothing. So I checked out the ccmsetup.log file that’s in c:windowsccmsetuplogs and low and behold spotted the following:

Error Code1 in Windows Update & 0x80004005 in ccmsetup.log

That line that says Couldn’t verify ‘c:windowsccmsetupMicrosoftPolicyPlatformSetup.msi’ authenticode signature is a bit of a problem.  It turns out that there’s a bit of a bug luckily there is already a hotfix for it and there are some updates on Windows Update already to solve the issue…that said there is still work to do…

In order to now install the Config Manager client on a new device we first need a patch in place on that client machine:

KB2749655 for anything other than Windows 8 or Server 2012 and KB2756827 for Windows 8 or Server 2012.  I tested this on my Windows 8 client by manually running the MSU, then installing the update and the Config Manager client installed like a champ!

Now however I need to be able to do OSD on a regular basis, so I just offline serviced my Windows 8 image with DISM to get the job done quickly…here’s what you need to do:

  • Make a directory (I use c:test) to mount into.
  • Open a command prompt and type dism /mount-wim /wimfile:C:sourcesosWin8Sourcesinstall.wim (obviously pointing to the right source wim).
  • Then Dism /Image:C:test /Add-Package /PackagePath:C:packagespackage1.cab where dism is the name of the msu file for the OS
  • And finally Dism /Unmount-WIM /MountDir:C:testoffline /Commit

Then I updated my distribution points and jobs a good-un.  I did the same to my Windows 7 OS image too.

Error Code1 in Windows Update & 0x80004005 in ccmsetup.log

WSUS Service fails to start with error 193, WSUS Service is not a valid Win32 application

As I continue to build my System Center Configuration Manager 2012 (CM12) lab I continue to shoot myself in the foot in a number of ways.  Over the weekend I discovered that my WSUS service was unable to start and was logging “WSUS Service is not a valid Win32 application” in the event log.

After some digging around I found this great post by David Obrien (and great Config Manager blog by the way) that points to the issue: http://www.david-obrien.net/2012/09/18/re-adding-pxe-support-to-configuration-manager-site/

Essentially a file had been created called c:program and it was stopping the service from starting and renaming it worked a charm.  I’ll have to dig around a little more to work out what really happened here down the line. But thanks David!

WSUS Service fails to start with error 193, WSUS Service is not a valid Win32 application

Build and Capture Error codes with System Centre 2012 Configuration Manager

I’m currently spending some time build a test lab with System Center 2012 Configuration Manager Service Pack 1 (CM12 or SCCM 2012 if you like to shorten it) and during a build and came across a couple of errors (0×80070002 and  during my first build and capture task sequence.  I thought I’d just quickly document the error codes and fixes.

0×80070002

Build and Capture Error codes with System Centre 2012 Configuration Manager

This one is due to the credentials being used to access the DP being incorrect – I’d got the password wrong!

To resolve this go to Administration, select Site Configuration > Sites and select the site you’re deploying from. Right click the site and select Configure Site Components > Software Distribution. Select the Network Access Account tab and click the Set… button to specify the account used for network access. Select New Account and correct the details for your network access account. Don’t forget to verify the connection.

Build and Capture Error codes with System Centre 2012 Configuration Manager

0×80070002

Build and Capture Error codes with System Centre 2012 Configuration Manager

This error was much harder to find, but I spotted a post that referred to problems capturing a VM, it then occurred to me that you need a minimum of 1024mb of RAM on the machine you’re capturing. For me this was a quick dive into Hyper-V settings and upping the minimum ram to 1024 mb from 512mb. You’ll need a minimum of 1024 even if you have Dynamic Memory enabled for the machine as WinPE doesn’t do Dynamic Memory.

Build and Capture Error codes with System Centre 2012 Configuration Manager

Decks to download from UK TechDays Online

Last week Andrew and I presented a number of sessions at TechDays Online in the UK and we received numerous requests during the day to publish the decks so that people can peruse them at their leisure.  Well those decks are now here available for you to click through and download if you so wish.

Windows Server 2012

Windows 8

Private Cloud

Decks to download from UK TechDays Online

Understanding Windows 7 Deployment Backwards

What was the last operating system you deployed?…I’ll bet it was Windows XP and I bet you needed a bunch of 3rd party tools and experienced tons of pain to get to the end point.   With the right (free) tools it’s really easy to deploy Windows 7 though and you can self select just how much control and complexity you need depending upon the size of your deployment and how dynamic your infrastructure is.  When you first look at deployment though you might see the alphabet soup as a real turn off and feel it’s all too complex.  Here I’ll try to demystify it somewhat, covering deployment, data migration and application migration.

The Windows 7 deployment technologies build on each other and actually fit together like a jigsaw to present the whole picture.  Most guides to Windows 7 deployment start out explaining the underlying tools and components of a deployment but I think we sometimes need to picture the end goal first.  So what are the factors you need to consider?

Understanding the picture

To start out you need to determine what type of environment you have, who’s doing the deployment and even what the behavioural norms are of your users.  For example you might be in a position where you need to do everything for your users; either they don’t want to make backups and install Windows or they don’t have the capabilities (time / technical inclination).  Alternatively all your users might be highly skilled technical experts who need plenty of flexibility.  Either way the solutions are quite simple to build and maintain with the latest tools.  One option is to use the MAP toolkit to understand your environment.

The next thing you need to determine is the size of your environment and what tools you already have deployed.  If you’re on the medium to big size you’ll probably already have some System Center components deployed to manage your datacentre, servers and possibly your applications and operating system deployments.  If you’re on the medium to small end of the scale you probably have a bunch of those 3rd party tools cobbled together to provide a solution or you’ll be looking for something simple to deploy.  I’ve been intentionally vague with “small”, “medium” and “big” because they all depend on your self view.  Normally we consider “small” to be <100 and “big” to be >500 but I think you can self select better than that.

Do you have System Center?

With these few pieces of information we start identifying what type of deployment you need.  The next key consideration is if you’ve got System Center deployed.  If you do your Windows 7 deployment will be best with System Center at the helm leveraging MDT.  This will give you the ability to do a zero-touch or full automated deployment of Windows 7.  If you don’t have System Center deployed and you’re large enough that management has become a significant overhead then you’ll probably want to use your Windows 7 deployment to spearhead a System Center deployment to help take control of your environment.  System Center isn’t a fixed requirement though.

No, no problem!

What if you don’t have System Center in place?  Well then you’ll be looking at a tool called MDT (aka Microsoft Deployment Toolkit 2010 Update 1) which takes away lots of deployment pain for you and helps you deliver a dynamic and maintainable Windows 7 deployment environment.  It’s also free!  What MDT alone cannot do for you is provide a zero-touch Windows 7 deployment instead it provides a lite-touch (or semi automated) approach that does most of the work for your users.

Friends of MDT

Under MDT there’s another level of tools packaged up in something called the Windows Automated Installation Kit (better known as WAIK) which provides lots of the tools used by MDT to get the job done.  You’ll occasionally need to dip into this level to do more advanced things with your Windows 7 deployment (like service your images from the command line) and the WAIK actually includes a program for taking system images called ImageX.  If all you wanted was a very basic, repeatable installation of Windows 7 you could get away with just using WAIK but if you’ve got more than about 100 PCs you won’t want to go there.

Again to support an MDT based distribution you’ll need a couple more elements, a SQL Server and a Windows Deployment Services server (WDS).  For a SQL server it’s perfectly OK to use SQL Server Express or to use an existing managed SQL Server installation.  The SQL Server will house the configuration data used to dynamically provision computers.  WDS is a role of Windows Server 2008 and is used to provide PXE boot services (you can use a boot DVD if you need to install your customised Windows 7 install too).  WDS can also deploy XP and Vista, so you can move to a unified deployment infrastructure and it supports multi-stream multicasting, so if you use multi-cast deployment slower clients don’t slow faster clients.

So far we have key decisions made: Lite-touch or Zero-touch, dynamic deployments or static deployments but there are a couple more key considerations when thinking about your deployment, data and applications.

The data…

The data consideration drives whether you’ll need to migrate data from your users laptops or not and this in turn drives how you’ll migrate data if needs to be migrated.  If your users are storing data on their local machine you probably need to migrate it somewhere and you might well need to migrate their user settings too.  To achieve this you will want to use USMT 4.0  (User State Migration Tool) which is a component of WAIK.  USMT allows you to migrate users settings and files by either copying the files off the PC to a network share (which you might want to do it you want to take the opportunity to create a point in time backup of the users stuff) or to use hard link migration.  Hard link migration is cool!  It basically allows you to mark files to persist on the hard disk during migration to Windows 7 which saves you time and space by not having to move the files to a network share and back to the target PC again.  If you have technically savvy, or independent users you might want to use the Windows Easy Transfer too built into Windows 7 to transfer the files and settings as USMT isn’t user configurable so it’s conceivable you could miss stuff.  It is however the best approach to use en masse.

The apps…

Application compatibility is your only other real consideration.  You need to be sure that all the applications you need to deploy on your Windows 7 PCs will work on those PCs.  Again for that there’s a tool, ACT (Application Compatibility Toolkit) which can analyse your environment and tell you what applications are compatible and where they aren’t you can then workout a remediation strategy.  For example you could virtualise the application with XP mode and Virtual PC or App-V or if required with Med-V create an entirely virtualised desktop.

Why Dynamic deployment matters

Dynamic deployment really matters when you take application and data migration into consideration because the chances are that you can’t deploy purely to green field (new laptops and new users).  In fact you’ll probably have three deployment types as a minimum:

  • New – a new user and a new laptop = nothing to migrate
  • Replacement – an existing user and a new laptop = data and possibly apps to migrate
  • Refresh – an existing user and an existing laptop = data and apps to migrate

In addition to those different scenarios your users probably have their own individual application requirements and if you went for a purely imaged based route you wouldn’t be able to install applications as needed and you’d have multiple images and quite a management problem.  Finally you will want the advantages of dynamic deployment to help manage driver and patch updates without having to rebuild your image constantly.

Summary in a picture

Finally I thought I’d try to simplify with the use of a picture, let me know if it works for you or not…it doesn’t cover everything but it tells part of the story.

Understanding Windows 7 Deployment Backwards

Key resources to help you develop skills

MDT – Microsoft Deployment Toolkit – the easiest way to do a dynamic Windows 7 deployment

WAIK – Windows Automated Install Kit – mainly provides a tool set for the likes of MDT but you can use the tooling directly

MAP – Microsoft Assessment Planning Toolkit – can be used to understand your environment before deploying

WDS – Windows Deployment Services – you’ll use this for basic over the network installs and to provide PXE boot functionality.

USMT – User State Migration tool- for migrating users files and settings automagically

Springboard – THE place to learn about Windows 7 deployment.

Free eBook: Deploying Windows 7 Essential Guidance from the Windows 7 Resource Kit and TechNet Magazine – if you need all the in depth details, this is brilliant

How we did it, deploying Windows 7 at Microsoft

Understanding Windows 7 Deployment Backwards

Wally Mead at WMUG London 1st Nov on SCOM 2007

One for all the deployment and SCOM geeks out there.  If you can’t make our Springboard Tour event at Microsoft’s campus in Reading then perhaps you can make an event in London (map, directions) with Wally Mead, Sr. Program Manager for Microsoft Systems Center Configuration Manager 2007 giving a presentation on ConfigMgr 2007 R3 and going over several notable and important features of v.Next.

Also Randy Roffey from Silect presents Silects latest offering, ConfigWise as well as spending some time checking out their other ConfigMgr centric product CP Studio.

Wally Mead at WMUG London 1st Nov on SCOM 2007

Thoughts on OpsMgr: SCOM Operators Basics SuperFlow

Last week this popped up in my twitter feed and I really think it’s worth of some link love, so that’s just what I’m doing. 

Thoughts on OpsMgr: SCOM Operators Basics SuperFlow

It’s on Maarten Goet’s blog, he’s a SCOM MVP and knows far too much about System Center Operations Manager.  The superflow tool he’s talking about here is your perfect resource for training your operators.

Thoughts on OpsMgr: SCOM Operators Basics SuperFlow