Steps to Enable Multi-Factor Authentication for an Individual User

Joe Kuster

Log into Azure with admin credentials

Open Active Directory

clip_image002

Click on the Domain you want to manage

clip_image004

Click on Users

Click on Manage MultiFactor Auth

clip_image006

Select the Desired user to enable

clip_image008

Click Enable

clip_image010

Click Enable multi-factor auth

clip_image012

The next time the user logs in they will be prompted to configure Multi-Factor Authentication (MFA)

clip_image002[4]

clip_image004[4]

The user will then be asked to verify and log in again using MFA

clip_image005

New Azure RMS compatible apps!

Joe Kuster

Sometime in the last week, Microsoft silently added a few new apps including TouchDown which offers enterprise email capabilities on Android, iOS and Samsung Knox. One of the most troubling issues for Azure RMS has been the lack of non-Office apps and a complete lack of anything for mobile RMS, so this is great news.

2014-11-13 07_40_35-Microsoft RMS

A new version of the RMS Sharing app was also pushed out today.

https://portal.aadrm.com/home/download

Configuration Manager build fails with “Recovery” 0xc0000428

Joe Kuster

When building a Windows 8 or 8.1 VM, most commonly when running a build and capture task sequence, you may encounter the following:

 

skitch

Recovery

Your PC needs to be repaired

The operating system couldn’t be loaded because the digital signature of a file couldn’t be verified.

File:\windows\System32\Drivers\WimFsf.sys

Error code: 0xc0000428

You’ll need to use the recovery tools on your installation media. If you don’t have any installation media (like a disc or USB device), contact your system administrator or PC manufacturer.

Press Enter to try again

Press F8 for Startup Settings

 

Solution:

Your boot image’s defined scratch space is too large for the virtual machine’s startup memory. Increase to at least 1GB and retry.

Office Outlook / Excel Interop calls breaking (solved)

Joe Kuster

 

Background: I had a client who was using Office 2010, but after deploying Lync 2013 standalone into their environment, various Office related issues kept cropping up. It turns out that when any standalone office product is installed, it created the interoperability calls for the rest of the suite. This would lead to Office trying to pass actions from one application (Word to Outlook for example) using incorrect paths.

This was identified when a user was using the built in Send Worksheet function and was receiving errors. She could use the send workbook fine, it only cropped up when trying to send the current active worksheet. This error seems to be present in all builds (verified on my machine as well).

image003

image004

Steps to replicate

1.       Add the “Send to Mail Recipient” command to the toolbar

2.       Click on “Send to Mail Recipient” Selecting “Send the current sheet as the message body”

Deleting the following key seems to solve the issue as long as the correct Outlook 2010 (Version 14.0) key is left intact:

I couldn’t find this fix documented anywhere but lots of people have the issue with no resolution. It may not be the best approach, but it works.

The below Office 2013 registry keys that should be removed for optimal InterOp call compatibility if only Lync 2013 is installed:

 

 

Excel

HKEY_CLASSES_ROOT\TypeLib\{00020813-0000-0000-C000-000000000046}\1.8

 

Word

HKEY_CLASSES_ROOT\TypeLib\{00020905-0000-0000-C000-000000000046}\8.6

 

Outlook

HKEY_CLASSES_ROOT\TypeLib\{00062FFF-0000-0000-C000-000000000046}\9.5

 

PowerPoint

HKEY_CLASSES_ROOT\TypeLib\{91493440-5A91-11CF-8700-00AA0060263B}\2.b

 

If conflicts crop up elsewhere, the following should be considered for removal:

Object Library

HKEY_CLASSES_ROOT\TypeLib\{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}\2.7

 

Office Graph

HKEY_CLASSES_ROOT\TypeLib\{00020802-0000-0000-C000-000000000046}\1.8

 

Active X Data Objects

HKEY_CLASSES_ROOT\TypeLib\{B691E011-1797-432E-907A-4D8C69339129}\6.1

 

WECAPI

HKEY_CLASSES_ROOT\TypeLib\{B8812619-BDB3-11D0-B19E-00A0C91E29D8}\5.5

 

Outlook View Control

HKEY_CLASSES_ROOT\TypeLib\{0006F062-0000-0000-C000-000000000046}\1.1

 

OneNote

HKEY_CLASSES_ROOT\TypeLib\{0EA692EE-BB50-4E3C-AEF0-356D91732725}\1.0

 

Project

HKEY_CLASSES_ROOT\TypeLib\{A7107640-94DF-1068-855E-00DD01075445}\4.7

 

InfoPath

HKEY_CLASSES_ROOT\TypeLib\{FD34A380-115F-43CA-8D6F-BBD45FD6F828}\4.0

 

MBAM 2.5 Installation Notes (placeholder)

Joe Kuster
Create Cache is no longer installed, so it cannot be optimized.
Config Manager integration issues
MBAM supported computers collection query has an error in the TPM query – change to like “%1.2%” and it resolves the issue.
Change timing from incremental and 12 hours to every hour
Change baseline compliance evaluations from 12 hours to every 30 minutes
Ensure both server services are cycled and client hardware inventory is cycled after MOF updates via sms_def.mof and configuration.mof

Configuration Manager task sequence error – Drive Sector Not Found during user state capture

Joe Kuster

Was at a client site and received an unexpected error “Drive Sector not found” when doing a in-place refresh task sequence. The disk looked good, was bootable, and no issues were found with a chkdsk. A bit of Googling found nothing that looked relevant. Turns out, the client had removed the normal permissions from the State Migration share. Adding them back fixed it on the spot.

Upgraded to iOS 8 and can’t get AirPlay to work? Try scrolling…

Joe Kuster

I use an iPad Mini to demo Microsoft Enterprise Mobility Suite and it’s worked quite well to showcase Intune’s capabilities. However, after upgrading to iOS8, my ability (seemingly) to use AirPlay to mirror the screen for my training demos quit. I use tried both of my go to solutions, AirServer and Reflector, with no luck. I could see my PC’s name, but nothing would show up. Turns out, Apple just made a counter intuitive change in the way that it displays the AirPlay menu – see below:

Swiping up to show settings and selecting AirPlay would show the following menu. Normally I’d select my laptop from the list (X79 in this case) and a toggle switch would be displayed to turn mirroring on or off. However, after iOS 8, that isn’t what happens.

2014-11-05 20_01_06-Inbox - Joe.Kuster@catapultsystems.com - Outlook

However, if you scroll up (there is no indication that this is necessary) you get the mirror on/off button.
Airplay options

 

If I hadn’t had a spare VGA to Lightning adapter, this would have been disastrous for my Microsoft Roadmap Briefing demos.

Useful Configuration Manager Queries

Joe Kuster
Collection Query All 32 Bit Clients
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_G_System_COMPUTER_SYSTEM.SystemType = “X86-based PC”
Collection Query All 64 Bit Clients
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_G_System_COMPUTER_SYSTEM.SystemType = “X64-based PC”
Collection Query All systems with Configuration Manager 2012 console installed
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceId = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName like “%System Center 2012 Configuration Manager Console%”
SQL Server Collection Query
select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, SMS_R_System.Client from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId inner join SMS_G_System_ADD_REMOVE_PROGRAMS_64 on SMS_G_System_ADD_REMOVE_PROGRAMS_64.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName like “Microsoft SQL Server 200%” or SMS_G_System_ADD_REMOVE_PROGRAMS_64.DisplayName like “Microsoft SQL Server 20%”
All Workstations with Solid State Drives [Intel, OCZ, Kingston]
select
sys.netbios_name0, dsk.model0, dsk.mediatype0, Name0, Size0, sys.user_name0, temp.model0
from v_r_system_valid sys
INNER JOIN v_GS_DISK dsk ON sys.resourceid = dsk.resourceid AND
dsk.MediaType0 LIKE ‘%Fixed hard disk%’ AND
(dsk.model0 LIKE ‘%intel%’ OR dsk.model0 LIKE ‘%kingston%’ OR dsk.model0 LIKE ‘%ocz%’ )
LEFT OUTER JOIN
(select GSC.Manufacturer0 as [Manufacturer], GSC.model0,GSC.Domainrole0 as [Machine Role],
GSC.Domainrole0, GSC.resourceID, v_GS_System_Enclosure.chassistypes0
from v_GS_COMPUTER_SYSTEM as GSC
join v_GS_System_Enclosure on GSC.resourceID = v_GS_System_Enclosure.resourceID
) as temp on temp.resourceID = sys.resourceID
WHERE sys.Operating_System_Name_and0  like ‘%workstation%’
All Windows Workstations
SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.OperatingSystemNameandVersion like ‘Microsoft Windows NT%Workstation%’
All Lenovo Clients
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_G_System_COMPUTER_SYSTEM.Manufacturer like “Lenovo”
All Systems with HyperV Role
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System  inner join SMS_G_System_SERVICE on SMS_G_System_SERVICE.ResourceID = SMS_R_System.ResourceId  where SMS_G_System_SERVICE.DisplayName like “Hyper-V Virtual Machine Management”
All HyperV or Vmware VMs
select SMS_R_System.Name, SMS_G_System_COMPUTER_SYSTEM.Manufacturer, SMS_R_System.SMSAssignedSites, SMS_R_System.IPAddresses, SMS_R_System.IPSubnets, SMS_R_System.OperatingSystemNameandVersion, SMS_R_System.ResourceDomainORWorkgroup, SMS_R_System.LastLogonUserDomain, SMS_R_System.LastLogonUserName, SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.NetbiosName
from  SMS_R_System
inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId
where SMS_G_System_COMPUTER_SYSTEM.Manufacturer in (“VMware, Inc.”,”Microsoft Corporation”)
(Note, may have false positive with Surface tablets)
Application Collection Structure & Reusable Queries
Use as general template:
– Adobe
    – Acrobat Pro 9
        – All Workstations with Adobe Acrobat Pro 9 [Query based membership for reporting purposes]
        – Approved for Acrobat Pro 9 [Deployments managed here through manual or query based memberships – target advertisement / deployment here]
        – Unapproved Installs of Acrobat Pro 9 [All workstations which have the software, but are not in approved group, can be used to force uninstalls or assist in true ups]
        – Acrobat Pro 9 – Pending Installations [All workstations in Approved collection, but where it has not been detected]
        – Acrobat Pro 9 – Pending Uninstallations [If desired, target uninstall advertisement / deployment here]
    – Acrobat Pro X
        – [structure repeats….]
Query examples to support above structure:
Acrobat Pro X
        – All workstations with Acrobat pro X
Limit to: HR-Workstations-All
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_INSTALLED_SOFTWARE on SMS_G_System_INSTALLED_SOFTWARE.ResourceId = SMS_R_System.ResourceId where SMS_G_System_INSTALLED_SOFTWARE.ProductName like “Adobe Acrobat X Pro%”
        – Approved for Acrobat pro X
Membership: Direct Add
            – Pending Acrobat pro X Installs
Limited to: Approved for Acrobat Pro X
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_G_System_COMPUTER_SYSTEM.ResourceID not in (select SMS_R_SYSTEM.ResourceID from SMS_R_System inner join SMS_G_System_INSTALLED_SOFTWARE on SMS_G_System_INSTALLED_SOFTWARE.ResourceId = SMS_R_System.ResourceId where SMS_G_System_INSTALLED_SOFTWARE.ProductName like “Adobe Acrobat X Pro%”)
        – Unapproved Acrobat Pro X Installs
Limited To: All Workstations with Acrobat Pro X
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.ResourceId not in (select ResourceId from SMS_CM_RES_COLL_HR200093)
    – Adobe Reader Uninstalls
Limited to: All Workstations with Acrobat Pro X
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.ResourceId in (select SMS_R_System.ResourceId from  SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceId = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName like ‘Adobe Reader%’)
Application / Software Inventory Queries
Adobe Flash  (Systems without Specific Version)
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,
SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,
SMS_R_SYSTEM.ResourceDomainORWorkgroup,
SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on
SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId where
SMS_G_System_COMPUTER_SYSTEM.Name not in (select SMS_G_System_COMPUTER_SYSTEM.Name from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM
on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId inner join
SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID =
SMS_R_System.ResourceId where
SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName like “%Flash Player%” and
SMS_G_System_ADD_REMOVE_PROGRAMS.Version = “10.1.82.76”)
Adobe Flash  (Systems With Any Version)
select SMS_G_System_COMPUTER_SYSTEM.Name from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM
on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId inner join
SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID =
SMS_R_System.ResourceId where
SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName like “%Flash Player%”
Adobe Flash  (Systems with Specific Version)
select SMS_G_System_COMPUTER_SYSTEM.Name from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM
on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId inner join
SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID =
SMS_R_System.ResourceId where
SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName like “%Flash Player%” and
SMS_G_System_ADD_REMOVE_PROGRAMS.Version = “10.1.82.76”
Bitlocker Status Collection Query
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_ENCRYPTABLE_VOLUME on SMS_G_System_ENCRYPTABLE_VOLUME.ResourceId = SMS_R_System.ResourceId where SMS_G_System_ENCRYPTABLE_VOLUME.ProtectionStatus = 0
Note:
· Protection Status 0 : Protection OFF
· Protection Status 1 : Protection ON (Unlocked)
· Protection Status 2 : Protection ON (Locked)
Subnet Collection Query
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.IPSubnets = “10.10.0.1”
Note: “10.10.0.1” = Subnet Gateway
SCCM Query Active Directory AD OU Collection Query
select * from SMS_R_System where SMS_R_System.SystemOUName = “MyDomain.com/OU/SubOU”
SCCM All Laptops Collection Query
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_SYSTEM_ENCLOSURE on SMS_G_System_SYSTEM_ENCLOSURE.ResourceID = SMS_R_System.ResourceId where   SMS_G_System_SYSTEM_ENCLOSURE.ChassisTypes in ( “8”, “9”, “10”, “14” )
SCCM Needs Rebooted Post Patches Collection Query
2007 only?
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System  inner join SMS_G_System_PatchStatusEx on SMS_G_System_PatchStatusEx.ResourceID = SMS_R_System.ResourceId where SMS_G_System_PatchStatusEx.LastStateName = “reboot pending”
SCCM Systems w/ IIS Enabled Collection Query
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_SERVICE on SMS_G_System_SERVICE.ResourceId = SMS_R_System.ResourceId where SMS_G_System_SERVICE.Name = “W3SVC”
All Dell Systems
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_G_System_COMPUTER_SYSTEM.Manufacturer like “Dell%”
SCCM Workstations w/ Win7 Collection Query
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.OperatingSystemNameandVersion = “Microsoft Windows NT Workstation 6.1”
SCCM All Windows Servers Collection Query
select * from sms_r_system where OperatingSystemNameAndVersion like ‘Microsoft Windows NT%Server%’
SCCM Windows Server (Non-Core) OS Collection Query (2007 only)
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.ResourceId not in (select ResourceId from [ResourceID of Core Server Query – format should look like SMS_CM_RES_COLL_HR20005F])
SCCM Windows Server Core Collection Query
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_OPERATING_SYSTEM on SMS_G_System_OPERATING_SYSTEM.ResourceID = SMS_R_System.ResourceId where SMS_G_System_OPERATING_SYSTEM.OperatingSystemSKU = “12” OR   SMS_G_System_OPERATING_SYSTEM.OperatingSystemSKU = “13” OR   SMS_G_System_OPERATING_SYSTEM.OperatingSystemSKU = “14” OR   SMS_G_System_OPERATING_SYSTEM.OperatingSystemSKU = “42”
SCCM Physical Server Collection Query
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_SYSTEM_ENCLOSURE on SMS_G_System_SYSTEM_ENCLOSURE.ResourceID = SMS_R_System.ResourceId where SMS_G_System_SYSTEM_ENCLOSURE.ChassisTypes = “23” or SMS_G_System_SYSTEM_ENCLOSURE.ChassisTypes = “17”
post1

5 Questions for MicrosoftMercenary.com

Joe Kuster

5 Questions for the Microsoft Mercenary Blog

1. Who are you?
Joe Kuster MCITP, MCTS: You can learn more about my work on LinkedIn
 
2. Do you work for Microsoft?
No, I’m a consultant who focuses solely on the Microsoft Technology stack, but I can usually be found at the monthly Microsoft Enterprise Management User Group in the Denver Microsoft building. If you are in the Denver Metro and work with, or are interested in working, with System Center, Hyper-V, App-V or similar technologies in the Microsoft lineup, I highly encourage dropping by.
3. What are your areas of focus?
I work predominately with the System Center Suite with a specialization in Configuration Manager.
4. What type of content do you hope to provide and will there be funny pictures?
Anything useful to those working in the System Center suite or Microsoft focused Private Cloud functionality. Also, yes.
5. Can I hire you?
I work for Catapult Systems, a top tier Microsoft Consulting Company with many accolades including being a highly coveted Microsoft National Systems Integrator. If you are in need of IT Consulting, especially in the Microsoft ecosystem, you can hire some amazing talent there, including myself. This is an unofficial blog, so none of my posts reflect the views or opinions of my employer.
All trademarks are rights of their respective owners.

post1