SCCM 2012 User Device Affinity and Windows XP

No Gravatar

Referencing the Microsoft TechNet article titled How to Manage User Device Affinity in Configuration Manager @

How to configure the site to automatically create user device affinities

Use the following procedure to enable your Configuration Manager site to automatically create user device affinities from usage data that is reported by client devices.

Configuration Manager reads data about user logons from the Windows Event log. To be able to automatically create user device affinities, you must enable the following two settings from the local security policy on client computers to store logon events in the Windows Event log.

  • Audit account logon events
  • Audit logon events

You can use Windows Group Policy to configure these settings.


Be careful implementing these policies in Windows XP.  By default the Event Log retention policy is 7 days and it is very likely to fill up the Security Event Log.  Standard users will not be able to logon if the event log is full.  To prevent this problem, also implement this policy in the GPO path Computer Configuration \ Policies \ Windows Settings \ Security Settings \ Event Log

  • Retention Method for security log = Overwrite events as needed

I also suggest making the event logs larger so sufficient data will exist for UDA.  I recommend 5-20 MB for the Event Logs.  This can be scripted and deployed via SCCM or just lock the value using this GPO

  • Maximum security log size = 20480 KB

April 3, 2013

Posted In: ConfigMgr

Notepad++ and syntax highlighting for non-default file extensions

No Gravatar

Thanks to this article ( for helping me fix an annoyance with Notepad++.

I often use Notepad++ as a lightweight editor for scripts.  However, some script files like .wsf are not a recognized language and I have to manually select Language | VB from the menu bar.

As Matt Blodgett points out, you can add custom extensions to a language by editing the settings in Settings | Style Configurator… | <select the Language> | <type User ext.> | Save & Close.

It’s very easy, just not obvious.  Matt wrote his article 5 years ago and .wsf still hasn’t been added as a VB of Javascript language by default. 🙁

March 6, 2013

Posted In: Scripting

SQL 2012, BIDS, and SSDT

No Gravatar

With SQL Server 2012 Business Intelligence Development Studio is replaced with SQL Server Data Tools.

BIDS = Business Intelligence Development Studio

SSDT = SQL Server Data Tools (

If you customize SQL Reporting Services reports for SCCM 2007 or ConfigMgr 2012 in you’ll probably want some GUI tool to help you edit or design the report.  Microsft ReportBuilder 2.0/3.0 is quasi built-in to Reporting Services and allows creating and editing of RDL files in a limited manner.  If you need a powerful tool to create a complex report you’ll likely turn to BIDS.  However, BIDS is now depricated and beginning with SQL 2012 SSDT is the tool going forward.

SSDT utilizs the Microsoft Visual Studio 2010 SP1 or 2012 Shell which is very nice.

A word of caution: It appears that SSDT comes in several flavors and not all support Reporting Services.  Be sure to install SQL Server Data Tools from the SQL Server 2012 SP1 install soruce and NOT the stand-alone / downloadable installer.

Some useful links:

March 1, 2013

Posted In: ConfigMgr, ConfigMgr 2007, SQL Reporting

Case Sensitive comparison in SQL

No Gravatar

The default collation that Microsoft SQL uses (and requried collation for SCCM) is case-insensitive.  Here are some tips for performing a case-sensitive comparison despite the case-insensitve collation.

Convert data to binary

[cc lang=’sql’ line_numbers=’false’]SELECT * FROM MyTable
WHERE CAST(Value1 AS varbinary(255)) = CAST(Value1 AS varbinary(255))[/cc]

Using the COLLATE clause to dictate the case sensitiveness of the query

[cc lang=’sql’ line_numbers=’false’]SELECT * FROM MyTable
WHERE Value1 COLLATE SQL_Latin1_General_CP1_CS_AS = Value2 COLLATE SQL_Latin1_General_CP1_CS_AS[/cc]

Using BINARY_CHECKSUM function

[cc lang=’sql’ line_numbers=’false’]SELECT * FROM MyTable

Thanks to Vyas for most of the info and some other idea:

February 15, 2013

Posted In: T-SQL

SCCM 2012 SP1 refresh / KB2801987

No Gravatar

The original ISO for Microsoft System Center 2012 Configuration Manager SP1 contained a nasty little bug that prevented the ConfigMgr client from installing.

The problem was that the authenticode signature for MicrosoftPolicyPlatformSetup.msi, a required component of the client agent, was expired.

I discovered a few others had experienced the same thing (Client push fails with Authenticode Signature error).

Thankfully Microsoft only wasted about 2 weeks fixing the problem.  You can read additional details about the situation at myITforum, the official KB article, and Windows-Noob.  If you downloaded the original ISO, trash it and download the updated one.

Below is a table of the original ISO and the updated ISO from  per my experience.

Edition RTM
Description ISO of Original release of SCCM 2012 with SP1 integrated
Released ~ 2013/01/01
File Name SW_DVD5_Sys_Ctr_2012w_SP1_Config_Mgr_EndPt_Protection_MultiLang_-2_X18-84756.ISO
File Size 948,314,112
MD5 Hash 53e35591d07de3add537de11056afdc2
CRC32 73c129a0
SHA1 ab930f8fc127d00c510a5fd73038cf16dcfd2290
SHA-256 deda950a915d6a3548722f55ca51af3139bd9c69307b25088777f53908d27255
SHA-384 966842e033d56de87c5b5195d0fac75d3da8e53ec1f689fc1ab3d1e552b7ad6f21e86ddadfbc399c058ade725b143718
SHA-512 ab28694d0495d49620de70d287db972831f2903d1061b20d2324ef603ead56f19a8d019a52abc037bf448970ec53c63bd05013caf2454a5b9ad5889af6042b34


Edition CU0 / Refresh 1 / Cumulative Update 0 / ~whatever~
Description ISO of Refresh release of SCCM 2012 with SP1 integrated which contains KB2801987
Released ~ 2013/01/15
File Name SW_DVD5_SysCtr_2012_w_SP1_Conf_Mgr_and_EndPt_Prot_for_Windows-MultiLang_X18-58783.ISO
File Size 948,322,304
MD5 Hash 069c24f62a51b7296d54c1529808d64e
CRC32 06a2806c
SHA1 877c0b77607e7a580683d8b05d8da7dc548f3bb3
SHA-256 f7b1b5932e7fcd8f32cd1632c0a7a0c55334b9d0600a7a12d40ad8454e907a12
SHA-384 ba59c36e4c4e829dc8168e15ca9489867f1b05ddf4a12cefcf77072e99db0df1e76586af07a52d49a71957ab11b4b374
SHA-512 c71f29244ae84d14721e71ec7294e1450d11e7e1dfbedd284e5f82999176e0260252e5dac6219aae03f8c456c008b8b0655fd2a22d2ffc44a60c628a1d879f86

February 4, 2013

Posted In: ConfigMgr