ConfigMgr 2007

18 February 2010

For inboxes information to export to excel for single system complete list

Script for complete Inboxes checks to export the results to Excel file

sStartPath = "\\your sccmservername\SMS_smssitecode\inboxes\"
Set oFSO = CreateObject("Scripting.FileSystemObject")

Set objExcel = CreateObject("Excel.Application")
objExcel.Visible = True
objExcel.Workbooks.Add
intRow = 2

objExcel.Cells(1, 1).Value = "Directory"
objExcel.Cells(1, 2).Value = "Count"

ListFolders(sStartPath)

Sub ListFolders(sPath)
Set oFolder = oFSO.GetFolder(sPath)
objExcel.Cells(intRow, 1).Value = oFolder.Path
objExcel.Cells(intRow, 2).Value = oFolder.Files.Count
intRow = intRow + 1

For Each oFldr In oFolder.SubFolders
ListFolders oFldr.Path
Next
End Sub

Set sStartPath = Nothing
Set objExcel = Nothing

objExcel.Range("A1:B1").Select
objExcel.Selection.Interior.ColorIndex = 19
objExcel.Selection.Font.ColorIndex = 11
objExcel.Selection.Font.Bold = True
objExcel.Cells.EntireColumn.AutoFit

For inboxes information to export to excel for single system complete list

Delete script for bad inboxes files for SMS / SCCM

DEL /Q \\MYSCCMSERVERNAME\sms_sitecode\inboxes\auth\dataldr.box\BADMIFS
DEL /Q \\MYSCCMSERVERNAME\sms_sitecode\inboxes\auth\dataldr.box\bad
DEL /Q \\MYSCCMSERVERNAME\sms_sitecode\inboxes\auth\ddm.box\BAD_DDRS
DEL /Q \\MYSCCMSERVERNAME\sms_sitecode\inboxes\auth\ddm.box\bad
DEL /Q \\MYSCCMSERVERNAME\sms_sitecode\inboxes\ddm.box\BAD_DDRS
DEL /Q \\MYSCCMSERVERNAME\sms_sitecode\inboxes\auth\statesys.box\corrupt

save the above as .bat or .cmd file and run it. You need to replace the server name with sccm server name and site code
-------------------
Thanks,

Jonathan Swift - "May you live every day of your life."

Delete script for bad inboxes files for SMS / SCCM

FOR INBOXES SCRIPT DEVELOPED BY me...

date /t >>"D:\SCCM Team\Daily_checks_archive_Reports\INBOXES\BACKLOGS.txt"
ECHO dc1 >>"D:\SCCM Team\Daily_checks_archive_Reports\INBOXES\BACKLOGS.txt"
diruse /* /m "\\MYSCCMSERVERNAME\d$\Program Files (x86)\Microsoft Configuration Manager\inboxes" >>"D:\SCCM Team\Daily_checks_archive_Reports\INBOXES\BACKLOGS.txt"

date /t >>"D:\SCCM Team\Daily_checks_archive_Reports\INBOXES\BACKLOGS.txt"
ECHO P01 >>"D:\SCCM Team\Daily_checks_archive_Reports\INBOXES\BACKLOGS.txt"
diruse /* /m "\\MYSCCMSERVERNAME2\d$\Program Files (x86)\Microsoft Configuration Manager\inboxes" >>"D:\SCCM Team\Daily_checks_archive_Reports\INBOXES\BACKLOGS.txt"

date /t >>"D:\SCCM Team\Daily_checks_archive_Reports\INBOXES\BACKLOGS.txt"
ECHO P02 >>"D:\SCCM Team\Daily_checks_archive_Reports\INBOXES\BACKLOGS.txt"
diruse /* /m "\\MYSCCMSERVERNAME3\d$\Program Files (x86)\Microsoft Configuration Manager\inboxes" >>"D:\SCCM Team\Daily_checks_archive_Reports\INBOXES\BACKLOGS.txt"

date /t >>"D:\SCCM Team\Daily_checks_archive_Reports\INBOXES\BACKLOGS.txt"
ECHO P03 >>"D:\SCCM Team\Daily_checks_archive_Reports\INBOXES\BACKLOGS.txt"
diruse /* /m "\\MYSCCMSERVERNAME4\d$\Program Files (x86)\Microsoft Configuration Manager\inboxes" >>"D:\SCCM Team\Daily_checks_archive_Reports\INBOXES\BACKLOGS.txt"

date /t >>"D:\SCCM Team\Daily_checks_archive_Reports\INBOXES\BACKLOGS.txt"
ECHO P04 >>"D:\SCCM Team\Daily_checks_archive_Reports\INBOXES\BACKLOGS.txt"
diruse /* /m "\\MYSCCMSERVERNAME5\d$\Program Files (x86)\Microsoft Configuration Manager\inboxes" >>"D:\SCCM Team\Daily_checks_archive_Reports\INBOXES\BACKLOGS.txt"

You need to download the DIRUSE.exe file or get it from 2k3 support tools
-------------------
Thanks,

Pablo Picasso - "Computers are useless. They can only give you answers."

FOR INBOXES SCRIPT DEVELOPED BY me...

You need to download the DIRUSE.exe file or get it from 2k3 support tools
-------------------
Thanks,

Pablo Picasso - "Computers are useless. They can only give you answers."

For Windows 2003 Server Event viewer archive script

For Windows 2003 Server Event viewer archive script, FYI! in 2k8 you can set archive option but not in 2k3 or below 2k8 servers

strArchiveFolder = "C:\BckEvt"
ServerName = "."

Set WS = CreateObject("Wscript.Shell")
Set FSO = CreateObject("Scripting.FileSystemObject")

DateString = CurrentDate()

Purge = True

on error resume next
StartTime = Now
Output "---------------------------------"
OutPut "Started at: " & CStr(Now)
Output ""
Set System = GetObject("winmgmts:{(Backup,Security)}\\" & ServerName & _
"\root\CIMV2")
If Err.Number = 0 Then
Set colLogs = System.ExecQuery("select * from Win32_NTEventLogFile",,48)

For Each refLog In colLogs
LogName = ServerName& "_" & LogFileName(refLog.LogFileName) & _
"_" & DateString

If FSO.FileExists(strArchiveFolder & "\" & LogName & ".evt") Then _
FSO.DeleteFile(strArchiveFolder & "\" & LogName & ".evt")
If Purge Then
RetVal = reflog.ClearEventlog(strArchiveFolder & "\" & LogName & ".evt")
Else
RetVal = reflog.BackupEventlog(strArchiveFolder & "\" & LogName & ".evt")
End If
If RetVal = 0 Then
Output vbTab & "Log was archived in .evt format: " & LogName & ".evt"
If Purge Then Output vbTab & "All events were cleared from the log"
Else
Output vbTab & "Error while archiving in .evt format."
End If
Next
Else
Output vbTab & "Failed connect to the server"
End If
Set colLogs = Nothing
Set refLogs = Nothing
Set System = Nothing

Output "----------------------------------------"
OutPut "Finished at: " & CStr(Now)
Output ""
Output ""
Set WS = Nothing
' FullLog.Close ???FullLog=unknown
Set FullLog = Nothing
Set FSO = Nothing

Function CurrentDate
Today = Date
If Month(Today) < 10 Then
CurrentDate = "0" & CStr(Month(Today))
Else
CurrentDate = CStr(Month(Today))
End If
If Day(Today) < 10 Then
CurrentDate = CurrentDate & "0" & CStr(Day(Today))
Else
CurrentDate = CurrentDate & CStr(Day(Today))
End If
CurrentDate = CurrentDate & CStr(Year(Today))
If Hour(Time) < 10 Then
CurrentDate = CurrentDate & "0" & CStr(Hour(Time))
Else
CurrentDate = CurrentDate & CStr(Hour(Time))
End If
End Function

Function LogFileName(LogName)
Select Case LogName
Case "Application"
LogFileName = "app"
Case "Directory Service"
LogFileName = "dir"
Case "DNS Server"
LogFileName = "dns"
Case "File Replication Service"
LogFileName = "rep"
Case "Security"
LogFileName = "sec"
Case "System"
LogFileName = "sys"
End Select
End Function

Sub Output(Text)
' wscript.echo text
' FullLog.writeline text ???FullLog=unknown
End Sub

-------------------
Thanks,

Mike Ditka - "If God had wanted man to play soccer, he wouldn't have given us arms."

For Windows 2003 Server Event viewer archive script

For Windows 2003 Server Event viewer archive script, FYI! in 2k8 you can set archive option but not in 2k3 or below 2k8 servers

strArchiveFolder = "C:\BckEvt"
ServerName = "."

Set WS = CreateObject("Wscript.Shell")
Set FSO = CreateObject("Scripting.FileSystemObject")

DateString = CurrentDate()

Purge = True

For Each refLog In colLogs
LogName = ServerName& "_" & LogFileName(refLog.LogFileName) & _
"_" & DateString

Output "----------------------------------------"
OutPut "Finished at: " & CStr(Now)
Output ""
Output ""
Set WS = Nothing
' FullLog.Close ???FullLog=unknown
Set FullLog = Nothing
Set FSO = Nothing

Sub Output(Text)
' wscript.echo text
' FullLog.writeline text ???FullLog=unknown
End Sub

-------------------
Thanks,

Mike Ditka - "If God had wanted man to play soccer, he wouldn't have given us arms."

17 February 2010

Tool to create MOF file

Tool to create MOF file

http://myitforum.com/cs2/blogs/skissinger/archive/2009/04/13/mark-cochrane-s-regkeytomof.aspx

Mark Cochrane (System Center Configuration Manager MVP) released an excellent tool to assist with your custom MOF snippet creations, RegkeyToMof. Grab it from here: http://www.myitforum.com/inc/upload/12336RegKeyToMOF.zip

To use it, Run regkeytomof on a box which has the regkeys you want to gather, and browse in the top window to the Regkey Location, until you see the keys & values you want on the right. Then below in the middle-right, give it a ClassGroup (like CUSTOM) and a ClassName (this must be unique for each custom mof edit you do--but the ClassGroup of CUSTOM can always be CUSTOM) then just copy & paste the results for configuration mof & sms_def.mof
If there are values that you don't want to see in your database, before you save sms_def.mof, just change those from TRUE to FALSE. (Leave them defined, but change to FALSE, it needs to be consistent)

For example, I've been meaning to make up a Microsoft Forefront client mof edit, similar to the ones available for McAfee and Symantec, for client AV signature info. Mark's tool made it much easier. If you look at the below screenshot, I just browsed until I found the regkeys I wanted (in Software\Microsoft\Microsoft Forefront\Client Security\1.0\AM\Signature Updates. On the right, I could see there were entries for AVSignatureVersion and ASSignatureVersion. Looks like just what I wanted!

In the middle, I changed the Classgroup to CUSTOM. I always use CUSTOM for my custom edits. That helps me to differentiate anything I've done from a 'real' mof snippet from Microsoft. If you like, you could use any name; but I would keep it short and consistent, and no spaces. i.e., if you work for ACME Corporation, use something like ACMECorp. For ClassName, this must be unique for each custom edit you make. For example, let's say that one day there will be a Microsoft Forefront version 2.0, and that clients' info goes into a completely different area of the registry. But for a time, I might need to gather both 1.0 keys and 2.0 keys. So I couldn't call both of the ClassNames "MSForefront". That's why in my sample I called it MSForefront1, anticipating that one day there will be a MSForeFront2 I'll want to have. Also, for the ClassName, no spaces. And don't use _ i.e., don't use MS_ForeFront_1.0. I think you *can* use them, but in some places within your database tables/views, you might end up with double _; that just feels messy to me. So avoid the whole thing and don't use spaces or underscores. AND keep it short.

So, cool; I've got my edits. I'm using Configuration Manager, so I need the results from the SCCM Configuration.mof and SCCM sms_def.mof. Now, to check them. Hm... do I really need AVSignatureApplied? I could, I suppose.. but if I *do* want them, if I actually go look at the registry, those binary values are multi binary, not just 1 entry for binary of 0 vs 1. It's hard to programmatically see that with regkeytomof, so it's not already set to be multi; but if I DID want to gather that info, I just need to add the [] to those entries. But actually... those values don't really mean much to me. They aren't in any kind of calendar date format that makes sense to me. So I would likely just change those from TRUE to FALSE anyway. So I'd end up with this. And it only took me about 10 minutes to get that edit together, and make decisions about TRUE vs. FALSE. Easy!

// configuration.mof for MS Forefront 1.0 Client Signatures
#pragma namespace ("\\\\.\\root\\cimv2")
#pragma deleteclass("MSForeFront1", NOFAIL)
[DYNPROPS]
Class MSForeFront1
{
[key] string KeyName;
String EngineVersion;
String AVSignatureVersion;
String ASSignatureVersion;
Boolean ASSignatureApplied[];
Boolean AVSignatureApplied[];
String SignatureLocation;
};
[DYNPROPS]
Instance of MSForeFront1
{
keyname="SystemCenter.fr";
[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Microsoft Forefront\\Client Security\\1.0\\AM\\Signature Updates|EngineVersion"),Dynamic,Provider("RegPropProv")] EngineVersion;
[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Microsoft Forefront\\Client Security\\1.0\\AM\\Signature Updates|AVSignatureVersion"),Dynamic,Provider("RegPropProv")] AVSignatureVersion;
[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Microsoft Forefront\\Client Security\\1.0\\AM\\Signature Updates|ASSignatureVersion"),Dynamic,Provider("RegPropProv")] ASSignatureVersion;
[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Microsoft Forefront\\Client Security\\1.0\\AM\\Signature Updates|ASSignatureApplied"),Dynamic,Provider("RegPropProv")] ASSignatureApplied;
[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Microsoft Forefront\\Client Security\\1.0\\AM\\Signature Updates|AVSignatureApplied"),Dynamic,Provider("RegPropProv")] AVSignatureApplied;
[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Microsoft Forefront\\Client Security\\1.0\\AM\\Signature Updates|SignatureLocation"),Dynamic,Provider("RegPropProv")] SignatureLocation;
};

//sms_def.mof for MS Forefront 1.0 Client Signatures
#pragma namespace ("\\\\.\\root\\cimv2\\SMS")
#pragma deleteclass("MSForeFront1", NOFAIL)
[SMS_Report(TRUE),SMS_Group_Name("MSForeFront1"),SMS_Class_ID("CUSTOM|MSForeFront1|1.0")]
Class MSForeFront1: SMS_Class_Template
{
[SMS_Report(TRUE),key] string KeyName;
[SMS_Report(TRUE)] String EngineVersion;
[SMS_Report(TRUE)] String AVSignatureVersion;
[SMS_Report(TRUE)] String ASSignatureVersion;
[SMS_Report(FALSE)] Boolean ASSignatureApplied[];
[SMS_Report(FALSE)] Boolean AVSignatureApplied[];
[SMS_Report(FALSE)] String SignatureLocation;
};

--
----------------
Thanks
----------------

Tool to create MOF file

Tool to create MOF file

http://myitforum.com/cs2/blogs/skissinger/archive/2009/04/13/mark-cochrane-s-regkeytomof.aspx

--
----------------
Thanks
----------------