Understanding FEP 2010 Deployment Status Collections

Starting from this month, you can either install FEP platform updates through Microsoft Update or standalone FEP hotfix. http://blogs.technet.com/b/configmgrteam/archive/2014/03/27/anti-malware-platform-updates-for-endpoint-protection-will-be-released-to-mu.aspx. The latest FEP platform updates on MU is of version 4.5.0215.0. The latest standalone FEP hotfix is also of version 4.5.0.215.0: http://support.microsoft.com/kb/2952678. You can validating the FEP deployment using dashboard: http://technet.microsoft.com/en-us/library/ff823784.aspx. You might already know that…


System Center Update Publisher 2011 Troubleshoot Series 3: Publish fail when SCUP 2011 is remote and WSUS is using UNC as Content Folder

We saw several reports that SCUP publishing fail under this configuration: SCUP 2011 is installed on a remote machine from WSUS and WSUS is installed to use an UNC path as Content Folder. There’re actually two problems when WSUS is using UNC path as Content Folder. 1. The UNC Content Folder needs to be 2…


System Center Updates Publisher 2011 and Windows Server 2012 R2

Published on configuration manager team blog as well: http://blogs.technet.com/b/configmgrteam/archive/2013/12/11/system-center-updates-publisher-2011-support-statement-update.aspx   System Center Updates Publisher 2011 (SCUP) is supported for use on computers with Windows Server 2012 R2 with the following known limitations: 1. Windows Server 2012 R2 includes Windows Server Update Services (WSUS) 4.1. WSUS 4.1 cannot communicate with WSUS 3.0 and WSUS 4.0.  If…


Step by Step: Install Mobile Device Legacy Client in System Center 2012 Configuration Manager

In System Center 2012 Configuration Manager, there’re multiple ways to manage a device: http://technet.microsoft.com/en-us/library/gg682022.aspx. In this blog, we will give the detailed step by step guidance on how to install the mobile device legacy client. In general, there’re five steps: 1.      Prepare the necessary PKI certificate Follow the link http://technet.microsoft.com/en-us/library/gg699362.aspx for the PKI certificate requirements…


Guidance on install anti-malware platform updates for FEP 2010 SU1 and SCEP 2012 SP1

<updated on 9/18/2013 to update the latest anti-malware platform update link> Configuration Team has released anti-malware platform update for FEP 2010 SU1 and SCEP 2012 SP1 CU2: http://support.microsoft.com/kb/2865173   These updates are server side hotfixes and should be installed on the Configuration Manager Site servers. After you install the updates, you will need to do…


Manage Configuration Manager 2012 Cumulate Update (CU)

Configuration Manager 2012 introduced the Cumulate Update (CU) model for servicing. As you can see, the CU installation executive is a little different from the one of Configuration Manager 2007 updates. For example: CU will not update the Admin Console even though it’s on the same machine CU will generate catalog to be consumed in SCUP…


Sample Script to Update FEP Service Policy

Very occasionally, you may found that an FEP policy called “FEP Service policy” gets applied instead of the policy with highest precedence. “FEP Service Policy” is an undocumented policy. “FEP Service Policy” is not created by default when you install FEP 2010 (with or without Update Rollup 1). It is created when the last FEP…


System Center Update Publisher 2011 and Windows Server 2012

Windows Server 2012 is released recently. System Center Update Publisher 2011 can work well on Windows Server 2012 except for the following known issues: 1. On Windows Server 2012, the WSUS version is 4.0. While on all other OSes, you can only install WSUS 3.0 (with or without service pack). WSUS 3.0 & WSUS 4.0…


Script to Clean expired updates from update lists, packages and deployments

<—My college Kurt has pointed out to me that the code snip to trigger the update synchronization has some problem. So I remove that. As a workaround, you can trigger a full update synchronization from the UI–>   If you use Software Update Point (SUP) in a System Center Configuration Manager 2007 hierarchy, you may…


KB2661254: August Security Release Cycle Will Block RSA Keys Under 1024 Bits – Impact to SCUP 2011

Microsoft recently released a security update to block RSA keys that are less than 1024 bits: KB2661254 http://technet.microsoft.com/en-us/security/advisory/2661254 This update is now released to download center only and not yet be enforced to MU. So customers have some time to review all their certificates used and see if they meet the key length requirement. System…