Stop All Exchange 2013 Services with a Single Command

Don’t get involved with Exchange too much but thought this was a cool command to use to stop all Exchange services in one (or maybe two) attempts.

The scenario was a test Exchange server with all services running on a single machine and needed to stop all services to perform a recovery operation.

Open PowerShell using Run as Administrator and then run this command.

  • get-service | ?{$_.Name -ilike “MSexch*”} | stop-service

If some services fail to stop because dependent services are running just run the command a second time straightaway.

Windows Server Update Services (WSUS) Test URL

No unusual to get the occasional moody WSUS managed-device that will not report and/or update using a correctly configured WSUS server.  The link below is the one I like to use to test the connection from the WSUS managed device to the WSUS web site.

Note:  The test URL below uses my-wsus-box as the server name and 8530 as the configured port for the WSUS web site – change as appropriate.

Note:  If the connection to the WSUS web site is good then a prompt to download wuident.cab should be presented.

http://my-wsus-box:8530/selfupdate/wuident.cab.

Software Update Fails with Error Code 0x80244018 – HTTP/1.1 403 Forbidden by proxy

Windows Server 2016 would not download updates from WSUS server running WSUS v4.0.  Viewing the WindowsUpdate.log the following error was noted:

  • HTTP/1.1 403 Forbidden by proxy

Unable to easily view the IE proxy settings as IE had been disabled by Group Policy on the server.  Fix was to reset the proxy settings using the following command:

  • netsh winhttp reset proxy

How to View a Wireless Network Password

Nice one this…very simple way to view the password for a wireless connection.

Open an Admin Command Prompt and enter the following command:

  • netsh wlan show profiles

The output from this command will include the SSID of the wireless network – make a note of it and include it in the next command replacing xxxx

  • netsh wlan show profile name=xxxx key=clear

The output of this command will include the password in clear text.

Using the SCCM CB Service Connection Point in Offline Mode

Here is a basic description and some notes made during the upgrade of SCCM CB from version 1511 to 1602 using the Service Connection Point (SCP) site system role in Offline Mode.

Assumption

The SCP role has been installed and configured in Offline Mode.

Before Starting

  • The procedures below use the serviceconnectiontool.exe tool.
  • This tool can be found in a folder on the SCCM Site Server here: ..\Microsoft Configuration Manager\cd.latest\SMSSETUP\TOOLS\ServiceConnectionTool.
  • All commands documented should be run from an admin command prompt at the folder where the serviceconnectiontool.exe resides, in this case C:\Temp\ServiceConnectionTool.
  • If the SCP is installed on a remote server, all the contents of the ..\Microsoft Configuration Manager\cd.latest\SMSSETUP\TOOLS\ServiceConnectionTool folder need to be copied to a folder on the SCP server, e.g. C:\Temp\ServiceConnectionTool.
  • In this case the SCP is on a remote server, with Internet access.  Once the contents of the ServiceConnectionTool folder are copied to the remote server, two subfolders called Data and Packages were created.

The Data folder is for the output files that are to be uploaded.

The Packages folder is for the data downloaded – this folder must be empty for the download to even start.

Main Procdure

Microsoft describe this as a three-step process.

Prepare – run this command to prepare the usage data
  • serviceconnectiontool.exe -prepare -usagedatadest C:\Temp\ServiceConnectionTool\Data\DataUsageData.cab.
Connect – run this command to upload the usage data and download the updates
  • serviceconnectiontool.exe -connect -usagedatasrc C:\Temp\ServiceConnectionTool\Data\DataUsageData.cab -updatepackdest C:\Temp\ServiceConnectionTool\Packages.
Import – run this command to import the updates into SCCM

serviceconnectiontool.exe -import -updatepacksrc C:\Temp\ServiceConnectionTool\Packages.

Installing the Updates
  • Once the updates have been imported they can be seen in the SCCM admin console by navigating to \Administration\Cloud Services\Updates and Servicing.
  • The menu options offer the choices to run the Prerequisite check and Install Update Pack.
  • The Show Status link navigates to \Monitoring\Overview\Site Servicing Status where the Show Status menu option provides progress information.

Notes

  • The output of the DataUsageData.cab output file can be viewed by running this command:

serviceconnectiontool.exe -export -dest C:\Temp\ServiceConnectionTool\Data\UsageDataExport.csv.

  • Once the update has been successfully installed a prompt to upgrade the admin console appears if the Show Status option is selected in the \Monitoring\Overview\Site Servicing Status pane.
  • Clients can be upgraded using Client Push or the automatically if the Upgrade all clients in the hierarch using production client check box is selected under \Administration\Overview\Site Configuration\Sites and selecting the Hierarchy Settings menu option, then the Client Upgrade tab.

References

https://technet.microsoft.com/en-us/library/mt691532.aspx.

As always thanks to Niall Brady for this much more detailed description and screenshots https://www.niallbrady.com/2016/01/08/how-can-i-use-updates-and-servicing-in-offline-mode-in-system-center-configuration-manager-current-branch.

 

SCCM 1511 Computer Automatic Approval Not Working

Scenario

  • Clean SCCM 1511 install.

Problem

  • Noticed in the SCCM Admin Console that all the domain-connected clients were ‘waiting approval’ even though he Hierarchy Settings were correctly configured to automatically approve computers in trusted domains (right-click the Sites node under Site Configuration in the Administration workspace).

Root Cause

  • IIS on the Management Point did not have Windows Authentication enabled.

Solution

  • Enable Windows Authentication in IIS and restart all affected client agents.

Note:  Check all SCCM virtual directories have Windows Authentication enabled once enabled at server level.

SCCM 1511 Only User and Machine Policy Evaluation Actions Shown in Control Panel

Scenario

  • Clean SCCM 1511 install.

Problem

  • Only User and Machine Policy Evaluation actions shown in Control Panel on all clients.

Root Cause

  • IIS on the Management Point did not have Windows Authentication enabled.

Solution

  • Enable Windows Authentication in IIS and restart all affected client agents.

Note:  Check all SCCM virtual directories have Windows Authentication enabled once enabled at server level.