PKI Blog

FIM: When products don’t play nice together...

Posted by CSS Technical Team on Jan 24, 2013 10:17:31 AM

As a consultant, one of the primary responsibilities is to deal with strange problems or issues that arise. And inevitably some obscure issue will come to the surface during a demo… Since I specialize in Microsoft’s Forefront Identity Manager combined with a previous life as a Windows Server Engineer, I run a fairly comprehensive virtual development and demo lab with about every mainstream Microsoft Server product deployed across an average of 80 virtual servers. Given the right set of circumstances you’ll find products that just don’t play nice together.

After my failed SSPR password reset demo, I went through the standard troubleshooting check list including configuration verification. The first thing I found awry was permissions missing for the FIM Service account on WMI's Root/CIMV2 namespace. Since this was a functioning SSPR environment, I know they had been set previously. In addition, the Root/MicrosoftIdentityIntegrationServer namespace was missing from the tree too. My schedule allowed enough time to repair the issue but not fully perform a Root Cause Analysis to the situation.

Read More

Topics: WMI, PWUnrecoverableError, IT Security, Microsoft Security Partner, Infrastructure Management, FIM, Microsoft SCCM, Identity Management, SSPR, System Center Configuration Manager, Information Technologoy, SCCM, Blog

The Outer Rings of the System Center Configuration Manager (SCCM) Inferno

Posted by CSS Technical Team on Oct 23, 2012 5:01:00 AM

Since time draws ever closer to the season of the witch, allow me to start out with an excerpt from a timeless techie classic, the poem titled, “The Ramen.” I know not from whom it came but kudos to them:

Read More

Topics: IT Security, Microsoft Security Partner, SCCM 2012, Configuration Manager, Desktop Security, Microsoft SCCM, ConfigMgr, SCCM 2007, SCCM, System Administrator, The Ramen, Blog, Role Based Security, Microsoft System Center Configuration Manager

Migrate to Forefront Endpoint Protection in conjunction with a Windows 7 Migration using SCCM

Posted by CSS Technical Team on Apr 12, 2012 10:38:00 AM

Let's say you’ve found yourself working against the clock to get Windows 7 rolled out before Windows XP hits end of life, and during the planning phase you realize your current AV solution won’t work on Windows 7 without an upgrade. Now you’re faced with signing a new support contract and adding additional costs to your migration plan. But, like many Microsoft Core CAL and eCAL customers you already own the licenses to use Forefront Endpoint Protection, which works beautifully on Windows 7.

Read More

Topics: Windows 7, FEP, Win7, Microsoft SCCM, SCCM, Microsoft Forefront Endpoint Protection, Microsoft FEP, Blog, Microsoft SCEP, System Center Endpoint Protection, Windows XP

Integrating APP-V and SCCM 2007

Posted by CSS Technical Team on Apr 12, 2012 5:00:00 AM

Some things were just meant to be…

It’s been a long road getting to here I’m sure. You’ve got a perfectly tuned SCCM 2007 infrastructure, you’ve upgraded to R2, and that installation of service pack 2 is now nothing but a quaint memory. Now you’ve decided to take things to the next level by virtualizing some of your applications. The App-V installation that was on the Microsoft Desktop Optimization Pack was a breeze, and then your greatest dreams are realized! App-V integrates with SCCM! Now you can push virtualized applications and stream them from your distribution points! Offline availability? Not a problem here friends. Life is good.

Read More

Topics: Virtualization, Microsoft System Center, SCCM 2012, Sysctr, Microsoft SCCM, App-V SCCM, System Center Configuration Manager, SCCM, App-V and System Center, Blog, Application Virtualization, App-V

SCCM 2012 - Migration Made Easy - Part 1

Posted by CSS Technical Team on Nov 3, 2011 5:00:00 AM

As we all wait in anticipation for Configuration Manger 2012, there are a number of concerns that present themselves from an administrator’s perspective. One of those primary concerns, and the topic of this post, is the lack of upgrade path from SCCM 2007. At first glance it seems like a show stopper as companies may balk at a whole new infrastructure while already having one already in place for SCCM 2007. However, as Microsoft has made giant strides forward in terms of Systems Management and Hierarchy Simplification with ConfigMgr 2012, they have also reduced the pains of migration immensely. With the release of ConfigMgr 2012 RC some of you may be gearing up for testing, with that in mind the first part of this three part blog will highlight the requirements for preparing a migration along with any caveats and information pertaining to the migration process.

Read More

Topics: IT Security, Microsoft Security Partner, SCCM 2012, Desktop Security, Infrastructure Management, Microsoft SCCM, sccm microsoft, Microsoft Active Directory, SCCM, migrate SCCM 2012, Systems Management, ConfigMgr 2012, Blog, SCCM client, migration to SCCM 2012

SCCM 2012: Software Update Improvements

Posted by CSS Technical Team on Aug 31, 2011 6:40:00 AM

We are all familiar with how Configuration Manager 2007 handled software updates and, without speaking for everyone who was using SMS 2003, we can probably agree that 2007 made multiple strides forward in making the update process easier. We can all celebrate again as Configuration Manager 2012 is set to deliver another step forward in making the management for software updates easier and more efficient.

Read More

Topics: IT Security, Microsoft Security Partner, Microsoft System Center, SCCM 2012, Infrastructure Management, Microsoft SCCM, SCCM, Systems Management, ConfigMgr 2012, Software Update Groups, Blog, Configuration Manager 2012

SCCM 2012: Role Administration…At Last

Posted by CSS Technical Team on Jun 28, 2011 8:52:00 AM

The release of Configuration Manager 2012 will provide a significant increase in productivity and efficiency in the world of systems management. As many of us in the Systems Management realm have often dreaded configuring limited security roles for administrative users within SCCM 2007, it is about time that Role Based Security has become part of the SCCM security model. In Configuration Manager 2012, Role Based Administration makes the assigning of specific security to administrative users much more effective.

Read More

Topics: IT Security, Microsoft Security Partner, SCCM 2012, Microsoft SCCM, Role Based Administration, System Center Configuration Manager, SCCM, Blog, Configuration Manager 2012

Making the Case for System Center Virtual Machine Manager

Posted by CSS Technical Team on Jun 3, 2011 5:00:04 AM

SCVMM with SP1 introduces multiple benefits for managing a virtual environment. Business leaders and product acquisition teams might be looking at this product to help their organizations manage both Hyper-V and ESX platforms. It’s simple to see the ROI by deploying both VMware and Microsoft admins together to manage sometimes sprawling and often heterogeneous environments. This is all done through a platform that’s built on the System Center framework, which is becoming increasingly popular with IT admins, no matter the organization.

But what about the big picture? Business leaders are still asking IT teams for a virtualization strategy, a cloud strategy, or just to become more ‘green.’ SCVMM helps to resolve these issues. So an important question for admins to ask is, ‘How will this product steer my virtualization strategy?’

Read More

Topics: Virtualization, Microsoft Security Partner, VMM, Microsoft SCCM, Virtual Machine Manager, SCCM, Blog

How to View the FEP Collection Membership Queries

Posted by CSS Technical Team on May 11, 2011 12:51:54 PM

The FEP dashboard located on the SCCM console has a wealth of information. It provides FEP admins with a snapshot of the overall health of your FEP deployment and various statistics including recent malware activity, definition status, and even when FEP has been disabled on an endpoint.

Read More

Topics: Microsoft Malware Protection Center, IT Security, Symantec, Microsoft Security Partner, Microsoft System Center, Microsoft SCCM, McAfee, Microsoft Forefront Endpoint Protection, Anti-Malware, Microsoft FEP, Blog, Antimalware Protection, Microsoft Antimalware

Preparing Existing Antivirus Software for an Forefront Endpoint Protection Deployment

Posted by CSS Technical Team on May 2, 2011 5:00:55 AM

When deploying Forefront Endpoint Protection, making a few simple changes to your existing Antivirus Software before installing FEP can increase the success of your deployment. Below is a list of tasks:

Read More

Topics: IT Security, Symantec, Microsoft Security Partner, Microsoft System Center, Microsoft SCCM, McAfee, Microsoft Forefront Endpoint Protection, Anti-Malware, Microsoft FEP, Blog, Antimalware Protection

Recent Posts

Posts by Topic

see all

Subscribe to Email Updates

Want to Learn more about CSS?