Wednesday, June 26, 2013

Edit out of the box reports to prompt computer name

Out of the box reports in SCCM 2012 require user to enter the computer name. For example, “Software 02E - Installed software on a specific computer” under the Asset Intelligence.

It is hard for the user to remember the exact computer name, and hence i decided to configure the computer name to prompt and user select the computer name instead of user entering the exact computer name value.

Here’s the step by step guide on how to edit the “Software 02E - Installed software on a specific computer” out of the box report under Asset Intelligence.

1. Right click on the report, and select edit. Report Builder will be launched.
image

2. Right click on the Datesets, and select Add Datasets…
image

3. On the Dataset Properties, do the following
    a. Use a dataset embedded in my report
    b. Select the available data source in the dropdown menu
    c. Query: copy paste the query below
SELECT        Name0 AS "Computer Name"
FROM            v_GS_COMPUTER_SYSTEM
image

4. Expand the Parameters, right click on name, and select Parameter Properties
image

5. On the Report Parameter Properties, go to the Available Values tab and select the following:
    a. Dataset: Dataset2
    b. Value field: Computer_Name
    c. Label field: Computer_Name
image

6. Save the report
image

image

7. Here’s how it looks like when you launch the report from the console
image

image

image

8. Here’s how it looks like when you launch the report from the web browser
image

image

That’s all, now you can do this on other reports to prompt for computer name as well.

Thursday, June 13, 2013

SCCM 2012 Custom Report with Prompt Collection & SQL Joins Explanation

Recently, I’m working on a project which require me to generate some custom reports with prompt collection feature. I found a guide and it is very easy. Here’s the link, http://asithadesilva.wordpress.com/2013/04/01/how-to-prompt-collection-to-a-report-in-sccm-2012/.

When comes to custom reports, you need to deal with query and tables/views join. Here’s a very good article explaining JOIN, http://www.khankennels.com/blog/index.php/archives/2007/04/20/getting-joins/

Wednesday, June 5, 2013

Applocker Findings

I was playing with Appclocker recently and below is some of my findings.

Have you ever configured the rules and policies but the features just doesn’t work for you? Many of the sites show you how to configure the rules and policy but didn’t explain that the Application Identity system service is one of the main component. The Application Identity service determines and verifies the identity of an application. Stopping this service will prevent AppLocker policies from being enforced. Therefore, START the Application Identity service!!!

Your Active Directory is Windows Server 2012 and your client workstation is Windows 7. You configured and enforced the rules and policies in the server but it doesn’t work on the Windows 7 workstation. Group Policy Management Console (GPMC) or Remote Server Administration Tools (RSAT) is needed in this situation. You wouldn’t face this issue if you are using “Windows Server 2008 R2 and the workstation is Windows 7” or “Windows Server 2012 and the workstation is Windows 8”.