All posts by Jordan Benzing

SCCM Collection Relationships

The Problem: Back in SCCM 2012R2, this wonderful feature was added where you could leverage these new fancy rules called ‘Include’ and ‘Exclude’ collections. OK, so it is wonderful, at least until you try to delete a collection that has been leveraged as an include or exclude collection rule. If it is you get this ...

Enable the Active Directory Recycle Bin

Ever have gut-clenching moments when you realize you deleted the wrong object in Active Directory? Maybe you keep a bottle of antacid in your desk drawer for exactly that reason. Well not anymore. Let’s talk about a wonderful feature in Active Directory implemented back in the 2008 version of Active Directory. It’s called the ‘Recycle ...

SCCM Collection Evaluation Duration – SQL Query

The Problem: My collection membership seems to take forever to update! Also, for some reason the console seems SUPER slow lately. One of the COMMON Solutions Collection evaluation is a common sticking point that causes major performance issues in any well constructed environment. In fact it’s probably the number one cause of console slowness and ...

Get all members of a group including nested group membership – Powershell

Previously I wrote a script that would find all members of a security group via Powershell but something I didn’t discuss is dealing with nested groups. This script was written with the idea in mind to find ALL members of a group, computers and users as well as the nested members. That being said it’s ...

SCCM 2012 R2 – Incremental Update Collections and how to find them.

The Problem:  There is something about SCCM changing from SMS to SCCM that makes people think the old maxim – “Slow Moving Software” no longer applies. Combine this with the desire for “I want it now” and you end up with a bunch of device collections where the “Incremental Updates” feature is turned on. “But ...

SCCM 2012R2 – My Clients aren’t getting a deployment.

The Question:  Recently during some other unfortunate SCCM shenanigans someone brought up the fun problem where they thought that software was randomly hit or miss deploying to machines in a collection. They even thought in some cases the software was installing but not reporting back that it had installed. Now reading that last sentence I’m ...

Adding E-Mail Property in AD

A few months back I worked on a project to configure a password manager that was managing accounts across multiple domains without a trust. The Problem: This password management software was actually pretty cool. It’s able to match user accounts in its secure data base using a particular active directory attribute. In this case the ...