About Ayo Dada

Hello and Welcome to Ayo Dada’s Blog. I’m an Architect focusing and specializing in Microsoft Cloud Identity, Hybrid Cloud or Mobility and Security for Enterprise Infrastructure and cloud management. Lately, I have been focusing on Microsoft Azure Active Directory Premium and all its major features On-premises infrastructure integration, User accounts, Devices, Partner collaboration, Customer account management, Application integration, Administration. you will find my blog will show best practice set up. Specifically Microsoft Azure Active Directory Premium and all its major features On-premises infrastructure integration, User accounts, Devices, Partner collaboration, Customer account management, Application integration, Administration and SCCM 2012 R2 Infrastructure like Primary Site, Secondary Site, Distribution Points, Management points. My blog also focuses on best practice setup for SCCM OSD/MDT. I will also share notes from the field, working with applications and packages, Software Updates patch management solutions, Operating System Deployment like Windows 8.1 and Windows 10. Including SCCM cloud integration with Windows Azure and Windows Intune. Other areas like Active Directory, GPO, Windows Server 2012 R2, SQL Server tailor-made for Azure Active Directory connect, SCCM 2012 R2 will also be shown. I have been involved in several IT solutions centered around modernization, cloud Migration, and Deployment of OS and Applications during various transformation Projects in both the Public and Private Sector. I enjoy working in an environment where excellence is really expected. I believe what makes or creates that environment and truly makes it great is to be open when [the work] is not great. My best contribution is not settling for anything but good stuff, in all the details. That is my job — to make sure everything is great. I am a Microsoft Cloud Architect specialize in Cloud Identity, Hybrid Cloud or Mobility and Security for Enterprise Infrastructure and cloud management. I am passionate about technology and have an insatiable drive for learning. If you are thinking of implementing a Microsoft Cloud Identity, Hybrid Cloud or Mobility and Security solution for Enterprise Infrastructure and cloud management in your environment, let me help guide you to success!

The application was unable to start correctly (0xc0000018)

Issue: Applications fail to start after installing Microsoft patch MS15-038 on Windows 7 64 bit devices when Data Loss Prevention Endpoint is installed.

It appears the issue relates to KB3045999 that has been pushed out to windows 7 64bit Devices which conflicts with McAfee DLP Endpoint 9.3.x.

I isolated the windows security Update to April Software Update Group

(Microsoft Windows 7 64-bit (32-bit is not affected)

Issues Defined

After you install this security update on x64-based versions of Windows 7 that has McAfee Data Loss Prevention Endpoint (DLP Endpoint) 9.3.x installed, some programs may intermittently not start. When the problem occurs, you may receive an error message that resembles the following:

The application was unable to start correctly (0xc0000018). Click OK to close the application.

The affected programs include (but are not limited to) the following:

  • Cmd.exe
  • Explorer.exe
  • Internet Explorer
  • MMC-based applications
  • Windows PowerShell

This problem may occur intermittently between restarts when the DLL is dynamically registered in different address spaces.

Example start up errors include:

  • csc.exe- Application Error — The application was unable to start correctly (0xc0000142)
  • iexplore.exe- Application Error — The application was unable to start correctly (0xc0000018)
  • mmc.exe- Application Error — The application was unable to start correctly (0xc0000018)
  • cmd.exe- Application Error — The application was unable to start correctly (0xc0000018)

Impact

Minimal, the issue is random, I managed to create the issue but a rebuild fix it.

Workaround 

Either remove Microsoft patch MS15-038 (Note Microsoft do not recommend that you uninstall any security update) or disable the affected components in DLP Endpoint.

 Solution 

Intel Security has released DLP Endpoint 9.3 Patch 4 Hotfix 25 to resolve this issue which need to be packaged and pushed out by DLP Administrator.

Related Information

 

 

Dedicated memory on a different drive:

Here are the steps for setting up a dedicated memory on a different drive:

1) Click Start, click Run, type Regedit, and then click OK.
2) Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl
3) On the Edit menu, point to New, and then click String Value.
4) In the details pane, type DedicatedDumpFile, and then press ENTER.
5) Right-click DedicatedDumpFile, and then click Modify.
6) In the Value data box, type <drive>:\<dedicateddumpfile.sys>, and then click OK.
Note <drive> is a placeholder for a drive that has enough disk space for the paging file, and <dedicateddumpfile.sys> is a placeholder for the dedicated file and the full path.
7) On the Edit menu, point to New, and then click DWORD Value.
8) Type DumpFileSize , and then press ENTER. 18432
9) Right-click DumpFileSize, and then click Modify.
10) In the Edit DWORD Value dialog box, click Decimal under Base.
11) In the Value data box, type the appropriate value, and then click OK.
Note The size of the dump file is in megabytes, make this the amount of RAM plus ~5 to 10 mb.
12) Right-click DumpFile, and then click Modify.
13) In the Value data box, type <drive>:\<memory.dmp>, then click OK.
Note :  <drive> is a placeholder for a drive that has enough disk space for the paging file, and <memory.dmp> is a placeholder for where the memory dump will be saved to.
14) Exit Registry Editor.

Note : If you have configured the page file as well as the memory dump on the same drive then make sure you have enough free space to accommodate the page file and also store the memory dump.

Application installation is failing in OSD task sequence SCCM2012 R2 CU4

Issue: When deploying applications in an Image deployment Task Sequence in SCCM 2012R2 CU4,

ConfigMgr looks at the old revisions of applications when deploying and consequently fails a deployment.

This issue should have been resolved post release of SCCM 2012 SP1, however i have found it is still being experienced at SCCM 2012 R2 CU4.

This may be resolved by an upgrade to SCCM 2012 R2 SP1 since the documentation for 2012 R2 SP1 talks about it however, this is not certain

Application Management
——————————————————————————–
When you revise an application, the new revision now inherits all dependencies from the previous revision.
Reference:
What’s New in System Center 2012 R2 Configuration Manager SP1
https://technet.microsoft.com/library/mt131422.aspx#BKMK_OSD

2 workarounds in place that are known to fix the issue:

Workaround is to delete all the older revisions of an application.
OR
Disable the install software in the existing task sequence, save it and re-enable it.

iOS devices APN certificate request error when signing to Intune SCCM 2012 R2

This is a fix to the issue – Purge APNs certificate data in SCCM SQL Database

intune2
In Configuration Manager, disable iOS inside of the Windows Intune Connector.

Go to “Administration > Cloud Services”
Right click the Intune subscription in the right pane and select “Properties” to get a popup window.

 

 

intune

On the “iOS” tab, uncheck “Enable iOS Enrollment”.

 

 

 

 

 

 

 

 

On your SCCM SQL server login with a service account that can Read and write to the SCCM Database and run the script listed.

  1. update SC_ClientComponent_Property set Value2 = ” where Name like ‘%APNS%’
  1. delete from MDMPolicy where PolicyType = 7
  1. delete from MDMPolicyAssignment where PolicyType = 7
  1. update SC_ClientComponent_Property set Value2 = ” where Name like ‘%APNS%’
  1. delete from MDMPolicy where PolicyType = 11
  1. delete from MDMPolicyAssignment where PolicyType = 11

DELETE Drs_Signals

On your primary SCCM server recreate APNs Certificate request again

MDT UberBug08 – Task Sequencer Crash

Keith's Consulting Blog

My 3rd bug related to the new Stand Alone Task Sequencer has to do with a Crash in the product. I’ve seen this pretty consistently when hydrating/building out my own SCCM 2012 Server.

At the end of the task sequence I will see the following:

error

SMSTS.Log shows:

<![LOG[Process completed with exit code 2147942402]LOG]!><time="23:36:24.402+420" date="07-12-2015" component="TSMBootstrap" context="" type="1" thread="3864" file="commandline.cpp:1123">
<![LOG[Exiting with return code 0x80070002]LOG]!><time="23:36:24.417+420" date="07-12-2015" component="TSMBootstrap" context="" type="1" thread="3864" file="tsmbootstrap.cpp:1238">
<![LOG[shSmsTsKeyForScope.Open (HKEY_LOCAL_MACHINE, sSmsTsKeyForScope.c_str(), KEY_READ), HRESULT=80070002 (e:nts_sccm_releasesmsframeworktscoreenvironmentscope.cpp,311)]LOG]!><time="23:36:24.417+420" date="07-12-2015" component="TSMBootstrap" context="" type="0" thread="3864" file="environmentscope.cpp:311">
<![LOG[Failed to open key SoftwareMicrosoftSMS47006C006F00620061006C005C007B00350031004100300031003600420036002D0046003000440045002D0034003700350032002D0042003900370043002D003500340045003600460033003800360041003900310032007D00SMSTS]LOG]!><time="23:36:24.417+420" date="07-12-2015" component="TSMBootstrap" context="" type="3" thread="3864" file="environmentscope.cpp:311">
<![LOG[GetKeyFromRegistry (m_sScopeRegKey.c_str(), Key), HRESULT=80070002 (e:nts_sccm_releasesmsframeworktscoreenvironmentscope.cpp,764)]LOG]!><time="23:36:24.417+420" date="07-12-2015" component="TSMBootstrap" context="" type="0" thread="3864" file="environmentscope.cpp:764">

It’s a bit troubling, as I mentioned earlier with my other bugs related to the Stand Alone Task Sequencer, the Task Sequencer in MDT should be “rock solid”, and is a mission critical component, the fact that it crashes due to missing or corrupt registry is…

View original post 29 more words

Building the Ultimate vSphere Lab – Part 1: The Story

This is a Great Lab setup for home labs and testing

Boerlowie's Blog

In my search of the ‘ultimate affordable’ Lab setup for VMware VCAP/VCP/… exams, i went through a lot of possible set ups.

In the end, i started to build a powerful desktop pc in which i intend to virtualize my vSphere environment.  The reasons that made me chose a desktop PC running Windows 7 with VMware Workstation 8 to do this:

– Everybody has a pc.  So why not buy a lightning fast pc which makes your daily application work at light speed (email/surfing/office tasks) and gives you a perfect lab!

View original post 376 more words