Possibilities

My mind boggles at the potential to build incredible things from free and built-in functions within Windows and other Microsoft products.  Then there's all the bazillion freeware third-party tools out there and the result is unlimited possibilities for automating your environment.

For example, the DriverView utility from NirSoft is a standalone runtime (akin to Sysinternals' utilities) which runs without requiring a dedicated installation.  Better yet, beyond the fact that it does an amazing job of reporting driver information, it provides a robust command-line interface as well.

Just one example: you could run a command-line statement to dump all the driver information for each computer to an XML file and import the data into a database for collective/aggregate reporting.  Hmmm.

Read More

Windows Web Admin - Application Settings

This is a quick settings guide to help you configure WWA to work with your environment.  Please refer to the IIS7 configuration instructions I posted yesterday first.  This guide is essentially a "part 2" for getting WWA up and running.

All of the application settings are found in the "_settings.asp" file in the main WWA folder.  Open it with Notepad or any text editor (not Microsoft Word!) and you can easily modify the settings and save it.  Changes are applied immediately upon saving the file.

Most of the settings are identified as standard variables but will have a "Const" statement in front of them, which indicate a non-changing value.  By that, I mean that once the variable is defined and assigned a value, it cannot be modified during the runtime of the application by any other pages within the site.  Ok, then.  On to the setting descriptions…

BASIC GLOBAL SETTINGS

siteActive = True / False

This puts the site into normal operational mode.  If you need to take the site offline or the SCCM database and don't want people using WWA for a period of time, set this to "False" and it will instead display a "come back later" page.  The default setting is True.

showGetStarted = True / False

This setting enables or disables the display of the 'Getting Started' links from the main home page.  To hide them, set this to False.  The default setting is True.

enableADtools = True / False

This setting enables or disables the Active Directory features of WWA.  If you set this to False, no Active Directory related links will be shown on the sidebar.  That will also hide the AD Quick Search section of the main home page as well.  The default setting is True.

enableCMtools = True / False

This setting enables or disables the System Center Configuration Manager 2007 features of WWA.  If you set this to False no links for SCCM features will be displayed on the sidebar or the main home page.  The default setting is True.

CONFIGURATION MANAGER SITE SETTINGS

SWBEM_Security = "EXPLICIT" or "IMPLICIT"

This setting controls how SWBEM provider connections are established with the SCCM host when performing modification operations (adding or removing Collection members, for example).  When set to "EXPLICIT", it will submit a specific USERNAME and PASSWORD combination with the connection request.  In order for this to be useful, you must also configure the SWBEM_USER and SWBEM_PASS variables.  If set to "IMPLICIT", it will attempt to establish the provider connection using the credentials of the IIS application pool.  The default setting is "EXPLICIT".

SWBEM_User  = "username"

This setting is used when SWBEM_SECURITY is set to "EXPLICIT" and defines the user account name to be submitted for SWBEM provider connections to the SCCM site server.

SWBEM_Pass = "password"

This setting is used along with SWBEM_USER when SWBEM_SECURITY is set to "EXPLICIT" and defines the user account password to be submitted for SWBEM provider connections to the SCCM site server.

SMSSiteCode = "AAA"

This is the three-character SCCM site code label to identify the scope of interfacing with SCCM.

SMSServer = "servername"

This is the name of the SCCM site server.

SMSDomain = "domain"

This is the Active Directory domain name in which the SCCM site server exists.  This is typically the NetBIOS name, not the FQDN value.

SCCM_WebReports = "http://[siteserver]/SMSReporting_" & SMSSiteCode

This is the URL to your SCCM Reporting Point host where links to Web Reports will be referred for certain features in WWA.  Include the URL up to, but not including the site code label, or replace the entire value to include the full URL to the base location (including the site code) if you prefer.

DATABASE CONNECTION SETTINGS

dbServerName = "servername"

This is the NetBIOS name of the SQL Server host for the SCCM site.

dbDatabase = "SMS_ABC"

This is the name of the SCCM site database on the SQL Server host.  This will usually be "SMS_" combined with your three-character site code.

dbUsername = "username"

This is the SQL or Active Directory user account name which has appropriate permissions within the SQL Server SCCM site database.

dbPassword = "password"

This is the corresponding password for the dbUSERNAME account defined above.

Note: Do NOT modify the "dsn = " code segment that appears below this.  It is concatenated from the other settings to generate the appropriate SQL connection string at runtime.

ACTIVE DIRECTORY SETTINGS

ldapRoot = "LDAP://DC=contoso,DC=local"

This is the base LDAP distinguished name value for the root of the domain in which you wish to manage with WWA.

ldapSchema = "LDAP://CN=Schema,CN=Configuration,DC=contoso,DC=local"

This is the default schema partition LDAP reference for the same domain identified by the ldapRoot setting above.

AD_DNSname = "contoso.local"

This is the DNS domain name label for the same domain identified by the ldapRoot setting above.

AD_Username = "username"

This is the name of an AD account which has appropriate permissions to view and modify Active Directory user accounts, contacts, and security groups in the target domain.

AD_Password = "password"

This is the corresponding password for the AD user account define above.

maxUserPwdAge = 90

This is the default password expiration allowance (in days).  The default setting is 90.  This is used to calculate days until a user account password expires.

MESSAGING SETTINGS

Note: This feature is not yet enabled but will be enabled in a future release.

enableMessaging = True / False

This option turns SMTP message handling features on or off.  The default setting is True.

useGmail = True / False

This option sets the default SMTP relay host to use Google Mail (Gmail).  The default setting is False.

mailServer = "server.fqdn.name"

This is the FQDN identifier for the SMTP relay host to route outgoing e-mail messages from WWA.  If you wish to use an internal SMTP host, enter the appropriate FQDN name for the server.  If you wish to use Google Mail, enter "smtp.gmail.com".

cdoSendUsingPickup = "local-folder-path"

This is an optional path setting to support adding attachments to outgoing e-mail from within WWA.  I'm not sure I'm ever going to make use of this.  I could, but I'm not sure why I would.  The default setting is "c:\inetpub\mailroot\pickup".

mailUser = "username"

This setting specifies the user account to use for connecting to the SMTP server for sending messages.  For most internal SMTP relay requests, this is left blank ("").  For Gmail however, you must specify a valid Google account name.  The default setting is "".

mailPwd = "password"

This is the corresponding password for the mailUser account defined above.  For most internal SMTP relay requests, this is left blank ("").  For Gmail however, you must specify a valid Google account password.  The default setting is "".

MISCELLANEOUS SETTINGS

timeBias = nnn

This is the default time zone offset value for use when calculating Active Direct and SCCM date/time values which are time-zone related.  The default setting is 300.

Read More

Windows Web Admin build 2011.04.28.001 posted

I apologize for pestering the **** out of you with so many constant updates, but as I've had a few minutes here and there to free my brain to work on this a little I've been trying to cross off my "to-do" list.  I've had many of these finished from other past projects but haven't had time to scrape the goodies out of old files, dust them off, clean-up and refactor the code to fit into my latest mindwarp vision of bit-mashing misery.  That's a long way of saying that I had to grab some very old code, clean it up and fit it into this project.  Someday I know that I will need to stop and refactor this entire project.  I'll be honest: some of the code is a bit stupid looking and inefficient.  I know this.  So if you're looking at it and shaking your head, relax.  Drink a few beers and it will start looking really awesome.  Especially after a case of beer.

https://sourceforge.net/news/?group_id=531017

Latest changes:

• SCCM reports have been moved from the home page sidebar to their own "reports" page
• Three new SCCM reports have been added:
• Windows 7 Readiness Summary (with tabulated results at the bottom) per Collection
• Obsolete Client Records
• Unassigned Client Records
• You can now add an AD user account to multiple AD groups
• You can now add multiple AD user accounts to a single AD group
• You can now remove an AD user account from multiple AD groups
• You can now remove multiple AD user accounts from a single AD group
• The Network Adapter report had a small bug that I fixed (report6.asp

I recently posted an instruction guide on how to set up WWA on IIS7 using an Application Pool so it can run properly under a protected user context (helps with AD management features).  You can access that here: http://skatterbrainz.blogspot.com/2011/04/setting-up-windows-web-admin-on-iis7.html

Download the latest build here --> http://sourceforge.net/projects/wwadmin/files/wwa.zip/download

Enjoy!  It's still FREE.  I do it because it keeps my brain from melting down.

Read More

Setting up Windows Web Admin on IIS7

I should have posted this much sooner, but here goes.  This is a quick how-to procedure for installing and configuring the IIS side of things.  I'm using Windows Server 2008 R2 and IIS7, but this is pretty similar for Windows Server 2008 as well.

IIS Configuration Procedure

1. Download the wwa.zip file and extract it to a folder on your IIS host server

2. Open IIS Manager

3. Expand the Server object

4. Right-click Application Pools, select Add Application Pool…

5. Enter a Name for the new pool (leave other defaults alone), click OK

6. Right-click on the new Application Pool, click Advanced Settings

7. Select the ellipses (…) next to the Identity setting…

8. Select "Custom account", and click the "Set" button

9. Enter an account (with sufficient account management rights), and the password…

10. Click OK, click OK again and again to return to IIS Manager.

11. Expand Sites, right-click "Default Web Site" and select "Add Application"

12. Enter the Alias, and select the Physical Path, and click OK

13. Double-click Authentication

14. Disable "Anonymous Authentication" and enable "Windows Authentication"

15. Right-click on the web application object (e.g. "wwa") in the left-hand panel, and select "Manage Application" / "Advanced Settings…"

16. Change the Application Pool setting to "WindowsWebAdmin" and click OK

17. Click OK and close IIS Manager

You should be good to go.  To test, open your browser and navigate to the appropriate URL.  Once opened, click the "About" link at the bottom of the home page.  Under the "Web Server" section, verify that Authentication Mode is "CONTROLLED" and that your domain account is shown for the REMOTE_USER value.

Read More

WWA Build Update

I have another build coming soon.  Some of the changes:

• SCCM reports moved from sidebar to their own page (reports.asp)
• Three New Reports being added
• More features for AD user and group management (enable/disable, add/remove, etc.)

Read More

Cheaper Kindle with Ads?

Amazon made a rather mundane announcement about a "cheaper" version of the Kindle that comes with advertisement feeds. They also followed that up by posting in various places (like Facebook) and asking what readers think of the idea.  So far, every single response has been negative.  People screaming (in writing actually) "No! NO! NO!" and things of that sort.

But hold on.

I have a Kindle.  I love it.  I have the Wi-Fi version, not the 3G, so I have to be in a "hot spot" to download or shop.  Not a big deal.  It works perfectly for my needs.  No complaints.  I spent $138.00 USD at the time on it.

Keep in mind that the Kindle has an automatic screen saver to save battery power.  It's not dynamic or animated.  It's a static artistic rendering of a semi-random famous author.  There are about six or so, by default.

If that were replaced with an advertisement: WHY WOULD YOU CARE?!?  Does anyone sit and really stare at the screen saver and get entertainment value from it?  If it showed the current date, time and outdoor temperature, would that be offensive too?

I know this is purely speculative and fictional, but hear me out for a second, please…

If Amazon offered the 3G version for $130 ($8 cheaper than the wi-fi only model) by putting rotating ads in place of the screen saver, would that be a bad thing?  Would it interfere with your reading capabilities?  No.  Would it save you money?  Yes.  Is saving money a bad thing?  No.  Unless you're filthy rich or filthy stupid (or both).

Now, I know Amazon probably has different ideas of where to place the ads and how they will be interjected into the overal experience.  My purported example was just to provide a third option.  One that at least makes you pause your knee jerk before your knee cap hits you in the jaw.  Everyone is so Pavlovian about things like this.  Say the word "ads" and everyone goes "No!!!!".  But there's ads in everything all around you all the ****ing time as it is.  And NONE of those come with an option to REDUCE the price of the vehicle upon which it is delivered.

Did cable TV reduce the subscription price when they caved in and started running ads?  NO. Do you even remember when cable TV sold itself on the appeal of no ads?  Then it became "few ads" and today it's just a free-for-all.

Did Facebook offer you some monetary savings when they shoved ads in your face? No.

Did the city reduce your tax bill when billboards went up?  No.

Do your school milk cartons cost less with the ads printed on the back?  No.

So, Amazon asks (remember - NOT DEMANDS, BUT ASKS) if you'd like to get a cheaper product if they put ads into it, and the reaction is as if they were asking everyone to forgive Bin Laden.

Lighten up folks.  Think for a change.  Stop knee-jerking.

Read More

Imaging Computers with MDT 2010 and AutoCAD 2012

Microsoft Deployment Toolkit (MDT) 2010 is a FREE product that is aimed at helping System Administrators prepare and deploy custom operating system installations (images).  I’m not going to explain MDT, WAIK or WDS here.  There are too many other sites, books, and videos that do a great job of that. I don’t need to add any more noise there.

 

If you have network license AutoCAD clients and a network deployment share, you already know how that can save time doing repeated installations.  You may also know how much it helps when pushing installations via SCCM 2007 (or similar products).  Maybe you’ve tried bundling AutoCAD into your operating system image process but are using Ghost or some other snapshot process and find it less than ideal.  Well, MDT not only provides an easier option, it eliminates much of the headache incurred with push installations.

 

For starters, MDT uses a sequential process to perform tasks (hence “task sequences”).  Rather than running entirely under an unattended SYSTEM context with no UI, it runs under a user context (typically), so most of the prerequisite tasks of the deployment work just fine (unlike trying to push with SCCM, where the .NET Framework 4, and DirectX component steps fail).  So you can run the default installation and simply add the "/W" parameter to use it with MDT 2010.

Caveats:

 

You may have better luck than I’ve had with using a “thin” image process and trying to install .NET Framework 4 as a task sequence package instead of going with a “thick” or “hybrid” client build*.  In my experience, the .NET 4 installation via MDT task sequence never works.   But you may be blessed.  My approach is to include .NET components in the base image via a reference capture.  It is crucial to have .NET 4 installed before attempting to install AutoCAD 2012 via an automated/unattended process or it will fail.

I only use network license deployments of AutoCAD when installing via SCCM or MDT.  I do not ever recommend installing standalone/individual licenses

 

Steps:

1. Build your AutoCAD 2012 deployment share ON the server where the MDT package will refer clients to (this works much better than building it elsewhere and then moving it and editing the deployment configuration INI files)
2. Configure permissions on the deployment share to suit the user context of the MDT installation (if needed)
3. Right-click the AutoCAD 2012 installation shortcut in the UNC folder (e.g. Acad2012.lnk), select Properties
1. Copy the “Target” string contents
2. Click Cancel to close the properties dialog form
4. Open the MDT Workbench, expand the Deployment share, select Applications
1. Add a new Application to the MDT workbench deployment group
2. Option:  Application without source files or elsewhere on the network
3. Properties:
• Publisher: Autodesk
• Application Name: AutoCAD
• Version: 2012
• Language: (leave blank unless you really want to enter it)
4. Details:
• Command Line: “setup.exe” (for now)
• Working Directory: Browse to the UNC share path (do NOT choose from drive letter!) make sure to specify the AdminImage sub-folder in the path (e.g. “\\ ServerName\Acad2012\AdminImage”)
• After created, click Finish
5. Double-click the AutoCAD 2012 entry in MDT
• Click the “Details” tab
• Replace the “Quiet install command” text with the string copied in step 3/a (example below).  Be sure to replace <uncpath> with your actual UNC path.
• Example: <uncpath>\AdminImage\setup.exe /W /qb /I <uncpath>\AdminImage\<deployment>.ini
• Click OK
6. Right-click the Deployment Share in MDT Workbench and select “Update Deployment Share”

Assuming the rest of your MDT deployment share is configured, and you've already generated a suitable Boot WIM and Boot ISO file set, you should now be ready to start deploying AutoCAD 2012 with your images.

 Notes:

1.       If you discover (like I have) that you also need to install the DirectX components ahead of the AutoCAD deployment installation, you can add the Acad2012DX.msi package I’ve posted and set a Dependency within the AutoCAD 2012 application entry so it runs the DirectX installer first.  If you do this, click “Hide this application in the Deployment Wizard” from within the MDT application properties for the Acad2012DX application item.

2.       A return code of 259 from the AutoCAD installation can be ignored.  I have not seen, heard or experienced any detrimental effects after that has occurred.

3.       Because there is NO OPTION to disable desktop shortcuts for Design Review 2012 or Inventor Fusion 2012 via the Deployment Wizard configuration, you will have to resort to some trickery if you are required to keep shortcuts OFF of the standard desktop.  My trickery is to add DEL commands to a script that wraps the main installation.

4.       If you choose to enable the network log option, keep these points in mind:

a.       The UNC path to the logs needs to have appropriate ACL and Share permissions granted to allow the remote installation context to make updates to the folder contents (log file)

b.      It tracks the entire deployment bundle, but won’t be updated on the network share until the end of the installation process.

c.  If the connection fails before the installation completes, the only trace of a partial installation will be in the client logs.

d.  The network log is cummulative.  It grows with each client installation.  You may want to back it up, rename or delete it occassionally to recover space.

5.       Why does Design Review 2012 get a “Autodesk” prefix, while Inventor Fusion 2012 does not?  Consistency is important.

 

*terms borrowed from Johan Arwidmark and Mikael Nystrom of TrueSec (www.truesec.com)  - geniuses on the topic of Windows deployment automation

Assumptions:

·         MDT 2010 Update 1 with WAIK 7

·         32-bit Windows 7 client Deployment Image with .NET 4 included (sysprep’d from ref computer)

·         New install (not a refresh, upgrade or replacement)

Script Code:

Paste the following code into Notepad…

 

@echo off

TITLE Installing AutoCAD 2012

CLS

echo installing AutoCAD 2012...

SETLOCAL

SET XLOG=%TMP%\Adsk2012_Setup.log

echo %DATE% %TIME% installing autocad 2012 from network deployment >%XLOG%

rem ------------------------------------------------------

rem beware of word-wrapping below.  should be on one line...

rem ------------------------------------------------------

\\SERVERNAME\Acad2012\AdminImage\setup.exe /W /qb /I \\SERVERNAME\Acad2012\AdminImage\ACAD2012.ini /language en-us

rem ------------------------------------------------------

echo %DATE% %TIME% cleaning up desktop shortcuts... >>%XLOG%

del "%public%\Desktop\Autodesk Design Review 2012.lnk" /f /q

del "%public%\Desktop\Inventor Fusion 2012.lnk" /f /q

echo %DATE% %TIME% desktop shortcuts removed >>%XLOG%

ENDLOCAL

 

Edit the code to replace SERVERNAME and other info to suit your needs.  Save the Notepad file as setup.cmd somewhere on the MDT server (e.g. E:\Apps\Scripts\Acad2012\setup.cmd)

 

Import into MDT 2010 deployment share:

Right-click Applications, select New Application

Select type: “Application with source files”

Specify the properties (publisher, product, version)

Select the setup.cmd file (click Browse)

Confirm, import and click Finish

 

Open the Application properties, copy the “Application GUID” value to the clipboard

 

Open Deployment Properties, click Rules tab

 

Add to [Default] section…

 

; autocad 2012 custom deployment

Applications001={paste the application GUID here}

If you already have other ApplicationsXXX entries, just insert it after the highest number and assign the next sequential number (e.g. Applications011={guid} )

Useful Links on MDT 2010:

• TrueSec - http://www.truesec.com/infrastructure/tools
• Zero Touch Deploy - http://www.zerotouchdeploy.com/
• Windows Networking - http://www.windowsnetworking.com/articles_tutorials/Deploying-Windows-7-Part1.html

Read More

Deployment Headaches

I'm trying to figure out two seemingly simple issues that are driving my blood pressure up to Mars today:



1. Why didn't Autodesk make it possible to not only disable desktop shortcuts for AutoCAD 2012 (which they did: thank you very much - much appreciated!) But also for Design Review 2012 and Inventor Fusion 2012. They did not.



2. Why does the good old MSI property ADSK_DESKTOPSHORTCUT_1 not work anymore?



I'm referring to a network deployment here (just in case I'm confusing anyone). When you create a new deployment share, there is a checkbox to enable or disable the desktop shortcut for AutoCAD, but not for ADR or IF in the same deployment. Why one and not all three?!!! Eh?!!



Then I go into the deployment INI to modify the EXE_PARAM for each to add "ADSK_DESKTOPSHORTCUT_1=0" and save the file. Does no good. Then I edit the MST (transform) to change that property also. Still does no good.



Arggg!!!!!! Teeth are gnashing! Naval cursing begins in 5... 4... 3... 2...

Read More

When to SnapShot your VMware Guests

To non-nerds that title probably sounds like a mental meltdown, or some bizarre Xbox 360 game tactic.  I've learned the hard way, that when you create a new guest virtual machine, to do the following:

• Snapshot BEFORE installing the guest operating system
• Snapshot AFTER installing and patching it up to date
• Snapshot BEFORE installing any non-standard roles/features or add-ons
• Snapshot BEFORE installing any third-party products

If you're going to use the guest to perform SYSPREP and WIM capturing:

• Snapshot it BEFORE running SYSPREP

That last one has saved me more time and headache than I can count.  In fact, I really cannot count.  I just fake it pretty well.

Read More

Windows Web Admin 2011.04.26.001

A new build of WWA has been uploaded to SourceForge.  This one adds a new report to the main sidebar (filename: report7.asp).  This report adapts the SQL code used by one of the SCCM Windows 7 Readiness web reports and adds a summary tabulation at the bottom.  The target collection can be selected from a drop-down list at the top-right of the report page.  Give it a try and let me know how it works for you.

https://sourceforge.net/projects/wwadmin/

Read More

Run a SCCM Web Report Query in SQL Mgt Studio

During the course of diagnosing a (possible) bug in a particular SCCM 2007 R2 SP2 web report, I did what I usually do: copy the SQL statement from the report definition into SQL Server Management Studio (SSMS) and run it as an ad hoc query.  Someone asked how to do this because they run into problems with parameterized queries.  Actually, they probably asked me to explain this so I would appear nerdier than they are.  Well, it's really easy, sort of.

First, in the SCCM Admin console, open the properties for the web report, select all the SQL query code and copy it to the clipboard.  Open SSMS, expand the databases and select the SCCM database and click New Query.  Paste the code into the editor window.  Look for all the @variable references in the query.  For each one, add a SQL scalar variable declaration and assign it a value using the following syntax:

Declare @variableName DataType(size)

The trick is knowing the type and size of the appropriate variable.  The easy way to do this is in SSMS is to find the view or table, expand it, then expand the "Columns" collection and look at the column properties.   For example, the CollectionID column for most tables/views is VarChar(8) so if your parameterized query is referencing a Collection ID value, it might look like this…

USE SCCM_ABC

Declare @collID Varchar(8) = 'SMS00001'

(Note: The "ABC" above should be replaced with your 3-char site code).  As soon as the rest of the variables in your SQL code are declared, you should be able to click the Execute link and run the query directly against the data source in SQL Server.  If it runs and displays results, jump out of your chair and scream "IN YO FACE!!!" directly into the face of your nearest co-worker.  They love that.

Before you flip out and spit your bong water all over the computer screen in disgust, please know this:

1. I know there are other ways to do this and this is not the only (or best) way.

2. I know it's dangerous to tinker in SQL Server with SCCM tables.  Driving is dangerous too.  People die from falling down stairs every day also.  My middle name is Danger.  Actually, it's Michael, but whatever.  It can be dangerous to drive while tinkering with SQL SCCM tables, especially on a bicycle.  So, I'm not being that dangerous am I.

Read More

AutoCAD 2012 via MDT 2010

Dear Autodesk,

 



I applaud your efforts to not only keep your products up to snuff, but the documentation that goes with it as well.  However, I think it's time to update the Network Adminisrator's Guide (NAG) for AutoCAD 2012 to address the section titled "Distribute the Product Using Imaging Software"



 

http://docs.autodesk.com/ACD/2011/ENU/filesInstall/WS73099cc142f48755-1257e12111bf108800e-142c.htm 



As an IT consultant, I am seeing more and more customers shifting away from snapshot capture processes, like Symantec Ghost, towards sequenced deployment products like Microsoft Deployment Toolkit (MDT) and System Center Configuration Manager (SCCM) Operating System Deployment (OSD).  SCCM OSD actually wraps around MDT and Windows Deployment Services (WDS) to automate both "Lite Touch" and "Zero Touch" client image deployments.  The nice thing is that customers have choices, and for the most part they are excellent choices.  MDT is completely free, while SCCM is not.  MDT can be used to install Autodesk products as well as those by other vendors.  The process with MDT is much less problematic with regards to applications than Ghost-type imaging techniques often is.

 



So please, if at all possible, add some content to describe the process for incorporating a network deployment into an MDT 2010 deployment process?

 



Thank  you!



Dave "your number one fan" Stein

Read More

Windows Web Admin: Moving to a New Location

I've created a space for this project on SourceForge.net.  It will be removed from my downloads page and from now on will be maintained here:

https://sourceforge.net/projects/wwadmin/

Read More

Windows Web Admin: Build 2011.04.22.001

Minor bug fixes.  Unless I hear more feedback, this is it.  I'm not actively pushing any new features into this.  By the way, if you find this same app on SourceForge - that one is out of date.  I will try to update it as well.  Download it here.

Read More

Acad2012DX.msi - DirectX Installer for AutoCAD 2012 Deployments

As promised, I've uploaded a ZIP file to my downloads site which contains Acad2012DX.MSI and README_LICENSE.TXT.  The MSI was compiled using Symantec Wise Package Studio and was tested on a Windows 7 client using System Center Configuration Manager 2007.

Background:  For those that don't read my blog (you lucky person), or haven't read my book (oh, the pain!), there is a small but important issue with trying to push a prepared AutoCAD 2012 deployment installation using SCCM 2007.  It requires that .NET Framework 4 be installed prior to running the unattended setup (e.g. setup.exe /W /I /Q AdminImage\deployment.ini), as well as pre-installing the DirectX library components. 

The DXSETUP.exe installer won't usually install via SCCM 2007 with the /SILENT switch however.  The workaround I've used is to package the DirectX components from the AutoCAD installation media (or network deployment share) and run the "DXSETUP.exe /SILENT" request internally using synchronous/ignore-exit-code.  If you try to run the Deployment setup.exe through SCCM without having .NET Framework 4 and the DirectX libraries (only those from the AutoCAD media, it won't help to install the library from a Microsoft download), the advertisement will fail but returns a 0 exit code.  That means it reports back as "successful" when nothing was actually installed.

Phew!

So, it's easy enough to push .NET Framework 4 installations with SCCM 2007.  That's not the annoying part.  The DirectX libraries are what trip most people up.

All I ask is that you abide by the README_LICENSE.TXT file and assume the responsibility for testing this and not deploying it into a production environment without successful testing first.  Please let me know how it works for you?  Even though it is officially, and legally "unsupported" I would like to know if it works or not for you.  Thanks!

Read More

MDT 2010

This has to be one of the collest products ever. And I still can't believe it's free.

Read More

DirectX installer for AutoCAD 2012

I've mentioned this to the point of putting people to sleep.  In fact, it might drive someone to the point of a mental breakdown.  In any case, I decided to go ahead and upload my compiled MSI package for installing the DirectX components for AutoCAD 2012 which allows you to push it ahead of AutoCAD itself when using SCCM 2007 and not have the deployment installation die and return a bullshit result code.  Keep an eye on my downloads page for the file to be posted soon.  It will be near the top of the list.

DISCLAIMER: This is not a supported product.  It is provide "as-is" without warranty or guarantee of any kind whatsoever for any use or purpose, either express or implied.  Use at your own risk.  Test thoroughly in a non-production "test" environment before considering use in a production environment.  Author assumes NO liability or responsibility for any direct or indirect damages or loss of productivity alleged to have been caused by the use or misuse of this software.  The user (you) assumes any and all liability, risk, responsibility for any use or adaptation of this software. 

While I would very much like feedback on how it works, do not assume that I will address enhancement requests or requests to change the software of any kind.

Read More

Dear Software Developers

Note: This post first popped into my head after a recent discussion with some colleagues and an email discussion with two different vendors. Enjoy! :)

On behalf of the over-worked, under-appreciated Windows desktop and server administrators and IT minions around the world, please listen up:

- Build your Windows software properly. Read the "best practices" documents, and API materials. Know what you're doing and do it right. Don't assume everyone has 16 gb of RAM and a terabyte of free disk space. A pretty interface and a clever logo don't mean that much if your app eats all the resources and crashes a lot.

- Package your installations properly. They should ALWAYS support an easy "silent" installation, as well as an easy "silent" uninstallation. It should be simple to install it on 10 or 10,000 computers remotely overnight. Don't leave crap behind after an uninstall. Give use the option to control whether or not to create desktop shortcuts also.

- Unless your applications are built for IT staff, they should NEVER ever ever NEVER never ever ever ever never never EVER require the user to have Administrator permissions in order to use it. EVER!!!!!!!!!!!!!!!!!!!!!!!!!!!! (Followed by a trillion more exclamation marks!) If you cannot make your product run properly for a regular non-admin user, you don't know what you're doing. Period. In fact, if you think this is a trivial matter: power up the neighbor's woodchipper and stick your head in right now.

- Stop using shitty no-name packaging tools unless you like promoting the impression that your product is shitty. When an experienced IT person installs your product and sees that it was packaged with Wise or InstallShield, we know you care. If you used some lame-ass dollar store budget packaging tool, we smirk and say "more shitware, look out!" We try to avoid those whenever we can.

- If you intend to sell a lot of your product per customer, offer a concurrent license like FLEXlm. Don't expect us to activate and register 500 individual licenses. It aint going to happen. And stop requiring an Internet connection to launch your desktop app. If you need that, just make it a cloud app and stop wasting our time.

- Don't tie your products to outdated component technologies. Microsoft J++? Seriously?! Autodesk Actrix?! Really?!! Use modern tools and components. If you can't afford them, sell yourself on the corner to raise the money.

- If you anticipate your customers might want deploy your product using System Center Configuration Manager, Altiris or something similar, please make sure your installer works with them. If you have a bootstrap setup.exe that launches other installer processes, make it wait until all the child processes are done and return a real result code? Is that asking too fucking much???!

Can you tell I'm pissed off? I'm so ***-damned tired of shitware and shitty installers from half-assed dipshit developers. I can almost excuse it from garageware shops (guys working from home making shareware), but publicly-traded corporations have no excuse other than laziness and lack of concern for their customers.

And don't even try to offer the stupid redneck offshore argument. I see just as much crap coming from American vendors as from anywhere else. Get with the program or get a new career.

Thank you.

Dave "gritting his teeth"

Read More

Facebook

I've blogged about this before, but this time I have a new perspective. I joined Facebook in October 2006, not quite a full month after it was opened to the public. Prior to that, you had to have a .edu e-mail address in order to sign up. At that time, MySpace was the king of social web sites. Nobody was on Facebook outside of college students, faculty and a handful of other institution folks. Facebook was lagging behind sites like Xanga and others as well. Many of which are now long gone.

The Facebook design was incredibly spartan by comparison with today's version. There were no games, or much in the way of ads (none that I can recall). Notifications were almost non-existent. I loved it. To me, MySpace looked like a puke party. The results of eating Chili, washing it down with a mix of Jaegermeister and a purple passion fruit slurry, and then barfing all over the screen. I hated MySpace's layout, concept and design. Horrifically disorganized and difficult to navigate. Kids loved it. Adults winced in pain of just looking at it.

I thought Facebook, by contrast, had done it right. A clean design. Simple navigation. In short, MySpace was built for elementary school kids, while Facebook was built for grown-ups.

The problem, for me, however was that from October 2006 to December 2007, I couldn't convince ANYONE I knew to sign up. Family, friends, coworkers, no one. All I heard was either "I'm on MySpace, why do I need Facebook?", or "social web sites are dumb!". Looking back now, every single one of those folks, about two dozen actually, are now on Facebook, with the exception of three who never used any social web site anyway. (They still say "social web sites are dumb!")

Anyhow, back to 2007: after months of not having a real social network of people to interact with, in December of that year I closed my account and walked away from it.

Then came Spring of 2008. At some point Zuck and his team decided to add games, ads and survey polls to their site. Within a few months, and within a short window of time, almost half of those same people I'd asked and given up on were now signed up. Not only that, but they were now psyched and pumped about it and were bugging me to join as well. I was stunned. None of them seemed to have remembered me asking them to sign up only a few months prior. Whatever.

So I rejoined.

From 2008 to 2010 I watched as new features were added, existing features were changed and how everyone interacted with each other. I was actually starting to see the value and enjoyment of it. Finally, people of my generation were communicating, catching up, and sharing experiences. But like all things, they rise and they fall. It seems to me that the interaction volume level peaked sometime in mid-late 2010. Since then, it has all fallen off dramatically.

Now, in Spring of 2011, what I see most are reposts of news, quotes, sayings, verses, video clips, game invites and game stats, and quiz results.
What happened? I have a theory.

First, many of the interactions involved personal and political debates which soured many relationships. Even if not outright ended some, it often put the brakes on, quieting discussion threads overall.

A major problem that has daunted many new users is the flat terrain. Facebook has tools for segregating your friends into groups, but no matter what you do, it is still often an awkward experience to have an "open" discussion with so many different demographics watching your thoughts unfold. You family, your kids, your boss, your buddies, your business associates, and so on. That often leads to one of two artificial habits:

- clamming up
- refusing to friend certain people

In short: anti-social behavior creeps in.

Then there's the games and chat. Many users logon only to catch up on Farmville, Mafia Wars or whatever the hot game happens to be, but they really don't concern themselves with discussion efforts. Many users simply turn off chat so they don't get interrupted during their games as well.

In addition, more and more businesses, celebrities and even government entities are now leaning more heavily on Facebook as a communications medium. Their increased output has diltued the news feed dramatically, making it less of a personal interaction, and more of a spectator experience.

All of this combined has led to fewer posts of truly personal experiences. It's becoming less social and more passive. Gradually, but noticably.

I've been debating how long I will try to keep up hope that it will again take a turn towards the interesting side, and make the effort worth it. I don't see much hope. Facebook is well within the tractor beam of monetization and corporate pressure. Once they IPO it's over. That will mark the rise of the shareholder: Bye-bye flexibility and risk-taking.

This October will mark 5 years for me. I'm not sure I can make it that long. Every day I consider pushing the buttob to close my account. Any day now.

Read More

AutoCAD 2012 Deployment, .NET 4 and SCCM

Jimmy Bergmark posted a nice article on .NET Framework 4 deployment with AutoCAD 2012.  I mention this in my latest book on deploying AutoCAD 2012: The AutoCAD Network Administrator's Bible, 2012 Edition.  If you want to know more about the command-line options for .NET Framework 4, here they are: http://blogs.msdn.com/b/astebner/archive/2009/04/16/9553804.aspx

Remember to deploy .NET Framework 4 *before* you deploy AutoCAD 2012 if you're using SCCM.  Otherwise the installation will fail.  Same goes for DirectX.  I will hopefully be posting more detailed info on how to package the DirectX components for AutoCAD 2012.  I've been writing it repeatedly here and in my book, but I will try to get a video tutorial posted soon. Cheers!

Read More

Windows Web Admin: build 2011.04.19.001

Based on popular demand, I finally had a few minutes to add one more feature.  Not only can you add a computer to multiple collections - you can now add multiple computers to a selected collection.  It's like two great things in one!  For the price of, uhhhh…. zero?  Ok, popular demand really means one person: Christian.  I hope this helps!  I'll celebrate this as being the FIRST and ONLY feedback submittal.  Congratulations!

Download build 2011.04.19.001

Read More

Script Tip of Day: NET HELPMSG

The next time you see an error shot back at you from a script or command console request and wonder what the number means, try using NET HELPMSG X (where X is the number)

For example: net helpmsg 1619 (one of my favorite msiexec errors)…

This installation package could not be opened.  Verify that the package exists and that you can access it, or contact the application vendor to verify that this is a valid Windows Installer package.

(by the way, the most common causes for this irritating error are either a bad path+filename request sent to the msiexec parameter inputs, or the file/folder permissions are blocking access)

No, this isn't a new feature. It's one of those things that's been around forever but everyone forgets about until it's rediscovered.  So, just in case you forgot about it, here you go.

Read More

Empowering

From what I can tell there are two basic kinds of IT consultants: Those that are fine with doing the work, and those that want to empower their customers to be more capable.  It's not always a clear distinction of course, and quite often it is driven by the customer relationship.  In most cases I try to empower my customers.  I don't mind getting billable hours, but I don't like doing the same fix for the same break over and over again either.  I'd rather fix it, show them why it broke and how to avoid breaking it, and hopefully they appreciate the intent enough to hire me back again.  So far, so good.  Before you think I'm patting myself on the back, don't.  There are a huge number of consultants and other service providers that do the same thing every day.  The next time you get to experience someone trying to help you be a better you, thank them.  Pay it forward too.

Read More

WSUS Headaches and a Cure

It's been a long time since I've posted anything on WSUS.  For a while it was the biggest thing I dealt with, but now it's pretty seldom I worry about it.  Until one day when I bought a new internal hard drive for one of my servers and decided to swap it out without doing proper due diligence.

The server had a 500 GB IDE internal drive where WSUS was storing updates and the WinDB data files.  It runs on Windows Server 2008 R2, SP1.  When I swapped the IDE drive with a 1TB SATA internal drive, I didn't properly take down WSUS first.  So the result was a critically broken WSUS setup.  I couldn't uninstall WSUS and couldn't reinstall it either.  The errors were either 0x80004005 or 0x80004325 or something close.  I tried some of the recommended things like switching the "Windows Internal Database" service to use the local system account and reboot.  I tried MSICUU and all sorts of ugly hacking.  The role would not be removed and it would not let me force a new WSUS 3 SP2 install on top of it either.

The fix: Download and install SQL Server 2008 R2 Express, then install WSUS 3.0 SP2 x64 and point the database option to the SQL Express instance.  Bingo!  Back up and running fine.

Read More

What's Old is New…

Any of you remember a few years back, when Microsoft was kicking around the idea of an ad-supported Windows?  The concept of putting paid advertisements on the desktop in exchange for making the operating system either free or really cheap, was at the time considered absurd and offensive to many.  The general public scoffed at the idea and Microsoft quietly killed it off.  Like WebTV, Tablet Computers, and other projects: it was an idea that was struck before the iron was hot enough to bend.

So now we have ads in Facebook, Twitter, YouTube, Bing, Yahoo!, Google (including Gmail), on every "news" web site from CNN, to Fox, MSNBC and 99.999999 percent of local TV news organizations as well.  They're on our mobile phones and in every sports poster known to every fan around the world.  Ads are all around us, and in our faces, so much that we've become effectively unaware of them, as compared to our perception back in 2000.  Heck, they even slip ads into RSS feeds now and that was once considered an impossible idea.

So what now?

It's 2011.  If Microsoft said "Hey, we'll ship a free version of Windows X that forces ads on the desktop wallpaper background" would you go for it?  I sure as hell would. 

Read More

5 IT Resume Tips

After years of reading and reviewing resumes, here are my observations:

1. Current experience

Whatever experience you have that involves the newest technologies or products, put that first. Emphasize that. Nobody gives a shit about Netware or DOS experience anymore. If your experience is dated by more than 5 years, download trial versions, white papers, buy books, watch YouTube videos, whatever it takes to at least say (with honesty) that you are at least familiar with newer stuff.

Keep this in mind: with a sucky economy there are a lot of unemployed skilled folks looking for work. You need to stand out more than ever. Technology is all about change and adaptation and improvement. Show that you fit with that concept as well.

2. Spelling and Grammar

What can I say? On average, out of ten (10) "professional" resumes, five (5) will contain spelling errors, some will be horrifically bad. Seven (7) of them will contain grammatical errors. Know your vendor names, product names, and acronyms. Be able to rattle off what the letters stand for as well. What does "CAD" stand for? It's "Autodesk" not "AutoDesk" or "Auto Desk". There is no "AutoCad" or "Auto Cad", it's "AutoCAD". The vendor isn't "AutoCAD". That's a product name. Trademarks are a serious and expensive matter. They cost millions to establish and protect - act like you know that. If technology is your chosen profession, know your shit.

Resumes with gross spelling and grammar issues are rejected immediately. No further reading required.

3. Systems, Products, Technologies

Provide a concise list of what things you know and are good at managing. Specify how you are familiar with each one. Installing? Customizing? Administering? Supporting? Include version numbers and years of experience as well. Most importantly, exclude things that don't relate directly to the position being applied for. Management positions might involve experience gained from managing a softball team, but most data center and help desk positions don't give a shit about things like that.

If you have a long list of things to claim, it might be best to put them on a separate page.

Most important: If you put something on your resume BE PREPARED to discuss it in depth. Most worthy IT managers will run through everything you state during your interview. If you stumble or appear lost it will scream "liar!"

4. Accomplishments

Provide brief summaries of important projects, what your role was, what products were involved and what benefit it provided to the customer or employer. The general rule of thumb is the higher the level of the job being applied for, the more emphasis on cost savings or process improvement. But be careful to leave out the James Mitchner prose. Keep it concise and focused on the facts.

5. Depth and Detail

Leave out the fluff. MBA folks can handle fluff. IT nerds HATE it. It infuriates them. It's a garanteed opportunity killer. Don't tell a story unless you are applying for a position called "Storyteller". Facts. It's all about the facts. Have your resume reviewed by at least two other people who work in the same field. The more the better.

Basically, read it yourself and ask if you would believe it and would you hire that person.

Read More

Top 10 Mistakes Programmers Make

Just from my own experience over the past twenty-odd years…

10. Forgetting to document requirements with enough detail.

9. Failing to clearly define and meet milestones, metrics and deliverables.

8. Letting their own preferences cloud the direction of a customer-oriented product.

7. Worrying about programming language more than the end result.

6. Rushing a product to release (not enough beta).

5. Skipping alpha and going directly to beta or final (refinement of mistake #6)

4. Not enough error checking and exception handling.

3. Choosing the wrong licensing model.

2. Losing sight of where their product will fit into the market or even within a customer environment.

1. Failing to thoroughly document their code and all aspects of the product.

Read More

Technical Difficulties

I'm not ignoring you, I'm just buried under a lot of new projects right now.  I promise to come back soon and post something clever and humorous but ultimately useless, like most of my stuff.  In the meantime, this is what I'm buried in:

• MDT 2010 and WAIK deployment of XP and Windows 7 with WDS
• VMware PXE / WinPE guest boot for capturing and installing images from SCCM OSD
• Building a process automation app using SQL, LDAP, Active Directory, SCCM and coffee
• Trying to squeeze in a minute for reading on my Kindle (poor neglected thing)
• Helping my oldest daughter move out into an apartment
• Assistant coach of my son's little league team and doing scorebox work (pitch count, score board, score book, bad jokes, sunflower seeds, all that stuff)
• I'm forgetting something… uh…. uhmmm…  oh yea: hugging the wife and kids, petting the cat and dog, eating and occassionally getting an hour of sleep

ugh.

Read More

10 Lessons

This is a fantastic article by Shane Mac posted on Neil Patel's blog.  Whether you have any interest or involvement with a startup effort, or building a team or a project, this article has some fantastic tips and a great philosophy.

http://www.quicksprout.com/2011/04/09/from-a-notebook-to-launching-a-startup-10-lessons-learned-from-a-not-so-fast-company/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Quicksprout+%28Quick+Sprout%29

I'll admit, tip #2 made me wince, but I actually agree with his rationale and may change my habits as a result.  I've been pushed into so many NDA situations that I've knee-jerked into using them myself.  Then again, I don't face many VC folks, but still.  I am going to rethink it.

Tips #3 and #4 are obvious but he puts them into wording that makes it worth reading.  Tip #5, and well, oh whatever, the rest is also a great read.  I'm not sure about #10 though.  I think that depends on the nature of the application and the target audience.  Some niche situations almost demand multitasking concepts to be pushed in the customer's face.  I think, in the "grand scheme" however that this is rare.  In any case: enjoy!

Read More

Moments

Just a random thought before I head out to my son's baseball game.

In years past, there were no means for capturing a moment for looking back on it.  We witnessed something incredible firsthand, and we could only tell the story and hope others believed us.  The first thing that changed was the advent of photography.  But when it came to dynamic moments, or events, it wasn't until sound recording came about, and later, radio and then television.  But even with these, it wasn't practical for the average person to do their captures of moments and events.  So we still held onto the value of an interesting moment.

Then came cheaper personal cameras, video cameras, tape recorders, and all the way to today with DVR's, cell phones with cameras, and the secondary mediums of online sharing.

Stepping back and observing the impact of all this is tough, but from my own personal view it seems we've somewhat devalued the precious nature of an impromptu moment.  We're becoming relaxed and comfortable in the expectation that even if we miss the opportunity to capture some interesting event, that someone else likely took care of that.

The moment that seems to universally snap younger folks into reality these days is the passing of someone close to them.  We're now so busy occupying ourselves with mundane social activities in order to distract ourselves from our own mortality that when mortality knocks at the door, it stuns them.  I don't think mortality had as dramatic of an impact on the psyche of our ancestors back in the early 1900's as it does now.  Our technology and social interests seem to be widing a gap between reality and comfort.  In the process we've lost some of the appreciation for what a small moment in any given day really means.  If you ask someone who has survived a difficult ordeal like Cancer, they will likely understand what I'm saying.  Then again, maybe it's just that I'm getting older and slowing down a little more every day.

Read More

RSAT for Windows 7 SP1

Finally!!!

http://www.microsoft.com/downloads/en/details.aspx?FamilyID=7d2f6ad7-656b-4313-a005-4e344e43997d

For those of you that manage Windows Server systems from a Windows 7 client, and who ran into the annoying problem of having installed Service Pack 1 on your Windows 7 client BEFORE trying to install RSAT, and found that didn't work so well, well…. the solution has finally come around.

Read More

Shout Out - Abs Of Beer TV Blogcast

If you watch closely, you'll see my arms deftly handling the digital clapboard during the intro segment. By the way, The Birch is freaking AWESOME! John and Bryan had taken a break from doing their show for quite a while and are just now getting back into it. This is the second show since their return to the web. Enjoy!

Read More

I hope this isn't a bad omen?

The ConfigMgrSetup.log results from a recent site installation of SCCM 2007 R2.

When the last line says that everything is good to go, but the main word is mispelled, it doesn't make me feel warm and fuzzy.

Read More

Windows Web Admin (Final)

Final build (2011.04.06.001) is online and available for download at https://sites.google.com/site/skatterbrainz/downloads/wwa.zip?attredirects=0&d=1

Read More

The CAD Cloud. Finally. Citrix and AutoCAD 2012

I'll spare you the stories about long-gone experiments with lab rats like myself and Autodesk engineers with strange names and complicated accents handing us code on disks with no names written on them and project codenames that were more like a mash-up of numbers and letters.  My brain is fading fast.

Yesterday, Shaan Hurley dropped the long-awaited bombshell from Autodesk that 9 of their products are now certified for use with Citrix and XenApp.  The internal cloud.  IT admins the world over are sitting and staring into blankness as their brain cells rattle around like a ball in a spraypaint can, just trying to get their heads around what this means.

It means ONE INSTALL on a SHARED SERVER instance.  Possibilities?  Plenty:  Client push installs?  Gone. Client updates?  Gone.  Client upgrades?  Gone.  If you have a dozen or so clients this is probably not a big deal.  If you have hundreds or thousands of clients - this is a huge deal.

System Requirements
Licensing and License File requirements for Citrix XenApp apps
AutoCAD performance recommendations for Citrix XenApp

Autodesk Press Release

Read More

Deploying AutoCAD with MDT 2010

In my latest book I discuss the various ways to automate the deployment of Autodesk products throughout a Windows network environment.  Among these is "imaging".  This is essentially where you automate the process of loading the base operating system, drivers, updates, and a set of "standard" applications on a new computer before delivering it to the user.  If you're using a network-licensed version of an Autodesk product and the majority of your users use the product, then adding it to the base image might make sense in your environment.

Microsoft provides a free application called Microsoft Deployment Toolkit, or MDT, for creating custom imaging configurations for your various needs.  This can range from various hardware models (drivers and utilities) to various user functions (role-based configurations for various departments or skillsets).  It is also the required component for deploying imaging services within System Center Configuration Manager 2007, where it rolls up into what is known as the Operating System Deployment (OSD) feature.  MDT employs a variety of components and toolkits such as WAIK (Windows Automated Installation Kit), .NET framework and so on.  For more information about MDT visit the Microsoft TechNet MDT web site.

MDT uses a "task sequence" process that allows you to create a custom chain of events to install and configure everything you need on each computer.  Think of it as being kind-of like a giant BAT script, but with a very robust GUI environment to work with.  You configure which operating system, which service packs and updates, which drivers, which settings to customize, and which applications.  You also configure the order in which these things are executed.

Why would you want to use MDT to deploy Autodesk Network-Licensed Products?

It can save on product network traffic overhead compared with pushing the installations out to computers in the environment.  You can easily segment and isolate network traffic between the MDT host server and the workbench where the computers are imaged.  This keeps the traffic off of your production routers and switches, thereby avoiding slowing down your users even during peak production hours.

Why would you NOT want to do this?

This is a bit tricky, and often subjective, but you have to consider how many licenses of the Autodesk product you have available (FLEXlm), compared with how often you max out usage, compared also with what percentage of your total computer user population could use a license at any given point in time.  An example might be if you have 500 computers/users, but only 100 AutoCAD licenses.  If 150 of your employees are potential AutoCAD users, especially frequent users, you may experience the dreaded "No available licenses / try again later" scenario.  If you are in this scenario, then putting AutoCAD on every desktop and laptop might only exascerbate the problem by making it too easy for even casual users or curious folks (non-users) to attempt to launch AutoCAD.

The missing piece

Assuming you're not worried about the downside described above, and you wish to pursue adding this into your base image process, what do you need to do?

You need to create a Deployment share for AutoCAD.  This is not to be confused with the "Deployment Share" referenced within MDT.  That's a different deployment share.  You have to create a network deployment share for the Autodesk product and create the deployment for the product to publish into that share.  This is done from the installation media main setup interface.  You will need to follow the same basic process as if you were creating a deployment for SCCM.  You should make sure you include the installation of .NET Framework 4.0 before the task sequence item that installs the Autodesk 2012 edition of your products.  You may also need to (separately) package the DirectX components.  Last but not least, you need to make sure your command-line for installing AutoCAD includes the /I /Q and /W parameters (as shown in the NAG, or Network Administration Guide).  If you forget the /W parameter, the installation will not pause the Task Sequence until it finishes, and will then create a problem where the next step begins execution before the AutoCAD installation is even partially completed.

If you build a proper AutoCAD Deployment and configure the Task Sequence within MDT properly, you should have a smooth process for including it in all of your newly imaged, or re-imaged computers before delivering them to the end-users.

Cheers!

Read More

Estimation 101: Migrating an MS-Access DB to SQL Server

This is a very common scenario: A customer contacts me and asks "what would it take/cost for you to port our MS-Access database application to SQL Server and maybe put a web front end on it?"

That is quite often verbatim wording.

The answer I always give, and it's really not related to my being employed as a consultant, is "It depends."

Rather than dive into some ugly minutae, I'll give you the 50,000 foot skydive overview.  This is the conceptual, philosophical level, not the technical or procedural level, but it's important for both business and technical folks to understand this at a basic level:

There are two basic parts to what most people call a "MS-Access Database Application":

1. The database content (i.e. the tables, queries, and data stuffed into them)

2. The interface (forms, reports, menus, toolbars, etc. which users interact with when using the application)

In general, when you migrate an Access Database Application to SQL Server you are really only moving the data and data structures (tables, queries, etc.), while the interface aspects require redevelopment with something to make either a client/desktop application (aka "client-server") or a web application. Examples include Visual Studio, ASP.NET or even ASP or PHP (note: there are many more possibilities, but I'm trying to keep this short)

If the database "application" provides no custom interfaces and simply has the user opening tables and queries to interact with, and use, the application - it's a piece of cake.  You can either (A) use the Access "Upsizing" utility to "push" the data up to a SQL Server, or (B) use Integration Services to "pull" the data from the Access database into a SQL Server.  I prefer [B] because [A] sucks and is too limited and inflexible while [B] is incredibly flexible and yields better results with less effort.

If the database "application" provides extensive interfaces like dynamic drop-down lists, graphics, radio buttons, checkboxes, toolbars or ribbons, well, it will take longer, but again: it depends.

Case 1: Migrating an Employee Database

The Access ACCDB (Access 2010) database contains a simple form for entering basic employee data to create a new employee record.  There are a minimum number of tables and views and only one form.  The database contains 20,000 employee records (rows).  Only three employees should have rights to access the application and they are all in one AD security group.

One Solution: Copy the table structures and data into an existing SQL Server host and develop a web interface for managing employee records.  The IIS web site is configured for Windows Authentication, the web app folder is secured with NTFS permissions for the AD group.  The SQL connections are "trusted" with explicit AD group access configured in the SQL database.  Total time to implement: 4 hours.

Case 2: Migrating an Asset Inventory Management Database

The Access MDB (Access 2003) database contains multiple forms, numerous tables and queries, as well as about a dozen reports.  Some employees are allowed full permissions to edit records, while a select group is allowed only read permissions.  Other employees are denied access.  This results in 3 distinct roles.  The roles are managed within the database (application security).  The forms consist of many dynamic components and tons of clever graphics.

The company owns licenses for Office 2010 but has decided to hold off until this application can be updated to remove the reliance upon Access 2003.  MDOP/App-V is not an option for this customer and neither is Embedded XP or Remote Desktop Services (TS Remote, Terminal Server, Citrix, Xen or whatever).  They just want this beast killed and disposed of.

One Solution: Chain the Access developers to the back of a truck and drive off down a long gravel road at 60 mph.

There.  That was easy now, wasn't it?  Clear as mud.

Read More

Holy Cow! Strep and Couch Fatigue

I've been quiet lately because I've been getting punched out cold by a combination Strep infection + chest cough, so I've been spending more time on the couch watching Regis & Kelly, Rachel Ray and other daytime horrors that destroy the human mind.  There's lots going on, but unfortunately I'm too worn out to type a lot just yet.

But on a really cool note, two of my books are in the top 10 of Amazon's Best Sellers in the "AutoCAD" category!  Holy cow (times a hundred)!  The latest book (AutoCAD Network Administrator's Bible, 2012 Edition) is at #7.  The previous edition (2011 Edition) is at #9.  I don't know what to say.  I'm really surprised and I appreciate every copy purchased.  See the list at http://www.amazon.com/gp/bestsellers/books/3483

Read More