How to stop SMS 2003 advertisement?

myITforum.com Community Forum

Home Forums Blogs Live Support chat Search Articles Wiki FAQ Email Lists Register Login My Profile Inbox Address Book My Subscription My Forums

Photo Gallery Member List Search Calendars FAQ Ticket List Log Out

All Forums RSS Feed Subscription:

How to stop SMS 2003 advertisement?

View related threads: (in this forum | in all forums)

Logged in as: Guest

Printable Version

All Forums >> [Management Products] >> Microsoft Systems Management Server >> SMS 2003 >> How to stop SMS 2003 advertisement?

Page: [1]

Message

<< Older Topic Newer Topic >>

How to stop SMS 2003 advertisement? - 5/7/2008 10:02:43 AM

sscc

Posts: 17
Score: 0
Joined: 3/26/2008
Status: offline

We are running SMS 2003 SP2 with a few DP servers.

If an advertisement was wrongly applied to a collection, how to stop the advertisement?

We had an advertisement on our SMS system today. The advertisement caused hugh network traffic as the package is about 150 MB.

What I did is to disable the advertisement but SMS client PCs in the collection take about half hour to one hour to get the network traffic down to normal level.

How can I stop the advertisement much more quickly?

By the way, how can I find out what triggered the advertisement?

Thanks!

Post #: 1

RE: How to stop SMS 2003 advertisement? - 5/7/2008 10:15:05 AM

jnelson993

Posts: 731
Score: 91
Joined: 2/18/2005
From: Minneapolis, MN
Status: offline

I believe if you stop the SMS_DISTRIBUTION_MANAGER components you can stop the torrent since that's what's overseeing the pushing.

_____________________________

Number2 (John Nelson)
MyITForum - Blog
MyITForum - Forum Posts

(in reply to sscc)

Post #: 2

RE: How to stop SMS 2003 advertisement? - 5/7/2008 10:18:30 AM

jnelson993

Posts: 731
Score: 91
Joined: 2/18/2005
From: Minneapolis, MN
Status: offline

Or is it the SMS_OFFER_MANAGER? Man, I need coffee.

Anyway, if you shut stuff down from the server side until after the window has passed it should help. And if worse comes to worse you just pull the network cable from the server :)

_____________________________

Number2 (John Nelson)
MyITForum - Blog
MyITForum - Forum Posts

(in reply to jnelson993)

Post #: 3

RE: How to stop SMS 2003 advertisement? - 5/7/2008 10:39:08 AM

phaustein

Posts: 859
Score: 32
Joined: 3/21/2005
From: Washington, DC
Status: offline

Actually, after you disable the advertisement/program you should update the DPs. This will force a new verison of the policy and will cause most systems to fail to install until they have updated their policies. This works like a champ. It also helps to stop systems that have downloaded the package via BITS from running it as well.

_____________________________

Hope this helps.
Paul

(in reply to jnelson993)

Post #: 4

RE: How to stop SMS 2003 advertisement? - 5/7/2008 11:12:36 AM

sscc

Posts: 17
Score: 0
Joined: 3/26/2008
Status: offline

Hi Paul,
I will disable the advertisement/program first and then update the DPs when same mistakes again.

Thank you very much.

(in reply to phaustein)

Post #: 5

Now what to do with the advertisement? - 5/8/2008 4:36:43 AM

sscc

Posts: 17
Score: 0
Joined: 3/26/2008
Status: offline

What should I do with the advertisement? I have now 5000 PCs with "No Status" for the advertisement report.

If I enable the advertisement, the 5000 PCs will try to download the package again. Therefore, I must delete the advertisement. Am I right?

But if an advertisement is deleted, all relevant reports will be deleted too.

Thanks,

Shang

(in reply to sscc)

Post #: 6

RE: Now what to do with the advertisement? - 5/8/2008 6:22:03 PM

phaustein

Posts: 859
Score: 32
Joined: 3/21/2005
From: Washington, DC
Status: offline

If you do no want the advertisement or any of its relevant data you can delete it. If you want to retain it and not have it run on those systems, you should expire the advertisement and point the advertisement to a dummy collection (a collection with no membership), call it something like _Archived Adverts. This will remove the advert from the collection and leave you with the data from it. This is how I maintain the history of my advertisements.

_____________________________

Hope this helps.
Paul

(in reply to sscc)

Post #: 7

RE: How to stop SMS 2003 advertisement? - 5/9/2008 8:25:20 AM

lbriggs

Posts: 94
Score: 2
Joined: 7/10/2003
From: Hartford, CT
Status: offline

When we need to abruptly cancel and advertisement, we immediately begin removing the package off of DPs, and expire the advertisement. You will still be relying on policy replication to the clients to inform them that the advert is expired, so you will still get a few machines trying to run the ad, and this is where pulling the package off the DPs helps.

Do you have QOS on your routers or have rate limiting on your senders? If not, I would persue one of these options to help keep your networking folks happy.

(in reply to sscc)

Post #: 8

RE: How to stop SMS 2003 advertisement? - 5/9/2008 9:31:31 AM

jnelson993

Posts: 731
Score: 91
Joined: 2/18/2005
From: Minneapolis, MN
Status: offline

Lots of good ideas here. Gotta love MyITForum!

_____________________________

Number2 (John Nelson)
MyITForum - Blog
MyITForum - Forum Posts

(in reply to lbriggs)

Post #: 9

RE: How to stop SMS 2003 advertisement? - 5/9/2008 11:06:00 AM

hwilson542

Posts: 23
Score: 0
Joined: 3/23/2006
Status: offline

On the DP, remove the security on the SMSPKG?$\xxxxxxxx folder where xxxxxxxx is the package ID. I have done that in the past and (while klugy) works !

_____________________________

Henry E. Wilson
Sanofi-Aventis
Malvern, PA 19355
610-889-6235

(in reply to jnelson993)

Post #: 10

RE: How to stop SMS 2003 advertisement? - 5/11/2008 9:12:48 PM

phaustein

Posts: 859
Score: 32
Joined: 3/21/2005
From: Washington, DC
Status: offline

Updating the DPs works the same as removing the package from the DPs but in a slower capacity. When updating the DPs the content location information is updated from one verison to a newer verison. So when systems check in and want to execute the package the content version number has changed and they fail to run the package. Then when the system checks back in for policy it will get the new number and will get the information that the advert has been expired or disabled. This has worked nicely for me several times. Plus, removing the package requires you to put back the package and if you have slow links, like I do, it wouldn't want to waste the bandwidth removing and returning the package. Just my 2 cents.

_____________________________

Hope this helps.
Paul

(in reply to lbriggs)

Post #: 11

What security to be removed on the DP? - 5/12/2008 5:05:05 AM

sscc

Posts: 17
Score: 0
Joined: 3/26/2008
Status: offline

Hello Henry,
This is another new idea. Could you please clarify a bit more?

The permissions on the SMSPKG?$\xxxxxxxx folder are

Full Control for the local Administrators group on the DP server
Read & Execute, List Folder Contents, Read permissions for the Users group on the DP server.

Have you removed both permissions or only the Users's permissions?

Thank you very much.

(in reply to hwilson542)

Post #: 12

RE: How to stop SMS 2003 advertisement? - 5/14/2008 11:31:14 AM

scassells

Posts: 9
Score: 0
Joined: 4/1/2004
Status: offline

Something quick and dirty

http://myitforum.com/cs2/blogs/scassells/archive/2008/05/14/how-to-stop-an-errant-advertisement-in-sms-2003-sccm-2007.aspx

http://myitforum.com/cs2/blogs/scassells/archive/2008/05/14/how-to-stop-an-errant-advertisement-in-sms-2003-sccm-2007.aspx

(in reply to sscc)

Post #: 13

RE: What security to be removed on the DP? - 5/14/2008 11:55:23 AM

hwilson542

Posts: 23
Score: 0
Joined: 3/23/2006
Status: offline

Call this the "kamikaze" approach ...
This happened to me several years ago (SMS 2.0 days, but still pertains). I removed the User rights from the share and the distribution came to a screeching halt!

The downside of that action was that several systems received nasty error messages (aborted installation), but it effectively stopped the distribution. Now, if you have many DP's this may not be a viable method unless you have a script and a list of server/shares...

_____________________________

Henry E. Wilson
Sanofi-Aventis
Malvern, PA 19355
610-889-6235

(in reply to sscc)

Post #: 14

RE: What security to be removed on the DP? - 5/14/2008 5:10:18 PM

phaustein

Posts: 859
Score: 32
Joined: 3/21/2005
From: Washington, DC
Status: offline

Some of these methods work for small or single site operations and not large multi-tiered site. Others, hack the processes by removing files and fiddling with permissions, all of which have to be corrected for the operation to return to normal. This can cause additional problems if other admins are not on the same page and that the changes were not corrected because someone forgets to correct it. And most haven't addressed the download and execute option, if the system already downloaded the package to run at a later date changing permissions or removing the packages won't stop them from running.

I have found that what I had suggested works the best overall in most cases, and I'll explain why. Changing the advertisement will effective change policy, so any new systems will discover the change and comply with the change. Forcing an update of the package will also affect policy as well and as mention for the advertisement new systems will discover the change and comply. But what is most important about updating the package is that it creates a new version of the package. So any systems that had the old version of the policy and try to request content, the site will inform them that the content is not available and they need to check in for new policy. This works for the download and execute method, provided the system checks in for policy. If the system has the old policy information and has downloaded the package completely and doesn't connect back to the network, then there nothing that can be done to stop it. But if the system does check-in or tries to complete the download, it will effectively stop the deployment.

I am not suggesting that the option I have given is the only option or the best option, just the most effective one.

_____________________________

Hope this helps.
Paul

(in reply to hwilson542)

Post #: 15