topic Re: SCCM Delete Provisioning Data from script in Intel vPro® Platform

SCCM Delete Provisioning Data from script

idata — Fri, 20 Feb 2009 14:45:13 GMT

I am looking for a way to do a full unprovision of a provisioned SCCM client from the command. I want to do it the same way as the SCCM console does, because that will take care of all of the cleanup required so I can then re-provision them.

Re: SCCM Delete Provisioning Data from script

idata — Fri, 20 Feb 2009 16:25:35 GMT

Hello,

I'd recommend writing some sort of wrapper script around the unprovisionex.exe utility provided by Intel. This tool ought to do what you're looking for.

http://communities.intel.com/docs/DOC-1763 http://communities.intel.com/docs/DOC-1763

Trevor Sullivan

Systems Engineer

OfficeMax Corporation

Re: SCCM Delete Provisioning Data from script

idata — Fri, 20 Feb 2009 16:34:14 GMT

Trevor, will the unprovisionex.exe take care of all of the cleanup as well? SCCM creates an AD object for the AMT device and that needs to be deleted as part of the process. If I go into the SCCM Console and select "delete provisioning data" for a specific client, it will take care of the cleanup, the syste detects that it is not provisioned, has an auto-provision policy and re-provisions on its own.

If I can find out how SCCM performs the unprovision, I can automate the process completely.

Re: SCCM Delete Provisioning Data from script

idata — Fri, 20 Feb 2009 16:56:49 GMT

Hello,

The source code for ConfigMgr isn't available, and you'd probably have to talk to Microsoft developers to figure out every detail of what it's doing when it does a full unprovision. Most of these additional actions can be easily automated with VBscript or Powershell, such as deleting the AD computer account for the AMT device, as you mentioned.

I'm not sure about automating revocation of the AMT Web Server certificate assigned to the client, but I would imagine there are APIs to tie into your Microsoft Certificate Authority.

Trevor Sullivan

Systems Engineer

OfficeMax Corporation

Re: SCCM Delete Provisioning Data from script

idata — Sun, 08 Mar 2009 17:06:52 GMT

In follow-up to this, I actually discovered a method of invoking SCCM's unprovisioning command on a vPro system (or an entire ConfigMgr collection). You can perform this operation using the ConfigMgr WMI provider.

There are two key methods on the SMS_Collection WMI class that you would be interested in:

http://msdn.microsoft.com/en-us/library/dd339667.aspx AMTOperateForMachines

http://msdn.microsoft.com/en-us/library/dd339692.aspx AMTOperateForCollection

If we were to use these methods via a Powershell script, or interactive Powershell session, we would execute code that looks something like this:

-----------------------------------------------------------

# Define SCCM server

$SccmServer = 'sccmsp1'

# Define SCCM WMI provider path

$SccmNamespace = 'root\sms\site_lab'

# Define WMI class name

$SccmCollection = 'SMS_Collection'

# Define target SCCM (AMT) resource to unprovision

$AmtResourceId = "1234"

# Build WMI path string from previously defined variables

$WmiString = "\\${SccmServer}\${SccmNamespace}:${SccmCollection}"

# Get and store a reference to the SMS_Collection WMI class

$SccmCollectionClass = [wmiclass]"$WmiString"

# Perform a partial unprovision on the target resource ID

$UnprovisionResult = $SccmCollectionClass.AMTOperateForMachines($AmtResourceId, 32)

# Perform a full unprovision on the target resource ID

$UnprovisionResult = $SccmCollectionClass.AMTOperateForMachines($AmtResourceId, 64)

------------------------------------------------------------------

FYI, I have not tested the code above, and do not recommend running it in a production environment until it has been tested. Other than some possible syntax problems though, it should theoretically work. Since the AMTOperateForMachines WMI method takes an array as the first parameter, you might have to surround a non-array with @() to force Powershell to interpret it as an array ... again, I am not sure of this though, as I haven't had an opportunity to test this code.

$UnprovisionResult = $SccmCollectionClass.AMTOperateForMachines(@($AmtResourceId), 32)

Hope this helps!

Trevor Sullivan

Systems Engineer

OfficeMax Corporation

Re: SCCM Delete Provisioning Data from script

idata — Mon, 09 Mar 2009 14:50:31 GMT

This was very helpful. I was able to create a VBScript that invokes this method to run the full unprovision.

Re: SCCM Delete Provisioning Data from script

idata — Tue, 25 Oct 2011 19:23:16 GMT

Eschloss, I know this is an old post but is there any chance i can get a copy of your vbs for this?

Or maybe someone else has a similar script i can use?

much appreciated

thanks

Stéphane