How to Strengthen Security for Intune with RBAC in SCCM

Nicolas PilonApplication, Console, Intune, SCCMLeave a Comment

  The majority of companies use SCCM to manage laptops, computers, servers and some for mobile devices, if they use Microsoft Intune in hybrid mode. In some situations, Intune and SCCM management is done by 2 different teams. Except for the Full Administrator role in SCCM, it’s possible to separate Intune with Configuration Manager infrastructure in the console by using security roles and security groups (RBAC). The goal is to ensure that an Intune administrator does not access Configuration Manager client devices and objects, as you don’t want to end up with people who may wipes or manages mobile devices when they are … Read More

Automatically Uninstall Unused Applications with SCCM

Nicolas PilonApplication, Asset Intelligence, SCCM, SOFTWARE METERING20 Comments

Do organization pay too much for your software licensing? Paying more licences than you use doesn’t make your company really effective, especially when we talk about IT Cost Transparency. Do you know how much money your company spend for software licensing versus their utilization? Using inventory, SCCM detect if an application is installed, it also monitors usage using Software Metering and uninstall application using deployment mechanisms. Combining all, you can deliver a great solution to minimize licences cost to your organisation. Software metering is a great feature that is not always well known by the business. Company must take the advantage … Read More

Which Windows 10 Deployment Methods Suits You?

Nicolas PilonAdaptiva, OSD, SCCM, WINDOWS 101 Comment

Windows 10 Deployment Methods If your company runs Microsoft System Center Configuration Manager (SCCM), and you’re trying to figure out the best way to deploy Windows 10, you have choices. Specifically, there four key options you might want to choose between: Microsoft Deployment Toolkit (MDT) standalone MDT and SCCM SCCM Standalone MDT integrated with SCCM Making the right selection to meet the needs of your organizations is not always clear so in this blog post, we’ll briefly explain each option, and outline some of the trade-offs between them. Microsoft Deployment Toolkit Standalone The MDT is a free toolkit for automating … Read More

Intune Client | Error User License Type Invalid

Nicolas PilonClient, Intune, SCCM6 Comments

  The starting point of all mobile management project is enrolling devices. Without enrollment, you can’t manage any devices. When running in hybrid mode, the enrollment process is different than running Microsoft Intune in standalone mode. The SCCM Service Connection Point role keeps connectivity between both end (SCCM on-premise and the Cloud). Both environments must be synchronized, otherwise, you have chance of getting Intune error User License Type Invalid during Intune enrollment on your mobile devices. This post will explains how to resolve this issue. Intune Error User License Type Invalid This is the error message shown just before the enrollment process when you click Enroll : If … Read More

List of SCCM Client Installation Error Codes

Nicolas PilonClient, REPORT, SSRS, System Health24 Comments

As an SCCM administrator, it’s important to learn the concept of troubleshooting a Configuration Manager client installation. By targeting the SCCM client installation error codes, you will have a better idea of what is happening during client installation. The error codes is not an exact science, they can defer depending on the situation. For a better understanding about error codes, read this great post from Jason Sandys. These codes appears in ccmsetup logs, located on in C:\windows\ccmsetup\logs. During the installation process, monitor the ccmsetup.log using cmtrace.exe and locate each error codes. There are other logs, on which the SCCM client installation relates. If you don’t … Read More

How to Start Securing ConfigMgr in the Enterprise

Nicolas PilonAdaptiva, SCCMLeave a Comment

  As an IT professional, you already know that a security breach can be devastating. It can also be expensive, $4 million on average according to a 2015 survey sponsored by IBM. Microsoft System Center Configuration Manager (ConfigMgr) can play a huge part in preventing attacks and implementing an enterprise-wide security solution. ConfigMgr helps companies make sure all endpoints are current with the latest security fixes, configured correctly, behaving normally, and only running authorized applications. However, like almost everything else in IT these days, ConfigMgr itself is a target for hackers who can use it to distribute malware, take control … Read More

Use IMEI Numbers with SCCM and Intune to identify Corporate Devices

Nicolas PilonIntune, SCCM1 Comment

Last January, Microsoft released an update for Intune standalone environment in which you can import international mobile equipment identity (IMEI) numbers for mobile device platforms that have an IMEI number to help identify corporate-owned mobile devices. Once enrolled in Intune, devices with imported IMEI numbers are tagged as Corporate, which can be used for applying policies that are different than those applied to Personal devices. What happens if you use an Intune hybrid environment? SCCM has no built in tool to add a list of IMEI numbers and switch device owners from Personal to Company when devices are enrolled. In this post, we will configure SCCM … Read More

How to install Microsoft Intune Client for MAC OSX

Nicolas PilonClient, Console, Intune, REPORT, SCCMLeave a Comment

Did you ever wanted to install the Microsoft Intune client on MAC OSX? Microsoft Intune standalone supports Apple operating systems since November 2015. SCCM 1602 is required to support the Microsoft Intune client with the SCCM connector (hybrid environment). The Intune client is a lightweight version of the SCCM client. You can deploy some policies, SCEP certificates, VPN and WiFi profiles. There is also a hardware inventory scan on the devices. In a previous post, we explained how to set up a compliance policy for MAC OSX, now that our client is ready to receive the compliance policy, we will install the … Read More

How to set up MAC OSX Compliance Policy for Microsoft Intune Client with SCCM

Nicolas PilonConsole, Intune, SCCMLeave a Comment

Microsoft Intune is a mobile device management tool that supports a variety of operating systems. Obviously, Intune supports the popular operating system Mac OSX. Since November 2015, companies that use standalone version, it’s possible to install the Intune client on MAC OSX devices. With the latest release of SCCM 1602, hybrid environment can enrol MAC OSX. The Microsoft Intune client allows the deployment of policies, SCEP certificates, VPN and WiFi profiles. It’s also a new way to inventory your MAC. Before enrolling a Mac OSX in Intune, a compliance policy must be configured to apply a minimum of security control. This post will explain … Read More

Referenced Configuration Items Not Available in SCCM

Nicolas PilonApplication, Intune, SCCMLeave a Comment

Are you importing your applications in SCCM when it’s time to copy applications from one environment to the other? In some company, SCCM is installed twice, one for development and one for production. SCCM in a development environment provides flexibility but it adds additional cost to maintain both environment. Using the import application wizard in SCCM can ease the process and save time to copy applications from one to another environment. In the best of worlds, it is best to keep environment identical much as possible, but it is very difficult to get there. The problem is that you can end up with missing features … Read More