How to join Autopilot devices to Hybrid AD

Jonathan LefebvreIntune2 Comments

In our previous post, we covered how to set up computers using Windows Autopilot. While the main scenario is to join computers to Azure AD, leaving the on-prem domain aside is for sure not realist in many cases. Microsoft has added the ability to join the On-prem domain as part of the Autopilot setup. This feature is still currently in Preview, but worth testing and checking it out. In this post, we will detail the requirements and how to configure Azure and on-prem AD to allow Hybrid AD joined computers. This post is part of a series on Windows Autopilot … Read More

How to customize Windows 10 using Intune and Autopilot

Jonathan LefebvreIntune6 Comments

windows 10 intune autopilot customization

With the latest updates Microsoft released to Intune and Autopilot, it is becoming more realistic to leave the task sequence behind in favor of using Autopilot with Intune to deliver the computer standards required by an enterprise. While it will no be possible for all scenarios, a standard PC used for administrative tasks can be delivered with many, if not all, of the required customization. While many of our previous Windows 10 Customization tricks are still gonna be useful, the delivery will be different from simply running various scripts from a Task Sequence. In this post, we will go over … Read More

Enable SCCM Distribution Point Maintenance Mode

Benoit LecoursSCCMLeave a Comment

SCCM Distribution point maintenance mode is a new feature available in SCCM 1902. Following Microsoft documentation, you can enable maintenance mode when you’re installing software updates, or making hardware changes to the server. During maintenance mode the SCCM distribution point can/can’t: The site doesn’t distribute any content to it Management points don’t return the location of this distribution point to clients The distribution point properties are read-only. For example, you can’t change the certificate or add boundary groups When you update the site, a distribution point in maintenance mode still updates Any scheduled task, like content validation, still runs on … Read More

SCCM 1902 Step-by-Step Upgrade Guide

Benoit LecoursSCCM15 Comments

Microsoft has released the first SCCM version for 2019. Microsoft still uses the same standard naming versions. You can begin upgrading your SCCM Current Branch environment to the latest 1902 release. If you want to install the latest updates, this post is a complete step-by-step SCCM 1902 upgrade guide. If you’re looking for a comprehensive SCCM installation guide, see our blog series which covers it all. You won’t be able to install SCCM 1902 if you are running SCCM 2012, but 1902 this is the new baseline version. This means that if you’re downloading the source from Volume Licensing, 1902 will … Read More

Getting Started with Microsoft Autopilot | Step-by-Step Guide

Jonathan LefebvreIntune1 Comment

Since the announcement of Windows Autopilot there has been a lot of interest and questions about how it actually works, will it blend easily in our environment, etc. While at the beginning there was some major drawback compared to what a Task sequence’s configured computer can deliver, with the latest updates to the service, it is now a good time to start your journey with it. In this post, we will detail all the requirements and how to set up an environment for Windows Autopilot. This post is the first one of a post series that will be published in … Read More

Deploy Win32 application with Intune

Jonathan LefebvreIntune2 Comments

Intune Win32 Application

Last September, Microsoft announced that Intune was finally able to distribute Win32 applications. This was a major show stopper to go full MDM for Windows 10 devices for many company and would keep using SCCM to fulfill this duty. The feature is now out of the preview state and fully ready to roll! In this post, we will detail how to deploy a Win32 application with Intune. We’ll use Google Chrome with the MSI installer. Prerequisites Download the Intune Win32 App Packaging Tool from GitHub Prepare Intune Win32 application This step consist of “wrapping” all the required files into an … Read More

Monitor and identify SCCM Maintenance Windows

Benoit LecoursSCCM1 Comment

During a recent SCCM Assessment, I encountered a customer having hundreds of Maintenance Windows. I had to identify which collection and which devices were assigned those SCCM Maintenance Windows. SCCM has only 1 built-in report for Maintenance Windows monitoring (Maintenance windows available to a specified client). This report lists all maintenance windows that are applicable to a specified client. This is fine but what if I need to have the maintenance window on multiple clients or collections? It would also be nice to have a list of all collection on which there’s maintenance window applied. Free SCCM Maintenance Windows Report … Read More

Top 5 No-Brainers Security Features in Microsoft Intune

Nicolas PilonApp Protection Policies, Azure, Cloud, Conditional Access, EMS, Intune1 Comment

By 2019, when you plan to deploy modern device management solutions in your company, the security must be a priority. The cloud is accessible from anywhere on the planet and mobility allows users to connect from anywhere. Also, our society is changing and our lifestyle habits as well. Users that have access to corporate data without being forced to connect to the corporate network, is much more convenient. Before you start registering devices in Microsoft Intune, it’s important to set up the Intune portal safely. Moreover, the different operating system platforms, and the types of devices that connect to your … Read More

Deploy Windows Server 2019 using SCCM Task Sequence

Stephane FaubertSCCM4 Comments

In this post, we will deploy the recently released Windows 2019 with SCCM 1810. We will describe how to create a SCCM Windows 2019 deployment task sequence and deploy it to your servers. If you are already deploying Windows 10 in your environment, or even Windows Server 2016, chances are that you won’t need to change anything in your environment. This task sequence will help you deploy a “vanilla” Windows Server 2019 Standard edition using the default Install.wim from the Windows 2019 media. This means that you’ll end up with a basic Windows 2019 with the SCCM client and nothing else. You will be able to edit … Read More

Block Apple Facetime Built-in App with Microsoft Intune

Nicolas PilonApp Protection Policies, Intune, SCCMLeave a Comment

Block Apple Facetime Intune

A new bug was discovered with Apple’s Facetime app that gives the caller the ability to listen to the other device and even watch the video without approving the call. This vulnerability is not giving access to corporate data or personal information, but have more consequences on personal level. Even though Apple temporarily kill the switch of the service and seems to have solved the problem via a future software update, there are some actions that can be made if you want to avoid trouble. You can manually turn off the Facetime app with iOS and MacOS. But, can we … Read More