SCCM 1902 Step-by-Step Upgrade Guide

Benoit LecoursSCCM25 Comments

 Microsoft has released the first SCCM version for 2019. Microsoft still uses the same standard naming versions. You can begin upgrading your SCCM Current Branch environment to the latest 1902 release. If you want to install the latest updates, this post is a complete step-by-step SCCM 1902 upgrade guide. If you’re looking for a comprehensive SCCM installation guide, see our blog series which covers it all. You won’t be able to install SCCM 1902 if you are running SCCM 2012, but 1902 this is the new baseline version. This means that if you’re downloading the source from Volume Licensing, 1902 … Read More

Monitor and identify SCCM Maintenance Windows

Benoit LecoursSCCM1 Comment

During a recent SCCM Assessment, I encountered a customer having hundreds of Maintenance Windows. I had to identify which collection and which devices were assigned those SCCM Maintenance Windows. SCCM has only 1 built-in report for Maintenance Windows monitoring (Maintenance windows available to a specified client). This report lists all maintenance windows that are applicable to a specified client. This is fine but what if I need to have the maintenance window on multiple clients or collections? It would also be nice to have a list of all collection on which there’s maintenance window applied. Free SCCM Maintenance Windows Report … Read More

Deploy Windows Server 2019 using SCCM Task Sequence

Stephane FaubertSCCM5 Comments

In this post, we will deploy the recently released Windows 2019 with SCCM 1810. We will describe how to create a SCCM Windows 2019 deployment task sequence and deploy it to your servers. If you are already deploying Windows 10 in your environment, or even Windows Server 2016, chances are that you won’t need to change anything in your environment. This task sequence will help you deploy a “vanilla” Windows Server 2019 Standard edition using the default Install.wim from the Windows 2019 media. This means that you’ll end up with a basic Windows 2019 with the SCCM client and nothing else. You will be able to edit … Read More

Block Apple Facetime Built-in App with Microsoft Intune

Nicolas PilonApp Protection Policies, Intune, SCCMLeave a Comment

Block Apple Facetime Intune

A new bug was discovered with Apple’s Facetime app that gives the caller the ability to listen to the other device and even watch the video without approving the call. This vulnerability is not giving access to corporate data or personal information, but have more consequences on personal level. Even though Apple temporarily kill the switch of the service and seems to have solved the problem via a future software update, there are some actions that can be made if you want to avoid trouble. You can manually turn off the Facetime app with iOS and MacOS. But, can we … Read More

SCCM Best Practices (Tips and Tricks)

Benoit LecoursSCCM12 Comments

Sccm best practices

That being said we are doing numerous SCCM Assessment these days, looking at various SCCM setup and configuration. Here’s our compiled list of settings, configuration and tricks we can give you to makes your SCCM configuration better. Central Administration Site (CAS) Don’t use a CAS. You’ll see this advice everywhere… and it’s true. Don’t use it. Just don’t. When the Central Administration Site was introduced back in SCCM 2012 SP1 there was no concept of a preferred site system. If you had to manage thousand of clients in a remote site/region and a secondary site was not an option, the … Read More

Remove Recurring Schedules from Device Collections in SCCM Before Upgrading to 1810

Adam GrossSCCM16 Comments

Today I upgraded my production SCCM/ConfigMgr environment from 1806 to 1810, but before I did, I took care of some housekeeping that saved me a fair amount of work on the backend. If you’re like me, you try ensure that your collections aren’t being refreshed unnecessarily. For collections where I have direct or include/exclude rules, I always uncheck the incremental and scheduled refresh boxes when setting up the collection. However, there’s one extra step that I haven’t been doing that requires just a bit of consideration before upgrading to 1810. The picture below is the setting in question. The Issue … Read More

Failed to sign in to Azure error when configuring SCCM Cloud Management Gateway

Jonathan LefebvreSCCM9 Comments

While configuring the Cloud Management Gateway (CMG) at different client sites, we stumbled on an issue ‘Failed to sign in to Azure‘ to create the Azure web applications. While we don’t know the official cause or how to prevent it, a workaround is possible. If you are looking to configure the Cloud Management Gateway from A to Z, see ourprevious post. SCCM CMG Failed to sign in to Azure – Symptoms One of the first step to configure the Cloud Management Gateway is to configure the Azure Services. This step consists of creating the connection to the Azure Tenant and create … Read More

Monitor Bitlocker Status using SCCM Bitlocker Report

Benoit LecoursSCCM19 Comments

If you’ve been using BitLocker in your organization, you probably receive some requests from your security department to monitor the status of a device if it gets stolen. There’s a couple of ways to achieve this. #1 – MBAM The first and recommended one would be to use Microsoft BitLocker Administration and Monitoring (MBAM). However, this tool is not free, you need to have Microsoft Desktop Optimization Pack (MDOP). Microsoft has also announced that the actual MBAM 2.5 version is getting deprecated soon (Extended support on July 2019). So we’ll skip this one for now. #2 – Configuration baseline The … Read More

Repair Application from Software Center using SCCM 1810+

Benoit LecoursSCCM8 Comments

SCCM Repair Application

Beginning with SCCM 1810, you can now repair an application directly from software center on an SCCM client. A small but useful new feature! Before 1810, you would have to go through Control Panel (not useful if a user didn’t have admin rights) or by uninstalling and reinstalling the application using 2 distinct software center actions. Now, you can directly initiate a Repair action in Software Center. The good news, is that’s really simple to do ! The only thing that you need to do is : Upgrade to SCCM 1810 Add a repair command line to your application Check … Read More

How to enable SCCM Wake on LAN Client Notification (1810+)

Benoit LecoursSCCM7 Comments

When I first read the SCCM 1810 New features list, the features that I found the most interesting was the new SCCM Wake on LANClient Notification addition. By reading the feature description it looks too good to be true. Finally an easy way to do Wake on LAN on an enterprise network : What makes it exciting is that SCCM can now find another client on the same subnet and wake up its neighbour. We won’t describe in details how WoL works, but let’s say that it’s always been a challenge to implement it in a corporate environment mostly because magic … Read More