Configure Delivery Optimization in SCCM Task Sequence

Jonathan LefebvreOSD, WINDOWS 101 Comment

Windows 10 brings a new feature to optimize network performance when it comes to Windows Update. This feature is called Delivery Optimization. Delivery Optimization is a cloud-based service that allows computers on the same network to share updates files to prevent reaching out to Windows Update directly or to a remote WSUS.  Windows 10 clients must have access to the internet to be able to leverage Delivery Optimization to establish a peer-to-peer connection to another Windows 10 computer. With that said, Delivery Optimization as the potential of doing the opposite of what it was designed for. By default, the Download mode is … Read More

How to use the Windows 10 Security baseline

Jonathan LefebvreWINDOWS 106 Comments

Microsoft has been releasing Security baseline since the Windows XP days. Windows 10 is no exception to this, except now there’s a new release of security baseline following each major build of Windows 10. The concept of the Security Baseline is to provide Microsoft guidance for IT administrators on how to secure the operating system, by using GPOs, in the following areas : Computer security User security Internet Explorer BitLocker Credential Guard Windows Defender Antivirus Domain Security Implementing the security baseline in GPOs is not a complex or long task. The challenge that the security baseline provide is that it … Read More

How to enable SCCM 1710 Co-Management

Jonathan LefebvreIntune, SCCM, WINDOWS 106 Comments

With the release of SCCM 1710, one of the key new features is the Co-Management possibility with Microsoft Intune. There are two main paths to reach to co-management: Windows 10 devices managed by Configuration Manager and hybrid Azure AD joined get enrolled into Intune Windows 10 devices that are enrolled in Intune and then install with the Configuration Manager client We will describe how to enable co-management and enroll an SCCM managed Windows 10 device into Intune. SCCM 1710 Co-Management Prerequisites SCCM 1710 or later A new SCCM KB is available to fix an enrollment issue for the client Azure … Read More

Automatic Windows 10 PC Enrollment in Microsoft Intune or SCCM

Benoit LecoursIntune, SCCM, WINDOWS 10Leave a Comment

The process of enrolling your Windows 10 computers in Intune should be as simple as possible for your users. If you’re using Azure Active Directory in your organization, the enrollment process can be made automatically when a user joins it’s device to AAD. It couldn’t be simpler. The process is the same rather for Intune Standalone or Hybrid mode (integrated with SCCM) Windows 10 Intune Automatic Enrollment Prerequisites CNAME DNS Entry created on your domain for automatic name resolution A valid Intune Tenant (Standalone or SCCM Integrated) Azure Active Directory Premium enabled For this post, we’ll be using a Windows 10 1703 device but … Read More

SCCM Windows 10 Inventory – Upgrade vs Fresh Install

Benoit LecoursSCCM, WINDOWS 102 Comments

With the next Windows 10 release planned for October 17th, I’m actually working on migrating a bunch of Windows 10 devices. Some are Windows 10 v1511, some v1607. Some have been installed using a fresh image and some have been migrated from a previous version. I thought it would be a good idea to inventory those devices to know their installation source (fresh or upgraded). To achieve this, we’ll need to extend our SCCM inventory to grab a custom registry key and then build a query or report to show this information. For this post, I’m using SCCM 1706 but the … Read More

Upgrade Windows 1607 to Windows 1703 using SCCM Servicing Plans

Benoit LecoursSCCM, WINDOWS 1029 Comments

Microsoft published the next 1703 feature update (aka Creator Update), as Current Branch Update on 11th April 2017. Four months after the Current Branch for Business will be published (planned for August 2017) and you may need to deploy it to your Windows 10 computer to stay supported or to benefits from the new features. Before deploying a new Windows 10 feature upgrade, you need to have a good plan. Test it in a lab environment, deploy it to a limited group and test all your business applications before broad deployment. Do not treat a feature upgrade as normal monthly software … Read More

Uninstall Windows Update using SCCM

Jonathan LefebvreSCCM, WINDOWS 108 Comments

SCCM Uninstall Windows Update

With the recent problems caused by monthly Windows Update, knowing how to massively uninstall Windows Update with SCCM is a must! This action is not available by default in SCCM. There are 2 ways to uninstall a Windows Update. Both solutions require the command line utility WUSA.exe, that as been around since Windows Vista/Windows Server 2008 era. In this post, we will detail both solutions to uninstall a Windows Update with SCCM. If you are looking for how to manage Windows update with SCCM, see our SCCM Software Update Management Guide for complete instructions. Prerequisites SCCM any version Windows 7 … Read More

Update Microsoft Surface Firmware using SCCM

Jonathan LefebvreApplication, SCCM, WINDOWS 107 Comments

Usually, when it comes to driver management, for computer already deployed, we say ‘If it ain’t broken don’t fix it’. Once in a while, a driver or firmware could require an update because of a bug reported by multiple users but that would usually be an exception. Microsoft Surface devices have proven over and over that this statement doesn’t apply to them. Microsoft Surface, since the beginning of the brand, tend to work better with latest firmware version. Microsoft often releases new firmware revision along major Windows 10 releases. For home users, the update will be applied with the standard … Read More

SCCM Express Installation Files for Windows 10 Updates

Jonathan LefebvreSCCM, WINDOWS 1017 Comments

One of SCCM Current Branch 1702 new feature is to support Express installation files for Windows 10 Cumulative Updates. This new features will enable a Windows 10 client to download only differential files from the previous month Cumulative Update. This should limit the size of Windows 10 Cumulative Updates as they tend to get bigger from months to months. In this post, we will cover how to configure SCCM and Windows 10 in order to benefit from express installation files. Prerequisites for SCCM Express Installation Files SCCM Current Branch 1702 or higher Windows 10 Anniversary Update 1607 with April 2017 Cumulative Update which … Read More

SCCM Endpoint Protection on Windows 10 Creators Update 1703

Jonathan LefebvreSCCM, SCEP, WINDOWS 103 Comments

System Center Endpoint Protection and Windows Defender both have a history of changes since they came out years ago. When Windows 10 came out more changes were made to Endpoint Protection and Windows Defender as we covered in a previous post. The latest Windows 10 Creators Update (1703), also bring its share of changes for Windows Defender, which then impact Endpoint Protection on the end-user side. If you are new to System Center Endpoint Protection, see our complete guide which covers it all. In this post, we will look at what changed for Endpoint Protection and Windows Defender in the Windows … Read More