SCCM Windows 10 Inventory – Upgrade vs Fresh Install

Benoit LecoursSCCM, WINDOWS 103 Comments

With the next Windows 10 release planned for October 17th, I’m actually working on migrating a bunch of Windows 10 devices. Some are Windows 10 v1511, some v1607. Some have been installed using a fresh image and some have been migrated from a previous version. I thought it would be a good idea to inventory those devices to know their installation source (fresh or upgraded). To achieve this, we’ll need to extend our SCCM inventory to grab a custom registry key and then build a query or report to show this information. For this post, I’m using SCCM 1706 but the procedure is the same for SCCM 2012 or later. Windows 10 Fresh vs Upgrade Inventory Information The Windows 10 Upgrade information is located in the device registry in the HKLM\System\Setup\upgrade\downlevelbuildnumber. We need to modify our hardware inventory to gather this value on our Windows 10 devices. I’ll guide you through this process if … Read More

Upgrade Windows 1607 to Windows 1703 using SCCM Servicing Plans

Benoit LecoursSCCM, WINDOWS 1031 Comments

Microsoft published the next 1703 feature update (aka Creator Update), as Current Branch Update on 11th April 2017. Four months after the Current Branch for Business will be published (planned for August 2017) and you may need to deploy it to your Windows 10 computer to stay supported or to benefits from the new features. Before deploying a new Windows 10 feature upgrade, you need to have a good plan. Test it in a lab environment, deploy it to a limited group and test all your business applications before broad deployment. Do not treat a feature upgrade as normal monthly software updates. Treat it as a new operating system as if you were upgrading Windows 7 to Windows 10. SCCM Windows 10 1703 Servicing Plans Requirements If it’s the first time you are using Windows 10 servicing plans, follow our previous post that explains the requirements to setup your Software Update … Read More

Uninstall Windows Update using SCCM

Jonathan LefebvreSCCM, WINDOWS 1019 Comments

SCCM Uninstall Windows Update

With the recent problems caused by monthly Windows Update, knowing how to massively uninstall Windows Update with SCCM is a must! This action is not available by default in SCCM. There are 2 ways to uninstall a Windows Update. Both solutions require the command line utility WUSA.exe, that as been around since Windows Vista/Windows Server 2008 era. In this post, we will detail both solutions to uninstall a Windows Update with SCCM. If you are looking for how to manage Windows update with SCCM, see our SCCM Software Update Management Guide for complete instructions. Prerequisites SCCM any version Windows 7 and up Windows 2008 R2 server and up SCCM Uninstall Windows Update One method is to use a Custom Task Sequence with a run command line. The advantage of using this method is the ability to use the same task sequence on both OS Architecture. The second method involves having … Read More

Update Microsoft Surface Firmware using SCCM

Jonathan LefebvreApplication, SCCM, WINDOWS 109 Comments

Usually, when it comes to driver management, for computer already deployed, we say ‘If it ain’t broken don’t fix it’. Once in a while, a driver or firmware could require an update because of a bug reported by multiple users but that would usually be an exception. Microsoft Surface devices have proven over and over that this statement doesn’t apply to them. Microsoft Surface, since the beginning of the brand, tend to work better with latest firmware version. Microsoft often releases new firmware revision along major Windows 10 releases. For home users, the update will be applied with the standard Windows Update process and delivered in stages. For businesses, firmware update management by WSUS or SCCM is not yet available. (Feature is included in the latest SCCM Technical Preview 1706 but not yet in the latest 1702 production version) This blog post will detail how to update the Microsoft Surface firmware … Read More

SCCM Express Installation Files for Windows 10 Updates

Jonathan LefebvreSCCM, WINDOWS 1017 Comments

One of SCCM Current Branch 1702 new feature is to support Express installation files for Windows 10 Cumulative Updates. This new features will enable a Windows 10 client to download only differential files from the previous month Cumulative Update. This should limit the size of Windows 10 Cumulative Updates as they tend to get bigger from months to months. In this post, we will cover how to configure SCCM and Windows 10 in order to benefit from express installation files. Prerequisites for SCCM Express Installation Files SCCM Current Branch 1702 or higher Windows 10 Anniversary Update 1607 with April 2017 Cumulative Update which contains the needed Windows Update Agent …or Windows 10 Creators Update 1702 or higher [su_box title=”Note” style=”glass” title_color=”#F0F0F0″] This feature is also supported with Windows Update, WSUS and Windows Update for Business. [/su_box] Enable Express Installation Files in SCCM New settings for server and client are needed in order to manage … Read More

SCCM Endpoint Protection on Windows 10 Creators Update 1703

Jonathan LefebvreSCCM, SCEP, WINDOWS 103 Comments

System Center Endpoint Protection and Windows Defender both have a history of changes since they came out years ago. When Windows 10 came out more changes were made to Endpoint Protection and Windows Defender as we covered in a previous post. The latest Windows 10 Creators Update (1703), also bring its share of changes for Windows Defender, which then impact Endpoint Protection on the end-user side. If you are new to System Center Endpoint Protection, see our complete guide which covers it all. In this post, we will look at what changed for Endpoint Protection and Windows Defender in the Windows 10 Creators Update (1703). What’s new for Endpoint Protection on Windows 10 Creators Update? First thing first. The name! Microsoft as once again renamed Windows Defender. The new name is Windows Defender Antivirus. This is due to the rising of Advanced Threat Protection (ATP) and the idea that Windows Defender … Read More

Customize Windows 10 Taskbar Configuration Using SCCM Task Sequence

Jonathan LefebvreSCCM, WINDOWS 1033 Comments

With the release of Windows 10 1607, some customization solution were modified. One of them is the ability to modify the Taskbar configuration. In a previous post, we provided many customization scripts and how-to that were made for Windows 10 version 1511. Modifying the Taskbar was one of those customization but it was more of a workaround than a planned how-to. With Windows 10 1607, the Taskbar can be modified similarly to the Start Menu. In this post, we will detail how to modify the Windows 10 Taskbar configuration using a SCCM Task sequence. This could also be done as part of a Group Policy. SCCM Windows 10 Taskbar Configuration Prerequisites Using this Taskbar customization solution is only available for Windows 10 version 1607 and higher. Before we begin It’s important to understand the concept behind customizing the Taskbar. It use the same Layout Modification method as the Start Menu. It means that if you … Read More

Windows 10 | Point and Print printer installation prompt UAC

Jonathan LefebvreWINDOWS 1013 Comments

We came across a strange issue today on Windows 10 devices that we haven’t seen since the Windows Vista days. Users have started to get prompts for User Account Control(UAC) when connecting to some printers. The Point and Print feature is responsible for this as it easily allows standard users to install printer drivers from the trusted print server. This post describes how to fix Windows 10 point print UAC problem. The problem appeared right after applying last July monthly updates. (MS16-087) Windows 10 Point Print UAC Prompt Cause Microsoft as tightened the requirement for printer drivers on print servers. If you : Are using a print server Allow standard user to install printer drivers using the Point and Print Group Policy Are using old printer driver that might have the following : Non-package-aware v3 printer drivers Unsigned or expired certificate validation drivers Following MS16-087 installation, you receive a UAC prompt and a Connect to … Read More

Windows 10 Resources and Links for SCCM Administrators

Benoit LecoursSCCM, WINDOWS 101 Comment

Before starting a Windows 10 migration project, it’s always a good idea to be informed. There was so much information about Windows 10 in the past year : the OS itself has a couple of new features that you need to first understand. Your infrastructure needs various updates before you can start managing Windows 10 devices. The Windows 10 servicing options are also a huge chunk to understand. This can be overwhelming at first so we decided to compile a list of documentation that we found helpful during our multiple deployment projects. Come back often as this list will continue to grow with time as Microsoft releases interesting documentation on a weekly basis. General Documentation Huge compiled list of documentation provided by Microsoft about various topics : Windows 10 Documentation hub Introduction to the new Windows 10 device management strategies: The Path to Modernizing Windows Management Windows 10 release are frequent, it … Read More

Windows 10 KMS Activation and Management using Volume Activation Management Tool

Jonathan LefebvreWINDOWS 109 Comments

  The KMS server was first introduced with Windows Vista as an easy activation service for IT pros. Since then, each new release of Windows and Office provided a necessary update to KMS server, in order to keep offering activation keys to Windows and Office clients. The release of Windows 10 KMS activation and Office 2016 activation is no different then previous versions. In this post, we will covert how to use an already configured KMS server for activation of Windows 10 and Office 2016. Prerequisites for Windows 10 KMS Your existing KMS server will most probably be good to manage licenses for Windows 10 and Office 2016. Minimum OS requirement : Windows 7 and up Window Server 2008 R2 and up Mandatory : Mandatory KB3079821 for Windows 7 and Windows server 2008 R2 to support Windows 10 Mandatory KB3058168 for Windows 8/8.1  and Windows Server 2012/R2 to support Windows 10 Microsoft Office … Read More