How to install Local Administrator Password Solution (LAPS)

Jonathan LefebvreActive Directory, SCCM, WINDOWS 109 Comments

One of the challenges faced by workstation administrators, is to manage the local administrator account in large environment. One of the options was to use Group Policy Preferences, but that was before KB2962486 removed the possibility to set password using Group Policy Preferences. Since then, Microsoft as come up with a solution : Local Administrator Password Solution (LAPS). Here’s the benefits of using LAPS : Unique password for local administrator per computer Password available from Active Directory, if needed to use local administrator account Remotly change the local administrator password Ability to use a custom administrator account Limitation : Only the local administrator account can be managed or a custom local account as administrator. In this post, we will detail how to install Local Administrator Password Solution (LAPS) to manage the local administrator password on a Windows 10 computer. High-level steps to install Local Administrator Password Solution (LAPS) On management computers … Read More

Configure SCCM 2012 Boundaries

Benoit LecoursSCCM7 Comments

In this part of this SCCM 2012 and SCCM 1511 blog series, we will configure SCCM boundaries. First, let’s define what a boundary in SCCM is : From Technet : In System Center 2012 Configuration Manager, a boundary is a network location on the intranet that can contain one or more devices that you want to manage. Boundaries can be an IP subnet, Active Directory site name, IPv6 Prefix, or an IP address range, and the hierarchy can include any combination of these boundary types. To use a boundary, you must add the boundary to one or more boundary groups. Boundary groups are collections of boundaries. By using boundary groups, clients on the intranet can find an assigned site and locate content when they have to install software, such as applications, software updates, and operating system images. A boundary does not enable clients to be managed at the network location. To manage … Read More

Enterprise Mobility Suite available in Open Licensing

Benoit LecoursEMSLeave a Comment

Since its release last year, Microsoft Enterprise Mobility Suite (EMS) was only available via the Enterprise agreement. Since March 1st, Enterprise Mobility Suite is available for sale through distribution via Microsoft’s Open License Program. Open Licensing offers flexibility and potential cost savings making it possible for distributors and re sellers to sell additional cloud services to small and medium-sized enterprises. What is Enterprise Mobility Suite? EMS is a product suite which include 3 products : Windows Intune Cloud-based enterprise mobility management that helps you control employee access to corporate applications and data on virtually any device Mobile application management across devices Broad device support for iOS, Android, Windows and Windows Phone devices Selective wipe of apps and data for greater security Use of System Center Configuration Manager and Endpoint Protection See a full product demo here Azure Rights Management Services (RMS) Comprehensive encryption, identity, and authorization policies designed to secure corporate files … Read More

Requirements and Recommendations before installing SCCM 2012 R2

Benoit LecoursSCCM33 Comments

In the first part of SCCM 2012 and SCCM 1511 blog series, we will cover SCCM installation prerequisites most specifically hardware requirements, design recommendations and server prerequisites. Hardware Requirements The hardware requirements for a Primary Site server largely depends on the features that are enabled, and how each of the components is utilized. When the number of clients grows and changes, the server hardware requirements change accordingly. For the initial deployment, hardware requirements can be estimated for each server by determining: The overall need for each component (Will you do Operating System Deployment ? How many daily software deployments ? Is Inventory and reporting is important for your organisation ? Will you manage Internet Client ?) The number of clients planned to be installed The load on each of installed SCCM components In general, medium environments (couple thousand clients) should consider the following recommendations when planning hardware: SCCM and SQL Server communicate constantly. We … Read More

How to add SCCM 2012 Custom Active Directory Attributes

Benoit LecoursSCCM11 Comments

SCCM 2012 Active Directory System Discovery brings a couple of default Active Directory attributes : I get often asked if it’s possible to add a SCCM 2012 custom active directory attributes. The answer is yes, you can add any AD attribute, and it’s quite simple. For this post, I’ll add the Description attribute from a computer account.  SCCM 2012 Custom Active Directory attributes Configuration Natiguate to Administration / Hierarchy configuration / Discovery Method Right click Active Directory System Discovery Select the Active Directory Attributes tab Enter or select your attribute from the Available Attributes list If the wanted attribute is not listed, simply click the Custom button and enter it manually Click Add Ensure that your new attribute is listed in the Selected attribute list and click OK. In this example, I’ve added Description attribute. Once completed, initiate a Full Discovery on Active Directory System Discovery by right clicking it and choose Run Full Discovery Now … Read More