Kent Agerlund

About Kent Agerlund

Microsoft Regional Director, Enterprise Mobility MVP. Microsoft Certified Trainer and Principal consultant. I have been working with Enterprise client management since 1992. Co-founder of System Center User Group Denmark in 2009. Certified MCITP: Enterprise Administrator, MCSA+Messaing, and much more. Member of: Microsoft Denmark System Center Partner Expert Team The Danish Technet Influencers program System Center Influencers Program.

Why cmtrace.exe is not always your best friend

I once heard a very wise guy saying the notepad is all you need to read log files. I do not say I agree, as I find cmtrace a slightly better tool…. but that’s right until I ran into a ConfigMgr 2012 upgrade to ConfigMgr 1511 earlier today. My upgrade failed, during the file copy phase because it couldn’t copy a new version of cmtrace to my tools folder. Whatever you do, do not click on the View Log button in the installation dialog. The error in configmgrsetup.log: ERROR: Failed to copy E:\INSTALLATIONSOURCE\MS\CONFIGMGR1511\DVD\SMSSETUP\tools\CMTrace.exe to k:\program files\microsoft configuration manager\tools\cmtrace.exe, Win32 error [...]

By | 2016-01-11T10:24:47+00:00 January 11th, 2016|Configuration Manager (SCCM)|2 Comments

Windows WI-FI profiles

Currently working on an Enterprise Mobility project, and thought I should share a little trick. In the project; we are deploying WI-FI profiles to Windows 10 devices. Some WI-FI profiles use SCEP/NDES certificates while others are configured using a pre-shared secret. When working with Windows WI-FI profiles, the only way to add a pre-shared secret to the profile is by creating a custom XML file. An easy way to create the WI-FI profile XML file; is to create the profile on a Windows 10 computer and then export the profile. To do that, use the steps below: To list all [...]

Don’t be fooled by the new Site Server Servicing Window in ConfigMgr 1511

In ConfigMgr 1511 you have a new maintenance windows when you open the site server properties. That’s NOT for traditional software updates but for the new ConfigMgr Updates and Servicing model. You get to the maintenance windows in the Administration workspace, Site Configuration, Sites. Right the primary site and select properties. In the Maintenance Window tab, create a maintenance window (and make sure you call it something like ConfigMgr Dynamic update Only). I did a few tests and the maintenance window do not apply to traditional software updates. According to my tests normal software software updates will still apply unless [...]

By | 2015-12-09T19:43:25+00:00 December 9th, 2015|Configuration Manager (SCCM)|3 Comments

System Center Configuration Manager 1511 – Dynamic updates

Looking at the life of an IT Pro today, people like you and me are being challenged like never before. Long gone are the days where we only focused on traditional desktop management, today we are also challenged with managing mobile devices, like iOS, Android, Windows Phones and tablets. MAC OS 10, traditional desktops, road worriers, cloud services, SLA and visualization demands from from management and the list just goes on and on. In the middle of everything, right there in the eye of the Tornado is You....often trying to put out fires instead of spending time on being more [...]

By | 2015-12-09T13:59:19+00:00 December 9th, 2015|Configuration Manager (SCCM)|9 Comments

MMS 2015 precon notes

Hi, thanks for an amazing week @ MMS. Here are the notes from our ConfigMgr Autmating the WSUS Cleanup process – http://blog.ctglobalservices.com/kea/house-of-cardsthe-configmgr-software-update-point-and-wsus/ SQL PowerShell audit script  http://stevethompsonmvp.wordpress.com/2014/05/19/powershell-sql-audit-script/ Splitting existing ConfigMgr database into multiple SQL files  http://myitforum.com/cs2/blogs/jnelson/archive/2009/07/27/140199.aspx Pre-creating the database before installing Configmgr – download script Multiple software upate points and shared db – http://blogs.msdn.com/b/steverac/archive/2013/02/07/configuring-multiple-software-update-points-in-a-configmgr-2012-primary-site-what-to-expect.aspx Slide deck SQL Script to for fragmentation on the SQL DB Checking the database fragmentation: Use CM_PS1 Go SELECT DB_NAME(database_id) AS [Database Name], OBJECT_NAME(ps.OBJECT_ID) AS [Object Name],     i.name AS [Index Name], ps.index_id, index_type_desc,     avg_fragmentation_in_percent, fragment_count, page_count FROM sys.dm_db_index_physical_stats(DB_ID(),NULL, NULL, NULL ,N’LIMITED’) AS ps     [...]

By | 2015-11-19T00:06:16+00:00 November 19th, 2015|Configuration Manager (SCCM), Events|1 Comment

Techdays Sweden 2015, notes and links

Thanks to all attending the preconference on Managing Windows 10 with Microsoft EMS, MDT and Configuration Manager. To all of those who attending the “What’s new and coming in Configuration Manager vNext”. Sessions from Techdays will be online on Channel 9 https://channel9.msdn.com/Events/TechDays-Sweden/TechDays-Sweden-2015 Configuration Manager vNext information https://technet.microsoft.com/library/dn965439.aspx#BKMK_Win10Servicing Windows 10 Servicing must read https://technet.microsoft.com/en-us/library/mt598226(v=vs.85).aspx Windows 10 Servicing must read https://technet.microsoft.com/en-us/library/mt574263(v=vs.85).aspx and NO, it’s not the same doc SQL Audit - https://stevethompsonmvp.wordpress.com/2014/05/19/powershell-sql-audit-script/ WSUS optimization - http://blog.ctglobalservices.com/kea/house-of-cardsthe-configmgr-software-update-point-and-wsus/ Windows 10 Defender OMA-URI downloads - http://blog.ctglobalservices.com/kea/managing-windows-10-using-on-premises-mdm-in-system-center-configuration-manager-vnext/ Install and configure onprem-mdm in Configuration Manager vNext - http://blog.ctglobalservices.com/kea/install-and-configure-on-prem-mobile-device-management-mdm-with-configmgr-vnext-tp3/  

By | 2015-10-22T09:43:47+00:00 October 22nd, 2015|Configuration Manager (SCCM), Events|0 Comments

IT Devconnections Enterprise Mobility and Identity BOF

During the BOF last week @ #ITDevCon i briefly talked about creating a couple of managed apps using PowerShell in ConfigMgr. Below are a few examples, open PowerShell ISE aas administrator and magic happens #Import Module Import-Module $env:SMS_ADMIN_UI_PATH.Replace("\bin\i386","\bin\configurationmanager.psd1") $SiteCode = Get-PSDrive -PSProvider CMSITE Set-Location "$($SiteCode.Name):\" #Create the Word Application New-CMApplication -Name "Word" #To create a iOS deployment type for the application Add-CMDeploymentType -ApplicationName "Word" -AutoIdentifyFromInstallationFile -IosDeepLinkInstaller -DeploymentTypeName "Word iOS" -InstallationFileLocation "https://itunes.apple.com/us/app/microsoft-word/id586447913?mt=8" -ForceForUnknownPublisher $True #Create the OneNote Application New-CMApplication -Name "OneNote" #To create a iOS deployment type for the application Add-CMDeploymentType -ApplicationName "OneNote" -AutoIdentifyFromInstallationFile -IosDeepLinkInstaller -DeploymentTypeName "OneNote iPhone" -InstallationFileLocation "https://itunes.apple.com/us/app/microsoft-onenote-for-iphone/id410395246?mt=8" -ForceForUnknownPublisher [...]

Install and Configure on-prem mobile device management (MDM) with ConfigMgr vNext TP3

This guide is written by Panu Saukko and Kent Agerlund (both Microsoft Enterprise Client MVP’s). These are the steps we used in our demo environments to configure the new on-prem MDM feature in system Center Configuration Manager vNext Technical Preview 3. In the article you will notice that we used two different environments and you will see screenshots from both environments. Don’t let that confuse you, happy reading and enrolling. The environments we used are: Configuration Manager site: vn3, Site Server: vnext.corp.viamonstra.com, Domain: corp.viamonstra.com, PKI server: dc.corp.viamonstra.com Configuration Manager site: C15, Domain: cmdemo.local, PKI server: cm-dc1.cmdemo.local System Center 2012 Configuration [...]

Managing Windows 10 using On-premises MDM in System Center Configuration Manager vNext

There is a new management agent in town…. the built-in Windows 10 management agent. With that agent you are able to deploy applications (with some limitations in TP3), gather inventory data and deploy configuration items.  in this post I will describe how to you can create configuration items to control various settings. If you want to play around with the complete list of Windows Defender settings you can download the full list of CI’s here (I didn’t have time to test all of them……just saying). The MDM requirements are a little tricky in the sense that you need the following [...]

By | 2015-09-06T20:58:34+00:00 September 6th, 2015|Configuration Manager (SCCM), Windows Client|0 Comments

Links from the ConfigMgr Visualization session @ SCU in Basel

Standard ConfigMgr reporting -Introducing to reporting in Configuration Manager - https://technet.microsoft.com/en-us/library/gg682105.aspx -Channel 9 - http://channel9.msdn.com/Events/MMS/2013/UD-B338 Custom reports Add custom code and color scales like Excel - http://blogs.msdn.com/b/bobmeyers/archive/2009/07/31/add-excel-like-color-scale-conditional-formatting-to-your-reports.aspx Power Views and Power Queries Download Power Queries for Excel - http://www.microsoft.com/en-us/download/details.aspx?id=39379 Getting started with Power Queries - http://www.databasejournal.com/sqletc/getting-started-with-microsoft-power-query-for-excel.html  - https://support.office.com/en-us/article/Microsoft-Power-Query-for-Excel-Help-2B433A85-DDFB-420B-9CDA-FE0E60B82A94 Download Power View - http://www.microsoft.com/en-us/download/details.aspx?id=26718 Getting started with Power View - https://technet.microsoft.com/en-us/library/hh213579(v=sql.110).aspx - http://blogs.msdn.com/b/seanboon/archive/2012/07/30/visualizing-the-olympics-with-power-view-in-excel-2013-day-1.aspx Custom community dashboard Compliance -http://blogs.technet.com/b/gary_simmons_mcs/archive/2014/09/16/system-center-2012-r2-configuration-manager-software-update-compliance-dashboard-part-1.aspx Patch Management - http://blogs.technet.com/b/gary_simmons_mcs/archive/2013/12/09/creating-a-custom-report-for-system-center-2012-r2-configuration-manager-part-1.aspx Client Health - https://gallery.technet.microsoft.com/SCCM-Configmgr-2012-SSRS-2863c240 A little of everything - http://blogs.technet.com/b/configmgrdude/archive/2015/01/06/creating-a-simply-dashboard-using-smsprov-log-in-configmgr-2012.aspx Professional dashboards Configuration Manager - http://www.coretech.dk Operations Manager - https://squaredup.com/ - https://www.savision.com/ 

By | 2015-08-26T09:42:26+00:00 August 26th, 2015|Configuration Manager (SCCM), Events|2 Comments

Cloud App discovery

A new feature in AD premium allows you to gather information about existing SaaS applications in your environment. The feature is called Cloud App Discovery and is part of your AD premium subscription. Here are the steps you need to take in order to get it working. Additional information can be found at Microsoft Technet   In your favorite browser navigate to https://appdiscovery.azure.com/ and click Get Started From the Cloud App Discovery pane click Create Click Settings, Management Agent and click Download – this will download the agent. The agent can be deployed thru Configuration Manager or any other SW [...]

By | 2015-08-25T10:49:23+00:00 August 25th, 2015|Azure|1 Comment

Deploying WIFI profiles with pre-shared secret to Android devices using ConfigMgr

Today I have spend some time creating and deploying WIFI profiles to Android devices and would like to share my experiences. To get started with Android and WiFi profiles I used this TechNet article https://technet.microsoft.com/en-us/library/dn705842.aspx is almost correct, but there a few bugs in the XML example (as I see it, authentication and encryption). To get me all the way I combined the knowledge from the article with information from MSDN https://technet.microsoft.com/en-us/library/dn705842.aspx and finally this super nice Android PSK Generator community tool - http://johnathonb.com/2015/05/intune-android-pre-shared-key-generator/  The Android XML configuration is really easy,just add the WiFI information into the Configurator and click [...]

ConfigurePXE blocks contentdistribution after SCCM 2012 R2 SP1 upgrade

Just finished another SCCM 2012 R2 SP1 upgrade, this time with a very “interesting” outcome. The site was a single primary site with close to 100 distribution points. The upgrade process went somehow smooth, primary site server was upgraded without any issues, except the management points had to restart before the SMS bootstrap service would successfully configure the components. For a while everything seemed like a normal upgrade, the site component manager was running and initiating the installation of the remote site systems. But after a little while, we discovered that the content distribution didn’t distribute new content. A look [...]

By | 2015-07-11T18:03:28+00:00 July 11th, 2015|Configuration Manager (SCCM), General info|1 Comment

Windows Phone 8.1 devices keep prompting for sign in to the Company Portal

I have been working on another mobility project the last couple of months. this project started as a hybrid SCCM/Intune project using “old” SCC 2012 R2 platform, a couple of weeks ago we migrated the platform to the latest service pack in order to get all of the new hybrid mobile features in place. The project have support for Android, iOS and Windows phones 8.1 devices. In the beginning the company portal was deployed to the Windows Phones using the Windows Phone trial certificate (not supported, but it works). That part worked as expected for many months, but using the [...]

Working with managed applications within Configuration Manager 2012 R2 SP1

First, let’s define a managed application. In essence it’s a special policy that enable you to control settings in the application or browser like data encryption, can the user save the document as a new file etc. To successfully deploy a managed application you need to mix the application deployment with an application management policy. Configuration Manager will automatically discover if the application can be managed and will show an additional page in the wizard when you create the deployment. It’s worth noting that not all applications can be managed. They have to have the Intune App SDK built-in or [...]

Windows Mobile Phone 8.1 support gone after upgrading to Configuration Manager 2012 R2 SP1

One of the many changes in the newly released SP1 is support for Windows Phone 8.1 After the upgrade only there will only be support for Windows Phone 8.0. Navigate to the Administration workspace, select Cloud Services, right click your Intune connector, Configure Platforms, Windows Phone. Notice that Windows Phone 8.1 is not enabled.   In our environment we only support Windows Phone 8.1 and we do not deploy any custom signed Windows Phone LOB applications. Enable Windows Phone 8.1 support and click OK. Wait until the next synchronization and you will have Windows Phone 8.1 support back. Another “setting” [...]

Upgrade to System Center 2012 R2 Configuration Manager SP1

Below is the guide that I normally use for a service pack upgrade in a single primary site environment. I will not go into the story about what files you should download as that is already explained by Jason Sandys here - http://blog.configmgrftw.com/service-pack-madness/  Planning and Testing Back up the SQL Server database and restore a copy of the database on an instance that is not hosting the production database. Perform a test upgrade of the database to SP1. The test upgrade must be performed on the database copy. Download the ConfigMgr SP1 prerequisite files. Disable management point replicas if they [...]

By | 2015-05-19T21:14:20+00:00 May 19th, 2015|Configuration Manager (SCCM), General info|5 Comments

Links and tools from our Ignite Instructor lab – Upgrading to Windows 10 using ConfigMgr 2012 R2

Thanks all for attending the Instructor led lab @Ignite – All three Vikings had a great time on stage – thanks for turning the ILL into a very interactive breakout session :-)   Download the labfiles, scripts and instructions from the lab - http://blogs.technet.com/b/configmgrteam/archive/2014/10/29/how-to-upgrade-to-win-10-using-the-task-sequence-in-sc-2012-r2-configmgr.aspx Download ConfigMgr Technical preview - http://www.microsoft.com/en-us/evalcenter/evaluate-system-center-configuration-manager-and-endpoint-protection-technical-preview?i=1 Driver Import script - http://blog.ctglobalservices.com/kea/automate-importing-and-creating-drivers-packages-in-sccm-2012-r2/

Notes and links from the #Ignite Pre-Day, Enterprise Management

Slides and links Here is the link to the slides: http://deploymentresearch.com/DRFiles/MSIgnite2015preday.zip Video to deploying Windows 10 IoT to Raspberry Pi 2 https://www.youtube.com/watch?v=Q5SfPTykM6A Hydration Kit for System Center 2012 R2 http://deploymentresearch.com/Research/Post/407/The-Hydration-Kit-for-System-Center-2012-R2-is-available-for-download The script that exported task sequences was gathered from the following post http://trevorsullivan.net/2010/05/13/exporting-configmgr-task-sequences (by Trevor Sullivan) The script that imported task sequences was gathered from the following post http://www.david-obrien.net/2012/09/29/how-to-backup-restore-your-tasksequenceconfiguration-manager-2012-and-powershell (by David O’Brien) TechNet Docs - Create a Windows 8.1 Reference Image http://technet.microsoft.com/en-us/library/dn744290.aspx TechNet Docs - Deploy a Windows 8.1 Image Using MDT 2013 http://technet.microsoft.com/en-us/library/dn744279.aspx TechNet Virtual Labs - Creating a Windows 8.1 reference image  http://go.microsoft.com/?linkid=9845755 Building reference images like a [...]

By | 2015-05-04T11:54:49+00:00 May 4th, 2015|Configuration Manager (SCCM), Events|1 Comment

Slides and links from my Welcome to your new life as an Enterprise Client Hybrid Management expert session @NIC 2015

Thanks for attending my Hybrid Management session @NIC 2015. Slide deck Deploy wifi profiles with shared secret - http://blog.ctglobalservices.com/kea/deploying-wpa-2-personal-wifi-profiles-using-configmgr-intune/ Change device ownership in configmgr - http://blog.ctglobalservices.com/kaj/change-device-ownership-in-configuration-manager-with-powershell/ Intune Extensions fail to install - http://blog.ctglobalservices.com/kea/intune-extensions-will-not-install/ and http://scug.be/sccm/2014/02/11/cm12-extensions-for-windows-intune-resources-and-gotchas/ Device based vs User based policies - http://blog.ctglobalservices.com/kea/device-based-vs-user-based-mdm-policies-in-configmgr-2012-r2/ Troubleshooting iOS certificate deployments - http://blog.ctglobalservices.com/kea/troubleshooting-certificate-deployment-on-ios-devices-with-configmgr-intune/ Deny Apps on Windows Phone - http://scug.be/nico/2014/05/22/deny-windows-phone-apps-with-configuration-manager-intune/

By | 2015-02-14T15:06:32+00:00 February 14th, 2015|Configuration Manager (SCCM)|0 Comments

Slides and links from my Site Review session @NIC 2015

  Autmating the WSUS Cleanup process - http://blog.ctglobalservices.com/kea/house-of-cardsthe-configmgr-software-update-point-and-wsus/ SQL PowerShell audit script  http://stevethompsonmvp.wordpress.com/2014/05/19/powershell-sql-audit-script/ Splitting existing ConfigMgr database into multiple SQL files  http://myitforum.com/cs2/blogs/jnelson/archive/2009/07/27/140199.aspx Pre-creating the database before installing Configmgr – download script Multiple software upate points and shared db – http://blogs.msdn.com/b/steverac/archive/2013/02/07/configuring-multiple-software-update-points-in-a-configmgr-2012-primary-site-what-to-expect.aspx Slide deck SQL Script to for fragmentation on the SQL DB Checking the database fragmentation: Use CM_PS1 Go SELECT DB_NAME(database_id) AS [Database Name], OBJECT_NAME(ps.OBJECT_ID) AS [Object Name],     i.name AS [Index Name], ps.index_id, index_type_desc,     avg_fragmentation_in_percent, fragment_count, page_count FROM sys.dm_db_index_physical_stats(DB_ID(),NULL, NULL, NULL ,N’LIMITED’) AS ps     INNER JOIN sys.indexes AS i WITH (NOLOCK)     ON ps.[object_id] = i.[object_id] AND ps.index_id [...]

By | 2015-02-14T14:51:53+00:00 February 14th, 2015|Configuration Manager (SCCM), General info|2 Comments

Slides and links from my Compliance Settings session @ NIC 2015 in Oslo

Thanks for attending another great NIC event, and a huge thank for the organization behind NIC for arranging a true International conference in Scandinavia. Some good resources for working with Compliance Settings: Henrik Hoe - http://blog.ctglobalservices.com/author/heh/ Sherry Kissinger - http://www.mnscug.org/blogs/sherry-kissinger Kent Agerlund - http://blog.ctglobalservices.com/author/kea/ Kenny Buntinx - http://scug.be/members/kenny/ Technet - https://technet.microsoft.com/en-us/library/gg681958.aspx Slides and examples

By | 2015-02-14T14:46:11+00:00 February 14th, 2015|Configuration Manager (SCCM), General info|0 Comments

Deploying WPA-2 personal WIFI profiles using ConfigMgr & Intune

For hybrid environments (that being ConfigMgr integrated with Microsoft Intune), it’s not possible to deploy a WIFI profile using a pre-shared secret in the UI. This will however not prevent you from creating and deploying WPA-2 Personal security WIFI profiles in the console. You will just be deploying the WIFI profile without the WIFI password.  Windows Phone 8.1 will re-apply the same profile over and over again When users receive the WIFI profile all they have to do is add the password and they will have WIFI connection. This works great for Android and iOS, but not for Windows Phone [...]

By | 2015-01-28T14:28:20+00:00 January 28th, 2015|Configuration Manager (SCCM)|4 Comments

Intune Extensions will not install

It’s a common issue, but still worth mentioning. Being a Full Administrator is NOT the same as having full control of all features in the ConfigMgr console. An example is enabling new Intune Extensions like the one released in late December. As usual you are prompted when new Extensions are available. In this example I’m logged in as Full Administrator and trying to enable the extension in the Administration workspace. All looks good, right until the point where I accept the License Terms, And boom! I do not have the required permissions even though I’m a Full Administrator! Rule #7 [...]

By | 2015-01-02T10:36:21+00:00 January 2nd, 2015|Configuration Manager (SCCM)|0 Comments