Cloud Management Gateway with Sub CA

The new Cloud Management Gateway is going to make a big difference in the way we manage endpoints away from home in the future. The feature is a System Center Configuration Manager 1610 pre-release feature. Being a pre-release typically means = a little troubleshooting is required to get the feature working in different environments. In my previous blog post I described an issue with software update scan failing. The troubleshooting steps used in this blog post, are similar what I have described there. In this environment we have a PKI with a Sub CA, and as part of the certificate [...]

By | 2017-03-15T10:54:35+00:00 March 15th, 2017|Configuration Manager (SCCM), General info|8 Comments

Software Update scan error using Cloud Management Gateway

First, I need to say….the new Cloud Management Gateway feature in Configuration Manager 1610 is awesome. There are a couple of gotchas you need to know about, when creating the service, but once you have overcome those hurdles - you will look like a hero at work, and be known as the person who finally enabled client management on internet based endpoints like road-warriors and colleagues working from home. In the wuahandler.log on the client you might run into Scan failed with error = 0x80240439. If that happens, first step in your troubleshooting should be checking he configuration manager agent [...]

By | 2017-03-14T08:13:09+00:00 March 14th, 2017|Configuration Manager (SCCM), General info|5 Comments

Azure Automation + Slack + Service Manager

In this post I will demonstrate an example on how to use the popular team collaboration tool Slack together with Azure Automation to retrieve data from your on-premise SCSM environment. The data in this example are Incidents retrieved via an Azure Powershell runbook. The setup is very simple and does not require any development skills (only a little powershell ). The scope could easily be extended to more useful scenarious such as sending reviewal messages to your managers or perhaps a Change Advisory Board (CAB) to accept or decline Review Activities in their small team meeting room. This is just [...]

By | 2016-09-21T16:37:43+00:00 September 21st, 2016|Azure, Service Manager (SCSM)|1 Comment

Azure Function to enable Microsoft Graph API webhook subscriptions to Azure Automation webhooks

Azure Functions is a great new, cheap and easy way to publish simple web services. Functions can be written in multiple languages such as C#, PowerShell or even Batch! You can read more about them here: https://azure.microsoft.com/en-us/services/functions/ This Azure Function is based on PowerShell and I have used it in multiple session on conferences such as MMS 2016 (was in a C# version though) and System Center Universe Europe 2016 About the function: When using subscriptions in Microsoft Graph API, you have to Validate your webhook by returning a verification code which Graph API sends to the webhook. Unfortunately Azure [...]

By | 2016-08-24T16:00:48+00:00 August 24th, 2016|Azure|0 Comments

Error enrolling devices into Intune & Configuration Manager 1602

Enrolling devices into Intune and & ConfigMgr is normally straight forward until you run into issues. Below is an example where I received an enrollment error (picture 1), clicking Continue leads me to picture 2. As you can see in picture two the Enrollment Update turns from Warning to Checkmark, but only for about 5 seconds then it goes back to a warning.     Troubleshooting mobile devices is slightly different than traditional desktop troubleshooting. The troubleshooting options depends on the device (Android, iOS or Windows). In this example my device was an Android. You can email the log files [...]

Microsoft Azure AD Connect not syncing at a cycle

Recently I had a customer who had implemented the latest version of Azure AD Connect (v. 1.1.119.0) which was available in February 2016. In this version Microsoft changed a lot the make it easier to administrate and convenient to use. They also added some great new features like! Reduction in the sync interval to keep your Azure AD in sync with AD on-premises more quickly Support for automatic upgrades Ability to switch between sign-in methods through the wizard to enable faster pilots Support for Domain and OU filtering within the wizard Read more here: https://blogs.technet.microsoft.com/ad/2016/02/18/azure-ad-connect-1-1-is-now-ga-faster-sync-times-automatic-upgrades-and-more/  Well as it turned out, [...]

OMS/EMS Seminar March 2016: Enterprise Mobility Suite Session Notes and slides

Hi First and foremost, thanks to all attendees for a great day on Wednesday. Lots of great questions and discussions and to all of you who is wondering what happened to my girlfriend’s phone – well I had to un-enroll it the morning after!  For those of you who are waiting for the EMS-book that Kent is writing together with Peter Daalmans, it is not to long until it is published so stay tuned! I will update this blog post with link to the book when it is out.. Download the slide deck: EMS Microsoft EMS Resources app is free and [...]

Azure PowerShell: How to assign access to a subscription using PowerShell (RBAC)

I had this question from a customer recently, and when I searched the net I wouldn’t find any specific examples. This example assigns a user as a Contributor to the subscription. When you assign roles to resources, all you need is the URL for the resource and provide it to this cmdlet. Here you go: [crayon-59c444c092fbb423299004/] That’s all for today!

By | 2016-02-18T13:41:05+00:00 February 18th, 2016|Azure, Powershell|0 Comments

Microsoft EMS News App for Windows 10 and Windows Phone 10

Update: The app has now changed name and is published to the Microsoft store under the name Microsoft EMS Resources An updated blog post is published here: http://blog.ctglobalservices.com/mas/december-11-microsoft-enterprise-mobility-suite-ems-resources-at-your-fingertips/ As an IT-Pro I am used to staying up to date on the latest technology that I am working with. And with On-premises solutions like traditional ConfigMgr implementations, staying up to to date is not too hard with a little bit of effort since new features and updates are not added daily as opposed to what is going on in the Cloud. The cloud is evolving so fast with new features and services added daily [...]

By | 2015-11-11T20:20:28+00:00 November 11th, 2015|Azure, Enterprise Mobility Suite (EMS), Office 365|6 Comments

Cloud App discovery

A new feature in AD premium allows you to gather information about existing SaaS applications in your environment. The feature is called Cloud App Discovery and is part of your AD premium subscription. Here are the steps you need to take in order to get it working. Additional information can be found at Microsoft Technet   In your favorite browser navigate to https://appdiscovery.azure.com/ and click Get Started From the Cloud App Discovery pane click Create Click Settings, Management Agent and click Download – this will download the agent. The agent can be deployed thru Configuration Manager or any other SW [...]

By | 2015-08-25T10:49:23+00:00 August 25th, 2015|Azure|1 Comment

Save money by using Azure Automation to deallocate VMs.

I have four Azure VMs running during normal business hours. All machines are Type A2 (2 CORES / 3.5 GB RAM) and cost $0.154/hr per VM. I start them in the morning at 8PM and deallocate them at 5PM when I leave the office. At least once a month I forget to deallocate. They then run unused until next morning (15 Hours). Apparently, I love Microsoft so much that I enjoy giving them my money. But mark my words. I will no longer pay for services that I don’t use….. Calculation Wasted hours Azure Price No. of VMs No. of [...]

By | 2017-08-22T10:14:32+00:00 December 15th, 2014|Automation, Azure|1 Comment