Kent Agerlund – Side 3 – CTGlobal

Om Kent Agerlund

Microsoft Regional Director, Enterprise Mobility MVP. Microsoft Certified Trainer and Principal consultant. I have been working with Enterprise client management since 1992. Co-founder of System Center User Group Denmark in 2009. Certified MCITP: Enterprise Administrator, MCSA+Messaing, and much more. Member of: Microsoft Denmark System Center Partner Expert Team The Danish Technet Influencers program System Center Influencers Program.

Slides and links from my Compliance Settings session @ NIC 2015 in Oslo

Thanks for attending another great NIC event, and a huge thank for the organization behind NIC for arranging a true International conference in Scandinavia. Some good resources for working with Compliance Settings: Henrik Hoe - https://blog.ctglobalservices.com/author/heh/ Sherry Kissinger - http://www.mnscug.org/blogs/sherry-kissinger Kent Agerlund - https://blog.ctglobalservices.com/author/kea/ Kenny Buntinx - http://scug.be/members/kenny/ Technet - https://technet.microsoft.com/en-us/library/gg681958.aspx Slides and examples

By Kent Agerlund|2015-02-14T14:46:11+01:00februar 14th, 2015|Configuration Manager (SCCM), General info|Kommentarer lukket

Deploying WPA-2 personal WIFI profiles using ConfigMgr & Intune

For hybrid environments (that being ConfigMgr integrated with Microsoft Intune), it’s not possible to deploy a WIFI profile using a pre-shared secret in the UI. This will however not prevent you from creating and deploying WPA-2 Personal security WIFI profiles in the console. You will just be deploying the WIFI profile without the WIFI password. Windows Phone 8.1 will re-apply the same profile over and over again When users receive the WIFI profile all they have to do is add the password and they will have WIFI connection. This works great for Android and iOS, but not for Windows Phone [...]

By Kent Agerlund|2015-01-28T14:28:20+01:00januar 28th, 2015|Configuration Manager (SCCM)|4 Comments

Intune Extensions will not install

It’s a common issue, but still worth mentioning. Being a Full Administrator is NOT the same as having full control of all features in the ConfigMgr console. An example is enabling new Intune Extensions like the one released in late December. As usual you are prompted when new Extensions are available. In this example I’m logged in as Full Administrator and trying to enable the extension in the Administration workspace. All looks good, right until the point where I accept the License Terms, And boom! I do not have the required permissions even though I’m a Full Administrator! Rule #7 [...]

By Kent Agerlund|2015-01-02T10:36:21+01:00januar 2nd, 2015|Configuration Manager (SCCM)|Kommentarer lukket

Managing WIFI certificates for iOS devices with ConfigMgr MDM

This will be the last Christmas blog post from Coretech in 2014. A huge thanks to all of you who followed our Christmas blogs in December. @Coretech we wish you and your loved ones a Merry Christmas and a Happy New Year – We look forward to service you again in 2015 with knowledge, inspiration and best practices on Microsoft technologies One of the many need features offered by ConfigMgr & Intune is the ability to deploy certificates and WIFI profiles. Both are essential when implementing a MDM/BYOD strategy. Creating the required SCEP certificate for iOS As mentioned in a [...]

By Kent Agerlund|2014-12-23T14:09:31+01:00december 23rd, 2014|Configuration Manager (SCCM), General info|3 Comments

System Center 2012 ConfigMgr Dashboard– Because we want you to look smart

Do you know the feeling when it feels like you have lost your head and can’t find the information your need? You start browsing the 468 canned reports and quickly spend a couple of hours still without finding exactly what you need. @ Coretech we know the feeling, but instead of keep being frustrated we decided to do something about it. Our solution is a System Center 2012 dashboard where we can see all the information we need in an easy way. Our dashboard will provide you with information in 3 layers and 3 dimensions….it sounds smart and Yes, it [...]

By Kent Agerlund|2014-12-16T11:59:32+01:00december 16th, 2014|Configuration Manager (SCCM), General info|4 Comments

Why System Center Updates Publisher aka SCUP is still a great tool

Welcome to the Coretech x-mas blog Calendar where we will give you a little insiders tip every single day in December. Even if I don’t deploy 3rd party updates with SCUP 2011 I still use the tool for two purposes. I always upgrade my ConfigMgr clients and consoles to the latest CU using the built-in cab files. This allow me to use my existing software updates collections and I don’t have to worry about specific platforms since the detection rules in SCUP will take care of that. You can find the cab files on the site server in %Program [...]

By Kent Agerlund|2014-12-01T08:56:43+01:00december 1st, 2014|Configuration Manager (SCCM), General info|1 Kommentar

Upgrading ConfigMgr 2012 R2 Primary site server from Windows Server 2012 to Windows Server 2012 R2

Maybe my most boring blog post ever, but just finished upgrading the primary site server from Windows Server 2012 to Windows Server 2012 R2. After the upgrade I performed a ConfigMgr Site reset (not required, but just in case). Testing out the different features and all but one looked to be doing just fine. The only feature that didn’t work was the Software Update feature. A quick look in the wsyncmgr.log file revealed that the server wouldn’t synchronize between the primary site server and the WSUS server. Sometimes the solution is just too easy and almost not even worth blogging [...]

By Kent Agerlund|2014-11-29T20:50:33+01:00november 29th, 2014|Configuration Manager (SCCM), General info|2 Comments

Why do my ConfigMgr clients not report having the new CU3 installed?

Recently I had to deploy CU3 to a lot of clients and I ran into a funny issue. After a couple of days I only saw about 10-15% of the clients reporting the new CU3 being installed although my CU3 packages seemed to be running fine and hitting almost 90% of all clients in the organization. It turned out that our Heartbeat discovery was configured with the default settings which is “run every 7 days”. The heartbeat discovery data generated on each client is only about 10-12 kb in size and contains information about the client version. [...]

By Kent Agerlund|2014-11-28T13:27:25+01:00november 28th, 2014|Configuration Manager (SCCM)|1 Kommentar

Device based vs User based MDM policies in ConfigMgr 2012 R2

With ConfigMgr and Intune you have long been able to manage devices like Android, iOS and Windows with mail profiles, security settings, Wi-Fi profiles and VPN profiles. Deployment of those profiles has undergone a fundamental change with the release of ConfigMgr R2 and CU3. To understand those changes you first to understand how policies were deployed in the past. Back in the old days “prior to R2 CU3” On the ConfigMgr side, even if you deployed policies to a user it would always be deployed to the device. What happened in the background the policy generated would not be generated [...]

By Kent Agerlund|2014-11-26T15:02:42+01:00november 26th, 2014|Configuration Manager (SCCM)|1 Kommentar

Slides and links from my session @Techdays in Sweden

As always thanks for attending and for making speaking in Stockholm being a fun thing to do. As promised during the session here are the links to the blog posts I mentioned, the script I used and the slide deck. Autmating the WSUS Cleanup process https://blog.ctglobalservices.com/kea/house-of-cardsthe-configmgr-software-update-point-and-wsus/ SQL PowerShell audit script http://stevethompsonmvp.wordpress.com/2014/05/19/powershell-sql-audit-script/ Splitting existing ConfigMgr database into multiple SQL files http://myitforum.com/cs2/blogs/jnelson/archive/2009/07/27/140199.aspx Pre-creating the database before installing Configmgr – download script Post 2012 CU2 hotfix to speed up user policies in hybrid MDM scenarios - https://support.microsoft.com/kb/2994331 Management point replicas - https://blog.ctglobalservices.com/kea/working-with-database-replicas-on-your-management-point/ Multiple software upate points and shared db - http://blogs.msdn.com/b/steverac/archive/2013/02/07/configuring-multiple-software-update-points-in-a-configmgr-2012-primary-site-what-to-expect.aspx Slide deck [...]

By Kent Agerlund|2014-11-22T13:17:49+01:00november 22nd, 2014|Configuration Manager (SCCM), Events|1 Kommentar

Coretech System Center Dashboard

I’m proud to announce our System Center dashboard with the Configuration Manager 2012 connector. What is the dashboard Coretech’s System Center dashboard with the Configuration Manager 2012 connector enables enterprise client management administrators to make the right decisions at the right time. The dashboard can provide status on deployments, compliance, mobile devices and client health. The Dashboard also provides accurate information that supports continuous improvements in client management. The primary goal of our Dashboard is to communicate information clearly and efficiently to both administrators and management. At Coretech we know that effective visualization gives you the information needed to analyze [...]

By Kent Agerlund|2017-08-22T10:13:35+01:00november 12th, 2014|Configuration Manager (SCCM), CTGlobal Insight Analytics|11 Comments

Troubleshooting Certificate deployment on iOS devices with ConfigMgr & Intune

Last week I had an issue trying to enroll certificates thru ConfigMgr/Intune via NDES on iOS devices. The enrollment worked like a charm on Windows Phone 8.1 devices. The error I got in the crp.log file (Certificate Reqistration Point component) was key usage in CSR 160 and challenge 224 do not match To fix the issue you have to modify the certificate NDES General Purpose certificate template and remove Signature in proof of origin. You will find the property in Extensions After that iOS devices started appying the certificates.

By Kent Agerlund|2014-11-11T15:29:49+01:00november 11th, 2014|Configuration Manager (SCCM)|Kommentarer lukket

Coretech Automated Software Update Management–CASUM

We love to automate and spend time on interesting tasks – If you are like us, why not use our latest tool CASUM and get done with Patch Tuesday in 10 seconds. Download today more detailed informatil will follow

By Kent Agerlund|2014-11-08T18:11:00+01:00november 8th, 2014|Configuration Manager (SCCM)|4 Comments

Using Server V.Next as a ConfigMgr 2012 R2 CU3 site system role

Does it work? Sure it does, is it supported? – No way In my test I deployed the new Windows Server Technical Preview 9841, installed the distribution point, management point and software update point requirements. Here you see the distmgr.log file distributing content to my cm03.corp.viamonstra.com distribution point – notice the server version number. Windows 10 client downloading from the Server vNext distribution point Management Point works like a charm Application Catalog point running from a Windows 10 client Software update point configured as the second SUP works. The SUP is installed using the same shared database as my Windows [...]

By Kent Agerlund|2014-10-02T12:07:20+01:00oktober 2nd, 2014|Configuration Manager (SCCM)|Kommentarer lukket

Windows 10 as ConfigMgr 2012 R2 client

No, the client is not supported and yes it works with most of the features. In my case I used Jason Sandy’s startup script to get my client installed. Here is a few screenshots of what I have tested so far: Client is installed and assigned The Application Catalog feature works Application and package deployment works like a charm Compliance Settings tested and working Inventory works Software Update scanning works OS deployment works – just check the blog post from Johan Arwidmark - http://www.deploymentresearch.com/Research/tabid/62/EntryId/192/Beyond-unsupported-Deploying-Windows-Technical-Preview-with-MDT-2013.aspx

By Kent Agerlund|2014-10-02T11:45:29+01:00oktober 2nd, 2014|Configuration Manager (SCCM)|1 Kommentar

Links and downloads from SCU 2014 in Basel

Below is a list of the links and scripts that I used in my two sessions today on Compliance Management and Troubleshooting ConfigMgr. Compliance examples – download Configuration Manager Support Center: http://www.microsoft.com/en-us/download/details.aspx?id=42645 Microsoft System center 2012 R2 Configuration Manager Toolkit: http://www.microsoft.com/en-us/download/details.aspx?id=36213 Optimizing ConfigMgr database: http://stevethompsonmvp.wordpress.com/2013/05/07/optimizing-configmgr-databases/ Background on maintenance task: http://stevethompsonmvp.wordpress.com/2013/04/19/how-to-determine-if-the-configmgr-rebuild-indexes-site-maintenance-task-is-running/ Configuring SQL Backup and recovery, includes link to demo: http://stevethompsonmvp.wordpress.com/2014/02/24/configmgr-2012-site-backup-and-recovery-overview/ Autmating the WSUS Cleanup process https://blog.ctglobalservices.com/kea/house-of-cardsthe-configmgr-software-update-point-and-wsus/ SQL PowerShell audit script http://stevethompsonmvp.wordpress.com/2014/05/19/powershell-sql-audit-script/ Splitting existing ConfigMgr database into multiple SQL files http://myitforum.com/cs2/blogs/jnelson/archive/2009/07/27/140199.aspx Pre-creating the database before installing Configmgr – download script SQL Script to for fragmentation on the SQL DB Checking [...]

By Kent Agerlund|2014-09-19T18:30:27+01:00september 19th, 2014|Configuration Manager (SCCM), General info|4 Comments

Scripts and links from the ConfigMgr 2012 Site Review session @IT/Dev connections

A big thanks to all who showed up at our session, Steve and I had a fantastic time and could easily have gone on for 75 more minutes Below are the links to the scripts and blog post we referenced during the session. Hope to see you all again next year! Optimizing ConfigMgr database: http://stevethompsonmvp.wordpress.com/2013/05/07/optimizing-configmgr-databases/ Background on maintenance task: http://stevethompsonmvp.wordpress.com/2013/04/19/how-to-determine-if-the-configmgr-rebuild-indexes-site-maintenance-task-is-running/ Configuring SQL Backup and recovery, includes link to demo: http://stevethompsonmvp.wordpress.com/2014/02/24/configmgr-2012-site-backup-and-recovery-overview/ Autmating the WSUS Cleanup process https://blog.ctglobalservices.com/kea/house-of-cardsthe-configmgr-software-update-point-and-wsus/ SQL PowerShell audit script http://stevethompsonmvp.wordpress.com/2014/05/19/powershell-sql-audit-script/

By Kent Agerlund|2014-09-18T11:58:08+01:00september 18th, 2014|Configuration Manager (SCCM), General info|1 Kommentar

Links from the ConfigMgr 2012 R2 precon @IT/Dev Connections

Thanks for a great day @Aria in Las Vegas. As promised here are the links we (@Jarwidmark and @Agerlund) mentioned during our preconference: Pre-creating the database using this script SQL backup and restore http://stevethompsonmvp.wordpress.com/2014/02/24/configmgr-2012-site-backup-and-recovery-overview/ Software Update Report dashboard rdl file Software Update step-by-step: http://blogs.technet.com/b/gary_simmons_mcs/archive/2013/12/09/creating-a-custom-report-for-system-center-2012-r2-configuration-manager-part-1.aspx PowerShell Script to set permissions in Active Directory for OSD http://www.deploymentresearch.com/Research/tabid/62/EntryId/160/PowerShell-Script-to-set-permissions-in-Active-Directory-for-OSD.aspx Hydration for System Center 2012 R2 http://www.deploymentresearch.com/Research/tabid/62/EntryId/149/The-Hydration-Kit-for-System-Center-2012-R2-is-available-for-download.aspx Script for Deploying a reference image (VM) fully unattended http://www.deploymentresearch.com/Research/tabid/62/EntryId/172/Deploying-a-reference-image-VM-fully-unattended.aspx Link to Jason Sandy's startup script for ConfigMgr Client: http://blog.configmgrftw.com/configmgr-client-startup-script/ Video - Compliance Settings and Control End–User Installed Software http://channel9.msdn.com/Events/MMS/2013/UD-B307 Coretech Configuration Manager shutdown utility https://blog.ctglobalservices.com/kea/configuration-manager-shutdown-utility/ How to [...]

By Kent Agerlund|2014-09-17T14:41:21+01:00september 17th, 2014|Configuration Manager (SCCM)|1 Kommentar

House of Cards–The ConfigMgr Software Update Point and WSUS

A Card house; fun to build but not very solid and when one card falls the whole house often goes down with it. It’s a little like that with the WSUS server and Configuration Manager. Installing WSUS seems so easy but there are still some moving part, and if you get one of the wrong maybe the whole House of Cards falls. Recently I have seen that happen at several customers. This blog post is divided into 3 parts: 1. Introduction 2. Problem overview and symptoms 3. Solutions to fix issues and avoid it in the future Let’s start by [...]

By Kent Agerlund|2014-09-10T14:38:25+01:00september 10th, 2014|Configuration Manager (SCCM), General info|50 Comments

3rd party updates & Compliance using Secunia and System Center 2012 ConfigMgr

This is the 3rd and final post in my series of Secunia CSI and System Center 2012 Configuration Manager integration. Part 1 focused on installing and configuring, Part 2 focused on deploying and installing 3rd party software updates. This blog post will introduce you to the monitoring options in the product. You can monitor compliance in either ConfigMgr or in Secunia CSI. The difference between the two is ConfigMgr will only show you compliance about the updates you have published to WSUS where CSI will list compliance for all applications found on the systems. Tracking compliance in CSI In CSI [...]

By Kent Agerlund|2014-09-05T14:33:47+01:00september 5th, 2014|Configuration Manager (SCCM)|Kommentarer lukket

ConfigMgr 2012 Evaluation version expired

So what actually happens when an evaluation version expires? You will notice a few things, like the ConfigMgr administrator console very clearly tells you it expired. As you can see from above you will still be able to open the console but only with Read permisions. Trying to perform actions via PowerShell will give you an error saying that you don’t have the proper permissions: Looking in the SMS provider log file (smsprov.log) you will also see errors indicating the lack of permissions. You will also notice that both the SMS Executive Service and Site Component Manager service is not [...]

By Kent Agerlund|2014-09-01T13:44:46+01:00september 1st, 2014|Configuration Manager (SCCM), General info|3 Comments

Managing 3rd. party Software Updates with System Center 2012 ConfigMgr & Secunia CSI Part II

In Part I focused on installing and configuring Secunia CSI 7 and System Center 2012 R2 ConfigMgr. In this part I will explain how you can deploy software updates. I do anticipate that you already have a working Software Update Management infrastructure managed by System Center 2012 R2 ConfigMgr. Deploying 3rd party software updates The process of deploying 3rd party software updates can be initiated from the CSI web portal or using the System Center 2012 R2 ConfigMgr plugin. In my world updates are divided into two categories: Applications managed and supported by the organization. In this category I often [...]

By Kent Agerlund|2014-08-27T11:51:02+01:00august 27th, 2014|Configuration Manager (SCCM), General info|1 Kommentar

Follow up questions from my 3rd party software update webinar

As promised here are the follow up questions we didn’t time to cover during the 60 min webinar - https://www.brighttalk.com/webcast/8113/116381 Q & A from the webinar Q1 When you have applied an update for Flash e.g., how do you repair that version if the application gets broken? Repair so it reverts back to "old" version or can the updated version be repaired?A1 Traditionally you are deploying the applications from ConfigMgr and the updates thru CSI. Unless you update the application/package in ConfigMgr then you have to install the old version and upgrade it again. Another option is to republish the [...]

By Kent Agerlund|2014-08-21T16:32:01+01:00august 21st, 2014|Configuration Manager (SCCM)|Kommentarer lukket

Managing 3rd. party Software Updates with System Center 2012 ConfigMgr & Secunia CSI Part I

Question if often get when visiting customers;”Is there really a need for managing our 3rd. party applications when we already patch Adobe Reader and JAVA”? The short answer is Yes, and the longer answer is please look at the numbers. The absolute number of vulnerabilities detected in 2013 was 13,073, discovered in 2,289 products from 539 vendors. The number shows a 45% increase in vulnerabilities in the five year trend, and a 32% increase from 2012 to 2013. Knowing these numbers I get the feeling that only patching Adobe Reader and JAVA is not enough to keep my environment secure. [...]

By Kent Agerlund|2014-08-21T12:30:07+01:00august 21st, 2014|Configuration Manager (SCCM), General info|Kommentarer lukket

Forrige 234 Næste