Roll Out New Configuration Manager Distribution Point with PowerShell

Here is a quick example how to install new Configuration Manager Distribution Point with PowerShell. As you see we have many options to expand this script. We can install Windows Server features, reboot it remotely, install additional software etc. It all depends how you wanna install and configure it. #Import the Module Import-Module $env:SMS_ADMIN_UI_PATH.Replace("\bin\i386","\bin\configurationmanager.psd1") $SiteCode = Get-PSDrive -PSProvider CMSITE #Change the connection context Set-Location "$($SiteCode.Name):\" #New DP Information $DistributionPoint = 'DP01.4demo4.com' $SiteCode = 'PS1' # Test the connection to server     Test-Connection `         -ComputerName $DistributionPoint # OPTIONAL - Install Windows Server Roles and Features     Install-WindowsFeature `         -Name [...]

Don’t be fooled by the new Site Server Servicing Window in ConfigMgr 1511

In ConfigMgr 1511 you have a new maintenance windows when you open the site server properties. That’s NOT for traditional software updates but for the new ConfigMgr Updates and Servicing model. You get to the maintenance windows in the Administration workspace, Site Configuration, Sites. Right the primary site and select properties. In the Maintenance Window tab, create a maintenance window (and make sure you call it something like ConfigMgr Dynamic update Only). I did a few tests and the maintenance window do not apply to traditional software updates. According to my tests normal software software updates will still apply unless [...]

By |2015-12-09T19:43:25+01:00december 9th, 2015|Configuration Manager (SCCM)|4 Comments

System Center Configuration Manager 1511 – Dynamic updates

Looking at the life of an IT Pro today, people like you and me are being challenged like never before. Long gone are the days where we only focused on traditional desktop management, today we are also challenged with managing mobile devices, like iOS, Android, Windows Phones and tablets. MAC OS 10, traditional desktops, road worriers, cloud services, SLA and visualization demands from from management and the list just goes on and on. In the middle of everything, right there in the eye of the Tornado is You....often trying to put out fires instead of spending time on being more [...]

By |2015-12-09T13:59:19+01:00december 9th, 2015|Configuration Manager (SCCM)|9 Comments

When Power BI met the SCCM Community

SCCM Community meet Power BI – Power BI meet the SCCM Community… This blog post is the part 1 of 2 blog posts – and as you can see it’s all about introductions. Power BI is not a “new” thing, it’s been around for some time but is really just now starting to take off. (https://powerbi.microsoft.com/en-us/) So what is Power BI? It’s a new online service for us to get insight of our SCCM data, and for us to further display data internally or to others. Previous versions was a coop between Power BI and Office 365, but now we [...]

By |2015-12-03T23:06:28+01:00december 3rd, 2015|Configuration Manager (SCCM), Office 365|1 Kommentar

December 2nd: Part 2: Uninstall Java (or any other software) with ConfigMgr Compliance Baselines

It's December 2nd and Christmas is just around the corner! Yesterday Jakob kicked off the Coretech December Calendar with a great post about "Triggering a webhook from a SharePoint workflow using Out-of-the-box Activities" (Check out his blog post here: http://bit.ly/1N16fte).  That was the  first, this is the second post in the Coretech blog series that will continue until December 24th - Christmas Eve! :) In Part 1 (http://bit.ly/1PlnDPr) I explained how you can utilize ConfigMgr Compliance Baselines for uninstalling software like Java, Adobe etc. with the help of PowerShell and WMI. Well in Part 1 we used the Win32_Product class which is not recommended [...]

Part 1: Uninstall Java (or any other software) with ConfigMgr Compliance Baselines

Compliance Items and Compliance Baselines in ConfigMgr is so powerful! And with some PowerShell magic you can almost use it to do anything you like on a Windows based computer – Only your imagination that will be the showstopper! Here I will show how you can uninstall software using WMI and Compliance Items in SCCM. However, it is important that you read the following articles as the uninstallation process uses win32_product WMI class which is known for its evilness. Thanks to Kaido, Jürg and Torsten for pointing this one out. A updated post as been created using a better and more [...]

MMS 2015 precon notes

Hi, thanks for an amazing week @ MMS. Here are the notes from our ConfigMgr Autmating the WSUS Cleanup process – https://blog.ctglobalservices.com/kea/house-of-cardsthe-configmgr-software-update-point-and-wsus/ SQL PowerShell audit script  http://stevethompsonmvp.wordpress.com/2014/05/19/powershell-sql-audit-script/ Splitting existing ConfigMgr database into multiple SQL files  http://myitforum.com/cs2/blogs/jnelson/archive/2009/07/27/140199.aspx Pre-creating the database before installing Configmgr – download script Multiple software upate points and shared db – http://blogs.msdn.com/b/steverac/archive/2013/02/07/configuring-multiple-software-update-points-in-a-configmgr-2012-primary-site-what-to-expect.aspx Slide deck SQL Script to for fragmentation on the SQL DB Checking the database fragmentation: Use CM_PS1 Go SELECT DB_NAME(database_id) AS [Database Name], OBJECT_NAME(ps.OBJECT_ID) AS [Object Name],     i.name AS [Index Name], ps.index_id, index_type_desc,     avg_fragmentation_in_percent, fragment_count, page_count FROM sys.dm_db_index_physical_stats(DB_ID(),NULL, NULL, NULL ,N’LIMITED’) AS ps     [...]

By |2015-11-19T00:06:16+01:00november 19th, 2015|Configuration Manager (SCCM), Events|1 Kommentar

Techdays Sweden 2015, notes and links

Thanks to all attending the preconference on Managing Windows 10 with Microsoft EMS, MDT and Configuration Manager. To all of those who attending the “What’s new and coming in Configuration Manager vNext”. Sessions from Techdays will be online on Channel 9 https://channel9.msdn.com/Events/TechDays-Sweden/TechDays-Sweden-2015 Configuration Manager vNext information https://technet.microsoft.com/library/dn965439.aspx#BKMK_Win10Servicing Windows 10 Servicing must read https://technet.microsoft.com/en-us/library/mt598226(v=vs.85).aspx Windows 10 Servicing must read https://technet.microsoft.com/en-us/library/mt574263(v=vs.85).aspx and NO, it’s not the same doc SQL Audit - https://stevethompsonmvp.wordpress.com/2014/05/19/powershell-sql-audit-script/ WSUS optimization - https://blog.ctglobalservices.com/kea/house-of-cardsthe-configmgr-software-update-point-and-wsus/ Windows 10 Defender OMA-URI downloads - https://blog.ctglobalservices.com/kea/managing-windows-10-using-on-premises-mdm-in-system-center-configuration-manager-vnext/ Install and configure onprem-mdm in Configuration Manager vNext - https://blog.ctglobalservices.com/kea/install-and-configure-on-prem-mobile-device-management-mdm-with-configmgr-vnext-tp3/  

By |2015-10-22T09:43:47+01:00oktober 22nd, 2015|Configuration Manager (SCCM), Events|Kommentarer lukket til Techdays Sweden 2015, notes and links

Troubleshooting: An error occurred when creating the WSUS Signing Certificate (Secunia)

Lately I have been doing some Secunia integrations with System Center 2012 R2: Configuration Manager (SCCM/ConfigMgr 2012). When you are setting up the connector between Secunia CSI and WSUS one of the first things the wizard is asking you to do is to Configure a WSUS Self-Signed Certificate, the WSUS signing certificate is required to create and install local packages. Without it, only packages from Microsoft Update will be installed. How-ever this time I got this error when trying to 'Automatically create and install certificate'  during the Connector Wizard: An error occurred when creating the WSUS Signing Certificate Now this [...]

By |2015-10-20T20:14:46+01:00oktober 20th, 2015|Configuration Manager (SCCM), Security|1 Kommentar

How to: Create custom SQL- based Reports in System Center 2012 R2: Configuration Manager

A customer asked me  for a “how-to” on how to Create reports in SCCM 2012, so why not share with everyone. This post is not intended to show how to write or design queries, but show you have to create  a report based on a SQL query you might already have. Even-though we are skipping how to write SQL Queries for know, this post is still going to be a bit long. Time for that cup of coffee! First some requirements: You need to have an SQL Server instance for SCCM with SQL Reporting Services running You need to have [...]

Add the “Trigger Setup Rollback” Step in Windows vNext (Windows 10) Upgrade Task Sequence for proper status monitoring

With the announcement of Windows 10 Microsoft released a pre-created Task Sequence for an in-place-upgrade scenario with all the necessary steps it takes to upgrade from Windows 7, 8 or 8.1. For more information and the task sequence itself go to the System Center Team blog here: http://blogs.technet.com/b/configmgrteam/archive/2015/06/16/revised-content-for-the-win10-in-place-upgrade-via-task-sequence-for-configmgr.aspx The task sequence after imported into SCCM: Now, the task sequence comes 100 % out-of-the-box, but if you want to monitor Roll Back Scenarios then you have to add a simple step at the end of the sequence named Trigger Rollback. To do this simply create create the step under the Rollback [...]

By |2015-10-13T15:10:20+01:00oktober 13th, 2015|Configuration Manager (SCCM), Operating Systems, OS Deployment, Windows Client|Kommentarer lukket til Add the “Trigger Setup Rollback” Step in Windows vNext (Windows 10) Upgrade Task Sequence for proper status monitoring

Windows Defender not getting definition updates on a Windows 10 client managed by ConfigMgr

With the announcement of Windows 10 Microsoft said that ConfigMgr 2012 would natively support Windows Defender in the latest Service pack (http://blogs.technet.com/b/configmgrteam/archive/2015/05/14/announcing-the-availability-of-sysctr-2012-r2-configmgr-sp1-and-sysctr-2012-configmgr-sp2.aspx). That means, for those of you who are using Endpoint Protection as the Antivirus solutions on clients and servers, needs to start using the Windows Defender instead and stop deploying SCEP (to Windows 10). Now, this is great because old policies work great, however definition updates for Endpoint Protection do not so we have to make a little adjustment to our routines. First confirmation on the policies: SCEP with Policy from SCCM: Windows defender with policy from SCCM: [...]

By |2015-10-13T00:24:25+01:00oktober 13th, 2015|Configuration Manager (SCCM), Windows Client|Kommentarer lukket til Windows Defender not getting definition updates on a Windows 10 client managed by ConfigMgr

Troubleshooter note: SQL Installation fails with exitcode 0x84BB0001 on a ReFS formatted partition.

So I tried to install SQL the other day for a new ConfigMgr environment, but I kept getting an error during the first seconds of the installation with 0x84BB0001 as the exit code. With some quick investigation into the log files I found this%Temp%\SqlSetup_Local.log:C:\Program Files\Microsoft SQL Server\110\Setup Bootstrap\Log\Summary.txt: Shows that the installation has difficulties installing on a ReFS formatted partitionDisk Manager Shows that D:\ is formatted with ReFS (I blame my PowerShell Script :)): Now the quick and easy way of fixing this is to reformat the partition to NTFS. And this is what I did in this case. But [...]

By |2015-10-11T19:05:00+01:00oktober 11th, 2015|Configuration Manager (SCCM), Scripting & Development, SQL|Kommentarer lukket til Troubleshooter note: SQL Installation fails with exitcode 0x84BB0001 on a ReFS formatted partition.

Deploying Office 2016 with SCCM 2012

Follow this simple guide to get your Office 2016 deployment up and running with SCCM 2012 R2 First we need to download the Office 2016 Deployment Tool from Microsoft You can find it here Run the tool and install it to a location of your liking, I choose e:\temp\Office 2016 When you look in that folder you'll find a setup.exe and a sample configuration file. Download the content In order to download the Office 2016 installation files, we first need to create a download file So fire up your favorite text editor and enter the following <Configuration> <Add SourcePath="e:\temp\office2016\x64 EN" [...]

By |2015-09-29T23:52:47+01:00september 29th, 2015|Configuration Manager (SCCM)|21 Comments

IT Devconnections Enterprise Mobility and Identity BOF

During the BOF last week @ #ITDevCon i briefly talked about creating a couple of managed apps using PowerShell in ConfigMgr. Below are a few examples, open PowerShell ISE aas administrator and magic happens #Import Module Import-Module $env:SMS_ADMIN_UI_PATH.Replace("\bin\i386","\bin\configurationmanager.psd1") $SiteCode = Get-PSDrive -PSProvider CMSITE Set-Location "$($SiteCode.Name):\" #Create the Word Application New-CMApplication -Name "Word" #To create a iOS deployment type for the application Add-CMDeploymentType -ApplicationName "Word" -AutoIdentifyFromInstallationFile -IosDeepLinkInstaller -DeploymentTypeName "Word iOS" -InstallationFileLocation "https://itunes.apple.com/us/app/microsoft-word/id586447913?mt=8" -ForceForUnknownPublisher $True #Create the OneNote Application New-CMApplication -Name "OneNote" #To create a iOS deployment type for the application Add-CMDeploymentType -ApplicationName "OneNote" -AutoIdentifyFromInstallationFile -IosDeepLinkInstaller -DeploymentTypeName "OneNote iPhone" -InstallationFileLocation "https://itunes.apple.com/us/app/microsoft-onenote-for-iphone/id410395246?mt=8" -ForceForUnknownPublisher [...]

By |2015-09-22T23:54:47+01:00september 22nd, 2015|Configuration Manager (SCCM), Enterprise Mobility Suite (EMS), Events|Kommentarer lukket til IT Devconnections Enterprise Mobility and Identity BOF

Upgrade System Center Configuration Manager Console with PowerShell

Since Service Pack 1 was released to SCCM 2012 R2 I have been upgraded several environments. A couple of customers wanted me to create a PowerShell script to uninstall existing ConfigMgr Console and install the new updated version with the latest cumulative updates and hotfixes. If you create a package to distribute it with SCCM make sure you point the Data source to the location of the Client installations files, Script, KB3084586-msp and kb3074857-msp. Installation command for the program will then be: PowerShell.exe -file "script.ps1". Remember to set PowerShell execution policy to "Bypass" under Client Settings. This will not affect [...]

By |2015-09-17T18:14:33+01:00september 17th, 2015|Configuration Manager (SCCM), General info, Powershell, Scripting & Development|Kommentarer lukket til Upgrade System Center Configuration Manager Console with PowerShell

Automate Signature And Status Reports With PowerShell – Windows Defender (.txt file)

What you will be able to after reading this blog: Get the latest information about "your" Signature- & Anti Virus reports in Windows Defender and make it into a text file. How to automate it, so it will run every day and give you a status report with time and date. Being able to look at what time and date the latest updates have been completed. First of all, we have to create a folder/directory where the status reports can be stored in. Open up PowerShell in administrative mode and run this script only by copy-paste: $path="C:\" New-Item .\AVStatusReports -ItemType [...]

Install and Configure on-prem mobile device management (MDM) with ConfigMgr vNext TP3

This guide is written by Panu Saukko and Kent Agerlund (both Microsoft Enterprise Client MVP’s). These are the steps we used in our demo environments to configure the new on-prem MDM feature in system Center Configuration Manager vNext Technical Preview 3. In the article you will notice that we used two different environments and you will see screenshots from both environments. Don’t let that confuse you, happy reading and enrolling. The environments we used are: Configuration Manager site: vn3, Site Server: vnext.corp.viamonstra.com, Domain: corp.viamonstra.com, PKI server: dc.corp.viamonstra.com Configuration Manager site: C15, Domain: cmdemo.local, PKI server: cm-dc1.cmdemo.local System Center 2012 Configuration [...]

Managing Windows 10 using On-premises MDM in System Center Configuration Manager vNext

There is a new management agent in town…. the built-in Windows 10 management agent. With that agent you are able to deploy applications (with some limitations in TP3), gather inventory data and deploy configuration items.  in this post I will describe how to you can create configuration items to control various settings. If you want to play around with the complete list of Windows Defender settings you can download the full list of CI’s here (I didn’t have time to test all of them……just saying). The MDM requirements are a little tricky in the sense that you need the following [...]

By |2015-09-06T20:58:34+01:00september 6th, 2015|Configuration Manager (SCCM), Windows Client|1 Kommentar

Links from the ConfigMgr Visualization session @ SCU in Basel

Standard ConfigMgr reporting -Introducing to reporting in Configuration Manager - https://technet.microsoft.com/en-us/library/gg682105.aspx -Channel 9 - http://channel9.msdn.com/Events/MMS/2013/UD-B338 Custom reports Add custom code and color scales like Excel - http://blogs.msdn.com/b/bobmeyers/archive/2009/07/31/add-excel-like-color-scale-conditional-formatting-to-your-reports.aspx Power Views and Power Queries Download Power Queries for Excel - http://www.microsoft.com/en-us/download/details.aspx?id=39379 Getting started with Power Queries - http://www.databasejournal.com/sqletc/getting-started-with-microsoft-power-query-for-excel.html  - https://support.office.com/en-us/article/Microsoft-Power-Query-for-Excel-Help-2B433A85-DDFB-420B-9CDA-FE0E60B82A94 Download Power View - http://www.microsoft.com/en-us/download/details.aspx?id=26718 Getting started with Power View - https://technet.microsoft.com/en-us/library/hh213579(v=sql.110).aspx - http://blogs.msdn.com/b/seanboon/archive/2012/07/30/visualizing-the-olympics-with-power-view-in-excel-2013-day-1.aspx Custom community dashboard Compliance -http://blogs.technet.com/b/gary_simmons_mcs/archive/2014/09/16/system-center-2012-r2-configuration-manager-software-update-compliance-dashboard-part-1.aspx Patch Management - http://blogs.technet.com/b/gary_simmons_mcs/archive/2013/12/09/creating-a-custom-report-for-system-center-2012-r2-configuration-manager-part-1.aspx Client Health - https://gallery.technet.microsoft.com/SCCM-Configmgr-2012-SSRS-2863c240 A little of everything - http://blogs.technet.com/b/configmgrdude/archive/2015/01/06/creating-a-simply-dashboard-using-smsprov-log-in-configmgr-2012.aspx Professional dashboards Configuration Manager - http://www.coretech.dk Operations Manager - https://squaredup.com/ - https://www.savision.com/ 

By |2015-08-26T09:42:26+01:00august 26th, 2015|Configuration Manager (SCCM), Events|2 Comments

Deploying WIFI profiles with pre-shared secret to Android devices using ConfigMgr

Today I have spend some time creating and deploying WIFI profiles to Android devices and would like to share my experiences. To get started with Android and WiFi profiles I used this TechNet article https://technet.microsoft.com/en-us/library/dn705842.aspx is almost correct, but there a few bugs in the XML example (as I see it, authentication and encryption). To get me all the way I combined the knowledge from the article with information from MSDN https://technet.microsoft.com/en-us/library/dn705842.aspx and finally this super nice Android PSK Generator community tool - http://johnathonb.com/2015/05/intune-android-pre-shared-key-generator/  The Android XML configuration is really easy,just add the WiFI information into the Configurator and click [...]

ConfigurePXE blocks contentdistribution after SCCM 2012 R2 SP1 upgrade

Just finished another SCCM 2012 R2 SP1 upgrade, this time with a very “interesting” outcome. The site was a single primary site with close to 100 distribution points. The upgrade process went somehow smooth, primary site server was upgraded without any issues, except the management points had to restart before the SMS bootstrap service would successfully configure the components. For a while everything seemed like a normal upgrade, the site component manager was running and initiating the installation of the remote site systems. But after a little while, we discovered that the content distribution didn’t distribute new content. A look [...]

Windows Phone 8.1 devices keep prompting for sign in to the Company Portal

I have been working on another mobility project the last couple of months. this project started as a hybrid SCCM/Intune project using “old” SCC 2012 R2 platform, a couple of weeks ago we migrated the platform to the latest service pack in order to get all of the new hybrid mobile features in place. The project have support for Android, iOS and Windows phones 8.1 devices. In the beginning the company portal was deployed to the Windows Phones using the Windows Phone trial certificate (not supported, but it works). That part worked as expected for many months, but using the [...]

By |2015-07-01T10:47:13+01:00juli 1st, 2015|Configuration Manager (SCCM), Enterprise Mobility Suite (EMS), General info|Kommentarer lukket til Windows Phone 8.1 devices keep prompting for sign in to the Company Portal