Category Archives: SCCM

System Center Configuration Manager

Hotfix available for ConfigMgr version 2103 to solve policy storm issues caused by Invoke-MbamClientDeployment.ps1

Introduction I tweeted and blogged about policy storm problems caused by using the following MBAM script Invoke-MbamClientDeployment.ps1 during OSD with Configuration Manager version 2103 when the BitLocker Management feature is enabled, you can read about that here. My original tweet … Continue reading

Posted in 2103, hotfix for BitLocker issue | Leave a comment

Cloud attach – Endpoint Managers silver lining – part 8 Enabling Tenant Attach

Introduction This is part 8 in a series of guides about cloud attach in Microsoft Endpoint Manager, with the aim of getting you up and running with all things cloud attach. This part will focus on enabling the compliance policies … Continue reading

Posted in 2103, AzureAD, Cloud Attach, tenant attach | Leave a comment

using BitLocker Management in ConfigMgr and do OSD, read this !

Introduction I like many others have blogged about enabling BitLocker during a task sequence in the past, however recently it’s come to my attention that the Invoke-MBAMClientDeployment.ps1 scripts which were provided for MBAM setups are not supported for use with … Continue reading

Posted in 2103, BitLocker | Leave a comment

Configuration Manager Technical Preview 2106 is out, and it’s huge !!

Introduction On the same day that Microsoft announced Windows 11, comes Technical Preview 2106 and it’s full of new features, I mean really full ! The list of what’s new is humongous. A few of my favorite changes in this … Continue reading

Posted in 2106 | Leave a comment

A quick look at the “Retire MY PC” app

Introduction I tweeted about this recently and it gained a LOT of attention, so I thought I better do a video showing what this actually does. When your users get a new Windows Autopilot PC, their old computer will usually … Continue reading

Posted in 2103, AzureAD, BitLocker, BitLocker Management over CMG, httptrigger, sendgrid | Leave a comment

Use Windows Updates notifications instead of ConfigMgr client notifications in tp2105.2

Introduction Microsoft recently released TP2105.2 and I’ve been testing a new feature for the last week or so. That new feature is the ability to use built in Windows notifications instead of the usual ConfigMgr client agent notifications when Windows … Continue reading

Posted in 2105.2 | Leave a comment

Cloud attach – Endpoint Managers silver lining – part 7 co-managing Azure AD devices

Introduction This is part 7 in a series of guides about cloud attach in Microsoft Endpoint Manager, with the aim of getting you up and running with all things cloud attach. This part will focus on enabling the compliance policies … Continue reading

Posted in Cloud Attach | Leave a comment

How to change the CMG (VMSS) size after it is deployed

Introduction Microsoft released Technical Preview 2105 last week and with it came some CMG changes, one of which is the ability to decide the size of the CMG VM while creating the CMG. I covered that process in this blog … Continue reading

Posted in cmg, VirtualMachineScaleSet | Leave a comment

Creating a VMSS CMG and setting VM size with Technical Preview 2105

Introduction Microsoft released Technical Preview 2105 last week and it had a bunch of updates, one of which is related to being able to select the size of your CMG virtual machine in Azure as long as it’s configured to … Continue reading

Posted in 2105, cmg, VirtualMachineScaleSet | 2 Comments

Technical preview 2104 get BitLocker recovery keys for a tenant-attached device

Microsoft have released Technical Preview 2104 and with it comes a new BitLocker Management feature. You can now get BitLocker recovery keys for a tenant-attached device from the Microsoft Endpoint Manager admin center. For example, a help desk technician who doesn’t have … Continue reading

Posted in 2104, BitLocker recovery via tenant attach | Leave a comment

Cloud attach – Endpoint Managers silver lining – part 6 Enabling conditional access

Introduction This is part 6 in a series of guides about cloud attach in Microsoft Endpoint Manager, with the aim of getting you up and running with all things cloud attach. This part will focus on enabling the compliance policies … Continue reading

Posted in Cloud Attach, Compliance, Conditional Access | Leave a comment

Prepare for HTTP-only client communication depreciation in ConfigMgr

Introduction Microsoft recently announced that HTTP only communication will be dropped from ConfigMgr in October 2022 here. The advice is to enable a more secure communication method for the site either by enabling HTTPS or Enhanced HTTP. Learn about HTTPS … Continue reading

Posted in e-http, enhanced HTTP, https, PKI | Leave a comment

Cloud attach – Endpoint Managers silver lining – part 5 Enabling compliance policies workload

Introduction This is part 5 in a series of guides about cloud attach in Microsoft Endpoint Manager, with the aim of getting you up and running with all things cloud attach. This part will focus on enabling the compliance policies … Continue reading

Posted in 2010, Cloud Attach | Leave a comment

Improvements to BitLocker support via cloud management gateway

Introduction Microsoft released Technical Preview 2102 and it’s got a bunch of new updates as usual, including some updates for BitLocker Management via the cloud management gateway. To get some ideas about how BitLocker Management via a CMG works please … Continue reading

Posted in BitLocker Management, CMG, TP2102 | 6 Comments

Cloud attach – Endpoint Managers silver lining – part 4 Enabling co-management

Introduction This is part 4 in a series of guides about cloud attach in Microsoft Endpoint Manager, with the aim of getting you up and running with all things cloud attach. This part will focus on enabling co-management. This series … Continue reading

Posted in 2010, Cloud Attach | Leave a comment