Category Archives: SCCM

System Center Configuration Manager

Why can’t I RDP to my CMG ?

Posted on May 21, 2020 by ncbrady

Introduction The Cloud Management Gateway provides a simple way to manage ConfigMgr clients on the internet. And once you’ve set it up, you’ll probably want to get a closer look, and look at logs on the virtual machine in Azure. … Continue reading →

Posted in CMG | Leave a comment

Microsoft Endpoint Manager Technical Preview 2004 is out

Posted on May 2, 2020 by ncbrady

Introduction It’s been a while since I blogged something but that’s because I’ve been busy (with another MVP, namely Paul) testing out CoMangement and Conditional Access, next up for our labs is CMG. Anyway, while cleaning up my labs I … Continue reading →

Microsoft Endpoint Manager TP 2003 is out

Posted on March 31, 2020 by ncbrady

Introduction Microsoft has just released Technical Preview 2003 which is no small feat considering everyone is on lockdown worldwide. For a full list of features of what’s new see the docs here.

Posted in 2003 | Leave a comment

Using device sync and device actions in Microsoft Endpoint Manager Admin Center

Posted on March 5, 2020 by ncbrady

Introduction Note: I’ve updated this post with new info relating to Configuration Manager Technical Preview 2004. Microsoft has been hard at work making client management even more cloud friendly, now you can do device sync and device actions from within … Continue reading →

Posted in 2002.2, 2004, Cloud Management | 9 Comments

Enabling the new Tenant Attach feature in Configuration Manager

Posted on March 5, 2020 by ncbrady

Introduction Microsoft are constantly innovating and adding new features to already amazing products, one such recent addition is a cloud feature called Tenant Attach for Microsoft Endpoint Manager and you can start testing it right now in Configuration Manager Technical … Continue reading →

Posted in 2002, 2002.2, Intune, tenant attach | 2 Comments

Microsoft Endpoint Manager Configuration Manager Technical Preview 2002.2 is out

Posted on March 1, 2020 by ncbrady

Introduction Microsoft have released the second update to Technical Preview this month, namely 2002.2. Below is a list of all the new features in this release. Management insight rules for proper HTTPS configuration This release includes additional management insight rules … Continue reading →

Posted in 2002.2 | 1 Comment

Full disk encryption (in ConfigMgr 1910) – a closer look using real hardware

Posted on February 25, 2020 by ncbrady

Introduction In an earlier post I showed you how you can enable Full Disk Encryption via a task sequence in Microsoft Endpoint Manager Configuration Manager version 1910. The screenshots in that blog post were taken from virtual machines, and I … Continue reading →

Posted in 1910, BitLocker, Full Disk Encryption | 6 Comments

New BitLocker Management features in Microsoft Endpoint Manager Configuration Manager Technical Preview 2002

Posted on February 14, 2020 by ncbrady

If you upgrade to the latest technical preview release of Configuration Manager 2002, you’ll see some new Bitlocker Management features are revealed in the console. When you create a new Bitlocker Management policy, the first obvious change is shown below. … Continue reading →

Posted in 2002, bitlocker management, System Center Configuration Manager Technical Preview | Leave a comment

Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 9 Group Policy

Posted on February 13, 2020 by ncbrady

Introduction In this video (scroll down to the bottom of this post) I show you how you can obtain the MDOP ADMX templates for use within Active Directory Group Policy. I show you where to download the MDOP templates from, … Continue reading →

Posted in 1910, ADMX, ADMX Templates, MBAM | Leave a comment

How can I use the new Log Groups functionality in OneTrace ?

Posted on January 22, 2020 by ncbrady

Introduction Microsoft has released yet another Microsoft Endpoint Manager Configuration Manager release, this time Technical Preview 2001. It has a long list of features which you can read about here. One of the new features in the ability to group … Continue reading →

Posted in 2001, OneTrace LogGroup | 1 Comment

Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 8 Migration

Posted on January 19, 2020 by ncbrady

Introduction In this video (linked at the bottom of this post) I show you how you can migrate existing MBAM managed clients to Configuration Manager using the new BitLocker Management feature that was released in Microsoft Endpoint Configuration Manager version … Continue reading →

Posted in 1910, MBAM, Migration | 6 Comments

Enabling Full Disk Encryption in Microsoft Endpoint Configuration Manager 1910 in a task sequence

Posted on January 18, 2020 by ncbrady

Introduction Microsoft Endpoint Configuration Manager 1910 came with BitLocker management capabilities (MBAM features), and this fits together nicely with task sequence steps regarding BitLocker. The option to enable Full Disk Encryption actually started with Configuration Manager 1806 but MBAM integration … Continue reading →

Posted in 1910, BitLocker, Full Disk Encryption | 12 Comments

Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 7 Reporting and compliance

Posted on January 8, 2020 by ncbrady

Introduction In this video I show you how you use the built in reports from the BitLocker Management feature that was released in Microsoft Endpoint Configuration Manager version 1910. I explain what each of the 5 built in reports offer … Continue reading →

Posted in 1910, MBAM, Reporting | Leave a comment

Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 6 forcing decryption

Posted on December 25, 2019 by ncbrady

Introduction In this video I show you how you can enforce decryption of BitLocker encrypted drives in Microsoft Endpoint Configuration Manager version 1910. It involves the use of a custom Configuration Baseline with a Configuration Item to set a registry … Continue reading →

Posted in 1910, MBAM | Leave a comment

Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 5 key rotation

Posted on December 17, 2019 by ncbrady

Introduction In this video I show you how key rotation works when a key has been revealed via the helpdesk using Bitlocker Management integrated as a feature in Microsoft Endpoint Configuration Manager version 1910. To see a list of all … Continue reading →

Posted in 1910, key rotation, MBAM | Leave a comment