Category Archives: System Center Configuration Manager (Current Branch)

Video: deploy an OS via CMG using bootable media

Posted on December 10, 2020 by ncbrady

Introduction I wrote a fairly long blog post explaining how to achieve OSD via CMG using bootable media here. That should outline all the steps needed to get you going. If however you want to see a closer look at … Continue reading →

Posted in osd via cmg boot media | Leave a comment

Deploy an OS over CMG using bootable media

Posted on December 10, 2020 by ncbrady

Introduction Microsoft released update 2010 on December 1st and one of the many new features was the ability to deploy an OS over CMG using bootable media. I tested out this ability when it first arrived in aTechnical Preview release … Continue reading →

Posted in 2010, osd via cmg boot media | 1 Comment

Improvements to BitLocker management in Endpoint Manager update 2010

Posted on December 3, 2020 by ncbrady

Introduction Microsoft released Endpoint Manager Configuration Manager update 2010 this week and it’s available now to install in production using the fast ring method. This release includes many very cool cloud friendly features that were recently show cased in the … Continue reading →

Posted in 2010, BitLocker Management over CMG | 1 Comment

What to do when Endpoint Manager upgrades don’t go as planned. Hint: logs

Posted on November 29, 2020 by ncbrady

Introduction Anyone that spends time with ConfigMgr knows that it’s an amazingly resilient product, and not only that, upgrades tend to go without a hitch. I needed to upgrade one of my old labs to test new functionality, but when … Continue reading →

Posted in 1910, 2006, detach database, SQL Server 2017 | Leave a comment

Troubleshooting BitLocker Management in ConfigMgr – Part 2. Client side

Posted on October 31, 2020 by ncbrady

Introduction Microsoft blogged about Bitlocker Management capabilities back in May, 2019. They detailed how that would impact and evolve on the following three platforms.     Cloud-based BitLocker management using Microsoft Intune     On-premises BitLocker management using System Center Configuration Manager … Continue reading →

Posted in 2006, 20H2, BitLocker Management | 2 Comments

What’s new in Microsoft Endpoint Manager – part 1

Posted on September 23, 2020 by ncbrady

Introduction These are my notes from a session shown today @ Microsoft Ignite 2020, the session was hosted by Steve Dispensa (Director of Program Management at Microsoft Endpoint Manager) and Ramya Chitrakar (Director of Engineering at Microsoft Endpoint Manager). For … Continue reading →

Posted in Cloud Management, Microsoft Tunnel, tenant attach | Leave a comment

Troubleshooting BitLocker Management in ConfigMgr – Part 1. Server side

Posted on September 15, 2020 by ncbrady

Introduction Microsoft blogged about Bitlocker Management capabilities back in May, 2019. They detailed how that would impact and evolve on the following three platforms.     Cloud-based BitLocker management using Microsoft Intune     On-premises BitLocker management using System Center Configuration Manager … Continue reading →

Posted in 1910, 2002, BitLocker Management, MBAM, pki, System Center Configuration Manager (Current Branch) | Leave a comment

Fixing an evaluation version of SSRS with “HTTP Error 503. The Service is unavailable”

Posted on September 15, 2020 by ncbrady

Introduction I was writing a blog post about Troubleshooting BitLocker Management in ConfigMgr 2002 Current Branch and one of the things I was trying to do was install the web portals, but I was seeing errors shown below. Get-ReportServiceUri : … Continue reading →

Posted in 2002, BitLocker Management, Reporting | Leave a comment

How can we utilize the Bitlocker Management feature during OSD with Endpoint Manager

Posted on August 29, 2020 by ncbrady

Introduction I’ve had a lot of questions recently about people wanting to use the new BitLocker Management capabilities in Configuration Manager, and to make use of those abilities during OSD (Operating System Deployment). First things we need to keep in … Continue reading →

Posted in 1910, 2002, 2006, BitLocker Management, Full Disk Encryption, MBAM, pki | Leave a comment

How can I replace an expired IIS certificate in a PKI enabled ConfigMgr environment

Posted on August 16, 2020 by ncbrady

Introduction I was busy putting together another BitLocker Management OSD related blog post in one of my PKI enabled ConfigMgr labs (#11) when I noticed that PXE boot no longer worked. The virtual machine would attempt to PXE boot for … Continue reading →

Posted in 2002, BitLocker, expired IIS cert, PKI, smspxe.log | 3 Comments

Triggering Evaluation of SMS_DesiredConfiguration Instances on a Client Using Powershell

Posted on June 28, 2020 by ncbrady

Introduction It has always been possible to trigger evaluation of an SMS_DesiredConfiguration instance using the TriggerEvaluation method on the SMS_DesiredConfiguration. Here’s an example of that from fellow MVP Timmy. The only information needed to trigger the instance evaluation was the … Continue reading →

Posted in BitLocker Management, SMS_DesiredConfiguration, Trigger Evaluation | Leave a comment

Enabling the new Tenant Attach feature in Configuration Manager

Posted on March 5, 2020 by ncbrady

Introduction Microsoft are constantly innovating and adding new features to already amazing products, one such recent addition is a cloud feature called Tenant Attach for Microsoft Endpoint Manager and you can start testing it right now in Configuration Manager Technical … Continue reading →

Posted in 2002, 2002.2, Intune, tenant attach | 2 Comments

Full disk encryption (in ConfigMgr 1910) – a closer look using real hardware

Posted on February 25, 2020 by ncbrady

Introduction In an earlier post I showed you how you can enable Full Disk Encryption via a task sequence in Microsoft Endpoint Manager Configuration Manager version 1910. The screenshots in that blog post were taken from virtual machines, and I … Continue reading →

Posted in 1910, BitLocker, Full Disk Encryption | 6 Comments

Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 9 Group Policy

Posted on February 13, 2020 by ncbrady

Introduction In this video (scroll down to the bottom of this post) I show you how you can obtain the MDOP ADMX templates for use within Active Directory Group Policy. I show you where to download the MDOP templates from, … Continue reading →

Posted in 1910, ADMX, ADMX Templates, MBAM | Leave a comment

Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 8 Migration

Posted on January 19, 2020 by ncbrady

Introduction In this video (linked at the bottom of this post) I show you how you can migrate existing MBAM managed clients to Configuration Manager using the new BitLocker Management feature that was released in Microsoft Endpoint Configuration Manager version … Continue reading →

Posted in 1910, MBAM, Migration | 6 Comments