• Home
  • Azure
Damian leggett
  • Home
  • Azure

ConfigMgr - Windows 10
​

Windows 7 end of life message

3/15/2019

Comments

 

Starting next month, Windows 7 will start showing a reminder that security updates will cease to be rolled out to their device.

"You can continue to use Windows 7, but once support ends, your PC will become more vulnerable to security risks. Windows will operate but you will stop receiving security and feature updates."

If you use the Professional or Enterprise version of Windows 7 you can pay for fixes through Microsoft's Extended Security Update (ESU) scheme.

For users of Windows 7 Professional and Windows 7 Enterprise, you can purchase Extended Security Updates through January 2023. For an in-depth FAQ about Windows 7 Extended Security Updates, please download the Microsoft End of Support FAQ.

Life Cycle Fact Sheet for the Operating system


Comments

Upgrade to Windows 10 - 1803

5/5/2018

Comments

 

Windows 10 - 1803 is now available - Link
Are you running Windows 10 already and would like to upgrade to 1803, try these tools from Microsoft - Link
Click on the Update Now button and follow the instructions, the Window 10 Update assistant will step you through the process to get to Windows 10 version 1803
​

Picture

For the IT Pro's out there. more details on version 1803 - Link

Comments

1802 for ConfigMgr now available

10/3/2017

Comments

 

Posted on March the 22nd on Microsoft's website 1802 for ConfigMgr is now available. Link
Here are some of the enhancements that are available in this update:
Modern Management
Endpoint Protection workload transition in co-management – You can now transition the Endpoint Protection workload from Configuration Manager to Intune when co-management is enabled.
Co-management reporting – You can now view a dashboard with information about co-management in your environment.
Management insights – Gain valuable insights into the current state of your environment based on analysis of data in the site database.
Microsoft 365 Adoption
Phased deployments – Phased deployments automate a coordinated, sequenced rollout of software without creating multiple deployments.
Windows AutoPilot Device Information report – You can now use this new report to collect device information that’s needed to create a Windows AutoPilot deployment profile.
Support for Windows 10 ARM64 devices – Starting with this release, the Configuration Manager client is supported on Windows 10 ARM64 devices.
Surface Device Dashboard – You can now use the Surface Device Dashboard to view information about the model and firmware version of your Surface.
Microsoft Edge browser policies – You can now set Microsoft Edge browser policies and control it in your enterprise.
Report to show default browser for client machines – You can now run a report that shows the default browser for client machines.
Windows 10 Servicing for a specific collection report – This report displays general information about the Windows 10 servicing in the organization (a request from UserVoice, thanks!).
Improvements to Office 365 client management dashboard – The Office 365 client management dashboard now displays a list of relevant devices when graph sections are selected.
Improvements for Windows Defender Exploit Guard – Additional policy settings for the Attack Surface Reduction and Controlled folder access components have been added for Windows Defender Exploit Guard in Configuration Manager.
New settings for Windows Defender Application Guard – For Windows 10 version 1709 and later devices, there are two new host interaction settings for Windows Defender Application Guard. Websites can be given access to the host’s virtual graphics processor and files downloaded inside the container can be persisted on the host.
Streamlined Infrastructure
Configure Windows 10 Delivery Optimization to use Configuration Manager boundary groups – You can now configure Delivery Optimization to leverage your boundary groups when sharing content among peers.
Add management points to your boundary group fallback relationships – When a fallback relationship is defined, and a client fails to talk to the management point in current boundary group, it will fall back to the management point defined in the fallback boundary group.
Moving Distribution Points between sites – You can now move an eligible distribution point from one primary site to another primary site or from under a secondary site to a primary site.
Improvements in Cloud Management Gateway
Cloud management gateway support for Azure Resource Manager – When you deploy CMG with Azure Resource Manager, Azure AD is used to authenticate and create the cloud resources and does not require the classic Azure management certificate.
Install user-available applications on Azure AD-joined devices – You can now browse and install user-available applications from Software Center on Azure AD-joined devices.
Windows 10 in-place upgrade task sequence over the Internet – A Windows 10 in-place upgrade task sequence now works for clients via the Cloud Management Gateway and Cloud Distribution Point.
Improvements in Software Center
Approve application requests for users per device – User-based application requests are now approved only for the device from where the user submitted the request.
Improvements to client settings for Software Center – Client settings for Software Center now has a customize button where you can preview your customizations before deploying them to machines. You can also hide unapproved applications in Software Center.
Improvements in OSD
Improvements to Windows 10 in-place upgrade task sequence – The default task sequence template for Windows 10 in-place upgrade now includes additional groups with recommended actions to add before and after the upgrade process.
Deployment Template for Task Sequences – Using the Deployment wizard for Task Sequence you can now create a Deployment Template which can be saved and applied to an existing or new Task Sequence to create a TS deployment.
Miscellaneous Improvements
Run scripts – Create and run signed or unsigned scripts and with structured JSON formatted output.
Support for hardware inventory strings greater than 255 characters in length – For newly added classes, you can specify string lengths greater than 255 characters for hardware inventory properties that are not keys.
This release also includes the following improvements based on your feedback
Do not automatically upgrade superseded applications – In this release, you now have the option to configure an application deployment to not automatically upgrade any superseded version
Allow user interaction when installing applications as system – Now users can interact with an application installation user interface in system context even during a task sequence.
Install multiple applications in Software Center – Click the multi-select icon on the Applications tab in Software Center. In this mode, select multiple applications and then install all together using the Install Selected button.
Renamed collections display in existing collection membership rules – When a collection is a member of another collection and it is renamed, the new name is updated under membership rules.
Improvements to Automatic Deployment Rule evaluation schedule – You can now schedule Automatic Deployment Rule evaluation to be offset from a base day.
Hide Installed Applications in Software Center – When this option is enabled under Software Center customization, installed applications will be hidden in the Applications tab.
For more details and to view the full list of new features in this update, check out our What’s new in version 1802 of System Center Configuration Manager documentation.

Updated 4/12/2018 Note: The update is now globally available to all customers. The script to enable the first wave is no longer necessary.

For assistance with the upgrade process please post your questions in the Site and Client Deployment forum. Send us your Configuration Manager feedback through the Feedback Hub app built-in to Windows 10. When you Add new feedback be sure to select the Enterprise Management category and then choose from one of the following subcategories:

  

Comments

Protect yourself against WannaCrypt Ransomware Attacks

5/15/2017

Comments

 

With the recent ransom attacks going on please ensure you anti-virus and malware scanner are up-to-date.
Below is some information from Microsoft to help protect you against these attacks. There is a free scanner as well you can download and run. This free scanner expires after 10 days, please download it again to receive updated protection.
​Malware Detection
Windows Defender, System Center Endpoint Protection, and Forefront Endpoint Protection detect this threat family as Ransom:Win32/WannaCrypt.
 In addition, the free Microsoft Safety Scanner http://www.microsoft.com/security/scanner/ is designed to detect this threat as well as many others.
Useful information - https://docs.microsoft.com/en-us/msrc/customer-guidance-for-wannacrypt-attacks
Update 28/06/2017 - In light of the latest attacks called "Petya Ransonware" ensure your anti-virus is up-to-date. Windows Defender should be the following
Malware Detection
Ensure you have a definition version equal to or later than:
• Threat definition version: 1.247.197.0
• Version created on: 12:04:25 PM : Tuesday, June 27 2017
• Last Update: 12:04:25 PM : Tuesday, June 27 2017

Comments

Windows 10 version 1709

4/20/2017

Comments

 

This post will cover topics on Windows 10 and how to build a Windows 10 image via System Center Configuration Manager 2012 (SCCM, also known as ConfigMgr).
By now you probably have seen that Windows 10 RS3 released yesterday 10/17/2017.  Its available via MSDN, MVLS and any other channels you may use.
Additionally you might find the following links useful if you are planning on creating a reference image, doing OS Deployment or simply managing the latest Windows 10 release in your environment.
Windows 10 RS3:
Download via MSDN or MVLS
Windows 10 RS3 ADK:
https://developer.microsoft.com/en-us/windows/hardware/windows-assessment-deployment-kit
Windows 10 RS3 Administrative Templates:
https://www.microsoft.com/en-gb/download/details.aspx?id=56121
Windows 10 RS3 Security Baseline:
https://blogs.technet.microsoft.com/secguide/2017/10/18/security-baseline-for-windows-10-fall-creators-update-v1709-final/
Windows 10 RS3 Language Packs:
https://blogs.technet.microsoft.com/mniehaus/2017/04/26/finding-windows-10-language-packs/
Windows 10 RS3 RSAT:
https://www.microsoft.com/en-us/download/details.aspx?id=45520
As additional items become available ill continue to update this post with more resources.  A couple of items to consider if you are a ConfigMgr customer.  ConfigMgr 1706 supports Deployment and Management of Windows 10 RS3 currently.  At the moment i do not believe we have “support” for Windows 10 ADK 1709 so i would wait for an official stance on this before implementing in your environment.  I would suspect that this would come with the next release of ConfigMgr if not sooner but proceed with caution before upgrading to this release of the ADK until you get confirmation that it is officially support and with what release its supported on.

Comments

Microsoft's ConfigMgr 2012 Troubleshooting - Log Files

3/8/2017

Comments

 
In my time dealing with SCCM or as it is also known as ConfigMgr, it is a very good tools to maintain, update and monitor an environment. Features that is comes with are Software Updates, Application management, Operating System (OS) deployments and a whole host of other features.


The point of this blog is to help troubleshoot issues, this is an open blog so feel free to point out other options or mistakes from myself.  I am not saying I am master of SCCM in any way shape or form. SCCM is a beast of a system, and as always there are many ways to troubleshoots and fix issues. If there is a better way to troubleshoot an issue let us know.

Let's start with log files.

Log Files 
Log files in ConfigMgr 2012 is a mine field. From Site System Server to  Site Server to Client side log files are everywhere. Hope the following information will help out in what direction to start troubleshooting.
Of course you will need to know how to read the log files. Notepad is most people's default, but the issue with Notepad is the log files are not well formatted in it. Plus that when you want to read the log file when it is being generated and try and find an issue. Notepad does not auto update, so when you load a log file that is being generated any new event(s) that get added to the log file will not show up. 
So I use CMTrace, this can be found from here

The link takes you to Microsoft's download center for System Center 2012 R2 Configuration Manager Toolkit. This  Toolkit, has 15 very useful tools to help you manage and troubleshoot SCCM 2012.
  
As always Microsoft's TechNet website is a good place to start.

Technical Reference Article - https://technet.microsoft.com/en-us/library/hh427342.aspx

Client Logs - https://technet.microsoft.com/en-us/library/hh427342.aspx#BKMK_ClientLogs

Site Server Logs - https://technet.microsoft.com/en-us/library/hh427342.aspx#BKMK_ServerLogs

ConfigMgr Functionality Logs - https://technet.microsoft.com/en-us/library/hh427342.aspx#BKMK_FunctionLogs

For clients log files are located at '%SystemRoot%\CCM\Logs'. %SystemRoot% is a variable that will point to the location where your Windows OS is installed. In most cases it will be 'C:\Windows'.

When installing the SCCM Client the log files are located at 'C:\Windows\CCMSetup'.

For Servers the log files will be located in the installation directory of SCCM. So we will be looking in 'C:\Program Files\Microsoft Configuration Manager\Logs'

Client Logs on a Site System are located at 'C:\Program Files\SMS_CCM\Logs' Setup logs are in 'C:\Windows\CCMSetup'

Here is a spreadsheet with the paths, information is taken from Microsoft's website. Link
Comments

    Author

    Hi there, I am  Damian and I live in Wellington, New Zealand. 
    ​Love Technology and sports

    Archives

    March 2019
    May 2018
    October 2017
    May 2017
    April 2017
    March 2017

    Categories

    All
    ConfigMgr
    Ransomware
    SCCM
    WannaCrypt
    Windows

    RSS Feed

    View my profile on LinkedIn
Powered by Create your own unique website with customizable templates.
  • Home
  • Azure