Use the Task Sequence deployment type to deploy an application with sensitive information

Michael De BonaMECM/MEMCM/SCCM, Task SequenceLeave a Comment

Introduction Introduced with ConfigMgr 2002, the “Task Sequence as an application deployment type” feature is available in pre-release. That means it is still in active development and can contains bugs. Using a Task Sequence (TS) as a deployment type allows for more complex installation process that can even contains reboot. And as it is a Task Sequence, you can also … Read More

Signing and Deploying Applications via MSIX with Intune

Jake ShackelfordEndpoint ManagementLeave a Comment

Why would I want to use MSIX and what is it? MSIX is a Windows app package format that provides a modern packaging experience to all Windows apps. The MSIX package format preserves the functionality of existing app packages and/or install files in addition to enabling new, modern packaging and deployment features to Win32, WPF, and Windows Forms apps. Do … Read More

VPN Boundary Type and Understanding Its Options

Nic WendlowskyEndpoint ManagementLeave a Comment

BG

Like many, I was very excited that the new Configuration Manager 2006 release included a huge improvement for remote devices by adding a new VPN Boundary type.“Finally! I don’t have to constantly bug my Network Engineers as to which IP pools are being used for which VPN appliances.” Create A New Boundary In the Admin Console, navigate to the Administration … Read More

Allow OneDrive Syncing on AAD joined Devices

Jóhannes Geir KristjánssonEndpoint ManagementLeave a Comment

The Problem So I was walking on the beach and noticed that OneDrive wasn’t syncing anymore on my AzureAD joined laptop. I later learned that my endpoint administrator, Adam Gross, had enabled Allow syncing only on computers joined to specific domains in the OneDrive admin portal. which effectively blocked my AzureAD device 🙁 Which resulted in this message on my … Read More

Manage Distribution Point Content Using PSCMContentMgmt

Adam CookEndpoint Management, MECM/MEMCM/SCCM, Powershell, ScriptingLeave a Comment

Introduction I recently wrote PSCMContentMgmt which provides a simple and effective workflow for managing your MEMCM distribution points. Here are some of the things you can do with it: Query content objects which are distributed to distribution point(s) or distribution point group(s) Compare content objects distributed to distribution point(s) or distribution point group(s) Find content objects in a “distribution failed” … Read More

Getting Reboot History and optimizing legacy functions

Nic WendlowskyEndpoint ManagementLeave a Comment

The other day, I logged on to a jump server and, while investigating an unrelated issue, I noticed the BG Info background showed the Last Reboot as March 1st, 2020. “That can’t be right,” I thought. “We have weekly maintenance windows to reboot these servers.” As I opened an old stand-by function from my stash (originally posted here: https://gallery.technet.microsoft.com/scriptcenter/Get-RebootHistory-bc804819 in … Read More

Enrolling and Autopiloting New and Pre-existing Devices into Intune with ConfigMgr – EDU

Andrew ArsenaultEndpoint Management2 Comments

Months after we issued students and faculty 600+ unmanaged off the shelf laptops (no AD, no Azure AD, no Intune, no ConfigMgr) to get them off and running temporarily during this pandemic, my co-worker and I were tasked with figuring out how to bring these machines under some form of management. We did not have these machines in ConfigMgr or … Read More

Bulk Updating Autopilot enrolled devices with Graph API and assigning a Group Tag based on Purchase OrderID

Jake ShackelfordEndpoint Management, Graph, Intune, Powershell, ScriptingLeave a Comment

The Problem For any new machines ordered from a vendor such as Dell that get enrolled into Autopilot you get the basic device info enrolled but nothing defining that would let it get auto-enrolled into a dynamic group easily. Purchase Order ID is included in every order we receive from Dell however I don’t want to have to add that … Read More

Setting ACL using Intune Endpoint Analytics Proactive Remediations

Jóhannes Geir KristjánssonEndpoint Management, How-To, Intune, MECM/MEMCM/SCCM, Microsoft, Powershell, Scripting, WindowsLeave a Comment

Namaste y’all! In todays Siri dictated blog post, I will show you how you can configure access control lists (ACL) for a directory using Intune Proactive remediations. The issue I was facing was that regular users do not have modify permissions to the public desktop on their corporate devices, meaning that the user is unable to remove annoying shortcuts that … Read More

Dynamic Outlook Email Signature Using with Intune Endpoint Analytics Proactive Remediations

Jóhannes Geir KristjánssonAzure, Documentation, Endpoint Management, How-To, Intune, MECM/MEMCM/SCCM, Microsoft, Office, Powershell, WindowsLeave a Comment

Howdy y’all! Since you have already read señor Shackelfords blog post on setting up Endpoint Analytics Proactive remediations, we can skip the intro and dive right in. In this blog post we will be get familiar with a somewhat novel idea that proactive remediation’s can be used for. Which, as the title of this post suggests, is the creation of … Read More