Use SCCM Status Message MessageID to Audit Administrator actions

Benoit LecoursSCCMLeave a Comment

As part of your job, you are using SCCM daily. You are probably part of a team that performs multiple tasks each day. Sometimes it may happen that someone creates, modify or delete a particular component in SCCM (Collection, Package, Application…). You may want to monitor and audit SCCM changes to verify that there’s no error or maybe you just want to know who deleted a certain component. Error in the SCCM may happen and it’s important to know which Administrator made the error. This blog post will show how to use SCCM Status Message MessageID to identify who created, … Read More

Monitor SCCM Client Data Sources

Benoit LecoursSCCM1 Comment

In the latest SCCM version, SCCM clients can get their content from various new sources when you deploy software and software updates to your clients. Client can get their content from : Distribution points Cloud distribution point BranchCache Peer Cache Delivery Optimization (SCCM 1906+) Microsoft Update You’ve probably put much effort into configuring these different options. But how can you easily monitor SCCM Client Data Sources? How can you validate that your clients are really getting their content from where it should. There’s various way in SCCM to better understand where clients get content in your environment. This post will shows in … Read More

Popular SCCM Tips and Tricks

Benoit LecoursSCCMLeave a Comment

If you’re following the SCCM/MEMCM/Configmgr Twitter community, you often see tweets about SCCM Tips and Tricks. Those tweets get a lot of likes and retweets so I decided to compile a list of the most popular SCCM Tips and Trick tweets into a single post. Like our popular SCCM Must Have blog post, we are planning to release an updated version of SCCM Tips and Tricks on an annual basis. We hope that the second round of tips and tricks will hit Twitter soon. Thanks to all the author that took their time to share their tips. Some of these … Read More

Deploy Adobe Flash Player Update using SCCM/MEMCM or Microsoft Intune – KB4577586

Benoit LecoursSCCMLeave a Comment

On October 27th, 2020, Microsoft released an update to definitively remove Adobe Flash Player (KB4577586) from all Windows 8.1+ and Windows 10 1607+ Operating System. This important update is needed for Adobe Flash end of support on December 31, 2020. For now, the only way to deploy his Adobe Flash Player update to your devices is by using SCCM. The update has not been released to Windows Update yet. This means that if you want to use your SCCM Update Point to deploy it, you’ll have to manually import the update first and then create a software update synchronization. This … Read More

How to use Microsoft Endpoint Manager to enroll iOS devices

Benoit LecoursSCCMLeave a Comment

You may have read our article on how to Setup Microsoft Intune and manage it in Endpoint Manager. This blog post describes how to use Endpoint manager to enroll iOS devices. With the various OS: Android, Windows and iOS and specific scenarios with BYOD and corporate device, there are so many ways to enroll devices. We’ll show you one way to enroll a personal iOS device (BYOD) but you can refer to Microsoft Documentation which covers every possible scenario. Endpoint Manager Enroll iOS Requirements To enroll and manage iOS/MAC devices into Endpoint Manager, you first need to create an Apple MDM Push … Read More

Deploy Windows 10 20H2 using SCCM/MEMCM

Benoit LecoursSCCM7 Comments

This blog post will cover all the task needed to deploy the new SCCM Windows 10 20H2 Upgrade. We will cover scenarios for new and existing computers that you may want to upgrade. Microsoft published the Windows 10 20H2 feature update on VLSC on October 20th. This is the first Windows 10 feature update following the new naming convention. From now on, the new Windows 10 release will be called “Windows 10 version 20H2” (instead of “Windows 10 version 2004”). If you haven’t planned your Windows 7 migration to Windows 10, this post will help prepare your SCCM Server to … Read More

Deploy Win32 Apps with Endpoint Manager (Intune)

Benoit LecoursIntune5 Comments

In September 2019, Microsoft announced that Intune was finally able to distribute Win32 applications. This was a major show stopper to go full MDM for Windows 10 devices for many companies and would keep using SCCM/MEMCM to fulfill this duty. In this post, we will detail how to deploy Win32 Apps with Endpoint Manager. We’ll deploy Google Chrome with the MSI installer as an example. Win32 Apps Endpoint Manager Prerequisites Download the Microsoft Win32 Content Prep Tool from GitHub Prepare Endpoint Manager Win32 application First, you need to “wrap” all the required files into an Endpoint Manager (Intune) format. To … Read More

List of SCCM Must-Have Tools and blog – 2020 Edition

Benoit LecoursSCCMLeave a Comment

Based on the popularity of my previous post published in 2018 and 2019, I decided to do a 2020 refresh of the SCCM Must have 2020 Tools and blog list since there’s always new stuff coming out. I also added must-have blog posts that you should have already read. The tools are listed in no particular order. The list could have been longer but I needed to choose from my top personal list. If you feel that I’ve forgotten your awesome contribution to the SCCM community, please use the comment section to promote it. SCCM MUST HAVE 2020 TOOLS and … Read More

Create an SCCM VPN Boundary Type to manage your remote clients

Benoit LecoursSCCM3 Comments

Beginning with SCCM 2006, you can now create a new boundary type. The SCCM VPN Boundary type helps to manage your remote clients. An upgraded SCCM client now sends a location request which includes information about its network configuration. Your management point can determine if the client is on a VPN connection based on this new information. You may want to use the SCCM VPN Boundary to set some options to differ when your clients are on a VPN connection. For example, redirect your VPN client on different site servers, disable Peer download or prefer cloud-based sources. If you’re not … Read More

Create an Intune Device Profile for User Login Restriction

Benoit LecoursSCCM5 Comments

I was asked to restrict domain user access on a Windows 10 device managed by Intune. The computer was configured as a Single-App Kiosk mode so we needed to prevent a user to use CTRL-ALT-DEL and log on the computer using his domain credentials. After searching through the Intune Device restrictions available for Windows 10, I couldn’t find any UI settings for that. I had to use a Custom Profile type for that. (Custom Profiles are also called OMA-URI Settings) This blog post will describe how to Create an Intune Device Profile Restriction User Login to restrict login rights This … Read More