This blog post will cover all the task needed to deploy the new SCCM Windows 10 20H2 Upgrade. We will cover scenarios for new and existing computers that you may want to upgrade. Microsoft published the Windows 10 20H2 feature update on VLSC on October 20th. This is the first Windows 10 feature update following the new naming convention. From now on, the new Windows 10 release will be called “Windows 10 version 20H2” (instead of “Windows 10 version 2004”). If you haven’t planned your Windows 7 migration to Windows 10, this post will help prepare your SCCM Server to … Read More
Deploy Win32 Apps with Endpoint Manager (Intune)
In September 2019, Microsoft announced that Intune was finally able to distribute Win32 applications. This was a major show stopper to go full MDM for Windows 10 devices for many companies and would keep using SCCM/MEMCM to fulfill this duty. In this post, we will detail how to deploy Win32 Apps with Endpoint Manager. We’ll deploy Google Chrome with the MSI installer as an example. Win32 Apps Endpoint Manager Prerequisites Download the Microsoft Win32 Content Prep Tool from GitHub Prepare Endpoint Manager Win32 application First, you need to “wrap” all the required files into an Endpoint Manager (Intune) format. To … Read More
List of SCCM Must-Have Tools and blog – 2020 Edition
Based on the popularity of my previous post published in 2018 and 2019, I decided to do a 2020 refresh of the SCCM Must have 2020 Tools and blog list since there’s always new stuff coming out. I also added must-have blog posts that you should have already read. The tools are listed in no particular order. The list could have been longer but I needed to choose from my top personal list. If you feel that I’ve forgotten your awesome contribution to the SCCM community, please use the comment section to promote it. SCCM MUST HAVE 2020 TOOLS and … Read More
Deploy Yammer desktop application using Microsoft Endpoint Manager
Yammer is an enterprise social networking service used for private communication within organizations. Yammer helps you to connect and engage users across your organization, thereby you can discuss ideas, share updates, and network with others around the globe. To access Yammer, you can either use a web browser or desktop client application. I like the browser app on windows device but individual choice In this blog post, we will see how to deploy using Endpoint Manager the Yammer App desktop client using Microsoft Endpoint Manager (Intune). Yammer desktop app is available in both exe and MSI file (machine wide installer). … Read More
Manage Android devices without GMS using Microsoft Endpoint Manager
I was recently helping out a customer who wanted to manage Android mobile devices using Endpoint Manager for users in China. What is different from managing Android mobile devices for users in China and out of China? There is a significant difference and it is due to the services available on an Android mobile device that is required for managing the devices using Microsoft Intune. Microsoft Endpoint Manager provides 2 ways of protecting the mobile devices which are MAM-WE (Application management without enrollment) and Device enrollment (MDM). Following are some of the major differences between MDM vs MAM (app protection … Read More
Create an SCCM VPN Boundary Type to manage your remote clients
Beginning with SCCM 2006, you can now create a new boundary type. The SCCM VPN Boundary type helps to manage your remote clients. An upgraded SCCM client now sends a location request which includes information about its network configuration. Your management point can determine if the client is on a VPN connection based on this new information. You may want to use the SCCM VPN Boundary to set some options to differ when your clients are on a VPN connection. For example, redirect your VPN client on different site servers, disable Peer download or prefer cloud-based sources. If you’re not … Read More
Create an Intune Device Profile for User Login Restriction
I was asked to restrict domain user access on a Windows 10 device managed by Intune. The computer was configured as a Single-App Kiosk mode so we needed to prevent a user to use CTRL-ALT-DEL and log on the computer using his domain credentials. After searching through the Intune Device restrictions available for Windows 10, I couldn’t find any UI settings for that. I had to use a Custom Profile type for that. (Custom Profiles are also called OMA-URI Settings) This blog post will describe how to Create an Intune Device Profile Restriction User Login to restrict login rights This … Read More
Monitor Desktop Analytics Health using SCCM Report
Desktop Analytics is a cloud-based service that integrates with Configuration Manager. Desktop Analytics is now available and replaces Windows Analytics, which retired on January 31, 2020. When you integrate Desktop Analytics with Configuration Manager, it provides insight and intelligence for you to make more informed decisions about the update readiness of your Windows clients. It combines data from your organization with data aggregated from millions of devices connected to Microsoft cloud services. Following are the benefits of Desktop Analytics: Device and software inventory: Inventory of apps and Windows version. Pilot identification: Identify your group pilot for a test deployment before … Read More
How to resolve SCCM CMG Policy Violation Error
Cloud management gateway (CMG) is a new chapter in Microsoft Endpoint Manager Configuration Manager (MEMCM). It is getting improved better and better in each version that gets released. If you look at the technical preview build that was released recently (version 2009), it has a remote control feature for CMG connected devices which is very much needed to support the internet-connected devices and there are many other good features in the technical preview build that might ship in the next production build. But that’s a whole other topic. In this blog post, I will describe the SCCM CMG Policy Violation … Read More
Setup Microsoft Intune and manage it in Endpoint Manager
In this post, we’ll guide you through the process to setup Microsoft Intune and then using it thought the new Endpoint Manager Portal. But first, let’s start this post by clarifying the various services we’ll talk about in our post. Microsoft Azure is a set of cloud services to help your organization meet your business challenges. This is where you build, manage, and deploy applications on a massive, global network using your favourite tools and frameworks. Microsoft Intune was and is still one of Azure services to manage your devices. The “old” Intune Portal you were accessing in Azure has … Read More