Useful SCCM CMTrace tips

Benoit LecoursSCCMLeave a Comment

If you’re new to the SCCM world, you have to know that SCCM comes with a log viewer. CMTrace is the tool you need to use to read any SCCM log files. We still meet lots of SCCM admins that don’t know some basic CMTrace features. We’ll show you a couple of SCCM CMTrace tips to improve your skills. In SCCM, client and site server components record process information in individual log files. You can use the information in these log files to help you troubleshoot issues that might occur. By default, SCCM enables logging for client and server components. For … Read More

Monitor SCCM Task Sequence Progress

Benoit LecoursSCCM, WINDOWS 104 Comments

When deploying Windows 10 operating system using SCCM (OSD), you will need to monitor SCCM task sequence progress. This allows us to track task sequence start, end time and most importantly errors (if any). Our post will show 4 different ways to monitor SCCM task sequences. Each of them has its own benefits and drawbacks. Monitor SCCM Task Sequence Using the Console You can view the progress of a task sequence using the SCCM console. This method is simple and easy but permit to see the status of only one machine at the time. If your deployment staff don’t have access … Read More

New Product – SCCM Migration to new operating system Guide

Jonathan LefebvreSCCM10 Comments

With the release rhythm of SCCM and latest requirements on the OS and SQL side, sometimes, it’s inevitable to migrate to a newer operating system to remain under support and also gain new features as part of the latest SCCM Current Branch release.This product is a complete SCCM Migration Guide. Over the years, we’ve done many migrations of all kinds, depending on the environment and needs. We created this complete SCCM Migration to new operating system guide based on our knowledge and experience. This guide is a refreshed version of our previous post about Side-by-Side Migration to new Hardware. It … Read More

SCCM Powershell Script to create Collections Folders

Jonathan LefebvrePowershell, SCCM2 Comments

Following the excellent PowerShell script that Benoit wrote to create operational collection, I decided to rethink it a bit to help classify collections and ease Role-based administration control implementation when a different group of users accesses SCCM. On top of that, the way folders for collections are designed, it helps implement a naming convention to keep things clear all across the SCCM console. This script works with any SCCM version. The overall idea is to keep collections on a per needs basis. Having a collection that receives client settings, 1-2 applications, OSD and Windows Updates can lead to unplanned/accidental deployment … Read More

How to install SCCM Client on Workgroup Computers

Jonathan LefebvreSCCM8 Comments

Recently, at a client site, I was asked to install the SCCM client to manage workgroup servers in the DMZ with SCCM. Following our a recent post on how to install a DP/MP/SUP in untrusted domain, I thought that documenting the process could be helpful. In this post, we will detail how to install the SCCM client on workgroup computers. Prerequisites The client must be able to resolve the FQDN of the management point. Depending on network security, it might not actually ping. The important is that it can associate the FQDN to the IP of the management point. Adding … Read More

Uninstall Windows Update using SCCM

Jonathan LefebvreSCCM, WINDOWS 1019 Comments

SCCM Uninstall Windows Update

With the recent problems caused by monthly Windows Update, knowing how to massively uninstall Windows Update with SCCM is a must! This action is not available by default in SCCM. There are 2 ways to uninstall a Windows Update. Both solutions require the command line utility WUSA.exe, that as been around since Windows Vista/Windows Server 2008 era. In this post, we will detail both solutions to uninstall a Windows Update with SCCM. If you are looking for how to manage Windows update with SCCM, see our SCCM Software Update Management Guide for complete instructions. Prerequisites SCCM any version Windows 7 … Read More

List of SCCM Endpoint Protection Agent Versions

Jonathan LefebvreSCCM, SCEP5 Comments

We have compiled a list of SCCM Endpoint Protection agent versions, build numbers and cumulative updates. Anti-Malware platform updates are cumulative, meaning that the latest one includes the previous one. If you are new to System Center Endpoint Protection, see our complete guide which covers it all. We documented a few years back… since the SCCM 2012 RTM release. If we missed some versions, please let us know and we will update this post. This post will be updated as new releases are made available. **Updated 2017/04/10** How to get your SCCM Endpoint Protection Agent Version Numbers An easy and … Read More

Create SCCM Report Administrator Role

Benoit LecoursSCCM3 Comments

Role based administration is used to secure the access that is needed to administer SCCM. You also secure access to the objects that you manage, like collections, deployments, and sites but lacks a couple of roles to be complete. For example, there’s no built-in role for report administration or report viewer. We already covered the report viewer role in a previous post. This role give access to your users to consult and run SCCM Reports on the SSRS website. But what if you want to give access to an administrator to create, modify and upload reports without giving them access … Read More

How to install Local Administrator Password Solution (LAPS)

Jonathan LefebvreActive Directory, SCCM, WINDOWS 106 Comments

One of the challenges faced by workstation administrators, is to manage the local administrator account in large environment. One of the options was to use Group Policy Preferences, but that was before KB2962486 removed the possibility to set password using Group Policy Preferences. Since then, Microsoft as come up with a solution : Local Administrator Password Solution (LAPS). Here’s the benefits of using LAPS : Unique password for local administrator per computer Password available from Active Directory, if needed to use local administrator account Remotly change the local administrator password Ability to use a custom administrator account Limitation : Only … Read More

Refreshing a Windows 7 Computer to Windows 10 using USMT and SCCM

Benoit LecoursSCCM, WINDOWS 1066 Comments

Since SCCM 1511, you can use the new upgrade task sequence to easily upgrade a Windows 7 computer to Windows 10. But what if you want to upgrade a computer from a 32-bits operating system to Windows 10 64-bits ? You can’t use the upgrade task sequence for this specific scenario. Another reason would be that your company decided to use the wipe and reload option in your Windows 10 migration project. In those cases you will need to use USMT to capture data and settings from the users profiles before applying the new operating system. This post will describe how to upgrade a … Read More