SCCM

SCCM is device management tool for Windows devices. This is a client server application by Microsoft. How to manage devices with this tool for Windows devices? 90% of corporate Windows devices are managed by the this tool.

SCCM video posts in this blog will help you to understand in a better way. Most of the videos shared in this post are real time experience of this Windows Device managment.

SCCM is the short for System Center Configuration Manager. This tool is a software management suite provided by Microsoft that allows users to manage a large number of Windows based computers.

This tool features remote control, patch management, operating system deployment, network protection and other various services. Device management solution like has a great tech community.

Core infrastructure, Updates for Configuration Manager, Supported configurations for Configuration Manager, Cloud-attached management of CM, Co-management for Windows 10,
Manage clients on the internet, Windows as a service, CMPivot, Application management,
Manage apps from the Microsoft Store for Business, OS deployment, Introduction to OS deployment, Upgrade to Windows 10, Phased deployments, Software update management, Introduction to software updates management, Manage Office 365 ProPlus updates

Use Existing SCCM Config to Help to Reduce VPN Bandwidth | ConfigMgr

Let’s learn how to use an existing SCCM configuration to help to cater to remote work scenarios. In this post, let’s understand the opportunity to improve end-user experience in Work from home scenarios.

I hope, this post helps to Learn and Use Existing SCCM Config to Help to reduce VPN Bandwidth.

Related Post – Bits Throttling options for SCCM Distribution Point and SCCM Clients. & SCCM IBCM Vs CMG Differences a Real World Comparison

Updated on April 4th, 2020 -You can refer to the post from Rob York on 1.” Managing remote machines with cloud management gateway in Microsoft Endpoint Configuration Manager” 2. “Managing Patch Tuesday with Configuration Manager in a remote work world“.

Updated on April 5th, 2020 – Post from Jonas, Roland and Stefan. ✔ Mastering Configuration Manager Bandwidth limitations for VPN connected Clients

Introduction

We have modern options like cloud management gateway (CMG) & Cloud distribution points (CDP) to avoid traffic coming into the on-prem data center. Yes, also WUfB policies controlled by Microsoft Intune.

But the main question is “Are these options help to reduce the VPN bandwidth without slipt tunneling and appropriate proxy configurations.“?

Yes. If you have Configuration Manager infrastructure is cloud-enabled or cloud-attached with all modern features, then you are in good shape already.

Existing Path - Credit to Microsoft - TechCommunity Pos
Existing Path – Credit to Microsoft – TechCommunity Post

NOTE! – CMG & CDP might not be efficient if you don’t have spilt tunneling enabled for those kinds of traffic.

Many organizations are not using cloud management gateway or cloud distribution points. In this scenario what are the best options to avoid SCCM using all VPN bandwidth two batch windows devices?

Let’s see whether we can use the existing SCCM Config to Help to reduce VPN Bandwidth. Mainly to cover critical scenarios like Software updates (patching).

NOTE! – This is critical because if all of your workforces forced to work from home in a scenario like COVID19 for several coming months.

Split Tunneling & Proxy

Split tunneling and proxy configurations are pretty much critical in these scenarios. Even if configure everything OK from SCCM and Intune.

NOTE – When there is no appropriate spilt tunneling and proxy configurations, then the SCCM|Intune configuration changes might not help at all.

More details available in the following Microsoft documentation to build exceptions for Microsoft related services.

SCCM CMG - Firewall Ports Proxy Requirements - SCCM Config to Help to reduce VPN Bandwidth
SCCM CMG – Firewall Ports Proxy Requirements – SCCM Config to Help to reduce VPN Bandwidth

Office 365 Communications

Even spilt tunneling and proxy configuration changes are applicable for Office 365 traffic as well. If you have a VPN and proxy are configured to route all the traffic via a VPN tunnel, then this is going to impact the entire VPN tunnel.

More Details – Microsoft Office 365 Network Team’s Take on Split Tunnelling – TechCommunity Post

This shall in term impact your entire business application echo system as well. The users are connecting through the VPN in a work from home scenario won’t be able to perform any work at all.

Credit to Microsoft Details about Split Tunnelling - TechCommunity Post
Credit to Microsoft Details about Split Tunnelling – TechCommunity Post

Network & Proxy Team

In this scenario, we should get in touch with our network team members to understand the possibility of enabling split tunneling for these kinds of cloud services. Probably, they can help us to implement split tunneling for the following Microsoft services which impact the workplace.

Network Proxy Team to help Workplace - SCCM Config to Help to reduce VPN Bandwidth
Network Proxy Team to help Workplace – SCCM Config to Help to reduce VPN Bandwidth
  • Office 365
  • Software updates (Patching)
  • CMG or CDP connectivity

NOTE! – This will help to reduce the VPN bandwidth usage and the critical business applications which need connectivity to on Prem so worse can work seamlessly in a remote working scenario like this.

SCCM Config to Help to Reduce VPN Bandwidth

Even if you don’t have CMG or CDP enabled for your SCM|ConfigMgr infrastructure, you can use the following option to keep your Windows 10 devices or Windows 7 devices secured.

Software update or patch deployment is a critical activity for all device management admins. SCCM can perform this activity without impacting critical business deliverables.

Let’s check the following option and test whether this is useful for you or not. This configuration as per Microsoft documentation helps to reduce VPN traffic.

Starting in version SCCM 1806, deploy software updates to devices without first downloading and distributing content to distribution points. This setting is beneficial when dealing with extremely large update content. More details – here.

Patch Windows 10 from Internet – SCCM Config to Help to reduce VPN Bandwidth

NO Deployment package – Clients download contents from peers or the Microsoft cloud

Clients download contents from peers or the Microsoft cloud - SCCM Config to Help to reduce VPN Bandwidth
Clients download contents from peers or the Microsoft cloud – SCCM Config to Help to reduce VPN Bandwidth

While creating software updates packages in SCCM, there is a default option to download the content from the Internet instead of downloading the software update content from your on Prem distribution points. This SCCM Config to Help to reduce VPN Bandwidth.

TRY the following option – If software updates are not available on distribution point in current, neighbor or site boundary groups, download content from Microsoft Updates.

Select the following setting to have clients download software updates from Microsoft Update. The Internet-based clients always go to Microsoft Update for software updates content (if you have appropriate VPN spit tunneling and proxy configurations).

download content from Microsoft Updates - SCCM Config to Help to reduce VPN Bandwidth
Download content from Microsoft Updates – SCCM Config to Help to reduce VPN Bandwidth

Hopefully, this setting along with split tunneling might help you to reduce the VPN bandwidth usage from SCCM perspective.

Download Settings - SCCM Config to Help to reduce VPN Bandwidth
Download Settings – SCCM Config to Help to reduce VPN Bandwidth

Boundary Group Options

Boundary group option – Prefer cloud based sources over on-prem sources is another useful option that you can think about.

If you have a branch office with a faster internet link, you can now prioritize cloud content. In ConfigMgr 1902, this setting is now titled Prefer cloud based sources over on-premise sources. Cloud based sources include the following – More details here.

Boundary Options – SCCM Config to Help to reduce VPN Bandwidth
  • Cloud distribution points
  • Microsoft Update (added in version 1902)
Prefer cloud based sources over on-prem sources - SCCM Config to Help to reduce VPN Bandwidth
Prefer cloud based sources over on-prem sources – SCCM Config to Help to reduce VPN Bandwidth

BITs Throttling Options for SCCM DP MP SUP

I have posted about the BITs Throttling Options for SCCM DP, MP, and SUP over https://anoopcnair.com/vpn-bandwidth-control-via-bits-throttling-for-sccm-dp-client

Results

Let me know what you think about it how many of you are thinking to implement this kind of option.

Resources

Out of Band SCCM Hotfix Installation Guide | MECM

Let’s check the above video how to install Out of Band SCCM Hotfix. Let’s understand what is SCCM| ConfigMgr update registration tool.

Subscribe to Post via eMail

[jetpack_subscription_form show_only_email_and_button=”true” custom_background_button_color=”undefined” custom_text_button_color=”undefined” submit_button_text=”Subscribe” submit_button_classes=”undefined” show_subscribers_total=”false” ]

Introduction

SCCM out of band hotfix updates for SCCM are not available from the Microsoft cloud service. One example of out of band hotfix of SCCM 1910 version is KB 4538166. You need to get these type of updates by manually downloading it.

NOTE! – An out-of-band release hotfix file name ends with the extension update.exe. The example is “CM1910-KB4538166.ConfigMgr.Update.exe.”

Update Registration Tool

You use a tool called the “update registration tool” to manually import the update to the ConfigMgr console. This tool enables you to extract and transfer the update package to the stand alone primary or CAS site server, and register the update with the SCCM console.

NOTE! – When update has a file name that ends with the extension .exe (NOT update.exe), then you need to use you use the hotfix installer that is included with that hotfix download to install the update directly to the SCCM site server.

SCCM | CofnigMgr Update Registration Tool Out of Band SCCM Hotfix
SCCM | ConfigMgr Update Registration Tool (Out of Band SCCM Hotfix)

Prerequisites

You need to make sure the tool’s (SCCM | ConfigMgr Update Registration Tool) prerequisites.

  • Service connection point can be ONLINE or OFFLINE
  • Run Update Registration Tool from the server where the service connection point role is installed
  • The computer where the tool runs (the service connection point computer) must have the .NET Framework 4.52 installed
  • The account you use to run the tool must have local administrator permissions
  • Your account must have write permissions to the following folder on the computer that hosts the service connection point: \EasySetupPayload\offline

Installation

I have already explained the installation process which you shall follow to install out of band SCCM hotfix.

Watch this video on YouTube.

Resources

Reinstall Management Point Role|ConfigMgr

Watch this video on YouTube.

In this blog post, You are going to see the videos to remove Management point and install it. So basically this process is called re-installation of SCCM Management point role (Reinstall Management Point Role).

Impacts – Reinstall Management Point

You need to make sure that you are aware of all the impacts before you remove the Management point from your SCCM|ConfigMgr infrastructure.

Basically Management points provide policies and content location to clients. If you don’t have a Management point your SCCM client is useless or not managed at all.

The above scenario could cause many client management issues as well as bandwidth issues if the clients fall back to remote Management Point.

Before removing the ConfigMgr Management point, you need to make sure that you are NOT going to cause bandwidth or network issues for your businesses.

You can stop all the deployments or you should not deploy any new applications or policies (policies are fine) to those remote office clients to eliminate the network impacts.

NOTE! – You can reduce the impact of re-installation of SCCM MP by making an other management point available in the same remote office or not.

Reinstall Management Point - Remove and Install Management Point
Reinstall Management Point – Remove and Install Management Point

Remove Management Point

Once you are able to confirm you are fine with all these impacts, you can proceed with the following actions.

The removal of management point is straightforward process. You can refer to the video above to get more details on the removal process. You can complete re installation “Reinstall Management Point” process using this guide.

My recommendation would be to validate the removal of management points (MP) from the log files. Also, you can validate all the other components like IIS. This process will help you to have a clean reinstall or removal of management point.

More details – Learn How to Remove Management Point Role|SCCM|ConfigMgr.

Reinstall Management Point

Once you are OK with the removal of Management point, you can give a restart it’s not mandatory to restart the server but you can restart the server before installing the Management point again (or re-installing the MP).

Now you can install the management point (Reinstall Management Point) from SCCM console.

How to perform re-installation of MP is explained in the video above. After the installation, from the log files as you can see in the below post you can verify MP is working fine.

More details – Learn How to Install a New Management Point Role|SCCM|ConfigMgr

Resources

How to Reinstall Distribution Point Role|ConfigMgr

Watch this video on YouTube.

In this blog post, You are going to see the videos to remove distribution point and install it. So basically this process is called re-installation of SCCM distribution point role (Reinstall Distribution Point Role).

Impacts – Reinstall Distribution Point

You need to make sure that you are aware of all the impacts before you remove the distribution point from your SCCM|ConfigMgr infrastructure.

Basically distribution points provide source files to clients. If you don’t have a distribution point and if you are not using any peer to peer caching mechanism, probably your client will go over van connection and download the source files of your applications from the remote distribution point.

The above scenario could cause many network related issues if you have bandwidth concerns or if you are on a low bandwidth connected remote office.

Before removing the ConfigMgr distribution point , you need to make sure that you are NOT going to cause bandwidth or network issues for your businesses.

You can stop all the deployments or you should not deploy any new applications or policies (policies are fine) to those remote office clients to eliminate the network impacts.

NOTE! – While removing the distribution point all the packages distributed do that DP will get removed or the source files in the DP will get deleted. So make sure to DP group, otherwise you need to distribute all the packages manually or using some automation after reinstalling the distribution point.   

You can reduce the impact of re-installation of SCCM DP by making an other distribution points available in the same remote office or not.

Reinstall Distribution Point SCCM ConfigMgr
Reinstall Distribution Point

Removal of SCCM DP

Once you are able to confirm you are fine with all these impacts, you can proceed with the following actions.

The removal of distribution point is straightforward process. You can refer to the video above to get more details on the removal process. You can complete re installation “Reinstall Distribution Point” process using this guide.

My recommendation would be to validate the removal of distribution points (DP) from the log files. Also, you can validate all the other components like IIS. This process will help you to have a clean reinstall or removal of distribution point.

More details – Learn How to Remove Distribution Point Role|SCCM|ConfigMgr.

Reinstall ConfigMgr Distribution Point Role

Once you are OK with the removal of distribution point, you can give a restart it’s not mandatory to restart the server but you can restart the server before installing the distribution point again (or re-installing the DP).

Now you can install the distribution point (Reinstall Distribution Point) from SCCM console.

How to do that that is explained in the video above. After the installation, there are two default packages which will automatically get distributed to the newly installed DP. From the log files as you can see in the below post and in the above video you can verify DP is working fine.

More details – Learn How to Install a New Distribution Point Role|SCCM|ConfigMgr

Resources

         

SCCM Task Sequence Check Readiness Options Before Windows 10 Upgrade

SCCM Task Sequence Check Readiness Options Before Windows 10 Upgrade ConfigMgr | Endpoint Manager. Microsoft MEMCM team introduced new read-only variables to the Task Sequence in this version 2001.

Introduction

Let’s see more details about Task Sequence Check Readiness with Windows 10 upgrade. Configuration Manager 2001 Task Sequence has out of box checks to confirm the existing device configuration before Windows 10 upgrade.

The readiness check is the built-in options availability in SCCM Task Sequence with Windows 10 upgrade options.

More Details – https://www.anoopcnair.com/configuration-manager-2001-technical-preview/

Task Sequence Check Readiness

The step also now sets read-only variables for whether the check returned true (1) or false (0). If you don’t enable a check, the value of the corresponding read-only variable is blank.

  • _TS_CRMEMORY
  • _TS_CRSPEED
  • _TS_CRDISK
  • _TS_CROSTYPE
  • _TS_CRARCH
  • _TS_CRMINOSVER
  • _TS_CRMAXOSVER
  • _TS_CRCLIENTMINVER
  • _TS_CROSLANGUAGE
  • _TS_CRACPOWER
  • _TS_CRNETWORK
  • _TS_CRWIRED

The smsts.log includes the outcome of all checks. If one check fails, the task sequence engine continues to evaluate the other checks. The step doesn’t fail until all checks are complete.

If at least one check fails, the step fails, and it returns error code 4316. This error code translates to “The resource required for this operation does not exist.”

The following are the new options available in the Task Sequence

  • Architecture of current OS: 32 Vs 64
  • Minimum OS version: for example, 10.0.16299
  • Maximum OS version: for example, 10.0.18356
  • Minimum client version: for example, 5.00.08913.1005
  • Language of current OS: select the language name, the step compares the associated language code. This check compares the language that you select to the OSLanguage property of the Win32_OperatingSystem class on the client.
  • AC power plugged in
  • Network adapter connected
    • Network adapter is not wireless
Configuration Manager 2001 Technical Preview Version 1 Task Sequence Check Readiness
Task Sequence Check Readiness

Resources

Watch this video on YouTube.

What’s New in ConfigMgr Orchestration Group|SCCM

Let’s see what are the improvements Microsoft included in the latest version of Orchestration MEMCM|SCCM 2001 Technical Preview. I have a previous post which talks about SCCM Orchestration Group Setup Step by Step Guide for Server Patching.

What is Orchestration Groups

The Orchestration groups are the advanced version of server groups in ConfigMgr. Do you know server groups? How to Patch the cluster servers and exchange servers domain controllers etc..

Orchestration Groups
ConfigMgr Orchestration Groups

Step by Step Guide Orchestration

I have explained step by step guide in the previous post – https://www.anoopcnair.com/sccm-orchestration-group-setup-guide/

Improvements in Orchestration

The following are the improvements or orchestration group of Configuration Manager. https://docs.microsoft.com/en-us/configmgr/core/get-started/2020/technical-preview-2001#bkmk_orch

Video Orchestration – Tutorial to explain in the above link.

  • You can now specify custom timeout values for:
    • The Orchestration Group
      • Time limit for all group members to complete update installation
    • Orchestration Group members
      • Time limit for a single device in the group to complete the update installation
  • When selecting group members, you now have a drop-down list to select the site code.
  • When selecting resources for the group, only valid clients are shown. Checks are made to verify the site code, that the client is installed, and that resources aren’t duplicated.
  • You can now set values for the following items in the Create Orchestration Group Wizard:
    • Number of machines to be updated at the same time in the Rules Selection page
    • Script timeout in the PreScript page
    • Script timeout in the PostScript page

Video Technical Preview 2001

More details about in the below 2001 preview version of Configuration Manager – Configuration Manager 2001 Technical Preview Version.

Watch this video on YouTube.

Resources

MECM SCCM 1910 Update Step by Step Guide

MECM is the new name of SCCM. In this post, you will see how to upgrade the SCCM infra to 1910 version. Let’s see SCCM 1910 Update Step by Step details.

Related Post – What is New in MECM SCCM 1910 Features a Walkthrough

MECM 1910 Released
MECM 1910 Released Microsoft Docs here

How to Download SCCM 1910?

Don’t you see the SCCM 1910 production version in your console? How did I get the SCCM 1910 production version? There is no secret here.

Steps to Follow

  • You can download the PowerShell Script from Microsoft ( these instructions on how to use the PowerShell script  )
  • Run the Script with the account which has Full Admin access
  • Make sure you have successfully run the script
  • SCCM 1910 is Generally Available
  • Open the SCCM console and click Check updates as you can see in the below screenshot
MECM 1910 Released
MECM 1910 Released

Check out Microsoft’s Announcement about the 1910 release. MECM 1910 Fast Ring (opt-in version) now. This version of MECM is not generally available for all applicable SCCM Infra.

MECM 1910 Applicability Checks

With each version of SCCM, there will be an SQL applicability script that will check whether this particular update 1910 should be made available or not.

I have a blog post about this applicability script and the logic of the SQL script in detail. More details “SCCM Update is Not Visible in Console – Here is the Reason.”

SCCM 1910 Applicability Check - SCCM 1910 Update
SCCM 1910 Applicability Check – SCCM 1910 Update

Prerequisites of 1910 Version

As I mentioned above, the MECM 1910 production version will be available within the SCCM console after you run the PowerShell command and your SCCM site meet the following conditions:

  1. If your MECM CB version is SCCM 1810 or SCCM 1902, or SCCM 1906 (Read More details about SCCM Life Cycle)
  2. If your MECM CB version has online Service Connection Point

NOTE! – Make sure you have gone through best practice check list before starting the upgrade.

More Details – https://docs.microsoft.com/en-us/configmgr/core/servers/manage/checklist-for-installing-update-1910

Update Download Stuck?

This stuck download issue is a common scenario in enterprise organizations and LAB environments. This issue is mostly because of proxy or some other internet-related issues.

There are a couple of ways to fix this kind of issue if it’s not related to proxy and internet. You can refer to the previous blog posts to solve Update Download stuck problems.

More troubleshooting help on SCCM 1910 Download stuck and upgrade issues here and here.

FIX SCCM Updates Stuck in Downloading State & CM Update Reset Tool Fixes SCCM CB Update Download Issue

Microsoft Doc âž¡ https://support.microsoft.com/en-us/help/4490424/understand-and-troubleshoot-updates-and-servicing-in-configmgr

Log Files are Your Friend

  • DMPDownloader.log for SCCM 1910 source file download issues
  • ConfigMgrSetup.log for Redist Files Download Issue
  • CMUpdate.log for all the upgrade related activities

SCCM Update Prerequisite Check Stuck?

The SCCM upgrade prerequisite check can take many hours, depending on your hierarchy/infra. When you have CAS and many primary servers, the 1910 update source files will be copied to primary servers.

You can check the status of the prerequisite checks from the monitoring node. More details about SCCM prerequisite checks here.

Microsoft Documentation – https://docs.microsoft.com/en-us/configmgr/core/servers/deploy/install/prerequisite-checker

NOTE! – Make sure you start the prerequisite checks 3-4 days before the production update/upgrade of SCCM infra.

SCCM CB Prerequisite Checks - SCCM 1910 Prerequisites - SCCM 1910 Update
SCCM 1910 Prerequisites – SCCM 1910 Update

Install Update Pack

Once the prerequisite checks completed successfully, you can start the installation or update of MECM 1910.

  • Select Configuration Manager 1910 update
  • Click on Install Update Pack to start the installation wizard
Install Update Pack
Install Update Pack
  • Features Included in Update Pack
  • Select the features you want to enable after the upgrades
    • Bitlocker Management
  • Click on Next to continue
Bitlocker Management SCCM 1910 Update
Bitlocker Management – SCCM 1910 Update
  • Client Update Settings
    • Upgrade without validating
    • Validate in pre production collection
  • Click NEXT button to continue
SCCM 1902 Client Upgrade Options Promote Pre-Production Client - SCCM 1910 Update
Direct Production Client Package Update – SCCM 1910 Update

NOTE! – More details about SCCM Client Upgrade options “SCCM Client Upgrade Promote Pre-Production Client to Production.”

1910 Update Completed Successfully

The installation or update process might take more than a couple of hours, depending on the size of the database and performance, etc..

1910 version update completed
1910 version update completed

Upgrade SCCM Remote Console

The 1910 update process completes the installation of the latest version of the console. The console installation on the site servers (primary and CAS) are straight forward.

More details about the remote console installations/updates are explained in the following post. More information, “Install SCCM Remote Console on a Windows 10 Machine.”

  • Version 1910
  • Console Version 5.1910.1067.1300
  • Site Version 5.0.8913.1000
Endpoint Configuration Manager v1910
Endpoint Configuration Manager v1910

Client and Server Version

Let’s check the client and server versions of 1910.

  • Version 1910
  • Full Version 5.00.8913.1000
  • Client Version 5.00.8913.1006
1910 Full Version Client Version
1910 Full Version Client Version

Pre-Released Features

Following are the pre-release features of 1910 version!

Pre-Released Features - SCCM 1910 Update
Pre-Released Features – SCCM 1910 Update

New Features of 1910

I have explained all the new features in the following blog post. More details “What is New in MECM SCCM 1910 Features a Walkthrough.”

Resources – SCCM 1910 Update

How to Manage Devices Day Bangalore IT Pro Event SCCM Intune Free Training Event

Hello All, Registration for “How to Manage Devices Day” is starting today 18th Nov 2019 11:00 AM IST. The is the IT FREE community event for Device management admins.

Registration

Register NOW ▶➡➡➡ https://www.eventbrite.co.uk/e/how-to-manage-devices-day-sccm-intune-device-management-day-tickets-81937133171

Ticket Schedules

  1. Sales start on 18 Nov 2019 11:00 AM IST
  2. Sales start on 25 Nov 2019 11:00 AM IST
  3. Sales start on 2 Dec 2019 11:00 AM IST

Giveaways

Except big surprises at the end of the event!! More details coming soon. Keep looking at social media below:

Introduction

I have been part of Bangalore IT Pro since 2015. Following are some of the examples:

This How to Manage Devices event is powered by PatchMyPc, 1E, and Microsoft.

When? & Where?

When âž¡âž¡â–¶ Saturday 14th Dec 2019

Where âž¡âž¡â–¶ Microsoft Prestige Ferns Galaxy, 6/18, Bellandur Gate Rd, Bellandur, Bengaluru, Karnataka 560103, India. Google Map!

Agenda – How to Manage Devices Day

Following are the agenda (we will keep on updating it)

TopicSpeaker/sTimeslot
Introduction House Keeping/Agenda for the day Anoop9:00 to 9:15
TBA9:15 to 10:00
Intune for SCCM Admins Anoop10:00 to 10:45
Tea Break 10:45 to 11:00
SCCM Troubleshooting TipsRajul11:00 to 11:45
Intune Enrollment Saurabh Sarkar11:45 to 12:30
Free Networking Lunch 12:30 to 1:30
TBA1:30 to 2:15
ESR + Autopilot Hybrid ScenarioVimal Das2:15 to 3:00
Tea Break 3:00 to 3:15
SCCM Bandwidth Enhancements OptionsGuru/Vimal3:15 to 4:00
Task Sequence TroubleshootingVishal Goyel4:00 to 4:45
Giveaways Quizzzzz?? 4:45 to 5:00

More details about speakers are https://www.anoopcnair.com/about/ & https://www.youtube.com/channel/UCsrlscam8q2jNZwHMHlU7Jg/

Resources

Microsoft Ignite 2019 Overview from SCCM Intune Admin Perspective

In this video post you’re going to see an overview of Microsoft Ignite 2019 which was on last week. This video post is Microsoft ignite 2019 overview from SCCM and Intune admin perspective. This post is very high-level overview.

Introduction

As an SCCM and into an admin my main focus area is obviously Microsoft endpoint manager in this video (SCCM Intune Admin Perspective).

If you want to have more deep level details of each subject, then I have 14 posts (more coming) which explain each topic in bit more details.

  • What are the changes in SCCM an Intune licensing model?
  • What are the changes in cloud attached strategies?
  • What are the changes in Intune reporting strategies?
  • What are the changes in SCCM Cloud Console strategies?
  • What are the changes in SCCM task sequence and Windows Autopilot?
  • What are the expectation about Microsoft endpoint manager?
  • What does Microsoft intelligent edge? (Which I don’t know)?

Ignite Coverage Posts

Ignite 2019 Takeaways from an SCCM and Intune Admin Perspective – Microsoft Endpoint Manager (MEM) – Microsoft Configuration Manger (MEMCM) & Microsoft Intune (MEMMI).

✔Microsoft Intune (MEMMI)
✔Microsoft Endpoint Manager (MEM)
✔Microsoft Configuration Manger (MEMCM)
✔Microsoft Endpoint Manager Administration Console (MEMAC)

SCCM Intune Admin Perspective
SCCM Intune Admin Perspective

â–¶Microsoft Endpoint Management SCCM Intune Windows Updates – https://www.anoopcnair.com/endpoint-management-sccm-intune-windows/
â–¶Microsoft Endpoint Manager is the future of SCCM Intune MEMMI MEMCM – https://www.anoopcnair.com/what-is-microsoft-endpoint-manager-mem-memmi/
â–¶iOS Android macOS Mobile Enrollment Options with Intune – https://www.anoopcnair.com/ios-android-macos-mobile-enrollment-intune/
â–¶Basics of Windows Dynamic Update Explained Update Management – https://www.anoopcnair.com/basics-of-windows-dynamic-update/
â–¶WVD End User Experience Availability Updates – https://www.anoopcnair.com/wvd-updates-availability-end-user-experience/
â–¶MSIX Updates from Ignite Reliability Network Disk-space – https://www.anoopcnair.com/msix-updates-from-ignite-reliability/
â–¶Microsoft Learning Certification Exams Updates – https://www.anoopcnair.com/microsoft-certification-learning-exams/
â–¶On-Prem WVD Options Azure Quantum Qualys Scan Integration – https://www.anoopcnair.com/on-prem-wvd-options-azure-updates-quantum/
â–¶Intune Reporting Strategies Advanced Reporting – https://www.anoopcnair.com/intune-reporting-strategies-advanced-reporting/
â–¶Intune Endpoint Security Policies Enhancements – https://www.anoopcnair.com/intune-endpoint-security-admin-mem/
â–¶Intune Policy Sets Collection of Workflows – https://www.anoopcnair.com/intune-policy-sets-collection-of-workflows/
â–¶Windows Autopilot Updates Timelines – https://www.anoopcnair.com/windows-autopilot-updates-timelines/
â–¶Microsoft Connected Cache Container Instances in Azure via Intune – https://www.anoopcnair.com/microsoft-connected-cache-managed-in-azure/
â–¶SCCM and Microsoft Connected Cache Integration – https://www.anoopcnair.com/sccm-and-microsoft-connected-cache-integration/
â–¶Windows 10 Bandwidth Management DO Delivery Optimization with LEDBAT in LAN – https://www.anoopcnair.com/delivery-optimization-with-ledbat-windows-10/

Resources (SCCM Intune Admin Perspective)

SCCM Helps to Update Google Chrome 0-day Patch

Let’s check this video to know more about Google Chrome updates with SCCM 1910. I have used SCCM’s application model to deploy the updated version of Chrome in this video tutorial.

Related Post Deploy Google Chrome Update with SCCM Step by Step Guide 0-Day Bug

Introduction

Google recently released a blog post revealing 0 day bug for their browser called Chrome. 0 day bug means you need to fix it as soon as possible or you need to update it as soon as possible. Otherwise, it will be a big risk for your organization where the previous versions of Chrome is running.

In this critical scenario, I’m trying to help SCCM admins to batch or update Google Chrome browser on the managed devices. There might be thousands of devices which they want to update. Manual updation or group policy based updation of Chrome it’s not the best practice full larger organizations.

Download Latest version of Chrome

You can download the latest version of Google Chrome MSI from Google’s enterprise portal for free. you don’t have to log into Google to download this version of Google Chrome.

SCCM Application Model

SCCM application model is the feature rich option to update Chrome for a large organization. If you are using SCCM for managing the devices in your enterprise, then you should use SCCM application model to update Google Chrome as described in the video.

I have gone through step by step documentation and explanation in the elbow video tutorial. I think the video will be helpful to you to update Chrome version for your thousands of devices.

SCCM application deployment

once the application is created For Google Chrome update, you can right click on that application and deploy this updated version of MSI to a collection of devices. This activity is also explained in the above video.

Windows 7 Windows 10 Devices

You can deploy Chrome application which you created in SCCM to Windows 7 and Windows 10 devices in your organization.

Automation Phased Deployments

I would recommend deploying this application using phased deployments in SCCM. The phased deployments in SCCM will help you to reduce the risks of large scale deployments.

In this scenario you would be able to deploy Chrome application update to pilot collection in the 1st phase. Depending upon the success rate of the first deployment SCCM will automatically take a decision to proceed or not to proceed with the Phase 2 of the deployment. this is called phased deployment in SCCM.

Google Chrome – Resource