All Activity

The option could be missing of device is domain joined. For domain joined devices, azure AD connector is responsible for microsoft Entra hybrid join and there upon enrollment happens.

When I go to Set up a work or school account setting, I am not able to see the option. Join this device to Azure Active Directory Why is this option missing? Could be a permission issue? I verified and can see my account has permissions to perform Azure AD join, but still couldn't proceed further.

Hi Manish Bangia, First of all, thanks for your update and sorry for my late reply. I was out of office without possibility to check anything. I have checked the log files you suggested and in order to avoid misinterpretation, is there any way to share those files with you ?

Well, VPNs for Windows phones offer a world of advantages! First off, it shelters your online activities, protecting sensitive data from prying eyes and hackers. Secondly, they unlock geo-restricted content, giving you access to a wider range of entertainment. They also secure your connections on public Wi-Fi hotspots, keeping you safe while surfing on the go. With VPN services, you're all set for a safer online experience!

I am addicted to playing games and gained the greatest score of many. My partner suggested me use VPN to be extra protected so that my ID won't be hacked by anyone. Is that right? How can VPN benefit anyone?

On client side check the scan update status. This can be checked via 2 log files scanagent.log & updatesstore.log. Scanagent.log will let you know if scanning of updates are happening or not. This is the good place to start with troubleshooting.

Hello, I have a problem with my sccm system because my clients cannot retreive any update. As I've just started to experience the system, my steps are based on guides and recommendations collected by googling helps. Now, I need help to find what's going wrong with my system in order to allow clients to get required updates from SUP and am trying to correlate my logs to find what is going wrong as no error is shown. Any suggestion will be welcome. Thanks and regards,

Hi Ebinesar, you can check follow blog post on installing language pack using task sequence: https://www.manishbangia.com/how-to-install-language-pack-through-task-sequence-windows-10/

How to create single OSD (TS) with Multi Language setup. Eg, Arabic,German,france,English UK and English US

Either of the command should work: Wuauclt /detectnow or PowerShell.exe (New-Object -ComObject Microsoft.Update.AutoUpdate).DetectNow()

Is there a way to initiate check for updates using command line for local and remote systems ?

I can see the client is not getting registered (log file clientidmanagerstartup.log), this could be an indication of Boundary / boundary group not correctly setup. Kindly verify IP address / range of workgroup device has a boundary and associated with boundary group to report to Management Point. There are multiple command lines which can be used for client install, kindly check the link Install SCCM Client on Workgroup Computer | Configuration Manager ManishBangia

Hello everybody, I've a problem with configure the SCCM environ and also the Workgroup clients. My clients can be open connection to the SCCM site server. Configuration Manager General Client Certificate: None Connection Type: Currently Internet Version: 5.00.9096.1024 Actions Machine Policy Retrieval & Evaluation Cycle User Policy Retrieval & Evaluation Cycle none more entries Certificates in the local computer SMS\Certificates SMS: SMS Encryption Certificate SMS: SMS Signing Certificate ccmsetup: "C:\Temp\SccmClient\Client\ccmsetup.exe" /source:"C:\Temp\SccmClient\Client" /mp:https://my_mp.fqdn SMSMP=my_mp.fqdn SMSSITECODE=my_sitecode CCMLOGMAXSIZE=10485760 CCMLOGMAXHISTORY=5 ClientLocation.log Status Agent hasn't been initialized yet. Attempting to create pending event. ClientLocation 10/03/2023 06:26:22 3908 (0x0F44) Raising pending event: instance of CCM_CcmHttp_Status { DateTime = "20230310052622.992000+000"; HostName = "my_mp.fqdn"; HRESULT = "0x87d0027e"; ProcessID = 1544; StatusCode = 403; ThreadID = 3908; }; ClientLocation 10/03/2023 06:26:22 3908 (0x0F44) Successfully queued event on HTTP/HTTPS failure for server 'my_mp.fqdn'. ClientLocation 10/03/2023 06:26:22 3908 (0x0F44) Workgroup client is in Unknown location ClientLocation 10/03/2023 06:26:22 3908 (0x0F44) LocationServices.log Failed to send site information Location Request Message to my_mp.fqdn LocationServices 09/03/2023 17:56:24 336 (0x0150) LSIsSiteCompatible : Failed to get Site Version from all directories LocationServices 09/03/2023 17:56:24 336 (0x0150) Won't send a client assignment fallback status point message because the last assignment error matches this one. LocationServices 09/03/2023 17:56:24 336 (0x0150) Failed to execute task 'LSSiteRoleCycleTask'. Error 0x80004005 LocationServices 09/03/2023 17:56:24 5344 (0x14E0) CSiteRoleCycleTask::Execute failed (0x80004005). LocationServices 09/03/2023 17:56:24 5344 (0x14E0) Processing pending site assignment. LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Assigning to site 'my_sitecode' LocationServices 10/03/2023 06:26:23 3908 (0x0F44) LSIsSiteCompatible : Verifying Site Compatibility for <my_sitecode> LocationServices 10/03/2023 06:26:23 3908 (0x0F44) No INF MP available LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Retrieved MP [my_mp.fqdn] from Registry LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Attempting to retrieve lookup MP(s) from DNS LocationServices 10/03/2023 06:26:23 3908 (0x0F44) DNS Suffix not specified LocationServices 10/03/2023 06:26:23 3908 (0x0F44) No lookup MP(s) from DNS LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Policy prevents failover to WINS for lookup LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Attempting to retrieve site information from lookup MP(s) LocationServices 10/03/2023 06:26:23 3908 (0x0F44) No INF MP available LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Retrieved MP [my_mp.fqdn] from Registry LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Attempting to retrieve lookup MP(s) from DNS LocationServices 10/03/2023 06:26:23 3908 (0x0F44) DNS Suffix not specified LocationServices 10/03/2023 06:26:23 3908 (0x0F44) No lookup MP(s) from DNS LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Policy prevents failover to WINS for lookup LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Attempting to retrieve site information from lookup MP(s) LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Failed to send site information Location Request Message to my_mp.fqdn LocationServices 10/03/2023 06:26:23 3908 (0x0F44) LSIsSiteCompatible : Failed to get Site Version from all directories LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Won't send a client assignment fallback status point message because the last assignment error matches this one. LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Failed to execute task 'LSSiteRoleCycleTask'. Error 0x80004005 LocationServices 10/03/2023 06:26:23 4900 (0x1324) CSiteRoleCycleTask::Execute failed (0x80004005). LocationServices 10/03/2023 06:26:23 4900 (0x1324) Successfully queued RefreshSecuritySettingsEvent event. CcmMessaging 10/03/2023 06:31:23 3908 (0x0F44) Successfully queued event on HTTP/HTTPS failure for server 'HDHX5911.euro1.voith.net'. CcmMessaging 10/03/2023 06:31:23 3908 (0x0F44) Post to http://my_mp.fqdn/ccm_system/request failed with 0x87d00231. CcmMessaging 10/03/2023 06:31:23 3908 (0x0F44) ClientIDManagerStartup.log Sleeping for 224 seconds before refreshing location services. ClientIDManagerStartup 10/03/2023 06:27:38 3908 (0x0F44) RegTask: Failed to refresh site code. Error: 0x8000ffff ClientIDManagerStartup 10/03/2023 06:31:23 3908 (0x0F44) Sleeping for 223 seconds before refreshing location services. ClientIDManagerStartup 10/03/2023 06:32:39 3908 (0x0F44) Firewall: is disabled local user: local administrator acount OS: Windows 10 22H2 Enterprise Domain/Workgroup: Workgroup Network: Public (not connected to the Internet) The SCCM site server is available over the network (ping). I hope you can help me on this issue. BR Lucky

Run the following PowerShell command: (New-Object -ComObject "Microsoft.Update.ServiceManager").Services | Select Name, IsDefaultAUService, IsRegisteredWithAU If it shows Windows Server Update Service's IsDefaultAUService as True then device is getting updates from WSUS.

Yes, we can remotely run the Powershell command for these devices. https://www.manishbangia.com/initiate-sccm-client-actions-cmd-line/

Here is the customsettings.ini specifically created for Lenovo model. It will pick OSDCOMPUTERNAME as first 4 characters of Model along with serial number of the device. ;Generate Hostname for Lenovo as: first 4 digits of Model and serialnumber ;Generate Hostname based upon Laptop/Desktop with SerialNumber ;Generate Hostname based upon VM with MacAddress [Settings] Priority=Default,ByModel,ByLaptop,ByVM,ByDesktop Properties=CustomSerialNumber,CustomMacAddress,CustomModel [Default] CustomSerialNumber=#Right(Replace("%SERIALNUMBER%","-",""),13)# CustomMacAddress=#Right(Replace("%MacAddress001%",":",""),13)# CustomModel=#Left("%Model%",4)# [ByModel] Subsection=%Make% [Lenovo] OSDCOMPUTERNAME=%CustomModel%-%SerialNumber% [20K5] [ByLaptop] Subsection=LP-%IsLaptop% [LP-True] OSDCOMPUTERNAME=LP-%SERIALNUMBER% [ByDesktop] Subsection=DP-%IsDesktop% [DP-True] OSDCOMPUTERNAME=DP-%SERIALNUMBER% [ByVM] Subsection=VM-%IsVM% [VM-True] OSDCOMPUTERNAME=VM%CustomMacAddress% OSDomainOUName=LDAP://OU=Virtual,OU=Workstations,DC=MANBAN,DC=COM

On Hyper-V settings, uncheck the option for “Enhanced session”.

I have configured windows hello for business policy through Intune. It does work fine with laptop, but cannot see it working with virtual machine. I am using hyper-v and windows hello setup never launches.

I have no access too the SCCM console. Those that do seem to prefer to "Advertise" rather than "Assign" updates. I have several hundred users who are reluctant to apply application and OS updates. Once the packages are advertised, is there a command line, powershell, or vb script I can use as an administrator to remotely instruct Software Center to download and install whatever updates are advertised?

I wanted to understand if device is getting patch either through Intune or through WSUS. What is the easiest way to check it.

Hi Nitin, Update ring has the feature to uninstall the most recent patch. You can’t remove the patch from the ring but can uninstall it on the groups targeted by the ring.

Hi Manish, If we are doing the Autopatch by the ring if we need to remove the Patch from the ring if 2 KB is not required for the client can we remove it from the ring.If yes please share us the details. Please let me know if you need any more info. Thanks, Nitin A

Following is the query to be used: Select * from dbo.Collections where flags like '6' Note: Meaning of flag is 'Collection Refresh Settings' and it can have following values along with meaning: 1 = Manual Update 2 = Periodic Update 4 = Incremental Updates 6 = Incremental and Periodic Updates

I verified the SQL services, I can see "SQL Server (MSSQLSERVER)" services is up and running along with other SQL Server CEIP Service, SQL Server Integration Services, SQL Server Reporting Services, all of them are set to automatic and running. Could you please share the screenshot of what is not working ?

Sorry for the late reply, I was on holiday. I am about to publish the video on this (MEM Evaluation Kit configuration) and will check and share the results.