Jump to content

All Activity

This stream auto-updates

  1. Earlier
  2. I have to exclude a windows defender check on a specific folder. This can be done by GPO windows defender >exclusion >path How can I do it by SCCM? Thanks
  3. There are couple of ways to check that, easiest what I found is using this PowerShell command: $MUSM = New-Object -ComObject "Microsoft.Update.ServiceManager" $status = $MUSM.Services $status | select name, IsDefaultAUService IsDefaultAUService will give you values for "Windows Server Update Service" and "Windows Update". One will be true, easy to analyse to check which one is your default Automtic update service set for device.
  4. In my environment I have SCCM installed. I have enabled co-management with windows update workload applied. I am still having trouble, devices are not getting patched, it always says "upto date". I am not sure whether updates are being checked through wsus or intune. How to check this ?
  5. I am looking at some logs. I have noticed for example distmgr.log does't have date incremental I mean I can see only the data of the day I can't see historical movements.
  6. The easiest way to understand this - is to distribute a small package and monitor the progress through distmgr.log immediately with time stamp. I hope you are using cmtrace.exe tool (not notepad), also make a note of thread ID in distmgr when you start distributing the content, so that you are 100% sure you are tracking the same package. It's not difficult, the content info for distribution will not be too much, once you go through it couple of times you will be easily able to understand it.
  7. Thank you Manush, I was looking for at the wrong place then.... I found smsdpprov.log. it was in another folder (in the new DP) but it was there 😉 The logs at my eyes are are a data tangle. How can I move and find what I need in those logs. For example, distmgr.log present in the Primary site is a large file and it grows more and more. Could you please sugggest me where to find a guide or tutorial where to start understanding how to interpret all data?
  8. If DP is installed on a server which is not a primary site, then look for distmgr.log on Primary site. On Distribution point look for smsdpprov.log under d:\SMS_CCM\logs. It seems the DP installation went fine as SCCM content library folder and all supported folders got created. Check the installation status through smsdpprov.log. Another way to check installation status is through Monitoring \ Distribution status \ distribution point configuration status
  9. I have created a new DP choosing as primary content and packages D:\ drive. At the end of the wizard process I went to the new DP at D:\ to check the logs but I couldn't find it because the program files (D:\program files\Microsoft Configuration Manager \logs) was not in the D drive. I couldn't find distmgr.log. In D drive I found only this folders: -remoteinstall -SCCMContentLib -SMS -SMS_CCM -SMS_DP$ -SMSPKGD$ -SMSSIG$ Something went wrong or do I need to do something more? Thanks
  10. Global Administrator role is must to configure Automatic enrollment for Windows devices. Intune Administrator role is not sufficient. For more details check: https://docs.microsoft.com/bs-latn-ba/mem/intune/enrollment/quickstart-setup-auto-enrollment
  11. On Microsoft endpoint manager admin center, I can't enable MDM user scope. Option "Save" is greyed out. I tried selecting "All" but no success. Tried using "Some" by selecting a group. But still Save option is disabled and greyed out. Intune Administrator role has been assigned to me, is this not enough to make the changes ? I tried doing the stuff through Azure portal, what I can see is just "Mobility (MDM and MAM)" option itself is greyed, which doesn't allow me to even see what is there.
  12. Usually it take 24-72 hours. If everything is in place, give it some time.
  13. For managing the devices, Office 365 E3 & E5 are not sufficient enough. You need to go with EMS + E3 license along with Office 365 E3 license. Intune is included in the following licenses: Microsoft 365 E5 Microsoft 365 E3 Enterprise Mobility + Security E5 Enterprise Mobility + Security E3 Microsoft 365 Business Premium Microsoft 365 F1 Microsoft 365 F3 Microsoft 365 Government G5 Microsoft 365 Government G3 Intune for Education For more details check the link: https://docs.microsoft.com/en-us/mem/intune/fundamentals/licenses
  14. Can we use Office 365 E3 license for Intune ? Will it be enough to manage the devices using this license ? Regards Rajesh
  15. Microsoft's free Azure Virtual training dates schedule for year 2022, Microsoft Virtual training days: https://mvtd.events.microsoft.com This is the opportunity not to be missed. There are several courses conducted by Microsoft which covers waste variety of topics Microsoft Azure Virtual Training Day: Fundamentals Microsoft Azure Virtual Training Day: Implementing Hybrid Infrastructure Microsoft Azure Virtual Training Day: Deliver Integrated Analytics with Azure Synapse Microsoft Azure Virtual Training Day: DevOps with GitHub Microsoft Azure Virtual Training Day: Azure Virtual Desktop Microsoft Azure Virtual Training Day: AI Fundamentals Microsoft Azure Virtual Training Day: Modernize .NET Apps
  16. I have configured Update Compliance settings. When I click WaaSUpdateInsights Summary, I see the message: Performing Assessment No devices have been detected. Note that it can take up to 24 hours for configured devices to appear and may take longer if they are not currently connected to internet. Usually how many days it takes to get the data shown ?
  17. This all depends upon the hardware inventory. Check Client settings > Hardware inventory. This might be set to 5 or 7 days, if you want to device to send the info faster reduce the Hardware inventory schedule, but beware of additional load you will be increasing on Management point and Database as all devices will start sending the info based upon the settings you have specified.
  18. Windows 11 might be the upgrade for your device as it comes with few requirement such TPM 2.0 and others. Run the PowerShell script provided by microsoft to check Windows 11 hardware readiness https://www.manishbangia.com/windows-11-hardware-readiness-check-powershell-script/ There is a PC health check also available which can be downloaded from MS site, the file name is WindowsPCHealthCheckSetup.msi which can be downloaded from aka.ms/getpchealthcheckapp
  19. I am facing an issue with SCCM reporting. I have deployed the feature update correctly on a set of devices. Feature update installs fine but while checking into the SCCM report for compliance, I can still see old Operating system version.
  20. It seems you are not pressing F12 (PXE Boot sequence) correctly on time. I would say hit F12 or Fn+F12 multiple times so as not to miss pxe boot process initiation. Other thing to check is to look into BIOS. If you are still struggling to do PXE, try changing boot sequence with LAN / Ethernet on the top.
  21. Microsoft has recently announced changes in lots of product categories. Hope this will help you.
  22. Use following portal to give feedback or suggestion to Microsoft Intune team. Microsoft Intune · Community This also comes handy on what others are looking for in Intune. Definitely a page to be bookmarked if you are into intune.
  23. I need help. I am not able to do pxe boot the devices. Some times it works but majority of time it doesn't. What is the correct way ? The problem is more prominent with existing systems (where OS is already installed), when trying to do pxe, it boots into full OS rather than loading boot image. Please help what exactly am i missing ?
  24. Prevent systems from getting upgraded to Windows 11 To prevent system from Windows 10 to upgrade to Windows 11, we need following registry changes: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate "ProductVersion"="Windows 10" (REG_SZ) "TargetReleaseVersion"=dword:00000001 (REG_DWORD) "TargetReleaseVersionInfo"="21H1" (REG_SZ) ProductVersion can be used as: “Windows 10” “Windows 11” TargetReleaseVersion: setting value to 1 means we are locking / enabling the OS version upto a specific OS Build /version. TargetReleaseVersionInfo: setting up the version such as “21H1”, “21H2” etc. This can be achieved through Group Policy as well: Navigate to Local computer policy > Computer configuration > Administrative models > Windows components > Windows update > Windows Update for Business (newer name: Manage updates offered from Windows Update) Select the target feature upgrade version to Enabled Set Which Windows product version would you like to receive feature updates for? - "Windows 10" Target Version for Feature Updates: 21H2
  25. Microsoft has recently announced this during Ignite 2021 event: Deploying Driver update and Firmware will be possible through Intune, which is right now in Private Preview, hence only available for few customers only who wants to get enrolled for Private Preview. Microsoft is planning for Public Preview in Spring 2022. This new feature will give admins opportunity to deploy latest drivers & firmware released by vendors & OEM Manufacturer. For more information, check the link : https://techcommunity.microsoft.com/t5/windows-it-pro-blog/a-data-driven-approach-to-managing-devices-in-your-organization/ba-p/2932082
  1. Load more activity
  • Create New...