How to Set AD Security Rights for the System Management Container

By Garth Jones Once the System Management container exists you can apply permissions to it; it doesn’t matter how the container was originally created (see my blog post from yesterday). When applying permissions to the System Management container, I recommend using a security group. If you are not using a security group for your server(s), then instead use your server...

Read More»

Creating the System Management Container

By Garth Jones There are two schools of thought about the best way to create the System Management container. The first school of thought recommends that the Active Directory (AD) Administrator creates the System Management container and then permissions are applied to it. However, it is the second school of thought which I prefer. In this option, the AD Administrator...

Read More»

A Simple Way to Extend the AD Schema for Configuration Manager

By Garth Jones Recently I was asked about how to extend the Active Directory (AD) schema for System Center Configuration Manager. The answer is actually quite simple: use Extadsch.exe. Yes, you can extend the AD schema the hard way and use the native LDIF files (.ldf), but why would you? Below are the easy steps you’ll need to take, and...

Read More»

SCCM 2012 R2 – Driver Packages (Specific driver packages to specific devices)

Players, When it comes to driver packages and deploying Windows to multiple hardware variants using the same task sequence, every man and his dog has a way of doing it. Some of us like to be precise and other don’t mind how this is configured as long as all the drivers are on the DP and they get onto machines one way or another … So, lets pretend that we want to be a little more specific with drivers and we don’t like “Auto Deploy” as we have taken the time to create individual driver packages for each hardware variant. Here is some guidance on how to deploy specific driver packages to specific devices via the task sequence. 1. We need to know what the model name is for the specific machine/s first. So open command prompt (or PowerShell if you want to look cool) and type WMIC Computersystem GET Model you should get…

Read the complete blog: http://thedesktopteam.com/blog/heinrich/sccm-2012-r2-driver-packages-specific-driver-packages-to-specific-devices/

Read More»

Downloading Google Chrome (MSI format)

Hi All, out there, there are many people that are deploying google chrome for their environment and until few months ago, you could download the MSI format from https://www.google.com/intl/en/chrome/browser/thankyou.html?msi=true, however, this is not possible anymore. Even the link says MSI=True, when you download it download the ChromeSetup.exe. I noticed that there are many people complaining this with Google, but nothing has been done, so, i discovered a trick (and it is really simple) 1st, go to https://www.google.com/intl/en/chrome/browser/thankyou.html?msi=true and copy the link from “click here to retry” you’ll get something like https://dl.google.com/tag/s/appguid%3D%7B8A69D345-D564-463C-AFF1-A69D9E530F96%7D%26iid%3D%7B7ACD904C-E309-ADA4-8671-783B10D723FD%7D%26lang%3Den%26browser%3D4%26usagestats%3D0%26appname%3DGoogle%2520Chrome%26needsadmin%3Dprefers%26installdataindex%3Ddefaultbrowser/update2/installers/ChromeSetup.exe now, what you need to do is change the prefers%26installdataindex%3Ddefaultbrowser/update2/installers/ChromeSetup.exe for prefers/edgedl/chrome/install/GoogleChromeStandaloneEnterprise.msi so, your link will now look like https://dl.google.com/tag/s/appguid%3D%7B8A69D345-D564-463C-AFF1-A69D9E530F96%7D%26iid%3D%7B7ACD904C-E309-ADA4-8671-783B10D723FD%7D%26lang%3Den%26browser%3D4%26usagestats%3D0%26appname%3DGoogle%2520Chrome%26needsadmin%3Dprefers/edgedl/chrome/install/GoogleChromeStandaloneEnterprise.msi now, download the MSI format and deploy it using SCCM

Read the complete blog: http://thedesktopteam.com/blog/raphael/downloading-google-chrome-msi-format/

Read More»

Hotfix extends client notification in System Center 2012 R2 Configuration Manager to MDM devices

Players, I had a bit of a panic induced call from a former client this morning because it took to long time to wipe a device from SCCM. Luckily there is a hotfix for this. He applied it and … as if my magic, the issue went away, we were unable to test this on Android devices, but his iOS and Windows 8.1 devices were all wiping a lot faster. Prerequisites To apply this hotfix, you must have CU3 for System Center 2012 R2 Configuration Manager installed. Restart information You do not have to restart the computer after you apply this hotfix. Hotfix can be found here http://support2.microsoft.com/kb/2990658/en-us Enjoy @Heinrich_Pelser

Read the complete blog: http://thedesktopteam.com/blog/heinrich/hotfix-extends-client-notification-in-system-center-2012-r2-configuration-manager-to-mdm-devices/

Read More»

SCCM 2012 R2 – Visual Studio 2013

Hi All, have you ever tried to install Visual Studio 2013 with SCCM 2012 R2? Well, a client of mine tried and it failed. the error he was getting was to install the user running the installer to the group Performance Log users. as you can imagine, the user running the action is SYSTEM… i have tested it with VS2012 Update 2 and the installer worked fine, and back in the company, we downloaded the new version (Update 3) and it was failing. once i did another test with Update 3 at home, it failed. because this, we had to create a script using psexec to be able to install the VS, but what does this script do? Simple, it create a local user and add it on the local administration group. it execute the vs installer via psexec as the created user once the installer is done, it removes…

Read the complete blog: http://thedesktopteam.com/blog/raphael/sccm-2012-r2-visual-studio-2013/

Read More»

Disable First Logon Animation in Windows 8.1 (SCCM 2012 and MDT)

Players, I thought I’d share this simple little tip to disable that annoying “Hi” screen when you login for the first time after a fresh build. You know this screen …  I created a registry key to disable the animation when you first login and added it to my task sequence as a package. Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] “EnableFirstLogonAnimation”=dword:00000000 The command line that I used was a follows … regedit.exe /S Disable_First_Run_Animation.reg And if you want to disable this via GPO – you can change these settings to disable the message once you’re on the domain: Computer Configuration\Administrative Templates\System\Logon\Show first sign-in animation Enjoy. H  

Read the complete blog: http://thedesktopteam.com/blog/heinrich/disable-first-logon-animation-in-windows-8-1-sccm-2012-mdt-heinrich_pelser/

Read More»

SCCM 2012 R2 – Supported Hardware checks in Task Sequence

Players, Deploying Windows has fed my kids and put a roof over my head for a few years so its safe to say that I take it seriously. Sometimes I like to automate things and try to find the simplest way of doing stuff where possible. I don’t cut corners however. Never. But recently I’ve found a few who do. A few engineers I worked with (for a client) were specifically instructed to only build HP machines. I stress again ONLY HP. The reasons were political, but they chose to ignore this as they had all the drivers for their laptops, they continued to use the single task sequence and build just about anything they had drivers for. Needless to say, the managers were pissed off and they wanted to simply remove the task sequence and instructed me to create another, ready for production in 2 hours … Simple you say?…

Read the complete blog: http://thedesktopteam.com/blog/heinrich/heinrich_pelser-sccm-2012-r2-supported-hardware-checks-in-task-sequence/

Read More»