Your company's ad could live here and reach over 50,000 people a month!

Author: mark.serafine

Integrating Device Guard and Credential Guard H/W Readiness Tool w/ConfigMgr

Microsoft’s DG/CG Hardware Readiness Tool is a Windows PowerShell script that needs to run with elevated permissions, and it is designed to not only evaluate Windows 10 (and Windows Server 2016) devices to determine if they’re capable of using these two security features, but also enable them. The tool can be downloaded here: Microsoft Device Guard and Credential Guard Hardware Readiness Tool It c...

SCCM – A “Ringed” Deployment Approach to Update Servicing

System Center Configuration Manager – Update Servicing This guide is the result of a collaborative effort to help organizations make the most of using System Center Configuration Manager to effectively manage Microsoft’s new update servicing model by using a “ringed” deployment approach. As the document explains, the ringed approach allows enterprises to minimize the potent...

ICYMI: Windows 10 Servicing with Language Packs Using SCCM (current branch)

Niall Brady has written up a very informative and detailed blog article about using Configuration Manager current branch to service Windows 10 installations that are using language packs. This is the latest in a list of step-by-step  “guides” that he has been creating for ConfigMgr CB, which I recommend that you check on a regular basis for new content. With the increased footprint of ...

ConfigMgr: Identifying Win10 Credential Guard Hardware Requirements

HP-InstrumentedBIOS  – OMCI_SMS_DEF – TPM Using Microsoft Windows 10 (Enterprise), organizations can now take advantage of a new technology called Credential Guard, which isolates certain types of sensitive data so that only privileged system software can access it. As a result, credential theft attacks (Pass-the-Hash, Pass-The-Ticket, etc.) are prevented by protecting NTLM password ha...

In Case You Missed it: Hotfix for Win10 (1511) ADK and WinPE Initialization Released

A hotfix for an issue that many users have been experiencing with the 1511 Windows 10 ADK boot images was recently released. Windows PE boot images don’t initialize in System Center Configuration Manager As stated in the KB article: ..you receive the following error message during the “Initializing hardware devices” phase: Windows PE initialization failed with error code 0x80220014. And the ...

ConfigMgr CB (Software Updates) – Run WSUS Cleanup Wizard Setting (behind the scenes)

When an administrator, using Configuration Manager current branch, checks the box for the Run WSUS cleanup wizard setting in the SUP component’s properties (Supersedence Rules tab), it sets the Call WSUS Cleanup property for the WsyncMgr component to 1 (SC_Component_Property table). The frequency for this setting is 30 days. There are also a couple of registry values for the WSyncMgr component tha...

Forefront Endpoint Protection – Synchronization of Definition Update Releases with WSUS/ConfigMgr

The following information can be used to reduce delays between the release of new FEP definition releases, and when the new definitions are available to WSUS/Configuration Manager. Delta FEP Definitions Released daily (every 8 hours) via Windows Update and WSUS at: 3 AM (EST) 11 AM (EST) 7 PM (EST)   Rebased FEP Definitions Released once a month. (“Patch Tuesday”) Includes antivirus and antis...

Configuration Manager (1511) – SMSPXE.log: “Failed to retrieve version of the file…Error code: 0x80004005”

While working on my lab, I saw smspxe.log errors like the one in the title for the Configuration Manager 1511 release that was recently made public, and since I noticed others reporting the same errors in the log of their 1511 builds, I wanted to post this quick FYI explanation about them. These errors seem to be occurring in the log on sites with PXE-enabled distribution points as well as those w...

Configuration Manager as-a-Service and Windows 10 Servicing Options

System Center Configuration Manager (as-a-Service) (Update: Additional detail about the three data collection levels (Basic, Enhanced and Full) has been added.) This PowerPoint show (above) is a consolidated resource of the key concepts and requirements about the new ConfigMgr and Win10 servicing options. While the information in the slides is publicly available, the details aren’t in a sing...