Your browser (Internet Explorer 6) is out of date. It has known security flaws and may not display all features of this and other websites. Learn how to update your browser.
X
Aside

ConfigMgr: Now Available 1602

This update includes the following improvements:

  • Client Online Status: You can now view the online status of devices in Assets and Compliance. New icons indicate the status of a device as online or offline.
  • Support for SQL Server AlwaysOn Availability Groups: Configuration Manager now supports using SQL Server AlwaysOn Availability Groups to host the site database.
  • Windows 10 Device Health Attestation Reporting: You can now view the status of Windows 10 Device Health Attestation in the Configuration Manager console to ensure that the client computers have a trustworthy BIOS, TPM, and boot software.
  • Office 365 Update Management: You can now natively manage Office 365 desktop client updates using the Configuration Manager Software Update Management (SUM) workflow. You can manage Office 365 desktop client updates just like you manage any other Microsoft Update.
  • New Antimalware Policy Settings: New antimalware settings that can now be configured include protection against potentially unwanted applications, user control of automatic sample submission, and scanning of network drives during a full scan.

This update also includes new features for customers using System Center Configuration Manager integrated with Microsoft Intune. Some of the features that you can expect to see are:

  • Conditional Access for PCs Managed by Configuration Manager: You can now use conditional access capabilities to help secure access to Office 365 and other services on PCs managed with Configuration Manager agent. Conditions that can be used to control access include: Workplace Join, BitLocker, Antimalware, and Software Updates.
  • Windows 10 Conditional Access Enhancements: For Windows 10 devices that are managed through the Intune MDM channel, you can now set and deploy an updated Compliance Policy that includes additional compliance checks and integration with Health Attestation Service.
  • Microsoft Edge Configuration Settings: You can now set and deploy Microsoft Edge settings on Windows 10 devices.
  • Windows 10 Team Support: You can now set and deploy Windows 10 Team configuration settings.
  • Apple Volume Purchase Program (VPP) Support: You can now manage and deploy applications purchased through the Apple Volume Purchase Program for Business portal.
  • iOS App Configuration: You can now create and deploy iOS app configuration policies to dynamically change settings such as server name or port for iOS applications that support these configurations.
  • iOS Activation Lock Management: New capabilities include enabling iOS Activation Lock management, querying for the status, retrieving bypass codes, and performing an Activation Lock bypass on corporate-owned iOS devices.
  • Kiosk Mode for Samsung KNOX Devices: Kiosk mode allows you to lock a managed mobile device to only allow certain apps and features.
  • User Acceptance of Terms and Conditions: You can now see which users have or have not accepted the deployed terms and conditions.

And there is more! To view the full list of new features in this update and to learn more about the new functionality, see What’s new in version 1602 of Configuration Manager on TechNet.

Aside

Hotfix: ConfigMgr 1511 and Mac Management

The bug I previously blogged about has been addressed in a hotfix. It’s also confirmed to be fixed in the upcoming 1602 release when that goes live. This only affects you if you are using native Mac management and also using Intune in a hybrid environment.

Read about and download the hotfix here.

Aside

Gotcha: ConfigMgr 1511 and Mac Management

Little bit of a bug with System Center Configuration Manager current branch (1511) when you are using Microsoft Intune in a hybrid configuration and also are using native Mac management (HTTPS/PKI). 

If you are managing Mac’s through MDM (supported with 1511 and Intune hybrid) then this would not apply to you.

If you have a Terms & Conditions policy created, then your Mac devices will not finish enrolling properly. Unfortunately, the T&C doesn’t even need to be deployed, the policy just needs to exist.  You will be able to install the Mac client and complete the enrollment process, however the Mac devices will never show up in the ConfigMgr console.  It appears to an issue in processing the mobile policies (as Mac devices are treated as mobile devices). 

By deleting the Terms and Conditions, your Mac devices will finish enrolling and will show up in the console shortly there-after. 

Aside

ConfigMgr: 1511 Clients for Additional OS’s

It’s a little difficult to find the download link for the additional clients for ConfigMgr. There are new versions that you will need for 1511 versus ConfigMgr R2.

Download the new versions here.

Aside

Table of Contents: Windows 10 + EMS & ConfigMgr

Great post over on the TechNet Blogs. 

Some posts are already published, others are coming, either way, it’s a great resource and I recommend you check it out!

Aside

ConfigMgr: Windows 7 32-bit and Software Updates

Pretty nasty bug out there right now with 32-bit Windows 7 and Software Updates.  If you are struggling with getting your clients to download/install updates.  Check your WindowsUpdate.log, if you see the following error:

WARNING: ISusInternal::GetUpdateMetadata2 failed, hr=8007000E

Then I’d strongly encourage you to apply the following KB/Hotfix (KB3050265). 

Here is also a great article explaining what is going on from the ConfigMgr Team Blog.  Read that article here.

After applying this update in my client environment, patches immediately started working again.

Aside

ConfigMgr: ConfigMgr 2012 R2 SP1 and ConfigMgr 2012 SP2 Now Available

SP1/SP2 for ConfigMgr 2012 has been released.

Read more from the ConfigMgr Team Blog here.

Following the announcements made at the Microsoft Ignite conference last week, we are happy to let you know that System Center 2012 R2 Configuration Manager SP1 and System Center 2012 Configuration Manager SP2 are now generally available and can be downloaded on the Microsoft Evaluation Center. These service packs deliver full compatibility with existingfeatures for Windows 10 deployment, upgrade, and management.

Also included in these service packs are new hybrid features for customers using System Center Configuration Manager integrated with Microsoft Intune to manage devices. Some of the hybrid features that you can expect to see are conditional access policy, mobile application management, and support for Apple Device Enrollment Program (DEP). You can view the full list of hybrid features included in these service packs here.

Below are a few additional links that you may find helpful as you begin to explore these new releases.

Aside

ConfigMgr/Intune: Ignite 2015 Sessions

Here are the sessions of note for Ignite 2015 around Configuration Manager and Microsoft Intune. Links to Channel9 to watch the recording are below.

Managing Windows 10 with Microsoft Intune and System Center Configuration Manager

Excited about the new Windows 10 features? We are as well! Join this session to learn about how Microsoft Intune and System Center Configuration Manager are going to support and enhance new features coming in Windows 10.

What’s New and Upcoming with Microsoft Intune and System Center Configuration Manager

This session outlines the latest enhancements in enterprise mobility management using Microsoft Intune and System Center Configuration Manager. See the newest Microsoft Intune improvements for managing mobile productivity without compromising compliance, and learn about the futures of Microsoft Intune and Configuration Manager, including new Windows 10 management scenarios.

Managing Your Datacenter with Microsoft System Center Configuration Manager

Is deploying, updating, and maintaining configuration compliance still a challenge in your datacenter environment? Join this session to learn how System Center Configuration Manager along with the other components of System Center can make your life easier by addressing these common challenges. We share with you lessons learned from customer deployments, common industry practices, and provide insights into what is coming in the future.

What’s New with OSD in System Center Configuration Manager and the Microsoft Deployment Toolkit

This session covers future improvements for deployment and upgrade in the next versions of System Center Configuration Manager, Microsoft Deployment Toolkit (MDT), and Windows. Learn how Microsoft is gearing up to make the deployment and upgrade of the next version of Windows using Configuration Manager or MDT the easiest yet.

Configuring Corporate-Owned Mobile Devices with Microsoft Intune

Not all mobile devices are personally owned. Often, corporations own the devices and issue them to end users. It’s up to the IT Pro to configure these devices. Intune makes it easy for IT Pros to provision, configure, and manage corporate-owned devices. In this session, learn how to use Apple Configurator to bulk-enroll iOS devices, how to tightly control device usage, and how to pre-provision apps and policies to devices. We walk you through how Microsoft Intune enables IT Pros to keep devices secure and managed, while enabling end users to be productive.

Evolving Mobile Application Management for BYOD Devices with Microsoft Intune

Protecting company assets on mobile devices will continue to grow as a crucial challenge to IT in 2015. In this session, you’ll see the latest advancements in Microsoft Intune’s Mobile Application Management solution. The focus will be on two differentiating technologies: first, enforcing application management for specific identities to ensure company assets are protected and personal assets remain under user control; and second, enabling application-level data protection independent of MDM. This session will include both a discussion of the features and capabilities as well as a demonstrations of these scenarios in key Microsoft applications.

Deep Dive on Android and iOS Device Management with Microsoft Intune

Do you manage Apple devices in an enterprise or educational environment? How about Android? Do you think they’re fully secured? Think again. In this deep dive session we will provide insights into managing mobile devices using Microsoft Intune and the MDM channel. This session will dive into advanced topics like Supervised mode, Apple Configurator, jailbreak detection as well as new Android features. We will also provide a first glimpse into managing Mac OS X devices using the modern MDM functionality of Microsoft Intune, rounding out Intune support for every major platform.

Configuring Corporate-Owned Mobile Devices with Microsoft Intune

Not all mobile devices are personally owned. Often, corporations own the devices and issue them to end users. It’s up to the IT Pro to configure these devices. Intune makes it easy for IT Pros to provision, configure, and manage corporate-owned devices. In this session, learn how to use Apple Configurator to bulk-enroll iOS devices, how to tightly control device usage, and how to pre-provision apps and policies to devices. We walk you through how Microsoft Intune enables IT Pros to keep devices secure and managed, while enabling end users to be productive.

Building Out a Successful Microsoft Intune Pilot

Are you planning to pilot or deploy Microsoft Intune and looking for straight forward technical guidance to help you accelerate these efforts? Please join the Intune Engineering Customer Acceleration Team as they share their extensive Intune implementation experience working with customers from all over the world. During this session the team will share their experiences, covering the end to end implementation process, from planning, architecture, deployment and management. At the end of this session you will have everything you will need to successfully deploy Intune in your environment, even if you have no prior knowledge or experience with Intune.

Evolving Mobile Application Management for BYOD Devices with Microsoft Intune

Protecting company assets on mobile devices will continue to grow as a crucial challenge to IT in 2015. In this session, you’ll see the latest advancements in Microsoft Intune’s Mobile Application Management solution. The focus will be on two differentiating technologies: first, enforcing application management for specific identities to ensure company assets are protected and personal assets remain under user control; and second, enabling application-level data protection independent of MDM. This session will include both a discussion of the features and capabilities as well as a demonstrations of these scenarios in key Microsoft applications.

Device and Data Protection with Mobile Device Management in Office 365

In this session we dive deep into mobile device and data management for Office 365. This includes our new MDM for Office 365 feature and application management with Microsoft Intune. Both of these features now include conditional access to Office 365 data so you can protect Office 365 content on any device with ease!

Aside

ConfigMgr: Cumulative Update 5 Released

CU5 has been released for ConfigMgr 2012. There are quite a few fixes in this latest update.

https://support.microsoft.com/en-us/kb/3054451

Aside

Ignite Keynote Summary/Links