Your browser (Internet Explorer 6) is out of date. It has known security flaws and may not display all features of this and other websites. Learn how to update your browser.
X
Aside

Hotfix: ConfigMgr 1511 and Mac Management

The bug I previously blogged about has been addressed in a hotfix. It’s also confirmed to be fixed in the upcoming 1602 release when that goes live. This only affects you if you are using native Mac management and also using Intune in a hybrid environment.

Read about and download the hotfix here.

Aside

ConfigMgr: 1511 Clients for Additional OS’s

It’s a little difficult to find the download link for the additional clients for ConfigMgr. There are new versions that you will need for 1511 versus ConfigMgr R2.

Download the new versions here.

Aside

Table of Contents: Windows 10 + EMS & ConfigMgr

Great post over on the TechNet Blogs. 

Some posts are already published, others are coming, either way, it’s a great resource and I recommend you check it out!

Aside

ConfigMgr: Windows 7 32-bit and Software Updates

Pretty nasty bug out there right now with 32-bit Windows 7 and Software Updates.  If you are struggling with getting your clients to download/install updates.  Check your WindowsUpdate.log, if you see the following error:

WARNING: ISusInternal::GetUpdateMetadata2 failed, hr=8007000E

Then I’d strongly encourage you to apply the following KB/Hotfix (KB3050265). 

Here is also a great article explaining what is going on from the ConfigMgr Team Blog.  Read that article here.

After applying this update in my client environment, patches immediately started working again.

Aside

ConfigMgr: ConfigMgr 2012 R2 SP1 and ConfigMgr 2012 SP2 Now Available

SP1/SP2 for ConfigMgr 2012 has been released.

Read more from the ConfigMgr Team Blog here.

Following the announcements made at the Microsoft Ignite conference last week, we are happy to let you know that System Center 2012 R2 Configuration Manager SP1 and System Center 2012 Configuration Manager SP2 are now generally available and can be downloaded on the Microsoft Evaluation Center. These service packs deliver full compatibility with existingfeatures for Windows 10 deployment, upgrade, and management.

Also included in these service packs are new hybrid features for customers using System Center Configuration Manager integrated with Microsoft Intune to manage devices. Some of the hybrid features that you can expect to see are conditional access policy, mobile application management, and support for Apple Device Enrollment Program (DEP). You can view the full list of hybrid features included in these service packs here.

Below are a few additional links that you may find helpful as you begin to explore these new releases.

Aside

ConfigMgr/Intune: Ignite 2015 Sessions

Here are the sessions of note for Ignite 2015 around Configuration Manager and Microsoft Intune. Links to Channel9 to watch the recording are below.

Managing Windows 10 with Microsoft Intune and System Center Configuration Manager

Excited about the new Windows 10 features? We are as well! Join this session to learn about how Microsoft Intune and System Center Configuration Manager are going to support and enhance new features coming in Windows 10.

What’s New and Upcoming with Microsoft Intune and System Center Configuration Manager

This session outlines the latest enhancements in enterprise mobility management using Microsoft Intune and System Center Configuration Manager. See the newest Microsoft Intune improvements for managing mobile productivity without compromising compliance, and learn about the futures of Microsoft Intune and Configuration Manager, including new Windows 10 management scenarios.

Managing Your Datacenter with Microsoft System Center Configuration Manager

Is deploying, updating, and maintaining configuration compliance still a challenge in your datacenter environment? Join this session to learn how System Center Configuration Manager along with the other components of System Center can make your life easier by addressing these common challenges. We share with you lessons learned from customer deployments, common industry practices, and provide insights into what is coming in the future.

What’s New with OSD in System Center Configuration Manager and the Microsoft Deployment Toolkit

This session covers future improvements for deployment and upgrade in the next versions of System Center Configuration Manager, Microsoft Deployment Toolkit (MDT), and Windows. Learn how Microsoft is gearing up to make the deployment and upgrade of the next version of Windows using Configuration Manager or MDT the easiest yet.

Configuring Corporate-Owned Mobile Devices with Microsoft Intune

Not all mobile devices are personally owned. Often, corporations own the devices and issue them to end users. It’s up to the IT Pro to configure these devices. Intune makes it easy for IT Pros to provision, configure, and manage corporate-owned devices. In this session, learn how to use Apple Configurator to bulk-enroll iOS devices, how to tightly control device usage, and how to pre-provision apps and policies to devices. We walk you through how Microsoft Intune enables IT Pros to keep devices secure and managed, while enabling end users to be productive.

Evolving Mobile Application Management for BYOD Devices with Microsoft Intune

Protecting company assets on mobile devices will continue to grow as a crucial challenge to IT in 2015. In this session, you’ll see the latest advancements in Microsoft Intune’s Mobile Application Management solution. The focus will be on two differentiating technologies: first, enforcing application management for specific identities to ensure company assets are protected and personal assets remain under user control; and second, enabling application-level data protection independent of MDM. This session will include both a discussion of the features and capabilities as well as a demonstrations of these scenarios in key Microsoft applications.

Deep Dive on Android and iOS Device Management with Microsoft Intune

Do you manage Apple devices in an enterprise or educational environment? How about Android? Do you think they’re fully secured? Think again. In this deep dive session we will provide insights into managing mobile devices using Microsoft Intune and the MDM channel. This session will dive into advanced topics like Supervised mode, Apple Configurator, jailbreak detection as well as new Android features. We will also provide a first glimpse into managing Mac OS X devices using the modern MDM functionality of Microsoft Intune, rounding out Intune support for every major platform.

Configuring Corporate-Owned Mobile Devices with Microsoft Intune

Not all mobile devices are personally owned. Often, corporations own the devices and issue them to end users. It’s up to the IT Pro to configure these devices. Intune makes it easy for IT Pros to provision, configure, and manage corporate-owned devices. In this session, learn how to use Apple Configurator to bulk-enroll iOS devices, how to tightly control device usage, and how to pre-provision apps and policies to devices. We walk you through how Microsoft Intune enables IT Pros to keep devices secure and managed, while enabling end users to be productive.

Building Out a Successful Microsoft Intune Pilot

Are you planning to pilot or deploy Microsoft Intune and looking for straight forward technical guidance to help you accelerate these efforts? Please join the Intune Engineering Customer Acceleration Team as they share their extensive Intune implementation experience working with customers from all over the world. During this session the team will share their experiences, covering the end to end implementation process, from planning, architecture, deployment and management. At the end of this session you will have everything you will need to successfully deploy Intune in your environment, even if you have no prior knowledge or experience with Intune.

Evolving Mobile Application Management for BYOD Devices with Microsoft Intune

Protecting company assets on mobile devices will continue to grow as a crucial challenge to IT in 2015. In this session, you’ll see the latest advancements in Microsoft Intune’s Mobile Application Management solution. The focus will be on two differentiating technologies: first, enforcing application management for specific identities to ensure company assets are protected and personal assets remain under user control; and second, enabling application-level data protection independent of MDM. This session will include both a discussion of the features and capabilities as well as a demonstrations of these scenarios in key Microsoft applications.

Device and Data Protection with Mobile Device Management in Office 365

In this session we dive deep into mobile device and data management for Office 365. This includes our new MDM for Office 365 feature and application management with Microsoft Intune. Both of these features now include conditional access to Office 365 data so you can protect Office 365 content on any device with ease!

Aside

Ignite Keynote Summary/Links

Aside

ConfigMgr: Support for Windows 10

Read the original post here.

Today we are making available the System Center Configuration Manager and System Center Endpoint Protection Technical Preview. In this preview, you will get an early glimpse of the functionality that we are planning to release in Q4 of this calendar year, bringing with it full support for client deployment, upgrade, and management of Windows 10.

New features in today’s Technical Preview include:

  • Support for Windows 10 upgrade with OS deployment task sequence – In addition to providing support for existing wipe-and-load (refresh) scenarios, the ConfigMgr Technical Preview includes enhanced upgrade support with in-place upgrade to Windows 10.
  • Support for installing Configuration Manager on Azure Virtual Machines – Similar to how you can install ConfigMgr on Hyper-V today, you can now run ConfigMgr in Azure VMs. This provides flexibility to move some or all of your datacenter server workloads to the cloud with Azure.
  • Ability to manage Windows 10 mobile devices via MDM with on-premises Configuration Manager infrastructure – With this new option, you can manage Windows 10 mobile devices using ConfigMgr integrated with Microsoft Intune (hybrid) without the need to store your data in the cloud. This is especially helpful for managing devices that are unable to connect to the Internet such as Windows IoT/Embedded devices. So go ahead and try it out – you can enroll devices, set policies, and wipe/retire devices today with more functionality to be added in the future to manage all of your Windows 10 devices with MDM.

Next week, we will also be releasing service packs for Configuration Manager 2012 and 2012 R2 customers. These will deliver full compatibility with existing features for Windows 10 deployment and management as well as several other features, including:

  • App-V publishing performance – Improved performance that reduces the time required for apps to display after the first logon for non-persistent VDI environments.
  • Scalability improvements – Increased hierarchy scale to 600K and primary/standalone site scale to 150K.
  • Content distribution improvements – Improved data transfer reliability for slow and latent networks, and also improved scale and performance for pull distribution points (DP).
  • Native support for SQL Server 2014 – Added native support for SQL Server 2014 to enable site installation and recovery using SQL Server 2014.
  • Hybrid features – Added a large number of hybrid features for customers using ConfigMgr integrated with Microsoft Intune (hybrid). Some of the features that you can expect to see in this release include conditional access policy, mobile application management, and support for Apple Device Enrollment Program (DEP).

Finally, we also plan to deliver:

  • System Center Configuration Manager 2007 (SP2, R2, and R3) support for the management of Windows 10 is coming via a compatibility pack in Q4 2015 (Note: OS and client deployment will not be supported).
  • An update for the Microsoft Deployment Toolkit (MDT) in Q3 2015 that will deliver support for Windows 10.

This is a really big year for Configuration Manager. We’re excited about making these releases available to you and look forward to providing you best-in-class management for Windows 10 with System Center Configuration Manager.

Aside

Reducing Windows Deployment Time Using Power Management

Great post over on The Deployment Guys blog. 

Read the full post here.

The following post was contributed by Benjamin Rampe a Senior PFE working for Microsoft.

While studying up on Windows 10, I came across a technique that has been shown to reduce the time it takes to apply an OS WIM to disk by 20 – 50%*.  That’s a fairly significant savings in time and the implementation of this technique is relatively easy and does not require you to change how you deploy Windows.  Believe it or not, the savings come from adjusting the OS power management settings during a deployment.  While there are multiple ways to implement these power management settings, below I’ve outlined what I consider the most non-intrusive to existing deployment methods.

Aside

ConfigMgr: Excluding Known Multi-Reboot Updates During a ZTI Deployment

Here is a fantastic post by Cliff Jones (Microsoft Consulting Services) with a great solution to address the ever cumbersome multiple issue while executing a Task Sequence. 

Read the full post here.

Today’s blog post goes behind the scenes to talk about how to prevent installing all published Windows Update’s which require multiple reboots to successfully install, during a ZTI deployment Task Sequence. These updates can cause issues as a result of the following behavior; the Task Sequence engine is aware the update requests the initial reboot. Upon boot-up, the Task Sequence engine never initializes and therefore can’t be aware that the same update is requiring a second reboot, and thus finally won’t make the necessary changes to restart the TS engine again. When the second reboot occurs, during the deployment, the TS will be in an erroneous state, and will cause an error similar to:

"Task Sequence environment not found"

Ideally, these updates should be injected using DISM during the Offline phase of installation, or added during the Build and Capture as the LTI process is not affected by these updates. Either way, a detection and blocking mechanism is needed for your ZTI deployment process.