SCCM Software Update Point (SUP) automated install via PowerShell

Automation is always good in large or small organizations to minimize error and remove the tediousness of repetitive tasks. This script will install the Software Update Point (SUP) role on one or multiple site system servers in their assigned site. This script will run the following task Check if the site server and admin domain … Continue reading SCCM Software Update Point (SUP) automated install via PowerShell →

Intune – “Conditional Access, Terms of Use and The Company Portal”

The Issue We recently had an issue where we tried to use the Conditional Access setting and only granting Terms of Use for an Android Device Enrollment. The Investigation What happens now is as described in our docs article Terms of use - Azure Active Directory | Microsoft Docs - The authenticator app installs... Why … Continue reading Intune – “Conditional Access, Terms of Use and The Company Portal” →

Microsoft Endpoint Manager – “Defeating Vulnerability Scans”

The Issue In Operations you may get approached by your Security Team from time to time to help them close new Vulnerabilities that have been identified after a Vulnerability Scan was run. It might look like the below and contain a list of Vulnerabilities that need to be addressed. The Investigation If you are lucky … Continue reading Microsoft Endpoint Manager – “Defeating Vulnerability Scans” →

Cloud Management Gateway Troubleshooting Deepdive HTTP/1.1 500 CMGConnector_InternalServerError

Before starting into the troubleshooting part, let me just give you an overview of my lab environment: 1 Primary site TP2005 upgraded to TP2006Management Point in HTTPS modePublic SSL Cert on the CMGClient are Hybrid/and AAD joined Scenario: Co-Management over CMG was working fine until I upgraded to TP2006... After the upgrade clients on the … Continue reading Cloud Management Gateway Troubleshooting Deepdive HTTP/1.1 500 CMGConnector_InternalServerError →

Microsoft Endpoint Manager – “Ultimate Environment”

Intro I really love building solutions that contain a vast variety of the tools you could ever want or need to do your job. This may be a bit excessive and you might end up with tools you only click once in a blue moon. Never-the-less if you are a Configuration Manager Admin and also … Continue reading Microsoft Endpoint Manager – “Ultimate Environment” →

ConfigMgr\MEM 101: Advanced Performance Troubleshooting Part 2

As mentioned in Part 1 of this series, there are multiple different causes for performance issues on ConfigMgr servers.We have had a look at SQL Troubleshooting here and Inbox troubleshooting in the previous post. What we have failed to look at however, is on the day-to-day management and housekeeping of ConfigMgr, namely Collections Collections are … Continue reading ConfigMgr\MEM 101: Advanced Performance Troubleshooting Part 2 →

Microsoft Edge: Deploy with Intune

COVID-19 has in many ways changed the way we work and how IT departments manage users and devices. With remote work continuing for the unforeseeable future, I decided to write this article to demonstrate how easy it is to deploy the new Microsoft Edge browser on Windows 10 and macOS using Microsoft Intune.