All Activity

We are asked to create a windows gold and Master image at school and wanted to know what could be the best applications or short cuts to have installed on my vm images?

hi @shintest, i'm working on it just now so plan on releasing yet another release soon, please stay tuned !

Hello @anyweb, First of all, I really want to thank you for the amazing blog and the youtube video, it has been really helpful Is the updated code up for download? I've been waiting for it for a while and would be really glad if you could post something about it. Thnx

yes, it's in part 2, step 6 of the guide

Sorry, I still could not locate that specific info in part 1. Do you mind sharing screenshot of the part that actually controls this mechanism ? Thanks in advance.

in the blog post you'll see it's deployed to 'autopilot users' that can be whatever users you want, it's up to you who get's this behaviour (or not)

Hi, thanks for the nice post. Just a question that if this is going to do for all Autopilot provisioning (all deployment profiles) happening within the tenant ? If yes, then is there a way that we control this to happen for specific Autopilot Deployment Profiles ?

Hello there, we are currently on Config Manager Version 2309. We have a CAS and multiple Primary Sites. For each Primary Site / Location we have mostly the same Windows Installation, only Domain Join and maybe device drivers are different. The Config for each Primary Site is the same, only one Primary Site is SSL enabled and can communicate with our Cloudpoint. Within on Primary Site / Location (which is not the SSL one) we have a problem installing clients in our second domain. This primary site is for two networks, one "Administration" network and one for our students (second domain), so different domain but everything else within Tasksequenz is the same. Domain Join works, Clients are communicating with the primary site and everything seems to work fine. After installing and configuration of the Config Manager clients on these clients the windows installation should go on with installing software and perform scripts and things. The installation of software is not working with generic error, so we enabled to go on. Installation goes on and goes into error 0x80070002 while trying to access a network path to execute a script. As far as I can see within the log the problem is not the permission of the user or that he can't reach it (the user is the same on all locations and is working in second domain). The user is also within configuration of the MP / Software Distribution as Network Access Account. It seems that he suddenly can't find the package/tasksequence - I see within "ClientLocation.log" that the client has the correct MP assigned and is in Intranet. Suddenly this changes to "Client is in Internet" and "Current Internet Management point is <empty>". This site has no Internet activation yet so I'm wondering why these clients are switching? It happens within 4 of 5 Installation, so 1 Client is not switching automatically in this network. Within the other network at the same primary site everything works perfect. Where can I see why they are changing to Internet? They are permanent on LAN. Where can I set that they should only use Intranet (and why do I have to do this only for this site and this network)? Only with this site and this network we have the problem that sometimes clients are falling out of their collections are not approved any longer, makes sense now if they are switching to Internet and have no connection to the MP anymore. EDIT: It was working properly 1 month before and we made no change as far as I know.... If anyone has any Idea or needs more information I would be glad. Thank yall in advance. Lin

Hi All I have special requirement where the offline task sequence media needs to be used to image the laptops, but in following manner: - TS media with autorun is burnt to a USB as bootable - User being logged in to the machine, if he wants to reimage the machine, he just plugin the USB and run launchmedia.bat or any other custom script. Is there any possibility to achieve the above requirement. Thank you Regards Ramesh

Hi, I am using scsm 2022 and I have create to connectors. AD connector and Exchange connector successfully. and I Have installed on my scsm 2022 a smtp Server too an configure it as smtp Server and on The Advanced The smart host, I put here my exchange Server 2019 . On The scsm 2022 I create a Notifikation Channel and put there my scsm Server as smtp Server as anonymes and Port 25 exactly Like my smtp Server. The Return e-mail, put my hekpdesk@mydomain.com if I send a e-mail now to hekpdesk@mydomain.com, I cannot See no incident on The Incident Management ——> Incident e-mail what is here wrong?

Hi, are there any alerts that can be setup so that an email is triggered when deployments or Windows Updates or Package are go out? For example: an email that would inform the users, each deployments or Windows Updates or Package has gone at X time? Regards

thanks for posting your solution so that others may learn from it

Thanks for your reply. I finally found the solution, i noticed that the boot image was not up2date, with the current client: i created a new one and now it works. Then i saw you can up date the current boot images by using the update distribution points

from you log i saw this line and a quick search brought me here https://learn.microsoft.com/en-us/troubleshoot/mem/configmgr/os-deployment/pxe-boot-not-work can you try the advice there and report back ?

Hi, I am relatively new to MECM and am having an issue with OSD via config client on all models of computers in our organization. all computers are physical computers. They are failing at applying device drivers with the following error Failed to create certificate store from encoded certificate. Verify the provided Certificate was provisioned correctly. . An error occurred during encode or decode operation. (Error: 80092002; Source: Windows) interestingly enough the usb distribution is completing successfully: attached full log I want to add what i have tried so far, to no avail: 1. according to this link: https://learn.microsoft.com/en-us/answers/questions/784791/configmanager-unable-to-perform-osd-that-starts-fr i added a command to change the registry: reg.exe add HKLM\SOFTWARE\Policies\Microsoft\TPM /v OSManagedAuthLevel /t REG_DWORD /d 2 /f before and after the apply operating system stage. 2. Rebuilt the task sequence with only basic commands why is this failing? Is there any more information that may help? one interesting difference that i noticed is that the config client osd is trying to set a client certificate however the usb osd is creating successfully a media certificate. on further investigation and working according to this blog: https://www.prajwaldesai.com/enable-sccm-enhanced-http-configuration/ I found that enhanced http is configured on the server , however even thought the certificate is found in the certlm.msc , the manager is not importing the certificate to the IIS: Referring to the difference between USB OSD and CLient Config OSD the certificates only show on the client after the USB OSD and not when using the client. The server is 2016 I have tried to restart the server, remove and re-install the configuration, also to no avail. smsts-m920.log

Hi, thank you again for help. As I show yesterday with Java issue on the left site in Web Browser, my supposition was any issue with Java, but not with Web browser. on my local machine does work fine. But as you know, Internet Explorer is not support any more. It works with IE

ok sorry for the delay in getting to the bottom of this, but after our Teams meeting I have a better understanding of your problem... first of all, in SCCM 2403 in my lab, i also do not see the Recovery Audit Report, and that is intentional as that report was moved out of SCCM in version 2002 see here > https://learn.microsoft.com/en-us/mem/configmgr/protect/deploy-use/bitlocker/view-reports#bkmk-audit and > https://www.reddit.com/r/SCCM/comments/pot0qu/bitlocker_management_recovery_audit_report_missing/?rdt=38888 so now that we know it shouldn't show up in SCCM versions greater than 2002, where do you find that report now ? the answer is below so go to your BitLocker Administration and Monitoring Website and click the Recovery Audit link, if that does nothing at all, then maybe we've found an issue. In my Technical Preview lab (2405) it does nothing. In my Current Branch 2403 lab, it does nothing in Edge, Chrome, Firefox, it looks like it trys but nada. So I tried IE. yeah I still have that installed on this server, and it prompted me with this > notice the 'only secure content is displayed' message ? after clicking Show all content I get this at this point, clicking Cancel, shows the actual report ! so i think this could be a bug, or at least an annoyance or a web browser setting that we need to 'change' to read the reports, i'll ping the Microsoft Product group and see what they say about it, if they reply i'll post back here cheers niall

thank you, I will try it

see Johan's reply here

I am in Germany and we can do that tomorrow against 16:00 German time? Is that Ok for you? with PM, do you mean here in Web?

ping me a pm, we can do it via Microsoft Teams later this evening, not sure what timezone you are in, but i'm in Sweden/Europe

Hi, I want to have my own Image Background for the following Wizard, but I cannot find the file locations and here, but not the Banner, the Background of the text

Yes we can, when and how?

what version of SCCM are we talking about here ?

would you like me to do a short remote session with you so I can take a look ?