All Activity

it looks to me like the update is failing on your clients, have you tried troubleshooting that ? I don't think this is an SCCM problem but a client problem. I asked copilot what it thought about the error given above and it came up with this script which does the following:... Renames Spupdsvc.exe to prevent interference. Stops Windows Update services. Renames update cache folders (SoftwareDistribution and Catroot2). Restarts update services. Runs sfc /scannow to fix system file corruption. Runs DISM /RestoreHealth to repair the Windows image. Prompts you to manually download KB5063875 if needed. Right-click the .bat file and choose "Run as administrator". Let it complete all steps (may take several minutes). Restart your PC and try installing the update again. fix_update_error_0x8024000B.bat

I asked copilot, and here's the summary of it's answer: For a 12 TB upload to Azure Blob Storage, your main costs will be: Storage tier cost (Hot: $220/month, Cool: $122/month, Archive: $24.50/month) Write operations (~$9–$22 depending on tier) No cost for uploading (data ingress)

We are planning to transfer a large amount (12TB) of data from AWS S3 to Azure Blob storage. There are close to 60million objects to deal with and we are planning to use a tool <product name removed> for the same. Before proceeding, we want to estimate the transfer cost. Are there any 'write costs' to Azure blobs? We are aware of egress cost from AWS S3, but to calculate the complete end-to-end cost, we need to understand are there are any write operation costs during the transfer

.

SCCM Software Updates - KB5063875 In software Centre 2025-08 Cumulative Updates for Windows 11 Version 22H2 for x64 (KB5063875) is keep on installing and system is restarting again and again. It is happening to few devices only Control Panel - system updates View Can any one help

Hi sir, i am Looking a script for Repair option in xxxx.Exe file.

Thanks for the reply, and yes that's the case, due to which i am unable to use the database configured in it and SUP

this is odd, so are you saying that in Windows File Explorer that you cannot browse the D:\ drive at all ? if that's not what you mean then please explain what "when accessed directly from the system" means.

I am facing an issue with our SCCM environment. Please find the details below: SCCM Version: 2403 License Model: 3-year subscription (renewable yearly) License Renewal: Expired last year. I renewed my license last month. However, since my previous environment is in production, I did not proceed with setting up a new environment. Issue Summary: The D: drive on our SCCM server, which is configured for both the SCCM database and SUP, is showing “Access is denied” when accessed directly from the system. The same D: drive works normally when connected to another workstation. Attempts to take ownership of the drive result in the same “Access is denied” error. This issue is isolated to the SCCM server only. Impact: High – as the D: drive hosts both the database and SUP, no updates are currently being distributed to clients. Troubleshooting Performed: Verified drive connectivity. Attempted to reassign ownership of the drive → failed with “Access is denied.” Tested drive functionality on another workstation → works without issues. Could anyone investigate and advise on the root cause and next steps?

What I want in my TS, is to run my PS and it should display it in my Collection as Value and can see there the Result. Have you any Idea how I can realize it?

when you create a custom variable in the collection, you assign a value to it, eg: CheckOutput = 100 In your task sequence, you CHECK for the value of the CheckOutput variable and act accordingly. For example you can have a step or group that checks if CheckOutput = 100 and if so it runs, if not, it does not run that step or group. Does that make sense ?

Introduction In the previous post I showed you what happens when a user or admin reset’s Windows after the August 2025 cumulative update (KB5063875) , basically the reset fails (rolls back). That problem can be fixed by applying an out of band update which can be deployed manually or automatically to affected clients. In this post I’ve once again teamed up with my buddy Paul to automate fixing this reset problem using Windows Autopatch in Microsoft Intune. It has a feature to Expedite updates. We’ve both tested this in our separate labs and are happy to share the results with you so that you too, can fix this in an automated way using Windows Autopatch. Expediting updates As the name sounds, this allows us to expedite (rush) updates to an Entra ID group containing our target computers, and this method can be used to get Quality Updates including Out of band updates to your devices via Windows Autopatch. There are some prerequisites, listed below: Devices meet the prerequisites for Windows Autopatch. Devices installed the update described in KB4023057 – Update for Windows 10 Update Service components (or a newer version). To verify that your devices meet the prerequisites for receiving an expedited update, use the Readiness test for expediting updates. Let’s create our Expedite updates policy. In Intune, browse to Devices, Windows Updates and select Quality Updates. In the Create + drop down, select Expedite policy. Give the policy a suitable name and description. In the Select the quality update you would like to expedite, select the 08/26/2025 D Update for Windows 10 and later option. If you are wondering what the D Update and B Security Updates are, here’s an explanation. B updates Released on the second Tuesday of each month (commonly called Patch Tuesday). These are the mandatory, cumulative updates that include security fixes and sometimes reliability improvements. D updates Released on the fourth week of the month (usually the preview releases). These are optional, non-security preview updates. They contain fixes and improvements that will roll into the next month’s B update. to summarize… B = Security & required (Patch Tuesday) D = Optional preview (late month, contains fixes but no new security fixes) So, as we already have deployed the August Cumulative update that would be the B update. We definitely need the fixes (out of band) that came after that and that would be the contained in the D updates. Finally, if a reboot is required (and it is required), decide on how many days before it’s enforced, so we’ll set it to 0 days. After clicking Next, select the group(s) you want to target with these out of band updates. Don’t worry about the fact that there’s no devices in that group yet, we’ll add them as needed later. Click Next and the policy is created. Finally, when you are ready to test this add one or more devices to the target Entra Id groups. After the device gets the policy, and as long as there are no policy conflicts your end users should be notified about the pending restart. After the restart is completed, you can verify Windows update settings, and view the history. The latest OOB (Out of band) update should be installed and as it’s also cumulative it will contain the fix to allow Windows reset to work again. Job done! Summary While this ability to expedite updates in Windows Autopatch is welcome, it’s far from perfect. There are several problems, which we’ll list here: Speed of delivery. The blurb from Microsoft claims the following, highlighted below But in several VM’s where myself and Paul tested, the expedited update arrived in an anything but their claimed speed. In reality, the update took several hours to approx one day and numerous syncs on the clients and in the Intune console before we saw the popup. On some vm’s we are still waiting for the magic to happen even though all the prerequisites are in place. Update: We got a reply from Peter Braune on Twitter, who stated the following, it may help you if you are going down this path. We actually had to create a policy via settings catalog “Automatically receive optional updates”, to get this update rolling out to clients. Once the policy was in place the update was installed immediately. Downside, preview updates being rolled out automatically too. Lack of ability to target a specific hotfix. You you can only choose between B or D updates and hope that they include the fix you need. What we really wanted was to be able to specficially install KB5066189, but that’s not possible currently with this method via the console. Lack luster reporting. If you want to see what’s happening with your expedited update in real time then you are out of luck. Of the several machines we targeted the reporting suggested nothing was wrong, which in a way was true because nothing was happening. And that’s the problem, how can you quickly determine whether your hotfix is applied or not to these target devices ? Policy conflicts. After enabling Expedited updates, you might end up troubleshooting policy conflicts on your target devices if your tenant has had the following installed. Windows Autopatch – Office Update Configuration – Expedited (Expedited updates for CVE-2023-23397). Hopefully Microsoft is listening and will improve this service going forward. That’s it from us, see you in the next one.

Hi, I have Power Shell script a want to run in simply Task Sequence. the script should be output to file or to a output to a task sequence variable. my Collection What I want, it should show the result or the output of my PS script here on the Collection. Is there any way to do that? Regards

Just for Clarity, you are looking for a PowerShell script to update each application with a Repair option? What have you tried so far? what is not working for you?

most of Most of my applications are in .ExE

why not just wrap the exe as an MSI ?

Dear Team, Can any one please Guide how to Enable a repair Option for .EXE Application in Software Center. with vbs script or Powershell or any idea or any customisation idea. i would great thankfull to you. For Example : Any .Msi Application from client PC user has the feasibility to Repair application if the Applications Supports “REPAIR”. Software Center in Client PC .Msi Application SCCM Configuration I am Looking for Any .EXE Application that i can enable for the users. Best Regards,

i could not able to further Troubleshoot. With F8 option. Windows Assessment and deployment KIT Windows Preinstallation Environment Add-Ons version is : 10.1.26100.2454 But i have solved it out with Dell Pro Dock – WD25 . installed windows from Docking station and i did not getting that error. All my Required programs are installed without any problem. i guess -> Before i installed the Dell pro 13 Plus 13250 from USB LAN Adapter because this Laptop have only WIFI Module. "It was nice if we could Troubleshoot on this Topic why it was the Root Cause"

looks like you are missing storage drivers, if you open a cmd prompt (f8) and type diskpart, list disk does it list any hdd(s) ? if not, there's the answer, missing storage drivers. if it is showing, then what type of storage is it ? also what ADK are you using and what version of SCCM

Hi Team, Can Any one help me out in this issue. i am getting error in OSD Task sequence. i have tested the same Task sequence in Another Dell Model 5550 . All the software's are installing Success without any issue. When i test this in New Dell PB13250 . i am getting this error.

I'm trying to Sysprep a Windows 11 Enterprise 24H2 Installation with many installed Applications. I am getting always fails because of this error: ###################################################################### SYSPRP Package Microsoft.DesktopAppInstaller_1.25.199.0_x64__8wekyb3d8bbwe was installed for a user, but not provisioned for all users. This package will not function properly in the sysprep image. SYSPRP Failed to remove apps for the current user: 0x80073cf2. SYSPRP Exit code of RemoveAllApps thread was 0x3cf2. SYSPRP ActionPlatform::LaunchModule: Failure occurred while executing 'SysprepGeneralizeValidate' from C:\Windows\System32\AppxSysprep.dll; dwRet = 0x3cf2 SYSPRP SysprepSession::Validate: Error in validating actions from C:\Windows\System32\Sysprep\ActionFiles\Generalize.xml; dwRet = 0x3cf2 SYSPRP RunPlatformActions:Failed while validating Sysprep session actions; dwRet = 0x3cf2 [0x0f0070] SYSPRP RunDlls:An error occurred while running registry sysprep DLLs, halting sysprep execution. dwRet = 0x3cf2 [0x0f00d8] SYSPRP WinMain:Hit failure while pre-validate sysprep generalize internal providers; hr = 0x80073cf2 ########################################################################## I ran the following command wit PS Get-AppxPackage -AllUsers Microsoft.DesktopAppInstaller_1.25.199.0_x64__8wekyb3d8bbwe | Remove-AppxPackage and: Get-AppxProvisionedPackage -Online | Where-Object DisplayName -like "Microsoft.DesktopAppInstaller_1.25.199.0_x64__8wekyb3d8bbwe" | Remove-ProvisionedAppPackage -Online and I try with following command too Import-Module Appx Import-Module Dism Get-AppxPackage -AllUsers | Where PublisherId -eq 8wekyb3d8bbwe | Format-List -Property PackageFullName,PackageUserInformation Remove-AppxPackage -Package Microsoft.DesktopAppInstaller_1.25.199.0_x64__8wekyb3d8bbwe Remove-AppxProvisionedPackage -Online -PackageName Microsoft.DesktopAppInstaller_1.25.199.0_x64__8wekyb3d8bbwe ############################################################### No above command help me. I did run that command too sysprep /audit /reboot Has anyone any Idea? I need really help Thank you

is the client version the same as the primary version ?

No. I did not. Is there anyway other way to prevent the uninstall client?