Search the Community

Gents, We use SCCM in our environment. When we uninstall the SUP, the local policy pointing to the SUP is deleted on all machines. In this case, We would like to prevents the Windows Update Agents from going on the internet and applying the new feature update. I already observed that some GPO cannot be use in parallel with SCCM (like "Do not connect to any Windows Update Internet locations") Do you now if this is possible and how can I configure this ?

Hello All, I am wondering if anybody has a step-by-step for implementing the IBCM for CM? I've read a lot of different articles, but none of them seemed to have all the pieces? Basic idea is to obtain the ability to manage portable devices (laptops) while those devices are off of the domain. EX. teacher laptops that need to be managed via CM while on summer break. There is NO AD in the DMZ. I can open needed ports on the firewall for communication between Primary site server/MP and MP in DMZ. We've got CM1511 fully functional within the domain. Client checks, dns, OSD, WSUS, etc all work great while on the domain. I am looking to put a MP in the DMZ to manage these portable devices, but I am lacking the knowledge to fully implement this solution. Any pointers to a complete guide would be VERY much appreciated.

Hi, I've setup our ConfigMgr 2012 server in our lab environment and "internally" it all works as expected with no issues at all which is great. What we have in our business though is a lot of home workers and a lot of engineers that never come into the office and very rarely bother to connect to the VPN although they do connect to the internet regularly. What I am trying to setup is what I believe was native mode in the old SCCM - where "internet" based clients can send software/hardware inventories, we can remote their machines and also send out software without them having to connect to the VPN. So far, we have bought a test domain and pointed it to our lab configmgr server via DNS and firewall port forwarding. I've also setup the PKI and pushed out the client certificates and setup the server certificates. However, it doesnt work and I think its something to do with the config within the configmgr. Does anyone either have any ideas on this or even better, have any step by step guides on how to do this? Many thanks in advance.....