Endpoint Manager step by step guides

[anyweb]

This list of guides is a living index, and i plan to update it whenever I write a new guide for the new versions of Microsoft Endpoint Manager  Configuration Manager (MEMCM or SCCM) or Microsoft Endpoint Manager (MEM or Intune). The Current Branch release is meant for your production deployments and the Technical Preview releases are for testing new upcoming features in the product, and are aimed at Lab use only. The PKI guides are added as https communication within ConfigMgr and Intune is desired.

These guides are broken down into different sections:

• Microsoft Endpoint Manager (MEM) - Intune
• Microsoft Endpoint Manager Configuration Manager (MEMCM) - Current Branch
• Microsoft Endpoint Manager Configuration Manager (MEMCM) - Technical Preview
• Setting up PKI

Note: The guides in each section are sorted in the direction of oldest first.

Microsoft Endpoint Manager (MEM) - Intune

• How can I find out version info about Intune Preview in Azure ?
• How can I unlock Windows Holographic for Business features in Intune Preview?
• How can I determine how long a blade loads in Intune Preview in Azure ?
• How can I check the status of my Intune service ?
• Intune Preview in Azure get’s a new look and Software Updates for Windows 10 !
• What is Windows Information Protection and how can I use it to protect Enterprise data on Windows 10 devices using Intune
• Using Intune to enable WIP to protect Enterprise data on Windows 10 devices (MAM-WE)
• Getting started with Microsoft Graph and using PowerShell to automate things in Intune
• How can I integrate Microsoft Store for Business with Intune in Azure
• How can I create a dynamic group containing all Windows 10 version 1709 in Intune in Azure ?
• How can I enable MDM auto-enrollment in Azure
• How can I customize the start screen in Windows 10 using Intune
• How can I use Windows AutoPilot with a Proxy ?
• Troubleshooting “Something went wrong error 801c0003” during enrollment via Windows AutoPilot and Microsoft Intune
• Configuring BitLocker in Intune - Part 1. Configuring BitLocker
• Configuring BitLocker in Intune - Part 2. Automating Encryption
• Configuring BitLocker in Intune - Part 3. Testing the scripts
• How can I send notification messages using PowerShell in Microsoft Intune
• How can I deploy custom favorites in Microsoft Edge to Windows 10 devices using Microsoft Intune
• Managing devices with Microsoft Intune: What’s new and what’s next – my notes (Part 1 – new features)
• Managing devices with Microsoft Intune: What’s new and what’s next – my notes (Part 2 – iOS)
• Managing devices with Microsoft Intune: What’s new and what’s next – my notes (Part 3 – Android)
• Managing devices with Microsoft Intune: What’s new and what’s next – my notes (Part 4 – macOS)
• Managing devices with Microsoft Intune: What’s new and what’s next – my notes (Part 5 – Windows)
• Learn how to leverage Intune support for Microsoft Graph and PowerShell to enable powerful automation and IT security- my notes
• How Microsoft uses Intune internally to manage Windows devices
• Android device management with Microsoft Intune – Part 1. Partnerships
• Android device management with Microsoft Intune – Part 2. Deployment Scenarios
• Android device management with Microsoft Intune – Part 3. Dedicated device management
• Android device management with Microsoft Intune – Part 4. Coming soon and what’s new
• How can I create dynamic groups for different HoloLens devices in Microsoft Intune
• Troubleshooting app deployment in Windows Autopilot
• Configuring the Registered Owner and Organization in Windows Autopilot delivered PCs
• Removing company data from Endpoint Manager enrolled phones
• Office 365 issues after Windows Autopilot
• Displaying a welcome page after Windows Autopilot completes
• Adding devices to an Azure AD group after Windows Autopilot is complete - part 1
• Adding devices to an Azure AD group after Windows Autopilot is complete - part 2
• Gathering logs and sending an email when resetting Windows Autopilot - part 1
• Gathering logs and sending an email when you need to reset Windows Autopilot - part 2
• Gathering logs and sending an email when you need to reset Windows Autopilot - part 3
• Adding devices or users to an Azure AD group after Windows Autopilot is complete but only when the device is marked as Compliant
• Using the updated & secure Retire My PC app via Company Portal
• Prompting standard users to confirm or change Regional, Time Zone and Country settings after Windows Autopilot enrollment is complete

Microsoft Endpoint Manager Configuration Manager (MEMCM) Current Branch

• Installation - How can I install System Center Configuration Manager (Current Branch)
• Configuring Discovery - How can I configure discovery for System Center Configuration Manager (Current Branch)
• Configuring Boundaries - How can I configure boundaries in System Center Configuration Manager (Current Branch)
• Using Updates and Servicing in Offline mode - How can I use Updates and Servicing in Offline mode in System Center Configuration Manager (Current Branch)
• Using Updates and Servicing in Online mode - How can I use Updates and Servicing in Online mode in System Center Configuration Manager (Current Branch)
• Setting up the Software Update Point - How can I setup Software Updates in System Center Configuration Manager (Current Branch)
• Installing the Client agent - How can I configure client settings and install the ConfigMgr client agent in System Center Configuration Manager Current Branch
• Upgrading to System Center Configuration Manager (Current Branch) version 1602 from System Center Configuration Manager (Current Branch) version 1511
• How can I use the Upgrade Task Sequence in System Center Configuration Manager (Current Branch) ?
• How can I use servicing plans in System Center Configuration Manager (Current Branch) to upgrade Windows 10 devices ?
• How can I deploy Windows 10 with MDT 2013 Update 2 integrated with System Center Configuration Manager (Current Branch)
• How can I install Windows 10 language packs offline with an MDT Integrated Task Sequence in System Center Configuration Manager (Current Branch)
• How can I use PowerShell to populate Windows 10 CB, CBB, LTSB and Insider Preview collections in System Center Configuration Manager (Current Branch)
• A deeper look at the Upgrade task sequence in System Center Configuration Manager (Current Branch)
• How can I deal with languages in the Upgrade Task sequence using System Center Configuration Manager (Current Branch)
• How can I display custom messages in a task sequence using PowerShell in System Center Configuration Manager (Current Branch)
• Update rollup for System Center Configuration Manager current branch, version 1602
• How can I use Windows 10 Servicing when a language pack is installed using System Center Configuration Manager (Current Branch)
• Now Available: Update 1606 for System Center Configuration Manager
• Now Available: Update 1610 for System Center Configuration Manager
• How can I install System Center Configuration Manager version 1606 (Current Branch) on Windows Server 2016 with SQL 2016
• How can I change System Center Configuration Manager from an Eval edition to a Licensed edition ?
• Why Telemetry is great, and why the uptake of Configuration Manager Current Branch is unprecedented
• How can I use Express Updates when patching Windows 10 with Quality Updates in System Center Configuration Manager (Current Branch)
• First looks at Ciresons ConfigMgr Portal
• How can I upgrade to System Center Configuration Manager (Current Branch) version 1702
• How can I forcefully upgrade one version of Windows 10 to the latest using System Center Configuration Manager (Current Branch)
• SCCM Query for All Windows 10 version 1703 ?

• How can I install System Center Configuration Manager version 1702 (Current Branch) on Windows Server 2016 with SQL 2016

• How can I upgrade to System Center Configuration Manager (Current Branch) version 1706

• How can I enable co-management in System Center Configuration Manager ?
• How can I enable the diagnostic prompt for Windows 10 upgrades in Windows 10 v1703 and later
• Upgrading to System Center Configuration Manager (Current Branch) version 1802
• Linux support to be removed from System Center Configuration Manager (Current Branch) in early 2019
• What version of the Windows ADK is supported with System Center Configuration Manager (Current Branch) version 1802 ?
• The Application Catalog in SCCM (Current Branch) will no longer be supported after June 2018
• Microsoft Silverlight not installed by default in SCCM (Current Branch) version 1802
• What are baseline versions in System Center Configuration Manager (Current Branch) ?
• How can I install System Center Configuration Manager (Current Branch) version 1802 on Windows Server 2016 with SQL Server 2017 – Part 1
• How can I install System Center Configuration Manager (Current Branch) version 1802 on Windows Server 2016 with SQL Server 2017 – Part 2
• How can I install System Center Configuration Manager (Current Branch) version 1802 on Windows Server 2016 with SQL Server 2017 – Part 3
• How can I install System Center Configuration Manager (Current Branch) version 1802 on Windows Server 2016 with SQL Server 2017 – Part 4
• System Center Configuration Manager (Current Branch) version 1802 is now available on the Microsoft VLSC site
• How can I patch 3rd party applications using System Center Configuration Manager (Current Branch) and Patch My PC
• System Center Configuration Manager (Current Branch) version 1802 is now available on the Microsoft evaluation site
• A summary of System Center Configuration Manager releases in 2018 and the new features – Part 1 (Current Branch)
• A summary of System Center Configuration Manager releases in 2018 and the new features – Part 2 (Technical Preview)
• Forcefully upgrading Windows 7 or Windows 10 to a newer version of Windows 10
• How can I upgrade to System Center Configuration Manager Current Branch version 1902
• How can I fix "there is not enough available disk space" when upgrading the AdminConsole
• What to do if Updates and Servicing is stuck in a state of downloading
• What version of the Windows ADK is supported with System Center Configuration Manager (Current Branch) version 1902 ?
• How can I install System Center Configuration Manager (Current Branch) version 1902 on Windows Server 2019 with SQL Server 2017 - Part 1
• How can I install System Center Configuration Manager (Current Branch) version 1902 on Windows Server 2019 with SQL Server 2017 - Part 2
• How can I install System Center Configuration Manager (Current Branch) version 1902 on Windows Server 2019 with SQL Server 2017 - Part 3
• How can I install System Center Configuration Manager (Current Branch) version 1902 on Windows Server 2019 with SQL Server 2017 - Part 4
• How can I install System Center Configuration Manager (Current Branch) version 1902 on Windows Server 2019 with SQL Server 2017 - Part 5
• How can I install System Center Configuration Manager (Current Branch) version 1902 on Windows Server 2019 with SQL Server 2017 - Part 6
• How can I install System Center Configuration Manager (Current Branch) version 1902 on Windows Server 2019 with SQL Server 2017 - Part 7
• How can I upgrade to System Center Configuration Manager Current Branch version 1906
• How can I deploy Windows with a custom blocksize using SCCM ?
• On-premises BitLocker management using System Center Configuration Manager
• How can I get BitLocker Recovery Keys from the ConfigMgr database
• How to fix: “Unable to find suitable Recovery Service MP. Marking policy non-compliant”
• How does Key Rotation work in MBAM integrated with SCCM ?
• How can you use the Self Service feature when MBAM is integrated within SCCM?
• How can you use the Help Desk feature when MBAM is integrated within SCCM?
• A quick look at reporting in MBAM integrated within Microsoft Endpoint Manager Configuration Manager
• Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 - Part 1 setup
• Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – Part 2 configure portals
•  Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – Part 3 customize the portals
•  Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – Part 4 Enforce encryption
•  Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – Part 5 key rotation
• Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – Part 6 forcing decryption
• Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – Part 7 Reporting and compliance
• Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – Part 8 Migration
• Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – Part 9 Group Policy
• Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – Part 10 Troubleshooting
• Enabling Full Disk Encryption in Microsoft Endpoint Configuration Manager 1910 in a task sequence
• How can I use the new Log Groups functionality in OneTrace ?
• Full disk encryption (in ConfigMgr 1910) – a closer look using real hardware
• Enabling the new Tenant Attach feature in Configuration Manager
• Using device sync and device actions in Microsoft Endpoint Manager Admin Center
• Why can’t I RDP to my CMG ?
• How can I calculate the cost of OSD content coming from my CMG ?
• Triggering Evaluation of SMS_DesiredConfiguration Instances on a Client Using Powershell
• How can I replace an expired IIS certificate in a PKI enabled ConfigMgr environment
• How can we utilize the Bitlocker Management feature during OSD with Endpoint Manager
• Fixing an evaluation version of SSRS with "HTTP Error 503. The Service is unavailable"
• Troubleshooting BitLocker Management in ConfigMgr - Part 1. Server side
• Troubleshooting BitLocker Management in ConfigMgr - Part 2. Client side
• What's new in Microsoft Endpoint Manager - Part 1
• What's new in Microsoft Endpoint Manager - Part 2
• How can I dynamically install language packs and features on demand in an offline environment for Windows 10
• The right way to find logs from your CMG
• What to do when Endpoint Manager upgrades don’t go as planned. Hint: logs
• BitLocker management via a cloud management gateway (CMG) in ConfigMgr 2010
• Improvements to BitLocker management in Endpoint Manager update 2010
• How can I use Smoothwall as a router for my hyper-v labs
• Deploy an OS over CMG using bootable media
• Video: deploy an OS via CMG using bootable media
• Prepare for HTTP-only client communication depreciation in ConfigMgr
• Cloud attach - Endpoint Managers silver lining – part 1 Configuring Azure AD connect
• Cloud attach - Endpoint Managers silver lining – part 2 Prepare for a Cloud Management Gateway
• Cloud attach - Endpoint Managers silver lining – part 3 Creating a Cloud Management Gateway
• Cloud attach - Endpoint Managers silver lining – part 4 Enabling co-management
• Cloud attach - Endpoint Managers silver lining – part 5 Enabling compliance policies workload
• Cloud attach - Endpoint Managers silver lining - part 6 Enabling conditional access
• Cloud attach - Endpoint Managers silver lining - part 7 Co-managing Azure AD devices
• Cloud attach - Endpoint Managers silver lining - part 8 Enabling tenant attach
• Cloud attach - Endpoint Managers silver lining - part 9 renewing expiring certificates
• Cloud attach - Endpoint Managers silver lining - part 10 Using apps with tenant attach
• Retire My PC - a self-service app to secure company data on old computers
• A quick look at the “Retire MY PC” app
• Retire My PC - a self-service app to secure company data on old computers - part 2 the verification app
• Retrieve BitLocker recovery keys from Tenant attached devices
• Hotfix available for ConfigMgr version 2103 to solve policy storm issues caused by Invoke-MbamClientDeployment.ps1
• using BitLocker Management in ConfigMgr and do OSD, read this !

• Checking for network cable connections before deploying an OS from the CMG via Software Center

• Migrate to the cloud - Part 1. Setup
• Migrate to the cloud - Part 2. Customization
• Migrate to the cloud - Part 3. Troubleshooting

Microsoft Endpoint Manager Configuration Manager (MEMCM) Technical Preview

• Installation - How can I install System Center Configuration Manager and Endpoint Protection Technical Preview 4
• Spot the difference, maintenance windows versus service windows, Microsoft is listening and fixing !
• System Center Configuration Manager Technical Preview 1601 is now available !
• System Center Configuration Manager Technical Preview 1602 is now available !
• System Center Configuration Manager Technical Preview 1603 is now available !
• System Center Configuration Manager Technical Preview 1604 is now available !
• System Center Configuration Manager Technical Preview 1605 is now available !
• System Center Configuration Manager Technical Preview 1606 is now available !
• System Center Configuration Manager Technical Preview 1607 is now available !
• System Center Configuration Manager Technical Preview 1608 is now available !
• System Center Configuration Manager Technical Preview 1609 is now available !
• System Center Configuration Manager Technical Preview 1610 is now available !
• System Center Configuration Manager Technical Preview 1611 is now available !
• System Center Configuration Manager Technical Preview 1612 is now available !
• System Center Configuration Manager Technical Preview 1701 is now available !
• What is the ContentLibraryCleanup tool and how can I use it ?
• System Center Configuration Manager Technical Preview 1702 is now available !

• Video - Upgrading to System Center Configuration Manager 1703 Technical Preview

• System Center Configuration Manager Technical Preview 1704 is now available !
• System Center Configuration Manager Technical Preview 1705 is now available !
• System Center Configuration Manager Technical Preview 1706 is now available !
• System Center Configuration Manager Technical Preview 1707 is now available !
• System Center Configuration Manager Technical Preview 1708 is now available !
• System Center Configuration Manager Technical Preview 1709 is now available !
• System Center Configuration Manager Technical Preview 1710 is now available !
• System Center Configuration Manager Technical Preview 1711 is now available !
• System Center Configuration Manager Technical Preview 1712 is now available !
• System Center Configuration Manager Technical Preview 1801 is now available !
• Update 1802 for Configuration Manager Technical Preview available now
• Update 1803 for Configuration Manager Technical Preview available now !
• System Center Configuration Manager Technical Preview 1804 released
• System Center Configuration Manager Technical Preview 1805 released
• System Center Configuration Manager Technical Preview 1806 released
• System Center Configuration Manager Technical Preview 1807 released
• System Center Configuration Manager Technical Preview 1808 released
• System Center Configuration Manager Technical Preview 1809 is out
• A quick look at System Center Configuration Manager Technical Preview version 1810
• A quick look at System Center Configuration Manager Technical Preview version 1810.2
• System Center Configuration Manager Technical Preview version 1901 is now available
• System Center Configuration Manager 1902 Technical Preview is available
• System Center Configuration Manager 1902.2 Technical Preview is now available
• System Center Configuration Manager 1903 is now available and it includes my uservoice
• ConfigMgr log files help you when you least expect it, oh and SCCM 1904 TP is out !
• How can I use the new Community hub in SCCM Technical Preview 1904
• SCCM Technical Preview version 1905 is available and this is a HUGE release !
• SCCM Technical Preview version 1906 is available
• System Center Configuration Manager Technical Preview version 1907 is available now !
• System Center Configuration Manager Technical Preview version 1908 is available now !
• Make your task sequences go faster with the Run as high performance power plan
• How to configure keyboard layout in WinPE in SCCM
• How to select an index when importing an Upgrade package into SCCM
• System Center Configuration Manager Technical Preview version 1909 is released !
• System Center Configuration Manager TP1910 is out !
• Microsoft Endpoint Manager Configuration Manager technical preview version 1911 is released
• Microsoft Endpoint Manager Configuration Manager Technical Preview version 1912 released
• New BitLocker Management features in Microsoft Endpoint Manager Configuration Manager Technical Preview 2002
• Microsoft Endpoint Manager Configuration Manager Technical Preview 2002.2 is out
• Microsoft Endpoint Manager TP 2003 is out
• Microsoft Endpoint Manager Technical Preview 2004 is out
• Microsoft Endpoint Manager Configuration Manager technical preview version 2005 is out
• Microsoft Endpoint Manager TP2006 is out
• Slides and recording from “New cloud features in Configuration Manager Technical Preview”
• A look at task sequence media support for cloud-based content
• Technical Preview 2007 is out !
• Technical Preview 2007 Timeline improvements
• Cool new features in Technical Preview 2008
• OSD via boot media and CMG, available in TP2009
• New features in Configuration Manager Technical Preview 2010
• Manage BitLocker policies and escrow recovery keys over a cloud management gateway (CMG)
• Required application deployments visible in Microsoft Endpoint Manager admin center
• Fixing One or more Azure AD app secrets used by Cloud Services will expire soon
• Improvements to BitLocker support via cloud management gateway
• Technical preview 2104 get BitLocker recovery keys for a tenant-attached device
• Creating a VMSS CMG and setting VM size with Technical Preview 2105
• How to change the CMG (VMSS) size after it is deployed
• Use Windows Updates notifications instead of ConfigMgr client notifications in tp2105.2
• Configuration Manager Technical Preview 2106 is out, and it’s huge !!
• Technical Preview 2108 is out !

Setting up PKI

• Part 1 - Introduction and server setup
• Part 2 - Install and do initial configuration on the Standalone Offline Root CA
• Part 3 - Prepare the HTTP Web server for CDP and AIA Publication
• Part 4 - Post configuration on the Standalone Offline Root CA
• Part 5 - Installing the Enterprise Issuing CA
• Part 6 - Perform post installation tasks on the Issuing CA
• Part 7 - Install and configure the OCSP Responder role service
• Part 8 - Configure AutoEnroll and Verify PKI health
• How can I configure System Center Configuration Manager in HTTPS mode (PKI) - Part 1
• How can I configure System Center Configuration Manager in HTTPS mode (PKI) - Part 2

 

cheers
niall