Deploy Outlook for iOS with a Managed Exchange Account using Microsoft Intune

Introduction

More good news! Microsoft Intune now provides us with an even easier way to pre-configure an e-mail account for Outlook on iOS (and android). This is done with the use of an App Configuration Policy and the additions to the configuration designer when configuring the Outlook app. Let’s walk through the process.

A peek into the Microsoft 365 device management portal

Read more…

Workaround: Fixing crashing WPF forms in Powershell after updating to Windows 10 ADK v1809

Introduction

No real introduction is needed here. Long story short is, if you installed the new Windows 10 ADK v1809 and the new Windows PE add-on, chances are that you have issues with WPF forms in Powershell in Windows PE.

Luckily we have Twitter and the community is darn fast in sharing workarounds and what not – and this time is no different. More specifically these two conversations on Twitter by @AdamGrossTX and @ferozekhan267oa are interesting.

@ferozekhan267oa mentioned that replacing ‘UIAutomationCore.dll’ in Windows PE was fixing the problem in his end, so I decided to give it a go as well.

I’m using NickolajA‘s ConfigMgr front end, both in production and in labs, so when I updated to the new v1809 ADK and Windows PE, I immediately spotted that something was wrong; no frontend was ever being launched and SMSTS.log was indicating issues as well.

The error in smsts.log in Windows PE

Read more…

Deploy RSAT (Remote Server Administration Tools) for Windows 10 v1809 using SCCM (System Center Configuration Manager) and Powershell

Introduction

Continuing on the Windows 10 1809 journey from wednesday! As something completely new, RSAT (Remote Server Administration Tools) is now included as a set of “Features on Demand” in Windows 10 itself and is no longer something you download and install separately.

You can obviously install the tools manually in Windows (this is done from the settings menu and from there select to Manage Optional Features), but as always, we don’t like to do stuff manually. Therefore I created a complete Powershell script which can be used in SCCM (System Center Configuration Manager) in an unattended and automated deployment.

Read more…

How can I update the Windows 10 ADK (Windows Assessment and Deployment Kit) to version 1809

Introduction

Good news everyone! Windows 10 1809 was released today and among other awesome things, that also brings us an updated version of the Windows Assessment and Deployment Kit (Windows ADK).

As we all know, the Windows ADK is a requirement for doing OSD (Operating System Deployment) using SCCM (System Center Configuration Manager), so let’s walk through a step-by-step guide on how to install this latest and greatest version.

Sneak peek at the version of the boot images post upgrading to the new ADK

Read more…

Auto MDM Enrollment fails with error code 0x8018002a (Troubleshooting MDM enrollment errors. Co-management with SCCM and Intune)

Introduction

Not going to do a great introduction on this one, but I think it deserves a mention anyway (I couldn’t find the situation or error explained elsewhere). More specifically, this is about an error I encountered myself in a Co-management scenario, where the computer fails the auto enrollment into Intune MDM. Let’s dig in 🙂

Read more…

Back to basics: Troubleshoot SCCM (System Center Configuration Manager) Client Push installation errors

Introduction

This is a topic I see quite often as well. Both on the TechNet forums as well as in the facebook groups I follow. So hereby a continuation of my back to basics series, giving you some insights on the Client Push installation process and how to troubleshoot some of the most common issues.

Sneek peak at the SCCM console when about to initiate a client push installation

Read more…

Automatically create collections for Third-Party Software Updates in SCCM (System Center Configuration Manager) using Powershell

Introduction

My previous post was about Patch My PC and Third-Party Software Updates in SCCM 1806. This one is a quick continuation, where I’m going to share a complete Powershell script to create collections for (at the time of writing) 23 different third-party products. Products that’s all available through Patch My PCs update catalog.

Currently Patch My PC has 272 different products in their catalog. I initially needed collections for the first 23. This is work in progress. I will add more products to it as an ongoing process. (Bare with me, there’s a lot of work involved into installing the applications, creating the queries and testing them)

Also, I have no idea if this is something that’s already been created out there, but that’s no excuse not to do another one. 🙂

Read more…

How to patch Third-Party applications using SCCM (System Center Configuration Manager) 1806 and Patch My PC

Introduction

Patching 3rd party applications can be a trivial and time consuming task, especially if doing everything yourself in terms of downloading the application, customizing for the enterprise, creating applications/packages in SCCM and.. the list can probably go on.

Does above sound familiar? Patch My PC made this task super easy and combined with the latest additions to SCCM 1806, the complexity in setting this up has been reduced to almost zero. Curious? Continue reading and be amazed 🙂

Sneek peak at the SCCM console when using Patch My PC catalog natively

Read more…

Back to basics: How can I move computers to a new OU in Active Directory during an in-place upgrade using SCCM (System Center Configuration Manager)

Introduction

Continuing the back to basics blog series, and this time addressing how you can move the computer object in AD (Active Directory) from one OU (Organization Unit) to another during an in-place upgrade of Windows. A good guess is, that this will be relevant for a lot people working with WaaS (Windows as a Service), where putting the computers into a new and fresh OU, with some new and fresh Group Policies might be needed.

This is all done using a web service and powershell. Curious? Continue reading 🙂

Read more…

Block access to company resources if running an out-of-date iOS version using Microsoft Intune and Conditional Access

Introduction

Do you need a simple, but yet effective way of forcing people into updating iOS on their company enrolled Apple devices? Simply block access to company resources if iOS is not up to date. Here is how you can do that using Microsoft Intune and Conditional Access in Microsoft Azure.

Peek into Microsoft Intune and the device compliance policies

Read more…