With the new feature in Configuration Manager 1706 that makes it possible to launch Software center and show the correct application from a direct link in Software Center which is great! We can copy the link and email it to the user for instance. I have a customer that wanted to send out a mail
When chasing high-privileged accounts as they are a risk, this is a question I have seen many times. In the Security Compliance templates from Microsoft (even the latest for RS2) the setting “Access this computer from the network” is recommended to be set to “Administrators” and “Remote Desktop Users” which is a good recommendation! It
Another great tool and post by my colleague Johan Schrewelius! A while ago we had a customer whose Task Sequence suddenly exceeded the maximum allowed size, mainly because of a vast number of “Apply Driver Package” steps. To remediate the issue, we looked at several different solutions to apply driver packages dynamically. It turned out
Today Technical Preview 1708 was released! Great new stuff as always. The Configuration Manager team release 15 releases of Configuration Manager in a year, 3 Current branch releases and 12 Technical Preview releases! That is simply amazing!! The Configuration Manager product team is doing an amazing job and the products capabilities goes beyond my wildest
I have written a couple of posts now on Configuration Items and Baselines in Configuration Manager so I thought it was time to collect them all here with a call for action! Create your own CI’s and Baseline to make sure that you don’t have any configuration drift out there. Many settings are configured using
At MMS 2017 in Minneapolis me and Ryan Ephgrave @EphingPosh had the great honor of doing a session on some of the great Community tools out there for Configuration Manager. We did it last year as well with the help of Kent Agerlund and it is always great fun, just preparing it, researching looking for
In previous versions of Windows 10, before 1703 built-in apps that couldn’t be uninstalled could still be blocked with Applocker so that they never got installed and it has worked great! With Windows 10 1703 there are two apps that I have identified as not being able to uninstall, it is not a Windows Capability
I posted a Configuration Manager Configuration Item and Baseline a while back that checks to see if Applocker is configured and running. Another important thing to check on Windows 10 is that Credential Guard is configured and running. Credential Guard is an extremely important security feature in Windows 10 and should be used and of
