Category: Windows 10

Just in time for Windows 1903 the Onevinn Upgrade tools are getting some new features. Johan Schrewelius has been doing a great job once again. “TSLaunch ConfigMgr extension 2.3.19109.1.msi”, is updated with improved datetime handling. “UPGBackground 1.0.19111.1.msi” It will show _SMSTSCurrentStepName all along the TS and an additional progressbar showing the actual upgrade progress during

Windows 10 1903 are now available on MSDN and it is time to deploy it and remove the builtin apps we don’t need. There are no major changes, added the two new version files “Apps18362.txt” and “Capabilities18362.txt” and a script to make it easier to extract all the builtin apps, “Getapps.ps1”. Getapps.ps1 will create a

One of the biggest challenges and discussion points when it comes to removing the local admin permissions from users is that they cannot add multi-function printers without admin permissions as they need to install additional software to work. I bought a new OfficeJet printer the other day and was happily surprised that the HP Smart

One of the great new features in Windows 10 1809 is that Microsoft Edge now supports kiosk mode. It is extremely easy to configure and long awaited, so we don’t have to use Internet Explorer or Google Chrome for our kiosk computers anymore. Setting up Windows 10 1809 in kiosk mode using Intune is really easy

A quick post on how to check Bitlocker compliance where all computers with “Hardware” encryption is used will also be marked as non compliant which can be useful after the recent security advisory for SSD’s with Hardware encryption: https://redmondmag.com/articles/2018/11/06/microsoft-ssd-security-advisory.aspx?fbclid=IwAR21wX_6S32eyqdRXDeoNqdjb6DZw8UPNXT_d2FQ8pdH52Jop9lvx7g6Tko   And the Security advisory from Microsoft on the topic. https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180028 This started with a discussion with

Today version 2 of the “Onevinn Windows 10 Upgrade tools” was released and there are many new great features in there created by my colleague  Johan Schrewelius. It can be downloaded here: Onevinn – Applications (schrewelius.it) More information on what TSlaunch is can be found here: https://ccmexec.com/2018/05/windows-10-upgradeservicing-tools-demoed-at-mms-2018/ I will try to cover at least some of

In my work to get Google Chrome being a good citizen in an enterprise environment it is not time to look at roaming the Chrome settings. Chrome has support for roaming profile data and it can be enabled using a Group Policy which is great. Is it perfect, no it doesn’t roam Extensions for example.

Updated 2021-06-09 – Added some additional cleanup in the script to make sure it removes the CM client, otherwise the computer will be “co-managed” in Intune even if it isn’t. Also added info about the SkipOOBE in unattend.xml I am writing this post because I am lazy and already have Configuration Manager in my lab.