Now that CMTrace is a part of the Configuration Manager client which is really great!, I still miss the fact that it is not made the default .log reader. It will save me at least 3 clicks 😉 on each machine I troubleshoot. Here is a simple PowerShell script that will associate .Log and .Lo_…
Windows 10 1809 kiosk mode with an AD domain account
One of the great new features in Windows 10 1809 is that Microsoft Edge now supports kiosk mode. It is extremely easy to configure and long awaited, so we don’t have to use Internet Explorer or Google Chrome for our kiosk computers anymore. Setting up Windows 10 1809 in kiosk mode using Intune is really easy…
MMS Desert edition coming up!
MMS is one of my favorite conferences of the year! The reason is the community feeling I have never been to an event where I have had the pleasure to be part of so many great discussions and to me that is worth a lot! Microsoft also adds many speakers from many different product groups…
Bitlocker Compliance using SCCM including Hardware encryption check
A quick post on how to check Bitlocker compliance where all computers with “Hardware” encryption is used will also be marked as non compliant which can be useful after the recent security advisory for SSD’s with Hardware encryption: https://redmondmag.com/articles/2018/11/06/microsoft-ssd-security-advisory.aspx?fbclid=IwAR21wX_6S32eyqdRXDeoNqdjb6DZw8UPNXT_d2FQ8pdH52Jop9lvx7g6Tko And the Security advisory from Microsoft on the topic. https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180028 This started with a discussion with…
Remote tools service gets “Automatic” start in Configuration Manager TP 1810.2
The great feeling when you get an email from Uservoice that your uservoice item has been implemented in the latest Configuration Manager Technical Preview 1810.2!! This is one thing I always change, the Startup of the SCCM Remote Tools service on the clients to Automatic instead of Automatic(delayed). That is one of the biggest complaints…
Intune Win32 App deployment – A gamechanger
One of the biggest limitations in Microsoft Intune has been that we can only deploy single-file .MSI’s and not .EXE installers. With the release of Win32app install support (in Preview) that limitation is now gone! Not only does it support legacy setups like .exe files for instance we can also use it for advanced .MSI…
Windows 10 upgrade assessment using Onevinn TSLaunch
Today version 2 of the “Onevinn Windows 10 Upgrade tools” was released and there are many new great features in there created by my colleague Johan Schrewelius. It can be downloaded here: Onevinn – Applications (schrewelius.it) More information on what TSlaunch is can be found here: https://ccmexec.com/2018/05/windows-10-upgradeservicing-tools-demoed-at-mms-2018/ I will try to cover at least some of…
Using Google Chrome Roaming Profile settings with UE-V
In my work to get Google Chrome being a good citizen in an enterprise environment it is not time to look at roaming the Chrome settings. Chrome has support for roaming profile data and it can be enabled using a Group Policy which is great. Is it perfect, no it doesn’t roam Extensions for example….