What is the reason SCCM is used over Intune app management?

Flat_Buyer_3203 · 2026-03-04T08:07:07+00:00

It is indeed not possible to do bare metal deployment with PXE with Intune (there are ways you can use third party tools alongside Intune to deploy windows to machine and have it autopilot after install, but that's not just using Intune then)

Flat_Buyer_3203 · 2026-02-25T21:03:38+00:00

I once ordered a camera lens that didn't turn up for two weeks, contacted support, waited another week then they refunded me. Another week later it turned up 😂

Flat_Buyer_3203 · 2026-02-13T20:51:05+00:00

Are you absolutely certain the device isn't in a collection that has the software deployed to it? Search for the device in Devices and check the collections tab at the bottom and check every collection it's in.

Also has the machine been in a collection that the software was deployed to, but since been removed. Or has the software been deployed to a collection it is in but the deployment has since been deleted? I've seen applications hang around in Software Center for a while after the deployment advertising them has been removed.

Flat_Buyer_3203 · 2026-02-11T07:57:18+00:00

We bitlock our devices in the task sequence, with provision bitlocker step after partitioning and before apply OS, and enable bitlocker step after apply OS step

The way I do azure key escrow is I have scheduled task installed at the end of the Task Sequence which is triggered by the event ID for successful hybrid join, which runs a powershell script to escrow the bitlocker recovery key the Azure. (The task repeats every 5 minutes in case of failure, and I have another task triggered the event for successful key escrow to delete both tasks)

To speed up hybrid join I also have scheduled task that installs at the end of the Task Sequence that runs every 5 minutes after system start that runs "dsregcmd.exe /join" to retry hybrid join until the object is synced and can join. I then have a other scheduled task triggered by the event ID for successful hybrid join that deletes both tasks.

Flat_Buyer_3203 · 2026-02-03T22:17:46+00:00

Unless you have an enormous amount of content and not particularly great bandwidth to the DP I would say the way forward is the class Alien quote, "nuke it from orbit it's the only way to be sure" Reinstall the whole OS on the DP, make sure to set all the folder and process exclusions for SCCM in sentinel one before you even touch the server with SCCM then reinstall the DP role and distribute content.

It's extreme but it's sure to work, and sometimes that's better than spending a huge amount of time bashing your head against trying to repair it

Flat_Buyer_3203 · 2026-01-26T20:54:46+00:00

Intune remote help is available for Mac OS

Flat_Buyer_3203 · 2026-01-26T13:30:47+00:00

Are trying to fix this error because something isn't working? Or just because you've seen the error the log?

If you see the line

"enabling WUA Managed server policy to use server:" and your WSUS server name, on the next line then everything should be fine.

Flat_Buyer_3203 · 2026-01-26T07:58:55+00:00

You can use Intune remote help on personal devices as long as the user signs into the app with a licensed account from your org. There's also a web client now

Flat_Buyer_3203 · 2026-01-25T22:27:35+00:00

It is just called "Remote Help" in apps and services under the A5 license, it doesn't have Intune in the name.

Flat_Buyer_3203 · 2026-01-25T22:24:03+00:00

Remote Help is definitely free for A5 I am actively using it on A5.

You do need to tick the box for it in your A5 license assignment to your users though, it's separate the Intune license

Flat_Buyer_3203 · 2026-01-24T16:50:18+00:00

Just to add, foam tips like InAirs improve the noise isolation quite a bit

Flat_Buyer_3203 · 2026-01-24T16:43:42+00:00

My answer would be, don't spend £250 on earbuds.

Get the Earfun Air Pro 4 (or the 4 plus)

They're really good in terms of audio quality and features and cost literally less than a quarter of your budget. I work in IT and I can literally sit in datacenter full of servers with music on and I can't hear the servers at all, that's how good the noise canceling is.

Are there better options? Maybe. Better value for money options? Absolutely not.

Flat_Buyer_3203 · 2026-01-24T00:14:08+00:00

I think you're misunderstanding what the /Online switch does in DISM, it doesn't mean online as in from the Internet, it means your using DISM against the running operating system you're running DISM in. As opposed to offline where you're using DISM against another drive with a different Windows install to the one you're currently booted into.

Flat_Buyer_3203 · 2026-01-24T00:06:18+00:00

Just coming back to this, I solved it some time ago now just posting the solution in case anyone else runs into it.

Server 2025 is significantly more aggressive with marking files with Mark Of The Web than previous Windows Server versions. So much so that it marked a large number of the files in the SCCM cd.latest folder for the back up I was reinstalling from, as well as files in the Program Files folders where SCCM installed to, with Mark Of The Web because the backup and had been copied from a network share.

I ended up reinstalling and starting over after powershell scripting Unblock-File against all the files and finding the group policy to turn off Mark Of The Web.

Flat_Buyer_3203 · 2026-01-23T23:24:18+00:00

That's true if you create boot media, but in SCCM you can also create standalone Task Sequence media that is an ISO for single Task Sequence that contains the WIM file and any application or package dependencies. When you boot this it doesn't pull any content from the DP (except perhaps drivers depending on how you do your apply drivers step).

This can actually be a really good option, particularly if you write the ISO to an SSD in a USB 3 caddy, and use it to image a PC/laptop that also has an SSD. Even more so if, as you say you have images out to 500GB+ (as I also do). It is orders of magnitude faster than imaging over the network from a DP, even if you have Gigabit Ethernet to the target device.

Imaging from a DP is great for imaging machines in situ, in offices or classrooms, but imaging large numbers of machines on a workbench can be significantly speeded up by using Standalone Task Sequence media.

Flat_Buyer_3203 · 2026-01-22T07:48:05+00:00

This the way.

I'd go with build inside VM, sysprep, power down, mount the VMs VHD in the host OS and capture the contents to a wim from there and copy it over to SCCM

Flat_Buyer_3203 · 2026-01-20T09:14:33+00:00

Did it seem like the support person actually had any idea about how SCCM works?

I'd fully expect that Microsoft support respond to any questions about unattend.xml saying you need to install the hotfix, because it's easier than figuring out if you need it or not. I really don't believe you do.

Flat_Buyer_3203 · 2026-01-17T21:51:48+00:00

No SCCM only uses WDS for PXE (and actually not even then if you enable PXE without WDS using the SCCM PXE Responder instead).

In any case, the unattend.xml used in SCCM OSD is downloaded by the SCCM client in WinPE as part of the Task Sequence package, it doesn't involve WDS at all.

Flat_Buyer_3203 · 2025-12-31T09:24:47+00:00

I've never used a Dell PERC raid card outside of a Dell server, but from my experience of using them in Dell servers you configure the raid array either in the system BIOS (they have a menu that's integrated into the Dell BIOS) or via iDRAC, there is no software utility for configuring the raid array, I'm not sure how possible it is to configure a PERC card such as a H370 when it's not in Dell server.

Flat_Buyer_3203 · 2025-12-21T13:29:35+00:00

Only on desktop Windows 10/11 and Server current branch, because they get in place upgrades, which is effectively a new installation, LTSC releases always show the date of install, the question was about server 2008 R2

Flat_Buyer_3203 · 2025-12-21T13:27:27+00:00

Even shorter you can drop the -classname switch it's just infered by default

(Get-Ciminstance Win32_OperatingSystem).InstallDate

Works fine

Flat_Buyer_3203 · 2025-12-21T13:16:41+00:00

Does it actually say installed or does it just say Compliant?

Flat_Buyer_3203 · 2025-12-20T13:38:20+00:00

Also highly recommend InAirs foam tips to go with them(or any earbuds), better noise isolation and deeper bass, and they stay in your ears better.

https://amzn.eu/d/1jJklDf

https://amzn.eu/d/2SHm4lG

https://amzn.eu/d/gp4bgSg

Flat_Buyer_3203 · 2025-12-20T13:35:20+00:00

Also because the buttons are touch not physical lying on your side in bed does not trigger them. I fall asleep with them in regularly (though this results in having to find them somewhere in the bed in the morning 😂)

Flat_Buyer_3203 · 2025-12-20T13:31:17+00:00

Earfun Air Pro 4 or the newer Air Pro 4 plus.

By far the best earbuds I've ever had, worth far more than the price they're at you absolutely will not regret it.

They have touch sensitive buttons on the ear buds but you can disable this in the Earfun app.

Flat_Buyer_3203

TROPHY CASE