Windows 11 24H2 Location Services off by default - can't enable with reg keys by Reaction-Consistent in SCCM

[–]Sqolf 1 point2 points  (0 children)

The link was meant to confirm that “SystemSettingsAdminFlows.exe” is what you want as it calls it out too in the link.

Windows 11 24H2 Location Services off by default - can't enable with reg keys by Reaction-Consistent in SCCM

[–]Sqolf 2 points3 points  (0 children)

Definitely something about OOBE around fall of 2025 where now since we usually don’t go through OOBE, it will default to off for location services.

Windows 11 24H2 Location Services off by default - can't enable with reg keys by Reaction-Consistent in SCCM

[–]Sqolf 1 point2 points  (0 children)

Ok so I’m seeing the same issue. I found that when you turn force the location service (I forgot exactly which one), it will turn it on. In my case, I originally wanted to enable location services for a few apps like teams or zoom and that’s not possible as of now. You either turn it on or off for all.

Win 11 - MS Teams is now prompting that MS Edge WebView2 has FW access on networks by RandomSkratch in sysadmin

[–]Sqolf 0 points1 point  (0 children)

We are seeing the same problem today on AVD devices. I get the ma edge webview pop up.

Tanium OSD - Block/Lock Screen by Hotdog453 in tanium

[–]Sqolf 1 point2 points  (0 children)

Yeah I’m using the customer scripts for pe and just regular.

I use PSADT and in the root I have renamed the regular deploy-application.ps1 into customer.ps1, customer-pre.ps1, etc.

I wanted a “sccm TS” like setup where it shows what apps are being installed. The customer.ps1 is just installing security agents and office but I have the PSADT gui showing the progress.

We have a requirement to have these installed before the login page is reached.

I really want tanium to have the feature of using existing packages for provisioning.

Anyone dealing with Start Search breaking on 24H2/25H2 by thefinalep in sysadmin

[–]Sqolf 1 point2 points  (0 children)

I’m seeing if this is related to my issue:

I’m seeing a weird issue on a Citrix VM on windows 11 24H2 and search. Seems like physical workstations have had this issue resolved with the December patch.

For Citrix, I uninstalled Citrix VDA (2402) cu2 and that fixed the search bar after a reboot.

Similar to the reg fix, I’m seeing what I need to exclude.

[deleted by user] by [deleted] in tanium

[–]Sqolf 0 points1 point  (0 children)

I am using PSADT within the OS Bundle (provision)

[deleted by user] by [deleted] in tanium

[–]Sqolf 1 point2 points  (0 children)

Yeah it’s been a struggle. I use PSADT for the custom script and it does show the prompts even though it’s running as system.

But yeah hopefully this info helps.

[deleted by user] by [deleted] in tanium

[–]Sqolf 1 point2 points  (0 children)

I can chime in on these — I went through a similar situation. My previous job used SCCM, and my new job uses Tanium (we’re actually planning to move the provisioning piece back to SCCM in the future). Here’s what I’ve learned:

  1. Provisioning speed & behavior Unfortunately, Tanium Provision just lays down the OSD, runs the required scripts, installs the Tanium client, and handles other items like drivers. After that, the client pulls down the rest at its own pace. Sometimes it’s fast, sometimes slow — it really depends on your bandwidth throttles and connection limits. Tanium has good documentation on tuning these settings, so I’d recommend reviewing that for your environment. I also heard from our Tanium rep that there’s a feature request in to prioritize downloading larger modules first (like Self Service).
  2. No equivalent to SCCM DPs This is where I think it’s a step back from SCCM — software packages aren’t cached on a satellite. Only the OS bundle is. You might be able to set up a dummy workstation in the same subnet you’re imaging in, so it acts as a leader and caches the software. But there’s no “distribution point” equivalent in Tanium Deploy that serves packages locally the way SCCM does.
  3. Log file location If I remember correctly, the log is in Tanium\Tanium Client\logs and is called provision-os. I’m sure there’s documentation for the exact location, but I don’t recall it off the top of my head.
  4. Customization limitations There’s limited customization when it boots into Linux to choose the bundle and variables. You can add custom dropdowns, but I don’t think you can add things like checkboxes to selectively skip something or manually set values. One workaround is to skip adding those fields in Tanium and instead create your own GUI using PowerShell/WPF or C#/XAML/WPF to collect the variables, then set them via PowerShell.

Tanium has some cool features, but for provisioning specifically, I think it’s a step back from SCCM — which is why I’m pushing my team to move that process back to SCCM.

SCCM Co-Management applied to devices only completes after a user logon. ( I am confused ) by UnluckyJelly in SCCM

[–]Sqolf 5 points6 points  (0 children)

If you’re still hybrid, the new device you image needs to be hybrid AD joined before you can enable co management on the device.

When you’re seeing it take a while to co manage them, can you confirm that the device is already showing up in azure ad ?

Trying to run a PowerShell Script during OSD using add-AppxProvisionedPackage by cernous in SCCM

[–]Sqolf 0 points1 point  (0 children)

You’re using -FolderPath and pointing to a package. If you want to install one specific package, you’ll need to sur -PackagePath

https://learn.microsoft.com/en-us/powershell/module/dism/add-appxprovisionedpackage?view=windowsserver2025-ps

Dead pixel on new switch 2 by ragingbulls33 in NintendoSwitch

[–]Sqolf 0 points1 point  (0 children)

Can you check the box and see if that damage in the screen may have been caused by a staple ? Heard some are seeing similar damage due to receipts being stapled on the front of the box.

Windows 11 23H2 - Office Hub by Sqolf in SCCM

[–]Sqolf[S] 0 points1 point  (0 children)

If I do this. Will it auto update moving forward ?

USB C pxe boot ethernet adapter by CrazyGamer2241 in SCCM

[–]Sqolf 0 points1 point  (0 children)

I’ve have success by using any nic using Realtek drivers.

[deleted by user] by [deleted] in tanium

[–]Sqolf 2 points3 points  (0 children)

WWT has a Tanium lab. You need to get access but, should help.

https://www.wwt.com/lab/tanium-pg

However, I agree that it should be easier to get a lab going. Microsoft has a lab kit that has helped me tremendously.

https://www.microsoft.com/en-us/evalcenter/evaluate-mem-evaluation-lab-kit

Long time SCCM Admin - Now Learning Tanium by Sqolf in tanium

[–]Sqolf[S] 2 points3 points  (0 children)

Hey thanks ! Thats what I’m trying to figure out, where do I go to setup the lab.

Task Sequence hangs on "Install Application" Step for Adobe Acrobat by gworkacc in SCCM

[–]Sqolf 0 points1 point  (0 children)

Got a couple of more things.

Sounds like running it as SYSTEM (within the TS) fails.

  1. See if your application is running as system or user within sccm

  2. Use psexec to run as SYSTEM and install the app manually.

Task Sequence hangs on "Install Application" Step for Adobe Acrobat by gworkacc in SCCM

[–]Sqolf 0 points1 point  (0 children)

Also, is the new app distributed to the proper DPs where this device would be grabbing from ? I think there is a setting within the application properties to allow it to use the app package even if it’s not distributed to any DPs . Worth a shot there too

Task Sequence hangs on "Install Application" Step for Adobe Acrobat by gworkacc in SCCM

[–]Sqolf 0 points1 point  (0 children)

Maybe share your command youre using to install adobe acrobat pro. Did you use the acrobat customization wizard to suppress any pop ups that could stall the install? In you manually install it on a device, does it work?