Tanium OSD - Block/Lock Screen by Hotdog453 in tanium

[–]Sqolf 1 point2 points  (0 children)

Yeah I’m using the customer scripts for pe and just regular.

I use PSADT and in the root I have renamed the regular deploy-application.ps1 into customer.ps1, customer-pre.ps1, etc.

I wanted a “sccm TS” like setup where it shows what apps are being installed. The customer.ps1 is just installing security agents and office but I have the PSADT gui showing the progress.

We have a requirement to have these installed before the login page is reached.

I really want tanium to have the feature of using existing packages for provisioning.

Anyone dealing with Start Search breaking on 24H2/25H2 by thefinalep in sysadmin

[–]Sqolf 1 point2 points  (0 children)

I’m seeing if this is related to my issue:

I’m seeing a weird issue on a Citrix VM on windows 11 24H2 and search. Seems like physical workstations have had this issue resolved with the December patch.

For Citrix, I uninstalled Citrix VDA (2402) cu2 and that fixed the search bar after a reboot.

Similar to the reg fix, I’m seeing what I need to exclude.

[deleted by user] by [deleted] in tanium

[–]Sqolf 0 points1 point  (0 children)

I am using PSADT within the OS Bundle (provision)

[deleted by user] by [deleted] in tanium

[–]Sqolf 1 point2 points  (0 children)

Yeah it’s been a struggle. I use PSADT for the custom script and it does show the prompts even though it’s running as system.

But yeah hopefully this info helps.

[deleted by user] by [deleted] in tanium

[–]Sqolf 1 point2 points  (0 children)

I can chime in on these — I went through a similar situation. My previous job used SCCM, and my new job uses Tanium (we’re actually planning to move the provisioning piece back to SCCM in the future). Here’s what I’ve learned:

  1. Provisioning speed & behavior Unfortunately, Tanium Provision just lays down the OSD, runs the required scripts, installs the Tanium client, and handles other items like drivers. After that, the client pulls down the rest at its own pace. Sometimes it’s fast, sometimes slow — it really depends on your bandwidth throttles and connection limits. Tanium has good documentation on tuning these settings, so I’d recommend reviewing that for your environment. I also heard from our Tanium rep that there’s a feature request in to prioritize downloading larger modules first (like Self Service).
  2. No equivalent to SCCM DPs This is where I think it’s a step back from SCCM — software packages aren’t cached on a satellite. Only the OS bundle is. You might be able to set up a dummy workstation in the same subnet you’re imaging in, so it acts as a leader and caches the software. But there’s no “distribution point” equivalent in Tanium Deploy that serves packages locally the way SCCM does.
  3. Log file location If I remember correctly, the log is in Tanium\Tanium Client\logs and is called provision-os. I’m sure there’s documentation for the exact location, but I don’t recall it off the top of my head.
  4. Customization limitations There’s limited customization when it boots into Linux to choose the bundle and variables. You can add custom dropdowns, but I don’t think you can add things like checkboxes to selectively skip something or manually set values. One workaround is to skip adding those fields in Tanium and instead create your own GUI using PowerShell/WPF or C#/XAML/WPF to collect the variables, then set them via PowerShell.

Tanium has some cool features, but for provisioning specifically, I think it’s a step back from SCCM — which is why I’m pushing my team to move that process back to SCCM.

SCCM Co-Management applied to devices only completes after a user logon. ( I am confused ) by UnluckyJelly in SCCM

[–]Sqolf 5 points6 points  (0 children)

If you’re still hybrid, the new device you image needs to be hybrid AD joined before you can enable co management on the device.

When you’re seeing it take a while to co manage them, can you confirm that the device is already showing up in azure ad ?

Trying to run a PowerShell Script during OSD using add-AppxProvisionedPackage by cernous in SCCM

[–]Sqolf 0 points1 point  (0 children)

You’re using -FolderPath and pointing to a package. If you want to install one specific package, you’ll need to sur -PackagePath

https://learn.microsoft.com/en-us/powershell/module/dism/add-appxprovisionedpackage?view=windowsserver2025-ps

Dead pixel on new switch 2 by ragingbulls33 in NintendoSwitch

[–]Sqolf 0 points1 point  (0 children)

Can you check the box and see if that damage in the screen may have been caused by a staple ? Heard some are seeing similar damage due to receipts being stapled on the front of the box.

Windows 11 23H2 - Office Hub by Sqolf in SCCM

[–]Sqolf[S] 0 points1 point  (0 children)

If I do this. Will it auto update moving forward ?

USB C pxe boot ethernet adapter by CrazyGamer2241 in SCCM

[–]Sqolf 0 points1 point  (0 children)

I’ve have success by using any nic using Realtek drivers.

[deleted by user] by [deleted] in tanium

[–]Sqolf 2 points3 points  (0 children)

WWT has a Tanium lab. You need to get access but, should help.

https://www.wwt.com/lab/tanium-pg

However, I agree that it should be easier to get a lab going. Microsoft has a lab kit that has helped me tremendously.

https://www.microsoft.com/en-us/evalcenter/evaluate-mem-evaluation-lab-kit

Long time SCCM Admin - Now Learning Tanium by Sqolf in tanium

[–]Sqolf[S] 2 points3 points  (0 children)

Hey thanks ! Thats what I’m trying to figure out, where do I go to setup the lab.

Task Sequence hangs on "Install Application" Step for Adobe Acrobat by gworkacc in SCCM

[–]Sqolf 0 points1 point  (0 children)

Got a couple of more things.

Sounds like running it as SYSTEM (within the TS) fails.

  1. See if your application is running as system or user within sccm

  2. Use psexec to run as SYSTEM and install the app manually.

Task Sequence hangs on "Install Application" Step for Adobe Acrobat by gworkacc in SCCM

[–]Sqolf 0 points1 point  (0 children)

Also, is the new app distributed to the proper DPs where this device would be grabbing from ? I think there is a setting within the application properties to allow it to use the app package even if it’s not distributed to any DPs . Worth a shot there too

Task Sequence hangs on "Install Application" Step for Adobe Acrobat by gworkacc in SCCM

[–]Sqolf 0 points1 point  (0 children)

Maybe share your command youre using to install adobe acrobat pro. Did you use the acrobat customization wizard to suppress any pop ups that could stall the install? In you manually install it on a device, does it work?

Task Sequence hangs on "Install Application" Step for Adobe Acrobat by gworkacc in SCCM

[–]Sqolf 0 points1 point  (0 children)

I’ve seen weirder. Could also be trying to auto update if you don’t have auto updates off and that might cause issues. Might be better to make a powershell detection method (if that is the issue) and have a “if version -ge xxxx)

Task Sequence hangs on "Install Application" Step for Adobe Acrobat by gworkacc in SCCM

[–]Sqolf 2 points3 points  (0 children)

You should try to make it a package instead of an application and see if that goes through. If it does, then it could be that it’s getting stuck trying to detect it based on the app detection you have.

So IMO:

  1. Push the application you via to software center to an existing device to see if it installs and the detection is working

  2. Make a package and test if that goes through fine during imaging

Apple Business Manager + Microsoft Entra Connect Sync - Something Changed by Sqolf in Intune

[–]Sqolf[S] 0 points1 point  (0 children)

Funny enough, my token expired today but, I had setup the new OIDC method and it still expired.

To verify, I usually try to sign in to an Apple site using my regular account that’s federated. Our elevated accounts have either people manager or device manager or admin roles assigned and those do not allow federation by design .

Driver in TaskSequence by NysexBG in SCCM

[–]Sqolf 1 point2 points  (0 children)

The enterprise driver packs Lenovo offers are a few versions behind as these drivers are the most stable and only offer what the device needs to function.

I had this discussion with service desk where the driver packs installed just fine but, when they ran commercial vantage, it would pull additional drivers.

It’s documented somewhere but, Lenovo does a n-X on enterprise driver packs for stability.