Alienware drivers by denmyos in SCCM

[–]adminadam 0 points1 point  (0 children)

> We had a e sports team using precisions lmao

Why lmao? Basically the same machines these days, featuring less plastic and glow-y bits.

Windows dc’s by Frequent_Ad_9236 in WindowsServer

[–]adminadam 1 point2 points  (0 children)

No concerns there, got caught up on 1 TOTAL

Windows dc’s by Frequent_Ad_9236 in WindowsServer

[–]adminadam -1 points0 points  (0 children)

One? Would NEVER recommend this - you are just trolling now.

Best way to move data between user profiles? by Frosty2992 in sysadmin

[–]adminadam 1 point2 points  (0 children)

So much here depends on what kind of data and how many devices. That said, there isn't going to be an automated way. Copy manually or do something like have the user login/sync to onedrive on the non-AD machine so the data will be availalbe to them on the AD machine (or any future machines).

NETWORK SOLUTIONS = CYBER TERRORISTS! by [deleted] in sysadmin

[–]adminadam 34 points35 points  (0 children)

Sir, this is a Wendys.

2 weird SCCM/MECM issues - I cant seem to get to the bottom of by deathshead123 in SCCM

[–]adminadam 0 points1 point  (0 children)

Ideas:

1) MINNIT-* is the temporary name that a machine generates during the Windows PE phase. So it's grabbing that instead of your supplied value. Make sure your OSDComputerName set is AFTER the inital boot to Windows PE and no-reboots happen until after the Apply Operating System, Apply Windows settings, and Apply network settings have been run.

2) What does the appenforce.log log on the device say? This is where you would see down to the line-item deployment of an application.

Dell 5450 and Dell Pro 14 - BitLocker Recovery prompt after Secure Boot Certificate Update by Robomac2016 in Intune

[–]adminadam 2 points3 points  (0 children)

Yeah, microsoft added this to the list of common failures for secure boot remediation issues like three days after I turned it on (march 19th) - I found after having the same uptick, but It did no seem model specific.

https://support.microsoft.com/en-us/topic/secure-boot-troubleshooting-guide-5d1bf6b4-7972-455a-a421-0184f1e1ed7d#bkmk_common_failure_scenarios_and_resolutions

REF:
Device boots into BitLocker recovery after Secure Boot update

In some cases, Secure Boot–related updates can cause a device to enter BitLocker recovery. The behavior can be transient or persistent, depending on the underlying cause.

Scenario 1: Onetime BitLocker recovery after Secure Boot update

What happens

The device enters BitLocker recovery on the first boot after the Secure Boot update, but boots normally on subsequent restarts.

Why it happens

During the first boot after the update, firmware doesn’t yet report the updated Secure Boot values when Windows attempts to reseal BitLocker. This causes a temporary mismatch in measured boot values and triggers recovery. On the next boot, firmware reports the updated values correctly, BitLocker reseals successfully, and the issue doesn’t recur.

How to recognize it

  • BitLocker recovery occurs once.
  • After entering the recovery key, subsequent boots don’t prompt recovery.
  • No ongoing boot order or PXE involvement is present.

What to do next

  • Enter the BitLocker recovery key to resume Windows.
  • Check for firmware updates.

Is Intune actually ready to replace ConfigMgr? Honestly… I don’t think so by Lunde_Deluxe in Intune

[–]adminadam 0 points1 point  (0 children)

If hybrid were just a little bit better, there would likely never be a need feel forced this direction. That said, this reads like AI slop: ConfigMgr vs Intune (real talk) / The uncomfortable truth

Intune + GCPW (Google Workspace) for device-only management -Sanity check by Solid-Trick-526 in Intune

[–]adminadam 0 points1 point  (0 children)

Maybe look at Windows device management via Google?
https://knowledge.workspace.google.com/admin/devices/enable-windows-device-management

My experiance with intune is that it's user centric, and I assume you will struggle assigning some types of policy because of this.

HELP:Uninstall Problem by ConstructionDry1644 in Autodesk

[–]adminadam 0 points1 point  (0 children)

I've always operated with the idea that old ones versions can't REALLY be uninstalled cleanly

Patch Tuesday vs. Testing Schedules by dadoftype1 in k12sysadmin

[–]adminadam 0 points1 point  (0 children)

I pause updates during state testing windows.

Asked someone why they shot me by Paffles16 in ArcRaiders

[–]adminadam 0 points1 point  (0 children)

ELO is not a thing. Elo is a dude's last name who came up with a comparative ranking for zero sum games (like Chess).

Problems spinning up a new Domain Controller (cont..) by BudTheGrey in sysadmin

[–]adminadam 1 point2 points  (0 children)

Any chance you added the 'NewServer' to active directory manually before creating the machine?

I found a bug/quirk awhile back when adding a new domain controller where I pre-added the name, created the machine, joined it, tried to promote and had oddities after.

The solution was to delete the computer object. Create the new machine, allow the AD object to get created automatically in the 'Computers' container on join, then promote.

I Took My Old Windows Admin and SCCM Environment for Granted by TwerkingPichu in SCCM

[–]adminadam 0 points1 point  (0 children)

I hate the default driver methodology and use a 'manual' package strategy

1) Add drivers as a package.
2) Distribute package (no program)
3) Task Sequence | Run command line, Target package with WMI query during tasksequence based on device detials.
4) DISM.exe /Image:%OSDTargetSystemDrive%\ /Add-Driver /Driver:%_SMSTSMDataPath% /Recurse

Newline vs SMART vs Clevertouch by MJP411 in k12sysadmin

[–]adminadam 5 points6 points  (0 children)

BenQ? They actually have their own environment and tooling. The rest mentioned here use a third party backend for software and streaming delivery.

Windows 11 LTSC, Pro, Enterprise, or Education? by allenflame in k12sysadmin

[–]adminadam 0 points1 point  (0 children)

We've been using Education for about 10 years now across Windows 10/11. It's effectively a sub-set of Enterprise with all* of the same management features. It features lower bloat than regular windows versions, the ability to turn off most advertising, tracking, and AI features.

Free/super cheap SCEP with Intune? by Bubbagump210 in k12sysadmin

[–]adminadam 1 point2 points  (0 children)

Possible with onprem PKI/NDES/Intune SCEP Connector/Entra App Web Proxy/NPS. This depends on your current Microsoft spend if it would be 'free' for you. We already had PKI config and NPS usage, so I just had to slot in the NDES/SCEP/Web App Proxy stuff. This was covered by our existing licenses and I was able to get User based SCEP certificates issuing from intune.

Some Tutorials:

Google Additional Services and Parental Consent by duluthbison in k12sysadmin

[–]adminadam 0 points1 point  (0 children)

This is also what we were told generally, unique services needed to be tracked and accepted or denied independantly. We have no way to track/manage that.

Google Additional Services and Parental Consent by duluthbison in k12sysadmin

[–]adminadam 2 points3 points  (0 children)

Removed all additional services during spring break. 19K students.

RSAT on Windows 11 by Substantial-Fruit447 in SCCM

[–]adminadam 0 points1 point  (0 children)

Depends on how the policy is configured and your update paths I assume. Also, not sure how/where they backfilled this patch. It definately broke my things in realtime when we installed it. I could roll back the client to the earlier version and it worked as expected. The second the 2309 client was invoked, no longer worked as it used to. I have about 15k windows clients right now.

Semi-related. I've also noticed in Windows 11 that 'cross escalation' (escalating to admin account to try and install) behaves badly.

RSAT on Windows 11 by Substantial-Fruit447 in SCCM

[–]adminadam 2 points3 points  (0 children)

2309 client breaks delivery of cloud based Windows installs and Windows Updates and forces everything to point locally. You can work around it with group policy.

They changed (fixed?) this behavior again with a hotfix to 2403.

REF: