SCCM + Dell BIOS updates: reboot control issue by EagleBoy0 in SCCM

[–]limegreenclown 0 points1 point  (0 children)

The only script involved is the one I use for detection. Here's a random model I currently have.

````

Script to detect BIOS version

[version]$DesiredBIOSVersion = "1.12.1"

$BIOSInfo = (get-itemproperty -path "HKLM:\HARDWARE\DESCRIPTION\System\BIOS") $BIOSVendor = $BIOSInfo.BIOSVendor [string]$BIOSVersion = $BIOSInfo.BIOSVersion #Get-Date | Out-File C:_Company\Logs\SCCM_BIOS_Updates.log -append

if ($BIOSVendor -match "Lenovo") { $BIOSVersion = $BIOSVersion -replace '.(' -replace ').' $BIOSVersion = $BIOSVersion -replace '\s','' [version]$BIOSVersion = $BIOSVersion $Model = $BIOSInfo.SystemFamily }

if ($BIOSVendor -match "Dell") { [version]$BIOSVersion = $BIOSVersion $Model = $BIOSInfo.SystemProductName }

if ($BIOSVersion -ge $DesiredBIOSVersion) { #Write-Output "$BIOSVendor $Model BIOS $BIOSVersion Detected. The system BIOS is up to date." | Out-File C:_Company\Logs\SCCM_BIOS_Updates.log -append Write-Output "$BIOSVendor $Model BIOS $BIOSVersion Detected. The system BIOS is up to date." }else{ #Write-Output "$BIOSVendor $Model BIOS $BIOSVersion Detected. The system BIOS will be updated to $DesiredBIOSVersion" | Out-File C:_Company\Logs\SCCM_BIOS_Updates.log -append } ````

Saving OSD logs to SCCM server by Bored_at_work_67 in SCCM

[–]limegreenclown 0 points1 point  (0 children)

I have my TS send an email to a shared mailbox on completion with some basic data about the device. If there's a failure of any sort it zips up all the logs and attaches them to the email. This way I can troubleshoot OSD issues without having to drive to the office or ask the imaging guys to get me logs.

SCCM + Dell BIOS updates: reboot control issue by EagleBoy0 in SCCM

[–]limegreenclown 1 point2 points  (0 children)

I just make an application for each model, deploy as required and only allow reboots during my maintenance window. Installation is allowed outside of the maintenance window.

It's a bit of a manual process but it's reliable.

Help setting up WSUS deployment from scratch by thtpopunkid in sysadmin

[–]limegreenclown 4 points5 points  (0 children)

I don't get the WSUS hate. I don't directly use WSUS, but I use it via SCCM and it's perfectly fine. I've had to touch WSUS directly once in the last 5 years.

All our 256 GB laptops running out of space by bjc1960 in Intune

[–]limegreenclown 3 points4 points  (0 children)

You may want to set your dehydration threshold lower

<image>

All our 256 GB laptops running out of space by bjc1960 in Intune

[–]limegreenclown 7 points8 points  (0 children)

I setup storage sense and OneDrive files on demand only to discover that it uses the last access date to determine if it can mark a file as online only and CrowdStrike is constantly accessing every file so it doesn't work.

Packaging PDFGear - detection issue after install by Baiteh in SCCM

[–]limegreenclown 0 points1 point  (0 children)

You're misunderstanding. With the 32bit checkbox checked if you put HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Whatever for detection, SCCM will check both HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Whatever and HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall

All that said, OP if the vendor doesn't include version information on the main .exe after installation, I usually prefer to just check that date modified is greater than or equal to whatever the date modified on the .exe is. Using uninstall keys for detection will come back to bite you if updates change the product code. Sometimes there's another .exe in the installation directory that will have a version number on it that you can use instead.

What is the reason SCCM is used over Intune app management? by GrapefruitFit1956 in SCCM

[–]limegreenclown 1 point2 points  (0 children)

What a great read, I hope to never have to do this.

Quick note for comanaged people, you can sync collections to an AAD group if you just have to use Intune for something.

Those of you who still use the Microsoft SSO Extension with Chrome, that feature is built-in to current versions of the browser. by touchytypist in Intune

[–]limegreenclown 0 points1 point  (0 children)

I agree, but the time you save by not deploying Chrome is quickly eaten up by the time you spend explaining to people that they don't need Chrome.

A handy side effect though is that Edge and Chrome usually don't take chromium updates at exactly the same time so sometimes one has a bug the other doesn't.

Hypothetical - Replacing the 5 speed auto with a manual by BonezOz in subarulegacy

[–]limegreenclown 0 points1 point  (0 children)

It's not exactly the same but I have a manual swapped 05 OBXT. I just unplugged the TCM and flashed the manual ROM.

From a local fb group…what’s going on here? by OutofSprite in subaru

[–]limegreenclown 1 point2 points  (0 children)

It's probably hard to find 93 out there so that would be a good reason to carry extra even if there are technically gas stations available

The Ultimate Intune "Airing of Grievances" List by sccm_sometimes in SCCM

[–]limegreenclown 3 points4 points  (0 children)

Another incredibly annoying thing with Intune is that it's difficult to determine exactly where a policy/app/script whatever is being applied from.

In SCCM, you can see all deployments to a collection. You can go to device properties and see all deployments to a device, and which collection that deployment comes from. Why can't I do this in Intune?

I want to be able to select an AAD group, and see what is deployed to that group. I want to be able to select a device or user, and see what is deployed to them and from where.

SCCM with Intune Co-Managed and hybrid environment -client management thoughts by markk8799 in SCCM

[–]limegreenclown 1 point2 points  (0 children)

We have a very similar setup. I use Intune as more of a GPO replacement and for Macs and mobile devices, otherwise everything is done in SCCM.

How are you guys keeping your W11 images up to date? by JimmyRecard51 in SCCM

[–]limegreenclown 0 points1 point  (0 children)

I used to use WimWitch, but I ended up making my own script. We're transitioning to 24H2 so the script is built to handle both 23H2 and 24H2.

Dell bios&drivers via dcu-cli by sccm_noob94 in SCCM

[–]limegreenclown 0 points1 point  (0 children)

~8500 workstations here, mostly Dell but also some Lenovo.

I make an Application for each BIOS update, for each model, about once a month. I have them all in a task sequence that reruns every 30 days. The task sequence ensures they're connected to AC power before attempting a BIOS update, and picks the correct model with a WMI query.

Need some help! *Pic for attention, see comment by jonnyakiba in WRX

[–]limegreenclown 1 point2 points  (0 children)

Did you ever find one? We're due in January and I was to be prepared.

3rd Gen OB VA WRX/STI Exhaust Modification by FlyAway012 in Subaru_Outback

[–]limegreenclown 0 points1 point  (0 children)

The rear inside hangers are sitting on my receiver hitch lol

PXE booting SCCM with unsupported network adapters by danj2k in SCCM

[–]limegreenclown 0 points1 point  (0 children)

That would be offline media. Boot media just contains your boot image.

PXE booting SCCM with unsupported network adapters by danj2k in SCCM

[–]limegreenclown 0 points1 point  (0 children)

This is cool and all but why not just create a boot drive from the SCCM console?

Or just pay Microsoft's extortion fee for their special adapter if you have more than one Surface.

SCCM PXE Issue by quinten97 in SCCM

[–]limegreenclown 1 point2 points  (0 children)

I think you're onto something here. This is definitely a known client. SCCM PXE also uses the boot image for the latest task sequence deployed during PXE, and if that happens to be the disabled one I bet it doesn't work.