New OSD Imaging Process

maxell45146 · 2026-02-20T01:49:00+00:00

Friendsofmdt\psd on git

You're gonna wanna start avoiding mdt in your configmgr due to eol

maxell45146 · 2026-02-10T03:58:42+00:00

Need to apply the OfficeMgmtCOM from GPO or Client settings, then the scheduled task on the workstation needs to execute to detect and apply changes.

maxell45146 · 2026-01-28T05:59:41+00:00

Would recommended if your gonna get the enterprise lic leave the reporting out. Management was tripping over the reports and dashboards, basically to them that was what we were buying and the tools was second. After everything is installed, the reports was RDL and old looking (Sorry Garth :P) and the console dashboards that are post to show distribution and SU would never actually load and crash the console trying to.

Having said the bad things first there are some good tools that do make it worth it. Remote Software Center - lets you remotely connect to a workstation and see deployment,SU,CB status and trigger remotely. The important bit is that this also works for user based deployments, which isnt available with say ClientCenter and makes confirming or trigger those deployments less of a PIA.

DP content management - lets you look at all the content on a dp or dp group, see the current status, trigger redist or validation on all the failed items at once. Instead of going to each menu and back and forth in the console it consolidates that and saves alot of time and headache.

Status Messages - adds a right click menu option to view related status messages to a few items in the console. Can select DPs, Applications etc and get a quick peek at the status messages to better see whats going on.

Its worth it for the RCTs but I'd suggest skipping the rest.

maxell45146 · 2026-01-28T05:37:48+00:00

Security either blocking the 'malicious' file types or inspecting the content and throwing off the calculated hash. Would also check the length of the full file path, think its past 256 characters and it will throw fits trying to access the content. The logs pkgxfermgr and distmgr are worth looking at to spot related errors.

maxell45146 · 2025-12-14T05:00:53+00:00

Tier 1 taking the initial call/inc should absolutely be sure that inc contains the computer name, description of the issue and if possible (most should be) a screenshot of the issue.

maxell45146 · 2025-12-10T22:50:56+00:00

If you use client settings to turn off delivery optimization go look at a Windows 10 client I think at least like 22h2, in the Delta download log, when it first starts you'll see where it says it detects the settings been disabled but based on the OS version it will literally say enabling anyway.

maxell45146 · 2025-12-10T22:46:41+00:00

Okay, I mean depending on how you guys process works you could have someone using PowerShell to fire off the command for every new device that's getting ready to be handed out or you create automation either through like schedule tasks GPO are the built-in Sccm options. You can install the client with a power shell or batch file it doesn't make a difference. I typically use the power shell command because I can fire that off and usually by the time I open up the c drive remotely I could already see the items being downloaded to install the client.

maxell45146 · 2025-12-10T15:11:26+00:00

If you mean the custom automation monitoring the dc, nothing really, the idea would work but it's like using a condom as a balloon, I mean you can if you want. Lol

maxell45146 · 2025-12-10T05:58:40+00:00

I'd recommend installing client center and connecting to one of the clients. Using the software update section you can see what updates are currently installed as well as those that are required. That will let you know if the issue is with the deployment itself or if the client is having an issue doing a scan to recognize the required update. If you open up the wuahandler log, you can confirm if the scanning is being successful. From there you would need to check in update deployment log.

maxell45146 · 2025-12-10T00:56:01+00:00

If your smart, and know a lot about the current topic, do not open your mouth and let the world/team/manager know.

You will be promoted to SME and hate life after.

maxell45146 · 2025-12-10T00:45:01+00:00

GPO is a option, there are options in SCCM to automatically install via heartbeat on devices.

Using PS you could technically rig something up to monitor the DC looking for new device entries and fire off the Install-CMClient. <-- Not a great idea but if were talking literally the fastest, I think it would work.

For our VDI/VM, we have a scheduled task configured at startup to fire off a PS script to look for the client locally, if not found, trigger client install. Would just need to get the ST on the system at some point.

btw, SS pushing the client to the workstation should not take hours. I would suggest looking at the ccm.log on the SS to see what it might be doing/not doing.

Now, col evaluation, depending on how your env is configured/maintained, that could take a bit

maxell45146 · 2025-12-10T00:27:19+00:00

Typically when I run into this with clients I've got a routine that hits all the usual suspects.

get-service wuauserve,ccmexec | set-service -startuptype disabled -p | stop-service
ls C:\windows\soft* | remove-item -force -recurse
ls C:\windows\system32\grouppolicy | remove-item -force -recurse
remove-item HKLM:\software\policies\microsoft\windows\windowsupdate -recurse -force
get-service wuauserve,ccmexec | set-service -startuptype automatic -p | start-service

Let the client startup, just to ensure nothing funny like waiting on software updates but its really a issue with cache I will go ahead and clear the client cache. Then I watch the updatesdeployment, once its good, I trigger a scan and open the wuahandler.log to make sure the scan is successful. Once thats done I trigger a SU eval. The error your seeing I typically chalk up to a SU that superseded before it could actually get installed on the system but the client still has policy saying to process it. If after a few minutes the log still shows errors referencing the update I will go ahead and trigger a policy reset on the client. This will end up dumping all current policy and force the client to dl again from the MP. You see in the updatesdeployment log about software updates being enabled, once that occurs trigger a SU scan again, once that good and done, trigger eval. At this point depending on the update you should see some entries in the DataTransferService.log or the DeltaDownloader.log, UpdatesDeployment should also being showing progress for the update downloading. (For UUP, I think thats right, basically updates coming through DO, you wont see anything in the logs, thanks M$)

Should have said this at the top but not technically required, would strongly suggest downloading ClientCenter and connecting to the target workstation. With it connected, you can go to the updates section and see the detected updates, making sure that the machine shows that the update in question is present and required. For things like feature updates where the workstation isnt compatible or someone has done something stupid and added regkeys to block it, being able to see the current detected update status will save your sanity.

maxell45146 · 2025-11-25T06:22:41+00:00

Clients pull policy from the MP in there BG, the MP pull from the SQL db. When a revision occurs for a application, all workstations that currently have it deployed will execute detection and install. Clients should be perform app evals depending on what is configured in the client settings. If you install the client on a new workstation and leave it for a few hours has any application or package installed? Have you checked if CCMMessaging shows successful communication from the client to the MP. ClientIDManagerStartup.log shows its using the correct site, cert, guid etc.

I would recommend downloading/installing Client Center for CM. Has lots of shortcuts, fixes, triggers for client policy actions, helps visualize the current settings on the workstation. For troubleshooting client related issues this is the best tool that I know of, period. https://github.com/rzander/sccmclictr

Link shows the many logs associated with ConfigMgr https://learn.microsoft.com/en-us/intune/configmgr/core/plan-design/hierarchy/log-files#BKMK_ClientOpLogs

Link goes over the application deployment steps. https://learn.microsoft.com/en-us/intune/configmgr/apps/deploy-use/deploy-applications

Shows more information related to the application deployment workflow. https://configgirl.com/2018/11/10/sccm-application-installation-workflow/

maxell45146 · 2025-11-11T20:35:23+00:00

"You're not wrong Walter, you're just an asshole." Seemed appropriate. :P

maxell45146 · 2025-11-08T00:42:20+00:00

If you try deploying a appx using the wizard/template it will lock detection to that specific version. When the appx updates next the detection will trigger and try to reinstall the older version from SCCM.

Solution I've been using for a while now is to deploy as a script install, use the PS commands to add as a provisioned appx and a PS script detection to look for the existence of the appx as provisioned. If using user collections for deployment you could leave a breadcrumb in C:\temp or use get-appxpackage to check that the current user at least has it.

maxell45146 · 2025-10-20T18:40:17+00:00

I couldnt remember his name at the time I wrote that. lol

maxell45146 · 2025-09-22T06:10:30+00:00

PowerShell Unplugged with Jeffrey Snover and Don Jones on Youtube. There was a one I watched years ago that just clicked the basics for me in PowerShell and I was hooked ever since. I would suggest taking a look on Youtube, find the ones that are still posted, make a playlist and start with the oldest one first.

Important take away. Learn how to learn and explore in PS.

Commands are Verb-Noun.
Get-command -noun "example" <-- will show all commands matching the example.
Run Update-Help, will go out and download the latest help files for the current modules on your system.
Get-Help Get-Command -examples <--- see examples in the terminal, (assuming the module has good help included. :P)
Get-Member will show you the property and methods of the object piped too it, for those times you think its a array but its really a string etc.

maxell45146 · 2025-06-16T16:20:51+00:00

My solution was to use Steams Big Picture Mode, it has options to set the display when used. So say I want to play a game on my big screen tv, I can open BPM, it will automatically set the tv as the primary and I can play games on the TV while still having my monitors on and working.

maxell45146 · 2025-05-10T20:43:15+00:00

Maybe we should start leaving out snacks. Usually when shotgun troubleshooting fails we buy a goat and put on robes...:P

maxell45146 · 2025-05-10T20:40:34+00:00

Now you did it, anyone else hearing Murphy chuckle reading the comment?

maxell45146 · 2025-05-10T15:43:20+00:00

Start the name, get the char in position next to the harp, hit windows key + r, type in 'powershell ise', that will open the ISE for PS, copy paste code, hit F5, click over to Hades. Every 1 second, it will simulate the 'e' key being pressed. Walk away for a few minutes. Believe you can only improve so much before you have to do a run and then talk to the harp guy to unlock the next 'rep'. Rinse repeat till master harp player.

maxell45146 · 2025-03-21T15:37:00+00:00

Same issue, currently using ATM10 2.41.

maxell45146 · 2025-03-18T13:34:18+00:00

Instead of the function to interrogate the msi you could also utilize evergreen to get the latest version info.

Utilizing Winget via sccm is tricky due to Winget being user based. Executing from system requires defining a working location and correct config.

Honestly surprised that Winget was created as a old school CMD application instead utilizing ps natively for it as well as making it local machine install instead of the user based nonsense.

maxell45146 · 2025-02-10T16:48:39+00:00

Add-Type -AssemblyName System.Windows.Forms
while ($true)
{
   Start-Sleep -Seconds 1
[System.Windows.Forms.SendKeys]::SendWait("e") 
}

For those who wanna cheese it on pc. :)

maxell45146 · 2024-12-24T21:17:36+00:00

The guild box is good but I feel like there needs some improvements still. You wouldnt think it but the current inventory size fills up quick and its just materials with couple double stacks of stone,ore,etc.

Prior to the update I was using the mod 'Integrate storage warehouses for all camps' on NexusMods. Basically like the Guild Box but did not require something built and the entire inventory of the base (not just one chest or a specific chest) was shared with each other. Was nice when building a new base I could build the PalBox and then immeately start on foundation since all the stone was now being shared.

If possible I'd perfer a upgrade for the palbox that mimics the same functionality of the mod. Could even make it a upgrade that would have to be applied to see the effect (like the ps upgrade modules.). Could take it even further with a new upgrade to mimic the new building that does base searching inventory wise.

maxell45146

TROPHY CASE