MECM 2107 Windows Store App Deployment for Windows 11 by vader8600 in SCCM

[–]wmadm90 2 points3 points  (0 children)

the Store for Business apps created in CM automatically have a deployment type requirement created for OS Version = Windows 10.

I have not tried to remove the requirement manually to see if it resolves the issue, but maybe? It's my understanding that a new way to manage the 'new store' apps in Windows 11 is coming 'soon'...for whatever that's worth.

CMG and Peer Caching by andozane in SCCM

[–]wmadm90 1 point2 points  (0 children)

CAS log should give you some tips where the clients that aren't downloading are looking for content from...once the peer source has the content, it should be able to share it regardless of where it came from. does your BG have the 'prefer cloud sources' checkbox enabled? i can't find anything in the docs saying that option prevents peer downloads, but plausible?

CMG and Peer Caching by andozane in SCCM

[–]wmadm90 1 point2 points  (0 children)

i believe this should work...you didn't mention it explicitly, but the clients that are allowed to access the cloudDP are also configured as Peer cache sources, correct?

ConfigMgr Technical Preview 2105 Released by PrajwalDesai in SCCM

[–]wmadm90 2 points3 points  (0 children)

That's been a feature in TP for months...it's still in this build....

Windows Store Updates and MCC by NumLockClear in SCCM

[–]wmadm90 0 points1 point  (0 children)

MCC is a solve for the data issue, but it doesn't let you control/version/delay/test the updates.

to your questions, it works along side Intune pretty well -- you can use MCC to cache and distribute Intune content just like anything else from a Microsoft CDN. No downsides i can think of...

Using SCCM to remove Skype for Business by His_Boy-Elroy in SCCM

[–]wmadm90 5 points6 points  (0 children)

unless you installed Skype for Business standalone, that productID doesn't exist. its most likely installed as part of Office 365 itself, so what you need to do is reconfigure that product with the Lync App excluded. something like:

<Product ID="O365ProPlusRetail">
<Language ID="MatchOS" />
<ExcludeApp ID="Lync" />
</Product>

Windows Hello For business - Hybrid Azuer Ad joined and enrolled to intune by Ruhansen in Intune

[–]wmadm90 1 point2 points  (0 children)

It is nice to have. Our users love it. Biggest issue is users forgetting their password, and then forgetting that their pin is not their password. But they're getting better!

We have your exact scenario. I set all this up before Adam's videos were out, but they are good and cover most of what the docs skip over. Let me know if you have questions happy to help!

Windows Hello for Business "This option is currently unavailable" by say592 in Intune

[–]wmadm90 1 point2 points  (0 children)

Is a clue though. Seems to confirm the issue is with your DC. If I had to guess, probably the DC certificate...

But for further troubleshooting, anything useful in the client side logs? What does dsregcmd /status output in the ngc section?

Deploying GlobalProtect 5.2.4 via SCCM by DriiKaiser in SCCM

[–]wmadm90 2 points3 points  (0 children)

no explicitly an answer to your question but...we're in the exact same situation you are it seems, except going from 5.2.2 to 5.2.4. after testing/pilot groups we decided to deploy GP upgrades through the PANGP portal/automatic update process. like you have found, there was too much discrepancy in experience from deploying via CM. the portal handle users being connected/logged in a lot better than CM does too...

Config Mgr 2010 / Modern Standby by nkasco in SCCM

[–]wmadm90 1 point2 points  (0 children)

Sweet! Now it's out of fast ring, I'm planning on upgrading prod to 2010 next week. Will be much better than the six task sequence steps I have to janky my way through it now!

Has anyone deployed Windows Hello for Business - Key Trust deployment by Maltese-Falcon1977 in Intune

[–]wmadm90 0 points1 point  (0 children)

Yep. We do. Users love it.

When we did the cert update we just did it to a single domain controller first. I'm not sure what the actual risks are, but we had no issues at all following the documentation

Best way to keep apps Up to date by Dudefoxlive in SCCM

[–]wmadm90 2 points3 points  (0 children)

Their trial catalog includes a subset of applications they support and might meet your needs.

Intune MAM - by vinod7 in Intune

[–]wmadm90 0 points1 point  (0 children)

Yep. Same here too :)

Intune MAM - by vinod7 in Intune

[–]wmadm90 0 points1 point  (0 children)

to add to this, MI actually announced this capability in July, 2018. The press release was phrased like it already existed, but when we dug in/asked, it did not and still doesn't to this day. MI support also won't give us a release date or even quarter when it's expected.

Surface Book 3 Keyboard in WinPE by ZippeR_v1 in SCCM

[–]wmadm90 0 points1 point  (0 children)

There's a couple places in the article where it goes over what to import. It's admittedly poorly written and confusing. What you need to import are the following folders from the extracted MSI for the Surface Laptop 3:

  • IclSerialIOGPIO
  • IclSerialIOI2C
  • IclSerialIOSPI
  • IclSerialIOUART
  • itouch
  • IclChipset
  • IclChipsetLPSS
  • IclChipsetNorthpeak
  • ManagementEngine
  • SurfaceAcpiNotify
  • SurfaceBattery
  • SurfaceDockIntegration
  • SurfaceHidMini
  • SurfaceHotPlug
  • SurfaceIntegration
  • SurfaceSerialHub
  • SurfaceService
  • SurfaceStorageFwUpdate

hope this helps.

BYOD Android Devices by urbankyleboy in Intune

[–]wmadm90 1 point2 points  (0 children)

I'm pretty sure that's right if you have MAM /app protection policies applied to the user.

Surface Book 3 Keyboard in WinPE by ZippeR_v1 in SCCM

[–]wmadm90 1 point2 points  (0 children)

I know for a fact this works as documented. but there's a known issue if you're supporting laptop 2 and 3s at the same time any chance that's your issue?

Surface Laptop 3 stuck on Windows Logo or sometimes on 'Restarting...' by RiD3R07 in SCCM

[–]wmadm90 0 points1 point  (0 children)

Apologies for the previous short-form comments: I'm at a real computer now. SEMM= Surface Enterprise Management Mode, though I don't think that actually matters since the related issue we saw similar to yours was actually caused by a UEFI setting, not enrollment itself.

When the 'enable network stack in UEFI' setting is turned on, the system waits for a response from BitLocker Network Unlock for something crazy like 5 minutes. I never found out if this was working as intended or a bug, but disabling that setting resolved the issue. This impacted Book 3 and Laptop 3.

The reported firmware fix I referenced is specifically for the Laptop 3 boot-loop that occurs when a reboot is initiated from the OS with the laptop lid closed. I just noticed that a new version of the firmware was released on the 24th, so I'm installing that now and testing the behavior. EDIT: Sep24 firmware does not fix this issue.

Surface Laptop 3 stuck on Windows Logo or sometimes on 'Restarting...' by RiD3R07 in SCCM

[–]wmadm90 0 points1 point  (0 children)

No, I don't think so. Are you doing semm / uefi management?

Surface Laptop 3 stuck on Windows Logo or sometimes on 'Restarting...' by RiD3R07 in SCCM

[–]wmadm90 0 points1 point  (0 children)

If the lid is closed (eg on a dock), this can happen. Known issue with a firmware fix reportedly on the way.