Moving on

A long overdue post… In April I changed roles within the company, leaving Microsoft Consulting Services and joining the Windows Intune product team as a program manager. This blog will remain, but I currently have no plans to make any further posts. I am continually re-evaluating the latter part of that statement….


Using Windows PowerShell to convert collection membership rules

I developed some automation for a customer to help them manage the lifecycle of collections used for assignment of DCM baselines as they are revised.  Part of this required the ability to convert a collection from query-based membership to direct membership rules and vice versa.  I realize this is a very niche piece of automation,…


USGCB Policy Bug: Turn off desktop gadgets

The US Government Configuration Baseline (USGCB) group policy object (GPO) for Windows 7 Computer Settings includes the setting: Computer Configuration\Administrative Templates\Windows Components\Desktop Gadgets Turn off desktop gadgets = Enabled This setting is not included in the settings spreadsheet or the associated SCAP content.  It was mistakenly included in the GPO and is expected to be…


Verifying Configuration Manager Backup Task with Windows PowerShell

A seemingly simple requirement for a Desired Configuration Management configuration item is to verify that the Configuration Manager 2007 site backup maintenance task is enabled.  What became the difficult part of this was tracking down the specific location in WMI that this data exists.  I have to give credit to Jamie Moyer for pointing me…


Using SMBIOS GUID to import computer information for VMware guest

To import computer information into Configuration Manager for OS deployment you have to enter the computer name and then one or both of the following unique identifiers: MAC address or SMBIOS GUID, aka UUID.  Many customers use the MAC address because it is shorter and typically more accessible.  However, if the UUID is required this…


How to create a bootable ISO

I know this information exists elsewhere in the world and I really dislike redundant posts.  But I’m always hard-pressed to find this so am posting it here more as a reminder to myself.  If it is of use to anyone else, all the better. When you update a MDT 2010 Update 1 distribution share that…


Disk Cleanup in a MDT Task Sequence

While using MDT to remaster an existing Windows 7 image I added tasks to apply Windows 7 Service Pack 1 and a slew of other updates to the image (so that deployed workstations are up to date out of the gate instead of waiting for updates to come down to each system across the network). …


Deploying Windows 7 Language Packs via ConfigMgr

During a Windows 7 64-bit deployment project the customer gave me a requirement to allow users to install a variety of language packs without adding all of them to the baseline image to keep the size down.  They are already using ConfigMgr to advertise applications for user self-service so this seemed the most logical method…


Windows XP Remote Assistance and DontDisplayLastUserName

While implementing Remote Assistance during a Windows 7 deployment I found that a RA connection to older Windows XP workstations would behave like a Remote Desktop connection: the user would not be prompted to allow the administrator to connect, and the administrator would be prompted to logon.  I eventually traced the issue to the presence…


ConfigMgr query for blocked or approved clients

This is nothing new; I’m typically not one to repost information that can be found elsewhere online.  This is just so that I have an easy place to find it in the future! select SMS_R_SYSTEM.ResourceID, SMS_R_SYSTEM.ResourceType, SMS_R_SYSTEM.Name, SMS_R_SYSTEM.SMSUniqueIdentifier, SMS_R_SYSTEM.ResourceDomainORWorkgroup, SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_CM_RES_COLL_SMS00001 on SMS_CM_RES_COLL_SMS00001.ResourceId = SMS_R_System.ResourceId where SMS_CM_RES_COLL_SMS00001.IsBlocked = ‘1’ Replace IsBlocked…