ConfigMgr Application Approval via Email

ConfigMgr 1810 introduced the feature to receive email-based notifications for application approval requests. Here’s a step by step configuring the flow for a user requesting an application, an email is sent to the application approver to either Approve or Deny the request. Prerequisites Turn on the Feature “Approve application requests for users per device” Configure…


SQL Server Native Client Update Warning Prerequisite for ConfigMgr 1810

If you are planning to upgrade your ConfigMgr infrastructure to the latest 1810 release, plan for updating the SQL Server Native Client to support TLS 1.2 If the SQL Server native client isn’t already updated, the prerequisite check will fail with below warning. The details are available in the ConfigMgrPrereq.log <11-27-2018 20:27:21> PRIMARY1<FQDN>; SQL Server…


Retirement…

All good things must come to an end eventually… No no i am not retiring just yet but with the recent trend of Technet blogs being retired, i have chosen to migrate my blog over to my own WordPress platform to ensure i can still continue to provide content to the community and hopefully help…


CMG with just One Cert

You read it correct! Cloud Management Gateway has evolved and its now easier than ever to deploy one. All you need is a single Web Server Authentication Certificate from a public CA. What changed? Primarily the introduction of a new feature in ConfigMgr 1806 called Enhanced HTTP Site System which replaces the requirement of an…


System Center Configuration Manager Infrastructure Lift and Shift Migration to Azure

The configuration manager hierarchy managing all of Microsoft devices (~300K) was traditionally hosted by on-premises virtual machines (VMs) and physical servers.  The goal of this project completion was to “lift-and-shift” migration of configuration manager infrastructure to Microsoft Azure which improves up time, reliability, and scalability by utilizing various new Azure features. We are now 100%…

2

Configuration Manager Current Branch Antivirus Exclusions

Hey everybody!  My name is Brandon McMillan and I am a System Center Configuration Manager (ConfigMgr) PFE at Microsoft. ConfigMgr Current Branch has been the standard service based model since December 2015 with the release of version 1511.  You may have noticed that with the continuous improvements, your antivirus exclusions also need to be kept up to…

9

Enabling BranchCache for Configuration Manager using Client Settings

Since Configuration Manager current branch, version 1606 it has been possible to enable BranchCache on clients using Client Settings. Previously, to enable BranchCache an administrator would need to configure BranchCache for clients using command line tools or Group Policy. To use BranchCache with Configuration Manager, the following prerequisites must be met: Distribution Point; Cloud Distribution…


Setting up Wi-Fi Profiles with Certificate-based Authentication on Android via Intune Hybrid and the Case of the Missing Wi-Fi Certificate

I was recently at a customer that was having trouble getting their user certificate to be used for the corporate Wi-Fi profile on Android devices. When checking the user certificates in settings the user certificate only showed up under “user” while “Wi-Fi” was empty. After a device is enrolled, it begins to download policy. Once…


ConfigMgrDogs top 5 posts of 2016

Configuration Manager 1511, 1602, 1606 (Current Branch) Supported Configurations Update to Supersedence Behaviour for Security Only and Security Monthly Quality Rollup Updates Windows Update Error 80072ee2 (WSUS) Microsoft Intune Co-existence with MDM for Office 365 Changes to Software Updates on Down Level Operating Systems for ConfigMgr Admins


Update to Supersedence Behaviour for Security Only and Security Monthly Quality Rollup Updates

Further to my recent post about Changes to Software Updates on Down Level Operating Systems for ConfigMgr Admins there has been some changes to how the updates are superseded based on feedback for Windows 7, Windows 8.1, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2. The official update is explained here…