Disable SMBv1 in your environments with Configuration Manager Compliance Settings

NOTE: I have updated this blog to remove SMB1 LanmanServer from 2012/8+.   There has been lots of buzz over the recent ransomware attacks. One of the mitigations to keep the attack from spreading is disabling SMBv1 on all your Windows workstation and servers. One of the easy ways to deploy this out, while also…

30

Updated System Center 2012 Configuration Manager Antivirus Exclusions with more details on OSD and Boot Images, etc…

With the release of Service Pack 1 for System Center 2012 Configuration Manager, we have been seeing some issues (not necessarily new issues) revealed with Antivirus Exclusion issues around OSD and Boot Image related activities as follows: OSD Related A/V Exclusion Considerations: Boot image actions: Importing default boot WIM’s during initial site setup Updating default…


Configuration Manager Current Branch Antivirus Exclusions

Hey everybody!  My name is Brandon McMillan and I am a System Center Configuration Manager (ConfigMgr) PFE at Microsoft. ConfigMgr Current Branch has been the standard service based model since December 2015 with the release of version 1511.  You may have noticed that with the continuous improvements, your antivirus exclusions also need to be kept up to…

15

System Center Configuration Manager – All Servers and All Workstations Collections with ProductType

When I go out to customers,  I always like to see how the top collections are populated (All Servers or All Workstations). This is something most customers do immediately after setting up Configuration Manager, build an all desktops collection and all servers to divide clients and set permissions. Even though this is such a common…

5

System Center 2012 Configuration Manager Antivirus Exclusions

I have seen this question asked and answered in some articles and blog posts, however, after teaching the Concepts and Admin Workshop for the new version of the product recently, and getting more familiar with the new Endpoint Protection feature in System Center 2012 Configuration Manager, and I discoverd a feature in Endpoint Protection that lets you…


ConfigMgr 2007 Basic User Driven Installation Task Sequence Step by Step

This post is part 1 of 2 covering some of the basics and features of a User Driven Installation Task Sequence in ConfigMgr 2007. This post will cover some of the basics of implementing a User Driven Installation (UDI) Task Sequence with Configuration Manager 2007 SP2 with MDT 2010 Update 1 integration. This post assumes you…


Preparing for HTTPS Only

As you can imagine being a Microsoft ConfigMgr PFE, I see a lot of ConfigMgr environments. I usually get asked the question by either the ConfigMgr team or the Security team “How difficult is it to go to HTTPS?” Maybe because I been doing this for what seems like forever BUT, it’s all about the…

4