iamsysadmin

Show specific scripts to MECM (SCCM) console users

Posted on 21/09/202006/04/2021 by Remy Kuster

A few days ago one of my colleagues asked me if we couldn’t let the IT helpdesk colleagues run scripts from the console by themselves. Great idea of course because a script can fix an issue and help a user really quick and the user will be helped a lot faster if the helpdesk employees can run the script(s) by themselves instead of having to call a colleague of a different IT team first who can run the scripts. But the console can have a lot of scripts, perhaps you don’t want the helpdesk to be able to run all the created scripts but only a selection of them. So in this post I will show you how to allow a specific script or scripts to be run by the helpdesk employees.

Install Microsoft Teams with Microsoft Endpoint Configuration Manager

Posted on 07/09/202015/05/2021 by Remy Kuster

Because of the world wide epidemic of COVID-19 a lot of employees are working at home. The last few months the usage of online/cloud meeting platforms has exponentially grown and because of this a lot of companies had to implement MS teams much faster then planned. In order to use teams you can use the online teams or install the Teams app, you don’t need admin rights in order to install it on a computer.
So an employee could go and use a browser to use the teams online or install the Teams app on his or hers companies computer, but it would be even better when the employees won’t have to install it at all, and could just use the desktop Teams app when using the companies computers. In this case the best thing to do is to deploy the Teams desktop client. So in this post I will show how to Install Microsoft Teams with Microsoft Endpoint Configuration Manager.

Microsoft 365 Apps update channels

Posted on 18/08/202006/04/2021 by Remy Kuster

A few months ago Microsoft changed the names of the Microsoft 365 Apps update channels (May 2020) and the titles of the Microsoft 365 Apps update channels monthly feature/security updates (July 2020). In this post I will show you what impact this could have on your active Office 365 environment in MECM (SCCM).

Check if a device is NOT a member of a specific group

Posted on 06/07/202006/04/2021 by Remy Kuster

With this PowerShell script you can check if a device is NOT a member of a specific group. A colleague and I created this script because our AD computers should be a member of 1 out of 3 AD groups. If the device is not member of one of these groups certain group policy’s wont be loaded and some thing won’t work properly. With the results of this script we know that devices have to be added to a AD group to function properly.

Use the Run Scripts feature in MECM (SCCM) to deploy PowerShell scripts

Posted on 17/06/202003/03/2023 by Remy Kuster

Run Scripts feature in MECM (SCCM) in allows you to do the following things:

Create and edit PowerShell scripts for use with Configuration Manager.
Manage script usage through roles and security scopes.
Run scripts on collections or individual managed devices.
Get Realtime script results from client devices.
Monitor script execution and view reporting results directly after deploying your script.

PowerShell Active Directory Module on Windows 10

Posted on 16/12/201903/03/2023 by Remy Kuster

The PowerShell active directory module allows you to do the following things:

Manage and automate standard domain-related tasks
Check domain user Active Directory attributes and group memberships on the users workstation, if installed on users workstation (described in this post)

Deploy Windows 10 build as a feature update

Posted on 18/07/201915/04/2022 by Remy Kuster

With MECM (SCCM) you can deploy a new Windows 10 build in two ways. You can deploy Windows 10 build as a feature update (Servicing) or you can create a task sequence (in-place-upgrade).

In my opinion with a task sequense you can easy create pre and post actions based on variables but the time that a user can’t use the computer (downtime) can be quiet long.

Deploying the feature update with servicing is much more user friendly, because there is almost no downtime for the user. Creating pre and post actions can be done but are not easy and can’t be based on variables like task sequence steps can.