Author: Eswar Koneti

SCCM Collections for devices with pending reboot

Posted on February 23, 2022 by | 0 Comments | 5,226 Views
Long ago, I wrote a blog post on a report for finding the devices with pending reboot, more information is available on https://eskonr.com/2019/01/sccm-report-get-list-of-devices-with-pending-reboot-in-a-collection-with-different-states/ I was recently working on checking the compliance of the devices in SCCM for windows patching and I could see that the software update compliance is not that great due to various…
Read more »
Powershell script to audit all Azure AD app registrations and notify secret key or certificate expiration

Posted on February 7, 2022 by | 4 Comments | 8,325 Views
This week, I have another real-time use case about the audit of all azure AD app registrations and notify the application credential (secret key or certificate) near to expiration. Registering an application in Azure AD establishes a trust relationship between your app and the Microsoft identity platform, The application registration can be used to authenticate…
Read more »
Use PowerShell to audit the Conditional Access Policies and alert via email

Posted on January 27, 2022 by | 4 Comments | 4,592 Views
Conditional Access in Azure Active Directory needs no introduction. To read more information about Conditional Access, please refer to https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview In my recent assignment, there was an ask to back up the conditional access policies every day and also notify through email for a list of conditional policies that are created or modified in the…
Read more »
Using filters to restrict security information registration from trusted devices

Posted on January 16, 2022 by | 0 Comments | 1,862 Views
It has been a while since Microsoft has released the combined registration (security) feature that helps users to register for both MFA and SSPR can register once if the methods in the Azure AD Multi-Factor Authentication and SSPR policies are enabled. For more information about Combined security information registration please read https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-registration-mfa-sspr-combined One of the…
Read more »
SCCM Right click tools–find missing updates of a client

Posted on January 2, 2022 by | 14 Comments | 8,836 Views
Managing software updates and creation of custom reports in ConfigMgr is OCEAN. You have so much data to visualize based on your needs. One of the very common requirements or reports is, find out the missing/required updates of a device that is managed by SCCM. If you have not moved the device management solution to…
Read more »
Troubleshooting co-management eligibility devices using scripts feature in SCCM

Posted on December 5, 2021 by | 1 Comment | 3,394 Views
Intune has a Co-management eligibility report (currently in preview) which provides an eligibility evaluation for devices that can be co-managed. For devices to become co-managed, they must be running on windows 10 and enroll to Azure Active Directory. For a full set of intune reports, please refer to https://docs.microsoft.com/en-us/mem/intune/fundamentals/reports The other day, I was looking…
Read more »
What is new in Configuration Manager 2111 Reporting

Posted on December 4, 2021 by | 2 Comments | 1,759 Views
Microsoft has released the version 2111 for Configuration Manager (Current Branch) which is now available as in-console update and is currently via opt-in script. You can apply this update on sites that run version 2006 or later. If you are running older versions of the configuration manager, you will need to update the site to…
Read more »