Audit messages for software update deployments in Configuration Manager

In Microsoft Endpoint Configuration Manager, To monitor infrastructure and operations, we use the Monitoring workspace in the Configuration Manager console. One of the common ask in many forums is that how to find who created or modified or deployed certain tasks to users or devices that caused an issue. when someone deploys something, they would…
SCCM Collection for AAD joined devices (co-managed)

Co-management enables you to concurrently manage Windows 10 devices by using both Configuration Manager and Microsoft Intune. For more information about Co-management, benefits, pre-requisites, licensing, read https://docs.microsoft.com/en-us/mem/configmgr/comanage/overview When you have windows 10 devices that are Azure AD joined, enrolled to Intune, and also co-managed, these devices would appear in Configuration Manager. In this blog post,…
SCCM Collection for devices online with green checkmark

This is quick blog post on how to create device collection for computers that are online and showing the green checkmark. When a configuration manager client is installed,it will have the following status code indicating the device. For more information about device client status, please refer here How do we create a collection for clients…
System Center Endpoint Protection (SCEP) Installation Error code 0x8004FF91

I had provisioned a windows server 2012 R2 (Yes, it is 2012 R2) and while installing the SCEP client (System Center Endpoint Protection client installation files are picked from current branch 2010), it failed with the following error code. Setup - Cannot complete the System Center Endpoint Protection installation. An error has prevented the System…
Managing windows updates using Configuration Manager and Group policy

When a Configuration Manager client is installed and configured to use the software updates agent, it will automatically configured with a local Group Policy setting that specifies the Configuration Manager software update point. The Group Policy setting used is the intranet Microsoft update service location, specified as a Windows Update computer administrative template. The following…
Update rollup available to resolve Client issue downloading ccmsetup content from cloud DP (CMG)–KB4575790

Microsoft has released another update rollup (KB4575790) to fix client setup content download issue from CMG distribution point. The following listed issues and the rollup update is available in updates and servicing node only if you have installed the recently released update rollup KB 4578605 for Configuration Manager 2006 build. If you have not installed…