Internet access is blocked on 3rd party browsers on windows 10 devices that are applied with windows information protection (WIP) policies using intune

Since few weeks i was working on office 365 stuff including o365 applications teams ,onedrive and managing the mobile devices +windows (MDM/MAM) using intune. while working on this ,i found that ,windows 10 devices that are applied with WIP policies ,internet is getting blocked (access denied) on 3rd party browsers like Google chrome,Firefox but it…
Configmgr SQL query to get the list of clients that require a specific software update patch

This is quick blog post about getting the list of clients that require a specific software update contained (it can be based on title,article ID(KB),bulletin ID). You can get the client list using the default software update compliance reports but it doesn't give you the inventory information about client ,like ip address,hardware scan,software update scan…
Conditional Access to deny /block access to exchange online from windows and mac devices

In this blog post, we will see how to use conditional access to deny/block access to Office 365 Exchange Online (emails) from windows devices and mac devices . conditional access allow access to company data only for authenticated users from compliant devices (If you apply conditional access to list of users ,device must enroll before…
System Center Updates Publisher (SCUP) September 2017 Preview 2 is available

Microsoft has released SCUP 2017 preview 2 update with enhanced update catalog to provide better experience for users in consuming large catalog updates. While old catalog formats are still supported, catalog providers will need to add information to their existing catalogues to take advantage of these improvements that exist in this preview 2 update. This…
Configmgr Client push installation install the client software from specified site is blank

This is quick blog post to address the issue of blank site in the installation options while installing SCCM Client software using client push installation method. In SCCM 2012 and above ,you have RBAC (Role based administration access) to secure the access that is needed to administer Configuration Manager. You also secure access to the…
SCCM Configmgr SUP sync error The underlying connection was closed  Could not establish trust relationship for the SSL/TLS secure channel

  I was contacted by colleague that Configmgr is not showing the updates that were published day ago by SCUP . So i started checking the SCUP configuration (proxy) and the updates status if they are published or not using the date published and also verified SCUP logs. From SCUP perspective,all looks good. Next to…
SCCM Configmgr Report for Boundary group relationships with Fallback Sites

Beginning with configuration manager version 1702, clients use boundary groups to find a new software update point. You can add individual software update points to different boundary groups to control which site servers, a client can find the content or update scan. More information about boundary groups and its relationship with  software update point changes…