There are instances (you might want to get list of required patches by server ,so can download and install in DMZ who do not have internet or for patch compliance checking for specific computer and many) , where you might be searching for list patches of required by specific computer/computers and generally ,we look at default reports if there is any report which can give me the required information. If you look at default reports,there is no exact report give you the list of patches required by specific computer with targeted,required,when was it released and other information. You can…
Author: Eswar Koneti
Microsoft is bringing exciting features into Configuration manager product and making things more and more easy in all aspects to manage the infrastructure.Last month (September 2015) ,Microsoft has introduced new features into Configuration manager (expecting it would be called 2016 )technical preview 3 (Version 1509 ) called ‘Updates and servicing (this replaces the need to install separate service packs, cumulative updates, or Extensions for Microsoft Intune)’ and New look /update for Software Center (Apps that are published to users will be available in software center as well). On October 14th 2015 ,Microsoft released another update for Configuration manager Technical…
Few days ago ,I was working on request to get the software update compliance (compliant /Non-Compliant) for list of clients (Desktops or servers) from collection for specific month.I have posted lot of Configmgr 2012 SSRS reports on my blog http://eskonr.com/tag/sccm-patch-reports/about software update compliant but this is something different compared to other reports. Due to the monthly patching activity,sometimes you may get request to know the the patch compliance status for specific month on specific collection .If you are creating new Software update group every month,then you don’t have to look at this report as there are default and customs reports…
MBAM is Microsoft Bitlocker Administration and Monitoring Tool Enables administrators to automate the process of encrypting volumes on client computers across the enterprise.BitLocker offers protection against data theft or data exposure for computers that are lost or stolen. BitLocker encrypts all data that is stored on the Windows operating system and drives and configured data drives. MBAM 2.5 SP1 has the following features: Enables administrators to automate the process of encrypting volumes on client computers across the enterprise. Enables security officers to quickly determine the compliance state of individual computers or even of the enterprise itself. Provides centralized reporting…
Rolled out new Symantec endpoint Protection (SEP) Version to clients across all the sites. After few days ,report (All application deployment –Basic) says ,around 100+ computers still running on old version which did not upgraded to deployed version.Out of these 100+ clients,some of them already have deployed version if I check via resource explorer (also check from DB with v_add_remove_programs).So ,it assume that,reports having some problem (Table that it retrieve the info from). Since ,the reports are giving inaccurate results,I feel ,It would be good to have these failed clients into one collection to perform certain actions (I know there…
In part 6 here,we have created MBAM collection ,application for MBAM 2.5 SP1 agent and deployed to our Clients and did the bitlocker drive encryption for windows 8.1 Client.We have also retrieved the bitlocker recovery key using self service portal and reviewed the bitlocker compliance reports. In this part 7 of MBAM 2.5 SP1 multi series guide,we will do the bitlocker drive encryption for windows 10 ,also see the new features(Configure pre-boot recovery message and URL) included for windows 10. To know more whats new in MBAM 2.5 SP1 ,refer TechNet document here I have created a windows 10 RTM…
In part 5 here ,we have downloaded the MDOP 2015 templates ,extracted,copied MBAM 2.5 SP1 .admx and .adml templates to our Domain controller ,Created GPO for workstation OU and deployed it. In this Part 6 of MBAM 2.5 SP1 multi series guide ,we will create collection ,application for MBAM 2.5 SP1 agent and deploy to our Clients and do the bitlocker encryption stuff. In earlier versions of MBAM ,it usually ships with MSI which can be directly import to SCCM /GPO where as in MBAM 2.5 SP1, a separate MSI is no longer included with the MBAM product. However,…
In part 4 here ,we have installed the MBAM components on our MBAM server (MBAM01) . In this part 5 of this MBAM 2.5 SP1 series guide,we will configure the prerequisites required for windows clients using Group Policy objects before we deploy MBAM Agent and drive encryption. Before we Configure and deploy MBAM 2.5 SP1 Agent settings using Group policy to our client computers,lets have a look at, what types of Bitlocker that MBAM supports. Types of BitLocker protectors that MBAM supports: In MBAM 2.5 SP1, if you enable Used Space Encryption via BitLocker Group policy, the MBAM Client…