All about Microsoft Endpoint Manager

Efficiently Identify Co-Managed Devices: Techniques and Tools

Co-management is a feature that allows organizations to manage their devices using both Microsoft Intune and System Center Configuration Manager (ConfigMgr). This enables organizations to take advantage of the latest security features and cloud capabilities, such as conditional access and device compliance policies, while also being able to manage certain client actions without the need…

Investigating SCCM Client Policy Request and Communication Status with a Collection Specific Report

Introduction: As a SCCM Configmgr administrator, one of your key responsibilities is to ensure the health of SCCM clients for tasks like application deployment, software updates, and inventory management. Oftentimes, you may encounter situations where you need to identify computers that haven't contacted the server in a specific number of days or determine the clients…

Right-click installer tools unable to register correctly with SCCM console

I was installing the famous SCCM right-click tools from recast software (there are other right-click tools as well) on the freshly installed SCCM site for a customer, the installation of right-click tools went well, the console doesn’t seem to get registered with the right-click tools and there is no option when you right-click on a…

Update scan failed due to Group policy settings were overwritten by a higher authority

Few years ago, I have blogged about the client update scan failure due to GPO’s. https://eskonr.com/2014/10/sccm-configmgr-2012-software-update-scan-error-group-policy-settings-were-overwritten-by-a-higher-authority-error-code-0x87d00692/ Introduction: When the software update point is configured for a site, client computers receive a machine policy that provides the active software update point server name (WSUS) and configures the Specify intranet Microsoft update service location local policy on…

Download ConfigMgr builds from the eval center

Update: Eval site is now restored with improved user experience and is accessible via Microsoft Evaluation Center .The new improved eval center does not require any sign-in to download the media files. This is quick post on the recent inquiry on various forums such as Twitter, reddit and Microsoft forums about the download of configuration manager…

SCCM Software Update installation failed with error code 0x87D00664

I was approached by a customer who had issues deploying the March 2022 windows 10 cumulative updates. The error code and the screenshot is provided below. The software updates are failed with error code 0x87D00664 (-2016410012). The error code 0x87D00664 translates to ‘Updates handler job was cancelled’. There could be several reasons why the updates…

How to deploy Microsoft Store apps (offline) using Microsoft Endpoint Manager

Microsoft Endpoint Manager (ConfigMgr & Intune) allows us to configure and deploy the Microsoft Store apps. For more information, please read through ConfigMgr and Intune . In my recent engagement with customer, there is need to deploy Microsoft store app (offline) using Configuration Manager as there is no integration with store for business. Online: This…

SCCM Collections for devices with pending reboot

Posted on February 23, 2022 by Eswar Koneti | 0 Comments

Long ago, I wrote a blog post on a report for finding the devices with pending reboot, more information is available on https://eskonr.com/2019/01/sccm-report-get-list-of-devices-with-pending-reboot-in-a-collection-with-different-states/ I was recently working on checking the compliance of the devices in SCCM for windows patching and I could see that the software update compliance is not that great due to various…

How to Add device to collection using task sequence- troubleshooting

I was recently looking for a solution to add a device to SCCM Collection using the Task sequence. During the search, I have found Trevor has a blog post on this. So before I use the code in the task sequence, I plan to test it on a client device. The full code is given below. You will have to…

SCCM Software Update installation failed with error code 0x87D00664

Posted on March 22, 2022 by Eswar Koneti | 0 Comments | 37,239 Views

How to deploy Microsoft Store apps (offline) using Microsoft Endpoint Manager

Posted on March 3, 2022 by Eswar Koneti | 0 Comments | 7,844 Views

SCCM Collections for devices with pending reboot

Posted on February 23, 2022 by Eswar Koneti | 0 Comments | 4,205 Views

Powershell script to audit all Azure AD app registrations and notify secret key or certificate expiration

Posted on February 7, 2022 by Eswar Koneti | 4 Comments | 7,153 Views

This week, I have another real-time use case about the audit of all azure AD app registrations and notify the application credential (secret key or certificate) near to expiration. Registering an application in Azure AD establishes a trust relationship between your app and the Microsoft identity platform, The application registration can be used to authenticate…

Use PowerShell to audit the Conditional Access Policies and alert via email

Posted on January 27, 2022 by Eswar Koneti | 4 Comments | 4,092 Views

Conditional Access in Azure Active Directory needs no introduction. To read more information about Conditional Access, please refer to https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview In my recent assignment, there was an ask to back up the conditional access policies every day and also notify through email for a list of conditional policies that are created or modified in the…

Using filters to restrict security information registration from trusted devices

Posted on January 16, 2022 by Eswar Koneti | 0 Comments | 1,601 Views

It has been a while since Microsoft has released the combined registration (security) feature that helps users to register for both MFA and SSPR can register once if the methods in the Azure AD Multi-Factor Authentication and SSPR policies are enabled. For more information about Combined security information registration please read https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-registration-mfa-sspr-combined One of the…

How to Add device to collection using task sequence- troubleshooting

Posted on January 13, 2022 by Eswar Koneti | 0 Comments | 5,087 Views

SCCM Right Click Tool Managed workloads of co-managed device

Posted on January 5, 2022 by Eswar Koneti | 0 Comments | 2,352 Views

Co-management (cloud attach) enables you to manage Windows 10 or later devices simultaneously by using both Configuration Manager and Microsoft Intune. For more information about co-management, please refer here. For a device to be co-managed, one of the pre-requisite is Windows devices must be connected to Azure AD using Hybrid Azure AD joined or Azure…