I was recently working on an assignment to manage windows 10 devices using Microsoft Intune. One of the ask is to Block the write access to the mobile storage devices when the user plugs into the windows device and Allow…

We all know that Microsoft BitLocker Administration and Monitoring (MBAM) is an administrative tool for managing BitLocker Drive Encryption for windows devices that are on-prem domain joined. MBAM mainstream support ended on July 2019 and is currently in extended support…

Did you ever had difficulties importing, exporting or migrating the SSRS reports from one Configuration infra to other ConfigMgr infra? If so, how do you migrate reports ? When i work with my customers on the hardware migration of the…

Azure AD Multi-Factor Authentication (MFA) works by requiring two or more authentication methods for a user to gain access to applications. Multi-factor authenticator in Azure AD can be set using different methods such as Microsoft Authenticator, Phone number, Email etc.One…

Introduction: As a SCCM Configmgr administrator, one of your key responsibilities is to ensure the health of SCCM clients for tasks like application deployment, software updates, and inventory management. Oftentimes, you may encounter situations where you need to identify computers…

SCCM CMPivot query success but returns no data–account smsdbuser_ReadOnly does not exist

I was recently involved in a task to have the Intune deployments targeted to multiple groups (Pre pilot, pilot, and prod). Each phase has a large set of devices from various regions and they all have different naming conventions too.…

There was recently a discussion on twitter on how the bitlocker encryption is being enforced using intune and what the possible ways to bring the device into compliant state post the bitlocker task is done. Read the conversation here Based…

I was installing the famous SCCM right-click tools from recast software (there are other right-click tools as well)  on the freshly installed SCCM site for a customer, the installation of right-click tools went well,  the console doesn’t seem to get…

Few years ago, I have blogged about the client update scan failure due to GPO’s. https://eskonr.com/2014/10/sccm-configmgr-2012-software-update-scan-error-group-policy-settings-were-overwritten-by-a-higher-authority-error-code-0x87d00692/ Introduction: When the software update point is configured for a site, client computers receive a machine policy that provides the active software update point…