SCCM Software Update installation failed with error code 0x87D00664

I was approached by a customer who had issues deploying the March 2022 windows 10 cumulative updates. The error code and the screenshot is provided below. The software updates are failed with error code 0x87D00664 (-2016410012). The error code 0x87D00664 translates to ‘Updates handler job was cancelled’. There could be several reasons why the updates…
SCCM Right Click Tool Managed workloads of co-managed device

Co-management (cloud attach) enables you to manage Windows 10 or later devices simultaneously by using both Configuration Manager and Microsoft Intune. For more information about co-management, please refer here. For a device to be co-managed, one of the pre-requisite is Windows devices must be connected to Azure AD using Hybrid Azure AD joined or Azure…
Troubleshooting co-management eligibility devices using scripts feature in SCCM

Intune has a Co-management eligibility report (currently in preview) which provides an eligibility evaluation for devices that can be co-managed. For devices to become co-managed, they must be running on windows 10 and enroll to Azure Active Directory. For a full set of intune reports, please refer to https://docs.microsoft.com/en-us/mem/intune/fundamentals/reports The other day, I was looking…
Using Scripts to trigger software updates remotely from the SCCM console

A quick blogpost to trigger the installation of software updates (missing/failed/available in software Center) remotely from the console using built-in scripts feature. If you have deployed software updates to your clients and during the windows update compliance check, you found that, the clients are still reporting as non-compliance (required). There could be several reasons why…
Audit messages for software update deployments in Configuration Manager

In Microsoft Endpoint Configuration Manager, To monitor infrastructure and operations, we use the Monitoring workspace in the Configuration Manager console. One of the common ask in many forums is that how to find who created or modified or deployed certain tasks to users or devices that caused an issue. when someone deploys something, they would…
System Center Endpoint Protection (SCEP) Installation Error code 0x8004FF91

I had provisioned a windows server 2012 R2 (Yes, it is 2012 R2) and while installing the SCEP client (System Center Endpoint Protection client installation files are picked from current branch 2010), it failed with the following error code. Setup - Cannot complete the System Center Endpoint Protection installation. An error has prevented the System…