Technical Preview 1706 feature highlight : Device Health Attestation assessment for compliance policies for conditional access
Device Health Attestation assessment for compliance policies for conditional access explained and demoed
Device Health Attestation assessment for compliance policies for conditional access explained and demoed
Register Windows 10 devices with Azure Active Directory explained and demoed
Dot3Svc won’t start in default Windows 11 ADK
This blog post is a follow-up to my tweet around figuring out how-to create custom nodes in the Configuration Manager admin UI.
Enabling more logging on Configuration Manager (server & client side)
System Center Configuration Manager is gaining interest of the Infosec community at large. OSCC’s deep understanding of its internal operations and focus on ...
Servicing your Endpoint Manager Configuration Manager environment isn’t only about getting those shiny new features, it’s about security too. A case in point.
The attack surface reduction principle should be top of mind for IT admins.
This post will pick up where we left off in Part1.
This post will explain the basics of how a Windows Defender Application Control managed installer works.
System Center Configuration Manager is gaining interest of the Infosec community at large. OSCC’s deep understanding of its internal operations and focus on ...
Let’s implement the functionality we discussed in Part 1 and Part 2 in Autopilot/Intune.
Let’s implement the functionality we discussed in Part 1 and Part 2 in Autopilot/Intune.
Copying log files through azure was great start, now let’s try and make it more secure !
Configmgr provides a wealth of information in logfiles, but they are only useful if you have access to them …
The modern alternative for security baseline GPO’s
How to configure a cloud management gateway (CMG) in HTTP modus…(thus without a PKI infrastructure… sort of)
Device Health Attestation assessment for compliance policies for conditional access explained and demoed
Register Windows 10 devices with Azure Active Directory explained and demoed
How to configure a cloud management gateway (CMG) in HTTP modus…(thus without a PKI infrastructure… sort of)
Real-World scenario on where Intune and SCCM Co-management could come in handy. Configuring compliance and Conditional Access.
Real-World scenario on where Intune and SCCM Co-management could come in handy. Deploying the Configmgr Agent through Intune.
Real-World scenario on where Intune and SCCM Co-management could come in handy. Enabling the Co-management feature
Real-World scenario on where Intune and SCCM Co-management could come in handy. Configuring Azure AD Discovery
Real-World scenario on where Intune and SCCM Co-management could come in handy. Setting up the Cloud Management Gateway.
Changed behavior of the “WSUS cleanup wizard”
The modern alternative for security baseline GPO’s
How to configure a cloud management gateway (CMG) in HTTP modus…(thus without a PKI infrastructure… sort of)
Real-World scenario on where Intune and SCCM Co-management could come in handy. Configuring compliance and Conditional Access.
Real-World scenario on where Intune and SCCM Co-management could come in handy. Deploying the Configmgr Agent through Intune.
Real-World scenario on where Intune and SCCM Co-management could come in handy. Enabling the Co-management feature
Real-World scenario on where Intune and SCCM Co-management could come in handy. Configuring Azure AD Discovery
Real-World scenario on where Intune and SCCM Co-management could come in handy. Setting up the Cloud Management Gateway.
This post goes wider than regular ConfigMgr stuff and is about adding logging to all your scripts.
Real-World scenario on where Intune and SCCM Co-management could come in handy. Configuring compliance and Conditional Access.
Real-World scenario on where Intune and SCCM Co-management could come in handy. Deploying the Configmgr Agent through Intune.
Real-World scenario on where Intune and SCCM Co-management could come in handy. Enabling the Co-management feature
Real-World scenario on where Intune and SCCM Co-management could come in handy. Configuring Azure AD Discovery
Real-World scenario on where Intune and SCCM Co-management could come in handy. Setting up the Cloud Management Gateway.
Microsoft Endpoint Manager (MEM) Co-Management and ConfigMgr cloud attach are game-changers in the realm of mature IT management, offering a comprehensive su...
I started off this year stating that 2023 would become the year of Windows Defender Application Control.
It’s time to announce the next run of our popular WDAC training.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
We’ve done quite a bit of Application Control work in the past months/years. One item that is always challenging in these types of projects is end-user commu...
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post will pick up where we left off in Part1.
This post will explain the basics of how a Windows Defender Application Control managed installer works.
Servicing your Endpoint Manager Configuration Manager environment isn’t only about getting those shiny new features, it’s about security too. A case in point.
So Ryan asked on twitter whether you coud build a collection out of the Shiny new Pending Reboot column added in SCCM 1710.
Automating a full SCCM Labo setup using PowerShell Direct. Part 4 is the Task Sequence and a template for new servers.
As Announced, SCCM Current branch 1702 no longer supports the 2008 editions of SQL or Windows. What does this mean if you’re SCCM infrastructure is still run...
Automating a full SCCM Labo setup using PowerShell Direct. Part 3 is the setup and configuration of a Configmgr Server.
Automating a full SCCM Labo setup using PowerShell Direct. Part 2 will be on setting up and configuring the Domain Controller.
Automating a full SCCM Labo setup using PowerShell Direct. Part 1 focuses on setting up router virtual machine
Hello World ! My First blog-post on OSCC on setting a NAA in SCCM CB using PowerShell
At MMS MOA 2016, the best ConfigMgr community event world-wide globally, Tom Degreef and I delivered a session about a deep dive into Configuration Manager p...
This issue has been closed as fixed on the connect page. If you’re still seeing this issue please install the latest CU updates or upgrade to Configuration M...
This is a blog post that is long overdue from my part, as I’ve been willing to write this for a long time. I will however start off with a “disclaimer” on th...
An over-priviliged network access account is a security risk specific to SCCM environments. This post is about protecting that account.
Header Line
Header Line
Application Control will most likely still be one of the major ways to combat malware in 2023. We’ve seen and helped implement quite a bit of implementations...
GUI for creating Intune & SCCM applications using the Powershell App Deployment Toolkit, including creating Software ID Tags for easier License Managemen...
How to configure a cloud management gateway (CMG) in HTTP modus…(thus without a PKI infrastructure… sort of)
Receiving alerts on Inbox backlogs
Real-World scenario on where Intune and SCCM Co-management could come in handy. Configuring compliance and Conditional Access.
Real-World scenario on where Intune and SCCM Co-management could come in handy. Deploying the Configmgr Agent through Intune.
Real-World scenario on where Intune and SCCM Co-management could come in handy. Enabling the Co-management feature
Real-World scenario on where Intune and SCCM Co-management could come in handy. Configuring Azure AD Discovery
Real-World scenario on where Intune and SCCM Co-management could come in handy. Setting up the Cloud Management Gateway.
(Un-)Expected Software Update Point behavior
Device Health Attestation assessment for compliance policies for conditional access explained and demoed
Android and iOS Enrollment Restrictions explained and demoed
Register Windows 10 devices with Azure Active Directory explained and demoed
Create and run scripts feature explained and demoed
Enabling more logging on Configuration Manager (server & client side)
Dot3Svc won’t start in default Windows 11 ADK
Let’s implement the functionality we discussed in Part 1 and Part 2 in Autopilot/Intune.
Copying log files through azure was great start, now let’s try and make it more secure !
Configmgr provides a wealth of information in logfiles, but they are only useful if you have access to them …
With great power comes great responsibility !
Enabling more logging on Configuration Manager (server & client side)
** ###Updated after MMS 2017 session ###**
There’s a multitude of ways to handle driver management in Configuration Manager and OSDeployment.
Let’s implement the functionality we discussed in Part 1 and Part 2 in Autopilot/Intune.
Copying log files through azure was great start, now let’s try and make it more secure !
Dot3Svc won’t start in default Windows 11 ADK
Let’s implement the functionality we discussed in Part 1 and Part 2 in Autopilot/Intune.
Copying log files through azure was great start, now let’s try and make it more secure !
Configmgr provides a wealth of information in logfiles, but they are only useful if you have access to them …
Changed behavior of the “WSUS cleanup wizard”
The modern alternative for security baseline GPO’s
How to configure a cloud management gateway (CMG) in HTTP modus…(thus without a PKI infrastructure… sort of)
This years MVP summit took place a little bit over a month ago, and I am feeling like I am in a permanent state of jet-lag.
The 2016 MVP summit took place a little bit over a week ago, and I believe I’ve recovered from jet-lag.
This years MVP summit took place last week, and I am still recovering from jet-lag.
A deep dive into your SCCM environment
Automating a full SCCM Labo setup using PowerShell Direct. Part 4 is the Task Sequence and a template for new servers.
Receiving alerts on Inbox backlogs
I started off this year stating that 2023 would become the year of Windows Defender Application Control.
It’s time to announce the next run of our popular WDAC training.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
We’ve done quite a bit of Application Control work in the past months/years. One item that is always challenging in these types of projects is end-user commu...
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post will pick up where we left off in Part1.
This post will explain the basics of how a Windows Defender Application Control managed installer works.
Let’s implement the functionality we discussed in Part 1 and Part 2 in Autopilot/Intune.
GUI for creating Intune & SCCM applications using the Powershell App Deployment Toolkit, including creating Software ID Tags for easier License Managemen...
The modern alternative for security baseline GPO’s
Real-World scenario on where Intune and SCCM Co-management could come in handy. Configuring compliance and Conditional Access.
Real-World scenario on where Intune and SCCM Co-management could come in handy. Deploying the Configmgr Agent through Intune.
Real-World scenario on where Intune and SCCM Co-management could come in handy. Enabling the Co-management feature
Real-World scenario on where Intune and SCCM Co-management could come in handy. Configuring Azure AD Discovery
Real-World scenario on where Intune and SCCM Co-management could come in handy. Setting up the Cloud Management Gateway.
Device Health Attestation assessment for compliance policies for conditional access explained and demoed
Android and iOS Enrollment Restrictions explained and demoed
Register Windows 10 devices with Azure Active Directory explained and demoed
Application Control will most likely still be one of the major ways to combat malware in 2023. We’ve seen and helped implement quite a bit of implementations...
Really, I can’t be more clear than that, don’t ever use it.
Enabling more logging on Configuration Manager (server & client side)
This post goes wider than regular ConfigMgr stuff and is about adding logging to all your scripts.
Let’s implement the functionality we discussed in Part 1 and Part 2 in Autopilot/Intune.
Copying log files through azure was great start, now let’s try and make it more secure !
Configmgr provides a wealth of information in logfiles, but they are only useful if you have access to them …
I started off this year stating that 2023 would become the year of Windows Defender Application Control.
It’s time to announce the next run of our popular WDAC training.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
We’ve done quite a bit of Application Control work in the past months/years. One item that is always challenging in these types of projects is end-user commu...
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
Application Control will most likely still be one of the major ways to combat malware in 2023. We’ve seen and helped implement quite a bit of implementations...
A recap of the 2018 Mini-MVP summit and MMS Desert Edition
A recap of the 2018 Mini-MVP summit and MMS Desert Edition
Enabling more logging on Configuration Manager (server & client side)
A recap of the 2018 Mini-MVP summit and MMS Desert Edition
A recap of the 2018 Mini-MVP summit and MMS Desert Edition
The modern alternative for security baseline GPO’s
Hello World ! My First blog-post on OSCC on setting a NAA in SCCM CB using PowerShell
Dot3Svc won’t start in default Windows 11 ADK
Let’s implement the functionality we discussed in Part 1 and Part 2 in Autopilot/Intune.
Copying log files through azure was great start, now let’s try and make it more secure !
Configmgr provides a wealth of information in logfiles, but they are only useful if you have access to them …
How to configure a cloud management gateway (CMG) in HTTP modus…(thus without a PKI infrastructure… sort of)
Receiving alerts on Inbox backlogs
GUI for creating Intune & SCCM applications using the Powershell App Deployment Toolkit, including creating Software ID Tags for easier License Managemen...
Create and run scripts feature explained and demoed
Automating a full SCCM Labo setup using PowerShell Direct. Part 4 is the Task Sequence and a template for new servers.
Automating a full SCCM Labo setup using PowerShell Direct. Part 3 is the setup and configuration of a Configmgr Server.
Automating a full SCCM Labo setup using PowerShell Direct. Part 2 will be on setting up and configuring the Domain Controller.
Automating a full SCCM Labo setup using PowerShell Direct. Part 1 focuses on setting up router virtual machine
Hello World ! My First blog-post on OSCC on setting a NAA in SCCM CB using PowerShell
Automating a full SCCM Labo setup using PowerShell Direct. Part 4 is the Task Sequence and a template for new servers.
Automating a full SCCM Labo setup using PowerShell Direct. Part 3 is the setup and configuration of a Configmgr Server.
Automating a full SCCM Labo setup using PowerShell Direct. Part 2 will be on setting up and configuring the Domain Controller.
Automating a full SCCM Labo setup using PowerShell Direct. Part 1 focuses on setting up router virtual machine
GUI for creating Intune & SCCM applications using the Powershell App Deployment Toolkit, including creating Software ID Tags for easier License Managemen...
Create and run scripts feature explained and demoed
Microsoft Endpoint Manager (MEM) Co-Management and ConfigMgr cloud attach are game-changers in the realm of mature IT management, offering a comprehensive su...
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
We’ve done quite a bit of Application Control work in the past months/years. One item that is always challenging in these types of projects is end-user commu...
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
This post highlights the most interesting blogs, tweets and articles I’ve read relating to MEM in the past week.
Dot3Svc won’t start in default Windows 11 ADK
This post will pick up where we left off in Part1.
This post will explain the basics of how a Windows Defender Application Control managed installer works.
Let’s implement the functionality we discussed in Part 1 and Part 2 in Autopilot/Intune.
Servicing your Endpoint Manager Configuration Manager environment isn’t only about getting those shiny new features, it’s about security too. A case in point.
Copying log files through azure was great start, now let’s try and make it more secure !
Configmgr provides a wealth of information in logfiles, but they are only useful if you have access to them …
GUI for creating Intune & SCCM applications using the Powershell App Deployment Toolkit, including creating Software ID Tags for easier License Managemen...
With great power comes great responsibility !
A deep dive into your SCCM environment
How to configure a cloud management gateway (CMG) in HTTP modus…(thus without a PKI infrastructure… sort of)
Receiving alerts on Inbox backlogs
So Ryan asked on twitter whether you coud build a collection out of the Shiny new Pending Reboot column added in SCCM 1710.
Real-World scenario on where Intune and SCCM Co-management could come in handy. Configuring compliance and Conditional Access.
Real-World scenario on where Intune and SCCM Co-management could come in handy. Deploying the Configmgr Agent through Intune.
Real-World scenario on where Intune and SCCM Co-management could come in handy. Enabling the Co-management feature
Real-World scenario on where Intune and SCCM Co-management could come in handy. Configuring Azure AD Discovery
Real-World scenario on where Intune and SCCM Co-management could come in handy. Setting up the Cloud Management Gateway.
(Un-)Expected Software Update Point behavior
Device Health Attestation assessment for compliance policies for conditional access explained and demoed
Android and iOS Enrollment Restrictions explained and demoed
Register Windows 10 devices with Azure Active Directory explained and demoed
Create and run scripts feature explained and demoed
** ###Updated after MMS 2017 session ###**
Enabling more logging on Configuration Manager (server & client side)
Automating a full SCCM Labo setup using PowerShell Direct. Part 4 is the Task Sequence and a template for new servers.
As Announced, SCCM Current branch 1702 no longer supports the 2008 editions of SQL or Windows. What does this mean if you’re SCCM infrastructure is still run...
Automating a full SCCM Labo setup using PowerShell Direct. Part 3 is the setup and configuration of a Configmgr Server.
Automating a full SCCM Labo setup using PowerShell Direct. Part 2 will be on setting up and configuring the Domain Controller.
Automating a full SCCM Labo setup using PowerShell Direct. Part 1 focuses on setting up router virtual machine
Hello World ! My First blog-post on OSCC on setting a NAA in SCCM CB using PowerShell
There’s a multitude of ways to handle driver management in Configuration Manager and OSDeployment.
Really, I can’t be more clear than that, don’t ever use it.
So this isn’t going to be the cleanest blogpost, but I had 2 MVP’s requesting the following functionality a short while ago. [System.Windows.Forms.SendKeys]...
Another post that is long overdue, based on a session Jason Sandys and I delivered at MMS 2015. In that session Jason and I covered the internals of collecti...
At MMS MOA 2016, the best ConfigMgr community event world-wide globally, Tom Degreef and I delivered a session about a deep dive into Configuration Manager p...
The product documentation for System Center used to have a metatag called AppliesToProduct.
Telemetry, what is it about?
On the 23rd of September 2015 the ConfigMgr Product team released a blog on an update for Configuration Manager Technical Preview 3.
This issue has been closed as fixed on the connect page. If you’re still seeing this issue please install the latest CU updates or upgrade to Configuration M...
This is a blog post that is long overdue from my part, as I’ve been willing to write this for a long time. I will however start off with a “disclaimer” on th...
This blog post is a follow-up to my tweet around figuring out how-to create custom nodes in the Configuration Manager admin UI.
An over-priviliged network access account is a security risk specific to SCCM environments. This post is about protecting that account.
Header Line
Header Line
Application Control will most likely still be one of the major ways to combat malware in 2023. We’ve seen and helped implement quite a bit of implementations...
The rapid release cadence of Windows 10 & SCCM makes ‘staying current’ a mandatory task to keep the environment secure. OSCC offers an industry best prac...
System Center Configuration Manager is gaining interest of the Infosec community at large. OSCC’s deep understanding of its internal operations and focus on ...
Application whitelisting allows you tight control of what applications are allowed to run in your environment. OSCC’s approach mixes the Systems Management k...
This blog post is a follow-up to my tweet around figuring out how-to create custom nodes in the Configuration Manager admin UI.
(Un-)Expected Software Update Point behavior
Changed behavior of the “WSUS cleanup wizard”
This post will pick up where we left off in Part1.
This post will explain the basics of how a Windows Defender Application Control managed installer works.
Servicing your Endpoint Manager Configuration Manager environment isn’t only about getting those shiny new features, it’s about security too. A case in point.
The attack surface reduction principle should be top of mind for IT admins.
With great power comes great responsibility !
So this post is long overdue and needs to start with referencing and thanking a couple of people upon which this work is built, as happens so often in commun...
The modern alternative for security baseline GPO’s
On the 23rd of September 2015 the ConfigMgr Product team released a blog on an update for Configuration Manager Technical Preview 3.
Device Health Attestation assessment for compliance policies for conditional access explained and demoed
Android and iOS Enrollment Restrictions explained and demoed
Register Windows 10 devices with Azure Active Directory explained and demoed
Create and run scripts feature explained and demoed
Automating a full SCCM Labo setup using PowerShell Direct. Part 4 is the Task Sequence and a template for new servers.
A while ago, I wrote a pretty extensive blog on telemetry,
Telemetry, what is it about?
The product documentation for System Center used to have a metatag called AppliesToProduct.
Enabling more logging on Configuration Manager (server & client side)
I started off this year stating that 2023 would become the year of Windows Defender Application Control.
It’s time to announce the next run of our popular WDAC training.
I tweeted at the start of the year that 2023 should be the year of Windows Defender Application Control aka WDAC.
I tweeted at the start of the year that 2023 should be the year of Windows Defender Application Control aka WDAC.
I tweeted at the start of the year that 2023 should be the year of Windows Defender Application Control aka WDAC.
We’ve done quite a bit of Application Control work in the past months/years. One item that is always challenging in these types of projects is end-user commu...
Application Control will most likely still be one of the major ways to combat malware in 2023. We’ve seen and helped implement quite a bit of implementations...
Changed behavior of the “WSUS cleanup wizard”
(Un-)Expected Software Update Point behavior
Device Health Attestation assessment for compliance policies for conditional access explained and demoed
The rapid release cadence of Windows 10 & SCCM makes ‘staying current’ a mandatory task to keep the environment secure. OSCC offers an industry best prac...
Application whitelisting allows you tight control of what applications are allowed to run in your environment. OSCC’s approach mixes the Systems Management k...
Device Health Attestation assessment for compliance policies for conditional access explained and demoed
Android and iOS Enrollment Restrictions explained and demoed
Register Windows 10 devices with Azure Active Directory explained and demoed
System Center Configuration Manager is gaining interest of the Infosec community at large. OSCC’s deep understanding of its internal operations and focus on ...
Application whitelisting allows you tight control of what applications are allowed to run in your environment. OSCC’s approach mixes the Systems Management k...
System Center Configuration Manager is gaining interest of the Infosec community at large. OSCC’s deep understanding of its internal operations and focus on ...
Application whitelisting allows you tight control of what applications are allowed to run in your environment. OSCC’s approach mixes the Systems Management k...