Nicolas BONNET
Nicolas BONNET
MVP Enterprise mobility
Project, Technical assistance
12 years of experience
www.nibonnet.fr
Warning with 2211 MECM Build A warning appear when I verify prerequisites for Configuration Manager 2211 Hotfix Rollup. Three warnings appear. Co-management workload slider for ressource access policies Network Access Account account usage alert We now see how we can resolve the problems. Co-Management workload slider for resource access policies The deployment of the email certificate, VPN profile, Wifi profile or Windows Hello for Business through SCCM is no longuer supported. In my ab, the co-management is configured and the...
The post Warning with 2211 build first appeared on Blog on Microsoft Technologies.Among the many products that FEITIAN offers, it is possible to use a Fingerprint card. I receive my kit yesterday and i can write this blog post. Install the FEITIAN Fingerprint Card Manager You can download the FEITIAN Fingerprint Card Manager on the App Store or on Google Play. Scan the QR Code to retrieve the application. Application has been installed on my iPhone Configure the FEITIAN Fingerprint Card Manager Connect the Fingerprint Card reader to the computer’s USB port...
The post Use Fingerprint Card first appeared on Blog on Microsoft Technologies.Windows Update for Business allows you to perform maintenance on Windows devices. The post has the latest security features. Updates are retrieved directly from Windows Update Service. The different Windows 10 and Windows 11 workstations can be configured using a group policy or via Microsoft Endpoint Manager (MEM) With Windows Update for Business, the IT department no longer needs to manage the approval of updates. The workstations automatically retrieve the patches from the Microsoft servers. However, it is possible via...
The post Windows Update for Business first appeared on Blog on Microsoft Technologies.Why send Event log Security is an important issue these days. Sending security event logs to Sentinel provides an additional level of security for onPrem servers. For this, we rely on Azure Sentinel, the SIEM from Microsoft. However, this operation has an Azure cost, so it is preferable to limit the events sent to the necessary logs (security, defender, etc.) In this post we will first set up the transfer of events on a collector via WinRMS and then configure...
The post Send Event log to Sentinel first appeared on Blog on Microsoft Technologies.In Best practice, it is important to have an offline root certificate authority and an Subordinate certificate authority that distributes certificates. We will look at how to migrate these two server (Windows Server 2012 R2 servers to Windows Server 2019). Migrate Root CA The root certificate authority is an important server in a public key infrastructure. It is used to sign the certificate of the Subordinate Certification Authority so that the Subordinate CA can in turn issue certificates to servers...
The post Migrate ADCS first appeared on Blog on Microsoft Technologies.Microsoft Endpoint Configuration Manager 2107 permit to convert the CMG (Cloud Management Gateway) with classic cloud service to virtual machine scale set. I write a post few month ago here for configure CMG with virtual machine scale set. Change parameter When you convert to virtual machine scale set, you can proceed to change some parameters. VM size VM instances Verify CRL Require TLS Serve content It is not possible to change the following parameters Azure environment Subscription Azure AD app...
The post Convert CMG first appeared on Blog on Microsoft Technologies.After several years of use, it is necessary to migrate the SCCM infrastructure to one or more other servers. It is possible to migrate the server to another server or to migrate role by role. If the infrastructure remains the same, the first solution is preferable because it is faster. In the case where the roles are redistributed, it is preferable to use role by role. Prerequisites It’s very important to verify the supported version of SCEM for the target...
The post Migrate your sccm server to a newer server first appeared on Blog on Microsoft Technologies.Customers with an Azure subscription through a CSP (Cloud Solution Provider) could encounter a lot of problems to set up the CMG. Since the 2010 version of Configuration Manager, it is possible to set up the functionality Cloud management gateway with Azure VM scale set. Enable feature It is necessary to enable the functionality. From the console, go to the Administration tab and expand Updates and Servicing. Select Cloud management gateway with Azure VM scale set and click on Turn...
The post CMG – VM Scale set first appeared on Blog on Microsoft Technologies.The deployment of a task sequence to customers can be done via the Internet. This scenario, which has already been present for several versions of Configuration Manager, has been improved with the 2010 version. It is now possible to start the update or installation of a Windows 10 workstation from a boot media. Prerequisites Before to configure deployment of task sequence over internet, you need to configure Cloud Management Gateway. The content can be obtained from the cloud management gateway,...
The post Task Sequence over Internet first appeared on Blog on Microsoft Technologies.Orchestration groups start with Configuration Manager 2002. This features permit to create a group for control the deployment of Software update. With this orchestration group, you can update devices based on percentage, explicit order, etc…. The member can be any Configuration Manager client. You can apply rules to any collections and all software update groups. This feature can be used in several cases You have a lot of server and collection. You want control the update deployment of sensitivity server...
The post Orchestration groups first appeared on Blog on Microsoft Technologies.