Skip to content

Detect and remove application from dependent task sequences with PowerShell

I believe most of us use install application steps during operating system deployment, unless you are using fully dynamic scripts to install applications. We often do changes in our task sequence, we made a copy of the original task sequence, made it as backup, then start modify the new ones. In some point, we updated some of applications, and we might want to delete those old applications, but oops, cannot delete, because of number of… 

Read More »Detect and remove application from dependent task sequences with PowerShell

Deploy multi-language Windows 10, the evil – Part 1 (Recovery/wipe)

Why I call it evil? Because I have been testing it for about one month, it really pissed me off, and it didn’t work. Every time when I get it working the way I wanted, then I noticed something else go broken. So what do I want with multi-language Windows 10? Windows 10, version 1803 with English, Finnish and Swedish language Local user and groups is English, so administrator is administrator, not järjestelmänvalvoja By default,… 

Read More »Deploy multi-language Windows 10, the evil – Part 1 (Recovery/wipe)

Force ConfigMgr client deployment on metered network

10 days ago I was in SCCM User Group Finland event (My presentation went badly, I don’t want to talk about that. :D). We are very happy to have Djam join us and talk about everything about ConfigMgr, and thanks for Panu Saukko organized this excellent event. In the afternoon, we have two hours Q&A, one of our attendee Jani asked about update ConfigMgr client over metered network. I run into this issue two years… 

Read More »Force ConfigMgr client deployment on metered network

First time speak in user group

Jun.28.2018 was an important day for me, we SCConfigMgr blog hosted our first user group event in London Microsoft Reactor amount 7 speakers and 83 attendees. You can find more details in here. I am honored as part of SCConfigMgr team, and as co-speaker with Nickolaj Andersen. Honestly I was nervous and scared before the summit, before the minute when say “Hello, I am Sandy”. Cathy asked me why am I nervous? I don’t actually know.… 

Read More »First time speak in user group

How to Install Windows Store apps to Windows Server 2016

You might find other posts or discussion related this topic, however I just want to write down my own notes. 🙂  I have Windows Server 2016 installed in my real machine, and setup Hyper-V for my test lab, but I do need some of the Windows Store apps in my Windows Server 2016, example Microsoft Whiteboard (Preview). Here are the steps what we need, it’s actually very simple. Log in to Windows Store for business: https://businessstore.microsoft.com… 

Read More »How to Install Windows Store apps to Windows Server 2016

Use PowerShell monitor WSUS pool status

This is a quick post. One of my colleague asked if I have a script to check if WSUS pool is running, if not then start it. I think it’s properly related WSUS high CPU, high memory and high network usage issue what related to many other matter. Anyway, this post is not about how to fix WSUS, Johan write a post about it, read it from here  So, here is my little script, it… 

Read More »Use PowerShell monitor WSUS pool status

Use Intune Policy CSP manage Windows 10 settings – Internet Explorer Site to Zone Assignment List

For start, I was actually testing ConfigMgr cloud gateway management and Client Installation over Internet, see this post https://blogs.technet.microsoft.com/arnabm/2017/08/27/client-installation-over-internet/ I did managed install ConfigMgr client on AAD joined Windows 10 (version 1709), but I also want configure some Internet Explorer settings to my AAD joined device. Since Windows 10 (version 1703), we can use Intune Policy CSP to configure more settings, it call admx-backed policies. Here is how I make Site to Zone Assignment list… 

Read More »Use Intune Policy CSP manage Windows 10 settings – Internet Explorer Site to Zone Assignment List

How to query Infineon firmware TPM (Microsoft Advisory ADV170012) in ConfigMgr

If you don’t know what is this about, you must read this https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV170012 Additional, in this article https://support.microsoft.com/en-us/help/4046783/bitlocker-mitigation-plan-for-vulnerability-in-tpm, it said  When TPM-based protector is used to protect the operating system volume, the security of the BitLocker protection is affected only if the TPM firmware version is 1.2. But the script what Microsoft provided doesn’t include detection if TPM firmware version is 1.2 or not. I found two excellent posts how to get those information out… 

Read More »How to query Infineon firmware TPM (Microsoft Advisory ADV170012) in ConfigMgr

Process completed with exit code 4294770688, Unknown error (Error: FFFD0000; Source: Unknown)

Noticed today same error message shows up in all machines that running the same Task Sequence: Process completed with exit code 4294770688, Unknown error (Error: FFFD0000; Source: Unknown) I have tested the same Task Sequence like hundred times, and I am sure there is not issue with the source package itself. So what went wrong? I spent about two hours figured it out, it is kind of my mistake, I would like to let everyone… 

Read More »Process completed with exit code 4294770688, Unknown error (Error: FFFD0000; Source: Unknown)

Use PowerShell detect if Lenovo laptop is attached docks

Big thanks for Joe Parker (@joe_lenovo) gave us PnP ID of Lenovo ThinkPad Pro/Ultra docks. ThinkPad Pro dock 40A1: USB\VID_17EF&PID_1012ThinkPad Ultra 40A2: USB\VID_17EF&PID_1010 This a simple PowerShell script for detect if Lenovo laptops are attached to dock station, includes mechanical Lenovo ThinkPad docks and Lenovo USB 3.0 Pro/Ultra docks.  Or: