Group Policy changes included in the Windows Management Framework 3.0

While creating a new Group Policy object to enable WinRM (Windows Remote Management) on clients, I noticed some Group Policy changes that are introduced with the Windows Management Framework 3.0. The Windows Management Framework 3.0 contains the following updates: Windows PowerShell 3.0 Windows Management Instrumentation (WMI) 3.0 Windows Remote Management (WinRM) Management OData IIS Extension Server Manager CIM Provider I became aware of the changes as I was referring to a blog post I had Read More …

How to create a custom antimalware policy in SCCM 2012 for your App-V sequencing clients

Today I wanted to start sequencing an application for App-V within my lab environment where I have deployed SCCM 2012 SP1 including Endpoint Protection. As I went through the Sequencing Wizard I got the well-known warning that I have Antivirus software running. Not an issue, just turn it off right?. Well since I have configured a custom Antimalware policy that is applied to all my clients to not allow configure the real-time protection settings, this Read More …

How to generate random computer names for lab deployments using SCCM OSD

For my lab environment I use the below described approach to generate random computernames for my clients. The script does the following: Read the Task Sequence Package Name Based on the name set the appropriate prefix Generate a random number between 100 and 1000 Generate the new computer name based on Prefix + random number To implement this do the following: Put the script listed below into a package Add the script to the TS Read More …

How to convert registry files (.reg) into XML for Group Policy Preferences import

Creating registry settings manually within the Group Policy Preferences editor can become a cumbersome task, especially when you need to create many of them. Although the Group Policy Management console allows you to import registry keys stored within an XML formatted file, unfortunately out of the box Microsoft doesn’t provide any tooling to export and convert registry settings into xml. A couple of days ago I found an online “FREE” Registry to Group Policy Preferences Read More …

How to create a SCCM 2012 SP1 Configuration Baseline with Security Compliance Manager (SCM) 3.0

Most enterprises take advantage of Group Policies to manage security configuration settings across their server and desktop infrastructure. Usually once tested and implemented it’s assumed they get applied correctly. But can we be 100% sure that our clients and servers do actually receive these settings? With the help of the Microsoft Security Compliance Manager 3.0 and SCCM 2012 SP1 we can configure a security baseline to monitor security group policy settings compliance. To do so Read More …