ConfigMgr on Anything About IT

Use Microsoft Endpoint Configuration Manager to Configure the Windows Print Spooler Service

Sat, 10 Jul 2021 15:07:17 +0000

Hello there,

In my earlier post Use Microsoft Endpoint Configuration Manager to stop the Windows Print Spooler Service – Anything about IT (verboon.info) I explained how to stop the Print Spooler service using Microsoft Endpoint Configuration Manager leveraging CMPivot to identify servers where the Print Spooler is running and the Run Script function to stop and disable the service. This method was intended as a first response action, however as new servers get deployed, we want to make sure the print spooler remains disabled, so we need a more permanent solution.

Configuring Windows Defender Credential Guard with ConfigMgr

Wed, 27 Mar 2019 21:23:16 +0000

I’m currently engaged in multiple customer projects where Windows 10 is already in production, but unfortunately without Windows Credential Guard enabled. For those who think “Credential ….what?”

Windows Defender Credential Guard uses virtualization-based security to isolate secrets so that only privileged system software can access them. Unauthorized access to these secrets can lead to credential theft attacks, such as Pass-the-Hash or Pass-The-Ticket. More details can be found here.

Some of you might think, why wasn’t it enabled in the first place when they deployed Windows 10? From speaking to several people, here are some of the reasons.

Deploying ConfigMgr Current Branch in Azure Dev Test Lab

Fri, 10 Feb 2017 21:36:02 +0000

Remember the days when you spend hours if not days just to get a lab environment in place and any time you wanted to use the environment again, you spend another couple of hours to get It updated. About 3 years ago I started to make more use of Azure based compute to run my virtual machines, that I use for technology learning and research activities. Initially created the virtual machines through the portal, but then soon started to use Azure Resource Manager based provisioning techniques and PowerShell which speeded up provisioning times quite a bit.

How to generate random computer names for lab deployments using SCCM OSD

Thu, 21 Feb 2013 11:22:32 +0000

For my lab environment I use the below described approach to generate random computernames for my clients. The script does the following:

Read the Task Sequence Package Name
Based on the name set the appropriate prefix
Generate a random number between 100 and 1000
Generate the new computer name based on Prefix + random number

To implement this do the following:

Put the script listed below into a package
Add the script to the TS by adding a Run Command Line task after Partition Disk and before Apply Operating System