Getting the Client Upgrade Settings of ConfigMgr 2012 with PowerShell

by

This week, my blog post will be a very short one. It will be a post about my tweet about the client upgrade settings, of a week ago. A big part of this information is also available via the Hierarchy Settings in the console. Script In WMI there is the class SMS_ImportedObject, which contains the method Get-ClientUpgradeSettings. This method can be used to get the client upgrade settings and doesn’t need any input parameters. It will give all the information, about the name, version and IDs and can be used via to the following code snippet: function Get-ClientUpgradeSettings { param ( [string]$SiteCode, [string]$SiteServer ) Invoke-WmiMethod -Namespace root/SMS/site_$($SiteCode) -Class SMS_ImportedObject -Name GetClientUpgradeSettings -ComputerName $SiteServer } Result The code snippet will give a result like under here. …

Read more

Approve, Block, Unapprove, or Unblock a Client in ConfigMgr 2012 via PowerShell

by

This blog post will show how to approve, block, unapprove, or unblock clients in ConfigMgr 2012 via PowerShell. Three of these actions, approve, block and unblock, are also accessible via the console, but via PowerShell it is very easy to perform these actions for a whole collections. This creates the possibility to create a custom automatic approval in combination with for example a collection membership. The fourth action, unapprove, is not accessible via the console and only accessible via WMI (with some help of PowerShell). Solution In WMI there is the class SMS_Collection, which has the methods ApproveClients and BlockClients. These methods can be used to (un)approve and (un)block clients and they require both the same two parameters. They both require a boolean and an …

Read more

Update Collection Membership in ConfigMgr 2012 via PowerShell

by

A few weeks ago I’ve got the question if it is possible to speed-up the collection membership update after a new device was added to the database via my Import Comport Form. The short answer is, of course, yes! As this answer would make a really short blog post, I decided to put some more time in it. My first answer could have been, why can’t you wait on the incremental update cycle. As by default, the Use incremental updates for this collection is selected (and grayed-out) for the All Systems collection and the default Interval for Collection Membership Evaluation is five minutes (see this post for more information). Solution Now what can we do when either five minutes takes to long, or the default …

Read more

Go to Desktop on Sign In on Windows 8.1 via Compliance Settings in ConfigMgr 2012

by

This weeks’ post will be about Going to the desktop, instead of Start, when signing on Windows 8.1 via Compliance Settings. I will write about the scripts for discovering and remediating this setting, either on a user based, or a computer based configuration, via a Configuration Item. Keep in mind that it won’t be a walkthrough. For a complete step-by-step example, about using scripts in Compliance Settings, take a look at my post about Allowing Direct Installation of Windows 8 Apps via Compliance Settings in ConfigMgr 2012. Of course, in the most situations, the preferable way for configuring this settings is via a Group Policy (as described in this great post of Sander Berkouwer). There are a only a few reason not to use a …

Read more

Updated: Import Computer Form v0.8 – Directly adding a User Device Affinity in ConfigMgr 2012

by

A few months ago I released the first public version of my Import Computer Form. I’ve had some nice feedback about it and also some good ideas for added functionality. This update will mainly be about three things: Cleaning-up old code, by merging a few lines and adjusting some queries. Adding error catching, by introducing an error provider for faulty input. Adding functionality, by introducing an option to add a User Device Affinity/ Primary User. Overview These additions mean that this version gives the user the possibility to perform the following actions, without the need of access to and/ or a locally installed ConfigMgr console: Fill in a Computer name. Fill in a MAC Address. Select an OS Deployment Collection. Select a Primary User. Import …

Read more

Changing the Deployment Package for an existing Automatic Deployment Rule in ConfigMgr 2012

by

A few months ago I did a post about Changing the Deployment Package linked to an Automatic Deployment Rule in ConfigMgr 2012. That post was about using PowerShell for changing the Deployment Package of an existing Automatic Deployment Rule (ADR). As I see that the script is being downloaded often, and I get some good questions about it, I thought it would be a good time for a small follow-up. Even though the script will still work in ConfigMgr 2012 R2, it will not be needed anymore! Microsoft addressed the issue in R2 by adding a new tab, named Deployment Package, to the Properties of an ADR (see screenshot).

Allow Direct Installation of Windows 8 Apps via Compliance Settings in ConfigMgr 2012

by

This weeks’ post will be about Allowing Direct Installation of Windows 8 Apps via Compliance Settings and can be seen as either a stand-alone post as well as a follow-up on my last post about Deploying Certificate Profiles with ConfigMgr 2012 . As there are two real requirements to deploy Windows 8 Apps: The Certification Authority (CA), that is used to sign the App, is trusted by the Windows 8 device. Allow Direct Installation of Windows 8 Apps is configured on the Windows 8 device. Of course these settings are configurable via Group Policies (as described in this post ), but, to use Group Policies, the device needs to be a member of the domain. So when either the device isn’t domain joined, or the …

Read more

Deploying Certificate Profiles with ConfigMgr 2012

by

This week I want to devote a post to something new in ConfigMgr 2012 R2, which is still in a preview state, called Certificate Profiles. These profiles integrate directly with Active Directory Certificate Services (ADCS), and the Network Device Enrollment Service (NDES) role, to provision managed devices with authentication certificates. This means that another Group Policy setting is coming to ConfigMgr AND, maybe even bigger, this creates a possibility to automatically deploy certificates to non-domain devices.  Prerequisites Even though this sounds, to me, really promising for the future of ConfigMgr, there is a small catch. That small catch is the third bullet of the prerequisites, following now: Configuration Manager 2012 Service Pack 1 R2 Install and configure the Certificate Registration Point (which requires the NDES …

Read more

Show Collection Details in ConfigMgr 2012 via PowerShell – Part 5 (Final): The General Information

by

>> Available via download here on the TechNet Galleries! << This week my post will be all about the end result of my series, about showing the Collection Details, of a device, via a PowerShell form. I changed a few small details and added another new tab, with more new information! This new tab shows all the General information about the collections, of which the device is a member. As there is (almost) no more information that can be added, about collection information that affects the device, this will be the last addition to the script/ form. In case someone still misses some important, or logical information, please let me know! Collection Details Form This script creates a nice form to show the Collection Details …

Read more

Show Collection Details in ConfigMgr 2012 via PowerShell – Part 4: The Power Management Settings

by

This week another addition to my series about showing the Collection Details, of a device, via a PowerShell form. This week I added another new tab, with more new information! This new tab show all the information about the applied Power Management settings, that affect the device. It’s also good to know that within the Power Management settings, there is an option Never apply power management settings to computers in this collection and when this option is selected the form will show a row with five times Never. So whenever a device shows a row like that, the other Power Management settings aren’t applicable anymore. Collection Details Form This script creates a nice form to show Collection Details of the specified device. At this moment …

Read more