Skip to main content

Posts

Windows 10 - UE-V Deployment Guide

Windows 10 - UE-V Deployment Guide UE-V in Windows 10 is setup pretty quickly but the documentation for Group Policy and expected outcomes is all over the place.  In order to help other IT Pro's navigate their UE-V implementation I have documented my configuration with observations. Folder and Executable Reference Table Templates folder                    = C:\ProgramData\Microsoft\UEV\Templates InboxTemplates folder           = C:\ProgramData\Microsoft\UEV\InboxTemplates Scripts Folder                         = C:\ProgramData\Microsoft\UEV\Scripts SettingsStoragePath                = Central UNC Share i.e \\ServerName\UEVData\%UserName% SettingsTemplateCatalogPath = Central UNC Share i.e \\ServerName\UEVCatalogPath UEVAppMonitor.exe                  ...

Windows 10 - Feature Upgrade using SCCM Servicing (13/06/2019 Updated)

Software Updates - Feature Upgrade - Windows 10 Software updates within an Enterprise organisation has been fairly straight forward until you attempt to use it for Feature Upgrades of Windows 10.  SCCM is very reliable at delivering the updates (Rollups, Updates, Upgrades) and as i have previously proved is UWF aware in Windows 10. However, the Feature Upgrade does require a bit of prep work if you do not want the new Appx Applications installed as part of the Upgrade. Moving between the 1507-1703 branches each Feature upgrade would reinstall the Appx Applications that you previously removed. Microsoft has addressed this in the 1703 - 1709 feature upgrade and if you removed an application it will not come back.  However, if the new branch has a new application this will get installed. Uninstalled in-box apps no longer automatically reinstall Starting with Windows 10, version 1703, in-box apps that were uninstalled by the user won't automatically reinstall as part of the featur...

Windows 10 Overlay for Unified Write Filter (UWF)

Windows 10 Overlay for Unified Write Filter (UWF) This entry is to document my experience with the Windows 10 feature Unified Write Filter (UWF); with the intention to replace DeepFreeze on shared computers. "Unified Write Filter (UWF) protects the contents of a volume by redirecting all write operations on that volume to the overlay, which is a virtual representation of the changes to the volume. Conceptually, an overlay is similar to a transparency overlay on an overhead projector. Any change that is made to the transparency overlay affects the projected picture as it is seen by the viewer. However, if the transparency overlay is removed, the underlying picture remains unchanged. In a UWF protected system, UWF creates a single overlay, which contains information about writes to all protected volumes on a system. The overlay supports up to 16 terabytes of protected volumes." (extract from  https://docs.microsoft.com/en-us/windows-hardware/customize/enterprise/uwfoverlay )  H...

Windows PE and Cisco ISE authentication 802.1x

Windows PE  and Cisco ISE authentication This blog entry is intended to assist you when implementing a Cisco ISE next generation network across the organisation.  Without ISE profiles the SCCM Task Sequence will fail to connect to Distribution Points and the MDT database.  UNC paths are blocked and network access is restricted. Cisco ISE by design will restrict network access to prevent unauthorized clients from simply plugging their equipment into the network and being routed like a authorised client. Computer and User Authentication (explain in detailed section) Cisco ISE profiles should be implemented in two ways; Cisco ISE profiles via Group Policy for domain joined systems, and to bake ISE profiles into the SCCM Boot Image.  The guide below will explain how to implement both configuration setups. Tutorial - WinPE Microsoft has detailed the two XML files required to achieve User Authentication when in WinPE here Create an XML called "EthernetLANProfile.xml" conta...

ScanAgent.log reports OnScanComplete with error=0x87d00692

ScanAgent.log reports OnScanComplete with error=0x87d00692 Scenario : Clients are not receiving Software Updates for both Microsoft OS updates and Windows Defender.  The SCCM concole resports that the system does not summaries any required updates. We have a Group policy in place applying a specific update service location; this location is applied in several policies over several OU's. Only one policy when applied results in the error 0x87d00692 . ScanAgent.log ScanJob({BAA53BE2-9FE1-48B6-89A7-0D60BC07ED50}): CScanJob::OnScanComplete -Scan Failed with Error=0x87d00692 ScanJob({BAA53BE2-9FE1-48B6-89A7-0D60BC07ED50}): CScanJobManager::OnScanComplete- failed at CScanJob::OnScanComplete with error=0x87d00692 Conclusion : We have a Group policy in place applying a specific update service location; this location is applied in several policies over several OU's. The single policy that was resulting in   0x87d00692 has had the update service location removed and han...

SCCM SUP WSUS Pool keeps stopping or the server is unresponsive

SCCM SUP WSUS Pool keeps stopping or the server is unresponsive Scenario: Our WSUS/SUP had become unresponsive and the decision to reinstall the server role was made. After the Site server had been reinstalled  I became aware that Windows Defender updates were failing to update (3 days old) and even though the updates were sync'd, downloaded, and deployed in SCCM the client was still unable to receive them. Client Log analysis : ScanAgent.log ScanJob({999C9FFA-A463-4BE8-8771-67EE96D4140B}): CScanJob::OnScanComplete -Scan Failed with Error=0x80240440 ScanJob({999C9FFA-A463-4BE8-8771-67EE96D4140B}): CScanJobManager::OnScanComplete- failed at CScanJob::OnScanComplete with error=0x80240440 Update Deployment.log Job error (0x80240440) received for assignment ({bf7a48e6-d220-4070-bb9b-ecc239107584}) action        UpdatesDeploymentAgent        Updates will not be made available        WUAHandle...

App-V 5X application not discovered. A supported App-V 5X client is not installed

SCCM Task Sequence with App-V application " A supported App-V 5X client is not installed" Scenario: Windows 10 (1607) Task Sequence with various MSI and App-V applications. During an SCCM Task Sequence I am attempting to install an App-V application however, at the end of the build MSI installations have installed but App-V application has not been installed. AppDiscovery.log    Performing detection of app deployment type MathWorks_MATLAB-R2014a_8.3.0.532_001A - Download..... +++ App-V 5X application not discovered. A supported App-V 5X client is not installed. Resolution: With Windows 10, version 1607, the App-V client is installed automatically however, it needs to be enabled before you can installations App-V packaged within a Task Sequence.  This can be achieved by adding a command line to you Task Sequence to run Windows PowerShell command. powershell -executionpolicy bypass -command Enable-Appv