﻿<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:atom="https://www.w3.org/2005/Atom" xmlns:sy="https://purl.org/rss/1.0/modules/syndication/" xmlns:dc="https://purl.org/dc/elements/1.1/" xmlns:content="https://purl.org/rss/1.0/modules/content/" xmlns:wfw="https://wellformedweb.org/CommentAPI/" xmlns:slash="https://purl.org/rss/1.0/modules/slash/"
  version="2.0">
  <channel>
    <title>Justin Chalfant's Configuration Manager Blog</title>
    <atom:link
      href="https://review.docs.microsoft.com/archive/blogs/jchalfant/feed.xml"
      rel="self"
      type="application/rss+xml" />
    <link>https://review.docs.microsoft.com/archive/blogs/jchalfant/feed.xml</link>
    <description>Topics around Microsoft SCCM</description>
    <lastBuildDate>Mon, 11 Feb 2019 14:21:47 GMT</lastBuildDate>
    <language>en-US</language>
    <sy:updatePeriod>hourly</sy:updatePeriod>
    <sy:updateFrequency>1</sy:updateFrequency>
    <item>
      <title>Using a Shared WSUS Database for Multiple SUPs in SCCM</title>
      <link>https://review.docs.microsoft.com/archive/blogs/jchalfant/using-a-shared-wsus-database-for-multiple-sups-in-sccm</link>
      <pubDate>Mon, 11 Feb 2019 14:21:46 GMT</pubDate>
      <dc:creator><![CDATA[Justin Chalfant]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/jchalfant/?p=1685</guid>
      <description><![CDATA[Overview

In this video guide, we will be covering how to use a shared WSUS database for multiple...]]></description>
      <content:encoded><![CDATA[<p><iframe width="560" height="315" src="https://www.youtube.com/embed/y7w7hBSHShc" frameborder="0" allowfullscreen="allowfullscreen"></iframe></p>
<h4><strong>Overview</strong></h4>
<ul>
<li>In this video guide, we will be covering how to use a shared WSUS database for multiple software update points in SCCM. Using a shared WSUS Database is generally <a href="https://docs.microsoft.com/en-us/sccm/sum/plan-design/software-updates-best-practices#bkmk_shared-susdb">considered a best practice</a> in well-connected scenarios since this offloads the vast majority of network impact if a client were to switch <a href="https://docs.microsoft.com/en-us/sccm/sum/plan-design/plan-for-software-updates#BKMK_ManuallySwitchSUPs">SUPs in SCCM</a>.</li>
</ul>
<h4><strong>Topics in Video</strong></h4>
<ul>
<li>Review the SCCM docs and why a WSUS shared DB is usually a good idea - <a href="https://youtu.be/y7w7hBSHShc?t=42" rel="noopener noreferrer">https://youtu.be/y7w7hBSHShc?t=42</a></li>
<li>Review why wsyncmgr syncs are faster when using shared WSUS database - <a href="https://youtu.be/y7w7hBSHShc?t=93" rel="noopener noreferrer">https://youtu.be/y7w7hBSHShc?t=93</a></li>
<li>Review current labs primary SUP with SQL DB, and secondary SUP using WID - <a href="https://youtu.be/y7w7hBSHShc?t=175" rel="noopener noreferrer">https://youtu.be/y7w7hBSHShc?t=175</a></li>
<li>Enable Debug and Verbose logging to wsyncmgr.log and wcm.log - <a href="https://youtu.be/y7w7hBSHShc?t=293">https://youtu.be/y7w7hBSHShc?t=293</a></li>
<li>Review how the WSUS_Configuration_Manager tread reads all available SUPs at startup and how it determines if it's using a shared WSUS database - <a href="https://youtu.be/y7w7hBSHShc?t=419" rel="noopener noreferrer">https://youtu.be/y7w7hBSHShc?t=419</a></li>
<li>Review wsyncmgr.log for multiple SUPs in a non shared WSUS Database - <a href="https://youtu.be/y7w7hBSHShc?t=508" rel="noopener noreferrer">https://youtu.be/y7w7hBSHShc?t=508</a></li>
<li>Remove WID WSUS role service and add SQL WSUS role service - <a href="https://youtu.be/y7w7hBSHShc?t=686" rel="noopener noreferrer">https://youtu.be/y7w7hBSHShc?t=686</a></li>
<li>Configure SUP-2 to use SUP-1's WSUSContent library folder for EULA/3rd-Party Update Content - <a href="https://youtu.be/y7w7hBSHShc?t=843" rel="noopener noreferrer">https://youtu.be/y7w7hBSHShc?t=843</a></li>
<li>Run WSUSUTIL.exe postinstall to change WSUS to use the shared SQL Database and Shared WSUSContent folder - <a href="https://youtu.be/y7w7hBSHShc?t=1005" rel="noopener noreferrer">https://youtu.be/y7w7hBSHShc?t=1005</a></li>
<li>Resolve IIS misconfigurations after postinstall - <a href="https://youtu.be/y7w7hBSHShc?t=1215" rel="noopener noreferrer">https://youtu.be/y7w7hBSHShc?t=1215</a>
<ul>
<li>Add "\\" to the beginning of Physical path in IIS Content virtual directly</li>
<li>Change <strong>Authentication</strong> for <strong>Anonymous Authentication</strong> to use <strong>WSUS Application Pool</strong> Identity instead of local <strong>IUSR</strong> account</li>
</ul>
</li>
<li>Start WSUS_Configuration_Manager and validate it updates SUP-2 configuration in the active SUP list to be a shared WSUS database - <a href="https://youtu.be/y7w7hBSHShc?t=1505" rel="noopener noreferrer">https://youtu.be/y7w7hBSHShc?t=1505</a></li>
<li>Publish a third-party update to get a WSUS catalog change and run a SUP sync to review how the sync is now treated as a single SUP sync - <a href="https://youtu.be/y7w7hBSHShc?t=1637" rel="noopener noreferrer">https://youtu.be/y7w7hBSHShc?t=1637</a></li>
<li>Setup shared WSUS database in a new clean WSUS installation on a new SUP rather than converting an existing SUP to a shared WSUS database - <a href="https://youtu.be/y7w7hBSHShc?t=1744" rel="noopener noreferrer">https://youtu.be/y7w7hBSHShc?t=1744</a></li>
</ul>
<h4><strong>Commands and Notes:</strong></h4>
<ul>
<li>Powershell command to see WSUS installed role services: <strong>Get-WindowsFeature -Name UpdateServices*</strong></li>
<li>Powershell command to remove WSUS WidDB: <strong>Remove-WindowsFeature -Name UpdateServices-WidDB</strong></li>
<li>Powershell command to install WSUS SQL Database Connectivity: <strong>Install-WindowsFeature -Name UpdateServices-DB</strong></li>
<li>WsusUtil command: <strong>WsusUtil.exe postinstall SQL_INSTANCE_NAME="SCUP.CONTOSO.LOCAL" CONTENT_DIR="\\SCCM3-DPMPSUP-1.CONTOSO.LOCAL\WSUS"</strong>
<ul>
<li>SQL_INSTANCE_NAME and CONTENT_DIR should be changed to for your environment details</li>
</ul>
</li>
</ul>
<h4><strong>Helpful Resources:</strong></h4>
<ul>
<li>Great blog post version of using a shared WSUS Database - <a href="https://blogs.technet.microsoft.com/configurationmgr/2016/10/12/how-to-implement-a-shared-susdb-for-configuration-manager-software-update-points/" rel="noopener noreferrer">https://blogs.technet.microsoft.com/configurationmgr/2016/10/12/how-to-implement-a-shared-susdb-for-configuration-manager-software-update-points/</a></li>
<li>Manually switch clients to a new software update point - <a href="https://docs.microsoft.com/en-us/sccm/sum/plan-design/plan-for-software-updates#BKMK_ManuallySwitchSUPs" rel="noopener noreferrer">https://docs.microsoft.com/en-us/sccm/sum/plan-design/plan-for-software-updates#BKMK_ManuallySwitchSUPs</a></li>
<li>Use a shared WSUS database for software update points (Installation Best Practices) - <a href="https://docs.microsoft.com/en-us/sccm/sum/plan-design/software-updates-best-practices#bkmk_shared-susdb" rel="noopener noreferrer">https://docs.microsoft.com/en-us/sccm/sum/plan-design/software-updates-best-practices#bkmk_shared-susdb</a></li>
<li>Managing WSUS from the Command Line - <a href="https://docs.microsoft.com/de-de/security-updates/windowsupdateservices/18127395" rel="noopener noreferrer">https://docs.microsoft.com/de-de/security-updates/windowsupdateservices/18127395</a></li>
</ul>]]></content:encoded>
    </item>
    <item>
      <title>Migrating a WSUS Database from WID to SQL</title>
      <link>https://review.docs.microsoft.com/archive/blogs/jchalfant/migrating-a-wsus-database-from-wid-to-sql</link>
      <pubDate>Mon, 14 Jan 2019 11:58:11 GMT</pubDate>
      <dc:creator><![CDATA[Justin Chalfant]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/jchalfant/?p=1675</guid>
      <description><![CDATA[OverviewinIn this video guide, we will be covering how to migrate WSUS Database (SUSDB) from...]]></description>
      <content:encoded><![CDATA[<iframe width="560" height="315" src="https://www.youtube.com/embed/Ms-5lzF9538" frameborder="0" allowfullscreen="allowfullscreen"></iframe>
<h4><strong>Overviewin</strong></h4><ul><h4></h4><ul><li>In this video guide, we will be covering how to migrate WSUS Database (SUSDB) from Windows Internal Database instance to SQL Server </li></ul><li>stance.</li>
</ul>
<h4><strong>Topics in Video</strong></h4>
<ul>
	<li>Overview of WID limitation and why you want to move to SQL - <a href="https://youtu.be/Ms-5lzF9538?t=24" target="_blank" rel="noopener noreferrer">https://youtu.be/Ms-5lzF9538?t=24</a></li>
	<li>Review WSUS configuration and how to validate if you are using WID for the SUSDB - <a href="https://youtu.be/Ms-5lzF9538?t=67" target="_blank" rel="noopener noreferrer">https://youtu.be/Ms-5lzF9538?t=67</a></li>
	<li>Detach SUSDB from the WID instance - <a href="https://youtu.be/Ms-5lzF9538?t=187" target="_blank" rel="noopener noreferrer">https://youtu.be/Ms-5lzF9538?t=187</a></li>
	<li>Copy WSUS database (SUSDB.mdf and SUSDB_log.ldf) from default WID install path and attach in SQL Instance - <a href="https://youtu.be/Ms-5lzF9538?t=355" target="_blank" rel="noopener noreferrer">https://youtu.be/Ms-5lzF9538?t=355</a></li>
	<li>Run one-time re-indexing in SQL of the SUSDB since it likely was never done in the WID instance - <a href="https://youtu.be/Ms-5lzF9538?t=458" target="_blank" rel="noopener noreferrer">https://youtu.be/Ms-5lzF9538?t=458</a></li>
	<li>Remove the WID Connectivity role service (UpdateServices-WidDB) - <a href="https://youtu.be/Ms-5lzF9538?t=603" target="_blank" rel="noopener noreferrer">https://youtu.be/Ms-5lzF9538?t=603</a></li>
	<li>Install the SQL Server Connectivity role service (UpdateServices-DB) - <a href="https://youtu.be/Ms-5lzF9538?t=627" target="_blank" rel="noopener noreferrer">https://youtu.be/Ms-5lzF9538?t=627</a></li>
	<li>Run WsusUtil postinstall command and reconfigure WSUS to use a SQL Server instead of WID - <a href="https://youtu.be/Ms-5lzF9538?t=658" target="_blank" rel="noopener noreferrer">https://youtu.be/Ms-5lzF9538?t=658</a></li>
	<li>Validate WSUS console loads and shows the exact same data as before the move - <a href="https://youtu.be/Ms-5lzF9538?t=898" target="_blank" rel="noopener noreferrer">https://youtu.be/Ms-5lzF9538?t=898</a></li>
	<li>Validate SCCM software update point sync works from WSUS - <a href="https://youtu.be/Ms-5lzF9538?t=908" target="_blank" rel="noopener noreferrer">https://youtu.be/Ms-5lzF9538?t=908</a></li>
</ul>
<h4><strong>Commands and Notes:</strong></h4>
<ul>
	<li>Connect to WID instance in SQL Management Studio of sqlcmd (Server 2012 or Newer): <strong>\\.\pipe\MICROSOFT##WID\tsql\query</strong></li>
	<li>Connect to WID instance in SQL Management Studio of sqlcmd (Server 2008 R2 or Older): <strong>\\.\pipe\MSSQL$MICROSOFT##SSEE\sql\query</strong></li>
	<li>Powershell command to see WSUS installed role services: <strong>Get-WindowsFeature -Name UpdateServices*</strong></li>
	<li>Powershell command to remove WSUS WidDB: <strong>Remove-WindowsFeature -Name UpdateServices-WidDB</strong></li>
	<li>Powershell command to install WSUS SQL Database Connectivity: <strong>Install-WindowsFeature -Name UpdateServices-DB</strong></li>
	<li>WsusUtil command: <strong>WsusUtil.exe postinstall SQL_INSTANCE_NAME="SCUP.CONTOSO.LOCAL" CONTENT_DIR="J:\WSUS"</strong>
<ul>
	<li>SQL_INSTANCE_NAME and CONTENT_DIR should be changed to for your environment details</li>
</ul>
</li>
</ul>
<h4><strong>Helpful Resources:</strong></h4>
<ul>
	<li>sqlcmd Utility - <a href="https://docs.microsoft.com/en-us/sql/tools/sqlcmd-utility?view=sql-server-2017" target="_blank" rel="noopener noreferrer">https://docs.microsoft.com/en-us/sql/tools/sqlcmd-utility?view=sql-server-2017</a></li>
	<li>Migrating the WSUS Database from WID to SQL - <a href="https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/manage/wid-to-sql-migration#migrating-the-wsus-database" target="_blank" rel="noopener noreferrer">https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/manage/wid-to-sql-migration#migrating-the-wsus-database</a></li>
	<li>Re-index the WSUS 3.0 Database - <a href="https://gallery.technet.microsoft.com/scriptcenter/6f8cde49-5c52-4abd-9820-f1d270ddea61" target="_blank" rel="noopener noreferrer">https://gallery.technet.microsoft.com/scriptcenter/6f8cde49-5c52-4abd-9820-f1d270ddea61</a></li>
</ul>]]></content:encoded>
    </item>
    <item>
      <title>Enabling Site Server High Availability in SCCM</title>
      <link>https://review.docs.microsoft.com/archive/blogs/jchalfant/enabling-site-server-high-availability-in-sccm</link>
      <pubDate>Mon, 07 Jan 2019 13:59:14 GMT</pubDate>
      <dc:creator><![CDATA[Justin Chalfant]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/jchalfant/?p=1665</guid>
      <description><![CDATA[Overview

In this video guide, we will be covering how to configure site server high availability...]]></description>
      <content:encoded><![CDATA[<p><iframe width="560" height="315" src="https://www.youtube.com/embed/PsHsBseqkD0" frameborder="0" allowfullscreen="allowfullscreen"></iframe></p>
<h4><strong>Overview</strong></h4>
<ul>
<li>In this video guide, we will be covering how to configure site server high availability in Microsoft System Center Configuration Manager Current Branch. We will cover the prerequisites to install a passive site server, how to perform the installation, and how to fail over to the passive server.</li>
</ul>
<h4><strong>Topics in Video</strong></h4>
<ul>
<li>Review Basic's of the Site Server and what actions it performs and impacts of it being down - <a href="https://youtu.be/PsHsBseqkD0?t=27" target="_blank" rel="noopener noreferrer">https://youtu.be/PsHsBseqkD0?t=27</a></li>
<li>Basic's of High Availability of the Site Server - <a href="https://youtu.be/PsHsBseqkD0?t=134" target="_blank" rel="noopener noreferrer">https://youtu.be/PsHsBseqkD0?t=134</a></li>
<li>Review the lab setup and the current site server and site systems in the environment - <a href="https://youtu.be/PsHsBseqkD0?t=267" target="_blank" rel="noopener noreferrer">https://youtu.be/PsHsBseqkD0?t=267</a></li>
<li>Add the computer account of the new Passive site server to the Site Servers AD Security Group so it has permissions to the Systems Management container - <a href="https://youtu.be/PsHsBseqkD0?t=430" target="_blank" rel="noopener noreferrer">https://youtu.be/PsHsBseqkD0?t=430</a></li>
<li>Add the Computer Account or Security Group of the new passive site server to the Local Admins on the SQL Server and SysAdmin rights to the SQL Instance - <a href="https://youtu.be/PsHsBseqkD0?t=518" target="_blank" rel="noopener noreferrer">https://youtu.be/PsHsBseqkD0?t=518</a></li>
<li>Install .NET 3.5 SP1 on the new passive site server - <a href="https://youtu.be/PsHsBseqkD0?t=669" target="_blank" rel="noopener noreferrer">https://youtu.be/PsHsBseqkD0?t=669</a></li>
<li>Install WSUS (API's) on the new passive site server - <a href="https://youtu.be/PsHsBseqkD0?t=728" target="_blank" rel="noopener noreferrer">https://youtu.be/PsHsBseqkD0?t=728</a>
<ul>
<li>Install-WindowsFeature -Name UpdateServices-API</li>
<li>Get-WindowsFeature -Name UpdateServices*</li>
</ul>
</li>
<li>Install Remote Differential Compression role - <a href="https://youtu.be/PsHsBseqkD0?t=815" target="_blank" rel="noopener noreferrer">https://youtu.be/PsHsBseqkD0?t=815</a>
<ul>
<li>Install-WindowsFeature RDC</li>
</ul>
</li>
<li>Install the Windows 10 ADK (WinPE, Deployment Tools, and USMT) - <a href="https://youtu.be/PsHsBseqkD0?t=860" target="_blank" rel="noopener noreferrer">https://youtu.be/PsHsBseqkD0?t=860</a></li>
<li>Add Site Servers AD Security Group that contains Site Server Computer Accounts to Local Administrators on the new passive site server - <a href="https://youtu.be/PsHsBseqkD0?t=933" target="_blank" rel="noopener noreferrer">https://youtu.be/PsHsBseqkD0?t=933</a></li>
<li>Move ContentLibrary from a local path on the active site server to a remote network share - <a href="https://youtu.be/PsHsBseqkD0?t=1009" target="_blank" rel="noopener noreferrer">https://youtu.be/PsHsBseqkD0?t=1009</a></li>
<li>Go through the wizard in the console to add a new "Site System Server" and choose the "Site server in passive mode" - <a href="https://youtu.be/PsHsBseqkD0?t=1309" target="_blank" rel="noopener noreferrer">https://youtu.be/PsHsBseqkD0?t=1309</a></li>
<li>Review the site server prerequisites check in the "Site Server Status" node in the console - <a href="https://youtu.be/PsHsBseqkD0?t=1450" target="_blank" rel="noopener noreferrer">https://youtu.be/PsHsBseqkD0?t=1450</a></li>
<li>Review C:\ConfigMgrSetup.log on new passive site server once core setup is started - <a href="https://youtu.be/PsHsBseqkD0?t=1654" target="_blank" rel="noopener noreferrer">https://youtu.be/PsHsBseqkD0?t=1654</a></li>
<li>After core setup is complete review sitecomp.log on passive site server to see components under SMS_EXECUTIVE getting registered - <a href="https://youtu.be/PsHsBseqkD0?t=1688" target="_blank" rel="noopener noreferrer">https://youtu.be/PsHsBseqkD0?t=1688</a></li>
<li>Installing the SMS_Provider on the new passive site server so the console could still connect is the active site server goes down - <a href="https://youtu.be/PsHsBseqkD0?t=1778" target="_blank" rel="noopener noreferrer">https://youtu.be/PsHsBseqkD0?t=1778</a></li>
<li>Review process to promote site server in passive mode to active mode - <a href="https://youtu.be/PsHsBseqkD0?t=2053" target="_blank" rel="noopener noreferrer">https://youtu.be/PsHsBseqkD0?t=2053</a></li>
</ul>
<h4><strong>Helpful Resources:</strong></h4>
<ul>
<li>Site Server Failure Impacts - <a href="https://docs.microsoft.com/en-us/sccm/core/servers/manage/site-failure-impacts#site-server" target="_blank" rel="noopener noreferrer">https://docs.microsoft.com/en-us/sccm/core/servers/manage/site-failure-impacts#site-server</a></li>
<li>High availability options for Configuration Manager - <a href="https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/high-availability-options" target="_blank" rel="noopener noreferrer">https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/high-availability-options</a></li>
<li>High Availability Prerequisites - <a href="https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/site-server-high-availability#prerequisites" target="_blank" rel="noopener noreferrer">https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/site-server-high-availability#prerequisites</a></li>
<li>High Availability Limitations - <a href="https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/site-server-high-availability#limitations" target="_blank" rel="noopener noreferrer">https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/site-server-high-availability#limitations</a></li>
<li>High Availability Site server promotion - <a href="https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/site-server-high-availability#site-server-promotion" target="_blank" rel="noopener noreferrer">https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/site-server-high-availability#site-server-promotion</a></li>
<li>High availability for sites and hierarchies - <a href="https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/high-availability-options#bkmk_snh" target="_blank" rel="noopener noreferrer">https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/high-availability-options#bkmk_snh</a></li>
<li>Use a site server in passive mode - <a href="https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/high-availability-options#use-a-site-server-in-passive-mode" target="_blank" rel="noopener noreferrer">https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/high-availability-options#use-a-site-server-in-passive-mode</a></li>
<li>Site server high availability in Configuration Manager - <a href="https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/site-server-high-availability" target="_blank" rel="noopener noreferrer">https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/site-server-high-availability</a></li>
<li>What's new in 1810 - Hierarchy support for site server high availability - <a href="https://docs.microsoft.com/en-us/sccm/core/plan-design/changes/whats-new-in-version-1810#hierarchy-support-for-site-server-high-availability" target="_blank" rel="noopener noreferrer">https://docs.microsoft.com/en-us/sccm/core/plan-design/changes/whats-new-in-version-1810#hierarchy-support-for-site-server-high-availability</a></li>
<li>Prepare to use SQL Server Always On availability groups with Configuration Manager - <a href="https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/sql-server-alwayson-for-a-highly-available-site-database" target="_blank" rel="noopener noreferrer">https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/sql-server-alwayson-for-a-highly-available-site-database</a></li>
<li>Configure SQL Server Always On availability groups for Configuration Manager - <a href="https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/configure-aoag" target="_blank" rel="noopener noreferrer">https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/configure-aoag</a></li>
<li>Use a SQL Server cluster for the System Center Configuration Manager site database - <a href="https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/use-a-sql-server-cluster-for-the-site-database" target="_blank" rel="noopener noreferrer">https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/use-a-sql-server-cluster-for-the-site-database</a></li>
<li>SQL AlwaysOn High Availability step by step Part 1 | External YouTube Guide - <a href="https://www.youtube.com/watch?v=XR1S3feedzU" target="_blank" rel="noopener noreferrer">https://www.youtube.com/watch?v=XR1S3feedzU</a></li>
</ul>]]></content:encoded>
    </item>
    <item>
      <title>Microsoft SCCM Backup and Recovery Guide</title>
      <link>https://review.docs.microsoft.com/archive/blogs/jchalfant/microsoft-sccm-backup-and-recovery-guide</link>
      <pubDate>Thu, 13 Dec 2018 14:24:08 GMT</pubDate>
      <dc:creator><![CDATA[Justin Chalfant]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/jchalfant/?p=1655</guid>
      <description><![CDATA[&nbsp;&nbsp; Overview

	In this video guide, we will be covering how to perform a backup and restore...]]></description>
      <content:encoded><![CDATA[<iframe width="560" height="315" src="https://www.youtube.com/embed/puQyt3aJsmY" frameborder="0" allowfullscreen="allowfullscreen"></iframe>&nbsp;&nbsp; <h4><strong>Overview</strong></h4>
<ul>
	<li>In this video guide, we will be covering how to perform a backup and restore of a Configuration Manager site. This guide will include using the default "Backup Site Server" site maintenance task as well as how you can use a native SQL Backup as another option. We will also cover how to backup additional items not included in the "Backup Site Server" such as the SCCMContentLib, WSUS Database, Source Files, and the WSUS Content folder.</li>
</ul>
<h4><strong>Topics in Video</strong></h4>
<ul>
	<li>Review two backup options using built-in "Backup Site Server" maintenance task or a SQL Backup - <a href="https://youtu.be/puQyt3aJsmY?t=42" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=42</a></li>
	<li>Review what the default backup maintenance task backs up - <a href="https://youtu.be/puQyt3aJsmY?t=144" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=144</a></li>
	<li>Overview of AfterBackup.bat and how it can be used to copy local content not included in the backup task - <a href="https://youtu.be/puQyt3aJsmY?t=251" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=251</a>&nbsp;</li>
	<li>Review items that aren't included in the default backup site maintenance task - <a href="https://youtu.be/puQyt3aJsmY?t=342" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=342</a></li>
	<li>Enable the default "Backup Site Server" maintenance task and back up to a remote UNC share - <a href="https://youtu.be/puQyt3aJsmY?t=468" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=468</a></li>
	<li>Create an AfterBackup.bat in "<span>Inboxes\Smsbkup.box" folder </span>to also copy the SCCMContentLib, WSUS Content, and Source Package folder - <a href="https://youtu.be/puQyt3aJsmY?t=650" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=650</a></li>
	<li>Review if local SCUP database needs to be backup up - <a href="https://youtu.be/puQyt3aJsmY?t=826" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=826</a></li>
	<li>Manually perform initial backup by starting the "SMS_SITE_BACKUP" service - <a href="https://youtu.be/puQyt3aJsmY?t=1041" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=1041</a></li>
	<li>Review how AfterBackup.bat get run after each site backup - <a href="https://youtu.be/puQyt3aJsmY?t=1096" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=1096</a></li>
	<li>Review what the "Backup Site Server" task actually backed up - <a href="https://youtu.be/puQyt3aJsmY?t=1175" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=1175</a></li>
	<li>Review content downloaded (ADK, SQL, .Etc)&nbsp; to allow faster re-install of a site server and how to document the current site server details - <a href="https://youtu.be/puQyt3aJsmY?t=1259" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=1259</a></li>
	<li>Review how to set up a SQL maintenance plan to back up the WSUS DB as well as how to back up the SCCM Database if you prefer using a SQL Backup plan instead of the "Backup Site Server" maintenance task - <a href="https://youtu.be/puQyt3aJsmY?t=1523" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=1523</a></li>
	<li>Use custom task scheduler for copying SCCM content like SCCMContentLib, WSUS Content, Sources, CD.Latest if you decide to use a backup task not using the site backup maintenance task - <a href="https://youtu.be/puQyt3aJsmY?t=1895" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=1895</a></li>
	<li>Reimage site server using Server 2019 (Previous OS was 2016) on the site server to perform recovery - <a href="https://youtu.be/puQyt3aJsmY?t=2133" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=2133</a></li>
	<li>Install .NET 3.5 on the Site Server- <a href="https://youtu.be/puQyt3aJsmY?t=2336" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=2336</a></li>
	<li>Install IIS - <a href="https://youtu.be/puQyt3aJsmY?t=2399" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=2399</a></li>
	<li>Install Windows 10 ADK - <a href="https://youtu.be/puQyt3aJsmY?t=2418" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=2418</a></li>
	<li>Install SQL 2017 and CU12, SQL Management Studio, and Reporting Services - <a href="https://youtu.be/puQyt3aJsmY?t=2540" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=2540</a></li>
	<li>Restore WSUS Database - <a href="https://youtu.be/puQyt3aJsmY?t=2720" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=2720</a></li>
	<li>Restore CM_PR3 Site Database backup from SQL - <a href="https://youtu.be/puQyt3aJsmY?t=2807" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=2807</a></li>
	<li>Restore backup up content (SCCMContentLib, WSUS, Sources, and CD.Latest) using RoboCopy - <a href="https://youtu.be/puQyt3aJsmY?t=2915" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=2915</a></li>
	<li>Install the WSUS Role Service - <a href="https://youtu.be/puQyt3aJsmY?t=3075" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=3075</a></li>
	<li>Since the MP, DP, and SUP was using HTTPS on the Site Server, we need to request a new Web Server Cert and bind it to the Default Web Site and WSUS Website - <a href="https://youtu.be/puQyt3aJsmY?t=3391" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=3391</a></li>
	<li>Launch the restore process using the CD.Latest setup files - <a href="https://youtu.be/puQyt3aJsmY?t=3505" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=3505</a></li>
	<li>After core setup completes, review sitecomp.log to validate the site system roles install successfully - <a href="https://youtu.be/puQyt3aJsmY?t=3820" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=3820</a></li>
	<li>Review accounts that need to have the password manually re-entered after the restore from C:\ConfigMgrPostRecoveryActions.html - <a href="https://youtu.be/puQyt3aJsmY?t=3895" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=3895</a></li>
	<li>Validate clients are talking the to MP and review site status after restore - <a href="https://youtu.be/puQyt3aJsmY?t=4144" target="_blank" rel="noopener noreferrer">https://youtu.be/puQyt3aJsmY?t=4144</a></li>
</ul>
<h4><strong>Helpful Resources:</strong></h4>
<ul>
	<li>Back up a Configuration Manager site - <a href="https://docs.microsoft.com/en-us/sccm/core/servers/manage/backup-and-recovery" target="_blank" rel="noopener noreferrer">https://docs.microsoft.com/en-us/sccm/core/servers/manage/backup-and-recovery</a></li>
	<li>Recover a Configuration Manager site - <a href="https://docs.microsoft.com/en-us/sccm/core/servers/manage/recover-sites" target="_blank" rel="noopener noreferrer">https://docs.microsoft.com/en-us/sccm/core/servers/manage/recover-sites</a></li>
	<li><a href="https://setupconfigmgr.com/wp-content/uploads/2018/12/Scripts.zip" rel="attachment wp-att-28314">Scripts Used for RoboCopy Backup</a></li>
</ul>]]></content:encoded>
    </item>
    <item>
      <title>How to Use USMT in SCCM - ScanState, LoadState, MigApp, MigUser, MigDocs</title>
      <link>https://review.docs.microsoft.com/archive/blogs/jchalfant/how-to-use-usmt-in-sccm-scanstate-loadstate-migapp-miguser-migdocs</link>
      <pubDate>Mon, 03 Dec 2018 22:30:30 GMT</pubDate>
      <dc:creator><![CDATA[Justin Chalfant]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/jchalfant/?p=1645</guid>
      <description><![CDATA[&nbsp;&nbsp; Overview

 	In this video guide, we will be covering how you can use the USMT tool...]]></description>
      <content:encoded><![CDATA[<iframe width="560" height="315" src="https://www.youtube.com/embed/f7_8B0TCLuI" frameborder="0" allowfullscreen="allowfullscreen"></iframe>&nbsp;&nbsp; <h4><strong>Overview</strong></h4>
<ul>
 	<li>In this video guide, we will be covering how you can use the USMT tool within Microsoft SCCM. This will cover common options like scanstate.exe and loadstate.exe as well as the default XML files used for determining what data to backup and restore.</li>
</ul>
<h4><strong>Topics in Video</strong></h4>
<ul>
 	<li>Overview of USMT cover scanstate.exe, loadstate.exe, MigApps.xml, MigUser.xml, and MigDocs.xml - <a href="https://youtu.be/f7_8B0TCLuI?t=51" target="_blank" rel="noopener">https://youtu.be/f7_8B0TCLuI?t=51</a></li>
 	<li>Install the State Migration Point role within SCCM to store the user state - <a href="https://youtu.be/f7_8B0TCLuI?t=276" target="_blank" rel="noopener">https://youtu.be/f7_8B0TCLuI?t=276</a></li>
 	<li>Review the default USMT package created by SCCM from the Windows 10 ADK - <a href="https://youtu.be/f7_8B0TCLuI?t=437" target="_blank" rel="noopener">https://youtu.be/f7_8B0TCLuI?t=437</a></li>
 	<li>Create computer association for a replace scenario for source and destination machine - <a href="https://youtu.be/f7_8B0TCLuI?t=479" target="_blank" rel="noopener">https://youtu.be/f7_8B0TCLuI?t=479</a></li>
 	<li>Create capture task sequence for the replace scenario - <a href="https://youtu.be/f7_8B0TCLuI?t=558" target="_blank" rel="noopener">https://youtu.be/f7_8B0TCLuI?t=558</a></li>
 	<li>Run capture task sequence from the source computer to capture user state to SMP - <a href="https://youtu.be/f7_8B0TCLuI?t=765" target="_blank" rel="noopener">`https://youtu.be/f7_8B0TCLuI?t=765</a></li>
 	<li>Review scanstate.exe run on the client in the task sequence using the default MigDocs.xml and MigApp.xml being used - <a href="https://youtu.be/f7_8B0TCLuI?t=848" target="_blank" rel="noopener">https://youtu.be/f7_8B0TCLuI?t=848</a></li>
 	<li>Review the .MIG file capture to the SMP Share - <a href="https://youtu.be/f7_8B0TCLuI?t=956" target="_blank" rel="noopener">https://youtu.be/f7_8B0TCLuI?t=956</a></li>
 	<li>Create restore task sequence - <a href="https://youtu.be/f7_8B0TCLuI?t=994" target="_blank" rel="noopener">https://youtu.be/f7_8B0TCLuI?t=994</a></li>
 	<li>Review the restore device task sequence and loadstate.exe restore the capture with default options - <a href="https://youtu.be/f7_8B0TCLuI?t=1210" target="_blank" rel="noopener">https://youtu.be/f7_8B0TCLuI?t=1210</a></li>
 	<li>Login to new Windows 10 machine with restored data from the Windows 7 device and validate user state was migrated - <a href="https://youtu.be/f7_8B0TCLuI?t=1278" target="_blank" rel="noopener">https://youtu.be/f7_8B0TCLuI?t=1278</a></li>
 	<li>Change SCCM task sequence to use MigUser.xml instead of MigDocs.xml - <a href="https://youtu.be/f7_8B0TCLuI?t=1381" target="_blank" rel="noopener">https://youtu.be/f7_8B0TCLuI?t=1381</a></li>
 	<li>Creating Custom XML file for USMT to use for any non-standard file or registry key you want to migrate - <a href="https://youtu.be/f7_8B0TCLuI?t=1746" target="_blank" rel="noopener">https://youtu.be/f7_8B0TCLuI?t=1746</a></li>
 	<li>Scenario to capture user state for existing hardware for re-imaging scenario using SMP - <a href="https://youtu.be/f7_8B0TCLuI?t=2446" target="_blank" rel="noopener">https://youtu.be/f7_8B0TCLuI?t=2446</a></li>
 	<li>Scenario to capture user state and restore to existing device using USMT hard links and saving the data locally - <a href="https://youtu.be/f7_8B0TCLuI?t=2921" target="_blank" rel="noopener">https://youtu.be/f7_8B0TCLuI?t=2921</a></li>
</ul>
<h4><strong>Helpful Resources:</strong></h4>
<ul>
 	<li>Uservoice to allow destination computer association to be changed after capture - <a title="https://configurationmanager.uservoice.com/forums/300492-ideas/suggestions/9671487-change-target-computer-mapping-for-state-migration" href="https://configurationmanager.uservoice.com/forums/300492-ideas/suggestions/9671487-change-target-computer-mapping-for-state-migration">https://configurationmanager.uservoice.com/forums/300492-ideas/suggestions/9671487-change-target-computer-mapping-for-state-migration</a></li><li>USMT XML Builder - https://www.wintools.com.au/usmtgui.php</li>
 	<li>User State Migration Tool (USMT) Technical Reference - <a href="https://docs.microsoft.com/en-us/windows/deployment/usmt/usmt-technical-reference" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/windows/deployment/usmt/usmt-technical-reference</a></li>
 	<li>Understanding Migration XML Files - <a href="https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-7/ff383238(v=ws.10)" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-7/ff383238(v=ws.10)</a></li>
 	<li>Custom XML Examples - <a href="https://docs.microsoft.com/en-us/windows/deployment/usmt/usmt-custom-xml-examples" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/windows/deployment/usmt/usmt-custom-xml-examples</a></li>
 	<li>What does USMT migrate? - <a href="https://docs.microsoft.com/en-us/windows/deployment/usmt/usmt-what-does-usmt-migrate" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/windows/deployment/usmt/usmt-what-does-usmt-migrate</a></li>
 	<li>Manage user state in System Center Configuration Manage - <a href="https://docs.microsoft.com/en-us/sccm/osd/get-started/manage-user-state" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/osd/get-started/manage-user-state</a></li>
 	<li>Create a task sequence to capture and restore user state in Configuration Manager - <a href="https://docs.microsoft.com/en-us/sccm/osd/deploy-use/create-a-task-sequence-to-capture-and-restore-user-state" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/osd/deploy-use/create-a-task-sequence-to-capture-and-restore-user-state</a></li>
 	<li>Getting Started with the User State Migration Tool (USMT) - <a href="https://docs.microsoft.com/en-us/windows/deployment/usmt/getting-started-with-the-user-state-migration-toola" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/windows/deployment/usmt/getting-started-with-the-user-state-migration-toola</a></li>
</ul>]]></content:encoded>
    </item>
    <item>
      <title>How to Set Up Co-Management in Microsoft SCCM</title>
      <link>https://review.docs.microsoft.com/archive/blogs/jchalfant/how-to-set-up-co-management-in-microsoft-sccm</link>
      <pubDate>Thu, 29 Nov 2018 15:01:00 GMT</pubDate>
      <dc:creator><![CDATA[Justin Chalfant]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/jchalfant/?p=1635</guid>
      <description><![CDATA[Video Guide  Overview  In this video guide, we will be covering how to setup Co-management in...]]></description>
      <content:encoded><![CDATA[<h4><strong>Video Guide</strong></h4> <iframe width="560" height="315" src="https://www.youtube.com/embed/rTapalSHv6U" frameborder="0" allowfullscreen="allowfullscreen"></iframe> <h4><strong>Overview</strong></h4> <ul> <li>In this video guide, we will be covering how to setup Co-management in Microsoft SCCM. Co-management will allow you to use the full Configuration Manager client as well as the Microsoft Intune MDM.</li> </ul> <h4><strong>Topics in Video</strong></h4> <ul> <li>Overview of Co-management in SCCM and Microsoft Intune - <a href="https://youtu.be/rTapalSHv6U?t=21" target="_blank" rel="noopener">https://youtu.be/rTapalSHv6U?t=21</a></li> <li>The first scenario overview, using Azure AD Join Only (Cloud Domain Join) -&nbsp; <a href="https://youtu.be/rTapalSHv6U?t=62" target="_blank" rel="noopener">https://youtu.be/rTapalSHv6U?t=62</a></li> <li>The second scenario overview, using On-Prem domain join and auto-register in Azure Hybrid AD and MDM - <a href="https://youtu.be/rTapalSHv6U?t=86" target="_blank" rel="noopener">https://youtu.be/rTapalSHv6U?t=86</a></li> <li>Validate Azure AD and Intune enrollment is enabled in the online portal - <a href="https://youtu.be/rTapalSHv6U?t=113" target="_blank" rel="noopener">https://youtu.be/rTapalSHv6U?t=113</a></li> <li>Covering CMG prerequisites for the option to Install the SCCM Agent from an Azure AD only scenario - <a href="https://youtu.be/rTapalSHv6U?t=252" target="_blank" rel="noopener">https://youtu.be/rTapalSHv6U?t=252</a></li> <li>Add the co-management subscription into the SCCM console - <a href="https://youtu.be/rTapalSHv6U?t=358" target="_blank" rel="noopener">https://youtu.be/rTapalSHv6U?t=358</a></li> <li>Uploading the CCMSetup.msi to auto-deploy through Intune to install the SCCM agent through CMG - <a href="https://youtu.be/rTapalSHv6U?t=496" target="_blank" rel="noopener">https://youtu.be/rTapalSHv6U?t=496</a></li> <li>Enroll a device into Azure AD from OOBE to have it auto-enroll into MDM/Intune - <a href="https://youtu.be/rTapalSHv6U?t=676" target="_blank" rel="noopener">https://youtu.be/rTapalSHv6U?t=676</a></li> <li>Validate the device enrolled in MDM and the SCCM Client auto started and review the CCMSetup download from CMG over the internet - <a href="https://youtu.be/rTapalSHv6U?t=758" target="_blank" rel="noopener">https://youtu.be/rTapalSHv6U?t=758</a></li> <li>Review ClientIDStartupManager to review how the Azure AD Authentication is used to be approved within the SCCM environment - <a href="https://youtu.be/rTapalSHv6U?t=871" target="_blank" rel="noopener">https://youtu.be/rTapalSHv6U?t=871</a></li> <li>Validate in the Configuration Manager Control Panel applet the co-management is showing enabled - <a href="https://youtu.be/rTapalSHv6U?t=947" target="_blank" rel="noopener">https://youtu.be/rTapalSHv6U?t=947</a></li> <li>Review the scenario for registering on-prem domain joined devices to register into Hybrid Azure AD and auto-MDM enroll in Intune - <a href="https://youtu.be/rTapalSHv6U?t=1043" target="_blank" rel="noopener">https://youtu.be/rTapalSHv6U?t=1043</a></li> <li>Install Azure AD Connect and Configure the OU for the user/device sync we need for the lab - <a href="https://youtu.be/rTapalSHv6U?t=1093" target="_blank" rel="noopener">https://youtu.be/rTapalSHv6U?t=1093</a></li> <li>Validate a valid public UPN suffix is configured in Active Directory Domain and Trust and configure the on-prem users that will be used to auto-enroll devices with the public UPN in AD Users and Computers - <a href="https://youtu.be/rTapalSHv6U?t=1171" target="_blank" rel="noopener">https://youtu.be/rTapalSHv6U?t=1171</a></li> <li>Set GPO to have devices auto-enroll into MDM/Intune when the device registered into Azure AD- <a href="https://youtu.be/rTapalSHv6U?t=1568" target="_blank" rel="noopener">https://youtu.be/rTapalSHv6U?t=1568</a></li> <li>Run dsregcmd /status to see if the device is registered with Azure AD - <a href="https://youtu.be/rTapalSHv6U?t=1687" target="_blank" rel="noopener">https://youtu.be/rTapalSHv6U?t=1687</a></li> <li>Configure devices to auto Azure Hybrid AD Join in Azure AD Connect - <a href="https://youtu.be/rTapalSHv6U?t=1731" target="_blank" rel="noopener">https://youtu.be/rTapalSHv6U?t=1731</a></li> <li>Validate on-prem domain joined SCCM client switched to be co-managed after auto-enrolling into Intune - <a href="https://youtu.be/rTapalSHv6U?t=1928" target="_blank" rel="noopener">https://youtu.be/rTapalSHv6U?t=1928</a></li> <li>Validate both devices are showing in Intune and the SCCM console with co-management capabilities - <a href="https://youtu.be/rTapalSHv6U?t=1997" target="_blank" rel="noopener">https://youtu.be/rTapalSHv6U?t=1997</a></li> <li>Deploy device reset to both co-managed devices - <a href="https://youtu.be/rTapalSHv6U?t=2099" target="_blank" rel="noopener">https://youtu.be/rTapalSHv6U?t=2099</a></li> </ul> <ul> <li style="list-style-type: none"></li> </ul> <h4><strong>Helpful Resources:</strong></h4> <ul> <li>Tutorial: Configure hybrid Azure Active Directory join for managed domains - <a href="https://docs.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-managed-domains" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-managed-domains</a></li> <li>Enable Windows 10 automatic MDM enrollment - <a href="https://docs.microsoft.com/en-us/intune/windows-enroll#enable-windows-10-automatic-enrollment" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/intune/windows-enroll#enable-windows-10-automatic-enrollment</a></li> <li>Co-management for Windows 10 devices - <a href="https://docs.microsoft.com/en-us/sccm/core/clients/manage/co-management-overview" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/clients/manage/co-management-overview</a></li> <li>Enroll a Windows 10 device automatically using Group Policy - <a href="https://docs.microsoft.com/en-us/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy</a></li> <li>Prerequisites for co-management - <a href="https://docs.microsoft.com/en-us/sccm/core/clients/manage/co-management-prepare#prerequisites" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/clients/manage/co-management-prepare#prerequisites</a></li> <li>Auto-Pilot for new Windows 10 Devices - <a href="https://docs.microsoft.com/en-us/sccm/core/clients/manage/co-management-prepare#new-windows-10-devices" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/clients/manage/co-management-prepare#new-windows-10-devices</a></li> </ul>]]></content:encoded>
    </item>
    <item>
      <title>Deep Dive Into the Content Library, Content Location Request, DPs, IIS in Microsoft SCCM</title>
      <link>https://review.docs.microsoft.com/archive/blogs/jchalfant/deep-dive-into-the-content-library-content-location-request-dps-iis-in-microsoft-sccm</link>
      <pubDate>Wed, 28 Nov 2018 15:00:00 GMT</pubDate>
      <dc:creator><![CDATA[Justin Chalfant]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/jchalfant/?p=1625</guid>
      <description><![CDATA[Video Guide


Overview

In this video guide, we will be covering the way content is stored in...]]></description>
      <content:encoded><![CDATA[<h4><strong>Video Guide</strong></h4>
<iframe width="560" height="315" src="https://www.youtube.com/embed/A9K9_NPQL_o" frameborder="0" allowfullscreen="allowfullscreen"></iframe>
<p><br></p>
<h4><strong>Overview</strong></h4>
<ul>
<li>In this video guide, we will be covering the way content is stored in distributed in Microsoft Configuration Manager. This video will go deep into how the content library on the site server works, the way content is distributed to remote DPs, how clients submit content location request, IIS, content troubleshooting and more!</li>
</ul>
<h4><strong>Topics in Video</strong></h4>
<ul>
<li>Understanding the Content Library (PkgLib, DataLib, and FileLib) - <a href="https://youtu.be/A9K9_NPQL_o?t=99" target="_blank" rel="noopener">https://youtu.be/A9K9_NPQL_o?t=99</a></li>
<li>Review an applications deployment types and how the content binaries are stored in the DataLib and FileLib - <a href="https://youtu.be/A9K9_NPQL_o?t=228" target="_blank" rel="noopener">https://youtu.be/A9K9_NPQL_o?t=228</a></li>
<li>Review how content is distributed from the site servers content library to remote distribution points content library (distmgr.log and PkgXferMgr.log) - <a href="https://youtu.be/A9K9_NPQL_o?t=422" target="_blank" rel="noopener">https://youtu.be/A9K9_NPQL_o?t=422</a></li>
<li>Review boundaries and boundary groups and how that the corresponds to distribution points and client location request - <a href="https://youtu.be/A9K9_NPQL_o?t=594" target="_blank" rel="noopener">https://youtu.be/A9K9_NPQL_o?t=594</a></li>
<li>Review a content location request for an applications deployment type from a client and why it received content not found due to boundary and boundary group configurations - <a href="https://youtu.be/A9K9_NPQL_o?t=689" target="_blank" rel="noopener">https://youtu.be/A9K9_NPQL_o?t=689</a></li>
<li>Review how client location request for content come in from a management point perspective and how the management point runs a stored procedure against the database to see if the requested content is available based on the client boundary groups and distribution points the client is part of (MP_Location.log) - <a href="https://youtu.be/A9K9_NPQL_o?t=786" target="_blank" rel="noopener">https://youtu.be/A9K9_NPQL_o?t=786</a></li>
<li>Setting an applications deployment type to allow the download to fallback to the default site boundary group and any neighboring boundary groups - <a href="https://youtu.be/A9K9_NPQL_o?t=1046" target="_blank" rel="noopener">https://youtu.be/A9K9_NPQL_o?t=1046</a></li>
<li>Review how the default-site-boundary-group and how other boundary group relationships work - <a href="https://youtu.be/A9K9_NPQL_o?t=1142" target="_blank" rel="noopener">https://youtu.be/A9K9_NPQL_o?t=1142</a></li>
<li>Review how to allow software update group deployment to allow fallback to the default-site-boundary-group and neighboring boundary groups - <a href="https://youtu.be/A9K9_NPQL_o?t=1281" target="_blank" rel="noopener">https://youtu.be/A9K9_NPQL_o?t=1281</a></li>
<li>Resolving the boundary to match the IP Range the client is located in and how a successful application deployment without fallback enabled would work - <a href="https://youtu.be/A9K9_NPQL_o?t=1442" target="_blank" rel="noopener">https://youtu.be/A9K9_NPQL_o?t=1442</a></li>
<li>Copy content URL and review how IIS translates the content library files for client downloads - <a href="https://youtu.be/A9K9_NPQL_o?t=1599" target="_blank" rel="noopener">https://youtu.be/A9K9_NPQL_o?t=1599</a></li>
<li>Review how to use content library explorer - <a href="https://youtu.be/A9K9_NPQL_o?t=1751" target="_blank" rel="noopener">https://youtu.be/A9K9_NPQL_o?t=1751</a></li>
</ul>
<ul>
<li style="list-style-type: none"></li>
</ul>
<h4><strong>Helpful Resources:</strong></h4>
<ul>
<li>The content library in Configuration Manager - <a href="https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/the-content-library" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/the-content-library</a></li>
<li>Inside the content library - <a href="https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/the-content-library#inside-the-content-library" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/the-content-library#inside-the-content-library</a></li>
<li>Package library - <a href="https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/the-content-library#package-library" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/the-content-library#package-library</a></li>
<li>Data Library - <a href="https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/the-content-library#data-library" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/the-content-library#data-library</a></li>
<li>File Library - <a href="https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/the-content-library#file-library" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/the-content-library#file-library</a></li>
<li>Troubleshooting content distribution - <a href="https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/the-content-library#troubleshooting" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/the-content-library#troubleshooting</a></li>
<li>Content Library Explorer - <a href="https://docs.microsoft.com/en-us/sccm/core/support/content-library-explorer" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/support/content-library-explorer</a></li>
<li>Content Library Cleanup Tool - <a href="https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/content-library-cleanup-tool" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/content-library-cleanup-tool</a></li>
<li>Package Transfer Manager in System Center Configuration Manager - <a href="https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/package-transfer-manager" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/package-transfer-manager</a></li>
<li>Learn how clients find site resources and services for System Center Configuration Manager - <a href="https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/understand-how-clients-find-site-resources-and-services" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/understand-how-clients-find-site-resources-and-services</a></li>
<li>Content Library Transfer tool - <a href="https://docs.microsoft.com/en-us/sccm/core/support/content-library-transfer" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/support/content-library-transfer</a></li>
<li>Flowchart - Manage content library - <a href="https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/manage-content-library-flowchart" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/manage-content-library-flowchart</a></li>
<li>Manage accounts to access content in System Center Configuration Manager - <a href="https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/manage-accounts-to-access-content" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/manage-accounts-to-access-content</a></li>
<li>Content Ownership Tool - <a href="https://docs.microsoft.com/en-us/sccm/core/support/content-ownership-tool" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/support/content-ownership-tool</a></li>
</ul>]]></content:encoded>
    </item>
    <item>
      <title>Understanding Role-Based Administration in Microsoft SCCM</title>
      <link>https://review.docs.microsoft.com/archive/blogs/jchalfant/understanding-role-based-administration-in-microsoft-sccm</link>
      <pubDate>Tue, 27 Nov 2018 13:00:00 GMT</pubDate>
      <dc:creator><![CDATA[Justin Chalfant]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/jchalfant/?p=1615</guid>
      <description><![CDATA[Video Guide    &nbsp; Overview   	In this video guide, we will review how to set up role-based...]]></description>
      <content:encoded><![CDATA[<h4><strong>Video Guide</strong></h4>  <iframe src="https://www.youtube.com/embed/YCNPOShpp5Q" width="560" height="315" frameborder="0" allowfullscreen="allowfullscreen"></iframe>  &nbsp; <h4><strong>Overview</strong></h4> <ul>  	<li>In this video guide, we will review how to set up role-based administration System Center Configuration Manager. This guide will cover all the essential components required for RBA including security roles, security scopes, and collections. We will cover how to use RBA to split workstation and server admins as well as two different departments. We will also review using default security roles and custom security roles and using custom scopes.</li> </ul> <h4><strong>Topics in Video</strong></h4> <ul>  	<li>Introduction to security roles, security scopes, and collections for use in RBA - <a href="https://youtu.be/YCNPOShpp5Q?t=37" target="_blank" rel="noopener">https://youtu.be/YCNPOShpp5Q?t=37</a></li>  	<li>Review AD security groups for splitting workstation and server admins and two difference departments - <a href="https://youtu.be/YCNPOShpp5Q?t=253" target="_blank" rel="noopener">https://youtu.be/YCNPOShpp5Q?t=253</a></li>  	<li>Splitting up server and workstation admins with full administrator security role - <a href="https://youtu.be/YCNPOShpp5Q?t=333" target="_blank" rel="noopener">https://youtu.be/YCNPOShpp5Q?t=333</a></li>  	<li>Split up "College of Finance" and "College of Healthcare" using collections and then create custom security scopes and security roles for this scenario - <a href="https://youtu.be/YCNPOShpp5Q?t=617" target="_blank" rel="noopener">https://youtu.be/YCNPOShpp5Q?t=617</a></li>  	<li>Creating global security scope to allow different admins to see common enterprise applications and deploy those applications - <a href="https://youtu.be/YCNPOShpp5Q?t=1211" target="_blank" rel="noopener">https://youtu.be/YCNPOShpp5Q?t=1211</a></li>  	<li>Review non-scopable objects and how that looks access departments - <a href="https://youtu.be/YCNPOShpp5Q?t=1435" target="_blank" rel="noopener">https://youtu.be/YCNPOShpp5Q?t=1435</a></li>  	<li>Copy built-in security role and create a custom security role from it - <a href="https://youtu.be/YCNPOShpp5Q?t=1606" target="_blank" rel="noopener">https://youtu.be/YCNPOShpp5Q?t=1606</a></li>  	<li>Using RBAViewer to create a custom security role and analyze different permissions on the fly - <a href="https://youtu.be/YCNPOShpp5Q?t=1685" target="_blank" rel="noopener">https://youtu.be/YCNPOShpp5Q?t=1685</a></li>  	<li>Review permissions needed to perform client push - <a href="https://youtu.be/YCNPOShpp5Q?t=1811" target="_blank" rel="noopener">https://youtu.be/YCNPOShpp5Q?t=1811</a></li>  	<li>Review custom permissions around applications - <a href="https://youtu.be/YCNPOShpp5Q?t=1952" target="_blank" rel="noopener">https://youtu.be/YCNPOShpp5Q?t=1952</a></li> </ul> <h4><strong>Helpful Resources:</strong></h4> <ul>  	<li>Fundamentals of role-based administration for System Center Configuration Manager - <a href="https://docs.microsoft.com/en-us/sccm/core/understand/fundamentals-of-role-based-administration" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/understand/fundamentals-of-role-based-administration</a></li>  	<li>Benefits of role-based administration - <a href="https://docs.microsoft.com/en-us/sccm/core/understand/fundamentals-of-role-based-administration#benefits-of-role-based-administration" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/understand/fundamentals-of-role-based-administration#benefits-of-role-based-administration</a></li>  	<li>Security roles in RBA - <a href="https://docs.microsoft.com/en-us/sccm/core/understand/fundamentals-of-role-based-administration#bkmk_Planroles" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/understand/fundamentals-of-role-based-administration#bkmk_Planroles</a></li>  	<li>Collections in RBA - <a href="https://docs.microsoft.com/en-us/sccm/core/understand/fundamentals-of-role-based-administration#bkmk_planCol" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/understand/fundamentals-of-role-based-administration#bkmk_planCol</a></li>  	<li>Security scopes in RBA - <a href="https://docs.microsoft.com/en-us/sccm/core/understand/fundamentals-of-role-based-administration#bkmk_PlanScope" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/understand/fundamentals-of-role-based-administration#bkmk_PlanScope</a></li>  	<li>Configure role-based administration for Configuration Manager - <a href="https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/configure-role-based-administration" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/configure-role-based-administration</a></li>  	<li>Create custom security roles - <a href="https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/configure-role-based-administration#BKMK_CreateSecRole" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/configure-role-based-administration#BKMK_CreateSecRole</a></li>  	<li>Configure security roles - <a href="https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/configure-role-based-administration#BKMK_ConfigSecRole" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/configure-role-based-administration#BKMK_ConfigSecRole</a></li>  	<li>Configure security scopes for an object - <a href="https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/configure-role-based-administration#BKMK_ConfigSecScope" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/configure-role-based-administration#BKMK_ConfigSecScope</a></li>  	<li>Configure collections to manage security - <a href="https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/configure-role-based-administration#BKMK_ConfigColl" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/configure-role-based-administration#BKMK_ConfigColl</a></li>  	<li>Create a new administrative user - <a href="https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/configure-role-based-administration#BKMK_Create_AdminUser" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/configure-role-based-administration#BKMK_Create_AdminUser</a></li>  	<li>Modify the administrative scope of an administrative user - <a href="https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/configure-role-based-administration#BKMK_ModAdminUser" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/core/servers/deploy/configure/configure-role-based-administration#BKMK_ModAdminUser</a></li>  	<li>Non-Current branch users can get RBAViwer from the ConfigMgr toolkit - <a href="https://www.microsoft.com/en-us/download/details.aspx?id=50012" target="_blank" rel="noopener">https://www.microsoft.com/en-us/download/details.aspx?id=50012</a></li> </ul>]]></content:encoded>
    </item>
    <item>
      <title>Application Deployment Client Side Deep Dive in Microsoft SCCM</title>
      <link>https://review.docs.microsoft.com/archive/blogs/jchalfant/application-deployment-client-side-deep-dive-in-microsoft-sccm</link>
      <pubDate>Mon, 26 Nov 2018 13:00:00 GMT</pubDate>
      <dc:creator><![CDATA[Justin Chalfant]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/jchalfant/?p=1595</guid>
      <description><![CDATA[Overview In this video guide, we will be covering how you can deploy software updates in Microsoft...]]></description>
      <content:encoded><![CDATA[<h4><strong>Overview</strong></h4> <p>In this video guide, we will be covering how you can deploy software updates in Microsoft SCCM. This covers important aspects of deploying updates such as collection structure, maintenance windows, automatic deployment rules (ADRs), deadlines, and much more. This will be a great follow up from my last blog <a href="https://setupconfigmgr.com/deep-dive-in-microsoft-sccm-software-updates-client-and-server-components" target="_blank" rel="noopener">Deep Dive in Microsoft SCCM Software Updates Client and Server Components</a></p> <h4><strong>Video Guide</strong></h4> <p><iframe width="560" height="315" src="https://www.youtube.com/embed/vnlMn_hEHGo" frameborder="0" allowfullscreen="allowfullscreen"></iframe></p> <h4><strong>Topics in Video</strong></h4> <ul> <li>Review 7-Zip application with its two deployment types that we will deploy to the client - <a href="https://youtu.be/vnlMn_hEHGo?t=86" target="_blank" rel="noopener">https://youtu.be/vnlMn_hEHGo?t=86</a></li> <li>Review client being used to install applications - <a href="https://youtu.be/vnlMn_hEHGo?t=170" target="_blank" rel="noopener">https://youtu.be/vnlMn_hEHGo?t=170</a></li> <li>Force machine policy to see how the policy for the application deployment is processed - <a href="https://youtu.be/vnlMn_hEHGo?t=187" target="_blank" rel="noopener">https://youtu.be/vnlMn_hEHGo?t=187</a></li> <li>Review PolicyAgent.log and Datatransferservice.log to see how the application deployment policy is downloaded - <a href="https://youtu.be/vnlMn_hEHGo?t=282" target="_blank" rel="noopener">https://youtu.be/vnlMn_hEHGo?t=282</a></li> <li>Review where policy for the application deployment gets stored in WMI (ROOT\ccm\Policy\Machine\ActualConfig:CCM_ApplicationCIAssignment.AssignmentID="{90D5A10E-12C4-4362-AF19-E391FD2964C4}") using WMIExplorer.exe - <a href="https://youtu.be/vnlMn_hEHGo?t=369" target="_blank" rel="noopener">https://youtu.be/vnlMn_hEHGo?t=369</a></li> <li>Review the ClientSDK that software center uses to pull application details from (ROOT\ccm\ClientSDK:CCM_Application.Id="ScopeId_6541FA90-052F-476D-A7E7-C0F3B34EC1B8/Application_6a1d9353-9bca-4db6-927b-a4716de46596") - <a href="https://youtu.be/vnlMn_hEHGo?t=464" target="_blank" rel="noopener">https://youtu.be/vnlMn_hEHGo?t=464</a></li> <li>Review components involved in evaluating the application (Configuration Item) components involved include (DCMAgent.log, CIDownloader.log, CIStateStore.log, DataTransferService.log, CIAgentJob.log, AppIntentEval.log, CIAgent.log, CCMSDKProvider.log, SCNotify.log, SCToastNotification.log, and StateMessage.log - <a href="https://youtu.be/vnlMn_hEHGo?t=548" target="_blank" rel="noopener">https://youtu.be/vnlMn_hEHGo?t=548</a></li> <li>Initiate installation of the application - <a href="https://youtu.be/vnlMn_hEHGo?t=987" target="_blank" rel="noopener">https://youtu.be/vnlMn_hEHGo?t=987</a></li> <li>Review components involved in the application installation - <a href="https://youtu.be/vnlMn_hEHGo?t=1039" target="_blank" rel="noopener">https://youtu.be/vnlMn_hEHGo?t=1039</a></li> <li>Review the content location lookup request from the client for the applications deployment type needed - <a href="https://youtu.be/vnlMn_hEHGo?t=1168" target="_blank" rel="noopener">https://youtu.be/vnlMn_hEHGo?t=1168</a></li> <li>Review how AppEnfore.log actually performed the installation of the file used for the deployment type's installation command - <a href="https://youtu.be/vnlMn_hEHGo?t=1504" target="_blank" rel="noopener">https://youtu.be/vnlMn_hEHGo?t=1504</a></li> <li>Review how the installed rule detection is performed once the installation command is completed - <a href="https://youtu.be/vnlMn_hEHGo?t=1609" target="_blank" rel="noopener">https://youtu.be/vnlMn_hEHGo?t=1609</a></li> <li>Review update instances for the application deployment in WMI after the installation - <a href="https://youtu.be/vnlMn_hEHGo?t=1670" target="_blank" rel="noopener">https://youtu.be/vnlMn_hEHGo?t=1670</a></li> </ul> <ul> <li style="list-style-type: none"></li> </ul> <h4><strong>Helpful Resources:</strong></h4> <ul> <li>Introduction to application management in Configuration Manager - <a href="https://docs.microsoft.com/en-us/sccm/apps/understand/introduction-to-application-management" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/apps/understand/introduction-to-application-management</a></li> <li>Application Deployment Types- <a href="https://docs.microsoft.com/en-us/sccm/apps/understand/introduction-to-application-management#deployment-type" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/apps/understand/introduction-to-application-management#deployment-type</a></li> <li>Create deployment types for the application - <a href="https://docs.microsoft.com/en-us/sccm/apps/deploy-use/create-applications#bkmk_create-dt" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/apps/deploy-use/create-applications#bkmk_create-dt</a></li> <li>Application requirement rules - <a href="https://docs.microsoft.com/en-us/sccm/apps/understand/introduction-to-application-management#requirements" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/apps/understand/introduction-to-application-management#requirements</a></li> <li>Deployment type content options - <a href="https://docs.microsoft.com/en-us/sccm/apps/deploy-use/create-applications#bkmk_dt-content" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/apps/deploy-use/create-applications#bkmk_dt-content</a></li> <li>Deployment type Detection Method options - <a href="https://docs.microsoft.com/en-us/sccm/apps/deploy-use/create-applications#bkmk_dt-detect" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/apps/deploy-use/create-applications#bkmk_dt-detect</a></li> <li>Deploy applications with Configuration Manager - <a href="https://docs.microsoft.com/en-us/sccm/apps/deploy-use/deploy-applications" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/apps/deploy-use/deploy-applications</a></li> <li>Default application return codes - <a href="https://docs.microsoft.com/en-us/sccm/apps/deploy-use/create-applications#default-return-codes" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/apps/deploy-use/create-applications#default-return-codes</a></li> <li>Supported deployment types - <a href="https://docs.microsoft.com/en-us/sccm/apps/deploy-use/create-applications#bkmk_deploy-types" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/apps/deploy-use/create-applications#bkmk_deploy-types</a></li> <li>Create Windows applications in Configuration Manager - <a href="https://docs.microsoft.com/en-us/sccm/apps/get-started/creating-windows-applications" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/apps/get-started/creating-windows-applications</a></li> <li>What application types can you deploy? - <a href="https://docs.microsoft.com/en-us/sccm/apps/understand/introduction-to-application-management#what-application-types-can-you-deploy" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/apps/understand/introduction-to-application-management#what-application-types-can-you-deploy</a></li> <li>How applications use state-based reporting for compliance - <a href="https://docs.microsoft.com/en-us/sccm/apps/understand/introduction-to-application-management#state-based-applications" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/apps/understand/introduction-to-application-management#state-based-applications</a></li> <li>Applications in Software Center - <a href="https://docs.microsoft.com/en-us/sccm/apps/understand/introduction-to-application-management#software-center" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/apps/understand/introduction-to-application-management#software-center</a></li> <li>Plan for and configure application management in Configuration Manager - <a href="https://docs.microsoft.com/en-us/sccm/apps/plan-design/plan-for-and-configure-application-management" target="_blank" rel="noopener">https://docs.microsoft.com/en-us/sccm/apps/plan-design/plan-for-and-configure-application-management</a></li> </ul>]]></content:encoded>
    </item>
    <item>
      <title>PKI Code-Signing Certificate for Third-Party Updates in Microsoft SCCM/SCUP</title>
      <link>https://review.docs.microsoft.com/archive/blogs/jchalfant/pki-code-signing-certificate-for-third-party-updates-in-microsoft-sccm-scup</link>
      <pubDate>Tue, 18 Sep 2018 01:52:09 GMT</pubDate>
      <dc:creator><![CDATA[Justin Chalfant]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/jchalfant/?p=1585</guid>
      <description><![CDATA[Overview
This guide is also available on my personal blog:...]]></description>
      <content:encoded><![CDATA[<h4><strong>Overview</strong></h4>
This guide is also available on my personal blog: <a target="_blank" href="https://setupconfigmgr.com/pki-code-signing-certificate-for-third-party-updates-in-microsoft-sccm-scup" rel="noopener">https://setupconfigmgr.com/pki-code-signing-certificate-for-third-party-updates-in-microsoft-sccm-scup</a>

In this video guide, we will cover how you can use a code-signing certificate from an Active Directly Certificate Services infrastructure or using a public certificate authority such as DigiCert for signing third-party software updates in Microsoft System Center Configuration Manager (SCCM). Using a trusted PKI based code-signing certificate can be an alternative to using a self-signed certificate.
<h4><strong>Video Guide</strong></h4>
<iframe width="560" height="315" src="https://www.youtube.com/embed/lqapp8j7CHk" frameborder="0" allowfullscreen="allowfullscreen"></iframe>
<h4><strong>Topics in Video</strong></h4>
<ul>
 	<li>Create the code-signing certificate templates needed for the WSUS singing feature - <a href="https://youtu.be/lqapp8j7CHk?t=34">https://youtu.be/lqapp8j7CHk?t=34</a></li>
 	<li>Issuing the certificate template for deployment - <a href="https://youtu.be/lqapp8j7CHk?t=188">https://youtu.be/lqapp8j7CHk?t=188</a></li>
 	<li>How to request the cert from a machine - <a href="https://youtu.be/lqapp8j7CHk?t=206">https://youtu.be/lqapp8j7CHk?t=206</a></li>
 	<li>Exporting the requested certificate to a PFX file - <a href="https://youtu.be/lqapp8j7CHk?t=280">https://youtu.be/lqapp8j7CHk?t=280</a></li>
 	<li>Review the Configuration Manager 1806 option to allow ConfigMgr to manage the WSUS certificate - <a href="https://youtu.be/lqapp8j7CHk?t=327">https://youtu.be/lqapp8j7CHk?t=327</a></li>
 	<li>Importing PFX file to WSUS using the publishing service - <a href="https://youtu.be/lqapp8j7CHk?t=394">https://youtu.be/lqapp8j7CHk?t=394</a></li>
 	<li>Sync the SUP and review wsyncmgr.log to verify ConfigMgr received the imported code-signing PFX certificate- <a href="https://youtu.be/lqapp8j7CHk?t=460">https://youtu.be/lqapp8j7CHk?t=460</a></li>
 	<li>Add catalog and publish a third-party update to verify the .CAB file is signed using the PFX certificate - <a href="https://youtu.be/lqapp8j7CHk?t=536">https://youtu.be/lqapp8j7CHk?t=536</a></li>
 	<li>Switch to use a third-party code-signing certificate from DigiCert - <a href="https://youtu.be/lqapp8j7CHk?t=670">https://youtu.be/lqapp8j7CHk?t=670</a></li>
 	<li>Verify SCCM switches from using the code-signing certificate from AD CS to DigiCert's code-signing certificate - <a href="https://youtu.be/lqapp8j7CHk?t=715">https://youtu.be/lqapp8j7CHk?t=715</a></li>
</ul>
<ul>
 	<li style="list-style-type: none"></li>
</ul>
<h4><strong>Helpful Resources:</strong></h4>
<ul>
 	<li>Publishing Service Download - <a href="https://patchmypc.com/publishing-service-setup-documentation">https://patchmypc.com/publishing-service-setup-documentation</a></li>
 	<li>System Center Updates Publisher Download - <a href="https://www.microsoft.com/en-us/download/details.aspx?id=55543">https://www.microsoft.com/en-us/download/details.aspx?id=55543</a></li>
 	<li>Enable third-party updates - <a href="https://docs.microsoft.com/en-us/sccm/sum/deploy-use/third-party-software-updates">https://docs.microsoft.com/en-us/sccm/sum/deploy-use/third-party-software-updates</a></li>
 	<li>Automatically manage the WSUS signing certificate - <a href="https://docs.microsoft.com/en-us/sccm/sum/deploy-use/third-party-software-updates#automatically-manage-the-wsus-signing-certificate">https://docs.microsoft.com/en-us/sccm/sum/deploy-use/third-party-software-updates#automatically-manage-the-wsus-signing-certificate</a></li>
 	<li>Manually manage the WSUS signing certificate - <a href="https://docs.microsoft.com/en-us/sccm/sum/deploy-use/third-party-software-updates#manually-manage-the-wsus-signing-certificate">https://docs.microsoft.com/en-us/sccm/sum/deploy-use/third-party-software-updates#manually-manage-the-wsus-signing-certificate</a></li>
 	<li>Manually manage the WSUS signing certificate - <a href="https://patchmypc.com/publishing-service-setup-documentation">https://patchmypc.com/publishing-service-setup-documentation</a></li>
</ul>]]></content:encoded>
    </item>
  </channel>
</rss>