Category Archives: ConfigMgr

How to query Infineon firmware TPM (Microsoft Advisory ADV170012) in ConfigMgr

If you don’t know what is this about, you must read this https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV170012 Additional, in this article https://support.microsoft.com/en-us/help/4046783/bitlocker-mitigation-plan-for-vulnerability-in-tpm, it said  When TPM-based protector is used to protect the operating system volume, the security of the BitLocker protection is affected only if the TPM firmware version is 1.2. But the script what Microsoft provided doesn’t include detection if TPM… Read More »

Devices Management: Azure AD Join vs. Azure AD Device Registration vs. Domain Join

For start, please read this article https://blogs.technet.microsoft.com/trejo/2016/04/09/azure-ad-join-vs-azure-ad-device-registration/, there are details regarding these matters. So why am I writing these? As an IT professionals, we can read those technical articles, understand like MDM, MAM, ConfigMgr/SCCM, AAD, GPO, but customers don’t. When customer wants a device management solution, they often ask “What kind of devices management you can offer?” or… Read More »

Fix Windows 10 In-Place Upgrade Task Sequence infinity restart loop

We successfully did Windows 10 In-Place Upgrade for hundreds machines, but few of them went into infinity restart loop at the end. Troubleshoot wasn’t easy, especially do it remotely. Yeah, you are right, how to troubleshoot and fix a computer that reboot itself and also has bitlocker and bitlocker PIN? Sounds mission impossible, but WE DID IT!!! Make… Read More »

Use configuration baseline disable windows service

Lots of news about vulnerability Intel AMT, example Lenovo published an article (CVE-2017-5689)  https://support.lenovo.com/fi/en/product_security/len-14963 In Intel Mitigation Guide  https://downloadcenter.intel.com/download/26754 , it mentions about disable LMS service, so here is a sample how to use SCCM compliance settings disable LMS service. I don’t write details how to do compliance settings, there are lots of blogs about it, example: http://www.scconfigmgr.com/2017/04/09/configmgr-configuration-baselines-a-beginners-guide/… Read More »