Customize Windows 10 Start menu with Configuration Manager (MDM) or Microsoft Intune #OMA-URI

Undoubtedly you ever been asked the question to customize the Windows 10 start menu? Your response might be like “Sure, I’ll fix this by group policy, imaging (task sequence) or last resort by manually importing a .xml file.” All – almost all – valid options in a fully managed environment where your clients are domain joined (Active Directory) and/or fully managed by Configuration Manager or MDT. But hey what about your non-domain joined Windows 10 devices which are outside the company and managed by Microsoft Intune (MDM)? Well OMA-URI is your best friend! Smile

Configuration Service Provider (CSP)

In Windows 10 Enterprise and Windows 10 Education, you can use a mobile device management (MDM) policy to deploy a customized Start layout to users. No reimaging is required, and the Start layout can be updated simply by overwriting the .xml file that contains the layout. This enables you to customize Start layouts for different departments or organizations, with minimal management overhead. With Microsoft Intune (MDM), you define the Start layout using an OMA-URI setting, which is based on the Policy configuration service provider (CSP).

Continue reading “Customize Windows 10 Start menu with Configuration Manager (MDM) or Microsoft Intune #OMA-URI”

KB3002291: MDM settings are not applied to cloud-managed users in Configuration Manager 2012 R2

hotfixJust drop you a quick line a new hotfix for Configuration Manager 2012 R2 is released which improves the process of getting policies applied to mobile devices. When a user becomes a cloud-managed user (CloudUserID), a settings policy may not target the assignment for the user this due to different user(s) with same clouduserID. This behavior was introduced by CU2 and CU3.

  • This problem affects only environments that use the Intune Connector together with Configuration Manager 2012 R2.
  • This problem occurs only when Cumulative Update 2 or Cumulative Update 3 for Configuration Manager is installed.

To apply this hotfix, you must have Cumulative Update 2 or Cumulative Update 3 for System Center 2012 R2 Configuration Manager installed.

For more details and download see

For a complete list of all available hotfixes and update please consult the List of Public Microsoft Support Knowledge Base Articles wiki page.

Cumulative Update 2 for Configuration Manager 2012 SP1 available for download! #sysctr

Thanks to my colleague Tom Klaver for pointing me the fact Cumulative Update 2 (CU2) for System Center Configuration Manager 2012 SP1 has been released. CU2 contains fixes for Microsoft System Center 2012 Configuration Manager Service Pack 1 (SP1).

Configuration Manager 2012 SP1 CU2 – version 5.0.7804.1300 

Configuration Manager 2012 SP1 CU2 – version 5.0.7804.1300

Use the following references how to install this cumulative update:

To install client updates during the Configuration Manager client installation in a Task Sequence:

Cumulative Update 2 for Configuration Manager 2012 SP1 can be requested here.

Continue reading “Cumulative Update 2 for Configuration Manager 2012 SP1 available for download! #sysctr”

Microsoft Deployment Toolkit 2012 Update 1 Beta 1—Now Available for Download

We are pleased to announce that Microsoft Deployment Toolkit (MDT) 2012 Update 1 Beta 1 is now available for download!

Download MDT 2012 Update 1 Beta 1 now! []

Download the latest release to stay up-to-date on your deployment needs. New features and enhancements make large-scale desktop and server deployments smoother than ever!

This release expands your deployment capabilities with support for the latest software releases, including Windows 8 Release Preview, Windows Server 2012 Release Candidate, and System Center 2012 Configuration Manager SP1 Community Technology Preview.

Notable new features include:

· Support for using the DaRT 8 Beta with the Windows 8 Release Preview version of the Assessment and Deployment Kit (ADK).

· New “Build Your Own Pages” support for User-Driven Installation (UDI), enabling IT pros to create new wizard panes using simple drag-and-drop operations – no coding required.

· Integration with System Center Orchestrator, enabling task sequences to invoke Orchestrator runbooks at any point in the deployment process.

· Completely reworked “Roles and Features” logic, supporting both installation and removal, as well as providing a new Lite Touch wizard pane for selecting roles and features to install at deploy time.

· Support for PowerShell 3.0 to make it easier to run PowerShell scripts inside task sequences on Windows 8, Windows Server 2012, and Windows PE 4.0.

· Simple monitoring functionality for Configuration Manager task sequences, leveraging the monitoring capabilities provided initially in MDT 2012 for Lite Touch deployments.

· Improved “boot from VHD” deployment capabilities, supporting both bare metal and refresh deployments.

Learn more

Visit the MDT home page: []

Get the latest news straight from the MDT team: []

MDT works with the Microsoft Assessment and Planning Toolkit and Security Compliance Manager to help you plan, securely deploy, and manage new Microsoft technologies—easier, faster, and at less cost. Learn more at [].

Forefront Endpoint Protection 2010 Update Rollup 1 #sysctr

Update Rollup 1 for Microsoft Forefront Endpoint Protection 2010 introduces new features and updates. These new features and updates are summarized below.

The following list is a summary of the updates in FEP Update Rollup 1 for server functionality.

  • A tool that facilitates the use of the Configuration Manager software updates functionality to download FEP definition updates and make them available to client computers running the FEP client software.In order to use the software updates feature for definition updates, you must perform the following high-level steps:
    • Download and install the Update Rollup 1 package.
    • Configure software updates to download definitions for FEP.
    • Configure the package by which the definition updates will be distributed, and configure the distribution settings for it.
    • Install and configure the FEP Software Update Automation tool.

    Addition of support for the FEP client software for Windows Embedded 7 and Windows Server 2008 Server Core. For more information on the added client support, see Prerequisites for Deploying Forefront Endpoint Protection on a Client

Continue reading “Forefront Endpoint Protection 2010 Update Rollup 1 #sysctr”

Advantage through innovation! Join the System Center CEP Program #sysctr

Share the Community Evaluation Program for the upcoming System Center wave to your community peers, partners and customers. Join the program and become familiar with the newest technology. Advantage through innovation!

The Community Evaluation Program from the Management and Security team at Microsoft provides IT professionals a structured approach to evaluating System Center and Forefront products before their final release. Members of this program are able to evaluate early versions of products with guidance from the product team and by sharing of experiences and best practices among a community of peers.

This site is a starting point to get involved with the Community Evaluation Program. Once you have applied and been accepted to a program, you will be invited to a product specific site on Connect. Please check this page often for updates on current and upcoming programs.

You can contact the team at with any questions about the Community Evaluation Program. Thank you for your interest!
Continue reading “Advantage through innovation! Join the System Center CEP Program #sysctr”

Announcing System Center Configuration Manager 2007 R3

image Today, the System Center team is excited to share with you our plan to release System Center Configuration Manager 2007 R3.  This new release of the ConfigMgr is packed with some extremely cool features, which over the coming months we plan to share with you in different ways. 

Recent shifts in the world economy have brought new focus on IT departments, and also to technology investment.  Organizations are being pressured to do more with less, while at the same time manage an increasing range of working scenarios, mobility requirements, and business demands.  Through all of this, they need to maintain security levels, answer compliance challenges and address the growing Green IT landscape.

As organizations look to reduce financial costs and environmental impacts, power management is proving to be a successful approach. The payback for power management is clear – when a PC is using less power it translates directly into reduced operational costs – either directly through reduced energy consumption or from a growing number of electrical companies that offer rebates to companies that can prove enforcement of centralized power management policies. In addition, continuous PC power management pays environmental dividends measured in terms like Kwh, or CO2 emissions savings.

Forrester estimates that more than 90% of firms are implementing or considering PC power management. Despite the advanced capabilities provided in Windows Vista and Windows 7, The U.S. Environmental Protection Agency estimates that no more than 10% of all enterprise PCs in use have their power management capabilities turned on today. Without centralized management power management simply doesn’t happen.  Through research with our customers, partners, and industry experts, it became clear that System Center needed to deliver this capability in the box, with ‘R3’ as the release vehicle.  

System Center Configuration Manager 2007 R3

There are a few areas of focus for ConfigMgr R3, with the main engineering effort concentrating on Power Management.  Here are the goals for this feature:

Power Management
The goal of this capability is to enable Configuration Manager to further reduce the operational costs of IT by providing basic power management features native to the product.  Our approach is based on 3 primary areas:

A. Help the organization plan a power strategy by monitoring current power state and consumptions and reporting on machine utilization trends, current power settings and current energy consumption

B. Enable the Administrator to easily create, deploy and enforce specific power settings using the existing ConfigMgr infrastructure 
   −Ability to set peak and non-peak schedules
   −Ability to remediate settings if changed
   −Ability to opt out machines from power policy

C. Provide the business meaningful report formats that are relevant to Power Management

Here is a quick video of some of the sample reports we plan to release.  These are a ‘mockup’ and do not represent final calculations, views, values etc. 

An effective approach to power management needs to maximize power policy deployment while minimizing the impact to the end-user. System Center Configuration Manager helps customers further reduce their operational costs by adding new in box capability to their ConfigMgr infrastructure, and by seamlessly enabling power management client agent services to their existing Collection landscape.

In addition to power management, ConfigMgr R3 will provide customers with enhanced scale and performance support above current numbers.  In addition, further capabilities – in time for your Window 7 deployments – around Operating System Deployment will be enabled.

Configuration Manager 2007 R3 will release as a beta at the end of October 2009, with a targeted release of late Q1 calendar 2010.  Continued blogging and product news, Twitter updates, interviews with key people on the project, and some videos and demos of the new code in action will be releasing over the coming months.

Configuration Manager 2007 R3 TAP Nominations now Open
Product feedback is very important to the success of any product.  The nomination survey for ConfigMgr 2007 R3 TAP is now open.  You can access this nomination survey here.

Look to the following resources in the coming months for more information on our plans:
System Center homepage
Configuration Manager homepage