Category: SCCM

Configure Bitlocker during deployment

Set X256 AES Encryption Cipher reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE” -t REG_DWORD -v EncryptionMethodWithXtsFdv -d 7 -f Set Full Disk Encryption reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE” -t REG_DWORD -v OSEncryptionType -d 1 -f Set Bitlocker PIN manage-bde -add C: -TPMAndPIN 123456 Enable Bitlocker manage-bde -on C: -rp

Basic Unattend for SCCM

The below xml is a very basic unattend file for SCCM OS deployments. It solves the issue where ‘Just a moment…’ covers the deployment status window so you can’t see the progress of the deployment. <?xml version=”1.0″ encoding=”utf-8″?> <unattend xmlns=”urn:schemas-microsoft-com:unattend”> <settings pass=”oobeSystem”> <component name=”Microsoft-Windows-Shell-Setup” processorArchitecture=”amd64″ publicKeyToken=”31bf3856ad364e35″ language=”neutral” versionScope=”nonSxS” xmlns:wcm=””> <OOBE> <HideEULAPage>true</HideEULAPage> <ProtectYourPC>1</ProtectYourPC> <HideLocalAccountScreen>true</HideLocalAccountScreen> <HideOnlineAccountScreens>true</HideOnlineAccountScreens> <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>…

Speed up TFTP on SCCM DP

Location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\DP Name: RamDiskTFTPWindowSize Type: REG_DWORD The default value is 1 (1 data block fills the window) I used 8 which gave good speeds. We can also tweak the TFTPBlockSize which has been around for many versions of Configuration Manager. Location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\DP Name: RamDiskTFTPBlockSize Type: REG_DWORD Value: <customized block size> Test with values: 4096, 8192,…

Removing AWS Credentials from VMM

Start > Run: %localappdata%\AWSToolkit Delete the file named: RegisteredAccounts.json

Microsoft System Center 2012 Configuration Manager cmdlets

Microsoft System Center 2012 Configuration Manager cmdlets Name Description Add-CMApplicationCatalogWebServicePoint Adds an Application Catalog web service point to Configuration Manager. Add-CMApplicationCatalogWebsitePoint Adds an Application Catalog website point to a Configuration Manager site. Add-CMAssetIntelligenceSynchronizationPoint Installs an Asset Intelligence synchronization point. Add-CMBoundaryToGroup Assigns boundaries to a boundary group. Add-CMDeploymentType Adds a deployment type for an application. Add-CMDeviceAffinityToUser…

Unlock a Locked Object in SCCM Configuration Manager

Open the Config Mgr console and select “Connect via Windows Powershell” Run the below command in the Powershell session. Unlock-CMObject -InputObject $(Get-CMApplication -Name “<Application Name>”)   Tip: Get the application name from the console, using what’s in the column “name”