APPENDIX C
Reference URLs

This appendix includes a number of reference URLs associated with System Center Configuration Manager (ConfigMgr) Current Branch. URLs do change, so although the authors have made every effort to verify the references here as working links, there is no guarantee that they will remain current. It is quite possible some will change or be dead by the time you read this book. Sometimes the Wayback Machine (http://www.archive.org/index.php) can rescue you from dead or broken links. This site is an Internet archive, and it can sometimes take you back to an archived version of a site.

The links listed in this appendix are also available “live” at Pearson’s InformIT website, at http://www.informit.com/title/9780672337901, on the Downloads tab. Look for and select Appendix C, “Reference URLs.”

myITforum—http://myitforum.com—is a community of worldwide information technology (IT) professionals established in 1999 by Rod Trent. myITforum includes topics on System Center and IT.

The list of blogs and other ConfigMgr-related articles at myITforum.com is enormous. This appendix includes some specific links and pertinent information, but it does not include everything.

See http://myitforum.com for the Windows IT Pro forums.

IT Pro publishes online articles about System Center and other topics. See http://www.itprotoday.com for information.

A source of information for all things System Center related, including Configuration Manager, is System Center Central (http://www.systemcentercentral.com).

FAQShop.com, published by Enterprise Client Management (ECM) MVP Cliff Hobbs at http://www.faqshop.com/, provides hints, tips, and answers to frequently asked questions (FAQs) related to Microsoft’s various systems management technologies.

People-centric IT enables each person you support to work from virtually anywhere, on any device, and gives you a consistent way to manage and protect it all (see http://download.microsoft.com/download/1/3/7/137B2CF6-79FE-438B-BA00-F343022C3CE3/Enabling_Enterprise_Mobility_white_paper.pdf).

The Windows Server technical library is located at https://docs.microsoft.com/windows-server/windows-server.

Microsoft’s white paper on performance tuning guidelines for Windows Server 2016 is at https://docs.microsoft.com/windows-server/administration/performance-tuning/. The following are links to previous versions of performance tuning guidelines:

Guidelines for Windows Server 2012 R2 are at http://msdn.microsoft.com/library/windows/hardware/dn529133.aspx.

Download performance tuning guidelines for Windows Server 2012, 2008 R2, and 2008 from https://msdn.microsoft.com/library/windows/hardware/dn529134.

The Microsoft System Center website is at https://www.microsoft.com/cloud-platform/system-center, and Microsoft’s jumping-off point for System Center technical resources is at http://technet.microsoft.com/systemcenter/.

Read about monitoring and tuning SQL Server for performance at http://technet.microsoft.com/library/ms189081.aspx.

Find guidance on security considerations for SQL Server at http://msdn.microsoft.com/library/ms144228.aspx.

To learn about moving databases configured for SQL Server AlwaysOn, see http://blogs.msdn.com/b/sqlserverfaq/archive/2014/02/06/how-to-move-databases-configured-for-sql-server-alwayson.aspx.

Review the process of upgrading the SQL Server test database at https://docs.microsoft.com/sccm/core/servers/manage/test-database-upgrade.

For a complete list of available operators, see the SQL Operators section within the T-SQL online help at http://msdn.microsoft.com/library/ms174986(v=SQL.110).aspx.

Find information about SQL Server 2017, 2016, and 2014 at https://docs.microsoft.com/sql/sql-server/sql-server-technical-documentation.

Use the SQL Server Profiler to view SQL requests sent to an SQL Server database. See http://msdn.microsoft.com/library/ms187929.aspx for information.

Read about the SQL Server Service Broker at http://social.technet.microsoft.com/wiki/contents/articles/6598.sql-server-service-broker-at-a-glance.aspx and https://docs.microsoft.com/sql/database-engine/configure-windows/sql-server-service-broker.

Find information about SQL Server Compact Edition (CE) at http://technet.microsoft.com/library/ms173037(v=sql.105).aspx.

See http://technet.microsoft.com/ff657833.aspx for information on SQL Server Reporting Services (SSRS). Installation information is at http://msdn.microsoft.com/library/ms143711.aspx.

Mike Pearson discusses SSRS recovery planning at http://www.sqlservercentral.com/columnists/mpearson/recoveryplanningforsqlreportingservices.asp. Register with SQLServerCentral to view the full article.

http://technet.microsoft.com/library/ms156421.aspx discusses moving the SSRS databases to another computer.

Want to create drilldown SSRS reports? See http://technet.microsoft.com/library/dd207042.aspx.

http://msdn.microsoft.com/library/ms157403.aspx provides a complete listing of SSRS log files.

Leading security organizations include:

Center for Internet Security (CIS): https://www.cisecurity.org

Information Assurance Directorate (IAD): https://www.iad.gov/iad/

Australian Signals Directorate (ASD): http://www.asd.gov.au

Find the Microsoft Malware Protection Center (MMPC) at http://www.microsoft.com/wdsi.

Microsoft’s antimalware guidance for security policies for Windows and Windows Server is at https://support.microsoft.com/kb/822158.

Windows Defender Offline (WDO) is available at no cost for Windows 7 and later operating systems at http://windows.microsoft.com/windows/what-is-windows-defender-offline.

Information about servicing branches and servicing of Windows 10 in general is at https://technet.microsoft.com/itpro/windows/manage/waas-overview#servicing-branches.

Feature update servicing for Windows Insider devices occurs completely through Windows Update; see https://insider.windows.com.

Download the Windows Management Framework (WMF) from https://www.microsoft.com/download/details.aspx?id=50395.

Windows Firewall logs and settings are described at http://technet.microsoft.com/network/bb545423.aspx.

A bit dated but still useful International Data Corporation whitepaper sponsored by Microsoft quantifies how businesses can reduce costs by managing the Windows desktop. This whitepaper is available for download at http://download.microsoft.com/documents/australia/government/desktop_optimization_wp.pdf.

Read about WunderBar trivia at http://blogs.msdn.com/b/jensenh/archive/2005/10/07/478214.aspx.

Information about the Windows setup logs is at https://support.microsoft.com/help/927521/windows-vista,-windows-7,-windows-server-2008-r2,-windows-8.1,-and-windows-10-setup-log-file-locations.

According to the SANS Institute (https://www.computerworld.com/article/2565944/security0/sans-unveils-top-20-security-vulnerabilities.html), the threat landscape is increasingly dynamic, making efficient and proactive update management more important than ever before.

Symantec’s 2017 Internet Security Threat Report concluded that the cyber-criminals revealed new levels of ambition in 2016, causing unprecedented levels of disruption with relatively simple IT tools and cloud services (https://www.symantec.com/security-center/threat-report).

Microsoft provides guidance on Active Directory (AD) security best practices at https://technet.microsoft.com/library/dn487446.aspx.

For information on the impact of AD schema extensions and modifications, see https://msdn.microsoft.com/library/ms677103.aspx.

For information on how to perform schema changes, see https://msdn.microsoft.com/library/windows/desktop/ms676929.aspx.

A complete list of Active Directory supportability requirements is at https://technet.microsoft.com/library/mt617258.aspx.

Information about search filters for AD Directory Services is at https://msdn.microsoft.com/library/aa746475(v=vs.85).aspx.

https://msdn.microsoft.com/library/ms675090(v=vs.85).aspx lists attributes defined by Active Directory.

Find information on LDIFDE at http://technet.microsoft.com/library/cc731033.aspx. ConfigMgr-specific instructions are at https://technet.microsoft.com/library/mt345589.aspx.

http://support.microsoft.com/kb/555636 describes exporting and importing objects using LDIFDE.

An overview of Windows Azure Active Directory is at http://www.windowsazure.com/services/active-directory/.

Troubleshoot Azure AD Connect installation issues with help from https://support.microsoft.com/kb/3121701 and connectivity issues with help from https://azure.microsoft.com/documentation/articles/active-directory-aadconnect-troubleshoot-connectivity/.

Read about directory integration at http://technet.microsoft.com/library/jj573653.aspx.

Prepare for directory synchronization with Azure Active Directory by reading http://technet.microsoft.com/library/jj151831.aspx, which discusses architecture and deployment considerations.

Information on password synchronization between on-premise directories and Azure Active Directory is available at http://technet.microsoft.com/library/dn246918.aspx.

Information on Windows Deployment Services (WDS) is at https://docs.microsoft.com/sccm/osd/plan-design/infrastructure-requirements-for-operating-system-deployment#BKMK_WDS.

https://en.wikipedia.org/wiki/Preboot_Execution_Environment provides in-depth information on the Preboot eXecution Environment (PXE). A troubleshooting guide for boot issues is at https://support.microsoft.com/help/10082/troubleshooting-pxe-boot-issues-in-configuration-manager-2012.

Device affinity allows you to marry a user to a single device; for more on this, see https://docs.microsoft.com/sccm/osd/get-started/associate-users-with-a-destination-computer.

Requirements for Windows To Go are at http://technet.microsoft.com/library/hh831833.aspx#wtg_hardware.

Interested in learning more about the Microsoft Operations Framework (MOF)? See https://technet.microsoft.com/library/dd320379.aspx.

Information on the MOF Deliver Phase is at http://technet.microsoft.com/library/cc506047.aspx.

You can read about the MOF Envision SMF at http://technet.microsoft.com/library/cc531013.aspx.

Infrastructure and operations maturity refers to an organization’s capability to take on new challenges. Gartner recognizes five levels of infrastructure and operations maturity and has developed a self-assessment tool that organizations can use to understand their level of maturity, available at https://www.gartner.com/doc/2481415/itscore-overview-infrastructure-operations.

For a full discussion of infrastructure and operations maturity, see https://www.savision.com/resources/blog/how-mature-your-it-department.

See https://msdn.microsoft.com/library/windows/desktop/aa367449(v=vs.85).aspx for information about the Windows Installer.

To learn about Service Modeling Language (SML), see http://www.w3.org/TR/sml/. For additional technical information on SML from Microsoft, visit http://technet.microsoft.com/library/bb725986.aspx.

Usage data collection provides information to the product group on your use of ConfigMgr, allowing them to better understand how ConfigMgr is used and ensure that their testing emulates real-world scenarios. For more information, see https://docs.microsoft.com/sccm/core/servers/deploy/install/setup-reference#bkmk_usage and https://docs.microsoft.com/sccm/core/plan-design/diagnostics/diagnostics-and-usage-data.

By November 2016, more than 50 million devices were being actively managed by Configuration Manager Current Branch (see https://blogs.technet.microsoft.com/enterprisemobility/2016/11/18/configmgr-current-branch-surpasses-50m-managed-devices/).

A list of cryptographic controls maintained by Microsoft is available at https://docs.microsoft.com/sccm/protect/deploy-use/cryptographic-controls-technical-reference. In-depth information about cryptographic controls for ConfigMgr can be found at https://technet.microsoft.com/library/mt629331.aspx. Required certificate properties for Internet-based client management (IBCM) are at https://docs.microsoft.com/sccm/core/plan-design/security/plan-for-security#BKMK_PlanningForCertificates.

Microsoft’s Sysinternals website is at http://technet.microsoft.com/sysinternals/default.aspx.

Silect Software (http://www.silect.com) offers CP Studio. CP Studio, like Security Compliance Manager (SCM), enables authoring of configuration baselines and configuration items (CIs) outside the ConfigMgr console.

Configuring multi-factor authentication (MFA) is discussed at https://docs.microsoft.com/azure/multi-factor-authentication/multi-factor-authentication.

Find an overview of Windows 8.1 sideloading enhancements at https://www.eightforums.com/threads/windows-8-1-update-sideloading-enhancements.43788/.

The group behind the Web-Based Enterprise Management (WBEM) standard is the Distributed Management Task Force (DMFT); for information on WBEM and the DMTF, see http://www.dmtf.org/standards/wbem.

A complete description of Web Services Management (WS-Man) and related specifications is at http://www.dmtf.org/standards/wsman.

Information on Windows Management Instrumentation (WMI) is available at http://msdn.microsoft.com/library/aa394582.aspx.

http://msdn.microsoft.com/library/aa394564.aspx discusses WMI logging.

See http://msdn.microsoft.com/library/aa394603(v=vs.85).aspx, http://technet.microsoft.com/library/cc180763.aspx, and https://blogs.technet.microsoft.com/askperf/2007/06/22/basic-wmi-testing/ for information on WMI troubleshooting.

For a discussion of User Account Control and WMI, see http://msdn.microsoft.com/library/aa826699.aspx.

Command-line tools for managing WMI can be downloaded from http://msdn.microsoft.com/library/aa827351.aspx.

A list of Microsoft-supplied WMI providers is available at https://msdn.microsoft.com/library/aa394570.aspx.

For information regarding WMI Query Language (WQL), see http://msdn.microsoft.com/library/aa394606.aspx.

Learn about USMT at https://docs.microsoft.com/windows/deployment/usmt/usmt-topics. You will also want to see https://docs.microsoft.com/sccm/osd/get-started/manage-user-state; also visit https://technet.microsoft.com/library/hh397289.aspx for a flowchart on user state capture and restore.

Learn about classless interdomain routing (CIDR) and supernetting to define IP subnets at https://technet.microsoft.com/library/cc958837.aspx. Note that ConfigMgr does not support these methods.

Microsoft provides solution accelerators, which are guidelines and tools to leverage the full functionality of Microsoft usage within your organization. They are available for download at no cost at http://technet.microsoft.com/solutionaccelerators/dd229342.

Learn about using the Visual Studio Report Designer at http://msdn.microsoft.com/library/bb558708.aspx.

See https://docs.microsoft.com/intune-classic/deploy-use/manage-windows-pcs-with-microsoft-intune for information on Windows Intune for cloud PC management.

The Windows Intune administrator console is located at https://manage.microsoft.com.

Purchase a code-signing certificate for sideloading Windows Phone applications for Windows Phone from Symantec at http://www.symantec.com/verisign/code-signing/windows-phone.

Information about the Apple Enterprise Developer license is at http://developer.apple.com/programs/ios/enterprise.

The Apple Volume Purchase Program (VPP) is described at http://www.apple.com/business/vpp/.

How to set up per-app VPN using ConfigMgr is described at https://blogs.technet.microsoft.com/karanrustagi/2015/09/21/how-to-set-up-per-app-vpn-using-configuration-manager/. Additional information is at https://technet.microsoft.com/library/mt629185.aspx.

Trying to understand Microsoft licensing? See the following:

General licensing information is at https://www.microsoft.com/licensing.

https://www.microsoft.com/en-us/licensing/product-licensing/client-access-license.aspx discusses client access licenses (CALs) and the suites they may be included on.

System Center 2016 volume licensing is discussed at https://www.microsoft.com/en-us/licensing/product-licensing/system-center-2016.aspx. The Configuration Manager licensing page is at https://www.microsoft.com/cloud-platform/system-center-configuration-manager-licensing.

Learn about Samsung Knox at https://www.samsungknox.com/en.

Information on Kerberos is at https://msdn.microsoft.com/library/bb742516.aspx.

Microsoft’s Configuration Manager website is located at https://www.microsoft.com/cloud-platform/system-center-configuration-manager, and the TechNet main library page is at https://docs.microsoft.com/sccm/index.

For a list of recommended hardware for ConfigMgr, see https://docs.microsoft.com/sccm/core/plan-design/configs/recommended-hardware.

https://docs.microsoft.com/sccm/core/plan-design/configs/size-and-scale-numbers discusses current ConfigMgr scaling numbers.

Identify the latest baseline version at https://docs.microsoft.com/sccm/core/servers/manage/updates#baseline-and-update-versions.

For a list of changes from ConfigMgr 2012 to version 1511, the first release of ConfigMgr Current Branch, see https://docs.microsoft.com/sccm/core/plan-design/changes/what-has-changed-from-configuration-manager-2012.

Version 1602 introduced features to caution administrators with high-risk deployments; https://docs.microsoft.com/sccm/protect/understand/settings-to-manage-high-risk-deployments provides information.

See what other changes were made in version 1602 at https://docs.microsoft.com/sccm/core/plan-design/changes/whats-new-in-version-1602.

Microsoft’s support policy for ConfigMgr Current Branch versions is at https://docs.microsoft.com/sccm/core/servers/manage/current-branch-versions-supported.

Native support for Active Management Technology (AMT)–based computers is deprecated in Current Branch, but they can still be managed using the Intel add-on for ConfigMgr, located at https://www.intel.com/content/www/us/en/software/setup-configuration-software.html.

Stay informed about new updates in ConfigMgr by checking the article at https://docs.microsoft.com/sccm/core/plan-design/changes/whats-new-incremental-versions. https://docs.microsoft.com/sccm/core/plan-design/changes/removed-and-deprecated-features provides information on deprecated items.

Learn how clients find site resources and services for ConfigMgr at https://docs.microsoft.com/sccm/core/plan-design/hierarchy/understand-how-clients-find-site-resources-and-services.

Command-line options and usage examples for ccmsetup.exe are described at https://docs.microsoft.com/sccm/core/clients/deploy/about-client-installation-properties.

The number of clients supported by ConfigMgr sites is at https://docs.microsoft.com/sccm/core/plan-design/configs/supported-operating-systems-for-site-system-servers, which also reviews supported operating systems for ConfigMgr Current Branch.

Find a three-part series on upgrading ConfigMgr 2012 to Current Branch at https://blogs.technet.microsoft.com/systemcenterpfe/2017/08/16/lift-shift-configmgr-2012-to-configmgr-1702-current-branch-part-1-the-upgrade/.

The migration process is documented at https://docs.microsoft.com/sccm/core/migration/migrate-data-between-hierarchies.

The Automated Installation Kit (AIK) is backward compatible with Windows 7. Ensure that you are on a supported version of the AIK for Current Branch, as shown at https://docs.microsoft.com/sccm/core/plan-design/configs/support-for-windows-10.

Boundary behavior depends on the Current Branch version you are running:

For information on the 1610 and later boundary models (including 1706 SUP failover changes), see https://docs.microsoft.com/sccm/core/servers/deploy/configure/define-site-boundaries-and-boundary-groups.

For legacy information on pre-1610 ConfigMgr behavior, refer to https://docs.microsoft.com/sccm/core/servers/deploy/configure/boundary-groups-for-1511-1602-and-1606.

Also check https://docs.microsoft.com/sccm/core/servers/deploy/configure/define-site-boundaries-and-boundary-groups#a-namebkmkboundarygroupsa-boundary-groups.

For a list of reserved names to avoid using as site codes, see https://msdn.microsoft.com/library/aa365247.aspx.

The Windows 10 CI settings reference is at https://docs.microsoft.com/sccm/compliance/deploy-use/create-configuration-items-for-windows-10-devices-managed-with-the-client#windows-10-configuration-item-settings-reference.

Information about Windows 8.1 and Windows 10 CI settings is at https://docs.microsoft.com/sccm/compliance/deploy-use/create-configuration-items-for-windows-8.1-and-windows-10-devices-managed-without-the-client#windows-81-and-windows-10-configuration-item-settings-reference.

The full list of iOS and Mac OS X compliance settings is at https://docs.microsoft.com/sccm/compliance/deploy-use/create-configuration-items-for-ios-and-mac-os-x-devices-managed-without-the-client#ios-and-mac-os-x-configuration-item-settings-reference.

See https://docs.microsoft.com/sccm/compliance/deploy-use/create-configuration-items-for-windows-phone-devices-managed-without-the-client#windows-phone-configuration-item-settings-reference for information on Windows Phone CIs.

An Android and Samsung Knox CI settings reference is available at https://docs.microsoft.com/sccm/compliance/deploy-use/create-configuration-items-for-android-and-samsung-knox-devices-managed-without-the-client#android-and-samsung-knox-configuration-item-settings-reference.

ConfigMgr Current Branch is supported in Microsoft Azure. For information, review https://docs.microsoft.com/sccm/core/understand/configuration-manager-on-azure.

Azure offers ExpressRoute as an alternative to using VPNs over the Internet. For information about ExpressRoute, including costs and availability, see https://azure.microsoft.com/services/expressroute/.

Configuration Manager Current Branch supports hosting ConfigMgr servers in Azure Infrastructure as a Service (IaaS) virtual machines (VMs). Information about Azure storage scalability and performance is at https://azure.microsoft.com/documentation/articles/storage-scalability-targets/. For information about Azure Premium Storage, see https://azure.microsoft.com/documentation/articles/storage-premium-storage/. A complete list of current Azure VM sizes, processor performance, and VM-level network bandwidth limits is at https://azure.microsoft.com/documentation/articles/virtual-machines-windows-sizes/.

To learn about Azure AD Join and hybrid Azure AD join, see https://docs.microsoft.com/azure/active-directory/device-management-introduction.

When using Azure AD for authentication, you need the app ID to install Windows 10 clients. This is found in the App Registrations part of Azure AD. More information on how to find the ID is available at https://docs.microsoft.com/azure/azure-resource-manager/resource-group-create-service-principal-portal#get-application-id-and-authentication-key.

For information about installation properties published to AD, see https://docs.microsoft.com/sccm/core/clients/deploy/about-client-installation-properties-published-to-active-directory-domain-services.

Following is where to find Microsoft documentation on SQL schema for the various versions of Configuration Manager:

ConfigMgr Current Branch: At the time this book was published, Microsoft had not released an official SQL schema. However, you can use the ConfigMgr 2012 and ConfigMgr 2007 schemas, listed next, as a reference.

ConfigMgr 2012: Reference the ConfigMgr 2012 SQL schema at https://technet.microsoft.com/library/dn581978.aspx.

ConfigMgr 2007: Information on the ConfigMgr 2007 SQL schema is available at http://technet.microsoft.com/library/dd334611.aspx.

Information about the different versions of Background Intelligent Transfer Service (BITS) is available at https://msdn.microsoft.com/library/aa363167.aspx. Read about the different BITS settings at https://msdn.microsoft.com/library/aa362844(v=VS.85).aspx.

See https://docs.microsoft.com/powershell/module/configurationmanager/?view=sccm-ps for a complete list of ConfigMgr PowerShell cmdlets. The System Center Configuration Manager Cmdlet Library download and usage instructions are at https://www.microsoft.com/download/details.aspx?id=46681. Find documentation at https://docs.microsoft.com/powershell/sccm/configurationmanager/vlatest/configurationmanager.

Read about planning for communications in Configuration Manager, including the wake-up proxy for clients, at http://technet.microsoft.com/library/gg712701.aspx.

Information about implementing wake-up proxy functionality is at https://docs.microsoft.com/sccm/core/clients/deploy/plan/plan-wake-up-clients.

If you have WSUS installed on Windows Server 2012 R2, you must apply hotfixes for WSUS to support Windows 10 and Windows Server 2016:

Rollup hotfix for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 update (April 2014): https://support.microsoft.com/kb/2919355

Update to enable WSUS support for Windows 10 feature upgrades: https://support.microsoft.com/kb/3095113

Update to enable ESD decryption provision in WSUS in Windows Server 2012 and 2012 R2: https://support.microsoft.com/kb/3159706

If the updates classification is synchronized before installing these hotfixes, you must clear out the data and recover from the synchronization. Follow the steps at https://docs.microsoft.com/sccm/sum/plan-design/prerequisites-for-software-updates#BKMK_RecoverUpgrades.

Information on using WSUSUtil to export and import the metadata for software updates is at https://docs.microsoft.com/sccm/sum/get-started/synchronize-software-updates-disconnected.

Read about certutil.exe at https://technet.microsoft.com/library/cc732443(v=ws.11).aspx.

To use an MSU file with ConfigMgr (and System Center Updates Publisher [SCUP]), see https://blogs.technet.microsoft.com/dominikheinz/2011/10/17/deploying-custom-msu-updates-with-sccm-and-scup.

See https://technet.microsoft.com/itpro/windows/deploy/usmt-reference to customize boot images with ConfigMgr. Information about the prestart commands is at https://docs.microsoft.com/sccm/osd/understand/prestart-commands-for-task-sequence-media.

Read about prestaging content at https://docs.microsoft.com/sccm/core/servers/deploy/configure/deploy-and-manage-content#a-namebkmkprestagea-use-prestaged-content (Scroll down the page to find the prestaged content section).

You can script report backups using RS.exe. Documentation is available at http://msdn.microsoft.com/library/ms162839.aspx and http://msdn.microsoft.com/library/ms159720.aspx.

Verify your reporting services installation before installing the reporting services point. https://docs.microsoft.com/sql/reporting-services/install-windows/verify-a-reporting-services-installation discusses the steps to take.

Supported OS versions may change with each new build; check https://docs.microsoft.com/sccm/core/plan-design/configs/supported-operating-systems-for-site-system-servers#bkmk_ClientOS for current information. Check supported configurations for ConfigMgr at https://docs.microsoft.com/sccm/core/plan-design/configs/supported-configurations.

The ConfigMgr client agent installation process automatically installs necessary prerequisites, although you may want to preinstall if a reboot is required. Prerequisite software is at https://docs.microsoft.com/sccm/core/clients/deploy/prerequisites-for-deploying-clients-to-windows-computers.

Learn how to prevent client software from being installed on specific computers from the article at https://technet.microsoft.com/library/bb693996.aspx.

Configuring a service principal name (SPN) for SQL Server site database servers is discussed at http://technet.microsoft.com/library/bb735885.aspx. For site systems that require Internet Information Services (IIS), if the system is registered in the Domain Name System (DNS) using a CNAME (a DNS alias rather than the actual computer name), you must register the SPN using the procedure described at http://technet.microsoft.com/library/bb694288.aspx.

To identify the Windows groups and accounts used in Configuration Manager and any requirements, see https://docs.microsoft.com/sccm/core/plan-design/hierarchy/accounts.

Download the Configuration Manager Vulnerability Assessment configuration pack at https://www.microsoft.com/download/details.aspx?id=51948.

Guidance for security site system servers is at https://docs.microsoft.com/sccm/core/plan-design/hierarchy/security-and-privacy-for-site-administration.

Find information about planning for certificate revocation list (CRL) checking and other considerations for deploying AD certificate services at https://technet.microsoft.com/library/hh831574(v=ws.11).aspx.

Security researchers recommend disabling Secure Socket Layer (SSL) 3.0 and enabling Transport Layer Security (TLS) 1.1 and 1.2, as described at https://support.microsoft.com/kb/245030.

For information about remote WMI security requirements, see https://docs.microsoft.com/sccm/core/plan-design/hierarchy/plan-for-the-sms-provider.

Read about group policy and WMI filtering at https://docs.microsoft.com/windows/security/identity-protection/windows-firewall/create-wmi-filters-for-the-gpo.

To configure proxies for site server roles, see http://technet.microsoft.com/library/gg712282.aspx#BKMK_PlanforProxyServers.

http://technet.microsoft.com/library/gg712321.aspx discusses the automatic retry settings for a pull DP.

Information on the ClientSDK namespace is available in the ConfigMgr software development kit (SDK) in MSDN, at https://msdn.microsoft.com/library/jj874139.aspx.

The Win32_SystemEnclosure WMI class represents the properties associated with a physical system enclosure. Properties are listed at https://msdn.microsoft.com/library/aa394474(v=vs.85).aspx.

See https://docs.microsoft.com/sccm/core/plan-design/network/pki-certificate-requirements for ConfigMgr PKI certificate requirements.

Read about integrating App-V into ConfigMgr at https://technet.microsoft.com/library/jj822982.aspx. While written for ConfigMgr 2012, this white paper is valid for ConfigMgr Current Branch.

Read about enabling your device for development at https://msdn.microsoft.com/windows/uwp/get-started/enable-your-device-for-development.

Use a task sequence to manage virtual hard disks in ConfigMgr; read https://docs.microsoft.com/sccm/osd/deploy-use/use-a-task-sequence-to-manage-virtual-hard-disks.

To understand task sequence (TS) steps, see https://docs.microsoft.com/sccm/osd/understand/task-sequence-steps.

Find the full list of TS action variables at https://docs.microsoft.com/sccm/osd/understand/task-sequence-action-variables and a list of the built-in variables at https://docs.microsoft.com/sccm/osd/understand/task-sequence-built-in-variables.

How to use TS variables in a running ConfigMgr TS is documented at https://msdn.microsoft.com/library/cc145669.aspx.

Although written for ConfigMgr 2007, KB925282 (http://support.microsoft.com/kb/925282) includes a good overview of the client push installation process and what can go wrong.

Learn about the health checks performed by the Client Manager Health Evaluation scheduled task at https://docs.microsoft.com/sccm/core/clients/manage/monitor-clients#BKMK_ClientHealth.

Find information about Windows 10 health attestation at https://docs.microsoft.com/windows/device-security/protect-high-value-assets-by-controlling-the-health-of-windows-10-based-devices.

Creating and issuing a Mac client certificate template on a certification authority (CA) is described at https://docs.microsoft.com/sccm/core/plan-design/network/example-deployment-of-pki-certificates. Before installing the agent, download the program installation files and make them available on the Mac system. Obtain these files by installing the ConfigMgrMacClients.msi file on a Windows system. Download the MSI file from https://www.microsoft.com/download/details.aspx?id=47719. Also use this link to download client installation files for UNIX/Linux systems.

You can modify keychain access as described at https://docs.microsoft.com/sccm/core/clients/deploy/deploy-clients-to-macs.

Command-line properties for the installation scripts on UNIX/Linux systems are described at https://docs.microsoft.com/sccm/core/clients/deploy/deploy-clients-to-unix-and-linux-servers.

Many reports analyze power consumption and check applied power settings. See https://docs.microsoft.com/sccm/core/clients/manage/power/monitor-and-plan-for-power-management for information.

Use profiles to set up connections for devices to remotely connect to your network. For information, see https://docs.microsoft.com/sccm/compliance/deploy-use/create-remote-connection-profiles.

https://docs.microsoft.com/sccm/apps/deploy-use/uninstall-applications discusses uninstalling ConfigMgr applications.

Read about how the application model works at https://blogs.msdn.microsoft.com/steverac/2015/06/01/configmgr-2012-the-application-model-and-advanced-detection-logic/.

Information on Microsoft Intune is available at https://www.microsoft.com/cloud-platform/microsoft-intune-features. To learn how to get started with a free 30-day trial, see https://docs.microsoft.com/intune/understand-explore/get-started-with-a-30-day-trial-of-microsoft-intune. You can extend the trial for an additional 30 days by contacting Intune support; find the support numbers at https://technet.microsoft.com/jj839713.aspx.

Existing Microsoft cloud customers can sign up for a 90-day Enterprise Mobility + Security (EMS) trial through the FastTrack program, at http://fasttrack.microsoft.com/ems.

The following management portals are available to manage the various configurations and features of Microsoft Intune:

Office 365 Admin Center: https://portal.office.com

Intune Admin Portal: https://manage.microsoft.com

Azure Portal: https://portal.azure.com

For information on iOS Device Enrollment Program (DEP) enrollment for hybrid deployments with ConfigMgr, see https://docs.microsoft.com/sccm/mdm/deploy-use/ios-device-enrollment-program-for-hybrid.

Download the Apple Configurator from https://itunes.apple.com/app/apple-configurator-2/id1037126344?mt=12. Details on device enrollment with the Apple Configurator are at https://technet.microsoft.com/library/mt706232.aspx.

The Intune status page is at https://status.manage.microsoft.com/StatusPage/ServiceDashboard.

Available apps built with the Intune SDK are listed in the Microsoft Intune mobile application gallery at https://www.microsoft.com/cloud-platform/microsoft-intune-apps.

For information about wrapping in-house created apps for iOS, see https://docs.microsoft.com/intune/deploy-use/prepare-ios-apps-for-mobile-application-management-with-the-microsoft-intune-app-wrapping-tool.

https://docs.microsoft.com/intune/deploy-use/prepare-android-apps-for-mobile-application-management-with-the-microsoft-intune-app-wrapping-tool discusses wrapping Android in-house created apps.

Read about integrating Windows Store for Business at https://technet.microsoft.com/library/mt740630.aspx, https://technet.microsoft.com/itpro/windows/manage/windows-store-for-business-overview, and a.

Find the Configuration Manager SDK at https://docs.microsoft.com/sccm/develop/core/misc/system-center-configuration-manager-sdk.

For information about creating PDF and SMS definition files, see https://technet.microsoft.com/library/bb632631.aspx.

Information about MIF files is at https://technet.microsoft.com/library/bb633139.aspx.

Find best practices for collections at https://docs.microsoft.com/sccm/core/clients/manage/collections/best-practices-for-collections.

For information about serialized editing of distributed objects (SEDO), see https://msdn.microsoft.com/library/hh949794.aspx.

Settings for mobile devices in ConfigMgr are described at https://docs.microsoft.com/sccm/mdm/deploy-use/manage-compliance-settings.

Examples of custom URI settings for Windows 10 are available in the document at https://docs.microsoft.com/intune/deploy-use/windows-10-policy-settings-in-microsoft-intune.

Microsoft publishes details of mobile application management (MAM)–capable apps in the Intune mobile application gallery at https://www.microsoft.com/cloud-platform/microsoft-intune-apps.

To enable modern authentication for Exchange Online, see http://social.technet.microsoft.com/wiki/contents/articles/32711.exchange-online-how-to-enable-your-tenant-for-modern-authentication.aspx; for Skype for Business Online, see http://social.technet.microsoft.com/wiki/contents/articles/34339.skype-for-business-online-enable-your-tenant-for-modern-authentication.aspx.

Connect to Exchange Online using remote PowerShell. See https://technet.microsoft.com/library/jj984289(v=exchg.160).aspx.

Information on installing the ConfigMgr client using Intune MDM-managed Windows devices can be found at https://docs.microsoft.com/intune-classic/deploy-use/set-up-windows-device-management-with-microsoft-intune#azure-active-directory-enrollment. You may also want to check https://docs.microsoft.com/sccm/core/clients/deploy/deploy-clients-to-windows-computers#how-to-install-clients-to-intune-mdm-managed-windows-devices.

For information on the cloud management gateway (CMG), supported scenarios, costs, and Azure requirements, see https://docs.microsoft.com/sccm/core/clients/manage/plan-cloud-management-gateway.

Information on planning for IBCM is at https://docs.microsoft.com/sccm/core/clients/manage/plan-internet-based-client-management.

See https://docs.microsoft.com/sccm/core/servers/deploy/configure/install-and-configure-distribution-points to determine whether to enable anonymous access for clients.

Find an overview of cloud DPs at https://docs.microsoft.com/sccm/core/plan-design/hierarchy/use-a-cloud-based-distribution-point.

See https://technet.microsoft.com/library/hh831696(v=ws.11).aspx for information about BranchCache.

Learn about Peer Cache at https://docs.microsoft.com/sccm/core/plan-design/hierarchy/client-peer-cache.

For a complete breakdown of the latest information on choosing between hybrid and standalone Intune, see https://docs.microsoft.com/sccm/mdm/understand/choose-between-standalone-intune-and-hybrid-mobile-device-management.

Download the System Center Monitoring Pack for ConfigMgr at https://www.microsoft.com/download/details.aspx?id=34709.

The Windows Update log, Windowsupdate.log, is documented at https://support.microsoft.com/kb/902093. For information on the changes in Windows 10 version 1607, see https://support.microsoft.com/kb/3036646.

Find information on server log files at https://docs.microsoft.com/sccm/core/plan-design/hierarchy/log-files.

Information on site system log files is at https://docs.microsoft.com/sccm/core/plan-design/hierarchy/log-files.

Use the article at https://support.microsoft.com/help/4000401/content-distribution-in-mcm as a guide to find the log files used with content distribution.

Learn how to script WSUS and ConfigMgr SUP maintenance at https://blogs.technet.microsoft.com/configurationmgr/2016/01/26/the-complete-guide-to-microsoft-wsus-and-configuration-manager-sup-maintenance/. You will also want to read https://docs.microsoft.com/sccm/sum/plan-design/software-updates-best-practices.

To publish SCUP updates to WSUS on Windows Server 2012, see the requirements at https://technet.microsoft.com/library/hh134747.aspx#PublishToServer2012.

Read about co-management at https://docs.microsoft.com/sccm/core/clients/manage/co-management-overview.

If you have already configured Microsoft Intune in a hybrid setup with ConfigMgr, see https://docs.microsoft.com/sccm/mdm/deploy-use/change-mdm-authority for moving from hybrid to standalone.

To configure Intune for Windows 10 device enrollment, see https://docs.microsoft.com/intune/windows-enroll.

To join existing ConfigMgr clients to co-management, you must set up hybrid Azure AD Join in your AD environment, as discussed in the Azure AD documentation at https://docs.microsoft.com/azure/active-directory/device-management-hybrid-azuread-joined-devices-setup.

Read how to enable existing Intune or ConfigMgr clients for co-management at https://docs.microsoft.com/sccm/core/clients/manage/co-management-prepare.

Read about Windows AutoPilot at https://docs.microsoft.com/windows/deployment/windows-10-auto-pilot and https://docs.microsoft.com/intune/windows-enroll#enable-windows-10-automatic-enrollment.

Information about configuring compliance policies for Windows 10 devices in Microsoft Intune is at https://docs.microsoft.com/intune/compliance-policy-create-windows.

Read https://docs.microsoft.com/intune/windows-update-for-business-configure for information on configuring Windows 10 update rings in Microsoft Intune.

Following is where to find information about configuring resource profiles for Windows 10 devices in Microsoft Intune:

Certificates: https://docs.microsoft.com/intune/certificates-configure

Wi-Fi Profiles: https://docs.microsoft.com/intune/wi-fi-settings-configure

VPN Profiles: https://docs.microsoft.com/intune/vpn-settings-configure

For details on how to switch workloads from ConfigMgr, see https://docs.microsoft.com/sccm/core/clients/manage/co-management-switch-workloads.

Looking for training? Check out the following options:

Microsoft provides two courses on System Center Configuration Manager:

“Administering System Center Configuration Manager,” 20703-1A=: Information on this five-day class is available at https://www.microsoft.com/learning/course.aspx?cid=20703-1.

“Integrating MDM and Cloud Services with System Center Configuration Manager,” 20703-2: Information on this three-day class is at https://www.microsoft.com/learning/course.aspx?cid=20703-2.

A great ConfigMgr trainer who teaches the ConfigMgr MOC is Michael Head. His current course schedule is located at http://www.HeadSmartGroup.com/.

Microsoft Virtual Academy provides a course on updating, servicing, and telemetry in Configuration Manager Current Branch at https://mva.microsoft.com/training-courses/updates-servicing-and-telemetry-in-configuration-manager-current-branch-16596.

https://www.windows-noob.com/forums/topic/13288-step-by-step-guides-system-center-configuration-manager-current-branch-and-technical-preview/ provides guides on new versions of ConfigMgr Current Branch or Technical Preview and how they incorporate with Microsoft Intune.

Information about optimizing ConfigMgr database performance is at https://stevethompsonmvp.wordpress.com/2013/05/07/optimizing-configmgr-databases/.

To help with troubleshooting report errors, enable Remote Errors on your SSRS website to gather more details. See http://www.enhansoft.com/blog/turn-on-remote-error-reporting.

To re-index the WSUS database, download the WSUSDBMaintenance T-SQL script from the TechNet gallery at https://gallery.technet.microsoft.com/scriptcenter/6f8cde49-5c52-4abd-9820-f1d270ddea61.

For information about BranchCache and Peer Cache and combining them, see http://deploymentresearch.com/Research/Post/608/A-Geek-rsquo-s-Guide-to-reduce-the-network-impact-of-Windows-10-Updates-and-other-packages-with-ConfigMgr.

Find a list of resources related to AV exclusions at http://social.technet.microsoft.com/wiki/contents/articles/953.microsoft-anti-virus-exclusion-list.aspx.

Read about how collection updates work at https://david-obrien.net/2014/05/configmgr-collection-updates/. In addition, Scott Breen, a Microsoft Premier Field Engineer, provides an extensive article on update behavior of collections in different scenarios at https://blogs.technet.microsoft.com/scott/2017/09/13/collection-evaluation-overview-configuration-manager/.

Don Jones discusses defining parameters in PowerShell scripts at http://technet.microsoft.com/magazine/jj554301.aspx.

Read about using PowerShell to troubleshoot and repair WMI errors by the Scripting Guy at http://blogs.technet.com/b/heyscriptingguy/archive/2012/03/29/use-powershell-to-troubleshoot-and-repair-wmi-errors.aspx.

The Microsoft IT Pro community maintains an index of antimalware security policy recommendations for Microsoft products at http://social.technet.microsoft.com/wiki/contents/articles/953.microsoft-anti-virus-exclusion-list.aspx.

CIM is the Common Information Model component that WMI is based on. To learn more about CIM, see the tutorial at http://www.wbemsolutions.com/tutorials/CIM/index.html.

Need help with troubleshooting client push installation? Check out http://blogs.technet.com/b/sudheesn/archive/2010/05/31/troubleshooting-sccm-part-i-client-push-installation.aspx. Although this post is written for ConfigMgr 2007, the concepts are still valid.

A step-by-step guide on using software metering is available at http://blogs.msdn.com/b/minfangl/archive/2011/04/29/step-by-step-on-how-to-use-software-metering.aspx. Although written for ConfigMgr 2007, the article is still valid for ConfigMgr Current Branch.

Steve Rachui discusses state messaging in depth at http://blogs.msdn.com/b/steverac/archive/2011/01/07/sccm-state-messaging-in-depth.aspx.

Read about the software updates process as viewed through the log files. See the following sites:

http://blogs.msdn.com/b/steverac/archive/2011/04/10/software-updates-internals-mms-2011-session-part-i.aspx

https://blogs.msdn.microsoft.com/steverac/2011/04/16/software-updatesinternals-mms-2011-sessionpart-ii/

https://blogs.msdn.microsoft.com/steverac/2011/04/30/software-updatesinternals-mms-2011-sessionpart-iii/

https://blogs.technet.microsoft.com/configurationmgr/2016/08/25/software-updates-in-configuration-manager-current-branch-deep-dive-client-operations/

Coauthor Gerry Hampson provides additional context about app deployment from an end-user perspective. For information about app deployment for Android, see the article at http://gerryhampsoncm.blogspot.ie/2015/07/deploying-apps-to-android-devices-with.html; for information regarding iOS, see http://gerryhampsoncm.blogspot.ie/2015/07/deploying-apps-to-ios-devices-with.html.

Use the Intune Company Portal for Android to manage Android devices. Download the portal from the Google Play Store at https://play.google.com/store/apps/details?id=com.microsoft.windowsintune.companyportal&hl=en.

The Intune Company Portal for iOS can be downloaded from the Apple App Store at https://itunes.apple.com/us/app/microsoft-intune-company-portal/id719171358?mt=8.

The Apple Push Certificates Portal is at https://identify.apple.com.

Kent Agerlund has an informative blog post explaining the content library, at http://blog.coretech.dk/kea/understanding-the-new-content-library-store-in-5-minutes/.

Deploying Endpoint Protection through the network share option does not have any dependencies on the WSUS/SUS infrastructure or Internet downloads. Following are guides and sample scripts for deploying Endpoint Protection through the network share option:

https://www.niallbrady.com/2013/02/22/how-can-i-deploy-system-center-2012-endpoint-protection-definition-updates-from-a-unc-file-shares/

https://blogs.technet.microsoft.com/charlesa_us/2015/05/20/configmgr-2012-how-to-deploy-scep-definition-updates-via-unc-share-for-isolated-environment/

https://blog.thesysadmins.co.uk/sccm-2012-scep-unc-definition-updates-automation-powershell.html

http://richardbalsley.com/using-sccm-distribution-points-for-forefront-endpoint-protection-2010-definition-updates

http://blogs.msdn.com/b/steverac/archive/2014/03/29/the-suite-spot-of-imaging.aspx discusses using OSD for imaging.

http://www.appdetails.com provides general guidance on software deployment and a forum for users to share their experiences testing whether software can be installed unattended.

WSUS no longer issues self-signed certificates; see the WSUS Product Team posting at https://blogs.technet.microsoft.com/wsus/2013/08/15/wsus-no-longer-issues-self-signed-certificates/.

To use an internal PKI-generated certificate with SCUP, see https://blogs.technet.microsoft.com/jasonlewis/2011/07/12/system-center-updates-publisher-signing-certificate-requirements-step-by-step-guide. Information on how to use public certificates is at https://blogs.msdn.microsoft.com/steverac/2011/09/17/using-system-center-update-publisher-2007-with-verisign-certificates.

Read about Open Management Infrastructure (OMI) at http://www.opengroup.org/software/omi. Find in-depth information on OMI and how it works at https://collaboration.opengroup.org/omi/. The OMI getting started guide can be downloaded from https://collaboration.opengroup.org/omi/documents.php.

Steve Rachui discusses operating system deployment to Linux/UNIX operating systems (which is not supported by Microsoft) at http://blogs.msdn.com/b/steverac/archive/2014/01/02/osd-for-linux-imaging-yes-really.aspx.

For information on setting up multicasting, see https://blogs.msdn.microsoft.com/steverac/2008/10/18/setting-up-multicasting-in-sccm.

To enable the prestart command for a TS, see https://blogs.msdn.microsoft.com/steverac/2015/04/22/power-belongs-to-youthe-osd-prestart-command/.

To capture logs during failed TS execution, see https://blogs.msdn.microsoft.com/steverac/2008/07/15/capturing-logs-during-failed-task-sequence-execution/.

Marcus Oh writes about retrieving objects into a collection that does not exist in another collection at http://marcusoh.blogspot.com/2007/08/sms-selecting-objects-not-in-collection.html.

Beginning with ConfigMgr 2007 R2, ConfigMgr has the ability to define a task sequence variable on a collection or individual resource without a value. Read about it in a posting by Jason Sandys at http://blog.configmgrftw.com/?p=44.

Flexera’s AdminStudio is a popular software packaging suite. See http://www.flexerasoftware.com/products/adminstudio-suite.htm.

Adaptiva Software (http://www.adaptiva.com) extends Microsoft’s technologies to enhance PC power management. 1E (http://www.1e.com) also has a number of products to assist with sustainability and energy efficiency.

Symantec offers mobile device management software for iOS, Android, and Windows Phone devices; http://www.symantec.com/mobile-management#sccm provides details.

Microsoft’s Enterprise Mobility and Security Blog is at https://cloudblogs.microsoft.com/enterprisemobility/.

The ConfigMgr Team blog is at https://blogs.technet.microsoft.com/configmgrteam/.

See the Intune Team blog at https://blogs.technet.microsoft.com/microsoftintune/.

http://bink.nu is managed by Steven Bink, former MVP for Windows Server Technologies. According to the blog, it “watches Microsoft like a hawk.”

Garth Jones, ECM MVP and contributing author to this book, is affiliated with the SMS User Group in Canada, whose blogs are at http://smsug.ca/blogs/.

http://sms-hints-tricks.blogspot.com is by Matthew Hudson, ECM MVP.

Ronni Pederson’s blog is at http://ronnipedersen.com.

Sherry Kissinger, former ECM MVP, blogs at https://mnscug.org/blogs/sherry-kissinger.

http://systemscentre.blogspot.com is maintained by MVP Steve Beaumont.

The OSD Support Team blog is at http://blogs.technet.com/b/system_center_configuration_manager_operating_system_deployment_support_blog/.

Microsoft’s hybrid cloud blog is at https://cloudblogs.microsoft.com/hybridcloud/.

The Microsoft Deployment Guys have a blog at http://blogs.technet.com/deploymentguys/default.aspx.

Kevin Sullivan is a Technology Specialist at Microsoft focusing on Azure Site Recovery. His blog is at https://blogs.technet.com/kevinsul_blog/.

a is a blog by former MVP Marcus Oh.

http://stefanschorling.azurewebsites.net is Stefan Schörling’s blog on Microsoft system and cloud management. Stefan is a former ECM MVP.

Niall Brady, ECM MVP, blogs at http://www.niallbrady.com.

Samuel Erskine, Cloud and Datacenter Management MVP, blogs at www.itprocessed.com.

Torsten Meringer, ECM MVP, manages the German ConfigMgr blog, at http://www.mssccmfaq.de.

https://stevethompsonmvp.wordpress.com is the blog for Steve Thompson, ECM MVP.

Greg Ramsey, ECM MVP and a coauthor for this book, blogs at http://gregramsey.wordpress.com.

Coauthor Kenneth van Surksum blogs at http://www.vansurksum.com.

Coauthor Michael Wiles blogged at http://blogs.technet.com/b/mwiles/ while at Microsoft.

Steve Rachui is a CSS guru on ConfigMgr and our technical editor. Check out his blog at http://blogs.msdn.com/steverac/.

For the Configuration Manager—General forum, see https://social.technet.microsoft.com/Forums/en-US/home?forum=ConfigMgrCBGeneral.

For the Configuration Manager Servicing forum, see https://social.technet.microsoft.com/Forums/en-US/home?forum=configmgrservicing.

For the Configuration Manager Site and Client Deployment forum, see https://social.technet.microsoft.com/Forums/en-US/home?forum=ConfigMgrDeployment

For the Configuration Manager Migration forum, see https://social.technet.microsoft.com/Forums/en-US/home?forum=ConfigMgrMigration

For the Configuration Manager SDK and PowerShell forum, see https://social.technet.microsoft.com/Forums/en-US/home?forum=ConfigMgrPowerShell

For the Configuration Manager Application Management forum, see https://social.technet.microsoft.com/Forums/en-US/home?forum=ConfigMgrAppManagement

For the Configuration Manager Security, Updates, and Compliance forum, see https://social.technet.microsoft.com/Forums/en-US/home?forum=ConfigMgrCompliance

For the Configuration Manager Operating System Deployment forum, see https://social.technet.microsoft.com/Forums/en-US/home?forum=ConfigMgrCBOSD

For the Configuration Manager Mobile Device Management forum, see https://social.technet.microsoft.com/Forums/en-US/home?forum=ConfigMgrMDM

For the Intune forum, see https://social.technet.microsoft.com/Forums/en-US/home?category=microsoftintune.

myITforum also has a discussion list for Configuration Manager, along with a number of other discussion lists; see http://myitforum.com/newsletter/email-lists-2/.

The WMI Diagnosis Utility (WMIDiag) is available at the Microsoft download site, https://www.microsoft.com/download/details.aspx?id=7684. For more information about WMIDiag and the team that wrote it, see https://blogs.technet.microsoft.com/askperf/2015/05/12/wmidiag-2-2-is-here/. The team also published a list of recommended WMI hotfixes for Windows 7/Server 2008 R2 and older versions at https://blogs.technet.microsoft.com/askperf/2011/08/05/suggested-hotfixes-for-wmi-related-issues-on-windows-platforms-updated-august-9th-2013/.

ADModify is recommended for making mass changes of UPNs in AD. See https://technet.microsoft.com/library/aa996216(v=exchg.65).aspx for information.

Download AzureADConnect.msi to quickly onboard to Azure AD and Office 365 from https://www.microsoft.com/download/details.aspx?id=47594. You can configure an alternate login ID by using the information at https://technet.microsoft.com/library/dn659436.aspx.

The Nslookup command is described at http://support.microsoft.com/kb/200525. To troubleshoot NetBIOS name resolution using Nbtstat and other methods, see KB article 323388, at http://support.microsoft.com/kb/323388.

To get the WMI Explorer (PowerShell version), written by Marc van Orsouw, see http://powershell.org/wmi-explorer/.

The WMI Explorer (.NET-version) is available at https://github.com/vinaypamnani/wmie2/releases.

PSExec is available at https://docs.microsoft.com/sysinternals/.

Process Monitor can capture detailed process activity on Windows systems. https://technet.microsoft.com/sysinternals/processmonitor.aspx provides information and a download link.

NetDiag is a diagnostic tool that helps isolate networking and connectivity problems. For information, see http://technet.microsoft.com/library/Cc938980.

Netperf is a benchmarking tool that can be used to measure performance of many types of networking. It provides tests for both unidirectional throughput and end- to-end latency. For more information and to download the tool, see http://www.netperf.org/netperf/.

The Configuration Manager Toolkit is available at https://www.microsoft.com/download/details.aspx?id=50012.

Download the 7-Zip decompression utility at http://www.7-zip.org/.

Microsoft Security Compliance Manager (https://www.microsoft.com/download/details.aspx?id=16776) can be used to compare your systems against baseline Microsoft recommendations.

Troubleshoot port status issues using PortQry and PortQryUI, downloadable from http://www.microsoft.com/downloads/details.aspx?familyid=89811747-C74B-4638-A2D5-AC828BDC6983&displaylang=en and http://www.microsoft.com/downloads/details.aspx?FamilyID=8355E537-1EA6-4569-AABB-F248F4BD91D0&displaylang=en, respectively. Going to http://www.microsoft.com/downloads and searching for PortQry brings up links for each tool.

Orca is an MSI table editing tool you can use to view and change information in an MSI file. Information about Orca and where to download it is at https://msdn.microsoft.com/library/windows/desktop/aa370557%28v=vs.85%29.aspx.

SCUP is not included with ConfigMgr but is a separate and free download from Microsoft, available at http://www.microsoft.com/download/en/details.aspx?id=11940.

The Remote Server Administration Tools for Windows 8.1 (RSAT) can be utilized if using Windows 8.1 for your SCUP workstation. Download the tools from http://www.microsoft.com/download/details.aspx?id=39296.

XML Notepad 2007 is an intuitive tool for browsing and editing XML documents. Read about it at http://msdn2.microsoft.com/library/aa905339.aspx and download the tool from http://www.microsoft.com/downloads/details.aspx?familyid=72d6aa49-787d-4118-ba5f-4f30fe913628&displaylang=en.

Microsoft’s Configuration Manager Hybrid Diagnostics tool checks for a number of issues related to Intune integration. Download the tool at https://www.microsoft.com/download/details.aspx?id=53306.

Use the Microsoft Assessment Planning Toolkit (MAP) to help plan client agent deployment. MAP is available at http://www.microsoft.com/download/en/details.aspx?id=7826. For frequently asked questions on MAP, see http://social.technet.microsoft.com/wiki/contents/articles/1643.aspx.

At times, creating WMI queries can be quite cumbersome. A number of tools are available for free to help ease the process. Some popular ones follow:

WMI Code Creator: https://www.microsoft.com/download/en/details.aspx?displaylang=en&id=8572

WMIGen Code Generator: http://www.robvanderwoude.com/wmigen.php

RegKeyToMOF, which can assist in using hardware inventory to inventory a specific Registry key, is available at http://mnscug.org/images/Sherry/RegKeyToMOFv33a.zip. You can also read about this utility at https://www.enhansoft.com/blog/how-to-use-regkeytomof.