SCCM 1806- Enable PKI on Configuration manager.

In this article we will enable PKI feature in SCCM

Open Certificate Authority and Create a New Certificate Templates.

Right Click and Click on Manage.

Right click on Web Server and Click on Duplicate Template

Set the template name and Click Apply and OK

then Click on Workstation Authentication and Duplicate Template

Set the Name SCCM DP Cert and Select Validity Period and then

Click on Request Handling and Select Allow Private Key to be exported. Click Apply and OK.

Again Duplicate the Workstation Authentication.

Name it as SCCM Client Cert and Click Apply and OK.

Once you did that you need to enable this GPO Settings and Link this to Client.

Now open SCCM >Go to Administrators>Site Configuration>Sites> Select Site and Go to Properties.

Under Client Computer Communication Select HTTPS or HTTP and User PKI Client Certificate.

In the SCCM Servers and Site System Roles Go to Distribution Point Properties. Enable the HTTPS.

And Import PKI certificate.

Enable the Management Point properties HTTPS also.

And at the end you can enable the Software update point properties to use 8531 also require SSL Communication to the WSUS Server. Before you enable this setting . We need to set the Require SSL under IIS Manager for WSUS.

 

 

SCCM 1806 : How to Configure SCCM to user HTTPS\PKI Certificate

In Order to configure HTTPS\PKI Certificate . We need to install the Role

Go to Server Manager>Click on Manage>Click on Add Roles and Features> Then Select the Certification Authority and Install it.

Once you install this case We need to configure it also . Launch the Configuration for AD CS Configuration.Click Next with your Credential.

Click Next

Select the Enterprise CA and Click Next

Select the Root CA and Click Next.

Create a New Private Key and Select Next

Keep it default and click Next

Keep as default and Click Next

Set the validity and Click Next

Click Next on Below.

Click On Configure

And the Installation and Configuration of the AD CS Roles are done next article we will see how to Define Certificate authority for SCCM Server.

SCCM 1806 – Creating New Unattend Answer file and Make Package for Task Sequence.

In this article we will see how to create New unattend answer file for Windows 10 .

Open

Select the Wim File. Which you want to get an answer file.

Right Click and select New Answer File.

Go to Under component select Windows International Core and Add setting to Pass 4 Specialize.

Enter the language like “en-IN” and Save this file as unattend.xml .

Now we will create a SCCM Package and link this with Task sequence and click Next

Select Do not create Program and Click Next

Check the summary and click Next

Close it Now.

Distribute it now.

Click Next

Close it now.

Now open the Task Sequence and select this unttend.xml file in Apply Operating System steps.

 

 

SCCM 1806 -Creating Software Metering and Rules properties.

In this Article we will create Software metering for Notepad+

Go to Assets and compliance and Click on Software Metering rule and Create new rule.

Name the Software and Select the Setup.exe . Click Next

Check the Summary and Click Next

You will see the below screen once the creation done .

Now you can select the Notepad++ and Check the software metering properties also.

SCCM 1806 OSD- Task Sequence Variable Test Deployment.

In this article we will see how to perform Task sequence Variable test deployment.

Create a New custom task sequence

Specify the Name of the task sequence and Select boot image click Next

Check Summary and click Next

Once it finished close it

Select the task sequence and edit it put the command line.

“tools\x64\ServiceUI.exe” -process:TSProgressUI.exe C:\Windows\System32\cmd.exe

Now we will deploy it

Select the collection and Click Next

Make the Task sequence available for test Windows 10 clients and Click Next

Click Next

Click on Close and then You can login on Client to see the deployment.

Login on Client then you will see the task sequence appears.

 

SCCM 1806- To Cleanup Ccmcache via Configuration Baselines.

In this article we will create configuration item and Configuration baselines for CCM Cache cleanup

launch SCCM console –>go to Assets and compliance—right click on Configuration Items—create Configuration Item

Name the Configuration item and select Windows Desktop and Sever(Custom) and Click Next

Select windows 10 and click Next

Click on New

Provide name and Select setting type>Script and Data type>String> Click on Edit Script.

Edit Discovery Script and mention this script and Click ok

Click on Remediation Script and select this script. Click Ok

Click on Compliance Rules and click New

Specify the setting below. and click ok

You will see the below Compliance Setting

Click Apply and Ok and Click on Next

The Configuration Item has been successfully created.

Now we will create Configuration Baselines

Right click on Configuration Baseline and select Create configuration Baseline

Give a Name,description and click on Add Configuration Item

Select the configuration item and Click on Add and Click Ok

Click Ok and Now we will deploy this baseline on windows 10 collection.

Select the CCMCache Cleanup and Click on Deploy

Select the ccmcache Cleanup and Click on Add and Select the Remediate non Complaint rules when supported and Allow remediation outside the maintenance window

Select the collection for this configuration baseline deployment and Click Ok

 

SCCM 1806- Schedule Windows Update Directly on Operating System Image File.

In this article we will see how to schedule updates for Operating system images directly and it will get that updates during OSD deployment.

Open SCCM Console>Go to Software Library> click on Operating System Images

Select the Operating System Image and Click on Schedule Updates in the Ribbon.

Select the update and Click Next

You can specify the update schedule and Click Next

Check the Summary and Click Next.

You will see the progress status

Once the Schedule updates wizard completed you will see the below screen. Click on Close.

 

SCCM 1806 OSD- Install an Existing Image Package

In this article we will look how to create Basic Task Sequence> Install an Existing Image Package.

Open Sccm Console>Go to Software Library> Under Operating System> Select task Sequence. Right Click and click on Create Task Sequence.

.

Select the Install an Existing Image Package and click Next

Provide the Task sequence Name “Basic Task Sequence” and Select the Boot Image Like We selected X64 .

Once you selected both Click Next

Select the Operating system Image package and you can Uncheck the Bitlocker also and Click Next

Select the Workgroup and Click Next

Select the Configuration manager Client Package and click Next.

We do not need to select the Capture user setting and files here and  Click Next.

Do Not select the Include updates and click Next.

Do not select any application and Click Next.

You can review the Summary and Click Next.

Once you did that you will get this successful message. click on Close.

You can select the Task Sequence and Click on Edit

You will see all step in the task sequence that is Basic one. In Future we will explain the nested task sequence.

 

SCCM 1806 OSD- Capture Media From ConfigMGR

In this article we will see how to make Capture Media from SCCM 1806.

Open SCCM Console > Go to Software Library > Operating Systems> Task Sequences.

Select the Capture Media and Click Next

Browse the Network Location and Savve CaptureMedia_Test.iso

Click Next once you did with that.

Select the Boot image file and Select Distribution Point

Click Next once you did selection.

You can review the Summary and Click Next

You can check the Completion message and close it.

You will find the CaptureMedia_Test.iso file on the network location .

Now you need to connect it to client computer from which we need to “capture” image from (make sure you have no recovery partition or sysprep will fail),make sure client computer is not domain joined,browse the media and click “launch media”

SCCM 1806 – To Enable and Configure BranchCache for this Distribution Point

In this article we will have a look to Enable and configure BranchCache for Distribution Point.

Open SCCM Console>Go to Administrator> Select Distribution Points >

Select Distribution Point and Click on Properties in the Ribbon tab.

Select the Enable and Configure Branch Cache for this Distribution Point.

Click Apply and Ok .