Pocket Guide to Surface Driver Integration in Configuration Manager (SCCM)

Go to https://learn.microsoft.com/en-us/surface/manage-surface-driver-and-firmware-updates and find the appropriate download link for your model. Create the folder that you want to place the drivers in, for example D:\Sources\Drivers\Win10\Microsoft\SurfaceLaptop5 Run the msiexec command to place the drivers in that folder:  msiexec /a SurfaceLaptop5_Win10_19044_22.102.17126.0.msi targetdir=C:\Sources\OSD\Win10\Driver\Microsoft\SurfaceLaptop5 Now go to the ConfigMg console, navigate to Software Library -> OSD and open… Read More »

Pocket Guide to Office 365 Monitoring in Microsoft Endpoint Manager (SCCM)

With the critical vulnerabilities in Word (CVE-2023-21716) and Outlook (CVE-2023-23397) the update status of Office 365 has come into focus. The easiest way to check the version status is to go to \Software Library\Overview\Office 365 Client Management in the console. The dashboard behaves a bit beastly but if you succeed to get it loading it… Read More »

Save mail attachments with PowerShell

The following step-by-step guide should enable you to automate the process of downloading attachments from an O365 mailbox to a folder. Be aware that this gives access to any mail account that you enter in the code below, therefore don’t just consider functional aspects but also the security of your environment. You should also be… Read More »

Clean up unused Hyper-V disks with PowerShell

At times, you may find that orphaned vhdx and avhdx files are filling up your physical disk. You may have deleted the virtual machines in the Hyper-V console earlier, but their disks were never cleaned up. The script below lists all vhdx and avhdx files in a certain location and checks in Hyper-V if they… Read More »

Add x86 images after ADK update to 22621 (Windows 11 22H2)

With the ADK for Windows 22H2, Microsoft has dropped support for x86 images. When you try to add or update an x86 image in ConfigMgr you’ll get an error. The workaround is simple: Locate the PE image in the ADK installation folder (usually C:\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\Windows Preinstallation Environment), copy the amd64… Read More »

Setting Wallpaper, Lock Screen, Registered Owner with Intune

The solution below will apply customizations to the clients that are mandatory, which means in particular that the user will not be able to change the wallpaper on his machine. See the links below if you just want a pre-configuration that allows the user to change settings. You must provide a 1920×1200 image which will… Read More »

Powershell script to check if Azure AD Connect is affected by the vulnerability described in CVE-2021-36949

The script below will check if your Azure AD Connect is running a version affected by the vulnerability described in CVE-2021-36949. Affected versions are and #Disclaimer: This script is provided as-is with no warranties of any kindWrite-Host “Checking if your Azure AD Connect version is affected by the vulnerability described in CVE-2021-36949″Try{$params =… Read More »