ConfigMgr – Windows 10 Servicing – Step by Step

Today I would like to show you, how you can implement an Upgrade of a Windows 10 Installation through the Servicing Option.
I always think of two things, when I have to decide to use an Upgrade Task Sequence or the Servicing Model, and those are:

  • Do I want to use the Option that the clients will download the Windows 10 Sources from the Microsoft Update Servers?
  • When I use an Upgrade Task Sequence, I can copy most of the steps from the regular OSD Task Sequence
  • But for this blog post, I would like to show my setup for the servicing model.

    First of all, I have already written a post about the Update process in a slightly overview manner, you will find this post here: My old post

    The first step would be to determine which packages you would like to implement for the upgrade. Based on the fact, that I use English as base language, I will add the Feature on Demand (FoD) packages, and I will also add the feature package NetFx3. My Setup does also contain the German Langauge, which requires me to add the corresponding Language Pack and FoD Packages. The following picture shows the folder of my Packages which I want to include within the Windows 10 Installation:

    Continue reading

    ConfigMgr – Windows 10 Feature Update without a Task Sequence

    Today I would like to talk about the upcoming update cycles you have to do, when you are using Windows 10 Current Branch or Current Branch for Business. This means, if you have started to install Windows 10 1507 (which represents the first Windows 10 Release, some may call it also RTM) in spring of last year, you will be soon required to upgrade to a newer version of Windows 10. Also if you are using Windows 10 1511, with the upcoming creators update, the 1511 version of Windows 10 will be soon unsupported, following the official guidelines.
    winver.exe 1607 Continue reading

    Azure AD Domain Services – What you can do, and what you can’t do

    Since Microsoft has Released Azure AD Domain Services, many questions are coming up, and the top one of them might be: Can I join my Windows 10 Client through the internet to my Domain and receive Group Policies? No, you can’t.
    But besides this, there are other questions that remains to be answered, and I will try to do so.
    The first thing is to explain, what is required to get the Azure AD Domain Services (AAD DS) up and running:
    1. Create a group in Azure AD called “AAD DC Administrators”
    2. Create a VNET in Azure if not already existent
    3. Activate the AAD DS in the Azure Portal:
    Active Azure AD Domain Services
    4. Update DNS Settings for the specific VNET
    And now, you are ready to go, for a more detailed explanation refer to this Microsoft Article.

    Continue reading

    Windows 10 – Deploy Profile Picture to Logon Screen

    In my current deployment I wanted to get our fancy pictures from Active Directory to our Windows 10 Machines where it can be used for the logon screen and other places like start menu:
    Windows 10 Logon Screen User Picture

    First, I want to let you know, how I add the Picture to my user accounts. Well this is quite simple, I just use those two lines of Powershell:
    $userphoto = [byte[]](Get-Content "C:\temp\MYUserPic.jpg" -Encoding byte)
    Set-ADUser -Identity MYUserPic -Replace @{thumbnailPhoto=$userphoto}

    If this is done, and you have also Azure AD Connect in Place, your picture will be synced to Azure AD as well, and therefore the picture will show up in Office365. Mind that there are different recommendations for specific systems (Exchange, Office365, Skype for Business), but you can also use high-resolution images. See also this Microsoft Knowledgebase article for issues with pictures larger than 100kb: Technet Article Exchange Online Hybrid Image size
    Continue reading

    Windows and Local Administrator permission delegation

    In this post, I would like to explain, what my experiences and solutions for the delegation of local Administrator permissions are. In a Client deployment Scenario, you will often be asked for a solution to provide IT Professionals and maybe also end users with local Administrator permissions. I will point out the most useful solutions which I do prefer.

    1. Local Administrator Account
    2. Permanent Local Administrator permissions for IT Professional
    3. Microsoft Local Administrator Password Solution for spontaneous permission
    4. Local Administrator delegation based on group per client

    Continue reading

    ConfigMgr 1602 – Windows 10 Servicing “Error 3”

    Today I solved my Problem with the Service Plan of my Environment, it always ended up with the following Error in the Patchdownloader.log, this Log usually reside in “C:\Program Files\SMS_CCM\Logs”:
    windows 10 servicing error 3

    Failed to move C:\Windows\TEMP\CABD212.tmp to \\deheim.hosebei.ch\hosebeiDFSroot\Deployment\Packages\_UpdatePackages\20160116 - Win10x64\9a30f732-4d40-4b56-b86b-8253f80868a1.1\10586.0.160212-2000.th2_refresh_CLIENTENTERPRISE_VOL_x64fre_en-us.esd, error 3 Software Updates Patch Downloader 26.03.2016 19:16:01 7780 (0x1E64)
    Will retry in 5000ms Software Updates Patch Downloader 26.03.2016 19:16:01 7780 (0x1E64)
    Failed to move C:\Windows\TEMP\CABD212.tmp to \\deheim.hosebei.ch\hosebeiDFSroot\Deployment\Packages\_UpdatePackages\20160116 - Win10x64\9a30f732-4d40-4b56-b86b-8253f80868a1.1\10586.0.160212-2000.th2_refresh_CLIENTENTERPRISE_VOL_x64fre_en-us.esd, error 3 Software Updates Patch Downloader 26.03.2016 19:16:06 7780 (0x1E64)
    Will retry in 5000ms Software Updates Patch Downloader 26.03.2016 19:16:06 7780 (0x1E64)
    Failed to move C:\Windows\TEMP\CABD212.tmp to \\deheim.hosebei.ch\hosebeiDFSroot\Deployment\Packages\_UpdatePackages\20160116 - Win10x64\9a30f732-4d40-4b56-b86b-8253f80868a1.1\10586.0.160212-2000.th2_refresh_CLIENTENTERPRISE_VOL_x64fre_en-us.esd, error 3 Software Updates Patch Downloader 26.03.2016 19:16:11 7780 (0x1E64)
    ERROR: DownloadContentFiles() failed with hr=0x80070003 Software Updates Patch Downloader 26.03.2016 19:16:11 2800 (0x0AF0)

    Continue reading

    ConfigMgr – Create Device Collections based on Windows 10 Build

    Hey,

    You might come to the same spot, where you would like to split your Windows 10 devices into different collections based on the Windows 10 Version. I will show to you, how easy you can achieve that, but let me say first, that this could be implemented from Microsoft Out-Of-The-Box.
    If you are using System Center Configuration Manager Current Branch (CB) and Windows 10, you will have a nice Windows 10 Servicing Dashboard within your Software Library, to open it, just click on “Windows 10 Servicing” within the Software Library:
    Windows 10 Servicing Dashboard
    Continue reading