HappySCCM

#sysctr #configmgr #sccm #memcm #automation Operating System Disrupter

[HappySCCM @HappySCCM]

#ConfigMgr #SCCM Toaster 🍞
SCToastNotification.exe "Title" "Message"

[HappySCCM @HappySCCM]

My relationship status with Sccm: It's complicated

[HappySCCM @HappySCCM]

Maybe Microsoft should just add the winpe addon to main ADK installer.

Maybe they should also just include dot net framework sources with Windows too

[HappySCCM @HappySCCM]

Making my own WDAC Wizard

[HappySCCM @HappySCCM]

Does secure boot and winpe work together?
I can't seem to get latest 24h2 fully patched winpe to boot when secure boot is enabled. What am I missing now
#configMgr #sccm

[HappySCCM @HappySCCM]

@dudezeon I think Sophos did it to us years ago

[HappySCCM @HappySCCM]

Why is Crowdstrike doing changes on a Friday

[HappySCCM @HappySCCM]

Ready for Monday

[HappySCCM @HappySCCM]

@dudezeon Don’t brick my joke as well

[HappySCCM @HappySCCM]

Short quick badly documented post on managing WDAC with scripts and deploying with CM for anyone that was interested🙂
https://t.co/18tiBNrRA1

[HappySCCM @HappySCCM]

This is how I do WDAC:
I have a base policy, then supplementals-ThirdParty, and soe.
I have 3 scripts
CreatetPolicy.ps1 Scans dir, spits out xml
MergePolicy.ps1 Merges all the policies ready to deploy
CreateApp.ps1 Creates folder with complied policy and app detection script

[HappySCCM @HappySCCM]

@imessage357_H Nah, just a quick read of the doco. I don’t know much about applocker so maybe not applicable to me. I use wdac and I just scan each apps folder - use certs, and hash as backup. I then remove, or create a new version xml per app, before merge policies.

[HappySCCM @HappySCCM]

This is how I do WDAC:
I have a base policy, then supplementals-ThirdParty, and soe.
I have 3 scripts
CreatetPolicy.ps1 Scans dir, spits out xml
MergePolicy.ps1 Merges all the policies ready to deploy
CreateApp.ps1 Creates folder with complied policy and app detection script

[HappySCCM @HappySCCM]

@imessage357_H Maybe I'm dumb but AaronLocker seems over engineered but probably great for him

[HappySCCM @HappySCCM]

I'm in Australia lol..

Is this happening elsewhere?

Last week Dubai

[HappySCCM @HappySCCM]

ChatGPT getting all ethical on me removing GPOs

[HappySCCM @HappySCCM]

@imessage357_H I don’t don’t what that is

[HappySCCM @HappySCCM]

@TheWMIGuy Will do when I get a minute

[HappySCCM @HappySCCM]

@richardhicks Tested their new internal fix, working.

For our secure devices - I needed to extract the setup files, allowlist them in WDAC, edit the vbscript to not run their EULA acceptance🫠