Windows 10 Servicing Plans – Running out of Space – Filtering Updates – Too many Languages #SCCM #ServcingPlans

A slightly odd ball title, but I wanted to cover off a few scenarios that seem to have plagued a few people in the past. Hopefully this article will help a few people. I was called into a client site as their distribution points and WSUS drives were constantly filling up. The culprit was misunderstood and therefore misconfigured Windows 10 Servicing Plans. The Issue If you haven’t run into this issue, let me have you imagine this scenario. You configured the Servicing Plan to download only the English packages. Unfortunately, you’re still downloading a lot of non-required and legacy...

Read More

Internal Client IP Address in the 411 Security Event Channel or in Azure AD Connect Health Service – #ADFS #WAP #Loadbalancer #AzureAD

ADFS is almost always configured with a part of it in the public facing DMZ and the server role in the corporate environment. If you’re using pure Microsoft technology for everything, it should just work, and your 411 events should show you the external IP. I’ve seen cases when using external load balancing where it appears that ADFS is working correct, but it probably isn’t working 100% correctly. For example, you always see the hardware load balancer’s IP in the 411. This is wrong and can easily be fixed! The Issue ADFS is fairly easy to deploy and configure,...

Read More

Promo Code for TechMentor Redmond – 500 bucks off EarlyBird- #TechMentor #StorageSpacesDirect

Hey Checkyourlogs Fans, I’ll be speaking at TechMentor, August 6-10 at Microsoft HQ in Redmond. Surrounded by your fellow IT professionals, TechMentor provides you with in-depth, immediately usable training that will keep you relevant in the workforce. I’ll be presenting the following sessions: · M03 – Workshop: Managing Windows Server with Project Honolulu (Windows Admin Center) · M05 – Workshop: Dave Kawula’s Notes from the Field on Microsoft Storage Spaces Direct · W06 – What’s New in Windows Server 2019 · TH17 – Running Hyper-V in Production for 10 years – Notes from the Field SPECIAL OFFER: As a...

Read More

Deploying Storage Spaces Direct Part 46 – Nuke-ClusterandS2D Factory Reset Script #PowerShell #StorageSpacesDirect

Hey Checkyourlogs Fans, Recently I have been working on a Storage Spaces Direct project with an amazing scripter and Dev/OPS admin named Sammy Shuck. He has taken the liberty to clean up the code in the Clear-SDSConfig.PS1.   As many of you know I love to use this script to factory reset Storage Spaces Direct Nodes. The source script can be found at the Technet Scripting Gallery. https://gallery.technet.microsoft.com/scriptcenter/Completely-Clearing-an-ab745947 The issue with this script is there isn’t much for logging included with it. So, what Sammy has done is added some additional warning contexts to the code and then generate...

Read More

Hyper-V to Stop Malware: Application Guard

For the fourth post in this series, we’re going to look at what’s probably my favourite new feature of Client Hyper-V: Windows Defender Application Guard. This is really cool, as it allows you to isolate the biggest threat to your machine…Surfing the web. Either manually or through defined policies, Microsoft Edge will launch its session inside a protected Virtual Machine that has no (or configurable, like copy/paste) access to the host computer or operating system. Any malware that inadvertently gets downloaded during the browsing session has zero access to the computer, and is automatically purged as soon as Edge is closed. Like Hyper-V itself, Windows Defender Application Guard is available to be installed as a Windows Feature. We enable it by first going to appwiz.cpl and clicking Turn Windows features on or off on the left-hand side. In the Windows Features window, scroll all the way to the bottom and you will find Windows Defender Application Guard. If you don’t see it, your version of Windows is no longer supported. As of Windows 10 1709, Enterprise edition is required to enable Windows Defender Application Guard, so if you don’t have that edition than it will be greyed out.  By 1803, Microsoft will allow you to implement Application Guard on Windows Pro, having recognized the large benefit to consumer users as well. If all is good, check the box to...

Read More

Microsoft Unveils MSIX to Streamline and Modernize Application Packaging

  Microsoft made a massive announcement at the Windows Developer Day keynote regarding the future of application packaging and installation for Windows 10. Microsoft has a deep history with Windows application installers, and the announcement revealed that they have finally worked out a way for software developers to package legacy and modern Windows applications for the Windows 10 platform with a single installer. The new package specification, named MSIX, provides a unified packaging format for Win32, Desktop Bridges, and Universal Windows Platform (UWP) applications. MSIX was built from the ground up to deliver complete containerization for Windows 10 applications....

Read More

Hyper-V for your passwords: Credential Guard

The third post in this series will start to look at how Hyper-V can be used to secure your Windows box. One of the things attackers will be on the hunt for is the stored username and password combination on your machine. These credentials get cached when you log on, in the format of a password hash, and introduces the need for something like Windows Defender Credential Guard. With this hash, attackers can pass it on to resources on your network in an attempt to determine access to critical and/or confidential data. When we enable Credential Guard, the user’s...

Read More

Hyper-V in Windows 10: Quick Create VMs from Template

In the previous post, I showed you how to get Hyper-V running on your Windows 10 computer. Next, we will create our first VM and then use it to quickly create additional VMs in the future. Before continuing, make sure you have an ISO of Windows 10, or if you have an SCCM or MDT environment, you can build a Hyper-V VM using that infrastructure. Step 1: Reference VM Creation If not still open from the last post, launch Hyper-V Manager. In the Action Pane, click New -> Virtual Machine… In the New Virtual Machine Wizard, click Next on...

Read More

Hyper-V in Windows 10: Initial Set-Up

Since the early days of Microsoft Virtual PC, there has been significant changes to the performance of Hyper-V, and the things we can do with it. Although the main function of Hyper-V is that of a hypervisor for virtualized server platforms, including it as part of the Windows 10 client not only gives you that functionality on your workstation, but also enables a bunch of cool features that utilize the virtualization components for things besides a ‘traditional virtual machine.’ At its core, Hyper-V utilizes Intel’s Virtualization Technology, which is a setting that is enabled in the BIOS/UEFI. We also...

Read More

Top Level Configuration Manager Collections

Having been through quite a few CM migrations over the past few years, one of the things that I have seen heavily used in previous versions is nested collections, which had a similar functionality in SCCM as nested groups in Active Directory. However, this option has been removed with CM12, leaving administrators to re-think their collection hierarchy practices. Proper folder management is a large part of that, especially in larger organizations, but top level collections are still just as important, if not more, in the new version of Configuration Manager. The main reason for this is that we use...

Read More

VEEAM TROUBLESHOOTING TIPS – ERROR CODE 32768 FAILED TO CREATE VM RECOVERY SNAPSHOT #VEEAM #MVPHOUR #WINDOWSSERVER

We built a new Windows Server 2016 S2D Cluster last week and moved all VMs from Windows 2012 R2 Cluster to new Windows 2016 S2D Cluster and Standalone Windows 2016 Hyper-V Server, everything looks awesome, they got better performance.
But when we tried to use Veeam backup and replication 9.5 with Update 3 to Back and replica VMs, all VMs are happy except two Windows Server 2012 R2 Active Directory Servers, they showed error message “Failed to create VM recovery checkpoint (mode: Veeam application-aware processing) Details: Job failed (”). Error code: ‘32768’. Failed to create VM recovery snapshot, VM ID ‘d2936ee7-3444-419e-82d9-01d45e5370f8’.Retrying snapshot creation attempt (Failed to create production checkpoint.)Task has been rescheduled”.

Read More

Server AntiVirus Exclusions in Configuration Manager

One of the reasons why I really like System Center Endpoint Protection is its ease of management. This goes double when we’re using it to manage servers, as we get to leverage all the stuff that Configuration Manager has in its database to target policies. By targeting Antimalware Policies to collections that are based upon dynamic variables, we create an easy to manage environment that automates the provisioning of exclusion and scan policies for new and existing servers. In this post I’m not going to get into the process of creating the exclusion policies. Microsoft has included templates for...

Read More

MVPDays V-Conf March Sessions – #MVPBuzz #MVPhour #Azure

Hey MVPDays Fans, Well we just wrapped up another fantastic MVPDays Virtual Conference a few hours ago. Our Post-Production Team (ME) has tirelessly worked to get this content up for you the community. The highlight of the show this month for me was the keen work of Kent and Jon from Microsoft (@Wearsy and @PNWAdventureGuy) on their Microsoft Flow Session. It was amazing… You can checkout the trailer for their session here: To watch the rest of the sessions here is your link to the post session playlist. https://www.youtube.com/playlist?list=PLW-BLrn2azoTIW3pxnZboGDTZHAxh-TRy We hope you really enjoy, Thanks, Dave and Cristal –...

Read More

Press Release – MVPDays + The Krewe Community Partnership @TheKrewe @MVPDays

Hey Checkyourlogs Fans, ***For Immediate Release *** This week at the annual Microsoft MVP Summit two great communities have come together in a partnership to share more great knowledge. “We are extremely excited to partner with The Krewe and their user community. The plan is to make the MVPDays series of Virtual Events, Books, and Media available to The Krewe’s membership. This will provide an exciting framework to continue our commitment of community first. We are also please to make our events available to Krewe members that are interested in public speaking. This will include mentorship, guidance and co-presentation...

Read More

Congratulations to Cary Sun our 6th MVP on CheckyourLogs #MVPBuzz @MVPAward

Hey Checkyourlogs Fans, I just wanted to reach out today and say congratulations to resident blogger Cary Sun. He has been blogging here at Checkyorlogs with some amazing content for the past 18 months and just yesterday was awarded the distinguished Microsoft MVP Award. This is a really big achievement and I couldn’t be prouder of him. I still remember when I first met Cary it was a few months after his family had moved from Taiwan in Vancouver, BC, Canada. (Wow Cary that was over 10 years ago now). His journey into contributing into the IT Community started...

Read More

Off to #MVPSummit in Redmond, WA #MVPBuzz @MVPAward

Hey Checkyourlogs fans, Next week marks my 7th trip to Redmond for our annual MVP Summit. This is the largest gathering of Microsoft Technical Community experts in the world. We get to have some fun, meet with the Product Teams, and learn all about the future from Microsoft. The graphic above shows where everyone is coming in from. I’m obviously with the North American (Canadian) delegation and we have friends coming from every part of the planet. Over 2000 MVP’s and Regional Directors are travelling from all over the world. 80 Countries in total for this amazing event. This...

Read More

How to Force a #SCCM Task Sequence to Fail

Task Sequences are used heavily in Operating System Deployment (#OSD), but they are also used to control the workflow of installing applications, migrations, updates and even patching. Just like any piece of work in the IT world, we need to go through a Dev, QA, Prod lifecycle while developing these. More often than not, even the simplest Task Sequence needs a little debugging. Perhaps in your own Task Sequence you’ve developed, or perhaps you inherited the Task Sequence.

Read More

BigDemo_DPM.PS1 #PowerShell #MVPBuzz #MVPHour

Hey Checkyourlogs fans,   Today I have commenced work on our newest book Deploying System Center Data Protection Manager featuring version 1801. As part of the book we are going to use once again, our BigDemo series of scripts to deploy the lab. I thought this time it would be fun to show off the script in action as I am building the environment necessary for the lab.   You can grab a copy of the scripts as I build them here: https://github.com/dkawula/Deploying-System-Center-Data-Protection-Manager-1801/blob/master/BigDemo_DPM.ps1   I Installed 2 x Domain Controllers, SCVMM, SCOM, S2D Nested Nodes and a Base Server...

Read More

Translate our Blog

Subscribe to our Blog

Authors

Microsoft MVP

MODE

Nutanix NTC

Veeam Vanguard

Follow me on Twitter

Follow @AllanRafuse on Twitter