Kent Agerlund

About Kent Agerlund

Microsoft Regional Director, Enterprise Mobility MVP. Microsoft Certified Trainer and Principal consultant. I have been working with Enterprise client management since 1992. Co-founder of System Center User Group Denmark in 2009. Certified MCITP: Enterprise Administrator, MCSA+Messaing, and much more. Member of: Microsoft Denmark System Center Partner Expert Team The Danish Technet Influencers program System Center Influencers Program.

Managing WIFI certificates for iOS devices with ConfigMgr MDM

This will be the last Christmas blog post from Coretech in 2014. A huge thanks to all of you who followed our Christmas blogs in December. @Coretech we wish you and your loved ones a Merry Christmas and a Happy New Year – We look forward to service you again in 2015 with knowledge, inspiration and best practices on Microsoft technologies One of the many need features offered by ConfigMgr & Intune is the ability to deploy certificates and WIFI profiles. Both are essential when implementing a MDM/BYOD strategy. Creating the required SCEP certificate for iOS As mentioned in a [...]

By | 2014-12-23T14:09:31+00:00 December 23rd, 2014|Configuration Manager (SCCM), General info|3 Comments

System Center 2012 ConfigMgr Dashboard– Because we want you to look smart

Do you know the feeling when it feels like you have lost your head and can’t find the information your need? You start browsing the 468 canned reports and quickly spend a couple of hours still without finding exactly what you need. @ Coretech we know the feeling, but instead of keep being frustrated we decided to do something about it. Our solution is a System Center 2012 dashboard where we can see all the information we need in an easy way. Our dashboard will provide you with information in 3 layers and 3 dimensions….it sounds smart and Yes, it [...]

By | 2014-12-16T11:59:32+00:00 December 16th, 2014|Configuration Manager (SCCM), General info|3 Comments

Why System Center Updates Publisher aka SCUP is still a great tool

Welcome to the Coretech x-mas blog Calendar where we will give you a little insiders tip every single day in December.   Even if I don’t deploy 3rd party updates with SCUP 2011 I still use the tool for two purposes. I always upgrade my ConfigMgr clients and consoles to the latest CU using the built-in cab files. This allow me to use my existing software updates collections and I don’t have to worry about specific platforms since the detection rules in SCUP will take care of that. You can find the cab files on the site server in %Program [...]

By | 2014-12-01T08:56:43+00:00 December 1st, 2014|Configuration Manager (SCCM), General info|1 Comment

Upgrading ConfigMgr 2012 R2 Primary site server from Windows Server 2012 to Windows Server 2012 R2

Maybe my most boring blog post ever, but just finished upgrading the primary site server from Windows Server 2012 to Windows Server 2012 R2. After the upgrade I performed a ConfigMgr Site reset (not required, but just in case). Testing out the different features and all but one looked to be doing just fine. The only feature that didn’t work was the Software Update feature. A quick look in the wsyncmgr.log file revealed that the server wouldn’t synchronize between the primary site server and the WSUS server. Sometimes the solution is just too easy and almost not even worth blogging [...]

By | 2014-11-29T20:50:33+00:00 November 29th, 2014|Configuration Manager (SCCM), General info|2 Comments

Why do my ConfigMgr clients not report having the new CU3 installed?

Recently I had to deploy CU3 to a lot of clients and I ran into a funny issue. After a couple of days I only saw about 10-15% of the clients reporting the new CU3 being installed although my CU3 packages seemed to be running fine and hitting almost 90% of all clients in the organization.   It turned out that our Heartbeat discovery was configured with the default settings which is “run every 7 days”.     The heartbeat discovery data generated on each client is only about 10-12 kb in size and contains information about the client version. [...]

By | 2014-11-28T13:27:25+00:00 November 28th, 2014|Configuration Manager (SCCM)|1 Comment

Device based vs User based MDM policies in ConfigMgr 2012 R2

With ConfigMgr and Intune you have long been able to manage devices like Android, iOS and Windows with mail profiles, security settings, Wi-Fi profiles and VPN profiles. Deployment of those profiles has undergone a fundamental change with the release of ConfigMgr R2 and CU3. To understand those changes you first to understand how policies were deployed in the past. Back in the old days “prior to R2 CU3” On the ConfigMgr side, even if you deployed policies to a user it would always be deployed to the device. What happened in the background the policy generated would not be generated [...]

By | 2014-11-26T15:02:42+00:00 November 26th, 2014|Configuration Manager (SCCM)|1 Comment

Slides and links from my session @Techdays in Sweden

As always thanks for attending and for making speaking in Stockholm being a fun thing to do. As promised during the session here are the links to the blog posts I mentioned, the script I used and the slide deck. Autmating the WSUS Cleanup process http://blog.ctglobalservices.com/kea/house-of-cardsthe-configmgr-software-update-point-and-wsus/ SQL PowerShell audit script http://stevethompsonmvp.wordpress.com/2014/05/19/powershell-sql-audit-script/ Splitting existing ConfigMgr database into multiple SQL files http://myitforum.com/cs2/blogs/jnelson/archive/2009/07/27/140199.aspx Pre-creating the database before installing Configmgr – download script Post 2012 CU2 hotfix to speed up user policies in hybrid MDM scenarios - https://support.microsoft.com/kb/2994331 Management point replicas - http://blog.ctglobalservices.com/kea/working-with-database-replicas-on-your-management-point/ Multiple software upate points and shared db - http://blogs.msdn.com/b/steverac/archive/2013/02/07/configuring-multiple-software-update-points-in-a-configmgr-2012-primary-site-what-to-expect.aspx Slide deck  [...]

By | 2014-11-22T13:17:49+00:00 November 22nd, 2014|Configuration Manager (SCCM), Events|1 Comment

Coretech System Center Dashboard

I’m proud to announce our System Center dashboard with the Configuration Manager 2012 connector. What is the dashboard Coretech’s System Center dashboard with the Configuration Manager 2012 connector enables enterprise client management administrators to make the right decisions at the right time. The dashboard can provide status on deployments, compliance, mobile devices and client health. The Dashboard also provides accurate information that supports continuous improvements in client management. The primary goal of our Dashboard is to communicate information clearly and efficiently to both administrators and management. At Coretech we know that effective visualization gives you the information needed to analyze [...]

By | 2017-08-22T10:13:35+00:00 November 12th, 2014|Configuration Manager (SCCM), Dashboard|7 Comments

Troubleshooting Certificate deployment on iOS devices with ConfigMgr & Intune

Last week I had an issue trying to enroll certificates thru ConfigMgr/Intune via NDES on iOS devices. The enrollment worked like a charm on Windows Phone 8.1 devices. The error I got in the crp.log file (Certificate Reqistration Point component) was key usage in CSR 160 and challenge 224 do not match To fix the issue you have to modify the certificate NDES General Purpose certificate template and remove Signature in proof of origin. You will find the property in Extensions After that iOS devices started appying the certificates.

By | 2014-11-11T15:29:49+00:00 November 11th, 2014|Configuration Manager (SCCM)|0 Comments

Using Server V.Next as a ConfigMgr 2012 R2 CU3 site system role

Does it work? Sure it does, is it supported? – No way In my test I deployed the new Windows Server Technical Preview 9841, installed the distribution point, management point and software update point requirements. Here you see the distmgr.log file distributing content to my cm03.corp.viamonstra.com distribution point – notice the server version number. Windows 10 client downloading from the Server vNext distribution point Management Point works like a charm Application Catalog point running from a Windows 10 client Software update point configured as the second SUP works. The SUP is installed using the same shared database as my Windows [...]

By | 2014-10-02T12:07:20+00:00 October 2nd, 2014|Configuration Manager (SCCM)|0 Comments

Windows 10 as ConfigMgr 2012 R2 client

No, the client is not supported and yes it works with most of the features. In my case I used Jason Sandy’s startup script to get my client installed. Here is a few screenshots of what I have tested so far: Client is installed and assigned The Application Catalog feature works Application and package deployment works like a charm Compliance Settings tested and working Inventory works Software Update scanning works OS deployment works – just check the blog post from Johan Arwidmark - http://www.deploymentresearch.com/Research/tabid/62/EntryId/192/Beyond-unsupported-Deploying-Windows-Technical-Preview-with-MDT-2013.aspx

By | 2014-10-02T11:45:29+00:00 October 2nd, 2014|Configuration Manager (SCCM)|1 Comment

Links and downloads from SCU 2014 in Basel

Below is a list of the links and scripts that I used in my two sessions today on Compliance Management and Troubleshooting ConfigMgr. Compliance examples – download Configuration Manager Support Center: http://www.microsoft.com/en-us/download/details.aspx?id=42645 Microsoft System center 2012 R2 Configuration Manager Toolkit: http://www.microsoft.com/en-us/download/details.aspx?id=36213 Optimizing ConfigMgr database: http://stevethompsonmvp.wordpress.com/2013/05/07/optimizing-configmgr-databases/ Background on maintenance task: http://stevethompsonmvp.wordpress.com/2013/04/19/how-to-determine-if-the-configmgr-rebuild-indexes-site-maintenance-task-is-running/ Configuring SQL Backup and recovery, includes link to demo: http://stevethompsonmvp.wordpress.com/2014/02/24/configmgr-2012-site-backup-and-recovery-overview/ Autmating the WSUS Cleanup process http://blog.ctglobalservices.com/kea/house-of-cardsthe-configmgr-software-update-point-and-wsus/ SQL PowerShell audit script http://stevethompsonmvp.wordpress.com/2014/05/19/powershell-sql-audit-script/ Splitting existing ConfigMgr database into multiple SQL files http://myitforum.com/cs2/blogs/jnelson/archive/2009/07/27/140199.aspx Pre-creating the database before installing Configmgr – download script SQL Script to for fragmentation on the SQL DB   Checking [...]

By | 2014-09-19T18:30:27+00:00 September 19th, 2014|Configuration Manager (SCCM), General info|4 Comments

Scripts and links from the ConfigMgr 2012 Site Review session @IT/Dev connections

A big thanks to all who showed up at our session, Steve and I had a fantastic time and could easily have gone on for 75 more minutes Below are the links to the scripts and blog post we referenced during the session. Hope to see you all again next year! Optimizing ConfigMgr database: http://stevethompsonmvp.wordpress.com/2013/05/07/optimizing-configmgr-databases/   Background on maintenance task: http://stevethompsonmvp.wordpress.com/2013/04/19/how-to-determine-if-the-configmgr-rebuild-indexes-site-maintenance-task-is-running/   Configuring SQL Backup and recovery, includes link to demo: http://stevethompsonmvp.wordpress.com/2014/02/24/configmgr-2012-site-backup-and-recovery-overview/   Autmating the WSUS Cleanup process http://blog.ctglobalservices.com/kea/house-of-cardsthe-configmgr-software-update-point-and-wsus/ SQL PowerShell audit script http://stevethompsonmvp.wordpress.com/2014/05/19/powershell-sql-audit-script/

By | 2014-09-18T11:58:08+00:00 September 18th, 2014|Configuration Manager (SCCM), General info|1 Comment

Links from the ConfigMgr 2012 R2 precon @IT/Dev Connections

Thanks for a great day @Aria in Las Vegas. As promised here are the links we (@Jarwidmark and @Agerlund) mentioned during our preconference: Pre-creating the database using this script SQL backup and restore http://stevethompsonmvp.wordpress.com/2014/02/24/configmgr-2012-site-backup-and-recovery-overview/ Software Update Report dashboard rdl file Software Update step-by-step: http://blogs.technet.com/b/gary_simmons_mcs/archive/2013/12/09/creating-a-custom-report-for-system-center-2012-r2-configuration-manager-part-1.aspx PowerShell Script to set permissions in Active Directory for OSD http://www.deploymentresearch.com/Research/tabid/62/EntryId/160/PowerShell-Script-to-set-permissions-in-Active-Directory-for-OSD.aspx Hydration for System Center 2012 R2 http://www.deploymentresearch.com/Research/tabid/62/EntryId/149/The-Hydration-Kit-for-System-Center-2012-R2-is-available-for-download.aspx Script for Deploying a reference image (VM) fully unattended http://www.deploymentresearch.com/Research/tabid/62/EntryId/172/Deploying-a-reference-image-VM-fully-unattended.aspx Link to Jason Sandy's startup script for ConfigMgr Client: http://blog.configmgrftw.com/configmgr-client-startup-script/ Video - Compliance Settings and Control End–User Installed Software http://channel9.msdn.com/Events/MMS/2013/UD-B307 Coretech Configuration Manager shutdown utility http://blog.ctglobalservices.com/kea/configuration-manager-shutdown-utility/ How to [...]

By | 2014-09-17T14:41:21+00:00 September 17th, 2014|Configuration Manager (SCCM)|1 Comment

House of Cards–The ConfigMgr Software Update Point and WSUS

A Card house; fun to build but not very solid and when one card falls the whole house often goes down with it. It’s a little like that with the WSUS server and Configuration Manager. Installing WSUS seems so easy but there are still some moving part, and if you get one of the wrong maybe the whole House of Cards falls. Recently I have seen that happen at several customers. This blog post is divided into 3 parts: 1. Introduction 2. Problem overview and symptoms 3. Solutions to fix issues and avoid it in the future Let’s start by [...]

By | 2014-09-10T14:38:25+00:00 September 10th, 2014|Configuration Manager (SCCM), General info|45 Comments

3rd party updates & Compliance using Secunia and System Center 2012 ConfigMgr

This is the 3rd and final post in my series of Secunia CSI and System Center 2012 Configuration Manager integration. Part 1 focused on installing and configuring, Part 2 focused on deploying and installing 3rd party software updates. This blog post will introduce you to the monitoring options in the product. You can monitor compliance in either ConfigMgr or in Secunia CSI. The difference between the two is ConfigMgr will only show you compliance about the updates you have published to WSUS where CSI will list compliance for all applications found on the systems. Tracking compliance in CSI In CSI [...]

By | 2014-09-05T14:33:47+00:00 September 5th, 2014|Configuration Manager (SCCM)|0 Comments

ConfigMgr 2012 Evaluation version expired

So what actually happens when an evaluation version expires? You will notice a few things, like the ConfigMgr administrator console very clearly tells you it expired. As you can see from above you will still be able to open the console but only with Read permisions. Trying to perform actions via PowerShell will give you an error saying that you don’t have the proper permissions: Looking in the SMS provider log file (smsprov.log) you will also see errors indicating the lack of permissions. You will also notice that both the SMS Executive Service and Site Component Manager service is not [...]

By | 2014-09-01T13:44:46+00:00 September 1st, 2014|Configuration Manager (SCCM), General info|3 Comments

Managing 3rd. party Software Updates with System Center 2012 ConfigMgr & Secunia CSI Part II

In Part I focused on installing and configuring Secunia CSI 7 and System Center 2012 R2 ConfigMgr. In this part I will explain how you can deploy software updates. I do anticipate that you already have a working Software Update Management infrastructure managed by System Center 2012 R2 ConfigMgr. Deploying 3rd party software updates The process of deploying 3rd party software updates can be initiated from the CSI web portal or using the System Center 2012 R2 ConfigMgr plugin. In my world updates are divided into two categories: Applications managed and supported by the organization. In this category I often [...]

By | 2014-08-27T11:51:02+00:00 August 27th, 2014|Configuration Manager (SCCM), General info|1 Comment

Follow up questions from my 3rd party software update webinar

As promised here are the follow up questions we didn’t time to cover during the 60 min webinar - https://www.brighttalk.com/webcast/8113/116381 Q & A from the webinar Q1 When you have applied an update for Flash e.g., how do you repair that version if the application gets broken? Repair so it reverts back to "old" version or can the updated version be repaired?A1 Traditionally you are deploying the applications from ConfigMgr and the updates thru CSI. Unless you update the application/package in ConfigMgr then you have to install the old version and upgrade it again. Another option is to republish the [...]

By | 2014-08-21T16:32:01+00:00 August 21st, 2014|Configuration Manager (SCCM)|0 Comments

Managing 3rd. party Software Updates with System Center 2012 ConfigMgr & Secunia CSI Part I

Question if often get when visiting customers;”Is there really a need for managing our 3rd. party applications when we already patch Adobe Reader and JAVA”? The short answer is Yes, and the longer answer is please look at the numbers. The absolute number of vulnerabilities detected in 2013 was 13,073, discovered in 2,289 products from 539 vendors. The number shows a 45% increase in vulnerabilities in the five year trend, and a 32% increase from 2012 to 2013. Knowing these numbers I get the feeling that only patching Adobe Reader and JAVA is not enough to keep my environment secure. [...]

By | 2014-08-21T12:30:07+00:00 August 21st, 2014|Configuration Manager (SCCM), General info|0 Comments

Collections not being refreshed in ConfigMgr 2012 R2

Case, old collections do not refresh when adding or removing objects to the collection. New collections are updated, it just takes a long time. Looking in the colleval.log file there was a lot of errors like this: *** exec dbo.sp_TransferMembership 'PS100014', 0    SMS_COLLECTION_EVALUATOR    02-06-2014 23:14:36    7392 (0x1CE0) *** [23000][547][Microsoft][SQL Server Native Client 11.0][SQL Server]The INSERT statement conflicted with the CHECK constraint "ClientOfferStatus_ItemKey_Partition_CK". The conflict occurred in database "CM_PS1", table "dbo.ClientOfferStatus", column 'ItemKey'. : CollectionMembers_ins_upd_del    SMS_COLLECTION_EVALUATOR    02-06-2014 23:14:36    7392 (0x1CE0) CCollectionSource_SQL::RefreshResults - could not execute SQL cmd exec dbo.sp_TransferMembership 'PS100014', 0    SMS_COLLECTION_EVALUATOR    02-06-2014 23:14:36    7392 (0x1CE0) STATMSG: ID=601 SEV=E LEV=M SOURCE="SMS [...]

By | 2014-06-03T12:26:49+00:00 June 3rd, 2014|Configuration Manager (SCCM)|7 Comments

Links and notes from the MVP Expert Session @TechED 2014 Houston

One word – Awesome! Attending the MVP Expert session along with 1000 attendees as speaker was nothing short of an awesome experience. For those of you who couldn’t attend session, you can catch the recording here: http://channel9.msdn.com/Events/TechEd/NorthAmerica/2014/PCIT-B410#fbid= The scripts I used The collection/Excel tool

By | 2014-05-13T16:10:07+00:00 May 13th, 2014|Configuration Manager (SCCM), Events|10 Comments

Links and notes from the “ConfigMgr in the Real World” precon @ TechEd NA 2014

First a huge thanks to the 341 attendees showing up at the precon, you all contributed to making this a day to remember for both Johan and I. By now we should have answered all questions that was posted to #TEPRC10 on Tweeter. Precon links from Johans blog: http://www.deploymentresearch.com/Research/tabid/62/EntryId/173/Links-from-ConfigMgr-2012-R2-preconference-at-TechEd-2014-NA.aspx Pre-creating the database using this script Checking the database fragmentation: Use CM_PS1 Go SELECT DB_NAME(database_id) AS [Database Name], OBJECT_NAME(ps.OBJECT_ID) AS [Object Name],     i.name AS [Index Name], ps.index_id, index_type_desc,     avg_fragmentation_in_percent, fragment_count, page_count FROM sys.dm_db_index_physical_stats(DB_ID(),NULL, NULL, NULL ,N'LIMITED') AS ps     INNER JOIN sys.indexes AS i WITH (NOLOCK)     ON ps.[object_id] [...]

By | 2014-05-13T15:36:49+00:00 May 13th, 2014|Configuration Manager (SCCM), Events|3 Comments