Windows Servicing Plans vs Task Sequences

On Twitter I asked the following to David James (Director of Engineering, ConfigMgr, Microsoft) and Johan Arwidmark (CTO @ TrueSec): https://twitter.com/DevSecNinja/status/1024927840138145793 For example, I have 3 device collections in SCCM that I call: “Windows 10 Feature Updates - Test” “Windows 10 Feature Updates - Pre-Production” “Windows 10 Feature Updates - Production” With ADRs, that’s quite simple. Just add the deployment to the Software Update Group in SCCM and you’re done. But I was wondering if that is supported in the Servicing Plan scenario too, as with a Servicing Plan you define the amount of days it will take after a build release, before SCCM will deploy the feature update to the collection. ...

04-08-2018 · 2 min · Jean-Paul van Ravensberg

PowerShell - Signed scripts "cannot be loaded because running scripts is disabled"

So you are signing your PowerShell scripts as a Best Practice from Microsoft. Good job! You’ve configured the PowerShell Execution Policy as AllSigned and you’ve created an application in SCCM where you run the signed script as: PowerShell.exe -File .\Script.ps1 The application installs just fine on your machine from the Software Center. During the Task Sequence, the application cannot be installed and in the Event Viewer. You’ll find the following error message: ...

06-12-2017 · 1 min · Jean-Paul van Ravensberg