Collect your drivers and export them to a share

Last week I saw a really interesting Tweet from Adam Eaddy mentioning his blog where he had published a automated way to build Configuration Manager Driver Packages automatically by collecting drivers from a remote PC. The script worked great, but I missed the nice folder structure to keep the drivers nice and ordered. I tweaked his script a bit, so it would fit my needs.

This PowerShell script collects the drivers (in a nice manufacturer\model\version\arch structure) and copies them to a network share. This makes it possible to use your own Configuration Manager driver import script (or import them manually) or even use them in your MDT configuration.


# NAME: CollectDrivers.ps1
# AUTHOR: Helmer Zandbergen
# DATE  : 04/24/2016
# COMMENT: This script detects driver of the current machine it is run on and
#          exports them to location mentioned in the parameter $SHARENAME
# VERSION : 1.0
# 1.0 (26-apr-2016)- Initial Script.
# USE : .\CollectDrivers.ps1 "\\Servername\Share\Driver\location"
Param (

[Parameter(Mandatory=$True, Position=0)]

#Do not change these!
$COMPMANUFACTURER=(Get-WmiObject -Class win32_computersystem).Manufacturer

    $COMPMODEL=(Get-WmiObject -Class win32_computersystemproduct).version
	$COMPMODEL=(Get-WmiObject -Class win32_computersystem).Model

$OSVER=(Get-WmiObject -Class win32_operatingsystem).Caption
$OSARCH=(Get-WmiObject -Class win32_operatingsystem).OSArchitecture

Write-Host ""
Write-Host "Manufacturer: $COMPMANUFACTURER"
write-host "Model: $COMPMODEL"
Write-Host "OS Version: $OSVER ($OSARCH)"
Write-Host ""
Write-Host "I'm currently..."
#$ScriptBlock = { param($SHARENAME)
#Get Drivers
Set-Location C:
$SDrivers = Get-ChildItem -Path $SDriverSource -Include *.inf -Recurse

#End of declarations
#Export the drivers to a temp directory
If (Test-Path $NEWLOGFILE){
Write-Output "This script has been cancelled because it has already completed on this device." | out-file $NEWLOGFILE -Append
Write-Host "This script has been cancelled because it has already completed on this device."
Write-Host "* Exporting drivers to temporary location."
Export-WindowsDriver -Destination "$DRIVERPATH\$COMPMANUFACTURER\$COMPMODEL\$OSVER\$OSARCH" -Online | out-file $LOGFILE
#Copy Drivers to Driver Share
Write-Output "This Copy has been cancelled because it has already completed for this device." | out-file $NEWLOGFILE -Append
Write-Host "This Copy has been cancelled because it has already completed on this device."
Write-Host "* Copying drivers to destination share."
copy-item $DRIVERPATH'\*' -Destination $SHARENAME -Recurse
#Cleanup Temp directory
Write-Host "* Cleaning up temporary location."
Remove-Item "$UTEMP\Drivers"-Recurse
Write-Host ""
Write-Host "* Done!"
Write-Host ""

Note : you have to run the script as an Administrator.

Please let me know what you think!

Upgrading SCCM 2012 R2 to ConfigMgr 1602


A customer wanted to upgrade his current Windows 7 Enterprise devices to Windows 10. Right now he was running SCCM 2012 R2, so before I can start creating a Windows 10 task sequence first there some ConfigMgr upgrading has to be done. I started by downloading the SCCM 1511 bits, Windows ADK 10.0 (not the 1511 version!) and the HP WinPE 10.0 driver pack (since the customer is running HP devices only).

When all the bits were downloaded, the upgrade process can start!

Continue reading “Upgrading SCCM 2012 R2 to ConfigMgr 1602”

The April Intune Update

The Microsoft Intune team is always working on new features and service enhancements. This month they are introducing some new features that allow you to manage apps and devices with a higher level of control:

  • Block contact sync from Outlook app to device (for iOS): New Mobile Application Management (MAM) controls allow you to prevent a user from syncing Outlook contacts to the native address book on iOS devices, and  provide you with the ability to remove contacts that have already been saved to the native address book when you perform a selective wipe of the device.
  • Conditional Access support for Skype for Business Online: New conditional access policies allow you to restrict access to Skype for Business Online to only managed and compliant iOS and Android devices.
  • Manage Windows Defender on Windows 10 PCs: The Windows 10 general configuration policy now includes settings to manage Windows Defender on enrolled Windows 10 PCs.

Source : The Microsoft Intune Blog

Microsoft Deployment Toolkit 2013 Update 1 Has Arrived!


We had to wait a couple of week (since the launch of Windows 10), but it’s finally there : MDT 2013 Update 1!

At the moment (August 19th) it’s not yet available at



……… but Aaron has put a nice blogpost together over at the /MSDeployment Blog.


“The Microsoft Deployment Toolkit (MDT) 2013 Update 1 is now available on the Microsoft Download Center. This update requires the Windows Assessment and Deployment Kit (ADK) for Windows 10, available on the Microsoft Hardware Dev Center. (Scroll to the bottom of the page to the section, “Customize, assess, and deploy Windows on your hardware.” The page also includes other Windows kits; remember for deployment you only need the Windows ADK for Windows 10.)

Significant changes in MDT 2013 Update 1:

  • Support for the Windows Assessment and Deployment Kit (ADK) for Windows 10
  • Support for deployment and upgrade of Windows 10
  • Support for integration with System Center 2012 R2 Configuration Manager SP1 with the Windows 10 ADK (see this post on the Configuration Manager Team blog for more information on using the Windows 10 ADK with Configuration Manager)

Here is a more detailed list of some specific changes in this release:

  • Support for new Enterprise LTSB and Education editions of Windows 10
  • Support for modern app (.appx) dependencies and bundles
  • Improved support for split image files (.swm)
  • Switched to using DISM for imaging processes (instead of deprecated ImageX)
  • Deployment Workbench revisions for deprecated content
  • Enhanced accessibility within the Deployment Workbench
  • Revised lists of time zones, regions and languages in the Deployment Wizard
  • Removed Start menu shortcut for “Remove PXE Filter”
  • Several MVP recommended fixes for Windows Updates, password handling, and PowerShell cmdlets
  • Added missing OOBE settings to Unattend.xml
  • Unattend.xml default screen resolution changed to allow for automatic scaling
  • Updated task sequence binaries from System Center 2012 R2 Configuration Manager SP1
  • New GetMajorMinorVersion function for integer comparison of Windows version numbers

We are still working to update the MDT documentation on TechNet, so in the short-term will use this blog to share any additional necessary information regarding this release.”

Moving MDM from Intune to Office 365 *update*

For years I’ve been a Office 365 user and earlier this year and every few months (of sometimes weeks Knipogende emoticon ) new features arrive in the Office 365 Management Portal. Since a couple of months it’s possible to do some (basic) MDM stuff with Office 365.

Since I’m a big fan of Microsoft Intune I prefer to use Intune to do my Mobile Device Management, but sometimes the MDM capabilities will do. In my demo environment I was using Intune, but if I want to switch my MDM Authority to Office 365 there is (at this moment) no automated way to do this.



To change the MDM Authority you have to contact Intune Support (thanks to Henk Hoogendoorn for the tip) to let them flip the switch for you. The procedure is quiet easy, just follow the steps on the Intune Support website.

  • First you have to select the correct problem type (Service Administration), after which you can select the category Reset mobile device authority. When you click the Start Request button just follow the wizard to create the change.


  • A few moments after you submitted the incident you will receive a confirmation email (check the email address you enter during the process).


  • Next up is an email with some questions you should answer. The support engineer would like you to confirm your tenant ID, asks you to retire all devices and remove some stuff from the Intune Admin Console.


  • After I send the confirmation and answering the asked questions a few hours later I received another email stating that the request have been submitted to the engineers. It also warns me not to configure my Intune subscription during the process. Doing this prematurely may cause corruption and/or impact your ability to use Intune.
  • This step can take up to 5 days, but typically occur within 1 business day.

The following was added on August 13th:

  • On August 11th I received a reminder that the Intune Support team is still working on resetting the MDM authority for me….and finally two days later I received a phone call from the Microsoft US telling me that the MDM authority had been reset. A few hours later I also received the confirmation through email….
  • So when I checked my Office 365 Portal again, I was indeed able to enable Office 365 as may MDM Authority! Yeah!


In the end the entire process took about 7 business days.

Download the Windows 10 Administrative Templates

Microsoft has released the Windows 10 Administrative templates. For the most part you already have them, if you have Windows 10 installed, but now you can install them even if you don’t yet have installed Windows 10 itself.


After you have them installed, you can copy them to your GPO Central Store. Besides the ones already available in Windows 10, there are some new ones in the installer below :


  • Deliveryoptimization.admx
  • Fileserverssagent.admx
  • Gamedvr.admx
  • Grouppolicy-server.admx
  • Grouppolicypreferences.admx
  • Mmcsnapins1.admx
  • Terminalserver-server.admx
  • Textinput.admx
  • Userdatabackup.admx
  • Windowsserver.admx

Click here to download the Windows 10 Administrative Templates

New features for Windows Phone, iOS and Android coming this week!

Earlier today Microsoft has announced this months Intune features that will be released between May 19 and May 26


The following new Intune standalone (cloud only) features are in this release:

  • Ability to extend application protection to your existing line-of-business apps using the Intune App Wrapping Tool for Android (Intune App Wrapping Tool for iOS made available in December 2014)
  • Ability to assign help desk permissions to Intune admins, filtering their view of the Intune admin console to only provide access to perform remote tasks (e.g. passcode reset and remote lock)
  • RSS feed notification option added for Intune admin to subscribe to be alerted when new Intune service notifications are available for their service instance
  • Improved end user experience in the Intune Company Portal app for iOS with step-by-step guidance added on how to access corporate email by enrolling for management and validating device compliance
  • Updated Intune Company Portal app for Windows Phone 8.1 to provide enhanced status notifications for app installations
  • New custom policy template for managing new Windows 10 features using OMA-URI
  • New per-platform mobile device security policy templates for Android, iOS, Windows, and Windows Phone, in addition to new Exchange ActiveSync policy template
  • Ability to deploy Google Play store apps that are required/mandatory to install on Android devices

Also, as announced last week, several new hybrid features are now available for those using System Center Configuration Manager integrated with Intune once upgraded to the latest Configuration Manager 2012 or R2 service pack. You can view the full list of hybrid features included in these service packs by visiting here.

Make sure to bookmark this blog and the ConfigMgr blog to keep up-to-date on the latest features being released and read the latest how-to technical posts written by the engineering team.

Source : Microsoft Intune Blog

New Intune Features Are Coming This Week

Microsoft is releasing their next service update for Microsoft Intune as we speak. This service update will introduce several new features for Android devices plus much more.

New Intune standalone (cloud only) features that will be made available as part of this update include:

  • Management of Office mobile apps (Word, Excel, and PowerPoint) for Android tablets. (Management of Office Mobile app for Android phones made available in February 2015)
  • Ability to restrict access to Exchange on-premises for Exchange ActiveSync clients on Android devices
  • Ability to create WiFi profiles with pre-shared keys (PSK) for Android devices
  • Ability to resolve certificate chains on Android devices without the need to deploy each intermediate certificate individually
  • Deployment of .appx bundles to Windows Phone 8.1 devices (Support for .appx files made available in March 2015)
  • Managed Browser app for iOS devices that controls actions that users can perform, including allow/deny access to specific websites (Managed Browser app for Android devices made available in December 2014)
  • Management of Work Folders app for iOS devices
  • Updated Endpoint Protection agent for managing Windows PCs
  • Ability to manage Windows Defender on Windows 10 PCs running Windows 10 Technical Preview without need for separate Microsoft Intune Endpoint Protection agent to be installed
  • Combined Microsoft Intune Company Portal websites for PCs and mobile devices to provide a more consistent user experience across platforms
  • Added Windows and Windows Phone Company Portal apps to the Microsoft Download Center to provide an additional option for accessing these app downloads
  • Enhanced user interface for overview pages within Intune admin console

We plan to continue rapidly adding new features to the Intune service and look forward to sharing more information with you on this blog over the coming months. Along with the Intune service updates we are releasing monthly, you can also expect new features to be made available soon for those using System Center Configuration Manager integrated with Intune (hybrid). Make sure to bookmark this blog and the ConfigMgr blog to stay up-to-date as we continue to release new features.

Note: To see the specific timeframe for when your tenant will be updated, please visit the Microsoft Intune status page. You can identify the Service Instance that your Intune subscription is running on by opening your Intune administration console, clicking on the Admin tab and then selecting View Service Status. Your Service Instance will be displayed at the top of this page.

Source : Microsoft Intune Blog

March 2015 update for Microsoft Intune

Also this month Microsoft will update Intune with some new features

New Intune standalone (cloud only) features that will be released as part of this service update include:

  • Ability to streamline the enrollment of iOS devices purchased directly from Apple or an authorized reseller with the Device Enrollment Program (DEP)
  • Ability to restrict access to SharePoint Online and OneDrive for Business based upon device enrollment and compliance policies
  • Management of OneDrive apps for iOS and Android devices
  • Ability to deploy .appx files to Windows Phone 8.1 devices
  • Ability to restrict the number of devices a user can enroll in Intune

Additionally, as part of this service update, we will be providing hybrid customers with the ability to create custom WiFi profiles with pre-shared keys (PSK) for Android devices. Delivering new features to our hybrid customers using System Center Configuration Manager integrated with Intune remains a top priority for our team, and you can expect additional hybrid features to be made available soon.

Source : Microsoft Intune blog

How to get a Windows 10 exam for free!

Holly Dickson (of MS Learning) just posted a nice blog where you can read how to attend the upcoming Windows 10 exam for free! The only prerequisite is that you have earned the MCSA Windows 8 certification.

Earn your Microsoft Certified Solutions Associate (MCSA) certification in Windows 8 between February 15, 2015, and May 31, 2015, and you’ll be eligible to take a Windows 10 exam (Exam 697) for free when it’s published later this year! The Windows 8 MCSA covers Windows 8.1, so you’ll be current and ready to move to Windows 10.

Here’s what you need to do:

Step 1: Prove what you know. Earn your MCSA: Windows 8 certification by choosing one of the paths below:

Step 2: When the Windows 10 Exam 70-697 is available (expected in the second half of 2015), sign in to and register for the exam for free.


Windows 10 Examen

Source : BorntoLearn