What is Microsoft Endpoint Manager?

Many people wonder what Microsoft Endpoint Manager is and how to quickly gain value to their company by using it.

In this post i will give you some quick information on what it is and later on create a how to get started quckly with Microsoft Endpoint Manager!

So what is Microsoft Endpoint Manager?

Some people are saying “It`s the new name of Intune” and that`s not what it is at all! or Intune is in there, but it`s so much more.

MS Endpoint Manager is a tool set witch are combining several solutions and gives you “One place to manage” several infrastructure services. To name them:

  • Microsoft Intune (ofcourse :))
  • Microsoft Endpoint Configuration Manager (SCCM)
  • Windows Autopilot
  • Desktop Analytics
  • Microsoft Defender ATP
  • Azure Active Directory

By doing this Microsoft achieves a ground breaking new management solution for us that gives us ability to manage all major platforms like Windows devices, Apple devices, Linux distros and Android devices.

So to be clear, Microsoft Intune or Microsoft Endpoint Configuration Manager (SCCM) will not be discontinued! They both will live their life but be combined with Microsoft Endpoint Manager.

So what do you need to start using Microsoft Endpoint Manager?

You need to have either Intune licenses or SCCM licenses and you also need to have Azure Active Directory Premium P1 to utilize Azure AD Conditional Access.

I will in the next blogpost come up with a brief guide om how to get started using Microsoft Endpoint Manager and quickly gain usage of yours EMS package!

Stay tuned for more secure devices!

SCCM – Exclude updates

Sometimes (not often i hope) you want to exclude updates for somehow that you are deploying to all your computers with System Center Configuration Manager 2012.
The excluding of Windows updates can be done with some few steps.

So this is how you do it:

1. Start with creating av “excluded updates” folder under “Software Library -> Software Updates -> All Software Updates”

2. Move updates that you want to exclude into this folder (right click and “move”)

3. Navigate to your moved updated and right click it then go to “Properties” and in the pane “Custom Severity” choose “Low”

4. Navigate to your “Automatic Deployment Rule” and edit your rule so that you only distribute updates that are marked as “None” in Custom Severity


With this the next time the ADR is running it will distribute only the updates that does not have any “Custom Severity” defined on them, all updates that are to be distributed every month comes with none custom severity and therefore you will not send out the one that you change severity of.



PXE boot for some computers doesn’t work, SCCM 2012

Sometimes computers won`t PXE boot for some reason when you are re-installing the Operating system using System Center Configuration Manager.
There can be several reasons for that, most common reason is that the computer object still are located in the SCCM database.

Here are some tips for how to remove obsolete objects:

  1. Search for compuetername in “All systems” found under; “Assets and compliance ->Devices”  and delete the computer from the list
  2. Search for MAC addresses using an report called: “MAC – computers for a specific mac address” found under “Monitoring -> Reporting -> Reports”
  3. Check the SMSPXE.log stored under: /Program files/SMS_CCM/Logs, find the entry where the computer tries to PXE boot and take a note of the “Resource ID” and search for the Resource ID on “All systems” found under; “Assets and compliance -> Devices”, you may need to add “Resource ID” column before searching.

Start with tips one, two and then three, number one and two can save you some time 🙂

The pictures under is for tips three:


SCCM: How to find computer model in commandline

To retrive the Computer model from commandline use the following command:

wmic csproduct get name

This is usefull when you are making model specified driverpacks i System Center Configuration Manager task sequence.

there is several wmic commands that you can use, for example to retrive serial number use this:

wmic bios get serialnumber