I am rationalizing and updating my lab on a grey, Saturday afternoon and decided to blog the update process for getting my Server 2012 R2 Primary Site Server up to Server 2019. SQL Server is not installed on the same VM in my lab. You should make other considerations if SQL is installed on your Site Server - these are not covered in this post.

I will be posting a new blog series for co-management in the coming months. This post will highlight the undesirable effect some Group Policies will have on a successful co-management Intune enrollment.

Background

One of the things I have been trying to improve is the users “first logon” experience in Windows 10. Waiting for the OneDrive sync client to “do its thing” reminded me of that one kid in the class that could be awesome if they tried harder. After the user profile is created (another post coming soon on tweaking the speed of this), OneDriveSetup.exe was called from the Default User Hive “Run” key. If OneDrive wasn’t installed in the User’s Profile (unlikely for a new profile), it would go and throw the binaries in %localappdata%, check for updates, twiddle its thumbs and eventually download some files or stubs.

It started with a Tweet…

The Challenge

One of the challenges when managing an Azure AD Hybrid Join implementation is monitoring the number of devices registered to each Azure AD user.

What is ADFS?

Active Directory Federation Services (ADFS) provides a secure mechanism to authenticate users, accessing applications (often in the cloud), using Active Directory credentials when Windows Integrated Authentication (WIA) is not possible.

What are Servicing Stack Updates?

Servicing Stack Updates (SSU’s) are Critical, Security Updates. They are shipped separately to the monthly Latest Cumulative Updates (LCU’s) because they modify the component that installs Windows updates. Microsoft strongly recommend that you install the latest SSU before the LCU. More information on SSU’s can be found at:-

Before you can start using Android Enterprise Work Profiles, or enroll your Android Devices into Intune, you have to link Managed Googled Play.
Google Managed Play allows you to select, purchase, and manage apps for your organization. You can create lists of approved apps and manage updates.

Starting Windows 10 1809 Remote Server Administration Tools (RSAT) is now included as a set of “Features on Demand”. In the following post we will show you how to deploy individual features with SCCM.