Uncategorized

MECM not updating Heartbeat DDR and Hardware Scan info

Overview In Microsoft SCCM (ConfigMgr), administrators may encounter situations where client heartbeat status appears outdated or incorrect in the console, even though the devices are actively communicating with the Management Point. A quick and effective workaround in such cases is executing the SQL stored procedure: This article explains when and why to use this command, […]

Intune

Claude App Deployment Using Intune

Deploying the Claude Desktop application across enterprise devices can be achieved using Microsoft Intune with the Win32 app packaging method. This guide walks through the complete process—from downloading the installer to assigning the application to devices. 1. Download the Claude Desktop Installer Download the Claude Desktop installer from the official website: Example:C:\IntuneApps\Claude\ 2. Download the […]

Linux

Join an Ubuntu Server to Active Directory (AD) Domain

Overview Integrating an Ubuntu server with Microsoft Active Directory (AD) enables centralized authentication and access control using domain credentials. While SSSD is commonly used, some enterprise environments prefer Winbind due to compatibility requirements, legacy setups, or advanced Samba integrations. This guide explains how to join an Ubuntu server to an AD domain using realmd + […]

SCCM/MECM

Unable to delete Cloud Manangement Gateway

Overview In Microsoft Endpoint Configuration Manager (ConfigMgr / SCCM), administrators may encounter a scenario where the Cloud Management Gateway (CMG) remains stuck in the “Deleting” state even after all related Azure resources and console components have been removed. Symptoms You may observe the following: Primary Root Cause Service Connection Point role not installed, removed, or […]

Active Directory

Removing Lingering Objects in AD Using the LoL GUI Tool

Lingering objects in Active Directory can disrupt replication and introduce directory inconsistencies. Microsoft provides a graphical utility called the Lingering Object Liquidator (LoL) that simplifies detection and removal without relying solely on command-line tools. This guide outlines a structured troubleshooting approach and safe use of the LoL GUI tool. Understanding Lingering Objects Lingering objects occur […]

Active Directory Windows Server

Repadmin Commands — Quick Reference and Use Cases

Repadmin is a command-line utility used to diagnose and manage Active Directory replication. It allows administrators to view topology, monitor health, force synchronization, and troubleshoot complex directory issues. It is installed with: Run from an elevated command prompt. Displays the master command list and syntax help. Command Categories 1️⃣ Forest & Domain Overview Replication Summary […]

RDP Windows Server

Fixing Start Menu & AppX Failures in Windows Server 2019 RDS

If your Windows Server 2019 RDS hosts suddenly experience broken Start Menus, unresponsive modern apps, or AppX registration failures, the root cause may be something that usually goes unnoticed: notification registry bloat. This issue is especially common on heavily used RDS servers where many users log in and out daily. Over time, Windows accumulates thousands […]

Windows

Microsoft Teams Add-in Automatically Disabled in Outlook

Many users experience an issue where the Microsoft Teams Meeting Add-in for Outlook becomes disabled. This prevents them from scheduling Teams meetings directly from Outlook, causing frustration and workflow interruptions. This problem usually happens when Outlook detects performance issues and places the Teams add-in under Disabled or Slow COM Add-ins. Fortunately, you can re-enable it […]

Windows Update

Recreating the SUSDB and WSUS Content Folder in WSUS (Windows Server)

Maintaining your WSUS (Windows Server Update Services) can sometimes feel overwhelming, especially if the SUSDB is cluttered with old or unnecessary updates, or the Content folder has become bloated due to accidental settings changes. At times like these, starting fresh with a clean database and content repository can be the most efficient solution. Here’s your […]

ADFS

Resolving ADFS Site Unreachability (Accessible Only via Localhost) by Adding SSL Binding to 0.0.0.0:443

When working with Active Directory Federation Services (ADFS), one common pain point is SSL bindings and how ADFS responds to requests via hostname vs. raw IP. Recently, I encountered the following scenario: This caused both the Load Balancer (LB) and ADFS Proxy (WAP) to mark the server as offline. The Root Cause ADFS relies on […]

Windows

🛠️ How to Enable Mobile Hotspot in Windows 10/11 if It’s Greyed Out (Internet Sharing Disabled by Network Administrator)

Are you unable to enable Mobile Hotspot on your Windows 10 or 11 device? Is the “Sharing” tab showing an error like: “Internet Connection Sharing has been disabled by the network administrator” Don’t worry — this typically happens due to Group Policy or Registry restrictions on your system, especially in managed environments. Follow the steps […]

IIS

Patching OpenSSL on Windows running Apache

Step 1 Create a backup of the whole server. Step 2 Visit this website for the latest OpenSSL ZIP: https://kb.firedaemon.com/support/solutions/articles/4000121705 Step 3 Extract or browse for the x64/bin directory from the ZIP file Step 4 Open another File Explorer and go to C:\XAMPP\APACHE\BIN directory Step 5 Rename the following files: openssl.exe, libcrypto-3-x64dll, libssl-3-x64.dll Step 6 Copy […]

Intune

Manually re-enroll a Hybrid Azure AD Join Windows 10 / Windows 11 device to Microsoft Intune without loosing the current configuration

Thanks to  Maxime Rastello for creating this article. Without data or configuration loss There is a way to manually re-enroll your Windows 10 PC without loosing all the current configuration and apps deployed by Microsoft Intune. This method is not officially supported by Microsoft As you may know, automatic enrollment can be triggered either by […]

Uncategorized

Azure Front Door Access Logs

📘 Log Query Used We ran the following Kusto query in Azure Log Analytics to search for specific access events through Azure Front Door: kustoCopyEditAzureDiagnostics| where Category contains “FrontDoorAccessLog”| where requestUri_s contains “<target-endpoint>”| where originIp_s contains “<origin-ip>”| where clientIp_s contains “<client-ip>”| project originIp_s, clientIp_s, requestUri_s 🧾 Query Breakdown

Query SCCM/MECM

How to Generate a Report of Client Device Uptime in SCCM with Serial Numbers

Monitoring client device uptime is crucial for ensuring system health, stability, and compliance—especially in enterprise environments. In Microsoft Endpoint Configuration Manager (SCCM), you can quickly fetch and export this information using a simple SQL query. In this guide, we’ll walk you through a SQL script that retrieves the hostname, last boot time, and uptime in […]