Linux Patching
Tanium Patch for Linux: reuse existing repos and choose Repository Scan or TSL
-
-
Protected: Comply on Tanium
There is no excerpt because this is a protected post.
-
Deploy On Tanium
Quick troubleshooting guide for Tanium deployment issues:
check deployment status, package eligibility, custom tags, action locks, maintenance windows, and tool versions. -
Action Lock & Client Extensions
Ation Lock configuration with Tanium
-
Console – access issue (non-admins)
Issue for non-admin users accessing the EPM desktop console
-
Server – ldap vs ldaps
Source Active Directory : LDAP or LDAPS ?
-
Patch Deployment Ring
Example of a ring-based patch deployment strategy using the software
-
Dashboard on Tanium
Create the data set Visualize the data Build the dashboard Operational tips Patch List Compliance Sensor
-
Resources – downloads & docs
link to download patch and release
-
Patch On Tanium
Get help resolving patch deployment errors: check .NET Framework update classifications, scan status and age in Tanium Patch, and fix issues by reinstalling Patch tools or resetting the Windows Update Agent. Use the correct commands (DISM, wusa) for installing Windows updates.
-
SSH Keys with WinScp and Putty
how to generate SSH keys with PuTTYgen, connect to a TanOS appliance over SSH
-
Troubleshooting – console install bypass
If the IVANTI Remote Console setup fails, you can bypass the failure
-
Interact On Tanium
Discover essential Tanium Interact queries to efficiently analyze, monitor, and manage endpoints
-
Prepare Tanium certification (TCO / TCA)
Discover key resources for training and certifications, including Tanium training links, maps, and embedded videos to guide you effectively
-
Creating a WSUS Dashboard
Scripted WSUS reporting: create an HTML dashboard, automate refresh, and publish with IIS.
-
Automating WSUS Patch Assignment
Automate WSUS patch approvals: assign updates to Pilot, then promote to Global groups with scripts and Scheduled Tasks.
-
Create a dashboard with PswriteHTML
Script to connect to Ivanti databases and generate HTML reports automatically.
-
Provisioning on Tanium
Create a provisioning with tanium. Use a web service to get computername
-
Agent – auto-approve clients
Automatically approved new client on EPM
-
Agent – install & uninstall
How to install the Ivanti Agent and how to uninstall it
-
Rundeck – Export Nodes from EPM
Create an XML file for Rundeck node definitions based on Ivanti Inventory data
-
Create PowerShell Job
Create a Rundeck job, define the workflow, target nodes, add options, and run PowerShell across hosts with parallel, reliable execution.
-
Deploying Windows 10
Comprehensive guide on deploying Windows 10 using SCCM, covering SCCM configuration, WDS and State Migration Point roles, setting up WinPE, managing drivers, creating task sequences, and distributing content.
-
How install SCCM
Extend AD schema, create the System Management container with delegation, install/configure SQL and Windows features, deploy the site, set boundaries/discovery, enable client push, add console branding
-
Configuring Applications
How to deploy applications using SCCM. Create and configure applications, manage deployment types, set up distribution points, and create collections
-
Configuring WSUS
Installing the WSUS and SCCM roles for software update management.
-
Configuring Asset Intelligence
Learn how to configure Asset Intelligence in SCCM 2012. This guide covers updating the Asset Intelligence certificate, installing the synchronization role, enabling inventory classes, and setting up software auditing to help you manage software licenses effectively.
-
SCCM Log Files
SCCM log cheat sheet: where to find key OSD/app/update/DP logs, how to read them with CMTrace/Trace64, plus quick triage tips.
-
Configuring Power Settings
Enable and configure power management in SCCM.
-
Installing .NET 3.5.1 without Internet
How to install .NET Framework 3.5.1 during MDT deployments without an internet connection
-
Timezone language and Keyboard
How to skip locale and time zone selection by configuring the customsettings.ini file.
-
Making an Application Mandatory
How to pre-select or make applications mandatory in MDT by configuring the customsettings.ini file.
-
Reading and Writing MDT Variables
Read and modify MDT variables using VBScript.
-
Adding Tools to WinPE (UltraVNC)
Learn how to add custom tools to WinPE images
-
Installing QUEST SDA
Setting and configuring both virtual and physical SDA appliances.
-
Troubleshooting – delete task error
Error while deleting a scheduled task
-
Export Computer and attribute
Export WSUS computer inventory with PowerShell: filter stale clients, group by target, and save to CSV/JSON.
-
Deploy an Application (exe)
Process of deploying an EXE installer with Microsoft Intune. This guide covers using IntuneWinAppUtil
-
TAG-Based Groups for Autopilot Devices
TAG-based groups for Autopilot devices in Microsoft Intune.
-
Importing Autopilot Devices (PowerShell)
Importing Autopilot devices into Microsoft Intune using PowerShell.
-
Create a Bootable USB Media
Create a bootable USB drive for Microsoft Deployment Toolkit (MDT) to deploy operating systems.
-
Server – Inventory Option
Configure Do WMI Rules and Do Delta option
-
Creating your Intune LAB
Start your Intune demo: Trial, Dev, or CDX.
-
Server – Migration LdAppl3.ini
Copy configuration directly in the Ldappl3.ini
-
Pauses in MDT Task Sequences
Create a pause within an MDT task sequence using a ‘Command line’ step
-
Displaying Organizational Units
How to display a list of Organizational Units (OUs) during the MDT deployment
-
Provisionning – Error WebServiceCall
Error WebServiceCall during provisionning
-
MDT Log Locations
MDT logs, disk partitioning, deployment, domain join, Windows setup, unattend log, task sequencer
-
Integrating WSUS TargetGroup
Iintegrating the “TargetGroup” variable with MDT for WSUS.
-
Deploy – Custom Notification Before Installation
Create a custom notification, for example for an Office 365 deployment
-
Deploy – Force Reboot after Installation
How to Force a Reboot After Software Installation
-
Large Windows WIM Files for UEFI USB Deployments
How to split WIM files into SWM format
-
Move the Integrated WSUS Database
Move the WSUS SUSDB database to another drive using SSMS or sqlcmd: stop services, detach, move files, reattach, and restart.
-
Windows 11 in OOBE
Windows 11 in OOBE mode using the Microsoft Deployment Toolkit (MDT)
-
Server – Migrate SQL
How to Migrate a Database to Another SQL Server
-
Server – Enable Audit Rights
Often Forgotten: How to Enable Audits
-
API – GetMachineData or GetMachineDataEx
use GetMachineData and GetMachineDataEx
-
Deploy – Change Windows 11 Release
Custom Windows 10/11 migration with scripts, multilingual ISOs, and controlled deployments through Endpoint Manager.
-
License – Configuration
Learn how to search applications, manage licenses, and configure automatic uninstall in LANDESK
-
Power management – Configuration
Learn how to create, deploy, and manage power policies in LANDesk, including troubleshooting and reporting.
-
Remote Control – Remove prompt temporarily
how to temporarily disable remote control authorization on devices
-
Deploy – change paths in sql
Update EPM package paths in SQL after core migration (server name changes, HTTP to HTTPS). Backup required.
-
Troubleshooting – DbRepair
EPM tools DbRepair, to repair your EPM database
-
Server – Migrate agent to new server
Copy certificate file to new core server
-
Deploy – Application Deployment Guide
Guide details configuring and deploying software packages
-
Console – Extender
Add Scripts Such as Browse C$, Ping, PsExec, and Other Commands to the Console
-
Provisionning – Deployment of Windows 10
Provisioning Windows with EPM: copy sources, manage unattend.xml, configure variables, create provisioning tasks, and optionally integrate patch management.
-
Provisionning – WinPE
WinPE with scripts: backup WIM, add drivers, create ISO, configure PXE/vboot, ADK setup.
-
Server – Backup of Critical Files
Backup and restore EPM core settings with CoreDataMigration.exe (certificates, scripts, console layouts, LDAPPL files).
-
Server – Preferred Server
Set up preferred servers in EPM to optimize WAN usage, configure shares, accounts, replication, and server settings.
-
Server – Core Installation
EPM architecture, sizing, service accounts, installation, configuration, certificates, and patch management setup.
-
Inventory – LDISCN32 command line
EPM commands to run inventory on core servers and force policy sync.
-
Troubleshooting – ERROR Core Synchronization
Fix Error core synchronisation
-
Troubleshooting – ERROR Query Unavailable
How fix Error Query Unavailable
-
Troubleshooting – ERROR StrongName
How to Fix StrongName Error When Starting the Console
-
LogTroubleshooting – Error 4100
How to Fix Error 4100 in the Event Log
-
Provisioning – PowerShell in Task
How to use PowerShell commands in a LANDESK provisioning task
-
Provisionning – Alternative to Ivanti HII
Custom Alternative to Native Driver Management Integrated with Ivanti
-
Patch – Configuration
update security bulletins, create groups (_NewPatch, L1, L2), scopes, and rollout projects. Workflow
-
Query – Convert to SQL
Transform a Query to SQL
-
Inventory – Size of Agent Inventory Files
Exclude folders from EPM inventory (e.g. %SystemDrive%\Drivers, %windir%\WinSxS) to cut inventory size
-
Inventory – Registry keys and exe file
Inventory registry keys in EPM via “Registry Item” . Example with Chrome: use exe path to check real version
-
Core – Install and configure CSA
CSA 5.0 setup: install on Oracle/RedHat,
-
Query – Advanced
Regex rules: device names (3 chars+L, M/N), IP with 0 in 3rd field. SQL queries: recent inventory, RAM >3200 MB
-
How to use IVANTI XTRACTION
Discover how use of Xtraction. Learn how to create effective dashboards and manage your data
-
How install IVANTI Xtraction
Xtraction: add IIS roles, create SQL DB, install (licenses/datamodel), configure AD auth
-
HelpDesk Module
Configuring the KACE SMA HelpDesk module.
-
Using Scripts
Explores three methods to utilize scripts in SMA,
-
Configuring Remote Control
Setting up remote access via UltraVNC and Windows Remote Assistance.
-
Application Distribution
Managing application deployments with KACE SMA
-
Changing Windows Release
Managing Windows release changes using the KACE Systems Management Appliance (SMA).
-
License Management and Control
Managing and controlling licenses with KACE Systems Management Appliance (SMA).
-
Management BitLocker
Managing and monitoring the TPM chip and BitLocker encryption status using Systems Management Appliance (SMA).
-
Configuration Remote Relay
Configuring and installing a remote relay with KACE SMA.
-
Configure Server Monitoring
Enabling and configuring server monitoring in Quest SMA.
-
Installing SMA Appliances
Installing and configuring Quest SMA appliances, including network setup, agent deployment, backup.
-
Using Kace Go Client
Available at Google Play and the App Store, the free KACE Go Mobile App
-
Automated Deployment of Windows 11
Automated deployment of Windows 11 using QUEST SDA
-
Managing Dell, Lenovo, HP Drivers
Aactivation, download, and installation of drivers for Dell, HP, and Lenovo systems
-
Management WinPE Environments
Creating and managing WinPE environments for QUEST SDA.
-
Manage User Data with USMT
Managing user data backup and restoration with USMT in QUEST SDA.
-
Installing SDA Relay
Installation and configuration SDA relay at a remote site.
-
How install KACE Desktop Authority
OS support, required ports, AV exclusions, prep AD/SQL, size the host, then install KACE Desktop Authority
-
Install WSUS Server
WSUS setup with group-based auto-approvals (Pilot → Global1 → Global2), HTTPS configuration, memory tuning, and client assignment via GPO or registry.
