Updating yourUpdating your Enterprise Environment Ronnie Jakobsen Senior Architect Coretech Kent Agerlund Chief Technical Architect Coretech Mike Terrill Technology Architect

@agerlund Awards, accomplishments, etc. Experience Favorite something; e.g., Awards, accomplishments, etc. Experience Photography, Liverpool FC Kent Agerlund Ronnie Jakobsen

@miketerrill AZSMUG 9+ Years 19 Years Experience Mexican Food Mike Terrill

Software UpdatesSoftware Updates

Software Updates Windows Updates Why Challenges How to fix 3 rd party updates Why Challenges How to fix

Demo Software updates

BIOS / UEFI upgradesBIOS / UEFI upgrades

BIOS / UEFI upgrades Why upgrade Challenges Solution

Why upgrade Why would you want to upgrade BIOS/UEFI? To fix issues with the deployed version To address security related issues Windows 10 support Support/fixes for vendor BIOS utilities Just like Software Updates – set a baseline for your environment for the supported HW models

Challenges Another item to actively manage Risky Each vendor is different BitLocker Some require v2 before v3 or v2 patch x before v3 OS Support Detection BIOS level passwords

Solution Task Sequence to the rescue … Create Packages for each model/model family Create a Task Sequence to Apply BIOS update Use MDT Task Sequence for Dynamic capabilities Incorporate into your OSD Task Sequences

Demo BIOS / UEFI upgrades

Upgrading driversUpgrading drivers

Upgrading drivers Why upgrade Challenges Solution

Why upgrade Why would you want to upgrade drivers? To fix issues with the deployed version Enable additional functionality in updated drivers Benefit from improved performance The main reason should be to add value not just increase a number

Challenges SCCM has no built-in method for updating drivers on live systems Driver packages are not real SCCM packages DISM can only inject drivers, not install or update them PNPUtil does not work in system context DPInst may display a “not-signed” warning Avoid installs on system without actual hardware present Avoid reinstalling the same version

Solution Powershell and devcon to the rescue … SCCM package with a set of drivers Powershell script Copy of devcon* Folders with drivers Drivers must be extracted and have an.inf file * Available in the Windows 10 SDK

Demo Upgrading Drivers

Evaluation s: And Then … Please provide session feedback by clicking the EVAL button in the scheduler app (also download slides). One lucky winner will receive a free ticket to the next MMS! Discuss: Ask your questions-real world answers! Plenty of time to engage, share knowledge.

Q & A / DiscussionQ & A / Discussion

Other Sessions: Mike & Ronnie Everything you want to know about BIOS/UEFI Settings Tuesday at 2:00 PM Updating your Enterprise Environment Wednesday at 11:00 AM Configuration Manager meet Power BI Thursday at 2:00 PM

Other Sessions: Kent MMS hAcKath0n Part 1 – Attendees Vote on What to Code Tuesday at 8:00 AM Self-service and security patching: Intelligent Solutions for Getting More from SCCM Tuesday at 10:00 AM Configuration Manager – Community Rules Tuesday at 1:00 PM & Wednesday at 1:00 PM Hold on, you didn’t do that…oohh my, you did! – Look what we did! Tuesday at 3:00 PM & Wednesday at 8:00 AM Configuration Manager Jeopardy Quiz Wednesday at 6:00 PM MMS hAcKath0n Part 2 – Results! Thursday at 6:00 PM