Managing System Update with Intune
This post will describe how you can manage Lenovo System Update on Windows 10/11 devices with Intune.
Welcome to the ThinkDeploy Blog rss
Hosting a repository in an Azure blob
System Update v5.07.0110 and later supports Blob storage access via HTTPS
When it comes to managing a centralized Update Retriever repository, challenges arise with widely distributed environments. This is where leveraging a cloud storage solution can bring value.
Deploying Commercial Vantage with ConfigMgr
Previously, Lenovo provided two separate apps (Lenovo Settings and Lenovo Companion) that allowed the user to change hardware settings, run diagnostic scans, and check for software and driver updates. As of December 2017, all of the features in those two apps (discontinued) were merged into a single app Commercial Vantage
This post will walk through deploying Commercial Vantage as a ConfigMgr application.
Deploying ThinkPad BIOS Updates With Intune
This walk-through will cover deploying ThinkPad BIOS updates with Intune. These are provided as standalone executables so adding them as a Win32 app will involve converting them to the .intunewin format using the Win32 Content Prep Tool.
Tracking Thin Installer Update History With ConfigMgr Current Branch
Due to customer feedback, Lenovo is introducing a couple of new features focused on tracking updates. Traditionally, updates installed on the client were logged in the Updates_log(timestamp).txt.
Admittedly, parsing through the log to find out which updates were skipped, installed, or failed is not that easy. If you're deploying a task sequence to your Lenovo systems that runs Thin Installer, you can only see if Thin Installer runs or not. How do you tell which updates installed without logging into each system and checking the logs?
A new switch can now be added to your Thin Installer command line that will do the following upon execution:
Reporting BIOS Password States on
Think Products with ConfigMgr
There may be a need to run a report on your Think products to check which BIOS settings are enabled or disabled, or if there is even a BIOS supervisor password set.
This post will walk through creating a simple custom report in ConfigMgr that will display the following:
Upgrading TPM Spec 1.2 to 2.0 on ThinkPad using ConfigMgr Current Branch
Now that your Windows 7 to 10 migration is complete, you may want to upgrade the TPM Spec version from 1.2 to 2.0 to take full advantage of Windows 10's security features, like Device Guard and Credential Guard.
How to Use ThinkCentre's TPM Firmware
Switch Tool with ConfigMgr
This article will cover the TPM Firmware Switch Tool that was released to remedy affected ThinkCentres described in the LEN-15552 Security Advisory.
Dynamically Updating Think Product BIOS with ConfigMgr
What follows is a brief look at what is possible and not necessarily recommended for everyone. Hopefully someone finds it useful.
Earlier at MMS this year (2017), a fantastic session on modern driver management in OS deployments was presented by Kim Oppalfens and Tom Degreef. This method and what it entails can be found here.
Preparing the TPM for BitLocker Pre-provisioning using ConfigMgr
There are some definite advantages to pre-provisioning BitLocker. Pre-provisioning the disk will encrypt only used space, so when this step executes, the drive will be encrypted before the operating system has been laid down to the client, saving a ton of time.
The catch here is that in order for pre-provisioning to work, a TPM has to be present on the system AND enabled, as stated in the Pre-provision BitLocker step.