❤❤thanks a lot this is very informative!! One quick question is that I assume you have the client machine on the same subnet as your SCCM server? We don't have IP Helpers yet and we are still using DHCP options but I can't boot to the SCCM after using both 066 and 067 options😅😅😅 it looks like my DP PXE option defaults to x86 architecture and the option for x64 is grayed out, any idea?

Great content. Is there any specific message id when the rule runs ? Other sources mention about 5800 in Status Filter Rules. However, 5800 stands for a new assignment. My ADR rule has multiple deployment, therefore the 5800 mesage id is triggered multiple times. I'd like to run the PS script only once when ADR rule succeeds.

Thanks for sharing this.

Amazingly lightweight software. I use it on 6 computers. Easy. Fast. Robust. Dependable. Thank you team.

Justin, great videos overall but unfortunately this video did not age well and an update to it would be much appreciated. The fact of the matter is Patch Tuesday is a dead concept. Back in 2018 it may have still applied but updates are now deployed all the time and your ADRs would be missing critical updates. I will explain. Your ADR runs Second Tuesday of every month. The first time it runs would be 7/10/2018, the second time it runs would be 8/14/2018. If your ADR is looking only for updates within the last 1 month, the ADR would only pull updates back to 7/14/2018 and it would miss any updates after the first time it runs on 7/10/2018 and any update after that till 7/14/2018. I believe at this point in ADRs the Date Released or Revised is almost pointless since updates are so randomized as to when they come out you'll miss several updates. Best Bet I believe would be Custom Severity: Critical, Important, Moderate, or None. (Then if a rogue update comes out you mark it as Low severity and it will be excluded from your ADR), Language English, Product Windows 10 (Create a seperate ADR per product), Superseded No, Title "-Malicious" "-Edge" (I exclude the Malicious software removal tool and have a seperate ADR for it which applies to everything, same thing with edge) Update Classification (All of them except Upgrades, That way I don't push Feature Updates to machines and I'll manually create a feature update deployment and let end users know their machines will be upgraded), and Required >=1 (then you are only getting the updates that are actually needed by end user PCs, If the following week an update is needed by 1 machine, it will still be captured by the ADR the next week) Some would add Deployed = No to make sure you aren't selected an update that already has been deployed, problem could be that another ADR for a different product like Windows 11 may have already pulled that update and deployed it to a collection that your Windows 10 devices aren't in preventing them from getting the update. Problem with not doing it would also mean you could very well be redeploying the same updates over and over again because you have stale data in the console that is still showing an update is needed but not being installed because a laptop has been sitting offline for a month. My guess is Deployed = No should be set and if there are updates that fall between multiple machines like Malicious Software Removal Tool then it should have its own ADR. Those are my thoughts at the moment but I'm hoping someone who may have a different experience would provide me with some useful insight as I'm more than interested in setting this up the best way possible. Thank you!

It is 2024. I have used ninite until now, e.g. for virtual machines for testing with windows, but ninte caused problems with installing the VLC player. I recently discovered PatchMyPC and found it useful. I set everything up, including the language, copied it onto the USB stick and applied it to a freshly installed Windows. But what is that? Adobe Reader is not installed in my language (German), but speaks English. I looked for the reason for the problem and found out (some hours later) that the language setting is only adopted/taken into account if you buy a licence for PatchMyPC. 🙄 🤦‍♂ For me as a private person from the EU, PatchMyPC is therefore useless. Now I have to uninstall the English Adobe Reader and download the German version by hand. On the other hand, I could leave out Adobe Reader. I hear that there are leaner and better programs for PDF, with fewer security holes. The much better solution seems to be (for me) to forget about PatchMyPC and switch to the UniGetUI (aka Winget UI). It offers many more options, is even open source, and it supports different packet managers. Btw ... It is time for a uniform, global language. And no, it doesn't have to be English, because unfortunately English is often not precise enough and can quickly lead to misunderstandings. You notice this very quickly when you translate a text from German to English, for example. The translation is correct, no problems. But if you then translate the English text back into German ...? Let's just say it's horrific/scary/creepy.

Been and SCCM/MECM admin for 14 years. Love working with SCCM/MECM.

I know that this is 3yrs old now, but with the later updates for PMPC, will it be able to sort some historical issues that I see in the estate and has been driving me nuts, where there are multiple different versions installed across the estate of a browser (Chrome, which seem to need updating almost 5 times a month or more these days) and remove all older versions on end user machines and ensure that only the latest version is available and installed on the machines (removing all versions that aren't the latest.) Same with some other apps, but where we need to do a n-1 approach Qualys is useless for this and it's a huge time constraint for Intune Admins to keep up with patching for the most part due to having to know when the latest version of software is available, or if an app is vulnerable (and we can see it in PMPC via reporting/alerting) so hoping PMPC is the silver bullet we need for this.

In case of have sccm 2309, we need to do an extra configuration in SCCM?

Thanks Justin for a very detailed explanation on using SCCM, I am doing a refresh on this as I have not deployed any devices for a while and this was just the ticket. . 🙂

Dear Justin, You really helped me. My heart is always with you.

Hello, using and love patchmypc for clients. But what options do I have to patch servers?

Thanks for taking the time to share and teach OSD in this video. It would be neat to see a newer version of this type of format with the newer version of MECM. Great job on the video...!!

You never show the corresponding workload settings in intune. From ms docs "Important Before you switch any workloads, make sure that you properly configure and deploy the corresponding workload in Intune."

What's the difference between on prem and cloud versions?

cannot connect to wmi remote computer error: 0x80070005 seems like the most prolific error and no one has an answer how to fix it. thoughts?

Thank you for your video, but I'm stuck. I thought you're installing sccm on the domain controller, but now my SQL server says I shouldn't install it on a DC and the SQL reporting serives doesn't even run. What kind of a server should I install SCCM on? Thank you ina advance

Not sure if I'm missing something or not, but is there not an option to add all apps in an update-only deployment like in the normal PmPC? Or detect which apps are installed on all Intune managed devices?

Client certificate in SCCM console didn't change from "Self signed" to "PKI" any one know way ? 33:25

Awesome guide, thanks! I have a question though: what if I want to move the WSUS content folder to a network storage? I just simpy write the network storage address after the 'movecontent' command? Also, what kind of permissions do I need to give for that network storage folder? Edit: this is a pre-prod environment, and forgot to mention we have 2 WSUS server in this pre-prod system acting in redundant mode

salam my brother than you so much please do you have any document or book thank you ?

Can you make changes to apps that PMPC deploys thought the Intune portal or is that not advisable?

Hello - great video! I am trying to follow along, using Server 2022, SQL Server 2022 and MECM 2203 (I could not get the install prerequisites for the SCCM 2019). I fail at the same point every time - at around 36:40, where CM tries to connect to my SQL database. I noticed that the install found the database I set up using your guide, but it is not the FQDN, just my machine name. Can you tell from that where I went wrong? Also, I am confused about the SCCM_SQL_FullAdmins group you made. Was I supposed to put any users in there? It is possible I do not have my DC set up correctly - do you have a video showing how you set that one up? Stuck!!

Hi Justin, Thanks for the video, Helped a lot! Just confirming, Do we have to set the boot file in our DHCP Options 67 before doing this?

Amazing tutorial thank you! By the way, was some one mowing the lawns while you were recording? hahahahahahahaaa

Hi Justin ... Thanks for a great tutorial ! Works well for server 2022 / sql 2022 / sccm 2303 ... as well :)

Wow, fantastic! Even though this video is five years old, it's still amazing.

Great video, but please don't adopt his use of the word of "thread" for registry keys and everything with it. Threads and registry keys could not be more wildly different. The registry is essentially a database for your computer and how it should operate. Threads are essentially sequences of steps that happen on your computer, with or without user interactions. Threads running in processes can and should reference registry keys during whatever they do, but are otherwise totally different. Otherwise, a nice video.

'Promo sm' 🎶

What is the ideal lab setup to do this? Can I do 2 pcs 1 server in Hyper V?

Personally, when a new version of the Toolkit is released, it's just for new packages from this time onwards

Very good, thanks. I myself hijacked the ActiveSetup Function many many moons ago lol

Already the first 5 minutes were invaluable

Surely today in 2024, with WIndows 10/11, it's no longer required to go back years and years right ? They are all cummulative updates or superseding updates.

Tip: Deploy with intune, to show dialog/popups use the serviceui.exe show show popups to users, when installing via intune: .\ServiceUI.exe -Process:explorer.exe Deploy-Application.exe -DeploymentType install

Hello I've been using the Patch My PC Home updater for a few months now, and it totally saves me tons and tons of time But one question, I seem to remember that a few months ago the software was organized in categories like this But since a few versions ago it only shows as "Main Software" and "Portable Software" Is there any way I can configure the current version to show it like this? Thanks a lot 💪🏻

Finally got to this cast. Nicely done and will be trying to get the latest downloaded at our customer.

Brillant presentation, thanks guys for your hard work and dedication!

Hi, what access we need to create custom apps for account.Is it azure cloud access or ???? Could you please revert

Thanks for this video! I have an advice for anyone starting out on this, have a test environment. I started out with this and so many things were vague, but I dove in using a test environment. Had issues, troubleshot them, resolved many and learned a lot. When I was ready to build a production system, this was CRYSTAL Clear as day and I saw through the mistakes I mad on the test system and it was a smooth sailing.

Thank you so much for this valuable video! I initially considered skipping the "Creating a Custom Deployment" part, but now I'm glad I didn't. Although I have been using PSADT for many years, I have received a lot of valuable tips! In particular, "Run AppDeployToolkitMain.ps1 once to get autocomplete" is awesome. Thanks for the great work and for sharing with the community.

After all your advice setting up the program config manager 2022, creating the SCCM push account I could not get software to install until I went back to an admin account that we had created with more permissions. I can get you that level permissions later but it was interesting being in the WMI explorer and it wasn't until I added the admin permissions that I saw the application on the right side because until then it was blank. What I am experiencing is that the application does start to download in software center but it never gets past zero. It never installs and it never shows up in the CCM cache. I have a network connection, the content is available and will show in the deployment window under monitoring. The firewall settings for the clients have been tweaked in GPO, but not sure how to know if the distribution point is healthy? Client cach equals 25 GB and was set via the policy settings that you can set for a variety of things. That policy was pushed out to all of the computers and the laptops. If you have any ideas let me know please

Awesome work guys. Always making work easier for us geeks. Cheers

Is PSADT 3.10.0 available for download now?

Is there no Discord channel for PMPC users & support? I looked everywhere and can't find one. I think it'd be awesome to have one and MANY people can benefit from it.

Great video! Thank you for taking the time to explain everything clearly.

😊👍

How would the process work for the HP Catalog hooked into the Config Man console? I have content missing from a folder but do not have the same Sync options as we do with our PMPC catalog.

5 years later, this video is still saving Jobs