Create McAfee agent .msi file for SCCM deployment

This article describe how create .msi file for McAfee agent with ePO.

Login to McAfee ePolicy Orchestrator and go to System tree – New systems

System tree – New Systems

Choose options like this:
1. How to add system: Create and download
2. Agent version: Current
3. Credentials for agent: unchecked
4. Save to drive

Nutanix: failover recovery with Async DR

There two scenarios for failover plan and migrating to DR:
First, when main site is online and have time to shutdown the servers properly.
Second is when main site offline for some reason and you can’t access to servers.

1: To DR and back online in 60 seconds

I have two sites: main and DR.
On main site connect to servers and shut them down (his step is not necessary, but recommended). When all machines are off, connect to PRISM and go to Data Protection – Async DR

Mark one server that you want to migrate to DR site and click on “Migrate”. If server was online and didn’t shut down before, Nutanix will automatically power him off

SCCM mail configuration

To configure mail server on System Center, go to:
Administration – Overview – Site Configuration – Sites
Select your site – right click on it – Configure Site components – Email Notification

Fill mail server information and test sending mail by “Test SNTP server”. I have local Exchange, so my configuration is very simple

SCCM Device collections

Windows 7 workstations query

select 
SMS_R_SYSTEM.ResourceID,
SMS_R_SYSTEM.ResourceType,
SMS_R_SYSTEM.Name,
SMS_R_SYSTEM.SMSUniqueIdentifier,
SMS_R_SYSTEM.ResourceDomainORWorkgroup,
SMS_R_SYSTEM.Client from SMS_R_System 
where 
SMS_R_System.OperatingSystemNameandVersion like "%Workstation 6.1%"
or 
SMS_R_System.OperatingSystemNameandVersion like "%Windows 7%"

Windows 10 workstations query

select 
SMS_R_SYSTEM.ResourceID,
SMS_R_SYSTEM.ResourceType,
SMS_R_SYSTEM.Name,
SMS_R_SYSTEM.SMSUniqueIdentifier,
SMS_R_SYSTEM.ResourceDomainORWorkgroup,
SMS_R_SYSTEM.Client from SMS_R_System 
where 
SMS_R_System.OperatingSystemNameandVersion like "%Workstation%" 
and 
SMS_R_System.OperatingSystemNameandVersion like "%10.0%"

Windows 2016 server query

select 
SMS_R_SYSTEM.ResourceID,
SMS_R_SYSTEM.ResourceType,
SMS_R_SYSTEM.Name,
SMS_R_SYSTEM.SMSUniqueIdentifier,
SMS_R_SYSTEM.ResourceDomainORWorkgroup,
SMS_R_SYSTEM.Client from SMS_R_System 
where 
SMS_R_System.OperatingSystemNameandVersion like "%Server%" 
and 
SMS_R_System.OperatingSystemNameandVersion like "%10.0%"

Thanks to: https://i-py.com/2016/sccm-server-2016/

GPO configuration for WSUS

Open group policy management and create new policy

In GP object go to: Computer configuration -> Policies -> Administrative templates -> Windows components -> Windows update

Settings that I changed:

Allow Automatic Updates immediate installation: Enabled
Allow non-administrators to recieve update notifications: Enabled
Confugure Automatic Updates:
--Configure automatic updating: 4- Auto download
--Scheduled install day:  0 - Everyday Install time 03:00
--Mark "V" on Every week
Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box: Enabled
Do not display 'Install updates and Shut Down' option in Shut Down Windows dialog box: Disabled
Specify intranet Microsoft update service location: Enabled
--Set the intranet update service: http://Your_WSUS_Server:8530
--Set the intranet statistics server: http://Your_WSUS_Server:8530

Assign policy to relevant OU in your domain
You can enable other settings if you want so