Deploy Windows Sandbox through SCCM for standard user

In this post I will demonstrate how to enable the Windows Sandbox feature through SCCM and PowerShell and allow standard users to use it.

What is Windows Sandbox ?
Windows Sandbox is a new feature that allows you to run a virtualized environment from your Windows host computer.
You will be able for instance to execute a specific application on an isolated environment.
Windows Sandbox uses hardware virtualization to create this isolated environment.
You won't need to install a VM to use it.
Indeed it will use OS from your host computer.
You will be able to run it from the Start menu or create a WSB shortcut to run a sandbox with a specific configuration.

Enable execution for standard user
In my last post I explained how to allow standard user to run Windows Sandbox.
For that you will need to add the user to the Hype-V Admin group, below.
See below how to add the current user in this group through SCCM:

The PS1 script
The below script will be used to do the below actions:
- Check if Windows Sandbox is already installed or not
- Enable the Sandbox feature is needed
- Add the current user in the Hyper-V admin group

See below the full script.
It will be used in the SCCM application, copy it to you SCCM server for later.

Create the application
1 /  In your SCCM console, go to Software Library then Applications
2 / Click on Create Application
3 / Select Manually specify the application information

4 / Type a name and choose what you want

5 / Choose what you want, like an icon

6 / Click on the Add button

7 / Choose Script installer

8 / Type a name

9 / In the content location, browse to the folder path that contains the PS1
10 / In the Installation program, select the PS1 file

11 / Click on Add clause

12 / In the direction Rule choose File
13 / In the path field type C:\Windows\System32\
14 / In the file or folder type WindowsSandbox.exe
15 / The direction rule will be as below

16 / Choose how you want to run the application

17 / In the Requirements part click on Next

18 / In the Software dependencies part, click on Next

19 / Click on Next
20 / Click on Close
21 / Click on Next
22 / Click on Next
23 / Click on Close

Create the collection
1 /  In your SCCM console, go to Assets and Compliance
2 / Do a right click on Device collections then Create device collection
3 / Type a collection name and choose a limit collection

4 / Click on Add Rule

5 / Select Direct Rule
6 / Click on Next
7 / In the Resources class use System Resource
8 / In the Attribute name choose Operating System Build
9 / In the Value part type the build version of the 1903, %18362%

10 / Click on Select All

11 / Click on Next then Close
12 / Click on Next
13 / Click on Next then Close

Deploy the Sandbox feature
1 / Go to Software Libray
2 / Do a right-click on the application
2 / Click on Deploy
3 / In the Collection part, browse to the Sandbox collection

4 / Click on Next
5 / Click on Add and select your DP

6 / Choose what you want and click on Next

7 / Click on Next

8 / Click on Next

9 / Click on Next
10 / Click on Close

Install through Software Center
1 / Open the Software Center
2 / The application appears in the Software Center

3 / Click on Install

Check installation
1 / Go to C:\Windows\Debug
2 / Open the file Install_Sandbox_Feature.log

3 / Check in the Hyper-V admin group
4 / Restart the computer
5 / Run Windows Sandbox

Add requirements
In this part we will add some requirements to the application.
1 / For that do a right-click on your application
2 / Click on Properties
3 / Go to Deployment Types
4 / Click on the appli and Edit

5 / Click on Requirements then Add

Computer should have at least 4GB of RAM 
6 / Select Total physical memory 
7 / Type the RAM to set and then OK

Operating System should be at least 1903
8 / Click on Add
9 / Select Custom then click on Create

10 / Create the custom rule as below then click on OK

11 / Select the new custom rule
12 / Type the 1903 version in the Value part: 18362

Powershell & WPF: Build a prerequisites GUI - Part 1

In this post, I will show you a short sample to create easily your prerequisites part in a GUI.
Sometimes it could be useful to have a prerequisites part to check some parameters before clicking on a button and starting a process.

Manage Autopilot with PowerShell: More features

The WindowsAutopilotIntune PowerShell module allows you to manage Autopilot. In this post, I will show you an update I did on this module on my lab in order to add more options.
Indeed I will show you how to set a deployment profiles and manage enrollment status page (add, set, list, remove) with PowerShell.

Run Configuration Manager Client actions from the systray

In this post I will show you a little tool I created that allows you to quicly run Configuration Manager Client actions from the client computer.
This is my first post about ConfigMgr so be indulgent :-)

Why this ?
Recently a client asked me to create a tool to use on nomad client in order to refresh Configuration Manager from the client.
He wanted to refresh many actions in one click, instead of going in the Configuration Manager client, then client on Actions and Run and Run... as below:

All actions were located in an XML file with an Active tag to set to True or False.

How to get it ?

Context ?
An icon is located in the systray bar, as below:
User click on the icon or do a right-click then click on CM force Update, 
It will refresh selected Configuration Manager actions.

The XML file
To choose which action you want to update or not, change the XML node from False to True, as below:
All nodes configured with Active status to True will be refresh once you click on the icon.

How to implement it ?
1 / Check if files have note been blocked after download
2 / Run the file CM_Force_Update.ps1
3 / An icon will be added in the systray
4 / You can create a scheduled task to run the tool at every log on for instance. In the downloaded folder you can find a script to create this kind of scheduled task: Scheduled_Task.ps1

How to use it ?
1 / Change values from the XML file to choose which actions to refresh or not
2 / Click on the icon
2 / Do a right-click and click on CM Force Update

See below differents results from the tool.

If a prerequisites (see below prerequistes) fails it will display a GUI as below:
- Check SMS service
- Check connection to the Management Point

If everything has been successully refreshed the below GUI will be display:

If an error occured during update the below will be displayed
Click on the View details button to view which action has failed