Digital Workspace

By -Grischa Ernst

Create a custom PPKG for the Factory Provisioning Tool

Posted on 2021-05-20
Posted in Microsoft

Sometimes you need to add/modify something in a PPKG and you don’t want to create a new PPKG in the Workspace ONE console. Normally this is not supported since the Factory Provisioning Tool checking the PPKG for a “watermark”. This guid will show you how to create a custom PPKG with the Windows ICD and

By -Grischa Ernst

KB – Reboot loop after enterprise reset

Posted on 2021-05-20
Posted in KB, Windows Desktop
10 Comments

Starting with Windows 10 2004 and higher, Microsoft changed the way they creating PPKG’s. This change is causing a reboot loop when the device was setup with a PPKG – like with Factory Provisioning (or now called Drop Ship Provisioning Offline) AND doing enterprise reset. After the reset is done, the PPKG causing a reboot

By -Grischa Ernst

KB – Target Release Version for 20H2 and 21H1

Posted on 2021-05-19
Posted in KB, Windows Desktop

Since the target release version CSP is still not working since 20H2 and Microsoft seems not able to fix this, we need to change the target release version via registry. The reason why the CSP does not work is, that Microsoft introduced letters in the Windows version – like 20H2 or 21H2. The CSP only

By -Grischa Ernst and Camille Debay

KB – Change a local user password via CSP

Posted on 2021-04-29
Posted in KB, Windows Desktop
4 Comments

Recently we got a question from a customer how to manage Windows local account passwords via UEM. Microsoft does not provide any native CSP for this, so we need a PowerShell script for changing the password. This will also provide some more flexibility when you want to change a different user as the local Administrator

By -Camille Debay

Migrate from ObjectGUID to ms-DS-ConsistencyGuid in Workspace ONE

Posted on 2021-04-23
Posted in Workspace ONE UEM

Depending on the customer situation, they might need to change from ObjectGUID to ms-DS-ConsistencyGuid as their source anchor in Azure AD which impact the immutable attribute. In Workspace ONE, you need to specify the Immutable attribute so UEM can retrieve the right user when doing Azure AD join. So it might be necessary to change

By -Grischa Ernst

Certificate authentication for Workspace ONE API with PowerShell scripts

Posted on 2021-04-19
Posted in API

If you are looking for a way to run PowerShell scripts with certificate authentication to work with the Workspace ONE API, you will find several solutions. But no solution really worked. In the API help you can review the supported authentications – e.g. here on CN137: https://cn137.awmdm.com/API/help/InitialSetup.html As you can see, Workspace ONE supports Basic,

By -Camille Debay

Tunnel all Microsoft 365 traffic with VMware Tunnel

Posted on 2021-02-02
Posted in Android, iOS, Workspace ONE UAG, Workspace ONE UEM
2 Comments

This blog post detail how to tunnel all traffic for Microsoft 365 applications on iOS and Android, it explains what the necessary steps are to be able to do so. I assume that VMware Unified Access Gateway is deployed with Tunnel services activated and proven to be functional. Technical detail Microsoft 365 applications can all

By -Camille Debay

Domain Authentication with Tunnel PerApp VPN

Posted on 2021-01-28
Posted in Business Continuity, Windows Desktop

Story On Windows when an administrator wants to join a machine to the domain, Microsoft provide 2 solution: Online domain join, since Windows 2000, requires to be on the same network of a domain controller, often mentioned as “domain join”. Offline domain join, since Windows 7 via command line and Windows 10 1709 via CSP,

By -Grischa Ernst

KB – Intelligent HUB AntiVirus exclusions

Posted on 2021-01-27
Posted in KB, Windows Desktop
1 Comment

If you start with Windows management and VMware Workspace ONE, you should know which paths should me excluded from AntiVirus. There are several paths were the VMware Intelligent HUB reads, writes and modifies data. The following path should be excluded from AntiVirus: C:\Program Files (x86)\AirWatch\AgentUI C:\ProgramData\AirWatch C:\ProgramData\AirWatchMDM C:\Program Files\VMware\SfdAgent If you want to exclude also

By -Grischa Ernst

KB – Disable all Intelligence HUB notifications

Posted on 2021-01-25
Posted in KB, Windows Desktop

When you migrate from an older Workspace ONE UEM version to 20.08 or newer, the Intelligence HUB is now able to use the Windows toast notifications to inform the user. If you don’t want those notifications show to the user, you can add the following regkeys before you upgrade the Intelligence HUB on the device:

GDPR Cookies Policy