Pick the updates you want your OptiPlex 7050 test group (Pre-Prod) to have available to it, and click Save Changes. In this example, I’ll be showing the OptiPlex7050-Pre-Prod Catalog.Ĭlick on the 3 dots in front of the Status (which in this case is “Test”), and you can Edit the Definitions.
In the Dell Portal, I head to the Update Catalog area. If the registry property “Ring” with Value “Pre-Prod” isn’t there, it assumes Production. I have one group for Pre-Prod devices, which tags the registry and scripts key off of that. How I manage Pre-Prod / Prod deployments “rings” are by intune groups. I’ve chosen to create two catalogs per device model, one Pre-Production (Pre-Prod) for testing, and one Production (Prod) for actual deployments. If your company is already signed up for the portal, you’ll have to get permission from your portal admin, otherwise you’ll have to set your company setup, which I’ll let you work with your management on.Īssuming you have access to the portal, you can go into the Cloud Repository area, and create Catalogs. So this is more tricky, as you’ll need an account on Dell’s Tech Direct Portal. Managing Dell Command Update via Dell’s Portal The Script provides details about the BIOS, and also where the BIOS update log file itself is placed.
When the Detection runs, it checks Dell’s XML to see if there is an updated BIOS available, if the BIOS installed matches the one available, you’re compliant, otherwise the remediation will go ahead, download and install, triggering a reboot countdown. So here you now have a couple of options, you can leverage DCU to do it, now that you have that installed, or you can have another Proactive Remediation running that checks for Updated BIOS and Installed. The Detection Script saw that it had an old version of DCM and no DCU, so it reported non-compliant, then remediation ran updating DCM to the latest and installing the latest version of DCU, straight from Dell. The Detection Script is on GitHub, to get the Remediation Script, make a copy, rename “Detect” to “Remediate”, and change $remediate from $false to $true. Script is setup to use inside intune’s proactive remediation. powershell script that checks Dell for the versions of DCM & DCU then compares to the machine it’s running on, and either installs or updates.
So the question is, how do we get DCM (Dell Command Monitor) & DCU (Dell Command Update) installed on the computers? I like to avoid extra work, so if I can find a way to automatically make this happen, I will.
You can then have DCU set to update willy nilly, pulling the latest updates from Dell, or you can create your own “baseline” which you’ve tested and have DCU adhere to that (while still downloading and applying your “managed baseline” driver & BIOS versions from Dell directly).
Then there is Dell Command Update, this you’ll be able leverage to keep your devices BIOS and Drivers updated. This will allow you to leverage WMI to set BIOS settings via PowerShell and use Remediation Scripts via intune. In the future, I think the need for Dell Command Monitor will go away, but until you’ve lifecycle all of the devices that do not have native WMI support built in, you’ll need it.