The purpose of this series of posts is to explore and use Workspace ONE AirLift into a Lab environment to migrate devices, applications, and policies (GPOs) from ConfigMgr and Active Directory Domain Services (ADDS) to Modern Management with Workspace ONE.

Table of Content:

Part 1 - AirLift Introduction and Diagram Overview. [Click here]
Part 2 - Servers and Computer Global Configuration. [Click here]
Part 3 - Active Directory Configuration and Domain Join. [Click here]
Part 4 - Hard Disks Configuration and prerequisite Sources Preparation. [Click here]
Part 5 - Roles and Features Installation. SPN Creation. [Click here]
Part 6 - SQL Server, SSRS and SSMS Installation. [Click here]
Part 7 - WSUS Installation and Configuration. ADK And WinPE Installation. [Click here]
Part 8 - ConfigMgr prerequsisites: System Management Container creation, AD Schema Extension and Database Creation. [Click here]
Part 9 - Installation, Overview and Update of ConfigMgr. [Click here]
Part 10 - ConfigMgr Configuration: Discovery methods Activation, Boundaries creation, Software Center personalization, VLC app configuration. [You are here]
Part 11 - Airlift Installation, Configuration and Overview. [Coming Soon !]

1 - Discovery Methods Configuration

The following manipulation have to be done on MOB-SRV-MECM-01 Server.

1.1 - Active Directory Forest Discovery

1. Open Configuration Manager Console.
2. In Workspaces, click Administration.
3. Expand Overview node.
4. Expand Hierarchy Configuration node.
5. Click on Discovery Methods.
6. Select Active Directory Forest Discovery.
7. In Ribbon, click on Properties.
8. In Active Directory Forest Discovery Properties window, check Enable Active Directory Forest Discovery.
9. Click on Apply.
10. On Configuration Manager pop-up window, click on Yes.
11. Click on OK.

Active Directory Forest Discovery uses Configmgr site server's computer account to access Active Directory locations.

If needed, you can check logs related to Forest Discovery by navigating to D:\Program Files\Microsoft Configuration Manager\Logs.
Active Directory Forest Discovery logs are located on ADForestDisc.log file.

1.2 - Active Directory Group Discovery

Active Directory Group Discovery method is used to discover security groups in Active Directory.

1. Select Active Directory Group Discovery.
2. In Ribbon, click on Properties.
3. In Active Directory Group Discovery Properties window, click on General tab.
4. Check Enable Active Directory Group Discovery.
5. Click on Add.
6. Click on Location...

7. On Add Active Directory Location window, next to Name property, enter Mobinergy Groups.
8. On Add Active Directory Location window, next to Location property, click on Browse....
9. Select Mobinergy groups OU.
10. Click on OK.

11. On Add Active Directory Location window, on Active Directory Group Discovery Account section, select Specify an account.
12. Click on Set...
13. Click on New Account.

14. On Windows User Account window, next to User name, add MOBINERGY\SVC_DISCOVERY account.
15. Enter SVC_DISCOVERY Password next to Password and Confirm password.
16. Expand Verify >>
17. Click on Test connection.
18. Verify that The connection was successfully verified.
19. Click on OK to close Configuration Manager pop-up window.
20. Click on OK to close Windows User Account window.

21. Click on Apply.
22. On Configuration Manager pop-up window, click on Yes.
23. Click on OK to close Active Directory Group Discovery Properties window.

If needed, you can check logs related to Group Discovery by navigating to D:\Program Files\Microsoft Configuration Manager\Logs.
Active Directory Group Discovery logs are located on adsgdis.log file.

1.3 - Active Directory System Discovery

Active Directory System Discovery method is used to discover computer resources in Active Directory.

1. Select Active Directory System Discovery.
2. In Ribbon, click on Properties.
3. In Active Directory System Discovery Properties window, click on General tab.
4. Check Enable Active Directory System Discovery.
5. Next to Active Directory containers property, click on the yellow sun icon.
6. On Active Directory Container window, next to Path property, click on Browse... and select the root Active Directory node.
7. On Search Options section, check Discover objects within Active Directory groups.
8. On Active Directory Discovery Account section, select Specify an account and add MOBINERGY\SVC_DISCOVERY account.
9. Click on OK to close Active Directory Container window

10. Click on Apply.
11. On Configuration Manager pop-up window, click on Yes.
12. Click on OK to close Active Directory System Discovery Properties window.

If needed, you can check logs related to System Discovery by navigating to D:\Program Files\Microsoft Configuration Manager\Logs.
Active Directory System Discovery logs are located on adsysdis.log file.

1.4 - Active Directory User Discovery

Active Directory User Discovery method is used to discover user resources in Active Directory and retrieve attributes like username, unique username, domain and AD container.

1. Repeat the same steps than with Active Directory System Discovery.

If needed, you can check logs related to User Discovery by navigating to D:\Program Files\Microsoft Configuration Manager\Logs.
Active Directory User Discovery logs are located on adusrdis.log file.

1.5 - Discovery Verification

1. In Workspaces, click Assets and Compliance.
2. Expand Overview node.
3. Click on Users node and verify all users and user groups are listed.

4. Click on Devices and verify all devices are listed.

5. Close all windows.

2 - Boundaries Configuration

2.1 - Site Name Modification

The following manipulation have to be done on MOB-SRV-DC-01 Server.

1. Open Server Manager.
2. Click on Tools located on the upper right corner.
3. Click on Active Directory Sites and Services.
4. Expand Sites node.
5. Rename Default-First-Site-Name into MOBINERGY-MAIN-SITE.
6. Close all windows.

2.2 - Boundary Creation

The following manipulation have to be done on MOB-SRV-MECM-01 Server.

Boundaries define network locations on the intranet that contains devices we want to manage.

1. Open Configuration Manager Console.
2. In Workspaces, click on Administration.
3. Expand Overview node.
4. Expand Hierarchy Configuration node.
5. Click on Boundaries.
6. On ribbon, click on Create Boundary.
7. Click on General tab.
8. Next to Description property, enter Mobinergy Main Site.
9. Next to Type property, select Active Directory site.
10. Next to Active Directory site name property, click on Browse...
11. Select MOBINERGY-MAIN-SITE.
12. Click on OK.
13. Click on Apply.
14. Click on OK to close Create Boundary window.

2.3 - Boundary Groups Creation

The following manipulation have to be done on MOB-SRV-MECM-01 Server.

Boundary Groups are logical groups to organize related network locations i.e. boundaries.

1. Open Configuration Manager Console.
2. In Workspaces, click on Administration.
3. Expand Overview node.
4. Expand Hierarchy Configuration node.
5. Click on Boundary Groups.
6. On ribbon, click on Create Boundary Group.
7. Click on General tab.
8. Next to Name property, enter Mobinergy Boundary Group.
9. Under Boundaries property, click on Add...
10. Check MOBINERGY-MAIN-SITE.
11. Click on OK.

12. Click on References tab.
13. Check Use this boundary group for site assignment.
14. Under Site system servers, click Add...
15. Check \\MOB-SRV-MECM-01.ad.mobinergy.com
16. Click on OK to close Add Site Systems window.
17. Click on Apply.
18. Click on OK to close Create Boundary Group window.

19. Close all windows.

3 - Client Push Installation Configuration

The following manipulation have to be done on MOB-SRV-MECM-01 Server.

1. Open Configuration Manager Console.
2. In Workspaces, click Administration.
3. Expand Overview node.
4. Expand Site Configuration node.
5. Click on Site.
6. On ribbon, click Client Installation Settings.
7. Click on Client Push Installation.

On Client Push Installation Properties window:
8. Click on Accounts tab.
9. Click on the yellow sun icon.
10. Click on New Account.

On Windows User Account window:
11. Click on Browse...

On Select User window:
13. Enter SVC_MECMClientPush
14. Validate by clicking on Check Names
15. Close Select User window by clicking on OK.

16. Go back to Windows User Account window, next to Password and Confirm Password, enter SVC_MECMClientPush Password.
17. Click on Verify >>.
18. Next to Network share, enter \\MOB-DKT-AIRLIFT-01\c$.
19. Click on Test connection and verify that the connection was succesfully verified.
20. Close Windows User Account by clicking on OK.

21. Close Client Push Installation Properties window by clicking on Apply then on OK.
22. Go back in Administration workspace.
23. Expand Overview node.
24. Click on Distribution Points.
25. On ribbon, click on Properties.

On MOB-SRV-MECM-01.AD.MOBINERGY.COM Properties window:
26. Click on Content tab.
27. Verify that Configuration Manager Client Package appears under Deployment packages section.

28. Verify that Mobinergy Boundary Group appears under Boundary Groups tab.

29. To close MOB-SRV-MECM-01.AD.MOBINERGY.COM Properties window, click on OK.

4 - Software Center Personalization

The following manipulation have to be done on MOB-SRV-MECM-01 Server.

1. Open Configuration Manager Console.
2. In Workspaces, click on Administration.
3. Expand Overview node.
4. Click on Client Settings.
5. On ribbon, click on Properties.

On Default Settings window:
6. Click on Remote Tools payload.
7. Click on Configure Settings.

On Remote Control and Windows Defender Firewall Client Settings window:
8. Check Enable Remote Control on client computers.
9. Check Domain.
10. Close Remote Control and Windows Defender Firewall Client Settings by clicking on OK.

On Default Settings window:
13. Click on Software Center payload.
14. Next to Select these new settings to specify company information, select Yes.
15. Click on Customize.

On Software Center Customization window:
16. Click on General tab.
17. You can change Software Center Color scheme, Foreground color and add a logo. Here is my own configuration.

On Software Center Customization window:
18. Click on Tabs tab.
19. You can hide tabs on Software Center. Here is my own configuration:

20. To close Software Center Customization window, click on OK.
21. To close Default Settings window, click on OK.

5 - Client Push Installation

The following manipulation have to be done on MOB-SRV-MECM-01 Server.

1. Open Configuration Manager Console.
2. In Workspaces, click on Assets and Compliance.
3. Expand Overview node.
4. Click on Devices node.
5. On ribbon, click on Install Client.

5.1 - Before You Begin Step

1. Click on Next >.

5.2 - Installation Options Step

1. Check Always install the client software.
2. Check Install the client software from a specified site.
3. Click on Next >.

5.3 - Summary Step

1. Click on Next >.

5.4 - Completion Step

1. Verify that The task "Install Configuration Manager Client Wizard" completed successfully.
2. Click on Close.

6 - Client Push Installation Verification

The following manipulation have to be done on MOB-DKT-AIRLIFT-01 Computer.

1. Open Task Manager.

On Task Manager window:
2. Click on Details tab.
3. The first step of Software Center installation is the execution of ccmsetup.exe.

4. The second step of Software Center installation is the execution of ccmExec.exe. During a short time, we can also see the execution of ccmRestart.exe.

5. A few minutes later, Software Center appears on Start menu.
6. Pin Software Center to taskbar.

7. Software Center installation logs may be found on C:\Windows\ccmsetup\Logs\ccmsetup.log file. Accesss to ccmsetup folder requires admin rights.

The following manipulation have to be done on MOB-SRV-MECM-01 Server.

1. Open Configuration Manager Console.
2. In Workspaces, click on Assets and Compliance.
3. Expand Overview node.
4. Click on Devices node.
5. MOB-DKT-AIRLIFT-01 Computer is now configured

7 - Download VLC Application

The following manipulation have to be done on MOB-SRV-MECM-01 Server.

1. Open Chrome web Browser.
2. Navigate to VLC download web page.
3. Download VLC by clicking on vlc-3.0.16-win64.msi.

4. Download VLC icon as well.
5. Once both files are downloaded, close Chrome web browser.
6. Open File Explorer.
7. Create a new folder named VLC under F:\Sources.
8. Copy Past both files from C:\Users\MECMAdmin\Downloads to F:\Sources\VLC.

8. Close all windows.

8 - VLC Application Creation

The following manipulation have to be done on MOB-SRV-MECM-01 Server.

1. Open Configuration Manager Console.
2. In Workspaces, click on Software Library.
3. Expand Overview node.
4. Expand Application Management node.
5. Click on Applications node.
6. On ribbon, click on Create Application.

8.1 - General Step

1. Next to Location, enter \MOB-SRV-MECM-01\Sources\VLC\vlc-3.0.16-win64.msi
2. Click on Next >.

8.2 - Important Information Step

1. Click on Next >.

8.3 - General Information Step

1. Next to Install behavior, verify that Install for system is selected.
2. Click on Next >.

8.4 - Summary Step

1. Click on Next >.

8.5 - Completion Step

1. Click on Close.

9 - VLC Application Post Creation

The following manipulation have to be done on MOB-SRV-MECM-01 Server.

1. Select VLC media player 3.0.16 (64-bit)
2. On ribbon, click on Properties.

3. Click on Software Center tab.
4. Next to Localized application name, modify the entry by VLC Media Player.
5. Next to Icon, click on Browse... and select VLC Icon previously downloaded.

6. Click on Deployment Types tab.
7. Under Deployment types, select the only one deployment type listed.
8. Click on Edit....

9. Click on Content tab.
10. Next to Uninstall content settings, select No uninstall content.
11. Click on Apply.
12. Click on OK.

13. Click on Apply.
14. Click on OK.

10 - VLC Application Distribution

The following manipulation have to be done on MOB-SRV-MECM-01 Server.

1. Select VLC media player 3.0.16 (64-bit)
2. On ribbon, click on Distribute Content.

10.1 - General Step

1. Click on Next >.

10.2 - Content Step

1. Click on Next >.

10.3 - Content Destination Step

1. Click on Add.
2. Select Distribution Point.

3. Under Available distribution points, Check the only one distribution point available.
4. Click on OK.

5. Click on Next >.

10.4 - Summary Step

1. Click on Next >.

10.5 - Completion Step

1. Click on Close.

11 - VLC Application Deployment

The following manipulation have to be done on MOB-SRV-MECM-01 Server.

1. Select VLC media player 3.0.16 (64-bit)
2. On ribbon, click on Deploy.

11.1 - General Step

1. Next to Collection, click on Browse...

2. Select Device Collections.
3. Select All Desktop and Server Clients.
4. Click on OK.

5. Click on Next >.

11.2 - Content Step

1. Click on Next >.

11.3 - Deployment Settings Step

1. Click on Summary.

11.4 - Summary Step

1. Click on Next >.

11.5 - Completion Step

1. Click on Close.

11.6 - Deployment Confirmation

The following manipulation have to be done on MOB-DKT-AIRLIFT-01 Desktop.

1. Open Software Center.
2. Verify that next to Application menu a green square icon appears with the number 1 on it.
3. Click on Applications menu.
4. Verify VLC Media Player is listed.

5. Close all windows.

12 - Update Architecture Diagram

Regarding modifications, here is the updated Architecture Diagram:

13 - Conclusion

This is the end of the Part 10 for this series of posts. In this post we have done the following manipulations:

• Activate different Discovery methods.
• Configure Boundaries.
• Configure, personalize and push Software Center.
• Configure, personalize and push VLC application.

See you in Part 11 to continue the configuration.