Cybersecurity
DevOps Cloud (ADM)
IT Operations Cloud
Microsoft has introduced certain requirements that a device needs to meet to be eligible for the Windows 11 upgrade. For information about Windows 11 system requirements, see https://www.microsoft.com/en-us/windows/windows-11-specifications.
The non-detachable hardware requirements for the Windows 11 upgrade are supported by ZENworks Inventory. However, we currently do not possess the TPM module-related information.
Using this cool solution, we can obtain the TPM module-related information and generate a ZCC report which includes all of the devices that are eligible for Windows 11 upgrade in a zone.
You need to perform the following to obtain the TPM module information and generate a device list that is eligible for the update:
Create an Administrator-Defined Field (Workstation) - In the Configuration > Asset Inventory page, create an Administrator-Defined Field (Workstation) and optionally name it as TPM.
Enable Launch Collection Data Form - In the Configuration > Inventory page, enable the Launch Collection Data Form option.
Mark the TPM as 'Required' - In the Configuration > Inventory page, click Collection Data Form. Then, corresponding to TPM ADF, select the Required checkbox and click No to open the Autofill dialog box. Next, specify the Environment Variable as 'TPMManufacturerVersion'.
Create an empty Windows bundle and run the script as a dynamic administrator – In the Bundles page, create an empty Windows bundle with a Launch action defined.
Ensure that the 'Script to Run' and 'Run as a dynamic administrator' options are selected when the launch action is created.
The script contains code to read the TPM Information and populate an environment variable. The contents of the script is as follows:
@echo off
setlocal EnableDelayedExpansion
powershell -Command "& get-tpm"|findstr ManufacturerVersion>"%ZENWORKS_HOME%\tpmtest.txt"
set /p S=<"%ZENWORKS_HOME%\tpmtest.txt"
for /f "tokens=* delims= " %%a in ('echo %S%') do set S=%%a
if ["%S%"]==["ECHO is on."] (
set S=
)
if ["%S%"]==["ManufacturerVersion : "] (
set S=
)
setx TPMManufacturerVersion "" /m
setx TPMManufacturerVersion "%S%" /m
IF EXIST "%ZENWORKS_HOME%\tpmtest.txt" DEL /F "%ZENWORKS_HOME%\tpmtest.txt"
Assign the bundle to devices – In the Bundles page, choose a bundle and assign the bundle to all the devices that need to be monitored. Make sure the bundles are enabled on the devices.
Create a custom report – In the Reports > Inventory Custom Reports, create a custom report and run the report. The list of devices that qualify the minimum requirements for the Windows 11 upgrade will be displayed after the next inventory scan.