Questions tagged [microsoft-intune]
Microsoft Intune is Microsoft's Mobile Device Management (MDM) platform.
69
questions
-1
votes
1
answer
17
views
How do you create a dynamic device group in Intune with membership based on the existence of a file?
How do you create a dynamic device group in Intune with membership based on the existence of a file? Within the add new group feature, I don't see a way to specify a file name, nor a way to utilize a ...
- 109
0
votes
2
answers
20
views
Restrict users from local accounts on Intune devices?
Devices are enrolled either via Autopilot or Azure AD Join in Intune, but the issue of people using local accounts remains. Do you know, is there a way to force Azure/Hybrid AD accounts and collect ...
1
vote
1
answer
68
views
Microsoft Endpoint Manager Firewall rule not working
I am trying to use Microsoft Endpoint Manager to block all traffic to Microsoft Edge for a group. I have done the following:
Created a group called Students and added user "Zephyr Prospect" ...
- 129
0
votes
0
answers
103
views
Intune managed installer blocked by WDAC
I'm trying to install applications via intune, but WDAC blocks the installers. For example:
Code Integrity determined that a process
((\Device\HarddiskVolume3\Windows\System32\msiexec.exe)
attempted ...
- 1
0
votes
0
answers
24
views
Force use of dedicated secondary admin accounts in Intune/AAD environment
Short situation sketch:
I inherited a customer environment where all devices are Azure AD joined and managed via Intune. The Azure AD account with which the user logs on, is local administrator.
I ...
- 1
0
votes
0
answers
34
views
Blocking Application Installation via Intune or custom OMA-URI for Admin Users
I have 10 systems where only 1 account exists on the Windows machines which is the microsoft work account. There are no local Admin accounts on these systems. I am able to block CMD, RegEdit, ...
- 111
0
votes
0
answers
59
views
In windows 10 how do I allow users to set up windows hello fingerprint?
I have a windows organization for which I'm the administrator. The users are registered to an Azure active directory which is managed with Intune.
When I set up the computer I first sign in with my ...
- 129
0
votes
1
answer
80
views
802.1x Wireless with certificates for AADJ/Intune devices without user affinity
I can setup certificate distribution and wireless profiles in Intune for devices with user affinity and this works fine. The user account is synchronised with our on site AD server and NPS has an ...
0
votes
1
answer
46
views
What happens when the token under an android profile in InTune expires?
Using the Coreporate-owned dedicated devices enrollment profile we created a profile and enrolled devices using it. Now we come back to add more devices and the profile and token have expired. What ...
- 101
0
votes
0
answers
231
views
Get-IntuneManagedDevice fails to return devices with an implied "Default" scope tag
We explicitly assign a scope tag to a group of devices. When looking at the properties of these devices they only show the assigned Scope Tag, not the implied "Default" scope tag.
This works ...
- 1,610
1
vote
0
answers
92
views
How to force users to change their Windows Hello Pin
We changed our password policy in the Microsoft Endpoint Manager and now require a longer PIN.
The issue is, in testing we noticed you're only asked to change the Windows Hello PIN, when logging in ...
- 13
0
votes
0
answers
71
views
Windows 10 Password Reset Notification
I have a strange issue with one of my end users. The issue is that the Windows Notification for Password Reset pops up for a certain user, daily. The end-user has reset their password via the ...
- 35
0
votes
1
answer
144
views
What Windows drivers survive a wipe / reset?
We are fully onboard with the modern mobile device management dream. Managing PCs with Intune and onboard them using Autopilot. These PCs are purchased with a clean install of Windows. For those we ...
- 1,610
0
votes
0
answers
18
views
Microsoft Endpoint Manager - Updating "Available" Win32apps
We currently have a number of Win32apps set as "Available" to end users, such as Chrome, Notepad++, and VS Code. I'm looking to package updates occasionally and have the app update on ...
- 1,029
0
votes
0
answers
51
views
Intune iOS/iPadOS | Configuration profiles how to apply to Ipad
Good afternoon,
I'm struggling to find On how I can apply the Configuration profiles to an Ipad.
The Ipad is visible in Intune under devices. But I can not apply the Configuration profile directly to ...
- 1
0
votes
0
answers
24
views
Can the enrollment profile tattooed to a PC during the OOBE be changed?
Is there a way to change the Enrollment Profile tattooed to a PC during its Out Of Box Experience?
I'd like to use the following filter, but have many machines in production with either blank ...
- 1,610
0
votes
1
answer
528
views
Autopilot Self-Provisioning fail
I'm working on an intune environment. Devices are able to successfully join in user attended mode. However when I set it to self-deploy devices fail on securing hardware with the following code: ...
0
votes
1
answer
32
views
Can Autopilot PCs be required to be Intune managed?
After recently having the Intune Wipe action fail to Wipe PCs though it removes the PC from Intune, I worry we could have more unmanaged yet fully functional PCs in the field. Is there a way to ...
- 1,610
0
votes
0
answers
74
views
How to create a default Autopilot Enrollment Profile and Intune configuration?
We have too many PCs being deployed without a valid Group Tag or before its Autopilot Enrollment Profile has been assigned. To catch these situations, and make them VERY obvious, I would like to ...
- 1,610
1
vote
1
answer
278
views
Disable the Windows 10 Password login option when FIDO in use
Hello Collective intelligence,
I have a question that is bugging me,
I have a Yubikey 5C setup in Azure AD with passwordless auth and registered to my account, I can log into the PC using the FIDO key ...
0
votes
2
answers
243
views
Using InTune for BitLocker enabling TPM+PIN+USB
I am tasked with enabling BitLocker via InTune and I am struggling to understand why the following settings are not taking effect on the endpoint.
In the OS drive settings
Compatible TPM Startup - ...
0
votes
0
answers
40
views
Deploying app to Intune with public key
I am trying to deploy an app called: Veyon to Intune (microsoft endpoint manager).
The program has been deployed and installed on the clients without problems.
But, the Veyon program is a monitoing ...
- 1
0
votes
0
answers
293
views
Intune Hardware Inventory not recognizing TPM in MSI Motherboard, but Bitlocker is running
I'm running Windows 10 10.0.19043.1237 on an MicroStar Z590-A PRO (MS-7D09) motherboard, where I recently installed a TPM. I can confirm that Bitlocker is running and providing full disk encryption, ...
- 153
1
vote
0
answers
84
views
How to deploy Microsoft Endpoint / InTune to computers that are in use already and not tied to Azure AD Accounts (Password Policy Failure)
We recently rolled out Microsoft Endpoint / InTune to our company computers. Everything works great if the first time a user logs in it is with their Azure AD credentials. We have computers that are ...
- 111
0
votes
1
answer
419
views
How do I disable Bitlocker Encryption settings using Intune?
We've activated Intune Bitlocker encryption and configured it needs a password to unlock.
Since we don't want our users to change the Bitlocker pin, we want to disable the Settings below.
Bitlocker ...
- 13
0
votes
1
answer
414
views
Intune Autopilot replace WDS or Sccm
I have been doing some research on Intune autopilot - I see that once hardware hash is registered it can go on autopilot mode wherein- users just need to sign in and all configurations are taken care ...
- 55
0
votes
1
answer
634
views
Windows Hello for Business - Hybrid Azure Joined Devices - Off LAN enrolment behaviour
Environment
Windows 10 Professional devices, Hybrid Azure AD Joined (physical)
Server 2019 DCs
AD Connect 1.5.45
Key Trust setup
Endpoint Manager used to deploy WHfB
CRL distribution point published ...
- 1
0
votes
1
answer
169
views
How to restrict access to 365 from office apps only?
I'm trying to restrict access to office365 (exchange specifically) from Microsoft office apps only?
I don't want to allow certain users to use native email clients because I want to use application ...
0
votes
1
answer
1k
views
Intune device not in Endpoint Manager
One of our devices is visible in MS Azure AD > Devices with Jointype = Azure AD joined and MDM = Microsoft Intune, but not visible in MS Endpoint Manager.
Any experiences/suggestions?
- 103
1
vote
0
answers
493
views
Configuration Profiles applying as System Account instead of user
I'm pulling my hair out over an issue I'm having with Intune. I've deployed a VPN profile using a custom configuration profile to my users and most users have received the VPN profile on their laptops ...
- 13
1
vote
1
answer
1k
views
Could Intune be the cause of unwanted restarts?
I have an Intune environment that I am currently working on pushing out an endpoint protection profile. There was an older endpoint protection profile that only pushed app control as "audit-only&...
3
votes
1
answer
24k
views
Microsoft Intune - How to modify Windows 10 registry settings?
Win32 app uses bat file to install software and edit registry keys. Registry keys are modified if I run bat file locally but not when run through via Intune because Intune runs installation as System.
...
- 151
0
votes
1
answer
195
views
Unable to User Enroll iOS devices
I'm trying to get iOS User Enrollment to work with Intune. I have done the following:
Created a Group for my pilot users
Added an Apple MDM Push certificate
Signed up for Apple Business Manager
...
- 155
0
votes
2
answers
5k
views
This Apple ID can't be used to make purchases - InTune/Apple Business Manager
We have just integrated InTune with Apple Business Manager and turned on the domain Federation which now allows our Azure AD users to log into Apple Devices with their work email address. We have hit ...
- 119
0
votes
2
answers
1k
views
Specifying machine certificate issuer with Windows VPN
I am trying to create a Windows Always On VPN connection between an AD and AAD joined Windows 10 client and a StrongSwan VPN server. The Windows client has multiple "Client Authentication" ...
- 267
1
vote
1
answer
113
views
Block unapproved Remote Assistance solutions
We have a cloud-only setup using Azure AD + Intune to manage our organisation's windows devices, since all are remote workers/work from home.
I'm looking to remove the possibility for users to ...
- 13
1
vote
1
answer
110
views
Installing Microsoft Store for Business apps on Intune Managed Self-Deploying Devices
We are having trouble with Microsoft Store for Business apps not installing, when assigned as Required to their Device group, on our Endpoint Manager (Intune) managed, Autopilot Self-Deploying, Shared ...
- 1,610
0
votes
1
answer
4k
views
Block Users from Installing programs with Azure AD joined Devices
I am looking for a way to block users from installing programs without an on prem AD domain (so no GPOs etc.). We have Office365 and the included Azure AD. The devices have not yet been joined to ...
1
vote
0
answers
158
views
autopilot not installing apps after autopilot reset
Whenever I putt a computer into autopilot and let the user login it installs all the applications. But whenever I do an autopilot reset and then let je user login in wont install any of the ...
- 11
1
vote
1
answer
424
views
Intune new office installation on already installed office
Currently users have office 365 installed via een msi that was inserted into Intune. We now want to use the new method because than we can easily add and remove applications.
Is it possible to do so? ...
- 21
0
votes
1
answer
88
views
Azure AD Windows logins connected to G Suite accounts
We use G Suite for our email, cloud storage, calendars, etc, but use Windows computers (mostly).
I've read a bit about Azure AD and the possibilities of linking G Suite accounts to Azure accounts so ...
0
votes
0
answers
40
views
Leaving Microsoft Intune
the last few months we tested device managment with Microsoft Intune. But for our workload we decided that Intune is not the right tool to use. So we don't extendes the trial period. We are currently ...
- 25
1
vote
0
answers
147
views
Enrol Chrome Browser via InTune
I'm having difficulty enrolling Chrome Browsers for management via Gsuite Admin on machines managed by InTune MDM.
I've tried following this guide, to set the CloudManagementEnrollmentToken via the ...
- 111
0
votes
1
answer
483
views
Creating tasks for task scheduler
We use Azure-AD with Intune at work and I was wondering if it is possible to utilise it to set task scheduler tasks. Checking the CSP library did not prove helpful.
I know I can utilise power-shell ...
1
vote
0
answers
36
views
Can you target app deployments to local users in InTune?
Is there any way to target app deployments to local users (not devices) such as the local user that kiosks create, kioskUser0?
- 111
0
votes
0
answers
3k
views
Syncml(500): The recipient encountered an unexpected condition which prevented it from fulfilling the request - Intune Bitlocker
When trying to enable encryption (BitLocker) from Intune using a profile under Windows10_EndpointProtection
, it throws out an error like this:
Syncml(500): The recipient encountered an unexpected ...
0
votes
1
answer
254
views
can windows intune do a self service software distribution portal?
I want to give users a self-service software portal like sccm can do but sccm is huge and I have less than 100 users and many are mobile
From what I understand intune is for oob/mobile users. Does ...
- 3,979
1
vote
0
answers
35
views
No mobile devices in Intune - Testing a few users from Hybrid SCCM to Intune Standalone
I'm testing at the moment with a few users to migratie from Hybrid SCCM to Intune Standalone. I followed this steps:
https://docs.microsoft.com/en-us/sccm/mdm/deploy-use/migrate-hybridmdm-to-intunesa
...
- 11
2
votes
1
answer
3k
views
Updating Microsoft Intune devices via Powershell
Looking for a bit of help with the Intune Powershell/graph interface.
I'm trying to manipulate Intune Device Categories via Powershell, so that I can firstly correct devices that were placed into the ...
- 31.6k
2
votes
1
answer
47
views
Recommendations for future-facing (fully cloud-based) Identity and EMM/UEM Solutions
I have recently started consulting for a tech startup of about 60 users that has grown, and is looking to expand, quickly.
Due to the fast growth, and lack of formal IT advice up until now, they are ...
- 21