Questions tagged [microsoft-intune]

Microsoft Intune is Microsoft's Mobile Device Management (MDM) platform.

Filter by
Sorted by
Tagged with
-1 votes
1 answer
17 views

How do you create a dynamic device group in Intune with membership based on the existence of a file?

How do you create a dynamic device group in Intune with membership based on the existence of a file? Within the add new group feature, I don't see a way to specify a file name, nor a way to utilize a ...
user avatar
0 votes
2 answers
20 views

Restrict users from local accounts on Intune devices?

Devices are enrolled either via Autopilot or Azure AD Join in Intune, but the issue of people using local accounts remains. Do you know, is there a way to force Azure/Hybrid AD accounts and collect ...
user avatar
1 vote
1 answer
68 views

Microsoft Endpoint Manager Firewall rule not working

I am trying to use Microsoft Endpoint Manager to block all traffic to Microsoft Edge for a group. I have done the following: Created a group called Students and added user "Zephyr Prospect" ...
user avatar
  • 129
0 votes
0 answers
103 views

Intune managed installer blocked by WDAC

I'm trying to install applications via intune, but WDAC blocks the installers. For example: Code Integrity determined that a process ((\Device\HarddiskVolume3\Windows\System32\msiexec.exe) attempted ...
user avatar
0 votes
0 answers
24 views

Force use of dedicated secondary admin accounts in Intune/AAD environment

Short situation sketch: I inherited a customer environment where all devices are Azure AD joined and managed via Intune. The Azure AD account with which the user logs on, is local administrator. I ...
user avatar
0 votes
0 answers
34 views

Blocking Application Installation via Intune or custom OMA-URI for Admin Users

I have 10 systems where only 1 account exists on the Windows machines which is the microsoft work account. There are no local Admin accounts on these systems. I am able to block CMD, RegEdit, ...
user avatar
0 votes
0 answers
59 views

In windows 10 how do I allow users to set up windows hello fingerprint?

I have a windows organization for which I'm the administrator. The users are registered to an Azure active directory which is managed with Intune. When I set up the computer I first sign in with my ...
user avatar
  • 129
0 votes
1 answer
80 views

802.1x Wireless with certificates for AADJ/Intune devices without user affinity

I can setup certificate distribution and wireless profiles in Intune for devices with user affinity and this works fine. The user account is synchronised with our on site AD server and NPS has an ...
user avatar
0 votes
1 answer
46 views

What happens when the token under an android profile in InTune expires?

Using the Coreporate-owned dedicated devices enrollment profile we created a profile and enrolled devices using it. Now we come back to add more devices and the profile and token have expired. What ...
user avatar
0 votes
0 answers
231 views

Get-IntuneManagedDevice fails to return devices with an implied "Default" scope tag

We explicitly assign a scope tag to a group of devices. When looking at the properties of these devices they only show the assigned Scope Tag, not the implied "Default" scope tag. This works ...
user avatar
1 vote
0 answers
92 views

How to force users to change their Windows Hello Pin

We changed our password policy in the Microsoft Endpoint Manager and now require a longer PIN. The issue is, in testing we noticed you're only asked to change the Windows Hello PIN, when logging in ...
user avatar
  • 13
0 votes
0 answers
71 views

Windows 10 Password Reset Notification

I have a strange issue with one of my end users. The issue is that the Windows Notification for Password Reset pops up for a certain user, daily. The end-user has reset their password via the ...
user avatar
0 votes
1 answer
144 views

What Windows drivers survive a wipe / reset?

We are fully onboard with the modern mobile device management dream. Managing PCs with Intune and onboard them using Autopilot. These PCs are purchased with a clean install of Windows. For those we ...
user avatar
0 votes
0 answers
18 views

Microsoft Endpoint Manager - Updating "Available" Win32apps

We currently have a number of Win32apps set as "Available" to end users, such as Chrome, Notepad++, and VS Code. I'm looking to package updates occasionally and have the app update on ...
user avatar
  • 1,029
0 votes
0 answers
51 views

Intune iOS/iPadOS | Configuration profiles how to apply to Ipad

Good afternoon, I'm struggling to find On how I can apply the Configuration profiles to an Ipad. The Ipad is visible in Intune under devices. But I can not apply the Configuration profile directly to ...
user avatar
  • 1
0 votes
0 answers
24 views

Can the enrollment profile tattooed to a PC during the OOBE be changed?

Is there a way to change the Enrollment Profile tattooed to a PC during its Out Of Box Experience? I'd like to use the following filter, but have many machines in production with either blank ...
user avatar
0 votes
1 answer
528 views

Autopilot Self-Provisioning fail

I'm working on an intune environment. Devices are able to successfully join in user attended mode. However when I set it to self-deploy devices fail on securing hardware with the following code: ...
user avatar
0 votes
1 answer
32 views

Can Autopilot PCs be required to be Intune managed?

After recently having the Intune Wipe action fail to Wipe PCs though it removes the PC from Intune, I worry we could have more unmanaged yet fully functional PCs in the field. Is there a way to ...
user avatar
0 votes
0 answers
74 views

How to create a default Autopilot Enrollment Profile and Intune configuration?

We have too many PCs being deployed without a valid Group Tag or before its Autopilot Enrollment Profile has been assigned. To catch these situations, and make them VERY obvious, I would like to ...
user avatar
1 vote
1 answer
278 views

Disable the Windows 10 Password login option when FIDO in use

Hello Collective intelligence, I have a question that is bugging me, I have a Yubikey 5C setup in Azure AD with passwordless auth and registered to my account, I can log into the PC using the FIDO key ...
user avatar
0 votes
2 answers
243 views

Using InTune for BitLocker enabling TPM+PIN+USB

I am tasked with enabling BitLocker via InTune and I am struggling to understand why the following settings are not taking effect on the endpoint. In the OS drive settings Compatible TPM Startup - ...
user avatar
0 votes
0 answers
40 views

Deploying app to Intune with public key

I am trying to deploy an app called: Veyon to Intune (microsoft endpoint manager). The program has been deployed and installed on the clients without problems. But, the Veyon program is a monitoing ...
user avatar
  • 1
0 votes
0 answers
293 views

Intune Hardware Inventory not recognizing TPM in MSI Motherboard, but Bitlocker is running

I'm running Windows 10 10.0.19043.1237 on an MicroStar Z590-A PRO (MS-7D09) motherboard, where I recently installed a TPM. I can confirm that Bitlocker is running and providing full disk encryption, ...
user avatar
  • 153
1 vote
0 answers
84 views

How to deploy Microsoft Endpoint / InTune to computers that are in use already and not tied to Azure AD Accounts (Password Policy Failure)

We recently rolled out Microsoft Endpoint / InTune to our company computers. Everything works great if the first time a user logs in it is with their Azure AD credentials. We have computers that are ...
user avatar
  • 111
0 votes
1 answer
419 views

How do I disable Bitlocker Encryption settings using Intune?

We've activated Intune Bitlocker encryption and configured it needs a password to unlock. Since we don't want our users to change the Bitlocker pin, we want to disable the Settings below. Bitlocker ...
user avatar
  • 13
0 votes
1 answer
414 views

Intune Autopilot replace WDS or Sccm

I have been doing some research on Intune autopilot - I see that once hardware hash is registered it can go on autopilot mode wherein- users just need to sign in and all configurations are taken care ...
user avatar
0 votes
1 answer
634 views

Windows Hello for Business - Hybrid Azure Joined Devices - Off LAN enrolment behaviour

Environment Windows 10 Professional devices, Hybrid Azure AD Joined (physical) Server 2019 DCs AD Connect 1.5.45 Key Trust setup Endpoint Manager used to deploy WHfB CRL distribution point published ...
user avatar
  • 1
0 votes
1 answer
169 views

How to restrict access to 365 from office apps only?

I'm trying to restrict access to office365 (exchange specifically) from Microsoft office apps only? I don't want to allow certain users to use native email clients because I want to use application ...
user avatar
0 votes
1 answer
1k views

Intune device not in Endpoint Manager

One of our devices is visible in MS Azure AD > Devices with Jointype = Azure AD joined and MDM = Microsoft Intune, but not visible in MS Endpoint Manager. Any experiences/suggestions?
user avatar
  • 103
1 vote
0 answers
493 views

Configuration Profiles applying as System Account instead of user

I'm pulling my hair out over an issue I'm having with Intune. I've deployed a VPN profile using a custom configuration profile to my users and most users have received the VPN profile on their laptops ...
user avatar
1 vote
1 answer
1k views

Could Intune be the cause of unwanted restarts?

I have an Intune environment that I am currently working on pushing out an endpoint protection profile. There was an older endpoint protection profile that only pushed app control as "audit-only&...
user avatar
3 votes
1 answer
24k views

Microsoft Intune - How to modify Windows 10 registry settings?

Win32 app uses bat file to install software and edit registry keys. Registry keys are modified if I run bat file locally but not when run through via Intune because Intune runs installation as System. ...
user avatar
  • 151
0 votes
1 answer
195 views

Unable to User Enroll iOS devices

I'm trying to get iOS User Enrollment to work with Intune. I have done the following: Created a Group for my pilot users Added an Apple MDM Push certificate Signed up for Apple Business Manager ...
user avatar
0 votes
2 answers
5k views

This Apple ID can't be used to make purchases - InTune/Apple Business Manager

We have just integrated InTune with Apple Business Manager and turned on the domain Federation which now allows our Azure AD users to log into Apple Devices with their work email address. We have hit ...
user avatar
0 votes
2 answers
1k views

Specifying machine certificate issuer with Windows VPN

I am trying to create a Windows Always On VPN connection between an AD and AAD joined Windows 10 client and a StrongSwan VPN server. The Windows client has multiple "Client Authentication" ...
user avatar
  • 267
1 vote
1 answer
113 views

Block unapproved Remote Assistance solutions

We have a cloud-only setup using Azure AD + Intune to manage our organisation's windows devices, since all are remote workers/work from home. I'm looking to remove the possibility for users to ...
user avatar
  • 13
1 vote
1 answer
110 views

Installing Microsoft Store for Business apps on Intune Managed Self-Deploying Devices

We are having trouble with Microsoft Store for Business apps not installing, when assigned as Required to their Device group, on our Endpoint Manager (Intune) managed, Autopilot Self-Deploying, Shared ...
user avatar
0 votes
1 answer
4k views

Block Users from Installing programs with Azure AD joined Devices

I am looking for a way to block users from installing programs without an on prem AD domain (so no GPOs etc.). We have Office365 and the included Azure AD. The devices have not yet been joined to ...
user avatar
1 vote
0 answers
158 views

autopilot not installing apps after autopilot reset

Whenever I putt a computer into autopilot and let the user login it installs all the applications. But whenever I do an autopilot reset and then let je user login in wont install any of the ...
user avatar
1 vote
1 answer
424 views

Intune new office installation on already installed office

Currently users have office 365 installed via een msi that was inserted into Intune. We now want to use the new method because than we can easily add and remove applications. Is it possible to do so? ...
user avatar
  • 21
0 votes
1 answer
88 views

Azure AD Windows logins connected to G Suite accounts

We use G Suite for our email, cloud storage, calendars, etc, but use Windows computers (mostly). I've read a bit about Azure AD and the possibilities of linking G Suite accounts to Azure accounts so ...
user avatar
0 votes
0 answers
40 views

Leaving Microsoft Intune

the last few months we tested device managment with Microsoft Intune. But for our workload we decided that Intune is not the right tool to use. So we don't extendes the trial period. We are currently ...
user avatar
  • 25
1 vote
0 answers
147 views

Enrol Chrome Browser via InTune

I'm having difficulty enrolling Chrome Browsers for management via Gsuite Admin on machines managed by InTune MDM. I've tried following this guide, to set the CloudManagementEnrollmentToken via the ...
user avatar
0 votes
1 answer
483 views

Creating tasks for task scheduler

We use Azure-AD with Intune at work and I was wondering if it is possible to utilise it to set task scheduler tasks. Checking the CSP library did not prove helpful. I know I can utilise power-shell ...
user avatar
1 vote
0 answers
36 views

Can you target app deployments to local users in InTune?

Is there any way to target app deployments to local users (not devices) such as the local user that kiosks create, kioskUser0?
user avatar
  • 111
0 votes
0 answers
3k views

Syncml(500): The recipient encountered an unexpected condition which prevented it from fulfilling the request - Intune Bitlocker

When trying to enable encryption (BitLocker) from Intune using a profile under Windows10_EndpointProtection , it throws out an error like this: Syncml(500): The recipient encountered an unexpected ...
user avatar
0 votes
1 answer
254 views

can windows intune do a self service software distribution portal?

I want to give users a self-service software portal like sccm can do but sccm is huge and I have less than 100 users and many are mobile From what I understand intune is for oob/mobile users. Does ...
user avatar
  • 3,979
1 vote
0 answers
35 views

No mobile devices in Intune - Testing a few users from Hybrid SCCM to Intune Standalone

I'm testing at the moment with a few users to migratie from Hybrid SCCM to Intune Standalone. I followed this steps: https://docs.microsoft.com/en-us/sccm/mdm/deploy-use/migrate-hybridmdm-to-intunesa ...
user avatar
  • 11
2 votes
1 answer
3k views

Updating Microsoft Intune devices via Powershell

Looking for a bit of help with the Intune Powershell/graph interface. I'm trying to manipulate Intune Device Categories via Powershell, so that I can firstly correct devices that were placed into the ...
user avatar
  • 31.6k
2 votes
1 answer
47 views

Recommendations for future-facing (fully cloud-based) Identity and EMM/UEM Solutions

I have recently started consulting for a tech startup of about 60 users that has grown, and is looking to expand, quickly. Due to the fast growth, and lack of formal IT advice up until now, they are ...
user avatar