Questions tagged [microsoft-intune]
Microsoft Intune is Microsoft's Mobile Device Management (MDM) platform.
88
questions
0
votes
0
answers
276
views
MacOS Intune Platform SSO not prompting to register device until Company Portal is opened
I'm deploying Platform SSO to allow our Mac users to sign into their devices without the need for a "build process", similar to autopilot on Windows.
I've followed this guide and it all ...
0
votes
1
answer
62
views
Reading full user email adress on intune client
I am configuring windows 11 clients as part of a project to migrate our infrastructure to intune.
As a part of this im running into trouble with a powershell script, that work on our non intune domain ...
- 13
0
votes
0
answers
662
views
Intune error 0x87d1fde8 when attempting to disable Copilot with TurnOffWindowsCopilot
Microsoft's CSP documentation for disabling Copilot states the following OMA URI and an integer value of 1 to disable Copilot on Windows 11:
./User/Vendor/MSFT/Policy/Config/WindowsAI/...
- 648
1
vote
1
answer
579
views
Bitlocker recovery key back-up to AAD and Intune
In the tenant there are devices without a Bitlocker recovery key. We want these devices to back up their recovery key to AAD and subsequently to Intune.
All devices are AADJ and there is no on-premise ...
- 19
2
votes
1
answer
2k
views
Problems with Windows Hello for Business in hybrid Cloud Trust scenario, but only on Windows 10
So I went through the process of deploying WHFB. I set up all the prereqs (as far as I know) following the Cloud Trust deployment guide. I added four test machines to the test OU with the appropriate ...
- 306
0
votes
0
answers
159
views
Exit the Ipad kiosk mode deployed by intune with pin
I have added few Ipad device in kiosk mode with intune, As of now I am removing the policy to remove device from kiosk mode. How do I exit the kiosk mode locally from Ipad because in case there issue ...
- 45
0
votes
0
answers
42
views
Add LimaCharlie MacOS Arm64 install file to Microsoft Intune
I want to push LimaCharlie Sensor for all my MacOS users.
LimaCharlie gives the following instructions:
Download LimaCharlie for MacOS
https://downloads.limacharlie.io/sensor/mac/arm64
Open a ...
- 139
0
votes
1
answer
227
views
Is it possible to push out a Flutter app over Intune without going through the Google Play Store?
I made a flutter app and our team wants to push it out using Intune to a company owned Honeywell scanner. This scanner is running Android 11. If this works, we will be pushing this out to around 50 ...
- 109
0
votes
1
answer
528
views
Windows hello for business: remove certificate from virtual smartcard
I've managed to add a certificate to windows hello for signin to RDP.
See: https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/rdp-sign-in?tabs=intune
However ...
- 183
-1
votes
1
answer
75
views
Adding MDM server to Microsoft Autopilot is not working
Via Microsoft Intune, I want a device that registers with Autopilot to register to the MDM solution I have written. I enter my own MDM server information from this screen.
enter image description here
...
- 1
1
vote
0
answers
182
views
Application crashing on Intune fully managed Android devices
We have Android phones on which we need to enroll in Intune as fully managed company owned devices.
We have a custom application installed in the device, however after installation the application is ...
- 45
0
votes
1
answer
721
views
What does Windows use to determine how old a profile is when implementing the CleanupProfiles registry setting?
How does the Windows registry setting HKLM\Software\Policies\Microsoft\Windows\System!CleanupProfiles determine the age of a profile on Windows 10?
I have tried to understand the setting, which is ...
1
vote
0
answers
1k
views
Intune error 80180014 enrolling Windows 10 laptop
I'm trying to use Microsoft Intune for the first time. I have an A3 license which includes Intune and Entra ID/Azure Premium P1. I have Directory Sync running on one of our servers to sync our local ...
- 253
0
votes
0
answers
552
views
Intune - Entra joined devices showing as Registered
I have a total of 600 devices in my environment. These devices are joined to Intune through the Autopilot process. All devices show as Corporate-owned within Intune. However, about 15 devices show as ...
- 1
1
vote
1
answer
626
views
Intune issues after UPN change for user
I have a bit of a weird situation, already contacted Microsoft support, but hoping sages here know something.
We are planning a change of UPN for our 700+ users. We are in the process of testing what ...
- 183
0
votes
0
answers
1k
views
Azure AD - Intune device mismatch, not joined properly
I have something of a mess on my hands. When these devices were joined, or "registered" with Azure AD, they had already been through OOBE and had local accounts created on them. I realize ...
- 240
-1
votes
1
answer
34
views
How do I get the total number of iOS devices by generation from Microsoft InTune?
I'm new to Microsoft InTune and I want to be able to determine how many iOS devices I have enrolled by generation (4th, 5th, 6th, etc). I've looked and it doesnt seem straightforward.
- 99
2
votes
2
answers
2k
views
Hybrid Azure AD Join - Not joining correctly
Another day, another Hybrid Azure AD Join issue.
Having set up Hybrid Join, it looked like it was working. The device I onboarded via autopilot was created in "on-prem" AD, was in Azure AD, ...
- 21
0
votes
1
answer
89
views
Hybrid AD Joined and Autopilot
I've been working on setting up our Autopilot onboarding with our Hybrid AD. I have managed to join a device to the domain successfully, but I have noticed some differences against when we do this ...
- 21
0
votes
1
answer
248
views
hybrid azure ad join devices
We have a hybrid active directory set up between our servers held in a DC and our Azure AD.I am currently working on the configuration of our Autopilot and Intune deployment. At the moment we deploy ...
- 21
0
votes
1
answer
57
views
How to detect when someone customizes a managed PC?
As we have moved to Intune, we have "managed" nearly everything. Making Intune the only local administrator needed on most of our PCs.
Reaching the edges of this policy, I would like to make ...
- 1,690
0
votes
1
answer
215
views
convert local machines to MS 365/Intune managed
Currently we have a 365 account - 50 users, and 50 local machines with local logins.
According to my reading, 365 can manage configs on these machines and allow to specify which 365 users can log into ...
- 3
0
votes
1
answer
1k
views
Apple ID and Password not Working for MAC OS enrollment to Intune
I am trying to enroll MAC OS devices to Intune. I have everything set up, the Macbook shows up in my enrollment program token, and I am able to start the process to install the enrollment profile, but ...
- 1
0
votes
2
answers
376
views
Where is Defender CSP in Windows configuration designer?
I'm trying to create a provisioning package for test PCs and I'm having hard time finding Defender CSP in Windows Configuration Designer.
at first I downloaded Windows Configuration designer from ...
user995120
1
vote
1
answer
925
views
Restrict other Azure AD users from logging into Intune devices
I want to make sure that a user in our domain [email protected] does not login to a device that has been assigned to [email protected]. I have created a configuration profile but not sure what the ...
- 11
1
vote
0
answers
176
views
How to set alerts for an installed application not in exception list?
We are often getting incidents from Microsoft Defender about malicious activity detected on user devices, For example, lately we had an incident that said there was a defense evasion, however, at the ...
- 117
1
vote
0
answers
342
views
Why isnt the remediation improving the exposure score in Microsoft defender?
I am trying to improve our exposure score on Microsoft Defender and noted that "Block persistence through WMI event subscription" has a remediation which Ive already applied since almost a ...
- 117
0
votes
2
answers
259
views
Can Intune be used to decrypt TLS/SSL web traffic on my managed Mac?
I'm curious to know how much of my personal activities I can run thru my new workplace managed Mac.
I notice Intune installed a number of certificates and keys. Is this effectively MitM for all my ...
- 505
0
votes
0
answers
570
views
Using Office 365 now, can we pilot intune MDM on just 1-2 users or devices?
We have Microsoft hosting for exchange, office 365, defender for endpoint and are using the Office 365 MDM for device management. We only have Azure AD basic not premium.
I've started an intune trial,...
- 101
0
votes
1
answer
5k
views
Change Windows PIN requirements in Intune for an Azure AD-joined PC
I am the part-time admin of a small nonprofit, with a Microsoft 365 Business Premium subscription. I have been searching through admin.microsoft.com and portal.azure.com, but can't seem to find the ...
- 354
-1
votes
1
answer
777
views
How do you create a dynamic device group in Intune with membership based on the existence of a file?
How do you create a dynamic device group in Intune with membership based on the existence of a file? Within the add new group feature, I don't see a way to specify a file name, nor a way to utilize a ...
- 109
0
votes
2
answers
6k
views
Restrict users from local accounts on Intune devices?
Devices are enrolled either via Autopilot or Azure AD Join in Intune, but the issue of people using local accounts remains. Do you know, is there a way to force Azure/Hybrid AD accounts and collect ...
1
vote
1
answer
1k
views
Microsoft Endpoint Manager Firewall rule not working
I am trying to use Microsoft Endpoint Manager to block all traffic to Microsoft Edge for a group. I have done the following:
Created a group called Students and added user "Zephyr Prospect" ...
- 149
0
votes
0
answers
602
views
In windows 10 how do I allow users to set up windows hello fingerprint?
I have a windows organization for which I'm the administrator. The users are registered to an Azure active directory which is managed with Intune.
When I set up the computer I first sign in with my ...
- 149
0
votes
1
answer
2k
views
802.1x Wireless with certificates for AADJ/Intune devices without user affinity
I can setup certificate distribution and wireless profiles in Intune for devices with user affinity and this works fine. The user account is synchronised with our on site AD server and NPS has an ...
0
votes
1
answer
783
views
What happens when the token under an android profile in InTune expires?
Using the Coreporate-owned dedicated devices enrollment profile we created a profile and enrolled devices using it. Now we come back to add more devices and the profile and token have expired. What ...
- 99
1
vote
0
answers
799
views
How to force users to change their Windows Hello Pin
We changed our password policy in the Microsoft Endpoint Manager and now require a longer PIN.
The issue is, in testing we noticed you're only asked to change the Windows Hello PIN, when logging in ...
- 13
0
votes
1
answer
549
views
What Windows drivers survive a wipe / reset?
We are fully onboard with the modern mobile device management dream. Managing PCs with Intune and onboard them using Autopilot. These PCs are purchased with a clean install of Windows. For those we ...
- 1,690
0
votes
1
answer
3k
views
Autopilot Self-Provisioning fail
I'm working on an intune environment. Devices are able to successfully join in user attended mode. However when I set it to self-deploy devices fail on securing hardware with the following code: ...
0
votes
1
answer
104
views
Can Autopilot PCs be required to be Intune managed?
After recently having the Intune Wipe action fail to Wipe PCs though it removes the PC from Intune, I worry we could have more unmanaged yet fully functional PCs in the field. Is there a way to ...
- 1,690
1
vote
1
answer
2k
views
Disable the Windows 10 Password login option when FIDO in use
Hello Collective intelligence,
I have a question that is bugging me,
I have a Yubikey 5C setup in Azure AD with passwordless auth and registered to my account, I can log into the PC using the FIDO key ...
0
votes
2
answers
812
views
Using InTune for BitLocker enabling TPM+PIN+USB
I am tasked with enabling BitLocker via InTune and I am struggling to understand why the following settings are not taking effect on the endpoint.
In the OS drive settings
Compatible TPM Startup - ...
1
vote
1
answer
397
views
How to deploy Microsoft Endpoint / InTune to computers that are in use already and not tied to Azure AD Accounts (Password Policy Failure)
We recently rolled out Microsoft Endpoint / InTune to our company computers. Everything works great if the first time a user logs in it is with their Azure AD credentials. We have computers that are ...
- 111
0
votes
1
answer
3k
views
How do I disable Bitlocker Encryption settings using Intune?
We've activated Intune Bitlocker encryption and configured it needs a password to unlock.
Since we don't want our users to change the Bitlocker pin, we want to disable the Settings below.
Bitlocker ...
- 13
0
votes
1
answer
1k
views
Intune Autopilot replace WDS or Sccm
I have been doing some research on Intune autopilot - I see that once hardware hash is registered it can go on autopilot mode wherein- users just need to sign in and all configurations are taken care ...
- 55
0
votes
1
answer
1k
views
Windows Hello for Business - Hybrid Azure Joined Devices - Off LAN enrolment behaviour
Environment
Windows 10 Professional devices, Hybrid Azure AD Joined (physical)
Server 2019 DCs
AD Connect 1.5.45
Key Trust setup
Endpoint Manager used to deploy WHfB
CRL distribution point published ...
- 1
0
votes
1
answer
937
views
How to restrict access to 365 from office apps only?
I'm trying to restrict access to office365 (exchange specifically) from Microsoft office apps only?
I don't want to allow certain users to use native email clients because I want to use application ...
0
votes
1
answer
2k
views
Intune device not in Endpoint Manager
One of our devices is visible in MS Azure AD > Devices with Jointype = Azure AD joined and MDM = Microsoft Intune, but not visible in MS Endpoint Manager.
Any experiences/suggestions?
- 103
1
vote
0
answers
2k
views
Configuration Profiles applying as System Account instead of user
I'm pulling my hair out over an issue I'm having with Intune. I've deployed a VPN profile using a custom configuration profile to my users and most users have received the VPN profile on their laptops ...
- 13
1
vote
1
answer
3k
views
Could Intune be the cause of unwanted restarts?
I have an Intune environment that I am currently working on pushing out an endpoint protection profile. There was an older endpoint protection profile that only pushed app control as "audit-only&...
