Questions tagged [microsoft-intune]

Microsoft Intune is Microsoft's Mobile Device Management (MDM) platform.

Filter by
Sorted by
Tagged with
1 vote
0 answers
23 views

Intune issues after UPN change for user

I have a bit of a weird situation, already contacted Microsoft support, but hoping sages here know something. We are planning a change of UPN for our 700+ users. We are in the process of testing what ...
AnalyticaL's user avatar
0 votes
0 answers
43 views

Azure AD - Intune device mismatch, not joined properly

I have something of a mess on my hands. When these devices were joined, or "registered" with Azure AD, they had already been through OOBE and had local accounts created on them. I realize ...
boog's user avatar
  • 220
0 votes
0 answers
20 views

Since private MS store no longer working, what is the best practice to set policy on MS store?

Since private MS Store no longer work in the policy What is the best practice to set policy on MS Store. Atm, our company is blocking access to MS store, however this cause a lot of issue with ...
user3755790's user avatar
-1 votes
1 answer
22 views

How do I get the total number of iOS devices by generation from Microsoft InTune?

I'm new to Microsoft InTune and I want to be able to determine how many iOS devices I have enrolled by generation (4th, 5th, 6th, etc). I've looked and it doesnt seem straightforward.
Mike Murphy's user avatar
2 votes
1 answer
154 views

Hybrid Azure AD Join - Not joining correctly

Another day, another Hybrid Azure AD Join issue. Having set up Hybrid Join, it looked like it was working.  The device I onboarded via autopilot was created in "on-prem" AD, was in Azure AD, ...
AngryDog's user avatar
0 votes
1 answer
27 views

Hybrid AD Joined and Autopilot

I've been working on setting up our Autopilot onboarding with our Hybrid AD. I have managed to join a device to the domain successfully, but I have noticed some differences against when we do this ...
AngryDog's user avatar
0 votes
1 answer
71 views

hybrid azure ad join devices

We have a hybrid active directory set up between our servers held in a DC and our Azure AD.I am currently working on the configuration of our Autopilot and Intune deployment. At the moment we deploy ...
AngryDog's user avatar
0 votes
1 answer
49 views

How to detect when someone customizes a managed PC?

As we have moved to Intune, we have "managed" nearly everything. Making Intune the only local administrator needed on most of our PCs. Reaching the edges of this policy, I would like to make ...
Nathan Hartley's user avatar
0 votes
1 answer
40 views

convert local machines to MS 365/Intune managed

Currently we have a 365 account - 50 users, and 50 local machines with local logins. According to my reading, 365 can manage configs on these machines and allow to specify which 365 users can log into ...
Steve H's user avatar
0 votes
1 answer
305 views

Apple ID and Password not Working for MAC OS enrollment to Intune

I am trying to enroll MAC OS devices to Intune. I have everything set up, the Macbook shows up in my enrollment program token, and I am able to start the process to install the enrollment profile, but ...
Eric W.'s user avatar
0 votes
2 answers
192 views

Where is Defender CSP in Windows configuration designer?

I'm trying to create a provisioning package for test PCs and I'm having hard time finding Defender CSP in Windows Configuration Designer. at first I downloaded Windows Configuration designer from ...
user avatar
1 vote
1 answer
564 views

Restrict other Azure AD users from logging into Intune devices

I want to make sure that a user in our domain [email protected] does not login to a device that has been assigned to [email protected]. I have created a configuration profile but not sure what the ...
user3511199's user avatar
1 vote
0 answers
32 views

How to set alerts for an installed application not in exception list?

We are often getting incidents from Microsoft Defender about malicious activity detected on user devices, For example, lately we had an incident that said there was a defense evasion, however, at the ...
Cataster's user avatar
  • 117
1 vote
0 answers
148 views

Why isnt the remediation improving the exposure score in Microsoft defender?

I am trying to improve our exposure score on Microsoft Defender and noted that "Block persistence through WMI event subscription" has a remediation which Ive already applied since almost a ...
Cataster's user avatar
  • 117
0 votes
2 answers
143 views

Can Intune be used to decrypt TLS/SSL web traffic on my managed Mac?

I'm curious to know how much of my personal activities I can run thru my new workplace managed Mac. I notice Intune installed a number of certificates and keys. Is this effectively MitM for all my ...
cottsak's user avatar
  • 505
0 votes
0 answers
270 views

Using Office 365 now, can we pilot intune MDM on just 1-2 users or devices?

We have Microsoft hosting for exchange, office 365, defender for endpoint and are using the Office 365 MDM for device management. We only have Azure AD basic not premium. I've started an intune trial,...
Dave S's user avatar
  • 101
0 votes
1 answer
2k views

Change Windows PIN requirements in Intune for an Azure AD-joined PC

I am the part-time admin of a small nonprofit, with a Microsoft 365 Business Premium subscription. I have been searching through admin.microsoft.com and portal.azure.com, but can't seem to find the ...
Conrad's user avatar
  • 314
-1 votes
1 answer
351 views

How do you create a dynamic device group in Intune with membership based on the existence of a file?

How do you create a dynamic device group in Intune with membership based on the existence of a file? Within the add new group feature, I don't see a way to specify a file name, nor a way to utilize a ...
user3208239's user avatar
0 votes
2 answers
3k views

Restrict users from local accounts on Intune devices?

Devices are enrolled either via Autopilot or Azure AD Join in Intune, but the issue of people using local accounts remains. Do you know, is there a way to force Azure/Hybrid AD accounts and collect ...
Random Guy's user avatar
1 vote
1 answer
777 views

Microsoft Endpoint Manager Firewall rule not working

I am trying to use Microsoft Endpoint Manager to block all traffic to Microsoft Edge for a group. I have done the following: Created a group called Students and added user "Zephyr Prospect" ...
jimboweb's user avatar
  • 129
0 votes
0 answers
433 views

In windows 10 how do I allow users to set up windows hello fingerprint?

I have a windows organization for which I'm the administrator. The users are registered to an Azure active directory which is managed with Intune. When I set up the computer I first sign in with my ...
jimboweb's user avatar
  • 129
0 votes
1 answer
2k views

802.1x Wireless with certificates for AADJ/Intune devices without user affinity

I can setup certificate distribution and wireless profiles in Intune for devices with user affinity and this works fine. The user account is synchronised with our on site AD server and NPS has an ...
John Sayce's user avatar
0 votes
1 answer
530 views

What happens when the token under an android profile in InTune expires?

Using the Coreporate-owned dedicated devices enrollment profile we created a profile and enrolled devices using it. Now we come back to add more devices and the profile and token have expired. What ...
Mike Murphy's user avatar
0 votes
0 answers
1k views

Get-IntuneManagedDevice fails to return devices with an implied "Default" scope tag

We explicitly assign a scope tag to a group of devices. When looking at the properties of these devices they only show the assigned Scope Tag, not the implied "Default" scope tag. This works ...
Nathan Hartley's user avatar
1 vote
0 answers
597 views

How to force users to change their Windows Hello Pin

We changed our password policy in the Microsoft Endpoint Manager and now require a longer PIN. The issue is, in testing we noticed you're only asked to change the Windows Hello PIN, when logging in ...
Leopepe's user avatar
  • 13
0 votes
1 answer
363 views

What Windows drivers survive a wipe / reset?

We are fully onboard with the modern mobile device management dream. Managing PCs with Intune and onboard them using Autopilot. These PCs are purchased with a clean install of Windows. For those we ...
Nathan Hartley's user avatar
0 votes
1 answer
2k views

Autopilot Self-Provisioning fail

I'm working on an intune environment. Devices are able to successfully join in user attended mode. However when I set it to self-deploy devices fail on securing hardware with the following code: ...
metrotyranno's user avatar
0 votes
1 answer
70 views

Can Autopilot PCs be required to be Intune managed?

After recently having the Intune Wipe action fail to Wipe PCs though it removes the PC from Intune, I worry we could have more unmanaged yet fully functional PCs in the field. Is there a way to ...
Nathan Hartley's user avatar
1 vote
1 answer
2k views

Disable the Windows 10 Password login option when FIDO in use

Hello Collective intelligence, I have a question that is bugging me, I have a Yubikey 5C setup in Azure AD with passwordless auth and registered to my account, I can log into the PC using the FIDO key ...
Sparky BearBomb's user avatar
0 votes
2 answers
559 views

Using InTune for BitLocker enabling TPM+PIN+USB

I am tasked with enabling BitLocker via InTune and I am struggling to understand why the following settings are not taking effect on the endpoint. In the OS drive settings Compatible TPM Startup - ...
The_Honkler's user avatar
1 vote
1 answer
192 views

How to deploy Microsoft Endpoint / InTune to computers that are in use already and not tied to Azure AD Accounts (Password Policy Failure)

We recently rolled out Microsoft Endpoint / InTune to our company computers. Everything works great if the first time a user logs in it is with their Azure AD credentials. We have computers that are ...
nweg's user avatar
  • 111
0 votes
1 answer
2k views

How do I disable Bitlocker Encryption settings using Intune?

We've activated Intune Bitlocker encryption and configured it needs a password to unlock. Since we don't want our users to change the Bitlocker pin, we want to disable the Settings below. Bitlocker ...
Leopepe's user avatar
  • 13
0 votes
1 answer
992 views

Intune Autopilot replace WDS or Sccm

I have been doing some research on Intune autopilot - I see that once hardware hash is registered it can go on autopilot mode wherein- users just need to sign in and all configurations are taken care ...
Jon drew's user avatar
0 votes
1 answer
873 views

Windows Hello for Business - Hybrid Azure Joined Devices - Off LAN enrolment behaviour

Environment Windows 10 Professional devices, Hybrid Azure AD Joined (physical) Server 2019 DCs AD Connect 1.5.45 Key Trust setup Endpoint Manager used to deploy WHfB CRL distribution point published ...
Icebun's user avatar
  • 1
0 votes
1 answer
589 views

How to restrict access to 365 from office apps only?

I'm trying to restrict access to office365 (exchange specifically) from Microsoft office apps only? I don't want to allow certain users to use native email clients because I want to use application ...
John Sayce's user avatar
0 votes
1 answer
2k views

Intune device not in Endpoint Manager

One of our devices is visible in MS Azure AD > Devices with Jointype = Azure AD joined and MDM = Microsoft Intune, but not visible in MS Endpoint Manager. Any experiences/suggestions?
Soliman's user avatar
  • 103
1 vote
0 answers
1k views

Configuration Profiles applying as System Account instead of user

I'm pulling my hair out over an issue I'm having with Intune. I've deployed a VPN profile using a custom configuration profile to my users and most users have received the VPN profile on their laptops ...
OPG1987's user avatar
  • 13
1 vote
1 answer
2k views

Could Intune be the cause of unwanted restarts?

I have an Intune environment that I am currently working on pushing out an endpoint protection profile. There was an older endpoint protection profile that only pushed app control as "audit-only&...
Wesley Blackwell's user avatar
3 votes
1 answer
31k views

Microsoft Intune - How to modify Windows 10 registry settings?

Win32 app uses bat file to install software and edit registry keys. Registry keys are modified if I run bat file locally but not when run through via Intune because Intune runs installation as System. ...
JPX's user avatar
  • 151
0 votes
1 answer
457 views

Unable to User Enroll iOS devices

I'm trying to get iOS User Enrollment to work with Intune. I have done the following: Created a Group for my pilot users Added an Apple MDM Push certificate Signed up for Apple Business Manager ...
Joshua Walsh's user avatar
0 votes
2 answers
9k views

This Apple ID can't be used to make purchases - InTune/Apple Business Manager

We have just integrated InTune with Apple Business Manager and turned on the domain Federation which now allows our Azure AD users to log into Apple Devices with their work email address. We have hit ...
Nathan Dries's user avatar
1 vote
2 answers
2k views

Specifying machine certificate issuer with Windows VPN

I am trying to create a Windows Always On VPN connection between an AD and AAD joined Windows 10 client and a StrongSwan VPN server. The Windows client has multiple "Client Authentication" ...
Cameron's user avatar
  • 277
1 vote
1 answer
334 views

Block unapproved Remote Assistance solutions

We have a cloud-only setup using Azure AD + Intune to manage our organisation's windows devices, since all are remote workers/work from home. I'm looking to remove the possibility for users to ...
TMann's user avatar
  • 13
1 vote
1 answer
128 views

Installing Microsoft Store for Business apps on Intune Managed Self-Deploying Devices

We are having trouble with Microsoft Store for Business apps not installing, when assigned as Required to their Device group, on our Endpoint Manager (Intune) managed, Autopilot Self-Deploying, Shared ...
Nathan Hartley's user avatar
0 votes
1 answer
6k views

Block Users from Installing programs with Azure AD joined Devices

I am looking for a way to block users from installing programs without an on prem AD domain (so no GPOs etc.). We have Office365 and the included Azure AD. The devices have not yet been joined to ...
Chaim Ginsberg's user avatar
2 votes
0 answers
257 views

autopilot not installing apps after autopilot reset

Whenever I putt a computer into autopilot and let the user login it installs all the applications. But whenever I do an autopilot reset and then let je user login in wont install any of the ...
thebest07111's user avatar
1 vote
1 answer
848 views

Intune new office installation on already installed office

Currently users have office 365 installed via een msi that was inserted into Intune. We now want to use the new method because than we can easily add and remove applications. Is it possible to do so? ...
sgouman's user avatar
  • 21
0 votes
1 answer
94 views

Azure AD Windows logins connected to G Suite accounts

We use G Suite for our email, cloud storage, calendars, etc, but use Windows computers (mostly). I've read a bit about Azure AD and the possibilities of linking G Suite accounts to Azure accounts so ...
chris_huh's user avatar
0 votes
0 answers
45 views

Leaving Microsoft Intune

the last few months we tested device managment with Microsoft Intune. But for our workload we decided that Intune is not the right tool to use. So we don't extendes the trial period. We are currently ...
White's user avatar
  • 25
1 vote
0 answers
190 views

Enrol Chrome Browser via InTune

I'm having difficulty enrolling Chrome Browsers for management via Gsuite Admin on machines managed by InTune MDM. I've tried following this guide, to set the CloudManagementEnrollmentToken via the ...
Peter Coghill's user avatar