Questions tagged [microsoft-intune]
Microsoft Intune is Microsoft's Mobile Device Management (MDM) platform.
76
questions
1
vote
0
answers
23
views
Intune issues after UPN change for user
I have a bit of a weird situation, already contacted Microsoft support, but hoping sages here know something.
We are planning a change of UPN for our 700+ users. We are in the process of testing what ...
- 173
0
votes
0
answers
43
views
Azure AD - Intune device mismatch, not joined properly
I have something of a mess on my hands. When these devices were joined, or "registered" with Azure AD, they had already been through OOBE and had local accounts created on them. I realize ...
- 220
0
votes
0
answers
20
views
Since private MS store no longer working, what is the best practice to set policy on MS store?
Since private MS Store no longer work in the policy
What is the best practice to set policy on MS Store.
Atm, our company is blocking access to MS store, however this cause a lot of issue with ...
-1
votes
1
answer
22
views
How do I get the total number of iOS devices by generation from Microsoft InTune?
I'm new to Microsoft InTune and I want to be able to determine how many iOS devices I have enrolled by generation (4th, 5th, 6th, etc). I've looked and it doesnt seem straightforward.
- 99
2
votes
1
answer
154
views
Hybrid Azure AD Join - Not joining correctly
Another day, another Hybrid Azure AD Join issue.
Having set up Hybrid Join, it looked like it was working. The device I onboarded via autopilot was created in "on-prem" AD, was in Azure AD, ...
- 21
0
votes
1
answer
27
views
Hybrid AD Joined and Autopilot
I've been working on setting up our Autopilot onboarding with our Hybrid AD. I have managed to join a device to the domain successfully, but I have noticed some differences against when we do this ...
- 21
0
votes
1
answer
71
views
hybrid azure ad join devices
We have a hybrid active directory set up between our servers held in a DC and our Azure AD.I am currently working on the configuration of our Autopilot and Intune deployment. At the moment we deploy ...
- 21
0
votes
1
answer
49
views
How to detect when someone customizes a managed PC?
As we have moved to Intune, we have "managed" nearly everything. Making Intune the only local administrator needed on most of our PCs.
Reaching the edges of this policy, I would like to make ...
- 1,660
0
votes
1
answer
40
views
convert local machines to MS 365/Intune managed
Currently we have a 365 account - 50 users, and 50 local machines with local logins.
According to my reading, 365 can manage configs on these machines and allow to specify which 365 users can log into ...
- 3
0
votes
1
answer
305
views
Apple ID and Password not Working for MAC OS enrollment to Intune
I am trying to enroll MAC OS devices to Intune. I have everything set up, the Macbook shows up in my enrollment program token, and I am able to start the process to install the enrollment profile, but ...
- 1
0
votes
2
answers
192
views
Where is Defender CSP in Windows configuration designer?
I'm trying to create a provisioning package for test PCs and I'm having hard time finding Defender CSP in Windows Configuration Designer.
at first I downloaded Windows Configuration designer from ...
user995120
1
vote
1
answer
564
views
Restrict other Azure AD users from logging into Intune devices
I want to make sure that a user in our domain [email protected] does not login to a device that has been assigned to [email protected]. I have created a configuration profile but not sure what the ...
- 11
1
vote
0
answers
32
views
How to set alerts for an installed application not in exception list?
We are often getting incidents from Microsoft Defender about malicious activity detected on user devices, For example, lately we had an incident that said there was a defense evasion, however, at the ...
- 117
1
vote
0
answers
148
views
Why isnt the remediation improving the exposure score in Microsoft defender?
I am trying to improve our exposure score on Microsoft Defender and noted that "Block persistence through WMI event subscription" has a remediation which Ive already applied since almost a ...
- 117
0
votes
2
answers
143
views
Can Intune be used to decrypt TLS/SSL web traffic on my managed Mac?
I'm curious to know how much of my personal activities I can run thru my new workplace managed Mac.
I notice Intune installed a number of certificates and keys. Is this effectively MitM for all my ...
- 505
0
votes
0
answers
270
views
Using Office 365 now, can we pilot intune MDM on just 1-2 users or devices?
We have Microsoft hosting for exchange, office 365, defender for endpoint and are using the Office 365 MDM for device management. We only have Azure AD basic not premium.
I've started an intune trial,...
- 101
0
votes
1
answer
2k
views
Change Windows PIN requirements in Intune for an Azure AD-joined PC
I am the part-time admin of a small nonprofit, with a Microsoft 365 Business Premium subscription. I have been searching through admin.microsoft.com and portal.azure.com, but can't seem to find the ...
- 314
-1
votes
1
answer
351
views
How do you create a dynamic device group in Intune with membership based on the existence of a file?
How do you create a dynamic device group in Intune with membership based on the existence of a file? Within the add new group feature, I don't see a way to specify a file name, nor a way to utilize a ...
- 109
0
votes
2
answers
3k
views
Restrict users from local accounts on Intune devices?
Devices are enrolled either via Autopilot or Azure AD Join in Intune, but the issue of people using local accounts remains. Do you know, is there a way to force Azure/Hybrid AD accounts and collect ...
1
vote
1
answer
777
views
Microsoft Endpoint Manager Firewall rule not working
I am trying to use Microsoft Endpoint Manager to block all traffic to Microsoft Edge for a group. I have done the following:
Created a group called Students and added user "Zephyr Prospect" ...
- 129
0
votes
0
answers
433
views
In windows 10 how do I allow users to set up windows hello fingerprint?
I have a windows organization for which I'm the administrator. The users are registered to an Azure active directory which is managed with Intune.
When I set up the computer I first sign in with my ...
- 129
0
votes
1
answer
2k
views
802.1x Wireless with certificates for AADJ/Intune devices without user affinity
I can setup certificate distribution and wireless profiles in Intune for devices with user affinity and this works fine. The user account is synchronised with our on site AD server and NPS has an ...
0
votes
1
answer
530
views
What happens when the token under an android profile in InTune expires?
Using the Coreporate-owned dedicated devices enrollment profile we created a profile and enrolled devices using it. Now we come back to add more devices and the profile and token have expired. What ...
- 99
0
votes
0
answers
1k
views
Get-IntuneManagedDevice fails to return devices with an implied "Default" scope tag
We explicitly assign a scope tag to a group of devices. When looking at the properties of these devices they only show the assigned Scope Tag, not the implied "Default" scope tag.
This works ...
- 1,660
1
vote
0
answers
597
views
How to force users to change their Windows Hello Pin
We changed our password policy in the Microsoft Endpoint Manager and now require a longer PIN.
The issue is, in testing we noticed you're only asked to change the Windows Hello PIN, when logging in ...
- 13
0
votes
1
answer
363
views
What Windows drivers survive a wipe / reset?
We are fully onboard with the modern mobile device management dream. Managing PCs with Intune and onboard them using Autopilot. These PCs are purchased with a clean install of Windows. For those we ...
- 1,660
0
votes
1
answer
2k
views
Autopilot Self-Provisioning fail
I'm working on an intune environment. Devices are able to successfully join in user attended mode. However when I set it to self-deploy devices fail on securing hardware with the following code: ...
0
votes
1
answer
70
views
Can Autopilot PCs be required to be Intune managed?
After recently having the Intune Wipe action fail to Wipe PCs though it removes the PC from Intune, I worry we could have more unmanaged yet fully functional PCs in the field. Is there a way to ...
- 1,660
1
vote
1
answer
2k
views
Disable the Windows 10 Password login option when FIDO in use
Hello Collective intelligence,
I have a question that is bugging me,
I have a Yubikey 5C setup in Azure AD with passwordless auth and registered to my account, I can log into the PC using the FIDO key ...
0
votes
2
answers
559
views
Using InTune for BitLocker enabling TPM+PIN+USB
I am tasked with enabling BitLocker via InTune and I am struggling to understand why the following settings are not taking effect on the endpoint.
In the OS drive settings
Compatible TPM Startup - ...
1
vote
1
answer
192
views
How to deploy Microsoft Endpoint / InTune to computers that are in use already and not tied to Azure AD Accounts (Password Policy Failure)
We recently rolled out Microsoft Endpoint / InTune to our company computers. Everything works great if the first time a user logs in it is with their Azure AD credentials. We have computers that are ...
- 111
0
votes
1
answer
2k
views
How do I disable Bitlocker Encryption settings using Intune?
We've activated Intune Bitlocker encryption and configured it needs a password to unlock.
Since we don't want our users to change the Bitlocker pin, we want to disable the Settings below.
Bitlocker ...
- 13
0
votes
1
answer
992
views
Intune Autopilot replace WDS or Sccm
I have been doing some research on Intune autopilot - I see that once hardware hash is registered it can go on autopilot mode wherein- users just need to sign in and all configurations are taken care ...
- 55
0
votes
1
answer
873
views
Windows Hello for Business - Hybrid Azure Joined Devices - Off LAN enrolment behaviour
Environment
Windows 10 Professional devices, Hybrid Azure AD Joined (physical)
Server 2019 DCs
AD Connect 1.5.45
Key Trust setup
Endpoint Manager used to deploy WHfB
CRL distribution point published ...
- 1
0
votes
1
answer
589
views
How to restrict access to 365 from office apps only?
I'm trying to restrict access to office365 (exchange specifically) from Microsoft office apps only?
I don't want to allow certain users to use native email clients because I want to use application ...
0
votes
1
answer
2k
views
Intune device not in Endpoint Manager
One of our devices is visible in MS Azure AD > Devices with Jointype = Azure AD joined and MDM = Microsoft Intune, but not visible in MS Endpoint Manager.
Any experiences/suggestions?
- 103
1
vote
0
answers
1k
views
Configuration Profiles applying as System Account instead of user
I'm pulling my hair out over an issue I'm having with Intune. I've deployed a VPN profile using a custom configuration profile to my users and most users have received the VPN profile on their laptops ...
- 13
1
vote
1
answer
2k
views
Could Intune be the cause of unwanted restarts?
I have an Intune environment that I am currently working on pushing out an endpoint protection profile. There was an older endpoint protection profile that only pushed app control as "audit-only&...
3
votes
1
answer
31k
views
Microsoft Intune - How to modify Windows 10 registry settings?
Win32 app uses bat file to install software and edit registry keys. Registry keys are modified if I run bat file locally but not when run through via Intune because Intune runs installation as System.
...
- 151
0
votes
1
answer
457
views
Unable to User Enroll iOS devices
I'm trying to get iOS User Enrollment to work with Intune. I have done the following:
Created a Group for my pilot users
Added an Apple MDM Push certificate
Signed up for Apple Business Manager
...
- 165
0
votes
2
answers
9k
views
This Apple ID can't be used to make purchases - InTune/Apple Business Manager
We have just integrated InTune with Apple Business Manager and turned on the domain Federation which now allows our Azure AD users to log into Apple Devices with their work email address. We have hit ...
- 119
1
vote
2
answers
2k
views
Specifying machine certificate issuer with Windows VPN
I am trying to create a Windows Always On VPN connection between an AD and AAD joined Windows 10 client and a StrongSwan VPN server. The Windows client has multiple "Client Authentication" ...
- 277
1
vote
1
answer
334
views
Block unapproved Remote Assistance solutions
We have a cloud-only setup using Azure AD + Intune to manage our organisation's windows devices, since all are remote workers/work from home.
I'm looking to remove the possibility for users to ...
- 13
1
vote
1
answer
128
views
Installing Microsoft Store for Business apps on Intune Managed Self-Deploying Devices
We are having trouble with Microsoft Store for Business apps not installing, when assigned as Required to their Device group, on our Endpoint Manager (Intune) managed, Autopilot Self-Deploying, Shared ...
- 1,660
0
votes
1
answer
6k
views
Block Users from Installing programs with Azure AD joined Devices
I am looking for a way to block users from installing programs without an on prem AD domain (so no GPOs etc.). We have Office365 and the included Azure AD. The devices have not yet been joined to ...
2
votes
0
answers
257
views
autopilot not installing apps after autopilot reset
Whenever I putt a computer into autopilot and let the user login it installs all the applications. But whenever I do an autopilot reset and then let je user login in wont install any of the ...
- 21
1
vote
1
answer
848
views
Intune new office installation on already installed office
Currently users have office 365 installed via een msi that was inserted into Intune. We now want to use the new method because than we can easily add and remove applications.
Is it possible to do so? ...
- 21
0
votes
1
answer
94
views
Azure AD Windows logins connected to G Suite accounts
We use G Suite for our email, cloud storage, calendars, etc, but use Windows computers (mostly).
I've read a bit about Azure AD and the possibilities of linking G Suite accounts to Azure accounts so ...
0
votes
0
answers
45
views
Leaving Microsoft Intune
the last few months we tested device managment with Microsoft Intune. But for our workload we decided that Intune is not the right tool to use. So we don't extendes the trial period. We are currently ...
- 25
1
vote
0
answers
190
views
Enrol Chrome Browser via InTune
I'm having difficulty enrolling Chrome Browsers for management via Gsuite Admin on machines managed by InTune MDM.
I've tried following this guide, to set the CloudManagementEnrollmentToken via the ...
- 111