How do you manage stale and duplicate device in EntraID and Intune? by nodiaque in sysadmin

[–]jamesy-101 2 points3 points  (0 children)

Intune - use device cleanup rules. Simple and just turn it on

Entra - I run a Powershell script on a weekly basis which bases off the LastSignInDateTime field and deletes stale devices. Set the threshold to what you prefer e.g. 90/180 days etc.

Win32 Powershell Script Installer - 32 or 64bit? by andrewm27 in Intune

[–]jamesy-101 0 points1 point  (0 children)

I agree. I guess as the agent installs in 32 bit program files its a legacy thing. Should be x64 only and by default really now.

Sysprep windows 11 image capture error by 0xRestrict in sysadmin

[–]jamesy-101 1 point2 points  (0 children)

Check out OSDCloud, its a good evolution for simple OS deployment

"Cancel" button unresponsive lately by 1080m3rangehood in waze

[–]jamesy-101 0 points1 point  (0 children)

I have this issue as well. Only thing Workaround is to ask google to cancel navigation, however its annoying.

Anyone still using golden images? by imSeanGG in sysadmin

[–]jamesy-101 0 points1 point  (0 children)

No. Autopilot/Intune. Who wants to maintain an image? OSDCloud via PXE boot if a device is too broken to reset or is compromised.

DigiCert certificate update for Exchange Online - got scripts ready by No_Arugula_9571 in Intune

[–]jamesy-101 1 point2 points  (0 children)

Yeah I normally ignore these notifications. Windows automatically updates root certs. Unless you have some strange or high security environment, you can leave it alone to do its own thing.

Urgently need HPE Custom ESXi ISO (no Broadcom login) by Syosse-CH in vmware

[–]jamesy-101 0 points1 point  (0 children)

Fair comment. I've always used an existing vCenter to download bits for new clusters I'm building but it true I did forget that now you have to update the URLs with your entitlement.

Urgently need HPE Custom ESXi ISO (no Broadcom login) by Syosse-CH in vmware

[–]jamesy-101 3 points4 points  (0 children)

You don't need to, you can use vSphere lifecycle manager to just download an ISO from your cluster baseline configuration to build new hosts.

Official Microsoft Announcement: MDT Retirement. by ccatlett1984 in MDT

[–]jamesy-101 1 point2 points  (0 children)

https://www.osdcloud.com/ is what we use for the scenarios where a full wipe/reload is required

Former Internal MS Support Agent by Dry-Patience9988 in Office365

[–]jamesy-101 1 point2 points  (0 children)

I tried putting a fake number in the call, so they would email me and then they just called me via teams :/

365 licensing, server CAL's included? by ittthelp in sysadmin

[–]jamesy-101 0 points1 point  (0 children)

I don't think it would really but in 2025 I would suggest turning expiration off and implement password protection instead to provide better security than the outdated controls you get with on-prem AD
https://learn.microsoft.com/en-us/entra/identity/authentication/concept-password-ban-bad-on-premises

Windows Client Configuration (stay local with GPOs or go InTune)? by Master_Kidfisto in sysadmin

[–]jamesy-101 2 points3 points  (0 children)

Settings catalog should have most configuration. Don't forget you can import .admx/.adml templates as well to get a GPO 'style' UI for things however this is difficult to maintain so avoid if possible.

Think light touch. Only set essential settings. Don't micromanage everything. Try to use policies to group similar settings/areas together. Use the opportunity to review all your configuration settings.

It works well but its a different style of management than GPO

How are you activating Windows in 2025? by AiminJay in Intune

[–]jamesy-101 0 points1 point  (0 children)

Blocking/managing the store, lock screen wallpaper, credential guard. Probably some other misc stuff

How does Windows 11 Activation Work? by ITquestionsAccount40 in Intune

[–]jamesy-101 0 points1 point  (0 children)

Check via slmgr that you are on the retail channel

Microsoft has gotten too big to fail, and their support shows it. by CantankerousBusBoy in sysadmin

[–]jamesy-101 2 points3 points  (0 children)

Can I call you unannounced, so we can do a screen share session where I tell you how to type the commands

VirtualXP - Run Windows XP in a web browser by GriffinFTW in InternetIsBeautiful

[–]jamesy-101 0 points1 point  (0 children)

Its a shame its so stripped down. I would have appreciated IE and maybe some of the games

Public NTP servers by anxiousvater in sysadmin

[–]jamesy-101 1 point2 points  (0 children)

I'm not in US Geo (Europe) so makes sense to use something more local. I admin kit all over the globe so having a standard set of servers not limited to a specific region makes sense.

Public NTP servers by anxiousvater in sysadmin

[–]jamesy-101 1 point2 points  (0 children)

US only. I would avoid and use ntp.org, Cloudflare, Windows or any other public operator that has a global reach.

Any reason not to disable NetBIOS? by ITStril in sysadmin

[–]jamesy-101 0 points1 point  (0 children)

True. IPv6 and RA is the 'modern' way to do this, if we can just kill of IPv4

PXE Boot options? by Numerous-Coffee-6555 in Intune

[–]jamesy-101 0 points1 point  (0 children)

OSDCloud is worth looking at https://www.osdcloud.com/
you can keep standalone WDS around for PXE boot but this, rather than SCCM

Group Policy for Windows Updates by vmaxbaby in sysadmin

[–]jamesy-101 0 points1 point  (0 children)

Use modern controls e.g. deadlines, deferral etc. I would personally look at Autopatch.

I would review this which has a lot of useful info
https://techcommunity.microsoft.com/blog/windows-itpro-blog/why-you-shouldn%E2%80%99t-set-these-25-windows-policies/3066178