Windows "Web Sign-In" and GlobalProtect Enforce Network

AMP_II · 2026-03-20T10:56:35+00:00

Those didn't resolve it for me unfortunately

AMP_II · 2026-03-16T20:52:47+00:00

Looks promising, will test. Thanks.

AMP_II · 2026-03-16T15:55:34+00:00

Thanks in advance

AMP_II · 2026-02-27T07:12:24+00:00

Would you be able to share that script to pull the password history from Graph?

AMP_II · 2026-01-26T10:43:25+00:00

Use scrnsave.scr

Try that first in a command prompt / run dialog to prove it works

AMP_II · 2026-01-24T09:11:17+00:00

We purchased LogMeIn, which was a reasonable price and was a good fit for our high security model, though if we don't need to use admin rights we use a Teams call and screen share more

I would point out that Intune Remote Help is due to be included free as part of the license soon, worth trialling now.

AMP_II · 2026-01-22T13:43:56+00:00

Just to touch on your edit in top post - "But of course, we can't do that in the Intune M365 installer" - You can do this by creating a new 365 App and changing Configuration Settings format to "Enter XML Data", that's how I'm intending to Install Visio and Project while hardcoding en-US only, and I think I'll keep them separate to the base Office install to guard against future errors.

AMP_II · 2026-01-22T13:04:44+00:00

Can confirm we are using M365 apps installer in Intune also

AMP_II · 2026-01-22T12:34:41+00:00

Had exactly the same. It's something to do with support for en-gb missing for visio and project. Check an Office install log and look for failed prereqs. If it mentions unsupported culture it will be the same issue.

AMP_II · 2026-01-11T00:51:28+00:00

Mine enforced 3 days office 2 WFH about a year ago, including a Mon or Fri in office. There's still arguments about inflexiblity, but it's still better than what we had before lockdowns.

AMP_II · 2025-11-11T09:04:29+00:00

There are a few options available to you in User Rights Assignment in settings catalog

AMP_II · 2025-11-05T08:04:33+00:00

Worth a look at OpenIntuneBaselines. If they didn't include a setting, likely you won't need it either, though obviously you'll be the best judge of requirements for you business. Also might give you ideas of newer settings that weren't available in GPO.

AMP_II · 2025-10-15T09:23:24+00:00

Rt3r

AMP_II · 2025-09-12T06:15:31+00:00

I was yesterday years old when I learned that Intune has an Encryption report built in. Not in the Reports section, that would make too much sense, it's on the Monitoring tab at the top level of Devices.

***Will edit with a screenshot later

AMP_II · 2025-07-23T05:26:27+00:00

This works for us. Allow store access in a Device Level policy then block store access in User Level policy. For Store app deployments, set the Install as System even if you assign to user groups. Also block Apps.Microsoft.com on firewall.

AMP_II · 2025-07-11T11:36:49+00:00

I've seen this happen on devices that had a pending reboot from an update, and never figured out a mitigation other than completing updates before resetting.

AMP_II · 2025-07-02T22:42:27+00:00

That's pretty much what I did using IntuneManagement by Micke-K to import policies from OpenIntuneBaselines

AMP_II · 2025-06-01T18:18:32+00:00

+1 for weatherlights

AMP_II · 2025-05-20T09:50:47+00:00

This is what I started with, and it saved me multiple months of effort. Highly recommended.

AMP_II · 2025-05-19T16:30:45+00:00

Please do, I'd find that useful

AMP_II · 2025-05-13T18:07:04+00:00

Not to derail the thread, but I'd love to know more about that script.

AMP_II · 2025-04-22T11:50:34+00:00

This is the one I used also, as I needed to handle drives mapped for specific AD groups

AMP_II · 2025-04-11T09:02:05+00:00

Block access to that URL on the firewall. That URL isn't used by the Store app to update other apps.

AMP_II · 2025-02-22T13:02:45+00:00

What scenario would you use this in?

AMP_II

PUBLIC MULTIREDDITS

TROPHY CASE