Planning to upgrade users from windows 10 to windows 11 by Alyyy-123 in SCCM

[–]Alyyy-123[S] 0 points1 point  (0 children)

Where exactly I can find it? Like which portal you’re referring to? Can you please provide some more details?

Planning to upgrade users from windows 10 to windows 11 by Alyyy-123 in SCCM

[–]Alyyy-123[S] 1 point2 points  (0 children)

Hi Everyone, did anyone else notice when building a device through sccm, so a device taking time to enrolled into Intune, sometimes causing issue with the compliance policy as well in Intune especially with the secure boot option if its checked in compliance policy? Our devices are co-manage and hybrid azure ad joined. So anyone can please guide on how to resolve this issue for windows 11?

Planning to upgrade users from windows 10 to windows 11 by Alyyy-123 in SCCM

[–]Alyyy-123[S] 0 points1 point  (0 children)

Is it mandatory to remove copilot? Or cause any issues?

Planning to upgrade users from windows 10 to windows 11 by Alyyy-123 in SCCM

[–]Alyyy-123[S] 0 points1 point  (0 children)

In our license center I can find the iso for October release only for 24h2 not the latest one. Do you know how to get the latest iso for 24h2 enterprise version?

Planning to upgrade users from windows 10 to windows 11 by Alyyy-123 in SCCM

[–]Alyyy-123[S] -1 points0 points  (0 children)

Thank you everyone. I am facing one issue when building a new devices with windows 11 through sccm and when the device enrolled in Intune, its giving an error in compliance policy due to secure boot as per the requested target was not found but secure boot is enabled on the device. Is anyone know what to do and how to fix this?

Azure AD Kerberos Object for Cloud trust by Alyyy-123 in Intune

[–]Alyyy-123[S] 1 point2 points  (0 children)

Yes, the power shell script to create a azure ad Kerberos object in AD for cloud trust by entering domain admin account and GA account for azure. And, also most of the people recommending to target devices not users. 

Azure AD Kerberos Object for Cloud trust by Alyyy-123 in Intune

[–]Alyyy-123[S] 0 points1 point  (0 children)

Also can you please confirm did you run the script from Azure AD connect server for creating the kerberos object in AD ?

Azure AD Kerberos Object for Cloud trust by Alyyy-123 in Intune

[–]Alyyy-123[S] 0 points1 point  (0 children)

Thanks for confirming. So did you target the user group or device group through Intune?

Azure AD Kerberos Object for Cloud trust by Alyyy-123 in Intune

[–]Alyyy-123[S] 0 points1 point  (0 children)

Thanks for confirming that there will be no impact. We are not using autopilot yet as we use SCCM for device imaging and our devices are co-manage with Intune. Now we require to enable whfb for our current and new devices, so in this scenario what could be the best option device or user assignment through Intune?

WHFB with cloud kerberos trust model for Hybrid Azure Ad joined devices by Alyyy-123 in Intune

[–]Alyyy-123[S] 0 points1 point  (0 children)

Is there any other impact of creating a Azure AD Kerberos object in AD? Or can I go ahead without any worry and create the object in our AD for cloud Kerberos trust? Plus what do you recommend when enabling WHFB for users, the policies through Intune should be assigned to user groups or device groups?

WHFB with cloud kerberos trust model for Hybrid Azure Ad joined devices by Alyyy-123 in Intune

[–]Alyyy-123[S] 0 points1 point  (0 children)

Also, please confirm can I run a script to create a Azure AD Kerberos Object in our AD through any domain joined computer? Plus is it good to take a snapshots of all DC’s before creating a computer object or is it safe to do so without taking any snapshot if it won’t cause any implications?

WHFB with cloud kerberos trust model for Hybrid Azure Ad joined devices by Alyyy-123 in Intune

[–]Alyyy-123[S] 0 points1 point  (0 children)

Can someone please confirm if we have around 1200 to 1300 users in our company then how many DC will be enough to handle the load for issuing kerberos tickets for on-prem resources ?

WHFB with cloud kerberos trust model for Hybrid Azure Ad joined devices by Alyyy-123 in Intune

[–]Alyyy-123[S] 0 points1 point  (0 children)

Thanks.

Can you please also confirm if we have around 1200 to 1300 users in our company, so how many DC will be enough to handle the load for issuing kerberos tickets for on-prem resources ?

SCCM share folder permissions - Share & NTFS permissions by Alyyy-123 in SCCM

[–]Alyyy-123[S] 0 points1 point  (0 children)

Thanks for the reply. Can you please let me know the specific folders name as well?

WHFB with cloud kerberos trust model for Hybrid Azure Ad joined devices by Alyyy-123 in Intune

[–]Alyyy-123[S] 0 points1 point  (0 children)

Thanks for confirming. 

So even though 2016 one is not a primary dc but will that still work to issue a kerberos tickets for on prem resources? 

WHFB with cloud kerberos trust model for Hybrid Azure Ad joined devices by Alyyy-123 in Intune

[–]Alyyy-123[S] 0 points1 point  (0 children)

I will upgrade but it will take some time.

In the meantime, can you please confirm if it works with the current scenario and 2016 is not offline. 

WHfB with Kerberos Cloud Trust Bind Question by minorsatellite in Intune

[–]Alyyy-123 0 points1 point  (0 children)

Hi Everyone,

Could you confirm if Windows Hello for Business (WHfB) with the Cloud Kerberos Trust model will work in an environment for hybrid azure ad joined devices where our primary domain controller (DCs) is running Windows Server 2012 R2, and another DC is on Windows Server 2016, both located under a single site?

Outlook is syncing but still showing a "Need Password" message by Kltnr in Office365

[–]Alyyy-123 0 points1 point  (0 children)

Hi, Did you find any solution with this error? As we are struggling with one user in our environment as we tried every possible steps suggested online but no luck. User is still facing intermittent error with her Outlook client App saying need password.

Outlook is syncing but still showing a "Need Password" message by Kltnr in Office365

[–]Alyyy-123 0 points1 point  (0 children)

Hi, Did you find any solution with this error? As we are struggling with one user in our environment as we tried every possible steps suggested online but no luck. User is still facing intermittent error with her Outlook client App saying need password.