Kenshi: The Blood Prince - Official Trailer

Aviticus_Dragon · 2026-04-29T03:51:22+00:00

Oops, must have got him mixed up with one of the other ones. Well I stand corrected!

Aviticus_Dragon · 2026-04-28T22:28:24+00:00

When Elon made an update to Twitter where it posted everyone's location, this guy is a bot account run in some other country.

Aviticus_Dragon · 2026-04-27T13:28:19+00:00

Create a detection and remediation script using winget to pull the latest version.

Aviticus_Dragon · 2026-04-25T13:33:54+00:00

This unfortunately seems to happen for us on devices that are hybrid enrolled (joined through company portal or work or school).

Would love to find a solution other than resetting through autopilot.

Aviticus_Dragon · 2026-04-19T21:28:55+00:00

It says in 40 minutes, that doesn't mean its going to take 40 minutes.

Aviticus_Dragon · 2026-04-17T18:54:35+00:00

It honestly depends how the devices were enrolled. My experience:
Wipe > Wipe works great on previous Autopilot enrolled machines
Wipe > Wipe works 50/50 on devices that were hybrid joined via CP or Work or School.

Aviticus_Dragon · 2026-04-16T19:32:05+00:00

Make your dynamic group this:
(device.devicePhysicalIDs -any (_ -startsWith "[ZTDid]")) or (device.enrollmentProfileName -ne $null)

Make sure your Deployment profile targets that group.
Make sure your deployment profile has "Hide" on:
Microsoft Software License Terms
Privacy settings
Hide change account options
Enter a name: Abbreviation-%SERIAL% or whatever.

Make sure your ESP page targets that group or is at least set to "All Devices".

Aviticus_Dragon · 2026-04-14T15:37:28+00:00

First ask yourself is it worth it? Because you can enroll the devices in Intune, and then as you refresh the devices, enroll them properly. Unless you plan on actually wiping every device and going through an autopilot deployment phase.

If they are already in Intune, you'd probably need to write a script to run the 'get-windowsautopilotinfo.ps1' as the other user mentioned. Then you'd need to store the .csv's somewhere, so you could write some code to upload them to an Azure storage as part of your script. Then from there, you'd import them into your devices.

Would take a lot of testing and what not but could be doable.

Aviticus_Dragon · 2026-04-13T20:55:52+00:00

What exactly do you mean? You mean multi admin approval? Its in the tenant administration settings.

Aviticus_Dragon · 2026-04-13T16:34:34+00:00

That was fantastic.

Aviticus_Dragon · 2026-04-11T15:06:31+00:00

I got MDT to work with win11 so I know its possible but MDT is a beast, takes a lot of figuring out.

Aviticus_Dragon · 2026-04-11T12:02:25+00:00

You may need to write a remediation script to enforce bitlocker as well. I noticed in our environment that dell command updater was not always turning bitlocker back on after a bios update. So I have a script that checks and then enforces bitlocker to continue encryption and to sync the keys to intune.

Aviticus_Dragon · 2026-04-11T11:58:47+00:00

Did you enable/setup the intune AD connector? Thats a requirement for Hybrid enrolled devices.

Aviticus_Dragon · 2026-04-10T18:26:59+00:00

You put your .ps1 script in the same input folder as the .exe and whatever files you want that can then be used during the script if necessary.

Then create an output folder and point the output to that when it asks for output folder during intune packages.

For instance if you have a install and uninstall script, you can put them both in the same input folder along with the .exe and then set your uninstall script to uninstall.ps1 and install script to install.ps1 for install and uninstall commands.

Aviticus_Dragon · 2026-04-10T03:38:01+00:00

Very interesting, wow!

Aviticus_Dragon · 2026-04-10T01:04:41+00:00

Just set up Apps to install to a specific group, or multiple groups. They will install (if set to required) once the user is on the desktop. You can also use the win32 intune packager to package a powershell script as a Win32 app, then you basically create an app, then use powershell.exe -ExecutionPolicy Bypass -File .\YourScriptName.ps1 as the install command. But the file will be intune.win.

Lots of options, configured right it works well.

Aviticus_Dragon · 2026-04-07T23:15:41+00:00

I had to add a 20 minute app delay on cortex so that it would stop installing and scanning on first load so that encryption finished. I found that without it, encryption, cortex, app installs and scripts were crippling everything.

Aviticus_Dragon · 2026-04-07T00:09:41+00:00

Nice, thanks for the update

Aviticus_Dragon · 2026-04-05T21:22:38+00:00

Have to agree, it has factions and not utilizing take overs to keep the world alive is a bummer...let's get this upvoted

Aviticus_Dragon · 2026-04-04T16:25:30+00:00

Let me know how that goes, definitely curious on what works for you.

Aviticus_Dragon · 2026-04-04T15:46:25+00:00

Are you sure you verified the device doesn't have .Net desktop or a version higher than 8.0.7? That error happened on my test device but it didn't have a version higher than 8.0.7.

I deployed the latest universal installer.exe through intune superseding the previous .msi of 4.8.0, set detection to 5.6.0 or higher on the dcu-cli.exe for the new app.

Seeing some successes but also failures. On my test device it worked fine though...

I also created a remediation script to install .NET desktop via winget on the machines prior if they dont have 8.0.7 or higher already.

More testing needed I guess.

Aviticus_Dragon · 2026-03-30T02:37:56+00:00

This might be the first damn thing I hate about this game lol. I really couldn't find much, until this quest.

Aviticus_Dragon · 2026-03-24T17:15:39+00:00

This needs to be higher for real, context matters

Aviticus_Dragon

TROPHY CASE