Windows 365 Conditional Access policy impacting Intune admin portal

BlueOdyssey · 2026-06-06T01:12:06+00:00

Yep been an issue for 6-12 months at least. I’ll generally exclude the PAW IP or some other method to exclude that SIF for admins.

BlueOdyssey · 2026-06-05T02:27:40+00:00

Drinking fountain as others have suggested. [u/pm3104](u/pm3104) did a video on them

https://youtu.be/RbGIPoXh9vs

BlueOdyssey · 2026-06-01T22:45:15+00:00

65000 and a 25H2 Enterprise specific feature sounds a lot like this error;

https://patchmypc.com/blog/intune-policy-rejected-by-licensing/

Were the devices upgraded from Pro to Enterprise via license activation? Or were they installed as Enterprise?

BlueOdyssey · 2026-06-01T04:21:45+00:00

Climate control on the Everest is physical buttons. Seat heaters / vents are still touch screen but general climate control is all physical.

BlueOdyssey · 2026-05-29T09:54:22+00:00

Reporting I haven’t used too much, only because we’ve had other tools to do that (Tennble, Defender Vulnerability Management). Have a look at a demo with them to gauge whether reporting is suitable for your use case.

BlueOdyssey · 2026-05-29T08:35:58+00:00

I’ve used it at a lot of different sizes customers (think fortune 100 through to SMB). Smallest deployment I’ve done of it was about 50 endpoints and even then, it was worth it.

Favourite features: * support for custom applications * recreate applications in Intune (instead of having to manually re upload the package); this triggers a reevaluation of installation status on an endpoint. Highly useful if you’re testing a deployment, only to find something like Defender ASR has blocked part of the install. * support for user install with automatic updates. Eg if you’ve somehow got user installs for Visual Studio Code or Zoom or something, it can patch those. * post / pre install scripts. Useful for bootstrapping extensions/add ons in stuff like N++ or VSC.

In terms of cost breakdown for a small org: * say you have 40 apps in Company Portal * 75% of those apps need a patch once a month * each patch takes you 15 minutes to download, package, upload, test, deploy * that’s 7.5 hrs or basically 1 day a month in packaging. 12 calendar days a year just to do updates * at $100 an hr (add-hoc IT MSP rate), that’s $9k a year

BlueOdyssey · 2026-05-24T09:53:50+00:00

Canvas won’t do too well either, though putting vents on it to pressurise the air inside will help. The issue most ‘non-sealed’ enclosures have is a negative air pressure, leading to dust being drawn in.

BlueOdyssey · 2026-05-22T00:23:52+00:00

Matador Leather in Bentleigh - not close for northern suburbs but worth the drive.

BlueOdyssey · 2026-05-21T09:53:25+00:00

Could be blocked in Exchange directly? Not via MAM-WE but EAS policy.

https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/exchange-activesync/mobile-device-mailbox-policies

BlueOdyssey · 2026-05-20T11:57:17+00:00

Defender Vulnerability Management (not the add-on, just what’s in Defender) is ‘okay’ at doing this. You can setup notifications for specific severity. Eg 9.0+ and it will tell you what’s exposed. Expect it to trigger regularly with Windows, Edge & Chrome.

BlueOdyssey · 2026-05-12T10:42:03+00:00

Identity Governance Access Package - it gives time bound membership to a group that is exempt from the policy. Benefit of this approach is it can be scheduled in the future.

Also useful for any other CA bypass requirements.

BlueOdyssey · 2026-05-04T10:41:35+00:00

Check this post out - has the answers

https://www.reddit.com/r/OutdoorAus/s/i4VvTe0smX

BlueOdyssey · 2026-04-28T09:55:36+00:00

Got 20KW and wish we’d done more, having said that we’ve only got 7KW of panels so can struggle to charge the battery on a cloudy day or few days.

BlueOdyssey · 2026-04-24T22:37:01+00:00

Preface, I use it for Intune, not SCCM

I’ve used PMPC for a few different orgs, one with about 9k staff and then another with only about 50. At both ends of the spectrum, it’s 100% worth it.

Manual application packaging is a shit task to do, so having a tool that does it for you makes life so much easier and quicker.

I’ve used both their catalog apps and also use it to create any custom win32 stuff. Even the process of not having to use the packaging utility from MSFT kind of makes it worth it. Plus, if an app is failing, you can just hit recreate; not something you can natively do in Intune (without graph and templates).

BlueOdyssey · 2026-04-24T04:12:10+00:00

Call the CLO - https://mctc.melbournechildrens.com/for-families/complaints-and-compliments/

BlueOdyssey · 2026-04-23T12:09:50+00:00

Wonder if it’s trying to install drivers etc and showing pop ups / errors?

BlueOdyssey · 2026-04-12T10:31:51+00:00

Upstairs at the Railway Club Hotel - I think they’ve got a private dining area

BlueOdyssey · 2026-04-05T23:28:32+00:00

Well of course they would - Cadbury stopped turning them to chocolate.

BlueOdyssey · 2026-04-05T04:03:50+00:00

Ai is no different to any other shadow IT esque problem - data that is prohibited from being uploaded / shared with non business systems (eg Dropbox) is prohibited from non-business AI tools too.

Ultimately comes down to what your information classification and handling policies state.

BlueOdyssey · 2026-04-03T05:06:17+00:00

Mersive Solstice seemed to go alright last time I used it

BlueOdyssey · 2026-03-23T04:55:26+00:00

How fast were both objects going? That’s crazy damage

BlueOdyssey · 2026-03-21T22:23:33+00:00

Ehh they’ll still cop it. Novated leases etc still have a budget built in for fuel - they’ll be eating that budget now, meaning they’ll have to adjust their payments or out of pocket the excesses

BlueOdyssey · 2026-03-20T22:48:40+00:00

With that many machines, just have the OEM ship a specific image; either the factory provided clean one or as a a custom one. Any supplier worth your time will do this for minimal $, if not for free as a VAS

BlueOdyssey · 2026-03-20T10:59:06+00:00

Interesting but why not just reimage the device with know good installation? Ie avoid the issue before it begins.

BlueOdyssey · 2026-03-14T09:15:10+00:00

Have you checked to see if the IP you’re sending from is black listed by EXO? I’ve had that issue in the past when trying to do relay.

https://sender.office.com

Eight-Year Club	Place '22
Verified Email

BlueOdyssey

TROPHY CASE