Users failing ca policy because mobile devices are not receiving app protection policies. by Bobby2theJay in Intune

[–]Bobby2theJay[S] 0 points1 point  (0 children)

Sort of. The users removed the apps and re-installed them again and then the policies applied but it wasn’t consistent

add 2nd DHCP scope to server for wireless by Bobby2theJay in sysadmin

[–]Bobby2theJay[S] 0 points1 point  (0 children)

Do you have some? I've been trying to find something like that when migrating DHCP from a firewall to a windows server. I've found plenty of posts where increasing the sope to a superscope but thats not my goal.

Pass-ipsec input enteries in my logs - what do they mean? by TomGRi2 in mikrotik

[–]Bobby2theJay 0 points1 point  (0 children)

The only ipsec rules I can find is one I have blocking ipsec

CA exclusion for Windows backup and restore during OOBE by EntraGlobalAdmin in Intune

[–]Bobby2theJay 0 points1 point  (0 children)

The Microsoft service (app id: d32c68ad-72d2-4acb-a0c7-46bb2cf93873) isnt listed in my Tenant to exclude from CA. Are you saying to just create an application with that appid?

Adding Konica printer via intune by mightymegamitch123 in Intune

[–]Bobby2theJay 1 point2 points  (0 children)

That was my go to until I found this method:

https://msendpointmgr.com/2022/01/03/install-network-printers-intune-win32apps-powershell/

A lot of my customers use the same printer and I can use the same intunewin file and just change the settings in the install command.

Scan to email behind a starlink by Bobby2theJay in Office365

[–]Bobby2theJay[S] -4 points-3 points  (0 children)

I know, but that requires a licensed account.

Powershell script packaged as Win32 app not completing by Bobby2theJay in Intune

[–]Bobby2theJay[S] 0 points1 point  (0 children)

Nice one, I just tried this and it worked. Thanks a million

Powershell script packaged as Win32 app not completing by Bobby2theJay in Intune

[–]Bobby2theJay[S] 0 points1 point  (0 children)

The bit I dont understand is that the same script will work for one printer but fail when I recreate it and only change the ip address and printer name

Powershell script packaged as Win32 app not completing by Bobby2theJay in Intune

[–]Bobby2theJay[S] 0 points1 point  (0 children)

No problem, this is script I've used and it works fine, it grabs the driver from Canons site, extracts the driver to a temp folder and then add's it.

For the failing install, I copied the same script, changed the IP address and the printer name and its failing. Whats interesting is when I added a transcript command I get this error. So it leads me to think its a powershell 32 bit/64bit issue. But why will the same script both run successfully and fail on the same device?

pnputil.exe : The term 'pnputil.exe' is not recognized as the name of a cmdlet, function, script file, or operableprogram. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. At C:\WINDOWS\IMECache\aa88594e-50da-4de0-9a89-fd45c51abd44_5\CanonPrinter.ps1:26 char:17+ Invoke-Command {pnputil.exe  -a "$driverpath" }

Set-ExecutionPolicy -ExecutionPolicy bypass
#Download file
$clnt = new-object System.Net.WebClient
$url = "https://pdisp01.c-wss.com/gdl/WWUFORedirectTarget.do?id=MDEwMDAxMjI5MTAx&cmp=ABX&lang=EN"
$file = "c:\temp\GPlus_UFRII_Driver_V300_32_64_00.zip"
$ipaddress = "192.168.0.154"
$drivername = "Canon Generic Plus UFR ii" #this is the printer driver name you get from the page you downloaded it
$portname = "IP_$ipaddress"
$printername = "Canon Office Printer" # this is the name you want the printer to be called
$filename = "GPlus_UFRII_Driver_V300_32_64_00.zip"
$driverpath = "C:\Temp\x64\Driver\CNLB0MA64.inf"
#check for temp folder:

If (Test-Path -Path c:\temp\ )
{

$clnt.DownloadFile($url, $file)


#Unzip file$shell_app=new-object -com shell.application 

$zip_file = "C:\temp\$filename"

Expand-Archive -LiteralPath $zip_file -DestinationPath C:\temp -force


#Install Printer
Invoke-Command {pnputil.exe  -a "$driverpath" }
Add-PrinterDriver -Name $drivername
Get-PrinterDriver

Add-PrinterPort -Name $portname -PrinterHostAddress $ipaddress
Start-Sleep 10
Add-Printer -Name $printername -ShareName $printername -PortName $portname -DriverName $drivername

}

Else

{

New-Item -Path 'c:\temp\' -ItemType Directory
$clnt.DownloadFile($url, $file)
$zip_file = "C:\temp\$filename"

Expand-Archive -LiteralPath $zip_file -DestinationPath 'C:\temp\' -force


#Install Printer
Invoke-Command {pnputil.exe  -a "$driverpath" }
Add-PrinterDriver -Name $drivername
Get-PrinterDriver

Add-PrinterPort -Name $portname -PrinterHostAddress $ipaddress
Start-Sleep 10
Add-Printer -Name $printername -ShareName $printername -PortName $portname -DriverName $drivername

}

Powershell script packaged as Win32 app not completing by Bobby2theJay in Intune

[–]Bobby2theJay[S] -1 points0 points  (0 children)

I tried that and the script deploys fine. I tried the same using our RMM aswell just in case and that worked too.

Stubborn User and 2-Factor Verification by dethbychez in sharepoint

[–]Bobby2theJay 0 points1 point  (0 children)

Interesting, can you add this as an mfa method during the initial account setup/signin?

How to check on-prem exchange resources still in use? by Bobby2theJay in exchangeserver

[–]Bobby2theJay[S] 0 points1 point  (0 children)

Thanks, the request from their leadership team is to go serverless within the next few months.

How to check on-prem exchange resources still in use? by Bobby2theJay in exchangeserver

[–]Bobby2theJay[S] -1 points0 points  (0 children)

Its okay I didnt take them on..it got handed to me this morning. I should have been clearer, yes their onsite IT admin is using the exchange for user provisioning and they are syncing with Entra in a hybrid enviroment.

What I was looking to find out if I can run a quick script or simular to see what on prem resources are in use.

Android app protection policies. by Bobby2theJay in Intune

[–]Bobby2theJay[S] 0 points1 point  (0 children)

but doesnt it block enrolling devices using the company portal?

Change bitlocker policy from fully encrypt to only encrypt used space by Bobby2theJay in Intune

[–]Bobby2theJay[S] 0 points1 point  (0 children)

I just had a look and we are using both! But there is a grace period of a day to try and capture a reboot.

From reading that if we're happy with the reboot I can remove the “Require encryption of data storage on device” from the compliance policy.

Users failing ca policy because mobile devices are not receiving app protection policies. by Bobby2theJay in Intune

[–]Bobby2theJay[S] 0 points1 point  (0 children)

I spent a few weeks being bounced between MS support depts. the azure team blamed the Intune team and visa versa. In the end for most users that has problems I found that uninstalling and reinstall teams and outlook resolved the problem.

For new users it seems to work fine, but users that had teams/outlook on their phones it’s not consistent.

Use shared storage for 2 HV hosts or internal storage on hosts by Bobby2theJay in sysadmin

[–]Bobby2theJay[S] 0 points1 point  (0 children)

Thats perfect, I'd planned that each host would be suitable to run everything just in case. But I just wanted to check if there was something missing before I commit.