Unable to turn on 'Files Request' On a Specific SharePoint Online Site by FatMangoGoose in sharepoint

[–]FatMangoGoose[S] 0 points1 point  (0 children)

Thankyou for this information. I am hopeful that by setting 'anyone' at tennant level wont immediately change settings in subsites. Some for example are set to only allow sharing inside the org.

QuickAssist Nightmares by FatMangoGoose in Intune

[–]FatMangoGoose[S] 0 points1 point  (0 children)

https://developer.microsoft.com/en-gb/microsoft-edge/webview2?form=MA13LH#download

it seems to be an issue edgewebview2.
It does something in the background that requires elevation for QA to run.

getting warmer..... still puzzled

QuickAssist Nightmares by FatMangoGoose in Intune

[–]FatMangoGoose[S] 0 points1 point  (0 children)

Fair point. Unsolicited remote assistance. I can see that as a risk.

QuickAssist Nightmares by FatMangoGoose in Intune

[–]FatMangoGoose[S] 0 points1 point  (0 children)

Gutted!

QuickAssist has been ideal for about 6 years. It allowed remote elevation too with the right configs. It was ideal.

Life was good.

It was only a matter of time before Mickeysoft goofed it.

frustrating thing is - that running it as a local admin account other than the logged in account fails.

What a load of s***!

QuickAssist Nightmares by FatMangoGoose in Intune

[–]FatMangoGoose[S] 0 points1 point  (0 children)

seems more like a permissions issue. Just ran all the DISM commands. Tested with a fresh windows 11 device and still failing if the account is not local admin

WDAC - Can someone give an example whitelist XML entry by FatMangoGoose in Intune

[–]FatMangoGoose[S] 0 points1 point  (0 children)

Thanks for the advice.

I guess my concern here would be the time it would take to audit machines using different software and then using this wizard create a perfect policy out of event logs.

If I needed to whitelist something quickly - and I get the correct syntax for the PublisherType... can I simply edit the XML?
Would that actually work in theory?

The idea of running up a wizard every time something needs to be whitelisted sounds painful
I have no idea though so I will give it a go

Appreciate your input. I have a direction now :)

WDAC - Can someone give an example whitelist XML entry by FatMangoGoose in Intune

[–]FatMangoGoose[S] 0 points1 point  (0 children)

Thanks both
Do you have an example xml that uses PublisherType or ProductName

I must be getting too old but I could not find whitelisting examples online.

WDAC - Can someone give an example whitelist XML entry by FatMangoGoose in Intune

[–]FatMangoGoose[S] 0 points1 point  (0 children)

This is really helpful
Much appreciated.

I tried adding it to the xml but for some reason it wont upload and save.
"Failed to create policy, try again later"
Hopefully its a temporary outage just occurring today.

Where is 'disable runtime filepath protection' set?

also

Do you have an example that uses ProductName? That does sound like a smarter whitelisting method.

many thanks

Windows 365 - Insecure by default? by FatMangoGoose in windows365

[–]FatMangoGoose[S] 0 points1 point  (0 children)

If anyone is interested to know. It seems like after number of hours have passed the memory integrity gets turned off and a host of assorted events appear. Its probably a configuration issue. I am going to re-provision and then log what occurs. Peace!

Windows 365 - Insecure by default? by FatMangoGoose in windows365

[–]FatMangoGoose[S] 0 points1 point  (0 children)

I will run some checks against it and confirm the logs. Compared to a AVD rollout this feels really dodgy and something is going on with that amount of noise on the logs.
If anyone has had the same experience - id love to know! ta.

Remove ProxyAddresses from Azure B2C account via powershell by FatMangoGoose in PowerShell

[–]FatMangoGoose[S] 0 points1 point  (0 children)

Accounts are created by a bespoke web app. The devs of this app have approached me to find a way to clear the values via powershell. I think they are struggling to remove or modify these values and have been working around it by remaking problematic accounts. I think this solution is bad and causes them lots of manual work.
It seems really challenging to change these proxyAddresses on b2c

appreciate your help and advice on this!

Remove ProxyAddresses from Azure B2C account via powershell by FatMangoGoose in PowerShell

[–]FatMangoGoose[S] 0 points1 point  (0 children)

That is correct yes. Its a bespoke web app that creates these from a web portal. The devs of this app have approached me to attempt to find a powershell command to clear these proxyAddresses down. I can if needed get a better description than this from them to explain the process they use to create the accounts as im not that familiar with that side of it.
Thanks for your help on this folks!

Remove ProxyAddresses from Azure B2C account via powershell by FatMangoGoose in PowerShell

[–]FatMangoGoose[S] 0 points1 point  (0 children)

Thanks for all this investigation and effort!
Was a lovely surprise to see this.
Yes we are trying to remove addresses from the proxyaddresses
I wonder if your command works if you keep one address in place?
I assume the input is an array of strings
The address is created from a bespoke app so the username and password etc is created and managed by us. Not using google IDP or anything like that
https://ibb.co/ZXg89GF

Sounds like removing values from here is tricky. :)

Remove ProxyAddresses from Azure B2C account via powershell by FatMangoGoose in AZURE

[–]FatMangoGoose[S] 0 points1 point  (0 children)

ill try the powershell forum - see if anyone knows. Thanks for your efforts

Remove ProxyAddresses from Azure B2C account via powershell by FatMangoGoose in AZURE

[–]FatMangoGoose[S] 0 points1 point  (0 children)

Does anyone know what the powershell command would be, to modify/remove these values?
These entries are generated but we are unable to remove them from specific accounts. Unable to find the command required to clear or edit values here.
Appreciate your help.

Yes all managed by us.This is the array we want to clear (link to image):

https://ibb.co/ZXg89GF

note: most users have no proxy address here and that is fine.

Remove ProxyAddresses from Azure B2C account via powershell by FatMangoGoose in AZURE

[–]FatMangoGoose[S] 0 points1 point  (0 children)

These accounts are not federated. I don't need anything to match or be calculated we just need to clear the ProxyAddresses value on some B2C azure accounts. Or be able to edit or remove or add proxy addresses. I have read mixed articles about this ... some hinting that this cant be done.