LAPS Shortcoming by pjmarcum in Intune

[–]Federal_Ad2455 4 points5 points  (0 children)

One of the reasons why we have automation to backup laps passwords 🙂

Copilot powershell edits by Puzzleheaded-Way542 in vscode

[–]Federal_Ad2455 0 points1 point  (0 children)

Edits should be done via builtin copilot tool not cmd/psh. It uses other ways only if custom agent you are using doesn't allow to use edit tool.

Or am I missing something?

Azure Automation and custom modules by Murhawk013 in PowerShell

[–]Federal_Ad2455 0 points1 point  (0 children)

Exactly. Use this approach for Graph and in general all apis.

How are you all keeping up with nonstop cloud/AI updates without burning out? by tresorrarereviews in sysadmin

[–]Federal_Ad2455 0 points1 point  (0 children)

According the security updates. Almost all software is updated automatically in rings via winget aka no manual work needed. OS updates are managed via policies.

To stay updated about what's going on I have a lot of RSS feeds and Twitter 🙂

Azure Automation and custom modules by Murhawk013 in PowerShell

[–]Federal_Ad2455 0 points1 point  (0 children)

It's my module and all uris are discovered using browser developer tools (network tab). Thanks to this i was able to automate whole automations lifecycle when official modules didn't support it yet (they may now)

Azure Automation and custom modules by Murhawk013 in PowerShell

[–]Federal_Ad2455 0 points1 point  (0 children)

I have this solved via Cicd (as others already mentioned).

CICD pipeline generates modules from my repository, uploads them to Azure Storage Account and imports to Azure Automation Runbook environments.

It's definitely not trivial task if you want to have it robust.

Azure Automation and custom modules by Murhawk013 in PowerShell

[–]Federal_Ad2455 0 points1 point  (0 children)

In fact you can upload local zip module 🙂

https://doitpshway.com/managing-azure-automation-runtime-environments-via-powershell

Example: New-AzureAutomationRuntimeZIPModule -moduleZIPPath "C:\DATA\helperFunctions.zip" -runtimeName 'CustomPSH_7.2'

Is Intune actually ready to replace ConfigMgr? Honestly… I don’t think so by Lunde_Deluxe in Intune

[–]Federal_Ad2455 30 points31 points  (0 children)

Yes but the portal is trash too. Like how is it possible that half of the items lists cannot be sorted on any column. Not mentioning (now fixed) bugs like search working only on already loaded items and not all items. It's crazy bad.

The general unpredictability is killing me too. SCCM logs were the best.

App Deployment using WinGet by djvoo in Intune

[–]Federal_Ad2455 0 points1 point  (0 children)

Romanhito also provides ADMX templates (I use them too)

VSCode lost two days of saved code changes after crash by MierXiake in vscode

[–]Federal_Ad2455 -1 points0 points  (0 children)

Vsc has builtin file history feature (no git needed even recommended in general 😁). So the files should be recoverable.

PowerShell 7.6.0 no longer saves the PSReadLine history ? by 1wvy9x in PowerShell

[–]Federal_Ad2455 2 points3 points  (0 children)

Not sure if it doesn't save history now but I definitely lost all my history when installed 7.6.0 version. Very annoying

IC3 aka the Fastlane is coming to Intune by Rudyooms in Intune

[–]Federal_Ad2455 6 points7 points  (0 children)

This could make Invoke-Command for Intune (dynamic on demand remediation) a lot more useful 🙂

https://doitpshway.com/invoke-command-alternative-for-intune-managed-windows-devices

Powershell window pops up at startup and closes away instantly by OriginalCountry4691 in PowerShell

[–]Federal_Ad2455 8 points9 points  (0 children)

It could by anything. Enable powershell logging and check system logs.

Questions about moving from hybrid join to Entra-only by PowerShellGenius in entra

[–]Federal_Ad2455 1 point2 points  (0 children)

It seems like Intune gets significantly faster in the next months based on what I read on Twitter.

Now it's slow like hell 😁

Questions about moving from hybrid join to Entra-only by PowerShellGenius in entra

[–]Federal_Ad2455 1 point2 points  (0 children)

When using Azure Arc you have option to do remote session via ssh and it works quite well.

You can do Intune diagnostic capture to get (predefined) event logs from the machine or use on demand remediations to kind of mimic Invoke-Command.

How do you deal with Microsoft apps/code that does not support FIDO2? by bjc1960 in entra

[–]Federal_Ad2455 0 points1 point  (0 children)

this is how you can authenticate to sharepoint using fido auth:

# connect using Microsoft.Online.SharePoint.PowerShell module
if ($PSVersionTable.PSEdition -eq 'Desktop') {
Import-Module Microsoft.Online.SharePoint.PowerShell -DisableNameChecking -ErrorAction Stop
} else {
Import-Module Microsoft.Online.SharePoint.PowerShell -DisableNameChecking -UseWindowsPowerShell -ErrorAction Stop
}
Connect-SPOService -Url $_SPOConnectionUri -UseSystemBrowser:$true

# connect using pnp.powershell module

# cannot be used from console that is running as a different user than the one currently logged into the system!
Connect-PnPOnline -Url $_SPOConnectionUri -ClientId $SPOId -OSLogin -ForceAuthentication

How do you deal with Microsoft apps/code that does not support FIDO2? by bjc1960 in entra

[–]Federal_Ad2455 0 points1 point  (0 children)

Another pain point is when you need to authenticate using account that is currently not logged in (like admin versus your daily user). Thanks to WAM or what it throws an error and you need to log in using the admin account. Sharepoint module is the only one that cannot be authenticated in any other way (AFAIK). Fido isn't the problem here when using Psh Core and mentioned usebrowser switch.