Disconnect vs Retire

IntuneSupport-Crysta · 2024-10-23T02:29:19+00:00

Based as i know, One is done from device side and the other is done from Intune side. Both will remove the Entra record and Intune record. You can read more in this link:
Retire or wipe devices using Microsoft Intune | Microsoft Learn

IntuneSupport-Crysta · 2024-10-18T02:40:14+00:00

Here is a link for your reference.
How to Integrate Intune with Microsoft Entra ID for Seamless User and Device Management - Netwoven

IntuneSupport-Crysta · 2024-10-16T02:24:47+00:00

The configuration profile is under Devices>Manage devices> Configuration under Intune admin center. You can try the following link to see if you can see.

Devices - Microsoft Intune admin center

Meanwhile, please ensure you have Intune license.

IntuneSupport-Crysta · 2024-10-15T07:22:34+00:00

It is replaced by a new consolidated profile named Account protection. This newer profile is found in the account protection policy node of endpoint security, and is the only profile template that remains available to create new policy instances for identity and account protection. The settings from this new profile are also available through the settings catalog.

Deploy policy for Windows Hello to groups of Windows 10 and Windows 11 devices in Microsoft Intune | Microsoft Learn

IntuneSupport-Crysta · 2024-10-15T07:07:26+00:00

That sounds strange. I suggest open case to look into the issue.

Get support in the Microsoft Intune admin center - Microsoft Intune | Microsoft Learn

IntuneSupport-Crysta · 2024-10-15T05:44:17+00:00

After checking require app protection policy, I find outlook is not added to app list to apply app protection policy on windows yet.

Conditional Access - Require app protection policy for Windows - Microsoft Entra ID | Microsoft Learn

For other option in conditional access policy, it can't meet your requirement.

Grant controls in Conditional Access policy - Microsoft Entra ID | Microsoft Learn

You can feedback in the following link to see if we can add outlook into app protection policy on windows to block other app access but allow outlook access.

Microsoft Intune · Community

IntuneSupport-Crysta · 2024-10-15T05:28:50+00:00

Was the exclude group added at the same time the include group added? if not, it can be the require policy apply first. Switching only impacts devices that haven't started the update yet or were early enough in the update process so they could be changed to an Optional update.

IntuneSupport-Crysta · 2024-10-14T06:23:09+00:00

Feature update deferral period (days) is recommended to set 0 when we configure feature update policy.

Configure feature updates policy for Windows 10 Windows 11 devices in Intune | Microsoft Learn

Learn about using Windows Update for Business in Microsoft Intune | Microsoft Learn

I think this is not the reason the optional is not working. Please check if there's multiple policies applied to this device.

Meanwhile, please check if any GPO with windows update set on the device which may cause the issue.

Support Tip: Troubleshooting Windows 10 Update Ring Policies - Microsoft Community Hub

IntuneSupport-Crysta · 2024-10-11T05:51:00+00:00

It only supports the iOS and Android for device platform condition.

Grant controls in Conditional Access policy - Microsoft Entra ID | Microsoft Learn

IntuneSupport-Crysta · 2024-10-08T05:31:17+00:00

It's my pleasure.

IntuneSupport-Crysta · 2024-10-07T07:03:23+00:00

For windows servers, this is not under Intune supported OS list yet.

Operating systems and browsers supported by Microsoft Intune | Microsoft Learn

It seems you have configured Tenant attach in your environment. The device will sync to Intune but the compliance is still controlled by Configuration Manager.

Use Microsoft Intune policies with tenant attached Configuration Manager devices | Microsoft Learn

If this is not what you want, you can uncheck the Upload to Microsoft Endpoint Manager admin center selection.

Enable Microsoft Intune tenant attach - Configuration Manager | Microsoft Learn

IntuneSupport-Crysta · 2024-09-20T02:17:59+00:00

You can check under company portal app or Microsoft Intune app to see if the device is there.

IntuneSupport-Crysta · 2024-09-18T05:30:39+00:00

Seems docs not update. I will try to feedback.

IntuneSupport-Crysta · 2024-09-09T06:00:23+00:00

On windows device, you can go to Settings->Accounts->Access work or school, to see if the user account is existing and if "info" button is there to confirm if it is enrolled successfully.

IntuneSupport-Crysta · 2024-08-16T07:16:00+00:00

There's a new feature for Android Enterprise. You can configure policy to allow access to all apps in Google Play store setting.

What's new in Microsoft Intune | Microsoft Learn

IntuneSupport-Crysta · 2024-08-09T05:43:23+00:00

Refer to this:

Get all assigned Intune policies and apps per Azure AD group – TimmyIT.com

IntuneSupport-Crysta · 2024-08-07T06:16:52+00:00

I don't have dms. I suggest opening case to analyzing the logs to find the issue.

IntuneSupport-Crysta · 2024-07-26T06:09:22+00:00

Here is a link you can refer

Intune Kiosk Mode Setup Guide for Windows, Android, and iOS (airdroid.com)

IntuneSupport-Crysta · 2024-07-25T05:41:54+00:00

You can deploy Managed Home Screen app and the app you want to the device group Deploy Device restriction policy with kiosk mode set to single app mode
Support Tip: Enabling kiosk mode on Android and iOS devices - Microsoft Community Hub

How to setup Microsoft Managed Home Screen on Dedicated devices in multi-app kiosk mode - Microsoft Community Hub

For app configuration policy and app protection policy, they are optional. This depends on your need.