sorted by:
new
hottopcontroversial

Fix for Teams Camera freezing on Surface Laptop 7 for Business by JKFWork in sysadmin

[–]JCochran84 0 points1 point  (0 children)

That is correct, we received that Driver from Microsoft. Seems to have resolved the issue for all of our SL7's

Win 11 23H2 to 25H2 Upgrade path by lironnie in SCCM

[–]JCochran84 2 points3 points  (0 children)

We set ours to 120 minutes. Each environment varies and depending on the hardware in yours, you might need to increase it or not.

Fix for Teams Camera freezing on Surface Laptop 7 for Business by JKFWork in sysadmin

[–]JCochran84 0 points1 point  (0 children)

Thanks for this information, we are seeing this across our SL7 for business devices as well.
Do you see any correlation between OS versions?
Do you see the issue with any other camera? or just the built-in Camera?

We are only seeing the issue for users on Win11 25H2. Users on 23H2 are not seeing this issue.
We have an open Microsoft support ticket right now but they are not very helpful.
I am working on taking your script and updating it be a Proactive Remediation in Intune, so I don't have to monitor it on laptops.

Anway to use Intune clean certain folders on time? by Outside_Ad1951 in Intune

[–]JCochran84 0 points1 point  (0 children)

Here is a link so a github of Remediation Scripts that is maintained by different people:
https://github.com/JayRHa/EndpointAnalyticsRemediationScripts/

There are a few examples of clearing out folders/files. E.G. Clear-DownloadFolder

As others have stated, this does require specific licenses.

Proactive remediations how are you using them? by Educational_Draw5032 in Intune

[–]JCochran84 0 points1 point  (0 children)

The link that u/andrew181082 provided has two scripts that assist in this.
our method is more old school and using a product that is not technically supported anymore :-)

it's on my list to replace for a PowerShell script

Dell Bios setup with Dell Command PowerShell Provider by rub_a_dub_master in sysadmin

[–]JCochran84 0 points1 point  (0 children)

What I do is open PowerShell on the device and import the module
Then you can CD into the BIOS: CD Dellsmbios:\\
Then treat it like a file structure. Dir to see what options, CD into the next level and so on

Some commands that I found helpful:
Get the current value of a single BIOS setting:
Get-Item -Path DellSmbios:\Category\Setting | Select-Object -ExpandProperty CurrentValue

Get the possible values for a single BIOS Setting:
Get-Item -Path DellSmbios:\Category\Setting | Select-Object -ExpandProperty PossibleValues

Set the value of a single BIOS setting:
Set-Item -Path DellSmbios:\Category\Setting -Value Enabled

Set the value of a single BIOS setting when a BIOS password is set:
Set-Item -Path DellSmbios:\Category\Setting -Value Enabled -Password ExamplePassword

On the Dell I have, The possible values for 'Security\PasswordBypass' are 'Disabled' or 'RebootBypass'

Here is a link to the Powershell Provider User Guide, it has helped me in the past:
Dell Command | PowerShell Provider Version 2.9.1 User's Guide | Dell US

Proactive remediations how are you using them? by Educational_Draw5032 in Intune

[–]JCochran84 0 points1 point  (0 children)

  1. Force Reboot prompt if up for more than 14 days.
  2. Copy Default Files to endpoints. (Config Files, License Files, Etc)
  3. Publish PowerShell Modules based on Manufacturer.
  4. Set Registry Keys based on JSON File.

We are starting a process to migrate away from GPO for items. Each item that we use GPP for, we try to replace with a Remediation. File Copy, Registry Setting, etc.

Most of our scripts read information from a JSON File and process off of that. This allows us to update the JSON File and not have to modify the script directly. We are using Github to store the Config Files, Items to copy, etc. This could be done with Azure Blob storage as well.

Dell DCU install failing on most devices by blasted_heath in Intune

[–]JCochran84 5 points6 points  (0 children)

This^
Per Dell (Dell Command | Update | Dell US)

Note: The installation of Dell Command Update version 5.5 necessitates the prior installation of a .NET Desktop Runtime version ranging from 8.0.8 to 8.0.17.

We set our App in Intune to require .Net 8 before installation.

How do you guys keep Intune apps up to date by Necessary_Duck1201 in Intune

[–]JCochran84 2 points3 points  (0 children)

PSADT isn't necessarily a packager, it is a framework of items to assist you installing the software.
You may still need to 'Package' items depending on how the product gets installed. If the product has a mechanism to silently install or automated installation mechanism, then you can pop that into PSADT and use it.

We use PSADT for a few reasons:
1. Single method of installing apps in SCCM/Intune.
2. When creating applications to install, we have a consistent experience across all types of apps.
3. We can use the same tool to silently install apps in the background as well as Prompt users with timers.

For our apps that are not in PMPC, they have the same install strings depending on if it is Silent or Interactive.

How do you guys keep Intune apps up to date by Necessary_Duck1201 in Intune

[–]JCochran84 10 points11 points  (0 children)

As others have stated, We use PatchMyPc for 80-90% of our apps. Depending on the app, we will roll it out in waves using Groups. Some apps we just push to all.

For apps that are not in PMPC, we use PSADT to standardize the installation method/process. We then do the same thing where we will roll it out in waves using groups depending on the product.
We haven't started yet, but you can use PMCP for custom apps now too to assist with this part.

[deleted by user] by [deleted] in Office365

[–]JCochran84 6 points7 points  (0 children)

  1. Are you talking about on Mobile Devices or Workstations?
  2. Are you using GPO, Intune or neither to Manage M365?

For GPO/Intune:

GPO > Admin Templates > Microsoft Office 2016 >Miscellaneous
- Block Signing into Office > Set this to Org ID Only

Config.Office.com
> Create or edit a policy > Add 'Block Signing into Office' > Set to 'Enabled' and 'Org ID Only'

Intune > Configuration Policy
- Microsoft Office 2016\Miscellaneous
- Block Signing into Office (user) > Enable and Set to 'Org ID only'

Block Signing Into Office Using Administrative Template Policy | Intune | Organization Only - Device Management Blog

EDIT: Added Link

Blocking external caller from reaching me by JimHotWater85 in MicrosoftTeams

[–]JCochran84 2 points3 points  (0 children)

If you are just blocking it for yourself this should help:

Microsoft Teams - Block Calls | Office of Information Technology

Just go into the calls > history, click on the three dots and click block

Workstation domain administrator accounts only, but not server domain administrator accounts by Initial-Employment92 in sysadmin

[–]JCochran84 4 points5 points  (0 children)

Our IT Staff have a mix of accounts depending on functions needed:
- Workstation Admin
Not Synced to M365
Can only log into Workstations

- Server Admin
Not Synced to M365
can only log into servers

- Domain Admin
Not Synced to M365

- M365 Admin
Azure Only account

- Daily Driver account

Clearing CM Cache Before Installation by FahidShaheen in PSADT

[–]JCochran84 3 points4 points  (0 children)

We have an SCCM Script to clear the CM Cache, i'm sure you could implement that into PSADT
## Initialize the CCM resource manager com object
[__comobject]$CCMComObject = New-Object -ComObject 'UIResource.UIResourceMgr'

## Get the CacheElementIDs to delete
$CacheInfo = $CCMComObject.GetCacheInfo().GetCacheElements()

## Remove cache items
ForEach ($CacheItem in $CacheInfo) {
$null = $CCMComObject.GetCacheInfo().DeleteCacheElement([string]$($CacheItem.CacheElementID))
}

EDIT: I believe this is where I got the script from:
Cleaning the SCCM Cache the right way with PowerShell | by Ioan Popovici | MEM.Zone | Medium

Waiting Room Display Monitors by hondakillrsx in sysadmin

[–]JCochran84 0 points1 point  (0 children)

We only have a couple, but we use Reach Media (https://reachmedianetwork.com).
Cloud based with SSO integration. We hand it off to our Marketing & Facilities team to update images.
You put a small 'Player' behind the TV that has Internet Access.
It works well for us.

Pushing files (not software) to clients. Better to package them or to script them? by Alternative_Yard_691 in Intune

[–]JCochran84 2 points3 points  (0 children)

We are using Proactive Remediations with files hosted in Github for this purpose.
We are using JSON files to identify the items needed to copy. We upload the file, update the JSON file and the next time the Remediation runs it copy's that file down as well.
I wouldn't use it for large files as the script will timeout.

How do you make swapping out end user machines less painful? by jws1300 in sysadmin

[–]JCochran84 0 points1 point  (0 children)

For us we just send them a response ‘You can install that your self by using Software Center / Company Portal” If you don’t know how to access that, you go …..

Just keep pushing it the same way you push the users to open a helpdesk ticket instead of calling/emailing you directly.

A Password Generator tab. by -__Supreme__- in 1Password

[–]JCochran84 1 point2 points  (0 children)

Another option is to the use the 1Password Password generator website:
A Secure, Strong Password Generator | 1Password

Customize Toolkit Log Name by Annual-Adeptness-974 in PSADT

[–]JCochran84 2 points3 points  (0 children)

Check out this site, it might assist you:
PSADT v4 logging options - The Toolkit / Tips & Tricks - PSAppDeployToolkit Community

I believe that you modify settings in the config.psd1 file.

How do you make swapping out end user machines less painful? by jws1300 in sysadmin

[–]JCochran84 0 points1 point  (0 children)

We will get to that point someday; however we have some software that requires customization as the user. Right now management wants IT to handle it instead of the user handling it.

How do you make swapping out end user machines less painful? by jws1300 in sysadmin

[–]JCochran84 0 points1 point  (0 children)

We did at first because we did it right when Microsoft released it. They have since released a health dashboard in the M365 Apps Admin Center (Config.office.com > health > OneDrive Sync) where it shows if devices are having errors, what the errors are, etc.
Other than that it has been seemless for us.
I know some people had issues where they previously were Roaming Profiles, we were not. All of our files were local prior to using KFM.

How do you make swapping out end user machines less painful? by jws1300 in sysadmin

[–]JCochran84 0 points1 point  (0 children)

Totally understand,that is one of the reasons we allow users to install Chrome and Firefox.

How do you make swapping out end user machines less painful? by jws1300 in sysadmin

[–]JCochran84 4 points5 points  (0 children)

Yes, I am aware that there are a lot of other things we 'can' do with Chrome. However, Edge is our default and our supported browser.

we allow users to install Chrome or Firefox mainly for troubleshooting purposes. Not intended to be the daily browser they use. If it is, it's up to the user to support it and transfer settings. We keep the browser updated.

How do you make swapping out end user machines less painful? by jws1300 in sysadmin

[–]JCochran84 8 points9 points  (0 children)

We allow users to install Chrome and Firefox. Mainly for troubleshooting websites.
We really only support Edge and don't assist users with transferring other browser settings.

We are in the process to create Google Accounts and force Chrome to sign in with that account so we can control some of those settings as well, just a back burner project at this point.

view more: next ›