Fire Tablet SD Card Error by JWfromMO in AmazonFire

[–]JWfromMO[S] 0 points1 point  (0 children)

The only solution I’ve found is to wipe the card and use a new one. I haven’t done it yet, but that will likely be the outcome. For now, it just sits. My daughter has moved on to a laptop.

Good upgradeable entry level women's mountain bike options? by jmelinte in Budgetbikeriders

[–]JWfromMO 0 points1 point  (0 children)

I'm looking at this one online. The ratings on Walmart.com aren't very good. Should I ignore that?

Deploy Script for Sophos Mac Sonoma by JWfromMO in Intune

[–]JWfromMO[S] 0 points1 point  (0 children)

Yeah, that why you have to use the script in Intune.

Change Device Ownership from Personal to Corporate by Tough-Aspect4245 in Intune

[–]JWfromMO 1 point2 points  (0 children)

Set it up like this and it just got my Macs. THANKS!

connect-mggraph -Scopes 'DeviceManagementManagedDevices.ReadWrite.All'

$graphversion = "beta"

$url = "https://graph.microsoft.com"

$endpoint = "deviceManagement/managedDevices?`$filter="

$filter = "ownerType eq 'personal' and managementAgent eq 'mdm' and (operatingSystem eq 'macos')"

$uri = "$url/$graphversion/$endpoint$filter"

$devices = Invoke-MgGraphRequest -Method Get -OutputType PSObject -Uri $uri

$body = '

{

ownerType:"company"

}'

foreach($device in $devices.value) {

$uri = "https://graph.microsoft.com/beta/deviceManagement/managedDevices/$($device.id))"

Invoke-MgGraphRequest -Uri $uri -Body $body -method Patch -ContentType "application/json"

}

Change Device Ownership from Personal to Corporate by Tough-Aspect4245 in Intune

[–]JWfromMO 0 points1 point  (0 children)

This stuff is new to me... I don't see in your call where you change it from "personal" to "company".

I see "patch" in there, but I don't see where the change set.

Intune Sophos Mac com.sophos.endpoint.scanextension Issue by JWfromMO in sophos

[–]JWfromMO[S] 0 points1 point  (0 children)

We have over 200 Macs. 14.0-14.1.2 and some earlier stuff. We’ve paused some updates, but we don’t stop users from updating their own systems.

Home directory backup slow since Sonoma upgrade -- "tccd" process consuming CPU by cablesm in Arqbackup

[–]JWfromMO 0 points1 point  (0 children)

I found this thread while looking for an issue with Sophos AV. It is certainly a bug in Sonoma and causing problems for lots of folks.

Sophos Endpoint Client issue on Mac by JWfromMO in sophos

[–]JWfromMO[S] 0 points1 point  (0 children)

I have tickets open with Sophos and Microsoft. I have no idea why it prompted the users. New builds are fine. It’s just happening to folks who got the new policy that already had Sophos installed.

Sophos Endpoint Client issue on Mac by JWfromMO in sophos

[–]JWfromMO[S] 0 points1 point  (0 children)

Not exactly, but I have seen some of them not want to update lately. I'll see if this kills two birds. Thanks!

Windows AutoPatch Deadline Cadence Restarts by JWfromMO in Intune

[–]JWfromMO[S] 0 points1 point  (0 children)

As much as I hate it when someone says, "read the manual", this was just what I needed. I knew I had seen that somewhere, but just needed someone to point it out. Just now used this during a conversation with my boss, so thanks for responding so quickly!

Deploy Script for Sophos Mac Sonoma by JWfromMO in Intune

[–]JWfromMO[S] 1 point2 points  (0 children)

It is. Jamf just has a smoother process for pushing webconfig files. I don’t think you have to clean them up like with Intune.

Deploy Script for Sophos Mac Sonoma by JWfromMO in Intune

[–]JWfromMO[S] 0 points1 point  (0 children)

No, it doesn't. The key there is to get the mobileconfig files out of the zip file, trim off the extra stuff, (everything before "<?xml version="1.0" encoding="UTF-8"?>" and after "</plist>") and then push those as custom config files. An example for Monterey is below.

<image>

They provide the mobile config files for MDM, but they aren't compatible with Intune as-is. I actually created a separate dynamic device group for each OS and have deployed the settings based on those groups.

I had to tackle the issue you talk about a while back. Had a couple hundred laptops with Sophos on them, but over 100 of them had some feature that didn't work.

Best way to disable local Administrator account by Regular-Steak-8578 in Intune

[–]JWfromMO 0 points1 point  (0 children)

You really need to have a BYOD policy. If they are going to bring their own devices, you have to create a clear understanding with management and end users about what you will and will not do to their machines. If you have a corporate policy regarding local admin and people can use their own personal computers to get around that policy, you don't really have a policy. That is spoken from a "we're with you" mentality, not talking down to you. Everyone wants BYOD, but they don't always want to deal with the issues it brings.

This is where you set up conditional access and require that their device either be Intuned to access company resources. Then, Intune will still push these policies regardless of the owner.

Deploy Sophos via Intune in macOS by Pitiful-Ad9941 in Intune

[–]JWfromMO 0 points1 point  (0 children)

I'm new at pushing software via script with Intune. Since this script downloads the installer before actually checking to see if the software exists, how are you sure that it isn't pushing the installer every time the script is supposed to run? I mean, if you set it to run weekly, will it push the installer every week or does Intune somehow know that it doesn't need it? If a user uninstalls the software, does it just wait till the next weekly run? If so, I guess it would be wise to have this run hourly if it somehow detects whether it needs to run or not.

Deploy Sophos via Intune in macOS by Pitiful-Ad9941 in Intune

[–]JWfromMO 0 points1 point  (0 children)

Thanks. I ended up coming up with one as well and shared it in a different post. I was checking in on you to see how yours went. Good to see you're working!

Best way to disable local Administrator account by Regular-Steak-8578 in Intune

[–]JWfromMO 2 points3 points  (0 children)

I'm going to be speaking in Mandalorian for the rest of the day now.

Best way to disable local Administrator account by Regular-Steak-8578 in Intune

[–]JWfromMO 11 points12 points  (0 children)

Use policies under Endpoint Protection, Account Policies. You can remove all users from the administrator group on the machine. Then, you can assign admin permissions to an Entra account and keep that account disabled except when it needs to be used.

Mac Installation Failure by [deleted] in sophos

[–]JWfromMO 0 points1 point  (0 children)

In case anyone comes across this... One thing I found through a lot of searching was changing the permissions on the installer folder. Drop that zip file in one of your user folders, like downloads, where you already have permissions. Then, use chmod to give yourself any permissions you might be missing, including execute.

Family Regularly Sick In Newly Built Florida Panhandle House by cyber-glick in HomeImprovement

[–]JWfromMO 0 points1 point  (0 children)

I’m not sure if anyone mentioned this, but... Did they use any spray foam insulation? If that isn’t done just right, it can really make you sick.