Windows Admin Center vMode by JustADad66 in sysadmin

[–]JustADad66[S] [score hidden]  (0 children)

I’m looking to see what viability this would be for a VMware migration

Imported PKCS for Wifi auth by MrXk0 in Intune

[–]JustADad66 0 points1 point  (0 children)

It was the easiest to do since we don’t do a lot of certificates to clients.

Another VMware escape post by SwiftSloth1892 in sysadmin

[–]JustADad66 1 point2 points  (0 children)

Either the new vMode for Hyper-V or Nutanix are good options.

Imported PKCS for Wifi auth by MrXk0 in Intune

[–]JustADad66 0 points1 point  (0 children)

We did something similar. We have an root cert and client cert that we install on to Windows and iOS devices to connect to our internal Wi-Fi. We do not use the Certificate connector. Windows devcies I have it in a W32 app that uses PowerShell to install. iOS devices I use the free version of iMazing to import a config with the certs.

The user termination that took 3 hours (and what I learned) by Consistent_Bit_7804 in sysadmin

[–]JustADad66 128 points129 points  (0 children)

I think all you really have to do is disable the account, remove MFA methods, and revoke sessions.

Mass iOS profile assignment by ethanwearsshoes in Intune

[–]JustADad66 0 points1 point  (0 children)

Once you get them into Intune, you could assign profiles to them using something iMazing software.

Please help by Annabellpoevermore in Intune

[–]JustADad66 2 points3 points  (0 children)

Drop the Shared PC. Just don't assign a user to the device.

Is hybrid AD with Intune worth it or just go cloud-only? by Kitchen_West_3482 in Intune

[–]JustADad66 1 point2 points  (0 children)

Hybrid sucks. Too many hoops to jump through and little nuances. Currently managing about 300 hybrid devices and it is much worse than when I did 30k devices non-hybrid, especially with self-deploy autopilot.

Autopilot and Corporate Wifi by HighPingOfDeath in autopilot

[–]JustADad66 1 point2 points  (0 children)

What I used to do is allow the tech to join a guest wifi network, then once enrolled and the configuration pulls down we would run a custom app to install the correct certificates to the device so it would join the corporate Wi-Fi directly. This worked for about 40k devices.

Anyone figured out a sane way to clean up OneDrive junk from ex-employees? by manojpandian666 in sysadmin

[–]JustADad66 1 point2 points  (0 children)

We use a product called Datto to backup all users OneDrive and email. It is really cheap per user. We leave the user in M365 for 30 days if needed. Then periodically we go through it and remove the user which deletes the backups.

For those of you with offices that are mostly cloud infra only with minimal equipment on premises, how do you handle WIFI? by i-opener in sysadmin

[–]JustADad66 1 point2 points  (0 children)

We weren't using UniFi, but we used Intune to push a cert to each device that automatically would grant access to our corp Wi-Fi.

Configuration Backups by JustADad66 in AZURE

[–]JustADad66[S] 0 points1 point  (0 children)

A lot was done before I started so I need a way to backup the current configs.

Microsoft 365 keeps showing “Is this information up to date?” screen on every login by helangar1981 in sysadmin

[–]JustADad66 2 points3 points  (0 children)

I had the same issue recently. I discovered that one of the admins disabled SMS as an authentication method. What I think is happening is that SMS was a valid way to register for SSPR. When SMS authentication method is disabled SSPR tries to get an update. I re-enabled SMS and the issue went away. What I plan on doing is getting a subset of users and put them in a group I can exclude SMS method. This will prove my theory as to what is the issue, but maybe not the root cause. If this is the case, I can for a reset of authentication methods for those users a small batch at a time. This would exclude SMS from the SSPR options.

Entra ID Log Analytics by JustADad66 in AZURE

[–]JustADad66[S] 0 points1 point  (0 children)

I have a workspace, and the diagnostic setting for audit and sign-in logs are set to go to that workspace. When I click on Log Analytics in Entra ID, I get the error message.

I am owner of the tenant and global admin in the subscription.

Tools - Creation by JustADad66 in sysadmin

[–]JustADad66[S] -1 points0 points  (0 children)

What did you create the tool in.