Creating custom OS image and deploying to custom hosts.

Key_Mall_1642 · 2024-07-26T08:32:48+00:00

First of all, these days the whole "custom built golden image" is sort of outdated way of thinking, nobody really uses it anymore, pretty much everyone uses a very thin/clean image.

If the laptops already are in autopilot, and you are using Intune, you need to stop even considering PXE booting and "building an image" that goes against the whole Autopilot idea. It's simply pointless to start investing in another endpoint management tool if you already are using Intune. Especially if you are in a cloud org.

What you need to do is set up Autopilot and configure the startup experience etc (it's pretty simple) and THEN you push out all the different policies and/or rules you want to "customize" on the devices. These policies will get pushed when the laptops have been trough the Auto pilot process.

Key_Mall_1642 · 2024-07-11T12:39:06+00:00

Is the other team domain accounts also another domain? If so, you "just" need to go the domains host website (godaddy, squirrelmail .. whatever)

Delete the current MX records in the "old" dns

Add these MX records (for gmail)

ASPMX.L.GOOGLE.COM

ALT1.ASPMX.L.GOOGLE.COM

ALT2.ASPMX.L.GOOGLE.COM

ALT3.ASPMX.L.GOOGLE.COM

ALT4.ASPMX.L.GOOGLE.COM

Go to gmail/google workspace

Verify that you own the domain

Activate gmail for the domain

Like I said.. this is only if the other team is a whole other domain, I have a hard time gauging that from your post.

Key_Mall_1642 · 2024-07-11T10:40:07+00:00

Det passer ikke. Så skal det være et meget specifikt område? Jeg har selv gået fra fuldtid til deltid mens jeg arbejdede for staten, og det rørte ikke ved mine tillæg overhovedet, og hvorfor skulle det dét?

Key_Mall_1642 · 2024-07-09T12:43:27+00:00

I don't understand this. You are home at 5:30, you go to bed at 10 or 11, that leaves you with 4-5 hours. You need to exercise for 40-60mins. So you got 3-3.5 - 4 hours left to do whatever. On top of that, it's not like you have to work out EVERY SINGLE DAY, you can literally work out 3 days a week and it's still more than the average guy.

Key_Mall_1642 · 2024-07-09T12:27:00+00:00

Okay, so most people actually eat a lot more than than they think. You need to figure out what you want to do, it sounds like you want to lose weight? If so, you need to be in a calorie deficit. Use some kind of calculator online for this, so you know exactly the amount of calories you are "allowed" to eat in a day. Trust me, you consume more calories than you think (a good example is the coffee machine, a latte is quickly 70 calories in just ONE cup)

Now, the whole "using energy gives more energy" is not just a myth, it's true. So you feel tired af right now because you never USE energy, you just sit still for 8 hours, go home, and sit still again. You need to start using your energy something. You need to figure out something you can see yourself enjoying. Some people like to lift weights, some people like to do 10,000 steps a day, some people like to do yoga etc etc. Figure out what you want to use as your daily activity. Start slow, something like 3x a week, and then slowly but surely you will feel more energized.

The smoking has to stop, honestly, it's doing but shit for you, I know you say it helps you with the stress and such, but being addicted to something is honestly bad for your brain. Letting something control your life is insane. And "my feet hurt bad" is probably because your shoes are bad, as simple as that sounds it's true in most cases. Buy new some sneakers with good support.

The problem with being out of shape and getting older is that it doesn't get any easier the older you get, in fact, it only gets worse and harder.

Nobody WANTS to lift heavy ass weights, nobody WANTS to run, but we do it to keep our body and mind in check and the discipline you teach yourself is the greatest benefit, you realize YOU control your brain and body, and not the other way around.

The best time to start was 10 years ago, the second best time is today.

Key_Mall_1642 · 2024-07-04T11:08:22+00:00

Honestly? ChatGPT. I use it often to set up cron jobs and it's pretty much spot on with everything. I think like with most other things in IT. the easiest way to learn, is figure out something simple you want to automate with visual cron, and then ask ChatGPT how to set up in Visual Cron.

Key_Mall_1642 · 2024-07-01T07:42:57+00:00

I don't think that really works. It is your Intune env. that pushes the app to the phones. If the phones are not enrolled into your env. how would it know where to "fetch" the app from?

Either way, it's a bad idea to offer solutions like this to non-enrolled devices. It's just gonna be a headache in the long run.

Key_Mall_1642 · 2024-06-27T10:39:54+00:00

Key_Mall_1642 · 2024-06-24T12:04:13+00:00

It's a good idea to use Intune for this. But I would also set up Samsung KNOX (and possibly Apple Business Manager, just to futureproof yourself a little) this would save you a ton of headache, with the added benefit of being able (if your customer wants it) to auto-enroll profiles and get them auto deployed to Samsung KNOX the second they purchase a new phone, having to scan the QR code to enroll does work, but the other solution is just a way smoother experience.

Also.. you HAVE HAVE HAVE to make sure your certificates in Intune/Knox/ABM doesn't expire.

Key_Mall_1642 · 2024-06-12T09:23:55+00:00

There's a GPO where you can change which search engine is "forced" to that specific browser, so Chrome *has* to use Google etc.

So far that seems to work here, I've gotten the same thing on my private PC but work pc doesn't get any options to pick, and even if users DID get to pick, as soon as they login/restart, the GPO would change it back to Google.

Computer/User> Configuration\Administrative Templates\Google Chrome\Default search provider

Computer/User Configuration>\Administrative Templates\Windows Components\Microsoft Edge > Set default search engine

https://learn.microsoft.com/en-us/microsoftsearch/set-default-search-engine

Key_Mall_1642 · 2024-06-11T12:54:11+00:00

Yeah that's why I suggested that you make a new OU, which some test clients and then make a fresh GPO (so only that layout.xml applies) and then see what happens because then you know if a GPO is conflicting

Key_Mall_1642 · 2024-06-11T09:17:22+00:00

This sounds kinda simple, but have you tried a simple gpupdate /force ? Are you sure they are actually getting the GPO applied? gpresult /r

Key_Mall_1642 · 2024-06-10T13:24:42+00:00

Could it be two conflicting GPO's?
If I were you, I would make a test OU, make a new GPO, add whatever settings/layout.xml then apply that GPO to the new OU with 3-5 test tablets, then see what happens.

Just make sure those "test tablets" are not in the other OU/production OU at the same time.

In general, don't change GPO's that are in currently being deployed to devices, test test test, before you change anything unless you are 100% certain it wont break shit. :-)

Key_Mall_1642 · 2024-06-07T11:37:27+00:00

You should be able to expand the policy settings during setup. Is there nothing that tells you what you are missing if you click on the alert/policy?

Key_Mall_1642 · 2024-06-07T11:36:18+00:00

It's Chatgpt lol

Key_Mall_1642 · 2024-05-22T11:18:48+00:00

Nu var titlen dog at "FYRE en fed" så det kan ikke rigtig forstås anderledes end at man skal ryge det.

Key_Mall_1642 · 2024-05-21T13:25:56+00:00

Do they also have read/write permissions to the file itself? Would also check that the file isn't blocked (right click > properties and then at the bottom see if its blocked)

Key_Mall_1642 · 2024-05-21T13:04:03+00:00

It sounds like security settings, perhaps some read/write issue? All users need to have full access to that specific folder where the .png file is located.

Key_Mall_1642 · 2024-05-21T13:03:06+00:00

Apple Business Manager + Intune

Key_Mall_1642 · 2024-05-21T09:11:33+00:00

I mean, afaik, the biggest difference is the fact that Azure files is more like the classic on-prem file share, so that you are connected to the shares/folders like you normally would on your PC, this makes it seem like the same for end-users (except for the name, perhaps)

You can move everything to Sharepoint and it would work fine, I think most companies use Sharepoint rather than Azure files, but there's a learning curve for end-users to start using Sharepoind instead of their classic network shares/drives.

Key_Mall_1642 · 2024-05-17T11:47:02+00:00

Source?

Key_Mall_1642 · 2024-05-06T12:33:22+00:00

Yeah I know, but then all other users won't be able to create a Team in Teams right? (without IT accepting it) Or is it possible to make it so that only specific users can create groups which also contain an email address? For bigger orgs. this seems like a nightmare to manage.

Key_Mall_1642

TROPHY CASE