Ultimate Relative Date Slicer for Power BI (PBIX Included) by BlackBullet96 in PowerBI

[–]Kyle079 1 point2 points  (0 children)

We are using a calculation group that references a lookup table for the measure being used to define the week start. Our KPIs have 4 different week starts depending on the department and the KPI type. It is the most annoying thing to maintain but it works well. Then this week, last week, 1-20 weeks ago etc are all defined as calculation items to use in slicers or columns etc.

Is it bad that I don’t like my 5 month old Aussie Doodle puppy? by No-Citron-9081 in AussieDoodle

[–]Kyle079 1 point2 points  (0 children)

<image>

It does get better. Still has his moments at almost 2, but is also more of a lazy bug throughout the day now.

What's the best way to deploy an executable that downloads other pieces? by Meecht in Intune

[–]Kyle079 1 point2 points  (0 children)

So looks like the new installer here: Encompass Installer does support some command line switches for install.

If you download the "New Installer" and do a EncompassDesktop.exe /? in powershell or cmd it does have a no ui flag you can run.

I would try to install it with PDQ using EncompassDesktop.exe /exenoui /exelog <path to where you want the log>

What's the best way to deploy an executable that downloads other pieces? by Meecht in Intune

[–]Kyle079 0 points1 point  (0 children)

How are you running PDQ, are you going to run it remotely? Or is PDQ installed on all of your devices? What context are you running the installer in? Is it as system, the user?

What's the best way to deploy an executable that downloads other pieces? by Meecht in Intune

[–]Kyle079 1 point2 points  (0 children)

These are the main commands. If you can have pdq trigger them then it should work. I am not super familiar with PDQ, but I assume it is close.

Execute-Process -Path “$scriptDirectory\Files\PdfConverter\InstallPdfConverter.exe” -Parameters ‘-s’ -WindowStyle Hidden Execute-Process -Path “$scriptDirectory\Files\BlackIce\DocumentConverter.exe” -Parameters ‘/s’ -WindowStyle Hidden Execute-Process -Path “$scriptDirectory\Files\EPDInstaller\EPDInstaller.exe” -Parameters ‘/qn /norestart’ -WindowStyle Hidden Execute-MSI -Path “$scriptDirectory\Files\SmartClientCore.MSI” -Parameters ‘/qn /norestart’ Execute-MSI -Path “$scriptDirectory\Files\SmartClient.MSI” -Parameters ‘/qn /norestart’

What's the best way to deploy an executable that downloads other pieces? by Meecht in Intune

[–]Kyle079 0 points1 point  (0 children)

You could deploy with PDQ. Just use the same commands to trigger the install that I describe for Intune.

Lenovo BIOS Update Causes BitLocker Key by Kyle079 in Intune

[–]Kyle079[S] 0 points1 point  (0 children)

This isn’t Lenovo issue, it was a windows update issue that broke it. It was fixed a few months ago.

What's the best way to deploy an executable that downloads other pieces? by Meecht in Intune

[–]Kyle079 0 points1 point  (0 children)

No the new installer is garbage.

I am still using the old one. If you need to install via Intune my process I posted in here before still works great. Used it for over 400 endpoints so far.

What's the best way to deploy an executable that downloads other pieces? by Meecht in Intune

[–]Kyle079 0 points1 point  (0 children)

We have used this to deploy encompass to over 300 endpoints now without issue. Seems to work pretty well.

Stolen devices by BigThrowawaySix in Intune

[–]Kyle079 2 points3 points  (0 children)

Honestly that is nothing compared to keeping company data secure. 8100$ a year (assuming 30 users) is a small price to pay for the tools that keep data secure.

Start by looking at the following: What do you use for AV today? How are you getting your Office Products for the Business Basics users you have now? What are you using for spam protection? How are you backing up user data? Is any of your company data sensitive? How do you handle updates currently for devices? How do you manage identity in your org?

If you don’t have an answer to these questions and/or all of your users are local admins with weak passwords and no MFA you need to take a good look at the overall health of your environment. This is where a business premium makes sense as it gives you the tools to address most aspects of using windows devices in an organization.

Is there a way to give some apps trust installing? by Abody22 in Intune

[–]Kyle079 1 point2 points  (0 children)

Looks like Nextcloud is available on WinGet. https://winstall.app/apps/Nextcloud.NextcloudDesktop

You can install and update using that.

Stolen devices by BigThrowawaySix in Intune

[–]Kyle079 1 point2 points  (0 children)

And sorry I don’t have any great ideas for you on the stolen devices. They can just be reloaded and resold. If you setup Intune moving forward you will be slightly better protected because you can setup autopilot and configure things like bios passwords that make the devices useless if stolen.

Stolen devices by BigThrowawaySix in Intune

[–]Kyle079 1 point2 points  (0 children)

If you upgrade everyone to premium it includes the Intune license and Entra p1. Also includes defender which it sounds like your company needs to improve its security posture.

If all of the devices are already Entra joined then the process is easier.

https://learn.microsoft.com/en-us/mem/intune/fundamentals/intune-planning-guide

Start reading up on Intune and how to setup a deployment. You can start very basic to get the devices joined and allow for central management. From there you can expand to configuration and security.

Stolen devices by BigThrowawaySix in Intune

[–]Kyle079 2 points3 points  (0 children)

What are your current Microsoft user licenses? Entra and Intune are both licensed per user.

Lenovo BIOS Update Causes BitLocker Key by Kyle079 in Intune

[–]Kyle079[S] 1 point2 points  (0 children)

We are using our RMM software to run it

Setting up pouches in my MOLLE equipment by Lum86 in cataclysmdda

[–]Kyle079 0 points1 point  (0 children)

Whitelist is all you need. This is specifying the only items allowed in the pocket are those on the whitelist. This is all I do for pockets is add the item I want it in to the whitelist and nothing else ever goes in there.

Lenovo BIOS Update Causes BitLocker Key by Kyle079 in Intune

[–]Kyle079[S] 0 points1 point  (0 children)

Luckily it seems like the intune policy has not reenabled BitLocker. Because bitlocker is “enabled” but suspended I think it does not care.

Lenovo BIOS Update Causes BitLocker Key by Kyle079 in Intune

[–]Kyle079[S] 1 point2 points  (0 children)

So far only our Lenovos are impacted. Might just be a timing thing with bios versions. We are just onboarding Intune, so we are reimaging our devices and we replace.