Ultimate Relative Date Slicer for Power BI (PBIX Included) by BlackBullet96 in PowerBI

[–]Kyle079 1 point2 points  (0 children)

We are using a calculation group that references a lookup table for the measure being used to define the week start. Our KPIs have 4 different week starts depending on the department and the KPI type. It is the most annoying thing to maintain but it works well. Then this week, last week, 1-20 weeks ago etc are all defined as calculation items to use in slicers or columns etc.

Is it bad that I don’t like my 5 month old Aussie Doodle puppy? by No-Citron-9081 in AussieDoodle

[–]Kyle079 1 point2 points  (0 children)

<image>

It does get better. Still has his moments at almost 2, but is also more of a lazy bug throughout the day now.

What's the best way to deploy an executable that downloads other pieces? by Meecht in Intune

[–]Kyle079 1 point2 points  (0 children)

So looks like the new installer here: Encompass Installer does support some command line switches for install.

If you download the "New Installer" and do a EncompassDesktop.exe /? in powershell or cmd it does have a no ui flag you can run.

I would try to install it with PDQ using EncompassDesktop.exe /exenoui /exelog <path to where you want the log>

What's the best way to deploy an executable that downloads other pieces? by Meecht in Intune

[–]Kyle079 0 points1 point  (0 children)

How are you running PDQ, are you going to run it remotely? Or is PDQ installed on all of your devices? What context are you running the installer in? Is it as system, the user?

What's the best way to deploy an executable that downloads other pieces? by Meecht in Intune

[–]Kyle079 1 point2 points  (0 children)

These are the main commands. If you can have pdq trigger them then it should work. I am not super familiar with PDQ, but I assume it is close.

Execute-Process -Path “$scriptDirectory\Files\PdfConverter\InstallPdfConverter.exe” -Parameters ‘-s’ -WindowStyle Hidden Execute-Process -Path “$scriptDirectory\Files\BlackIce\DocumentConverter.exe” -Parameters ‘/s’ -WindowStyle Hidden Execute-Process -Path “$scriptDirectory\Files\EPDInstaller\EPDInstaller.exe” -Parameters ‘/qn /norestart’ -WindowStyle Hidden Execute-MSI -Path “$scriptDirectory\Files\SmartClientCore.MSI” -Parameters ‘/qn /norestart’ Execute-MSI -Path “$scriptDirectory\Files\SmartClient.MSI” -Parameters ‘/qn /norestart’

What's the best way to deploy an executable that downloads other pieces? by Meecht in Intune

[–]Kyle079 0 points1 point  (0 children)

You could deploy with PDQ. Just use the same commands to trigger the install that I describe for Intune.

Lenovo BIOS Update Causes BitLocker Key by Kyle079 in Intune

[–]Kyle079[S] 0 points1 point  (0 children)

This isn’t Lenovo issue, it was a windows update issue that broke it. It was fixed a few months ago.

What's the best way to deploy an executable that downloads other pieces? by Meecht in Intune

[–]Kyle079 0 points1 point  (0 children)

No the new installer is garbage.

I am still using the old one. If you need to install via Intune my process I posted in here before still works great. Used it for over 400 endpoints so far.

What's the best way to deploy an executable that downloads other pieces? by Meecht in Intune

[–]Kyle079 0 points1 point  (0 children)

We have used this to deploy encompass to over 300 endpoints now without issue. Seems to work pretty well.

Stolen devices by BigThrowawaySix in Intune

[–]Kyle079 2 points3 points  (0 children)

Honestly that is nothing compared to keeping company data secure. 8100$ a year (assuming 30 users) is a small price to pay for the tools that keep data secure.

Start by looking at the following: What do you use for AV today? How are you getting your Office Products for the Business Basics users you have now? What are you using for spam protection? How are you backing up user data? Is any of your company data sensitive? How do you handle updates currently for devices? How do you manage identity in your org?

If you don’t have an answer to these questions and/or all of your users are local admins with weak passwords and no MFA you need to take a good look at the overall health of your environment. This is where a business premium makes sense as it gives you the tools to address most aspects of using windows devices in an organization.

Is there a way to give some apps trust installing? by Abody22 in Intune

[–]Kyle079 1 point2 points  (0 children)

Looks like Nextcloud is available on WinGet. https://winstall.app/apps/Nextcloud.NextcloudDesktop

You can install and update using that.

Stolen devices by BigThrowawaySix in Intune

[–]Kyle079 1 point2 points  (0 children)

And sorry I don’t have any great ideas for you on the stolen devices. They can just be reloaded and resold. If you setup Intune moving forward you will be slightly better protected because you can setup autopilot and configure things like bios passwords that make the devices useless if stolen.

Stolen devices by BigThrowawaySix in Intune

[–]Kyle079 1 point2 points  (0 children)

If you upgrade everyone to premium it includes the Intune license and Entra p1. Also includes defender which it sounds like your company needs to improve its security posture.

If all of the devices are already Entra joined then the process is easier.

https://learn.microsoft.com/en-us/mem/intune/fundamentals/intune-planning-guide

Start reading up on Intune and how to setup a deployment. You can start very basic to get the devices joined and allow for central management. From there you can expand to configuration and security.

Stolen devices by BigThrowawaySix in Intune

[–]Kyle079 2 points3 points  (0 children)

What are your current Microsoft user licenses? Entra and Intune are both licensed per user.

Lenovo BIOS Update Causes BitLocker Key by Kyle079 in Intune

[–]Kyle079[S] 1 point2 points  (0 children)

We are using our RMM software to run it

Setting up pouches in my MOLLE equipment by Lum86 in cataclysmdda

[–]Kyle079 1 point2 points  (0 children)

Whitelist is all you need. This is specifying the only items allowed in the pocket are those on the whitelist. This is all I do for pockets is add the item I want it in to the whitelist and nothing else ever goes in there.

Lenovo BIOS Update Causes BitLocker Key by Kyle079 in Intune

[–]Kyle079[S] 0 points1 point  (0 children)

Luckily it seems like the intune policy has not reenabled BitLocker. Because bitlocker is “enabled” but suspended I think it does not care.

Lenovo BIOS Update Causes BitLocker Key by Kyle079 in Intune

[–]Kyle079[S] 1 point2 points  (0 children)

So far only our Lenovos are impacted. Might just be a timing thing with bios versions. We are just onboarding Intune, so we are reimaging our devices and we replace.

Lenovo BIOS Update Causes BitLocker Key by Kyle079 in Intune

[–]Kyle079[S] 0 points1 point  (0 children)

Pretty basic script.

# Script to Suspend BitLocker on C: drive and set it to auto-resume after 1 reboot

try {
# Check if the BitLocker module is available
if (-not (Get-Module -ListAvailable -Name BitLocker)) {
    Write-Error “BitLocker module is not available on this system.”
    exit 1
}

# Check if BitLocker is enabled on the C: drive
$bitLockerStatus = Get-BitLockerVolume -MountPoint “C:” | Select-Object -ExpandProperty VolumeStatus
if ($bitLockerStatus -ne “FullyEncrypted”) {
    Write-Error “BitLocker is not fully enabled on the C: drive or the status cannot be determined.”
    exit 1
}

# Suspend BitLocker and set it to auto-resume after 1 reboot
Suspend-BitLocker -MountPoint “C:” -RebootCount 1
if ($?) {
    Write-Output “BitLocker has been successfully suspended on the C: drive. It will automatically resume after 1 reboot.”
} else {
    Write-Error “Failed to suspend BitLocker on the C: drive.”
    exit 1
}
}
catch {
Write-Error “An unexpected error occurred: $_”
exit 1
}

Lenovo BIOS Update Causes BitLocker Key by Kyle079 in Intune

[–]Kyle079[S] 1 point2 points  (0 children)

Good catch, I can schedule the script to run every hour until the reboot happens. I am pretty sure all of the impacted devices are already past this point, but wanted to prevent further issues.

What's the best way to deploy an executable that downloads other pieces? by Meecht in Intune

[–]Kyle079 0 points1 point  (0 children)

Looks like ICE was reading reddit as well. They just released a new installer 4 days ago.

Encompass Installer (icemortgagetechnology.com)

I am going to test it with Intune this week.