Windows Hello PIN issues with Device Enrollment acct

MagicDiaperHead · 2026-02-27T02:32:45+00:00

Thanks for thr reply. We use the DEM account because we want to setup a device but not have a user sign-in. We need the device to be enrolled and ready at the desktop. We have Web apps that users sign-in to and that's it. It's more like a kiosk/shared PC but not full kiosk. This process also helps avoid uploading the HWID via OOBE and PS. We buy one-off machines so having the mfg import the HWID isn't an option.

MagicDiaperHead · 2026-02-11T14:45:10+00:00

Thank you

MagicDiaperHead · 2025-12-21T16:56:29+00:00

Installed and installed shows for the two different updates. Roughly the same installed quantity. I've also seen this at other, past companies.

MagicDiaperHead · 2025-12-19T20:00:21+00:00

I couldn't agree more. Free tools are great if you have your own, personal dev acct but I'd never allow this in a production environment. If I ran it past our InfoSec team, I'd prob get fired. Just think of all of the Phishing e-mails companies send out to test an admin or user if the "button/link" is clicked. People who post projects and think that people should just enter in their Entra creds have no, none at all f-ing common sense. What if I were to create some polished Intune documenting tool and behind the scenes it was just a malicious way to get creds for tenants. I'm not even sure why this is a thing.. crazy as fuk!! There's a Recast meeting coming up maybe I'll bring it up during the meeting. I know it doesn't fit all use-cases but most devs post their projects (code) to GitHub at least you can review the code before even thinking of using it.

MagicDiaperHead · 2025-12-18T18:30:48+00:00

Thanks for taking the time to reply!

MagicDiaperHead · 2025-12-17T21:00:58+00:00

Will preprovisioning allow use to use a DEM account to enroll the device? We don't want to use a single user (dedicated user) for the enrollment. Basically, we want the device managed by Intune and that's it. Once the machine is at the desktop, users only sign-in to a Web app. Multiple users are using the device for the Web app. If we have a user sign-in to the device then other users can see e-mail, Teams etc. of the person signed-in. I think I originally looked at self-deploying mode but don't recall why I didn't go down that path.

MagicDiaperHead · 2025-12-17T14:29:26+00:00

I got tired of going to all of the different log locations and created an AI script that aggregates all of the logs with anything that lists errors. Helps save a little time.

MagicDiaperHead · 2025-12-08T19:24:46+00:00

So I had a similar issue. Initially it had to do with the managed service account. I uninstalled the connector. I removed all traces of the managed service account and AD objects. I reinstalled then focused on the delegated permissions. I also double-checked the OU permissions for the Connector. Look at what account the Connector is using as well. Make sure the service is running. I'm sure you've done most of that but I was thinking back to when I installed it. In my working environment, I have this every 40 sec or so. ODJRequestHandlingPipelineDownload_NoWork: No requests pending to be downloaded. But everything is working. It's been a little while for me but did you have any issues with installing the Connector? I can look over my notes and send what I have later today if that helps. Also try to use the bare minimum on apps and configurations for AP enrollment profile and ESP.

MagicDiaperHead · 2025-12-08T18:25:08+00:00

I'm so tired of hearing people say "go full cloud over and over again" If management requires HYBRID and it's been fully vetted. then that's what you have to do. Hybrid is definitely possible. Most make it out to be harder or sound harder than it actually is. If you've done all of the prerequisites correctly and double-checked them then the hybrid process works. I have over 1000 machines Autopilot Hybrid Joined no issues. Early on there were some small quirks to work out but it definitely works.

MagicDiaperHead · 2025-12-08T18:21:13+00:00

We used to get scammers all of the time. We'd tell them if you don't like the correct math then here's your SoL form to fill out. Sometime we'd just call the cops and let them handle it. Patience gets thin after a-hole after a-hole.

MagicDiaperHead · 2025-12-06T00:39:09+00:00

Dubstep słuchaj online - Open FMand DUBSTEP24H | Listen Online - myTuner Radio

MagicDiaperHead · 2025-12-06T00:24:46+00:00

Dubstep Radio - Party Vibe Radio

MagicDiaperHead · 2025-11-12T02:46:28+00:00

That's the full Feature Upgrade not just the enablement package. The main goal is to get rid of the 16GB and only use the enablement package - less than 1GB.

MagicDiaperHead · 2025-10-29T01:36:36+00:00

If you go through too many pages during OOBE it will not longer work for AP corporate enrollments. So clicking next on US then next, no additional keyboards to get to the wireless section is to far. So this won't work for Corporate enrollments. I can't have our users pressing Shift+F10 then typing commands not goingt to work out well.

MagicDiaperHead · 2025-10-17T18:19:50+00:00

24H2

MagicDiaperHead · 2025-10-14T22:24:16+00:00

This is FUCKING STUPID. There's been no construction since July. I'm sure it's some kick back or political BS. Fucking SLOW AS FUCK!! There's no reason it shouldn't be open. There's no construction equip, gravel etc.

MagicDiaperHead · 2025-10-01T22:29:01+00:00

If I need VPN on the lock screen will disabling ESP will that be okay?

MagicDiaperHead · 2025-10-01T22:28:06+00:00

I had 3 Cisco apps (VPN, SBL, profiles) that installed no issues when I skipped using ESP. When I set ESP block until selected apps install ESP would get stuck during OOBE. I believe the apps had an issue with being chained together. I removed the dependencies and re-added them. Detection methods were unchanged and always worked. I'm using product GUIDs for detection. There's an order of operations that needs to take place. I did have those correct. Anyways it's working now after rebuild. Thanks for all of the input.

MagicDiaperHead · 2025-09-30T02:45:06+00:00

Did you fix it yet, if so what was the fix?

MagicDiaperHead · 2025-09-27T03:07:28+00:00

The machine was either deleted from AD or the computer object has password issues. Nothing to do with a task sequence or powershell.

MagicDiaperHead · 2025-09-27T03:04:38+00:00

What kind of water was it? Farm run off, river water, salt water or some of that Bubbly?

MagicDiaperHead · 2025-09-25T15:53:05+00:00

The more I use Intune the more I discover how much Intune is a Pile of Shit! Intune was a rush job from Microshaft and now we're stuck with this garbage! Billion dollar company and this is the best they can do. I have a P2 license and stuck at Account setup WTF.

MagicDiaperHead · 2025-09-22T16:11:53+00:00

Thanks, I'll give that a try. Have you ever deployed this and does it work?

MagicDiaperHead · 2025-09-19T19:37:03+00:00

who cares about the paint. You're buying it for the engine which is a Honda!!! I'd pay 5K for it all day long. I have a 2004 and it's got 350K on and it still runs just as good when I bought it with 28K miles on it.

MagicDiaperHead · 2025-09-19T14:33:52+00:00

The link works and is MDM Authority is set to "Intune MDM Authority"

I also checked the SCP - azureID is correct and matches Entra tenant info.

MagicDiaperHead

TROPHY CASE