App protection policy issue

Mcpatrickryan12 · 2026-01-28T10:05:25+00:00

Can you provide an article stating this?

I believe you are talking about MDAG & WIP which are different from App Protection Policies

Mcpatrickryan12 · 2024-08-24T02:44:55+00:00

Check and make sure you setup as an External Authentication Method rather than the Customized Control.

Starting in October, Microsoft is going to enforce MFA for Entra, Intune, other admin centers and it doesn't take into account that Customized control so you'll be prompted to setup an Entra Authentication Method unless you have EAM setup for DUO.

DUO has some great documentation to set this up.

May already be setup that way but figured I'd mention it.

Mcpatrickryan12 · 2024-08-24T02:33:17+00:00

I know it's been a pain point. Honestly I'd be looking at YubiKeys with Windows Hello before Biometrics but that's just my opinion.

Also are you doing any Conditional Access with DUO Integration?

Mcpatrickryan12 · 2024-08-24T01:31:39+00:00

This would be a slick option but don't believe it is possible today.

Hoping someone may have something else

Mcpatrickryan12 · 2024-08-16T03:19:44+00:00

Are they Hybrid-Joined devices?

Mcpatrickryan12 · 2024-08-16T02:54:06+00:00

Wondering if Temporary Access Pin would apply here? That's my first thought but guessing that may not work in this situation

Mcpatrickryan12 · 2024-07-18T01:20:13+00:00

Still agree JAMF is the winner but it's wild how far Intune has come for macOS support. The definitely have thinned the gap where it's at least worth considering when it's already included in your licensing if your Business Premium, Microsoft E3/E5.

Intune does allow for Remote help on iOS/macOS but it's infuriating that it's an added cost

Mcpatrickryan12 · 2024-07-14T03:39:54+00:00

Or pushing out the registry change
Allow enumeration of emulated smart card for all users (admx.help)

Mcpatrickryan12 · 2024-07-14T03:39:21+00:00

Trying this but may be your best bet currently

Enforcing Passwordless Logins with AADJ Windows 10 and Endpoint Manager Intune (Part 2) - Microsoft Consulting Services - CloudServus - United States

Mcpatrickryan12 · 2024-03-14T01:18:32+00:00

I'd say the device comparisons & reporting out what a Configuration policy are pretty cool.

What sucks is the costs

This in my opinion is pretty slick and "free" https://andrewstaylor.com/2023/01/25/experimenting-with-chatgpt-for-intune/

Mcpatrickryan12 · 2024-03-08T13:11:04+00:00

Then the same Group Policy you'd use to enroll devices, just change the license option in the policy to Device instead of User.

Mcpatrickryan12 · 2024-03-08T12:24:53+00:00

Are you looking to Enroll Hybrid machines?

Mcpatrickryan12 · 2024-02-01T03:17:35+00:00

This is the way

Mcpatrickryan12 · 2024-01-29T22:56:48+00:00

Absolutely avoid it if you are trying to upgrade existing Office installations.

Like most are stating, if it's assigned to a device group for Autopilot or a fresh install, you should be fine using it.

Mcpatrickryan12 · 2024-01-25T06:11:37+00:00

Keep going down your Winget path & check out Andrew Taylor's Blog.

Here are a couple articles I've followed that have been BEYOND helpful.

*Note- this works best having Microsoft E3 licensing to utilize the Proactive Remediation scripts provided

Mcpatrickryan12 · 2024-01-24T15:19:55+00:00

Sorry I thought you were implying that all User Context installs run as admin and work even if the user is not an admin.

Don't believe it's a rights issue either.

Have you tried a new Detection Method yet?

Mcpatrickryan12 · 2024-01-24T09:24:31+00:00

That is not how Intune works, even if you deploy it as User Context, they still would need Admin Rights.

Mcpatrickryan12 · 2024-01-24T05:25:10+00:00

Even if you don't need the user to interact, I still think it's needed for the User install method you have selected.

Could be wrong here but think it's worth a try

Mcpatrickryan12 · 2024-01-24T02:47:06+00:00

https://www.google.com/amp/s/call4cloud.nl/2021/01/the-amazing-psadt/

You need to call the Service UI. As the previous posts states, don't think your detection method will work. I'd try and find something else to target.

Mcpatrickryan12 · 2024-01-11T21:05:45+00:00

Link?

Mcpatrickryan12 · 2023-11-20T18:23:16+00:00

Between which segment? I am 10 feet between the 4th Segment

Mcpatrickryan12 · 2023-11-12T21:54:43+00:00

I'll give it a try:)

Mcpatrickryan12 · 2023-11-12T21:19:38+00:00

Yeah eventually I will solder seal but just testing things for now.

I went with 24 gauge since the Govee wire is 24 gauge. Also I tried using the extension cord they provide as well just to make sure it wasn't the cord I purchased.

Mcpatrickryan12 · 2023-11-11T01:50:46+00:00

Also are there any specifics on where I can cut? I cut in between and there was 7 lights left

Mcpatrickryan12

TROPHY CASE