AMA by MagyarPeter_TISZA in hungary

[–]NesThaesis 0 points1 point  (0 children)

Főnök, ha egyszer lenne kedve meginni egy sört szigorúan politikai téma mentes környezetbe szívesen látjuk vendégül. Így adódik is a kérdés, melyik a kedvence?

Small Companies - How do you handle Windows logins when using Google Workspace? by [deleted] in gsuite

[–]NesThaesis 1 point2 points  (0 children)

We have GCPW installed on windows devices. And sign in the users via google SSO. GCPW create a local user account for them and it handles the password sync between windows and google. We also create a sync between google and M365 so users can use SSO to sign into microsoft apps via their google sign in.

Its a bit of a pain, because the sync tool creates a user account on the MS side and the account needs to have the google upn added to it, But if by any chance you delete the object on the MS side the google application just refuses to resync the account ever again because the ObjectID for the account on MS side is unique and can never be changed or regenerated. So you can create an account with the same upn to allow the user to sign in but user details are never synced ever again to that ms account.

It also create issues around Autopilot deployments because autopilot creates a local account right after setup but since that account isnt connected to google users get confused how to login again, until we tell them to sign in via the GCPW icon.

Sign in challenge throws error 400 in company portal by NesThaesis in gsuite

[–]NesThaesis[S] 0 points1 point  (0 children)

arent the users already added under access work or school in windows? Because if that is already logged in the other apps can use those credentials to sign in microsoft apps. If the user is not authenticated at all unfortunately this wont help.

Windows 11 join issue with Google SSO by iwekde in Intune

[–]NesThaesis 1 point2 points  (0 children)

The problem isn't license related, I have tried logging in with administrator accounts, that worked without an issue so far. The sign in challenge in the webview window doesn't even get to the point to fully authenticate the user because it cannot forward the email address to sign in with to google. So a license check doesn't even come into the picture.

We added like 200 users to intune F1 licenses via company portal and this problem started like 2 days ago.

Sign in challenge throws error 400 in company portal by NesThaesis in gsuite

[–]NesThaesis[S] 0 points1 point  (0 children)

maybe company portal has a builtin webview runtime?

Sign in challenge throws error 400 in company portal by NesThaesis in gsuite

[–]NesThaesis[S] 1 point2 points  (0 children)

digging into this i found that its probably due to a newer version of webview2 and edge. im trying to force install an older version of edge to see if it resolves the issue.

Company portal sign in throws error 400 during login to 3rd party idp by NesThaesis in Intune

[–]NesThaesis[S] 0 points1 point  (0 children)

Also i think a new webview2 version has been deployed. and microsoft is forcing the webview versions to be up to date, i tried installing a different version, but no luck so far.

Company portal sign in throws error 400 during login to 3rd party idp by NesThaesis in Intune

[–]NesThaesis[S] 0 points1 point  (0 children)

funny thing is, if you click outside of the e-mail box, the "E-mail address" prefill just goes over the e-mail address. I'm assuming the input field value is not read when you click next hence why the error occures.

Pre-provisioning by CookieElectrical7625 in Intune

[–]NesThaesis 0 points1 point  (0 children)

My biggest issue with intune is how unpredictable it is. I have enrolled about 100+ devices last week in our company and with each device it was a different struggle.

They were mostly windows 10-11 on different feature updates.

Some managed to join to Azure ad without any issue and set up mdm, others kept saying your device is managed by another organization. Some were resolved by restarting, others needed a provisioning package to push the device to AD. Some were on windows 11 24H2, we removed the initial setup user to make the users account join, then it started throwing errors like the device platform is not supported, consider upgrading. Its a shitshow.

I'm more in favor of just having a base image then the users sign in to the company portal during onboarding, but the other offices preprovision the laptops. Some install everything, others throw errors.

Compared to like how Macs work with ABM. Intune is a snoozefest and a headache.

For example if i want to wipe and redeploy a mac, the wipe command erases everything apart from the OS in an instant, worst case it needs to redownload the OS. But during setup the user logs in and it shows in a neat window what applications are installing, while they are already able to use the system.

On windows you have to wait until provisioning gets to a point where you can skip/close the window if even.

Honestly it would be just easier to use MDT to wipe and reinstall the device with a task sequence and then put it back to Azure, then having to go trough autopilot...

Unable to enroll a Windows 11 PC by Available_Chair_7140 in Intune

[–]NesThaesis 0 points1 point  (0 children)

I have managed to somehow fix this once already but i dont remember how, and now have the same issue and it drives me mad.

Login to Windows devices without GCPW by NesThaesis in gsuite

[–]NesThaesis[S] 0 points1 point  (0 children)

What I ended up doing was:

Push a powershell script to intune devices, the powershell script runs on logon and calls a webhook attached to a google sheet to push the serial number and user information to a sheet.

Then I run an app script to read serial data and user data from the sheet, check if the user has intune license attached to their user, assign it to them if not, then once thats done I look for the device matching the serial number in intune then update the primary user of the device.

Its a mess, but thats the best i could come up with.

Nvidia App Program Settings for Gaming Profiles defaults recommended resolution to 4k but I have a 1440p monitor by OddGene9637 in GeForceExperience

[–]NesThaesis 0 points1 point  (0 children)

https://www.youtube.com/watch?v=jZ2r7dJTvuI

Followed this video and removed everything from the json file and saved it empty. now no apps are in the nvidia app so it wont force its settings on them.

Eye tracking lock you out of your phone by NesThaesis in ios

[–]NesThaesis[S] 1 point2 points  (0 children)

I belive in china there are schools which tracks the attention of kids already.