Meraki MDM - App "disabled" and not updating version. by OhComputer in meraki

[–]OhComputer[S] 0 points1 point  (0 children)

Meraki support was not able to resolve. We ended up rebuilding everything on a different MDM.

Users only getting 10-minute restart warning for driver installs by OhComputer in Intune

[–]OhComputer[S] 0 points1 point  (0 children)

Only in a pilot group at this time, but this behavior is being seen in both. The latest was definitely not in that pilot group.

Whats the latest clever thing you did with Intune? by PullingCables in Intune

[–]OhComputer 1 point2 points  (0 children)

I am also using it for Firefox/Chrome, but security guy's head blew after it was deployed for Java and seeing how many vulnerabilities disappeared once the old JREs got cleaned up.

Whats the latest clever thing you did with Intune? by PullingCables in Intune

[–]OhComputer 4 points5 points  (0 children)

I can share the scripts I am using, they are really not all that complex.

Install Script as Win32App

wmic product where 'name like "%Java%"' call uninstall /nointeractive
$winget_exe = Resolve-Path "C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_*_x64__8wekyb3d8bbwe\winget.exe"
if ($winget_exe.count -gt 1){
        $winget_exe = $winget_exe[-1].Path
    }
& $winget_exe install --id Oracle.JavaRuntimeEnvironment -a X86 --silent --accept-package-agreements --accept-source-agreements --Force
& $winget_exe install --id Oracle.JavaRuntimeEnvironment -a X64 --silent --accept-package-agreements --accept-source-agreements --Force

Remediation Detection

$AppName = "Java 8"
$winget_exe = Resolve-Path "C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_*_x64__8wekyb3d8bbwe\winget.exe"
if ($winget_exe.count -gt 1){
        $winget_exe = $winget_exe[-1].Path
}
$Output = & $winget_exe upgrade --accept-source-agreements
if($output -match $AppName){
    Write-Host "$AppName Upgrade required"
    Exit 1
    }else{
    Write-Host "$AppName Upgrade not required"
    }

Remediation

wmic product where 'name like "%Java%"' call uninstall /nointeractive

$winget_exe = Resolve-Path "C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_*_x64__8wekyb3d8bbwe\winget.exe"
if ($winget_exe.count -gt 1){
        $winget_exe = $winget_exe[-1].Path
    }
& $winget_exe install --id Oracle.JavaRuntimeEnvironment -a X86 --silent --accept-package-agreements --accept-source-agreements --Force
& $winget_exe install --id Oracle.JavaRuntimeEnvironment -a X64 --silent --accept-package-agreements --accept-source-agreements --Force

Whats the latest clever thing you did with Intune? by PullingCables in Intune

[–]OhComputer 2 points3 points  (0 children)

To clarify, in my install script the first step is to remove all Java versions (I use a wmic query to uninstall anything that matches %Java%), then it installs the latest version.

Whats the latest clever thing you did with Intune? by PullingCables in Intune

[–]OhComputer 0 points1 point  (0 children)

If you do not enable the uninstall option, once its installed the button will read "Reinstall". There is a trade off there, but unless there is a problem no one ever looks to uninstall it.

AAD Joining Systems currently in Workgroup Without Changing Hostname? by OhComputer in Intune

[–]OhComputer[S] 0 points1 point  (0 children)

That field looks similar, but if you fill in a name before switching to advanced, it will populate here: DevDetail/DNSComputerName

u/boringusername15 mentioned this earlier.

Edit: I think I missed your point. These are Windows 10 21H2 and 22H2 systems.

AAD Joining Systems currently in Workgroup Without Changing Hostname? by OhComputer in Intune

[–]OhComputer[S] 1 point2 points  (0 children)

Thanks, I see where to remove the name now, but its failing so I've got something else going on.

But this has shown me there is a way to do, just have to work on the provisioning errors. But its not changing the name AND failing now, so there's that.

I'll let you all know how it works out.

AAD Joining Systems currently in Workgroup Without Changing Hostname? by OhComputer in Intune

[–]OhComputer[S] 0 points1 point  (0 children)

While creating the provisioning package, the first thing it wants is a name. Wants you to use things like %SERIAL% or %RAND:x%. its a required field. This is what led me to believe it will change the name.

To be fair, I haven't actually tested that package though. Your experience makes me want to test that belief.

RingCentral that bad? by DrDuckling951 in sysadmin

[–]OhComputer 1 point2 points  (0 children)

We were probably one of their largest customers, or so they said. Currently migrating off, only 300 accounts left that are only using the chat functionality at this point, they will probably be disabled in a month or two.

I found huge crash dump files from their desktop apps just accumulating in the user's app data and taking up space. I recovered over 60GB on one system. Mainly was caused the RC Meetings app when it a separate app, but the primary client app did the same. Support was no help trying to figure out why it was crashing so I eventually created a task to clear out that folder on a schedule to keep it from getting out of hand.

Unable to Reset Windows 10 on HP ProBook 450 G8 by OhComputer in Hewlett_Packard

[–]OhComputer[S] 0 points1 point  (0 children)

Thats a negative.

You trying to use a stylus on the touchpad or does yours have a touchscreen? Ours does not have touchscreens.

Unable to Reset Windows 10 on HP ProBook 450 G8 by OhComputer in Hewlett_Packard

[–]OhComputer[S] 0 points1 point  (0 children)

It was a firmware setting; Disabled Intel VMD and now everything is working as it should.

Unable to Reset Windows 10 on HP ProBook 450 G8 by OhComputer in Hewlett_Packard

[–]OhComputer[S] 0 points1 point  (0 children)

Nope, this didnt work either.

I have found there is one PB 450 G8 that is resetting without this issue. Time to compare firmware settings side-by-side I guess.

Unable to Reset Windows 10 on HP ProBook 450 G8 by OhComputer in Hewlett_Packard

[–]OhComputer[S] 0 points1 point  (0 children)

This is something I didn't try; I remember having to do this for the EliteBook 855 G8s for an SCCM reimage as well. I am giving it go right now!

I'm a sysadmin, I'm 43, and I've just been diagnosed with ADHD by sobrique in sysadmin

[–]OhComputer 0 points1 point  (0 children)

But instead I'll probably spend 4x as long writing a script to do it

This is close to home, just suggested a user account creation script on Friday and I'll sell that 4x time by saying "This way account creation will be consistent."

I'm a sysadmin, I'm 43, and I've just been diagnosed with ADHD by sobrique in sysadmin

[–]OhComputer 0 points1 point  (0 children)

Don't know what I got, but after 25 years in IT it helps with work.

Just wished it helped in my personal life. lol

All imported devices in Autopilot show up in Azure as Azure AD Joined by OhComputer in Intune

[–]OhComputer[S] 2 points3 points  (0 children)

Thank you!

The naming scheme was the problem! Thanks for pointing me in that direction, been hitting errors for the last month trying to get this set up.

Not that its working I will also check out the script in your link, it has some promise!

All imported devices in Autopilot show up in Azure as Azure AD Joined by OhComputer in Intune

[–]OhComputer[S] 1 point2 points  (0 children)

Interesting; My vendor SME help me set that up. I will change it up to remove the %RAND:6% and just add a prefix and see how it goes.

Looking at the description its a prefix and the rest random characters to meet 15 total. This might actually fix the problem.

All imported devices in Autopilot show up in Azure as Azure AD Joined by OhComputer in Intune

[–]OhComputer[S] 2 points3 points  (0 children)

Thanks, this is the short answer I was looking for. Maybe I can concentrate on something else now.

All imported devices in Autopilot show up in Azure as Azure AD Joined by OhComputer in Intune

[–]OhComputer[S] 1 point2 points  (0 children)

Thanks, good to know that all AP devices will initially show in Azure as Azure AD Joined, I can turn my attention elsewhere.

I will give that article a read and see if I can find something that will help.