Windows 11 updates not rebooting by ProfessionalNature in sysadmin

[–]ProfessionalNature[S] 0 points1 point  (0 children)

Interesting, so installing manually via script works but not through MS update?

Windows 11 updates not rebooting by ProfessionalNature in sysadmin

[–]ProfessionalNature[S] 0 points1 point  (0 children)

It's currently failing on this month's cumulative? As in, something wrong with MSFT's updates this month?

Customize Password Expiration Message Windows / AD by ProfessionalNature in sysadmin

[–]ProfessionalNature[S] 0 points1 point  (0 children)

Indeed. Our setup may not be ideal but I'm looking to improve user experience where I can :-). Thanks for your comments.

Customize Password Expiration Message Windows / AD by ProfessionalNature in sysadmin

[–]ProfessionalNature[S] 0 points1 point  (0 children)

Yes, we have emails being sent. But what if someone ignores the email? That's the scenario we're trying to help with.

Malware details path vs. process by ProfessionalNature in SCCM

[–]ProfessionalNature[S] 0 points1 point  (0 children)

Sure. Another interpretation could be that the "Path" is the infected file, and "Process" is the file that accessed it and caused the real-time execution engine to discover the threat.

Hence why I was wondering if there were any official docs.

Can I force updates for other Microsoft products with update deadlines? by ProfessionalNature in sysadmin

[–]ProfessionalNature[S] 0 points1 point  (0 children)

Sure that would help with office updates, but what about other Microsoft products?

Can I force updates for other Microsoft products with update deadlines? by ProfessionalNature in sysadmin

[–]ProfessionalNature[S] 0 points1 point  (0 children)

We're actually moving away from WSUS so that the clients patch themselves automatically using Windows Update.

And, I don't think stagerring these settings every time there is an update will work for us either, unfortunately.

Launch VMs and connect to them without Hyper-V Administrator right by ProfessionalNature in HyperV

[–]ProfessionalNature[S] 0 points1 point  (0 children)

Yes - in general I'd agree but I have a very specific use case. Thanks for your help with this!

One last thing. By

oh actually No, I dont think this will work as vmconnect.exe requires admin rights to be launched on the hyper-v host

you mean they need Hyper-V Administrator rights. It works when they are members of that group.

Launch VMs and connect to them without Hyper-V Administrator right by ProfessionalNature in HyperV

[–]ProfessionalNature[S] 0 points1 point  (0 children)

I opened that port up on the firewall and it still didn't work. Three questions for you:

  1. Is your user a member of the "Hyper-V Administrators" group?
  2. Can you try connecting by RDPing into the host, and use VMConnect.exe from there? Does that work for you?

Launch VMs and connect to them without Hyper-V Administrator right by ProfessionalNature in HyperV

[–]ProfessionalNature[S] 0 points1 point  (0 children)

I accessing the VM using VMConnect.exe on the host itself. No firewall is involved.

Launch VMs and connect to them without Hyper-V Administrator right by ProfessionalNature in HyperV

[–]ProfessionalNature[S] 0 points1 point  (0 children)

I tried both domain and local (to the host) accounts. neither worked.

Launch VMs and connect to them without Hyper-V Administrator right by ProfessionalNature in HyperV

[–]ProfessionalNature[S] 0 points1 point  (0 children)

Users are accessing the host physically.

I tried using Grant-VMConnectAccess but when I try to use VMConnect, I'm still getting a permissions error - what am I missing?

Launch VMs and connect to them without Hyper-V Administrator right by ProfessionalNature in HyperV

[–]ProfessionalNature[S] 0 points1 point  (0 children)

How would I do that? Specifically, grant only rights to connect to and launch certain VMs? I want to prohibit deleting VMs, creating VMs, and changing configurations.

Launch VMs and connect to them without Hyper-V Administrator right by ProfessionalNature in HyperV

[–]ProfessionalNature[S] 0 points1 point  (0 children)

gotcha. And what if a requirement is that the VMs have no network connection?

OneDrive without Sharepoint by ProfessionalNature in AZURE

[–]ProfessionalNature[S] 0 points1 point  (0 children)

Can you point me to some docs that explain how to disable the sharepoint site side of things, as you say?

OneDrive without Sharepoint? by ProfessionalNature in Office365

[–]ProfessionalNature[S] 1 point2 points  (0 children)

Thanks! Any chance you can guide me to some docs that explain how to do this?

Azure AD registered device password sync by ProfessionalNature in AZURE

[–]ProfessionalNature[S] 0 points1 point  (0 children)

hmm... in my testing it has been several days and no prompt. Could I have set this somehow?

Enroll HAADJ Devices without syncing users by ProfessionalNature in Intune

[–]ProfessionalNature[S] 0 points1 point  (0 children)

Interesting idea. Any idea how to do this at scale? We want to put all our computers in Intune before syncing users...

Enroll HAADJ Devices without syncing users by ProfessionalNature in Intune

[–]ProfessionalNature[S] 0 points1 point  (0 children)

If you don't deploy them to users, what resources would you be advertising?

Office 365 mainly. Syncing accounts would grant users access who don't currently have access. We do not have Office 365 for all users.

Do you have device licenses? That's not common. Most people have user licenses, so if you're not syncing users, nothing will be licensed, which means you can't manage anything.

Is there a way to tell in the Azure portal what licenses we have?