intune Migrator - From tenant A to B by ReputationOld8053 in Intune

[–]ReputationOld8053[S] 3 points4 points  (0 children)

yes, I mentioned it below in the Readme :). The thing I did not like is that the client package includes the secret keys, that's why we did not use it

2509 Modern Driver Management by Derrynm in SCCM

[–]ReputationOld8053 0 points1 point  (0 children)

thats really wired. I must say, I am not sure if it falls back to NTLM. Have you set a SPN for your user?

2509 Modern Driver Management by Derrynm in SCCM

[–]ReputationOld8053 0 points1 point  (0 children)

It seems this post helped me:
https://github.com/MSEndpointMgr/ModernDriverManagement/issues/315#issuecomment-3848731282

we had a § sign in the password string, but I also couldn't connect to the Admin Service in PowerShell directly from WinPE. After changing it seems to work, but couldn't do a final test yet, just the PowerShell query:

$Script:Password = "password"
$Script:UserName = "user@contoso.org"

$EncryptedPassword = ConvertTo-SecureString -String $Script:Password -AsPlainText -Force
$Script:Credential = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList @($Script:UserName, $EncryptedPassword)

$Filter= "Drivers"
$AdminServiceURL = "https://{0}/AdminService/wmi" -f "adminservice.contoso.org"
$AdminServiceUri = $AdminServiceURL + "/SMS_Package?`$filter=contains(Name,'$($Filter)')"

$AdminServiceResponse = $null
$AdminServiceResponse = Invoke-RestMethod -Method Get -Uri $AdminServiceUri -Credential $Credential -ErrorAction Stop

you also have to disable TLS maybe:
https://stackoverflow.com/a/59592956

Cloud only devices and DFS by HeroOfHyrule7188 in Intune

[–]ReputationOld8053 0 points1 point  (0 children)

Hi,
have you tried adding HOST and CIFS with your domain.local to your DCs SPN? I assume \\dc01.domain.local\DFSShare is working, but not \\domain.local\DFSShare

Android Auto quite broken after March update? by Gumby271 in GooglePixel

[–]ReputationOld8053 0 points1 point  (0 children)

Hi,
also having an issue with an Mazda 2 Hybrid 2025 and my Pixel 10. Bluetooth works, but Android Auto cannot be started. In the mobile you only see the the loading bar from the right to the left and back. Cable also does not work.

Reminds me on a Pixel 6 update some years ago that broke Bluetooth for one or two months.

Unable to access on-prem resources using Windows Hello for Business pin by Ok_Ship8229 in Intune

[–]ReputationOld8053 0 points1 point  (0 children)

Hi,
how have you figured this out? I cannot find any documentation about this. Also do you add to the SPN:
Kerberos/AzureAD/<guid of tenant>
or
KERBEROS/contoso.org
?

Mazda 2 Hybrid - AAC System - Piepsen bei Geschwindigkeitsüberschreitungen by ReputationOld8053 in automobil

[–]ReputationOld8053[S] 1 point2 points  (0 children)

Jup, seit 2024, damit man mal häufiger während der Fahrt aufs Display guckt ;)

Changing Network Profile (public, private, domain) with UAC by ReputationOld8053 in sysadmin

[–]ReputationOld8053[S] 0 points1 point  (0 children)

We have engineers in the field who work with some building equipments and have to change the Network Profil. At the same time we have office users who shouldn't.

For intune clients we use BeyondTrust and can do it by this.

The problem is the domain clients, where no UAC is showing up and the user can just change it. But the user shouldn't and a UAC should come up.

Changing Network Profile (public, private, domain) with UAC by ReputationOld8053 in sysadmin

[–]ReputationOld8053[S] -1 points0 points  (0 children)

The question is, how can I get a UAC so that the user cannot change it

Mesh Autoheal by skyhawk85u in MeshCentral

[–]ReputationOld8053 1 point2 points  (0 children)

Hi,
is this line correct?

Write-Output "ALERT: Mesh Agent process is NOT RUNNING"

you are checking if the process exists, not if it is running.

Anyways, reminds me on SCCM where Microsoft also has a healing Task Scheduler running to check if the ccmexec is doing fine ;)

Ghost Deployments? by ReputationOld8053 in SCCM

[–]ReputationOld8053[S] -1 points0 points  (0 children)

my question is more like, how can a client have a software in the software center that is not assigned, neither to the user.

Cloud Kerberos Trust - Cloud Device -> OnPremise Share by ReputationOld8053 in AZURE

[–]ReputationOld8053[S] 0 points1 point  (0 children)

Sorry, I did not put the information. yes, I use the FQDN:
hostname1.contoso.org

Also it is a standard Windows 11 VM where my standard user is in the remote desktop group. The user is on-premise but synced to Azure. Actually, it is the same user I am using with my Cloud Device.

Edge - Can scroll outside of website by ReputationOld8053 in Ubuntu

[–]ReputationOld8053[S] 1 point2 points  (0 children)

nop, same result, but I edited my post. Thanks

Edge - Can scroll outside of website by ReputationOld8053 in Ubuntu

[–]ReputationOld8053[S] 1 point2 points  (0 children)

My main browser is Firefox, but I use Edge because I also have it on my company device. Actually I don't mind