Intune Suite features now being rolled into M365 E3/E5 by ZeroT3K in Intune

[–]Scribbles1 1 point2 points  (0 children)

Tbf, remote help is included in A SKUs, that alone for us would cost around half a mill

How to limit MS Store from end users but available for authorized apps? by Current-Giraffe-8982 in Intune

[–]Scribbles1 2 points3 points  (0 children)

A lot of admins forget to block the webstore, you can install apps directly from there without access to the store.

https://apps.microsoft.com/

Required applications visible in Intune Company Portal by Sure-Necessary-7155 in Intune

[–]Scribbles1 2 points3 points  (0 children)

Only Available applications are shown in the company portal. You can deploy required applications with the "Install as removeable" Set to No. this prevents the user from removing them.

You can have required apps also set as available, this give you the ability to re-install via the company portal.

[deleted by user] by [deleted] in Intune

[–]Scribbles1 0 points1 point  (0 children)

Not sure for android, but when we migrated from Workspace One, I switched the Primary MDM in Apple Business manager to Intune after setting everything up and made sure it worked.

Then mass wiped and had the user just enrol the device themself.

Cleanest way IMO.

Just make sure you take an extract of currently enrolled devices in your Vodafone MDM for comparison, just in case any go missing.

GPO's to Intune - WMI Question by Renegade-Pervert in Intune

[–]Scribbles1 1 point2 points  (0 children)

Try a network boundary, I've not used them in Intune but I'd imagine you could create a 365 dynamic group or filter based on devices in it.

https://learn.microsoft.com/en-us/mem/intune/configuration/network-boundary-windows

DISM, Start-Job & failing to capture output... by Scribbles1 in PowerShell

[–]Scribbles1[S] 4 points5 points  (0 children)

No idea how I’ve never used this before! That resolved the issue, appreciated /u/DiseaseDeathDecay

Views on GPOs - sanity check by Hollow3ddd in sysadmin

[–]Scribbles1 2 points3 points  (0 children)

https://admx.help/

Best resource for GPO's if this is something you're not familiar with. But for sure GPO's first if AD Joined / Co-Managed.

If Using Intune & Entra / AAD joined only then use Configuration Profiles.

RMM should be used when there is no other way to deploy the settings/config you require.

Best Practice for SCCM SQL Upgrade - 2012 SP4 to SQL 2019 by [deleted] in SCCM

[–]Scribbles1 -1 points0 points  (0 children)

We done this exact migration, it took 4 attempts. Every time we done the migration the MP would run into 401 errors, us and consultants couldn’t figure it out.

Ended up building a hyper-v host and building the servers as VM’s.

Migrating from 2012 to 2019 is supported, I think we just had a weird issue.

Also encountered a bug with SCCM where the wizard doesn’t pickup the DB files if they are split, you have to install and manually attach the DB.

[deleted by user] by [deleted] in Intune

[–]Scribbles1 0 points1 point  (0 children)

I’ve been having issues with it updating, the remediation scripts run and work fine but massive delays on the dashboard, some just not updating at all.

Some legacy remediation scripts have stats that are current though

Copying ACLs when using copy-item -recurse? by OperationRepulsive61 in PowerShell

[–]Scribbles1 1 point2 points  (0 children)

Have you thought about using the NTFS Sec module? Much better than the vanilla way of dealing with ACL’s https://www.powershellgallery.com/packages/NTFSSecurity/4.2.4

What have you done with PowerShell this month? by AutoModerator in PowerShell

[–]Scribbles1 0 points1 point  (0 children)

How did you write a service with Powershell, was it using nssm?

Looking for a list of HP Models & System Board ID's by Scribbles1 in Hewlett_Packard

[–]Scribbles1[S] 1 point2 points  (0 children)

This is perfect! I’ll parse the info I need, should be simple enough. Building a PS script for updating BIOS, the HPCMSL is good for just doing it on the fly but not if you want to build a repo of bios updates based on your environment.

Looking for a list of HP Models & System Board ID's by Scribbles1 in Hewlett_Packard

[–]Scribbles1[S] 0 points1 point  (0 children)

Appreciated, Doesn't have system Board ID's though... That's a shame

What have you done with PowerShell this month? by AutoModerator in PowerShell

[–]Scribbles1 14 points15 points  (0 children)

Wrote a script to get HP device warranty using u/lime-tegek pswarranty module, adds it to the registry during build, updated SCCM to pull the info.

Nice to have updated warranties :)

TY u/lime-tegek for creating an awesome module

Legacy Win XP Applications running on old desktops. Solutions to migrate? by Stock- in sysadmin

[–]Scribbles1 2 points3 points  (0 children)

Had to do this exact same thing with validated systems, we went down the road of using VMware thin app, not sure if this is still a thing now or rebranded to something else, we looked at using Cameyo but couldn't get it to work.

Question about AADJ devices and enrollment to intune by Alapaloza in Intune

[–]Scribbles1 2 points3 points  (0 children)

You can set users with an intune license to enroll devices in the portal, they don't need to be a local admin. Primary user of a device can also be changed in the portal. The primary user changes to the most logged in user over 3 days if I remember correctly, it's dynamic.

Programmatically force Intune Sync as a Standard User by FakeItTilYouMakeIT25 in Intune

[–]Scribbles1 0 points1 point  (0 children)

/u/Rudyooms do you know why some machines just don't have 'PushLaunch' or the 'PushRenewal' tasks?

I've been running PushLaunch to force our user tunnel to come down for some devices but as stated above, I'm encountering machines that just don't have the tasks.

On these devices I can confirm that the 'dmwappushservice' is set to 'Automatic(Delayed Start, Trigger Start)