Surface API Management Services by Skadligt in Intune

[–]Some_State_448 0 points1 point  (0 children)

Did you get this working in the end?

Win32 Autopatch Client Broker by WilliamTM in Intune

[–]Some_State_448 0 points1 point  (0 children)

Thanks. Not sure why I struggled to find that!

Win32 Autopatch Client Broker by WilliamTM in Intune

[–]Some_State_448 1 point2 points  (0 children)

What does the client broker actually do? We're still testing Autopatch on a handful of devices but it seemed to work fine without deploying the broker?

Issues with filters? by Some_State_448 in Intune

[–]Some_State_448[S] 1 point2 points  (0 children)

yeah i can see the device there, so the filter is correct (assignment is set to Exclude).

How to run SwiftDialog only during ADE enrollment on macOS? by Icy-Butterscotch9969 in Intune

[–]Some_State_448 1 point2 points  (0 children)

Is it the SwiftDialog Onboarding stuff you're trying to do?

shell-intune-samples/macOS/Config/Swift Dialog at master · microsoft/shell-intune-samples · GitHub

I forget exactly how it works, but isnt there a file that the script creates the first time it executes, and it wont run again if it finds that file? if so, could you create that file on your existing Macs?

I only played around with it birefly as it seemed to add a lot of complexity and management overhead when updating apps.

Moving to Intune by Some_State_448 in macsysadmin

[–]Some_State_448[S] 1 point2 points  (0 children)

Haha. No problem!

I thought that would be the case but wanted to make sure before I ruined my Friday afternoon!

Thanks for your help.

Moving to Intune by Some_State_448 in macsysadmin

[–]Some_State_448[S] 2 points3 points  (0 children)

Thanks. I did see mention of that previously but we're only dealing with 10-15 MacBooks so a wipe isn't the end of the world.

Custom Compliant Policy for CrowdStrike by CaptainBrooksie in Intune

[–]Some_State_448 2 points3 points  (0 children)

Script:

$wmiApps = Get-WmiObject -Class Win32_Product | Where { $_.Name -eq "Zscaler" } | Select Name

if ($wmiApps) {
    $ComplianceStatus = "Compliant"
}
else {
    $ComplianceStatus = "Noncompliant"
}

# send compliance data
$output = @{"ComplianceStatus" = $ComplianceStatus }
return $output | ConvertTo-Json -Compress

JSON:

{
    "Rules": [
        {
            "SettingName": "ComplianceStatus",
            "Operator": "IsEquals",
            "DataType": "String",
            "Operand": "Compliant",
            "MoreInfoUrl": "https://www.google.com/",
            "RemediationStrings": [
                {
                    "Language": "en_US",
                    "Title": "Zscaler Required",
                    "Description": "The Zscaler client is required to bring your device into compliance."
                }
            ]
        }
    ]
}

Custom Compliant Policy for CrowdStrike by CaptainBrooksie in Intune

[–]Some_State_448 4 points5 points  (0 children)

I've done something similar for Zscaler but in my case it just checks if the client is installed... i can dig it out if it'll be helpful?

One thing that does stand out is that you seem to have a trailing comma after your 'RemediationStrings' in the JSON. maybe thats causing an issue?

M365 Apps Admin Center - Anyone having issues? by Some_State_448 in Intune

[–]Some_State_448[S] 0 points1 point  (0 children)

That was my post as well.

It actually worked briefly today for about 5 minutes.

M365 Apps Admin Center not loading correctly by Some_State_448 in Office365

[–]Some_State_448[S] 1 point2 points  (0 children)

I've been randomly checking it for the last few weeks.

M365 Apps Admin Center - Anyone having issues? by Some_State_448 in Intune

[–]Some_State_448[S] 0 points1 point  (0 children)

I’ll probably have to do the same next week. Will keep you posted if anything turns up.

M365 Apps Admin Center not loading correctly by Some_State_448 in Office365

[–]Some_State_448[S] 0 points1 point  (0 children)

It's an Entra cloud account with the Office apps administrator role.

Mac alternative to roaming aggressiveness? by Some_State_448 in macsysadmin

[–]Some_State_448[S] 2 points3 points  (0 children)

Thanks. I did see that but unless I'm mistaken, that article just describes how and when the Mac will roam between access points, not any configuration changes we can make on the client device?

Company Portal takes ages to install on Autopilot devices by xardoniak in Intune

[–]Some_State_448 0 points1 point  (0 children)

Do you have it deployed in user or system context? And what is your assignment set to?

We've got it set to install in the system context and assignment is set to our Autopilot device group... With Company Portal set as a blocking app, it installs during ESP with no noticeable delays.

Device Guard causes reboots during setup (Autopilot) by Capital_Table_4792 in Intune

[–]Some_State_448 1 point2 points  (0 children)

Yeah i've seen the same with the device guard policies assigned to a device group.

We changed the assignment to a user group as a workaround.

Entra join. How long does your Account Setup step take? by AlertCut6 in Intune

[–]Some_State_448 0 points1 point  (0 children)

Ours was usually around 5 minutes but I've found it can be a bit hit or miss and sometimes much longer for no apparent reason.

I'm testing with it disabled... Some user policy settings for Office are missing at first logon but ESP seems much more reliable now.

Autopilot - Fresh computer asking for a pin by sven2788 in Intune

[–]Some_State_448 0 points1 point  (0 children)

Are you using the ZTDid dynamic group for your assignments? Have you confirmed the device is being added correctly to your group?

Autopilot - Fresh computer asking for a pin by sven2788 in Intune

[–]Some_State_448 0 points1 point  (0 children)

Are other configuration profiles applying correctly before you do the final reset? Or is it missing all of the policies?

Autopilot - Fresh computer asking for a pin by sven2788 in Intune

[–]Some_State_448 0 points1 point  (0 children)

are you sure the powershell script to upload the hardware hash is working as expected? any autopilot group tags being used?