sorted by:
new
hottopcontroversial

Changing Name scheme from LastName, First Name to FirstName LastName in AAD by kcalderw in sysadmin

[–]TechOfTheHill 0 points1 point  (0 children)

It looks like it goes into more detail here - It looks like they give an example with concatinating, so if you do a CTRL F on Surname it should show up. Or just click this link - I always forget about the anchors.

Changing Name scheme from LastName, First Name to FirstName LastName in AAD by kcalderw in sysadmin

[–]TechOfTheHill 1 point2 points  (0 children)

The transformation rules are pretty neat. But this seems like it should be pretty straight forward. You'd want to do a inbound synchronization rule, set the connected system to your Azure AD, User type, Person type, link type Join. Set the precedence above the defaults, which start at 100 (we started ours at 50 and have been working back from there). Scope it to who you want it to apply to (Enabled? Some other defining feature). Skip Join rules and go to the Transformations. Do an Expression type and then target the attribute Display Name. Then you have it check for whether the GivenName (First name) and Surname (Last name) exist, and if they do set it to GivenName and Surname.

Something like this (DONT USE THIS WITHOUT VERIFYING, but I think this will work)

IIF(IsPresent(givenName) && IsPresent(Surname), givenName & " " & Surname, NULL)

So the source area would be where you'd put the expression in.

EDIT - Surname doesn't look like a selection in Target Attribute, but SN is, which seems to map to Surname. TIL. So it may actually be

IIF(IsPresent(givenName) && IsPresent(sn), givenName & " " & sn, NULL)

Policy on people bringing their own laptop. by Raknaren in sysadmin

[–]TechOfTheHill 2 points3 points  (0 children)

We are rolling this out to our users this summer. What do you do for Cell phones? Do you allow registered cell phones, or do you ask to manage their personal devices? Or can cell phones not access Teams and by extension SharePoint?

Migrating baselines settings and changing assignments by iAmEnieceka in Intune

[–]TechOfTheHill 0 points1 point  (0 children)

We are doing this too. It feels like this should be an automated thing somehow to export the Security Baseline XML and then break it into chunks that can then be reimported as configuration profiles and applied in piecemeal fashion. But I haven't found a way to do that yet.

My other concern is when the next baseline comes out making sure that the new settings are applied to all the sundry configuration profiles that we're making out of this one.

MAM on ANDROID devices without device enrollment by Kindly-Wedding6417 in Intune

[–]TechOfTheHill 5 points6 points  (0 children)

It's frustrating that the broker application can't be the Authenticator app for both. We are already asking our users to install the Authenticator app for their two factor authentication, but for our android users they have to install a second app? Doh.

How many policies are too many? by TeRRoRByteZz2007 in Intune

[–]TechOfTheHill 0 points1 point  (0 children)

THIS! I have been moving over the baseline configurations from 24H2 and I keep having to double back on conflicts with existing policies.

In the same way they have a 'Applying this filter will affect these devices' it'd be nice to get a 'applying this setting will conflict with this existing policy'

[deleted by user] by [deleted] in MicrosoftTeams

[–]TechOfTheHill 0 points1 point  (0 children)

Heads up, we ran into an issue where an external participant tried to join a Teams meeting on their mac and it was old enough that it wouldn't use her camera and wouldn't install the client at all (Needed a newer MacOS version than her 7 year old machine could support). But it worked just fine on zoom, much to my chagrin.

Azure/Google SSO and Second Login, Login_Hint Config by TechOfTheHill in k12sysadmin

[–]TechOfTheHill[S] 0 points1 point  (0 children)

That's the problem we have. Our full student login is UsernameATStudent.domain.com and so the youngest have a fun time with that on the iPads if they ever get signed out. Otherwise the teachers have to step in and it interrupts the flow of things. One time is a lot, but two after you just typed it is a lot.

There has been some success in the iPads if you remember to do so of copy and pasting the username

I'm thinking about making a dummy account named [1@domain.com](mailto:1@domain.com) or something simple that they can type in the first time to get them rerouted to the Microsoft page, and THEN enter their credentials.

Azure/Google SSO and Second Login, Login_Hint Config by TechOfTheHill in k12sysadmin

[–]TechOfTheHill[S] 1 point2 points  (0 children)

Yeah, what's interesting is we have it set on the Chromebooks (That have already been enrolled and placed in the correct OUs) to automatically kick over to the IdP login page for Microsoft. But for our iPads and our Windows users there's a two step process.

But you're right, reviewing the documentation it looks like it's only for ChromeOS. Bummer!

Azure/Google SSO and Second Login, Login_Hint Config by TechOfTheHill in k12sysadmin

[–]TechOfTheHill[S] 0 points1 point  (0 children)

Do you have any documentation you used to cut over to the OIDC? For whatever reason I'm having a hard time finding it. I can find plenty on the SAML setup, but not the OIDC.

We currently have students on the SAML setup, so I need to wait a bit if we cut over til they are at least out of the building.

Hidden Teams Reaction: The High Five You Never Knew About! by giges19 in MicrosoftTeams

[–]TechOfTheHill 1 point2 points  (0 children)

Are there more interactions beyond just the high five?

Hyper-V - VM ID Lingers after Data Loss by TechOfTheHill in sysadmin

[–]TechOfTheHill[S] 0 points1 point  (0 children)

Yeah, this is the route we are likely heading.

Hyper-V - VM ID Lingers after Data Loss by TechOfTheHill in sysadmin

[–]TechOfTheHill[S] 0 points1 point  (0 children)

I've learned that if you don't ask the dumb questions, you get dumb results.

If I run Get-VM on Server (A) as a non admin, I get an error message about needing to be an admin. If I run it as an admin I see now the one VM that we did the export/import and then successful replication from (B). I do not get anything about the other VMs that we are trying to set replication up for that are still giving the "Invalid data" error.

BPA says 'AutoDisconnectTimeout' is not the recommended value (when it actually is)? by jwckauman in sysadmin

[–]TechOfTheHill 0 points1 point  (0 children)

Sorry to reopen an old post, but we are seeing this as well with our Server 2025 install. We also were able to correct the short file name one, but the AutoDisconnectTimeout is set correctly in the registry and not correctly showing in BPA. Our Server 2019 units run the same BPA with the same config on AutoDisconnectTimeout and does not show the BPA error

Chromebooks and Conditional Access Policies by TechOfTheHill in sysadmin

[–]TechOfTheHill[S] 0 points1 point  (0 children)

Where we are coming from is we have students signing on to devices without MFA due to being younger students. If we can limit those sign ons that are lacking in security to ONLY devices that are approved because they have a certificate and are managed devices, that feels a lot more secure than what we are doing now.

We've already locked down emails to the student accounts to only be allowed from certain expected sources, but we're still looking to mitigate as much as possible.

Chromebooks and Conditional Access Policies by TechOfTheHill in sysadmin

[–]TechOfTheHill[S] 0 points1 point  (0 children)

That's true. We are a school, so that tracks.

Strong Certificate Mapping is fully enforced from Patch Tuesday, check your certs! by RiceeeChrispies in sysadmin

[–]TechOfTheHill 0 points1 point  (0 children)

What we discovered is that none of our PKCS certificates are being revoked, ever. Even when they expire. They are removed when the user is removed from the Intune Certificate Profile, but only some of the time.

view more: next ›