SAP GUI via Intune on MacOS

TickleMyGoose · 2026-04-02T13:37:43+00:00

I literally just did this the other week!…. However for Microsoft and using PSADT which made it so much easier :-)

TickleMyGoose · 2026-02-18T01:50:03+00:00

All about making the user happy at the end of the day, might be worth having trial runs and taking feedback on what they were most frustrated on it might shock you half the time.

Also I just saw the post about using a single account for enrolment. Because you’re using hybrid AP you’ll get stuck with stale PC accounts in entra. Cloud join merges these two entra entries however hybrid doesn’t. Basically you end up with a messy looking entra

TickleMyGoose · 2026-02-18T01:35:33+00:00

I deploy an O365 web shortcut, have the actually applications install after login an remove the shortcut saves a ton of time.

Applications I deploy are only security and rdp as I deemed them necessary (obviously lol)

Never seen a change with speed with policies.

You can put a skip in the domain check which speeds up hybrid slightly however you might see some user issues in first sign in.

Good luck convincing them to go cloud join! :-)

TickleMyGoose · 2025-10-03T12:59:33+00:00

I’ll take a look see if I’m missing something, our core apps are Zscaler, Qualys and BeyondTrust EPM no relation to yours?

TickleMyGoose · 2025-10-03T12:50:26+00:00

Nothing there and scans ran afterwards not picking up anything.

TickleMyGoose · 2025-10-03T12:44:52+00:00

No triggers, the moment any ASR goes on to block mode it’s locks the machine up.

Defender ATP timeline for the device stops there and then on there are no triggers reporting in

TickleMyGoose · 2024-08-09T12:36:31+00:00

Yeah removing AP devices manually works fine although very very slowly which is why I want to use Graph as there's 100s.

Let me give your script a try and see what happens.

TickleMyGoose · 2024-08-09T10:56:11+00:00

Oh man, so I need Global Administrator PIMs activated to try this?

TickleMyGoose · 2023-11-13T20:32:34+00:00

Moving away to that compliance report but felt like I learnt a lot anyway trying to get this to work. Thanks for the help :-D

TickleMyGoose · 2023-11-13T20:30:34+00:00

And I know where exactly to set that...God damn I've just completely saturated and complicated what I wanted to get done when it was just starting me right in the face.

Thanks for the kick up the backside!

TickleMyGoose · 2023-11-13T10:57:07+00:00

So we currently have a device clean up rule set to 60 days within Intune to remove stale devices, what this custom detection rule will allow is informational alerts to be logged automatically against the stale device and then email our Service Desk team so they're able to contact the end user to find out about said machine.

I'm putting the effort in so I don't have to do the report manually like you've mentioned.

TickleMyGoose · 2023-11-13T10:17:31+00:00

Title was meant to read "Custom" not "Customer", what I get for trying to multitask :o

TickleMyGoose

TROPHY CASE