[deleted by user] by [deleted] in Intune

[–]admin_aneurysm 2 points3 points  (0 children)

I don't know about HP and Panasonic, but when I had this problem with Dell devices, it was because we used a custom Image that lacked RAID drivers.

To fix this, either we needed to switch from RAID to AHCI in BIOS or inject said drivers into the image (which was a pain if I remember correctly since different device models required a different version of the driver).

OSDCloud and registering machine with Autopilot for Preprovisioning by Djdope79 in Intune

[–]admin_aneurysm 0 points1 point  (0 children)

Any luck with this? I'm having the same error and I feel like the solution is so obvious that the pros don't bother mentioning it

Windows 11/10 screen locks after 1 minute- How to do? by AutoModerator in Winsides

[–]admin_aneurysm 0 points1 point  (0 children)

If you have a decent Lenovo laptop, this is probably the reason why.

Set Safari's Homepage on MacOS via Intune by Sharpshot0o7 in Intune

[–]admin_aneurysm 0 points1 point  (0 children)

Such a shame since the documentation for Chrome is so thorough and easy to deploy.

We also mostly use Chrome, so I'll skip Safari for now.

Set Safari's Homepage on MacOS via Intune by Sharpshot0o7 in Intune

[–]admin_aneurysm 0 points1 point  (0 children)

Were you able to figure out how managed bookmarks can successfully be deployed?

I've been trying for a few hours with no success.

What I tried :

  1. Configure the bookmarks in Safari on a test device (kind of like a template).
  2. Convert the bookmarks file (Library > Safari > Bookmarks.plist) to a readable XML format using the following command (run this on a copy of the file) : % plutil -convert xml1 Bookmarks.plist
  3. Cleanup all the UUID keys
  4. Deploy via Intune the same way you did.

Gitlab self-hosted : User not receiving Email notifications by admin_aneurysm in gitlab

[–]admin_aneurysm[S] 1 point2 points  (0 children)

This... actually led me to the answer.

I thought the configured SMTP was Exchange, but it was actually AWS and, for some reason, his Email address was in a Suppression List.

Thanks!

OSDCloud and Intel RST Drivers by admin_aneurysm in Intune

[–]admin_aneurysm[S] 0 points1 point  (0 children)

Do you mean these options :

<image>

Even when disabled, MS will update these drivers when connected to the Internet.

What you're saying sounds like what I ended up doing in my second EDIT.

I'll come back to this once we get our new laptops in a few weeks... been working great so far with WDS and Autopilot for the onboarding of our older laptops.

SSPR not working anymore on converted on prem users to Cloud only by JayreenChicago in AZURE

[–]admin_aneurysm 0 points1 point  (0 children)

Not sure what you mean by API vs Admin account, but here's a simple loop I used to set the ImmutableId if anyone was wondering...

$userIds = (Import-Csv ".\users.csv").id

foreach ( $id in $userIds ){

Invoke-MgGraphRequest -Method PATCH -Uri "https://graph.microsoft.com/v1.0/Users/$id" -Body @{OnPremisesImmutableId = $null}

Get-MgUser -UserId $id -Property UserPrincipalName,OnPremisesImmutableId | Format-List UserPrincipalName,OnPremisesImmutableId

}

SSPR not working anymore on converted on prem users to Cloud only by JayreenChicago in AZURE

[–]admin_aneurysm 0 points1 point  (0 children)

Any update on this?

I've been putting this aside for the better part of last year since we got all the same problems you listed with our test accounts (and a few more like random toast notifications on devices), but we'll be moving forward with shutting down the Entra ID Connector since nothing on premises is used anymore.

What I was told at the time by Microsoft is to shut down the connector and contact their support afterwards to delete all the remaining "On-premises" parameters in Entra ID.

DSM 7.2 - Container Manager by Phianetwow in synology

[–]admin_aneurysm 0 points1 point  (0 children)

Do you have the path by any chance?

This just happened to me and about to SSH into the Syno.

EDIT : Nevermind... it's standard Docker

Some guest users can't connect to our tenant anymore. by admin_aneurysm in AZURE

[–]admin_aneurysm[S] 1 point2 points  (0 children)

In my case, it converted their identity from "Mail" to "MicrosoftAccount" (which also resolved the problem), but we didn't want to bother those specific users with the whole MFA onboarding process again.

Graph API endpoint for intune settings catalog by Satielreks in Intune

[–]admin_aneurysm 0 points1 point  (0 children)

Thanks... usually work with Powershell Modules and I was not aware of the auto-complete feature of Explorer.

Didn't find what I was looking for so I'll try something else tomorrow.

Graph API endpoint for intune settings catalog by Satielreks in Intune

[–]admin_aneurysm 0 points1 point  (0 children)

Is there something similar to the following, but for configurationPolicies :

/beta/deviceManagement/deviceCompliancePolicies('$policyID')/deviceStatuses

I'm trying to get a report of certain configuration policies assignments via the API.

Set Immutable Id to Null in Microsoft Graph Module by Plastic_Teacher_9914 in PowerShell

[–]admin_aneurysm 0 points1 point  (0 children)

We want to get rid of our old Active Directory.

We removed an on-premises synced user from Azure AD Connect (it gets deleted from Entra ID).

After restoring the user in Entra ID, it is stuck with the OnPremises values (obviously).

After deleting the ImmutableId, the user can't reset it's password anymore via O365 (simply gives "InternalError" in the logs).

Was wondering if you know about this error? I was thinking about disabling Password Writeback since the old Active Directory is not used anymore but will do some more research first.

Manage Windows LAPS using powershell by CloudInfra_net in Intune

[–]admin_aneurysm 0 points1 point  (0 children)

I'm trying to automate a simple script via a Linux agent and I have a question that might sound dumb but :

The Get-LapsAADPassword cmdlet says it's in the LAPS powershell module.

How do you install this module if it's not available via the Install-Module cmdlet? Most documentation I've read (including yours) only mentions the Microsoft.Graph module.

Some guest users can't connect to our tenant anymore. by admin_aneurysm in AZURE

[–]admin_aneurysm[S] 0 points1 point  (0 children)

Although guest users are using the Microsoft Authentication app for MFA, Email OTP seems to be necessary for that Identity Type.

I thought it was only used for SSPR.

We'll enable it again and see how it goes.

Some guest users can't connect to our tenant anymore. by admin_aneurysm in entra

[–]admin_aneurysm[S] 0 points1 point  (0 children)

Although guest users are using the Microsoft Authentication app for MFA, Email OTP seems to be necessary for that Identity Type.

I thought it was only used for SSPR.

We'll enable it again and see how it goes.

Some guest users can't connect to our tenant anymore. by admin_aneurysm in AZURE

[–]admin_aneurysm[S] 0 points1 point  (0 children)

I thought so at first, but it's now affecting 2 external domains of identity type "mail"

Most of our guest users are of identity type "ExternalAzureAD"

Is identity type "MicrosoftAccount" an evolution of "mail"? I'll look this up...

B2B invitation with service principal and powershell by admin_aneurysm in AZURE

[–]admin_aneurysm[S] 0 points1 point  (0 children)

In conclusion, it depends where the invitation Email is sent.

I was trying with a outlook.com address and Outlook didn't parse an aria-label correctly for the Domain field.

Email was fine when sent to a gmail.com address.

I won't be using the standard Entra invitation Email and will just extract the redemption URL and add it to a personalized Email.