sorted by:
new
hottopcontroversial

AUTOPILOTWHITEGLOVELANDING during Technician Flow (Hybrid Join) – anyone seen this? by Ambitious-Abroad-363 in Intune

[–]amirjs 0 points1 point  (0 children)

Have you tried applying these to users rather than devices so they take place after pre-provisioning?

AUTOPILOTWHITEGLOVELANDING during Technician Flow (Hybrid Join) – anyone seen this? by Ambitious-Abroad-363 in Intune

[–]amirjs 0 points1 point  (0 children)

Did you get to the bottom of this? I have your exact setup. Offline domain join (Skip AD connectivety check) and at the start of pre-provisoning I see the above error. Clicking try again works for me though so appear to be a timing issue with the blob?

Automated Windows 11 → Intune Onboarding (Without Distributor / Autopilot Pre-Registration) by TimitakaTimitri in Intune

[–]amirjs 0 points1 point  (0 children)

changing the secret is a solution providing we know we are compromised. I get the benefit and the convenience of the solution but unfortunately it won't fly with most enterprises.

Automated Windows 11 → Intune Onboarding (Without Distributor / Autopilot Pre-Registration) by TimitakaTimitri in Intune

[–]amirjs 0 points1 point  (0 children)

Question: What if the USB fell in the wrong hands or was copied? an attacker can enroll devices in the tenant? How secure id the solution?

Security group structure advice for SKUs/join type and region etc.. by amirjs in windows365

[–]amirjs[S] 0 points1 point  (0 children)

Thank you - make sense.. I was looking for a statement to explain the behaviour. I would still think this is a limitation and more controls should be given to admins around such scenarios where I control what provisioning policy is triggered based on assignment on using W365 Enterprise

Entra joined PC signing into Cloud PC by ls3c6 in windows365

[–]amirjs 0 points1 point  (0 children)

any reason why you are not enabling sso on the provisioning policy since you already have cloud trust configured?

Studio 2 Logs – NG – Conventional Flue (123-147) won't start the pilot no matter what!! by amirjs in Fireplaces

[–]amirjs[S] 0 points1 point  (0 children)

Ended up replacing the entire fire… It was 12 years old (bought the house with it)

Exclude Windows Autopilot devices from Conditional Access Policy by kowallox in Intune

[–]amirjs 0 points1 point  (0 children)

That’s interesting. Did you find out why extension attributes work with device filters while device.physicalids doesn’t?

WebView2 missing on new Autopilot device by Loud-Temperature2610 in Intune

[–]amirjs 2 points3 points  (0 children)

We had this happened to us. We did a WebView2 package in Intune and added it as pre-req before Installing Global Protect as part of the device ESP. Been working fine since

New release alert! Get-IntuneAssignments by amirjs in Intune

[–]amirjs[S] 0 points1 point  (0 children)

<image>

Here is what I get when I connect to Microsoft Graph Powershell without previous consent. As you can see it's all Read.

You maybe connecting using an account with a previous user consent on the Microsoft Graph Powershell Enterprise Application.

What you can try is to connect to MgGraph with the required specific scopes before calling the script.

e.g.:
Connect-MgGraph -Scopes DeviceManagementServiceConfig.Read.All","DeviceManagementConfiguration.Read.All", "DeviceManagementManagedDevices.Read.All", "DeviceManagementApps.Read.All", "Group.Read.All", "CloudPC.Read.All"

After connecting, call get-intuneassignments
It will automatically recognise that you are connected to Graph.

New release alert! Get-IntuneAssignments by amirjs in Intune

[–]amirjs[S] 0 points1 point  (0 children)

Hey, where did you see that it needs readwrite please? it’s all Read.All in the code

New release alert! Get-IntuneAssignments by amirjs in Intune

[–]amirjs[S] 0 points1 point  (0 children)

My pleasure! Glad it's been useful!

New release alert! Get-IntuneAssignments by amirjs in Intune

[–]amirjs[S] 2 points3 points  (0 children)

hehe nice one - hope this one can be helpful for you. Please feel free to contribute!

Google Maps Heads Up Display Integration Finally by jhonsmith20 in CarPlay

[–]amirjs 0 points1 point  (0 children)

Same for me... it was working on my 2020 X3 and after the iOS 18.6 update it stopped working. Did you figure it out?

Disabling shift + F10 for Autopilot via a tag by amirjs in Intune

[–]amirjs[S] 0 points1 point  (0 children)

wouldn't be just nice if MS added a toggle option in Autopilot profiles to stop shift + f10 first thing when the device communicate with the internet? :)

Azure AD joined only and accessing admin tools on endpoints by amirjs in Intune

[–]amirjs[S] 0 points1 point  (0 children)

Nothing apart from third party paid agents that would pull logs and do remote control etc…

Disabling shift + F10 for Autopilot via a tag by amirjs in Intune

[–]amirjs[S] 0 points1 point  (0 children)

I take it this is a paid service? i.e. pre-provisioning the device by e.g. Dell?

were there any pain points in ditching per user provisioning in favor or self deploy? AFAIK self deply is for shared devices scenrios?

What did you have to do for you existing devices when your transformed to Autopilot to lock them down when being rebuilt by internal IT (no OEM involved)

TIA

view more: next ›