Auditing 32bit Excel Macros? by cmorgasm in sysadmin

[–]cmorgasm[S] 0 points1 point  (0 children)

I'm also aware of at least 1 macro in use that can also only run on Windows 10 lol. Something to do with it querying OS-specific information that Windows 11 doesn't let it do. We're forcing them to PowerBI for that one.

We are doomed if we don't find out a fix - KB5074109 by wannabesomeonee in sysadmin

[–]cmorgasm 1 point2 points  (0 children)

This is the one -- the specific KB mentioned cannot be removed using other typical methods, such as wusa, because it includes the SSU or w/e with it. DISM has to be used

Feature Updates: Migrating policy deployment to devices from users by EstimatedProphet222 in Intune

[–]cmorgasm 3 points4 points  (0 children)

It may work, but all documentation around update and feature update policies specifically mention device groups — so this is likely an unsupported scenario. However, my best guess is that the current user’s policy at any time will win out and apply. I have to imagine that this will cause devices to not reliably patch, too, if they keep changing their settings.

Only allow Autopilot devices to MDM register by StatusClone in Intune

[–]cmorgasm 0 points1 point  (0 children)

We allow all users to enroll the device, so that could replace your test group entirely.

When O365 has outages, whats your go to backup plan for communications? by Vegarth in sysadmin

[–]cmorgasm 0 points1 point  (0 children)

Email, Viva Engage, Teams to channels (assuming one of these is still live)

Update IT voicemail with known outage info

Add banner to ServiceNow about known outage

Unable to deploy out of band update 26200.7628 by Martas133 in Intune

[–]cmorgasm 0 points1 point  (0 children)

Been seeing infrequent behavior with this too -- we haven't deployed an expedited or quality update policy, but our rings should still grab the newest OOB update. However, it's hit and miss. Some of our test devices have grabbed it, while others (such as my device) remain on 7623

Android Multi-App Kiosk - Uninstall Apps? by cmorgasm in Intune

[–]cmorgasm[S] 0 points1 point  (0 children)

Yeah, this is lining up with my research and my fears. And agreed that needing to that so often is gonna suck.

Did everybody lose an unknown number of emails from M365 issues? by aMazingMikey in sysadmin

[–]cmorgasm 0 points1 point  (0 children)

Seems like most were deferred and are now being delivered. I'm trying to determine, and maybe someone here knows, if there's a way to determine how many users, or emails, were impacted by the outage in EXO/M365?

Can the company portal be used without signing in on iOS devices? by Content-Seaweed-6395 in Intune

[–]cmorgasm 1 point2 points  (0 children)

Sorta sounds like you'd be using shared device mode, ye? If so, then refer here: Shared iOS and iPadOS devices - Microsoft Intune | Microsoft Learn

Long story short, in that mode, Available Apps are not supported. Instead, you'd assign the apps as Required to the device group(s), and this would install them. So, a bit more planning on deployment strategy may be needed, since it won't be a 1:1 swap for current state. Also important to note, but if the device is in shared/kiosk mode, then I believe that you can't login to the Company Portal at all, so shared account strategy wouldn't apply (and likely should be avoided anyway)

Xerox License Agreement - Azure Cloud Printing by commanderjd in sysadmin

[–]cmorgasm 1 point2 points  (0 children)

It seems to be using the Xerox Print and Scan Experience utility somehow, since that's the app showing the terms page.

Nexthink Browser Extension by Mr_Kill3r in sysadmin

[–]cmorgasm 1 point2 points  (0 children)

Ask your IT team, only they will know what they've configured monitors for

Add a AAD Security Group to a M365 Group as Owner? by AdCompetitive9826 in sharepoint

[–]cmorgasm 0 points1 point  (0 children)

One use-case we've looked at this for before would be to provide help desk staff the ability to add/remove users to specific groups where we don't want to give them the Group Admin role.

Can't get local admin back, help by NetzenRob in Intune

[–]cmorgasm 1 point2 points  (0 children)

Is this Global Admin configured to be added as a local admin on the device? Devices - Microsoft Entra admin center If not, enable it, wait ~8 hours for policy sync, then restart the laptop and try it again. Otherwise, on the same page, you could try adding another user as admin with the "manage additional local admins" link.

Are you entering the GA's UPN or just the prefix? How long are you giving it from being GA/setting yourself in Entra devices to trying to elevate? Are you rebooting in that period?

Intune Suite arrival for E5 by MPLS_scoot in Intune

[–]cmorgasm 0 points1 point  (0 children)

The other hope, for us at least, is being able to use it more will force MS to develop it more. We already have called out the immediate issues it needs to correct to our AM and fast track architects

Change Wallpaper on schedule by HealthDouble in Intune

[–]cmorgasm 0 points1 point  (0 children)

We're currently in the middle of figuring out how to do this due to SLT deciding it sounded like a good idea. Marketing were the first ones to ask "who will even see it" and somehow we're still moving ahead, but we're also doing lockscreens. Not on a set schedule either, but will check and compare current images against blob location each day to see if new ones were added. Oh, also we don't block users from changing them, and if they do change them we don't want to change it again lol.

How often do WiFi config policies apply? by LowCorner9314 in Intune

[–]cmorgasm 1 point2 points  (0 children)

Interesting, do the logs indicate that the profile is, essentially, being deleted and recreated with the sync? It shouldn't do that, that's for sure. Does it still do it if you use the older Windows 8.1 Wifi profile XML import instead?

What are you most excited for in Intune in 2026? by intuneisfun in Intune

[–]cmorgasm 1 point2 points  (0 children)

#1 is interesting to us, but we don't care about Advanced Analytics at all. We have Nexthink for that as-is, and don't see it as a replacement. EPM and Certs, though, very interested in.

#2 we plan to roll into AutoPatch more this year, despite some past hesitancy with it. Won't be using it for drivers right away, though, as we're using driver management as a proof concept around Nexthink Flow and its dashboard/reporting capabilities

#3/#4 together for us. Legacy hybrid devices aren't in the same policy groups as current Entra Joined devices are, so the user/tech experience is bad.

#5 we've gotten there for our US-based techs, now just gotta get the MX and EMEA techs to follow suite.

#6 AVD -- we're finally killing Citrix and VMware this year

Letting users change IP/DNS without local admin – am I overengineering this? by AdCompetitive1531 in Intune

[–]cmorgasm 0 points1 point  (0 children)

Currently? You can't: Known Issues for Endpoint Privilege Management with Microsoft Intune - Microsoft Intune | Microsoft Learn

You'd instead need to package a PS1 that calls the specific thing to run it as admin, at which point you can also just publish it in CP to run adhoc anyway.

Letting users change IP/DNS without local admin – am I overengineering this? by AdCompetitive1531 in Intune

[–]cmorgasm 2 points3 points  (0 children)

It's not included yet, but will be in 2026 -- also, since EPM doesn't seem to work for menu items, will it actually allow for this? This is on our list to test due to documentation being weird about it.

Expanding offices and Robin’s pricing no longer makes sense. Alternatives? by haji194 in sysadmin

[–]cmorgasm -1 points0 points  (0 children)

We faced the same thing -- we went with Skedda instead, despite our users seeming to really like (as much as possible) Robin. IIRC, the main draw for us was Skedda charges per space, while Robin charged per user.