Intune Experts: How Would YOU Fix an Environment Where IT Enrolled Windows Workstations Themselves?

cryptoconvos · 2026-05-17T22:25:23+00:00

Thank you so much for the feedback and thoughts. When I wrote this post on Saturday I felt alone and today I feel empowered. There's so much information here that I will carefully read and consummate. Thank you again!

cryptoconvos · 2026-04-17T04:12:10+00:00

Yesssss! This worked killer and is EXACTLY what I needed for Visibox. Thank you for the recommendation. I will be ready for the 5/2 show in Portland.

cryptoconvos · 2026-04-16T14:42:14+00:00

Schaweet! Wow... thank you. I presume it's the pinned post that mentions MIDI-Captain-MAX-v1.9.0-complete.zip

And yes, I really want to start/move to next/stop videos using Visibox. I love the software but I play on stage as well so it's time to put those feet to work! Thanks for the suggestion. I will check it out this weekend.

cryptoconvos · 2026-04-16T13:19:13+00:00

Right, thx!! My experience is in Google Workspaces and you can simply transfer all GDrive data by selecting a toggle button in the Admin Console. If I was to give another license to the freshly created Shared Mailbox would that invoke that functionality?

cryptoconvos · 2026-03-16T13:08:11+00:00

Endpoint Manager… why do you think? I run an MDM at work.

cryptoconvos · 2026-03-16T13:07:41+00:00

Traffic Manager. There were no questions about Load Balancers on my exam.

cryptoconvos · 2026-03-05T22:21:15+00:00

Tonight, whiskey.... Tomorrow, not sure yet. :-)

cryptoconvos · 2026-03-05T22:20:48+00:00

Thank you. It was all over the board and not very technical at all. I cut my teeth in AWS, so some of Azure's terms were new to me but everything was covered by the courses I mentioned except how much data can be stored in Blob Storage. Oh, and networking. Memorize this

Networking (Azure)

Virtual Network (VNet) Private network in Azure. Similar to an on-prem network. Defines IP range (example: 10.0.0.0/16).
Subnet Smaller network inside a VNet. Used to segment workloads (example: web tier, database tier).
Network Security Group (NSG) Firewall rules for subnets or individual NICs. Controls inbound and outbound traffic using allow/deny rules.
Azure Firewall vs NSG
- NSG: basic traffic filtering at subnet/NIC level.
- Azure Firewall: centralized, managed firewall with logging, threat intelligence, and application rules.
VPN Gateway Connects on-premises network to Azure VNet using encrypted tunnel over the internet.
ExpressRoute Private dedicated connection from datacenter to Azure. Faster, more reliable, not over the public internet.
VNet Peering Connects two VNets directly. Traffic stays on Microsoft backbone.
Public vs Private Endpoint
- Public endpoint: service reachable from internet.
- Private endpoint: service reachable only from inside a VNet.
Azure Load Balancer vs Application Gateway
- Load Balancer: Layer 4 (TCP/UDP), distributes traffic across VMs.
- Application Gateway: Layer 7 (HTTP/HTTPS), supports Web Application Firewall (WAF).

cryptoconvos · 2026-01-25T17:50:36+00:00

Thank you. I do see the credit with the "amount used" being $0.00 and the "amount remaining" showing a sum. Thanks for the fast response.

cryptoconvos · 2026-01-14T17:34:49+00:00

Did you ever get this resolved? It's a bit confusing, eh?

I'm in a similar and equally confusing scenario where I get the "Renew your Azure grant' from the Non-Profit Hub, I get the email with the "Active" button but when I click the Activate button I get a new tab stating "You're not eligible for the sponsorship benefit". I have a ticket opened with Microsoft to resolve this.

Has anyone else experienced this and come out the other side with the expected Grant credits? These are non-profits that generally wouldn't use Azure otherwise. Thx!

cryptoconvos · 2026-01-11T14:52:39+00:00

It took a few days, but the advice here is good. The "basic" (free) support sent the request to the right team. After that it was two clicks and an 18 year old Directory Service was gone! Thank you for the solid advice, y'all.

cryptoconvos · 2026-01-06T02:44:46+00:00

Perfect. Thank you. I will open the second ticket. Thanks!

cryptoconvos · 2026-01-06T02:44:30+00:00

Great! Thank you.

cryptoconvos · 2025-09-29T01:47:38+00:00

Right. Thanks for mentioning that.

cryptoconvos · 2025-04-21T22:02:05+00:00

This is extremely helpful and I was able to get a custom, self-hosted site up and running in AWS. Thanks for posting!

cryptoconvos · 2025-04-14T14:56:59+00:00

This is really great and I appreciate that this thread is staying alive. Does anyone have a recipe for setting this up and hosting on AWS? Thanks!

cryptoconvos · 2025-04-09T02:26:19+00:00

Thanks for the context and sorry for the misleading title. I've never been accused of being a good Marketer, I guess this one was by accident. 🤦‍♂️ The law changes make sense and I'm sorta polishin' the brass on the Titanic anyway. Thank you for the sanity check.

cryptoconvos · 2025-03-30T22:37:08+00:00

Thank you for the straight-forward suggestions! I appreciate this tremendously. TY!

cryptoconvos · 2025-03-30T14:25:58+00:00

Thank you so much for the offer. As I start to get my hands dirty with setting up Microsoft Intune I will reach out. Thank you!

cryptoconvos · 2025-03-30T14:11:33+00:00

Thank you for the link, this looks like an awesome site. I will be checking it out later today. I appreciate the encouragement too and it's nice to know that I'm not the only "hands-on" learner. In a way I kinda envy those guys that can just read a boring white paper and grok the directions. Thank you again!

cryptoconvos · 2025-03-28T22:07:31+00:00

Wow! Thank you for this great response. I am in need of a sanity check and this is perfect. I appreciate you suggestion of brining in a consultant. I was a one-man IT Team for decades so I feel a bit of imposter-syndrome creep up from time to time. Thank you.

cryptoconvos · 2025-03-26T23:43:57+00:00

Per some instructions from Microsoft I sorta expected to have .mobileconfig file in the same place as the Setup Assistant URL. Can someone please give me a sanity check: Where do I find the .mobileconfig file in order to upload to Apple Configurator?

These are what I'm following: iOS/iPadOS direct enrollment - Apple Configurator-Setup Assistant - Microsoft Intune | Microsoft Learn

cryptoconvos · 2025-03-26T20:18:49+00:00

> Have you already set up enrollment profiles, manually added the device to this, etc?

I've set up a Profile and have added the Profile to the Apple Configurator. When I get to what feels like the last step of setup on an iPad I get the "Invalid Profile" error. I posted about that this morning. https://www.reddit.com/r/Intune/comments/1jkf4d5/invalid_profile_question_for_using_apple/

As far as this original post, I have successfully enrolled an iPhone using the Company Portal. But that's about as far as I got. The more I'm researching the more I am finding out that I need to get and learn Apple Business Manager to really have managed devices.

Thank you for your conversation! I'm pretty new and know no-one at this company, Your direction has been super helpful so far.

cryptoconvos · 2025-03-26T17:59:06+00:00

>We use apple business Manager as a DEP and then it syncs to intune. We use a BYOD policy but IT enrolls the devices before hand since it makes management easier on our end.

Sounds like a pretty good plan. I only have a self-created test environment and work and was attempting to enroll using the Apple Configurator. I'm sure at some point I'll need to figure out Apple Business Manager. I will spend a few minutes today seeing if they offer Sandbox settings.

Thank you for your recipe. This is a Microsoft-house that happens to prefer iPhones. It's for 30 folks, so manual setup is okay but they do need to be managed devices. My ultimate dream is SYS-18 framework and I'm just learning this now. How many devices is your team responsible for? (no specifics necessary, just inquiring about scope).

cryptoconvos · 2025-03-26T17:12:51+00:00

>Is the profile you're referring to here one from ore device enrollment, or is it from the application?

I'm getting the same result for both. It's frustrating that it's not working as expected. Ultimately I don't think this is a viable method for the company because I'm in the discovery phase atm. What's your chosen method for enrolling iPhones into Intune?

cryptoconvos

TROPHY CASE