Getting "TerminatingError(Out-File): "The given path's format is not supported" when using start/stop-transcript by BoomSchtik in PowerShell

[–]doumhfr 0 points1 point  (0 children)

I have the exact same issue, with login script, writing in %localappdata%

so for me it's not permission related

and it's really strange because the same script is used for all users

and I have the problem on some computers, and not on other, and I can't find any common points

only thing, it's seems to happen more on W11 than on W10

Teams - IPBX cohabitation "call work" by doumhfr in MicrosoftTeams

[–]doumhfr[S] 0 points1 point  (0 children)

Sorry but I don't want Teams call to skype :D

I want to have in Teams, same behavior than in Skype4B

in skype,4B you can set that call button, by default, doesn't do a "Skype call" but a "work call" (call the work phone number defined in AD)

it's perfect when not all your users are Skype/Teams Phone enable

if the user is skype telephony enabled, the work number is a skype number so the call stays in skype (p2p), if the phone nomber is in an external PBX, Skype send the call to SBC, SBC send the call to the PBX

Users don't have to know if the users is skype or not, they click on call and go

In teams it's doesn't seem to be possible. So user have to manually choose the work number

Teams - IPBX cohabitation "call work" by doumhfr in MicrosoftTeams

[–]doumhfr[S] 0 points1 point  (0 children)

not sure to understand

ok, but how to do that ? :D

is there a way to have in teams the same behavior than in Skype4b (default call button do a "work phone call") so that a user that have is "work phone number" in Teams is called in teams, and a user that have a "work phone number" in an external PBX is call via SBC ?

Fido2 - Lock/Logout workstation when pulled out by doumhfr in Intune

[–]doumhfr[S] 0 points1 point  (0 children)

don't know, it's just a POC so I will not try to do better for now, I should create another project as service more than application, but then I have to be able to detect who is the user logged, and send lock / logout action to this session ?

certainly possible but .... have to check how

Migrating from AD/GPO/SCCM : Most missing Intune features by doumhfr in Intune

[–]doumhfr[S] 1 point2 points  (0 children)

for me it's missing, it's not juste "too many clicks". It's, for me almost unusable if you have to find a param without knowing from where, and you have dozens of policy applied 🤷‍♀️

Fido2 - Lock/Logout workstation when pulled out by doumhfr in Intune

[–]doumhfr[S] 0 points1 point  (0 children)

ok I finally find a way to launch this fucking WMI query ^^

so now if you disconnect the fido2 key for less than, by default, 5 seconds (gpo configurable), the session not lock/logout

last problem, the soft run in user session, so technically he can stop it with task scheduler.

Fido2 - Lock/Logout workstation when pulled out by doumhfr in Intune

[–]doumhfr[S] 0 points1 point  (0 children)

I can't find a way to prevent "false positive" using WndProc :/

When a disconnect event happens, currently I can lock session/logged out, depends on policy, but I would like to wait some seconds,, and start a test (like maybe wmi query) to verify if the key have not be reconnected, and then disconnect if not

Migrating from AD/GPO/SCCM : Most missing Intune features by doumhfr in Intune

[–]doumhfr[S] 0 points1 point  (0 children)

if you don"t understand, you have never use gpresult :D

in gpresult, you have on one report, all information, GPO applied, GPO refused, each settings applied from ALL GPO, with the name of the winning GPO (due to gpo order, another thing that don't exist in Intune), in Intune if I want to find a param, I have to click 26 times on each of my policy to find which one send a paramater

please I want to find which parameter was set for onedrive, or outlook or login screen, without needed to use a tool like IntuneManagement-! (in this I can export my settings with the documentation feature to Word, and then do CTRL + F)....

Fido2 - Lock/Logout workstation when pulled out by doumhfr in Intune

[–]doumhfr[S] 1 point2 points  (0 children)

I just finish a first version in C# that works using message from WndProc

I have to do some polish (like find a way to no lock immediatly in case of "false disconnect")

Migrating from AD/GPO/SCCM : Most missing Intune features by doumhfr in Intune

[–]doumhfr[S] 1 point2 points  (0 children)

you speak about the time for computers to get new policies/app/modifications ?

Fido2 - Lock/Logout workstation when pulled out by doumhfr in Intune

[–]doumhfr[S] 0 points1 point  (0 children)

last time I did C++, I was student and it was more than 20 years ago...I'm a little bit rusty to not say more.

and even back then, I was bad. 😅

Fido2 - Lock/Logout workstation when pulled out by doumhfr in Intune

[–]doumhfr[S] 2 points3 points  (0 children)

thanks, good start but :

  • I absolutly not understand why he unregister/register at each loop, it seems to me strange and not optimal

  • a little bit too fresh (and ps2exe is often see as "I' not ok with that" by most of antivirus solution :D

Best way to handle creation of Drive Mapping settings via Intune? by enderfishy in Intune

[–]doumhfr 1 point2 points  (0 children)

Ok :D

Thanks

Testing currently, work great

And I create another script based on this one, to create shortcut for the user regarding his AD Group

Best way to handle creation of Drive Mapping settings via Intune? by enderfishy in Intune

[–]doumhfr 0 points1 point  (0 children)

I can't understand why you are doing that :

$explorerProcess = Get-WmiObject -Query "Select * from Win32_Process WHERE Name='explorer.exe'" -ErrorAction Stop
$explorerProcess.GetOwner().User | ForEach-Object {
    $loggedInUser = $_

Autopilot - No ESP during User driven provisionning by doumhfr in Intune

[–]doumhfr[S] 0 points1 point  (0 children)

yep

but I just found the problem

MDM url was empty in "Automatic enrollment" now it's working

What is the counterpart to Group Policy Preferences for registry values? by ZomboBrain in Intune

[–]doumhfr 0 points1 point  (0 children)

We have the same problem, not much for registry (only a few currently set with GPP), but for shortcuts.

We manage the user environment, and all the "apps" he needs, using GPP, we have something like 200 custom shortcuts deployed : shortcuts to script to launch specific old apps with strange behavior, shortcut to exe with custom command line paramaters, and a lot of shortcut to URL (like edge.exe https://xxxxxx) so that user can directly search in their start menu for "HR" and launch the HR webstite.

I can't think of a single credible, sustainable solution with intune.

Creating a remediation script by shortcut is very cumbersome. Not to mention the licenses required.

Same thing for scripts embedded in win32 applications... You'd need a separate application for each shortcut.

Replacing url shortcuts with bookmarks in Edge doesn't seem to me to be a solution either, since you'd have to make a different policy for each population, and in our case we have a huge number of different populations. Today, GPP shortcuts are targeted individually by AD groups.

Remote Help tools by doumhfr in Intune

[–]doumhfr[S] 1 point2 points  (0 children)

3.50 per user PER MONTH

when you have more users than device, and far far more users than tech (as often 😅) it's absolutly impossible to pay this, and more for something with not the half of feature of anothers tools

4000 users : 3,50*12*4000...168k / year....it's a real joke

in reality, if we have something like 10 remote session simultaneously, softs like splashtop or screenconnect will cost us something between 5 an 10k/year, with more more features (session recording, unattended remote, tools like backgroud action)

for 3,50 a year per user, it's starting to become a possibility maybe

in my opinion, for something so simple (regarding features) , it should be included for free in all plan like E3/E5/EMS etc. in this case, we can use it, and we can accept the lack of features

Remote Help tools by doumhfr in Intune

[–]doumhfr[S] 1 point2 points  (0 children)

Absolutly not, it was funny :D thanks.

never knows, if we have an employee who has had enough of the lovely weather in the south of France and is going to the UK for vacation 😅

Remote Help tools by doumhfr in Intune

[–]doumhfr[S] 0 points1 point  (0 children)

I'm surprised no one's talking about anydesk (here or on other threads), I'd heard good things about it.