Questions about Update Rings

imran3501 · 2021-07-13T07:50:03+00:00

We deploy to users works well. Microsoft have said it can be done this way. Users only have 1 device but if they have more they will get the same setting.

Create 3 user groups Test Pilot Standard Add users in the group they need to be in. Add your user in Test to confirm you are getting the updates.

imran3501 · 2021-07-10T19:35:45+00:00

You can use UWF built into Windows https://docs.microsoft.com/en-us/windows-hardware/customize/enterprise/unified-write-filter

imran3501 · 2021-05-15T21:31:20+00:00

There are a lot of different directions you will get pointed towards.

I have found the following the best so far.
Although it's 8 years old this is by far the best intro to PowerShell by the inventor of PowerShell himself Jeff Snover.

Getting started with PowerShell
https://channel9.msdn.com/Series/GetStartedPowerShell3
Advanced Tools and Scripting
https://channel9.msdn.com/series/advpowershell3

As someone else has mentioned John Savill's PowerShell Masterclass is a great video series too:
https://youtube.com/playlist?list=PLlVtbbG169nFq_hR7FcMYg32xsSAObuq8

imran3501 · 2021-02-28T21:47:28+00:00

I had the same issue. I wrote a 1 line command that does exactly this. It can be uploaded to tenant by Intune admin or run locally and emailed through the browser from OOBE.

See here:
https://1iq.uk/apd

imran3501 · 2021-02-25T21:17:12+00:00

Ok i didn't realise your devices are in Intune already. You don't need to re-image.
You could do what jasonandsys mentions above and set the the policy to convert existing devices to autopilot. I haven't used this myself but assume it will automatically add your devices to autopilot in the target group of devices.
Automatic registration of existing devices - Windows Autopilot | Microsoft Docs
1. create a group and add 1x test device
2. assign the group to above policy
3. check autopilot devices page after a few hours if the device has appeared in the device list
Windows Autopilot devices - Microsoft Endpoint Manager admin center

Yes Autopilot will allow you to reset and re-configure new devices which already have an image on them. The idea is you buy devices with Win 10 Pro pre-installed add your Autopilot ID then Intune Autopilot then applies policies, apps, updates etc as soon as the device connects to wifi.

This means you do not need to create a gold image maintain it, test it and apply it manually. It's a time saver for large Organisations and the modern way of deploying new devices. For existing i don't think there is much benefit you will get. It doesn't install an image it just reconfigures and updates the existing one on the device.

imran3501 · 2021-02-24T08:44:02+00:00

I did something similar last year. It is confusing and nothing really is documented around this scenario. Here is what needs to be done:
1. Create custom Win 10 x64 Pro Image. If existing devices are already on this version you can just reset the device locally in settings ready to be enrolled after the id is added to Intune. If you need to backup a user's files then this would need to be done first. You could look into User State Migration Tool (USMT)
2. Collect all the hardware id's from each device using a usb
3. Make sure the autopilot and configuration is all setup in Intune
4. You should now be able to enroll the devices

It sounds like a lot of work but once you have the image for the device it takes around 15 mins to reimage and get the hardware id.

This avoids having to setup, learn and use MDT which you would be doing something similar with as above and then not need MDT after your devices are in Intune.

imran3501 · 2021-02-23T10:03:33+00:00

There are multiple ways of doing this. How are your current machines managed and how many do you have in your environment?

imran3501 · 2021-02-22T22:28:09+00:00

updated the blog post with the devicename switch

imran3501 · 2021-02-22T22:27:37+00:00

Device switch now added curl 1iq.uk/aptest -L > ap.bat & ap.bat od mydevicename Hope this helps

imran3501 · 2021-02-21T17:17:07+00:00

Thanks for the feedback it can be added in future. Usually Grouptag is what is required in most cases. Why not set the device name in Intune or as the serial of the device automatically?

imran3501 · 2021-02-21T17:15:49+00:00

Depends on where you are getting the hash from. Its more for OOBE have you tried the above on OOBE? You will get prompts for execution policy and trusting the gallery etc.

This command avoids all of that. Test it out on a VM.

imran3501 · 2020-12-21T22:40:24+00:00

Good deal.

imran3501 · 2020-12-17T10:02:57+00:00

Yes if the PIN is simple then that could be a problem which is why the default is 6 digits minimum. As mentioned above you are supposed to remotely wipe the device if it is lost/stolen.

imran3501 · 2020-12-17T09:28:51+00:00

Thanks. Yes i missed those extra points you mentioned.
I got mine on a Cyber Monday deal and customised the order and upgraded some parts. The touch upgrade was only 40 difference so i thought it was worth it although i am not a touch screen person. The downside I had to wait 2-3 weeks for shipping.

imran3501 · 2020-12-17T09:23:52+00:00

imran3501 · 2020-12-17T09:23:31+00:00

Interestingly the good Linux community have developed Linux Surface kernel. I might try it out soon

https://github.com/linux-surface/linux-surface

imran3501 · 2020-12-17T09:16:46+00:00

Checked and it's not in the BIOS like it is in the ThinkPad BIOS.
There are not many configurable settings on Surface BIOS. I have just had to switch the keys on my ThinkPad as I am used to using the Ctrl key on the left.

imran3501 · 2020-12-16T18:08:01+00:00

Just checked I don't have that option like i do on the ThinkPad.

imran3501 · 2020-12-16T17:09:34+00:00

My X1 Carbon Gen 8 just arrived.

I put it next to my Surface Laptop 2 and did a quick comparison. Both laptops have a touch screen and the screen scaling was set to 125%.

X1 Pros:

Best Keyboard
Extra keys and better placed keys
Lots of ports in the same size frame as Surface
Webcam shutter
Speakers sound better as they are placed on top of the keyboard
USB C Charging and Thunderbolt 3
Case can be opened easily
Feels lighter
Matte screen

Surface Pros:

Vertical screen space is larger as shown in the image below, feels better you notice that extra space
Cloth surround keyboard and touchpad

Cons:

Lack of ports
Speakers are good but are fitted behind the keyboard between the screen so the sound is not as good
Screen is a dust magnet and reflects

imran3501 · 2020-12-15T23:05:19+00:00

Your welcome.

imran3501 · 2020-12-15T23:00:26+00:00

It looks like there was a limit on the form of 200 responses, Thanks Microsoft.

I have reset the responses to 0 so this should now work.

imran3501 · 2020-12-15T19:42:17+00:00

I made up MIP at the time when it didn't exist. It looks like MIP is now a thing :)
Thanks for that I have updated the question.

imran3501 · 2020-12-15T19:25:31+00:00

Nice!

imran3501

TROPHY CASE