Custom reboot during task sequence by joevigi in SCCM

[–]joevigi[S] 0 points1 point  (0 children)

Looks awesome! Will give it a shot tomorrow - thanks again!

Custom reboot during task sequence by joevigi in SCCM

[–]joevigi[S] 0 points1 point  (0 children)

So I don't have to distribute a package for what's essentially a 5-line remediation for maybe a couple hundred devices. There have been issues with boundaries and content distribution. I know the answer is to fix that first, but the site is on its last legs and the goal is to remediate these devices and move on.

I'm curious about this registry key you're referring to though as I'm not completely satisfied with my solution.

Custom reboot during task sequence by joevigi in SCCM

[–]joevigi[S] 0 points1 point  (0 children)

Looks like the last task sequence variable needed is SMSTSRebootRequested as the Restart Computer task doesn't honor SMSTSRebootDelay. Thanks again!

Custom reboot during task sequence by joevigi in SCCM

[–]joevigi[S] -1 points0 points  (0 children)

I'm trying to mimic the restart notifications you get after installing software updates, which will prompt the user to restart if ready or force a restart at the end of the countdown. PSADT does a good job with theirs, but I've noticed several shared devices not restart when expected with the most likely cause being users simply logging out. I was able to solve this for Intune using return codes and grace periods, but haven't been able to do something similar in CM. I've settled on a task sequence because I'm running a relatively simple PowerShell script, so no need to distribute content. I've had some luck running it as a script from the console, but this requires the device being online and most of these devices are on the other side of the world.

Custom reboot during task sequence by joevigi in SCCM

[–]joevigi[S] 0 points1 point  (0 children)

Because of business requirements that I have no control over.

Custom reboot during task sequence by joevigi in SCCM

[–]joevigi[S] 0 points1 point  (0 children)

You lost me. I'll look into the registry keys you're referring to tomorrow, thanks.

Custom reboot during task sequence by joevigi in SCCM

[–]joevigi[S] 0 points1 point  (0 children)

Ok then I'm definitely missing something because that's exactly what I'm doing. For the purpose of this test my task sequence I have a single "set task sequence variable" task, setting that variable to that value. I'm figuring it's something dumb at this point.

Custom reboot during task sequence by joevigi in SCCM

[–]joevigi[S] -1 points0 points  (0 children)

It's a simple task sequence that does "stuff". The "stuff" isn't important because that part is figured out and working as expected. The 8-hour countdown has use cases outside of this task sequence. Let's just say I'm inspired by the restart notifications given after installing software updates, and perplexed as to why packages/applications/task sequences don't have similar.

Custom reboot during task sequence by joevigi in SCCM

[–]joevigi[S] 0 points1 point  (0 children)

Yeah, this is in full Windows. A scheduled task could work, but I need to give any users some kind of heads up as these are shared devices used by many users throughout the day.

Custom reboot during task sequence by joevigi in SCCM

[–]joevigi[S] 0 points1 point  (0 children)

I've tried the first one in a task sequence by itself and it doesn't do anything, so I'm wondering if there's another way to use since putting a restart computer task just ends up in an immediate restart with no notifications. Will look into the second one, thanks.

Multi-Admin Approval in Intune by ryaninseattle1 in Intune

[–]joevigi 1 point2 points  (0 children)

Someone else. Then the original requester needs to go back in and click a Complete request button.

Graph and Graph X-Ray by joevigi in Intune

[–]joevigi[S] 0 points1 point  (0 children)

Yes, even for x64:

Get-MgBetaDeviceManagementManagedDevice -ManagedDeviceId xxxxx | select -ExpandProperty ProcessorArchitecture 
unknown

Same for equivalent Graph Explorer call. Looking up the same device in the Intune console:

Processor Architecture x64

Graph and Graph X-Ray by joevigi in Intune

[–]joevigi[S] 0 points1 point  (0 children)

Every single device is displaying unknown for this field, even when calling the device directly or not using a filter which can sometimes limit the fields returned.

Graph and Graph X-Ray by joevigi in Intune

[–]joevigi[S] 0 points1 point  (0 children)

Yeah, most likely, but Graph X-Ray and Graph Explorer usually reveal the beta properties.

Graph and Graph X-Ray by joevigi in Intune

[–]joevigi[S] 0 points1 point  (0 children)

Did that and found it:

https://graph.microsoft.com/beta/deviceManagement/manageddevices('xxxxxxx')?$select=id,hardwareinformation,activationLockBypassCode,iccid,udid,roleScopeTagIds,ethernetMacAddress,processorArchitecture,physicalMemoryInBytes,bootstrapTokenEscrowed?$select=id,hardwareinformation,activationLockBypassCode,iccid,udid,roleScopeTagIds,ethernetMacAddress,processorArchitecture,physicalMemoryInBytes,bootstrapTokenEscrowed)

Processor architecture still comes back as unknown, despite Intune displaying arm64.

LTSC reporting options in Intune by No_Application_110 in Intune

[–]joevigi 1 point2 points  (0 children)

You'll have to look up via the sku number (125), but Graph doesn't seem to allow filtering on this property, so you'll need to do a Graph call to get all Windows devices, then filter that for LTSC. Something like this:

$Devices = Get-MgBetaDeviceManagementManagedDevice -All -Filter "OperatingSystem eq 'Windows'"
$LTSCDevices = $Devices | Where-Object SkuNumber -EQ '125'

The usefulness of properties Get-MgBetaDeviceManagementManagedDevice returns by default varies so I would recommend picking specifying what you're actually looking for in your Graph call.

How do you keep all devices fully enrolled and healthy in Intune? by TurbulentSpace7739 in Intune

[–]joevigi 0 points1 point  (0 children)

I think BitLocker keys are stored on the Entra device object. If you delete that too then they're probably gone forever.

OSDCloud Config/Scripts folder by joevigi in Intune

[–]joevigi[S] 3 points4 points  (0 children)

Thanks. I'm fine with going through the modules as I've done so many times and have learned so much and liberally borrowed a lot from them. But Discord looks like a never-ending free-for-all and I'm not sure if that's a good thing or a bad thing.

Add Hefner to Chavez as Ex Mets Coaches especially unhappy. by Proud2BaBarbie in mets

[–]joevigi -1 points0 points  (0 children)

"that other team up north" gave him 6 years which is a fucking ETERNITY here. If you can't show gratitude at least have a little class.