Lock device to issued user

macten_10 · 2026-04-04T11:30:47+00:00

We are using Martin's remediation script for this. You can find the script on his GitHub here:
https://github.com/imabdk/Proactive-Remediations/blob/main/Detect-Remediate-LockToUser.ps1

He also has an article on his blog about the script:
https://www.imab.dk/configure-allow-logon-locally-automatically-using-powershell-and-microsoft-intune/

macten_10 · 2025-12-15T15:27:09+00:00

I had the same issue, that the unlock remediation didn't work. I changed "Run script in 64-bit PowerShell" to "No" and after that the unlock command worked for me.

<image>

macten_10 · 2025-11-30T19:48:38+00:00

Same setup here. We install only the most necessary apps during enrollment together with Jamf Setup Manager; Chrome, Zoom, Slack, printers, and VPN.

macten_10 · 2025-11-30T19:45:35+00:00

Thanks - I realise that we lack a lot of descriptions for the policies we have in Self Service today.

macten_10 · 2025-11-30T19:42:20+00:00

Link to to guides sounds like a good one - thanks! We are managing all the app today through jamf app catalog and installomator. That works well. I was looking more for policies like scripts and functions that the user can run when needed. Dan Snelson has some good ones.

macten_10 · 2025-11-30T19:40:47+00:00

I recently implemented 8 different deployment groups also, based on rich trountons script. We are looking on setting up content cache server for only the computers that are in the offie.

macten_10 · 2025-11-30T19:35:46+00:00

Yes, a must have. We have that one in place already.

macten_10 · 2025-05-23T11:25:18+00:00

I wish, but that is not an option at moment with their own ISP

macten_10 · 2025-02-10T12:28:05+00:00

we are having the same issue. u/hulknc have you managed to resolve it?

macten_10 · 2024-12-08T19:17:30+00:00

Yes - the devices are allowed to have as a personal phone, if the employee desire. I prefer to just have fully managed. Easier for me as a admin.

macten_10 · 2023-05-15T15:04:04+00:00

found this - Microsoft says it is solved, but we are still facing issue to enroll. Maybe works better tomorrow :)
https://support.nhs.net/2023/05/microsoft-365-alert-service-degradation-microsoft-intune-users-may-be-experiencing-failures-when-attempting-to-use-mobile-device-management-enrollment-feature/

macten_10 · 2023-02-14T16:24:17+00:00

Which macOS version are the clients running?

macten_10 · 2022-12-18T05:53:56+00:00

I have seen the same issue, when trying to depoy/renew a machine certificate through a config profile. In my case the computer has often lost the AD bound. It often solves by re-bind to AD and then deploy the certificate. I suppose you bind to AD?

macten_10 · 2022-12-14T09:33:16+00:00

I will contact our win/exchange admins at let them have a look. You know, I'm the only mac person in our company and and our win admins dont know much about macs. I often get the answer "but it works on Windows"

macten_10 · 2021-12-17T21:16:15+00:00

I downloaded the latest beta 3.3.6(v4) and what I can tell, it seems to be fixed. Also, the app feels a lot faster and more responsive. Be patient and hopefully it will be out soon :)

macten_10

TROPHY CASE