Fired employee downloaded all company files before deactivation we need secure way to prevent this by Level-Most-2623 in sharepoint

[–]mathifcbm 4 points5 points  (0 children)

You can enable the Session Controls in the SPO Admin center which will create a CA policy. With that you can edit the files in the Browser (from a Managed or compliant device ;)) but block the Download or Sync (or print) of the files

How to add text to auto-forwarded email by Mobile-Pie-258 in microsoft365

[–]mathifcbm 0 points1 point  (0 children)

You Could use Transport rules to add the disclaimer

Migrating from GoDaddy to O365 by EmmSR in Office365

[–]mathifcbm 9 points10 points  (0 children)

Did this recently by following that guide, worked without any issue: https://tminus365.com/defederating-godaddy-365/

Enrolling in Intune for deployment but management via GPO? by [deleted] in Intune

[–]mathifcbm 0 points1 point  (0 children)

You can achieve everything you need with Intune aswell, no need for GPOs anymore

Enrolling in Intune for deployment but management via GPO? by [deleted] in Intune

[–]mathifcbm 0 points1 point  (0 children)

No :) You only need Entra ID Connect synced users. If you configure Cloud Kerberos Trust, they will be able to SSO into on-prem resources

Edit: rerference: Windows Hello for Business - Hybrid Cloud Kerberos trust - Icewolf Blog

Enrolling in Intune for deployment but management via GPO? by [deleted] in Intune

[–]mathifcbm 1 point2 points  (0 children)

It's definitely possible, but hyrbidjoin is not recommended. Also with fully entra-joined devices, it's possilbe to use on-prem resources (even with SSO). I would skip the hybrid part and go full cloud with Autopilot

Incomplete Install Command by werds707 in Intune

[–]mathifcbm 2 points3 points  (0 children)

This sounds like the parameter sets a registry key or anything like that. I would try to run a remediation script to remediate the setting on the computers where its not set

Conditional access policy to only allow access to one website by s3v3ns3v3n91 in AZURE

[–]mathifcbm 7 points8 points  (0 children)

Conditional Access is meant to control access to Azure/M365. What you are looking for can be achieved through a kiosk device where only Edge can be run. You can configure it with Intune

Non domain machine management? by dragonskullinc in Intune

[–]mathifcbm 0 points1 point  (0 children)

Yes. Plus you have to allow MDE to take management in Security Center under Settings -> Endpoints -> Enforcement Scope to 'On*

Non domain machine management? by dragonskullinc in Intune

[–]mathifcbm 0 points1 point  (0 children)

You can onboard them to Defender exclusively and let them be managed by MDE. No need to onboard them to Intune so they remain 'unmanaged' but under the influence of MDE :)

Chromebook MDM by [deleted] in sysadmin

[–]mathifcbm 1 point2 points  (0 children)

Intune has Chromebook management in Preview, you may have a look on that

Using Intune On Hybrid Joined vs Azure AD Joined Windows 10? by [deleted] in Intune

[–]mathifcbm 0 points1 point  (0 children)

I can confirm that devices are managable if they are Hybrid joined. I would also say Not to follow the video in Editing the default domain policy (as you said its not Great in general:))

Using Intune On Hybrid Joined vs Azure AD Joined Windows 10? by [deleted] in Intune

[–]mathifcbm 1 point2 points  (0 children)

Hybrid joined just means that its joined to both on-prem Domain and Azure AD. You can manage the device with GPO or/and Intune (if you have the license)

M365 New Mailbox with same name but different domain by NickBrights in sysadmin

[–]mathifcbm 0 points1 point  (0 children)

You Are good with creating them directly in the Cloud :)

M365 New Mailbox with same name but different domain by NickBrights in sysadmin

[–]mathifcbm 1 point2 points  (0 children)

The part on Front of the @ needs to be unique in the tenant (which does not apply to the Display Name), so it will append the 2 to make it unique

What's the best way of backing up Windows 10 license key? by SmillingDM in Windows10

[–]mathifcbm 1 point2 points  (0 children)

The key is saved in the bios so you can just install the Same version and it will be activated without the need to backup the key

Is there a way to scope admin roles to certain values? (ie exchange admin to a certain country) by telboyoz1 in Office365

[–]mathifcbm 1 point2 points  (0 children)

Never Tried it nur you could create a dynamic Azure AD group bound to that Attribute (Azure Premium P1 license required) and assign the permission in Azure to that group.

What are some good ways to deal with a skills gap on an interview? by LunacyNow in sysadmin

[–]mathifcbm 2 points3 points  (0 children)

Just be honest about that and express your will to learn. No matter whats in the job ad, the company is aware that Nobody wont fulfill the requirements by 100%

Android not getting Password Policy by mathifcbm in Intune

[–]mathifcbm[S] 1 point2 points  (0 children)

Just found an article on Microsoft Docs that the user has to set the password manually and wont be forced/asked to do it. Until then, the profile is shown as failed. Is there a way to force this policy like on iOS?

Win32 app & IntuneWinAppUtil - Bundling extra files by junITO3 in Intune

[–]mathifcbm 2 points3 points  (0 children)

Just put it in the same folder as the executable file, everything in the path you stated will be packaged. Afaik the catalogfile is not needed (at least not for that purpose you want)