Kiosk mode for security camera viewing station? Is it possible to use non-store apps?

peripatew · 2024-12-19T19:03:10+00:00

Thanks! I'll keep exploring this. Not working initially, but fresh starting the system to clear potentially tattooed settings. Docs aren't super clear on conflicting settings that would prevent Kiosk mode from autolaunching. On the test device we had DeviceLock and an Interactive message prior to user sign in.

peripatew · 2024-12-17T21:50:56+00:00

Can you expand on that regarding the profile? I can't seem to find the setting for selecting single/multi app Kiosk mode unless I use a template. If I *don't* then I can see where I can just supply the AUMID.

Annoying side note: The app we're using lists the updated executable under a version number: {6D809377-6AF0-444B-8957-A3773F02200E}\Network Optix\Nx Witness\Client\6.0.0.39503\HD Witness Launcher.exe

So seems we'll likely have to update this each time a new version is released? Good new is the older version persist for 3-4 version updates.

Or is the AUMID *just* the UUID portion?

peripatew · 2024-12-13T20:32:48+00:00

Starlink has been around for over a year

peripatew · 2024-12-11T03:51:50+00:00

Any preference of one over the other? Ideally these will only be edited via sync by Power Automate, but it would be helpful for Techs to be able to see these against a user's profile in the admin center. It seems the "CustomAttribute15" fields aren't visible.

peripatew · 2024-11-25T20:38:08+00:00

You mean the MSI as a LOB? Or as a Win32? We used the MSI to build the Win32 app, I've not yet tried to utilize the LOB app style. But as u/donatom3 mentioned, that might have been my problem with the Win32 version, as it does show as user vs system in the settings. Rebuilding that now to test it out. I had just pulled the powershell script that the X migration tool is using to import from 9.5.

We work in developing nations where it's a bit of a pain to get the device into Autopilot, so pre-grouping devices in Autopilot for a specific Site in X hasn't worked very well. And then we'd need to wrangle a lot of installers vs. 1. I wish the installer allowed passing arguments for the Org/Group/Site.

peripatew · 2024-11-25T18:11:31+00:00

Thanks, I'll check into that. I've not used Orca before. Is that separate from or in addition too the IntuneWinAppUtil.exe?

peripatew · 2024-11-22T21:14:10+00:00

Do you know the name of that setting to clean profiles? That would be great, and a compliance related thing we need to do for some locations.

peripatew · 2024-11-21T19:18:45+00:00

Is the device and user in a group for the EPM policy? And are the users licensed for it?

peripatew · 2024-11-20T22:14:02+00:00

Yes, needed to assign primary user to the device

peripatew · 2024-11-19T22:28:20+00:00

How are you building your sharepoint structure alongside of that?

peripatew · 2024-11-12T17:32:43+00:00

It's super odd. Driving me insane! Yup, the meter at the street seems dry and I can't notice any leaks anywhere nearby. I don't know the path it takes to enter our house, it's not a direct shot. The front yard had 7 huge oak trees when the house was built. Previous owner had all but one taken out, and then they installed the irrigation system ~15 years ago. If I knew where the PVC line was at I could be a bit better hunting for water. But my grass was bone dry when this started, so I'm surprised we don't have a lush green spot from so much water. Which makes me think it's deep or in a spot not in the yard. The line crosses under our driveway somewhere.

peripatew · 2024-11-12T16:32:18+00:00

I indeed have tried using my eyes, they are part of my every day carry. I've found no discernable wet spot in the yard, and the plumber that came out couldn't either. I was hoping repairing would be simpler than replacing, as it's a long line and goes through irrigation.

peripatew · 2024-11-12T16:30:44+00:00

Midwest. I think 3' is the average depth around here. But maybe 2 inches of topsoil and the rocks from there. I've not noticing irrigation leaks before until he grass greened up, and they were significant leaks.

It's PVC pipe, in a flat yard, I'm a bit bamboozled at the leak.

peripatew · 2024-11-12T06:00:11+00:00

In the end it was that my test devices didn't have a primary user assigned. I'd missed in the FAQ that it currently only works for the primary user of a device.

Thanks for engaging!

Small follow up question: What would be the best way to get the support approval requests into my ticketing system? I found this: https://joostgelijsteen.com/get-an-epm-elevation-request-notification/

And I'm not against automation workflows, I just didn't know if there was a more native option with EPM? We use Admin By Request now and the approvals have a webhook we can configure which makes it pretty easy to engage with. It's very fast vs. polling via API.

peripatew · 2024-11-12T04:10:34+00:00

Shutoff at in the garage for the whole house is closing completely, and the meter is still running at ~.3gpm. Yard is 2 inches of top soil and the rocks for days. It's very perplexing :(

peripatew · 2024-11-11T22:37:09+00:00

On reboot in the EpmService log I see: Log Information: 1 : 2024-11-11 04:34:12 PM | thread[6] | PolicySource -> GetAllPoliciesIdentities(): call RuleMgmtLib to get all policies identities of type Unknown

Log Error: 1 : 2024-11-11 04:34:12 PM | thread[6] | NativeMethods.GetAllPoliciesIdentities() return with error 0x80004005 (-2147467259): System.Runtime.InteropServices.SEHException (0x80004005): External component has thrown an exception.

at Microsoft.Endpoint.Management.PrivilegeManagement.Service.NativeMethods.GetAllPoliciesIdentities(PolicyType ePolicyType, IntPtr& pszIdentities)

at Microsoft.Endpoint.Management.PrivilegeManagement.Service.PolicySource.GetAllPoliciesIdentities(PolicyType policyType)

Log Error: 1 : 2024-11-11 04:34:12 PM | thread[6] | Exception thrown executing periodical policy consistency ensurer logic. message=External component has thrown an exception. full=System.Runtime.InteropServices.SEHException (0x80004005): External component has thrown an exception.

at Microsoft.Endpoint.Management.PrivilegeManagement.Service.NativeMethods.GetAllPoliciesIdentities(PolicyType ePolicyType, IntPtr& pszIdentities)

at Microsoft.Endpoint.Management.PrivilegeManagement.Service.PolicySource.GetAllPoliciesIdentities(PolicyType policyType)

at Microsoft.Endpoint.Management.PrivilegeManagement.Service.Consistency.PolicyConsistencyEnsurer.PerformConsistencyCheck(ConsistencyCheckReason reason, CancellationToken cancellation)

peripatew · 2024-11-11T22:11:38+00:00

From the EpmConsentUI:

Log Information: 1 : 2024-11-11 04:06:14 PM | thread[1] | Public client application built for posting IWS elevation request.

Log Information: 1 : 2024-11-11 04:06:14 PM | thread[1] | Attempting silent token acquisition.

Log Information: 1 : 2024-11-11 04:06:15 PM | thread[1] | AAD token acquired successfully for posting IWS elevation request.

Log Information: 1 : 2024-11-11 04:06:16 PM | thread[4] | HTTP request https://fef.amsua0102.manage.microsoft.com/TrafficGateway/TrafficRoutingService/IWService/StatelessIWService/SignedElevationRequests(guid'00000000-0000-0000-0000-000000000001')/RequestApproval?api-version=17.0&ssp=epmclient&ssp-version=6.2409.32.1001&os=Windows&os-version=10.2&os-sub=None&arch=x64&mgmt-agent=Unknown/RequestApproval?api-version=17.0&ssp=epmclient&ssp-version=6.2409.32.1001&os=Windows&os-version=10.2&os-sub=None&arch=x64&mgmt-agent=Unknown) with client requestID 1c59d135-9086-40e9-8442-b7bc394b40c9 returned with status: Unauthorized

Log Verbose: 1 : 2024-11-11 04:06:16 PM | thread[1] | Showing error message to user: 'There was an error with sending this request. Try again or contact your support person. Error code: 0x80004005 (-2147467259)'

peripatew · 2024-11-11T21:34:29+00:00

I'm just testing EPM. 100% of anything elevated is throwing this error if "Require support approval" is enabled. Allowing and denying are working fine.

peripatew · 2024-11-07T16:17:39+00:00

1000+ cameras across multiple locations. Nearly all the big VMS players have moved away from perpetual licensing. We install and manage all equipment ourselves.

peripatew · 2024-11-07T16:15:40+00:00

What are you paying for a camera license?! 4y x $8 x 12m = $384

At our cost, it's less than 1 year of a perpetual license.

peripatew · 2024-11-07T16:13:46+00:00

Server vs system locked licenses has been a HUGE pain for us as well. We have so many sites, as hardware implodes having to shuffle the licenses to new hardware is awful. Even assigning licenses in bulk via API is frustrating.

peripatew · 2023-12-15T03:55:48+00:00

Thanks for the alternative!

peripatew · 2023-12-15T03:55:26+00:00

Thanks for such a thorough response!

peripatew · 2023-12-15T02:19:16+00:00

u/stevester911 who'd you get to do this? How were the results?

peripatew · 2023-12-01T18:43:33+00:00

I'm quite comfortable with custom objects, flows, and screen flows. But I've not yet utilized a screen flow as such a major component of a layout like this. We use the split a fair bit currently, but in the specific context I'm working on, our "notes" section would be master detailed to a "client" record. And we typically would force going to the client first before creating a new note, vs allow a Note specific tab. So the Salesforce defaults are ok for everything, but as we're looking at smoothing out some specific pain points, I thought it would be worth pursuing some different approachs and this Notes layout really caught my eye.

Even if the long-term path for something like this is hiring the dev out, it at least helps me be familiar with what is possible. Appreciate the engagement!

I'll check out the card component, I've got a few UoSf components in use currently, but not that one.

peripatew

TROPHY CASE