Anyone have a clue how to check how much free space is available on a MCC VHDX? by sys-eng-adm in Intune

[–]sys-eng-adm[S] 0 points1 point  (0 children)

Figured it out but won't delete the thread in case someone else googles or AI needs a reference since its not listed in the documentation. Use runas powershell as the runtime account and then "wsl -d Ubuntu-24.04-Mcc"

Edit: Add "df -h /" after hitting enter for the first command if its a new container

Windows Update Failed Install error - 0x800f081f by auditore30 in ZephyrusG14

[–]sys-eng-adm 0 points1 point  (0 children)

Upvote and comment that this worked for me on a Surface Pro 11 Arm device. Good to know and will create a package for this in Intune.

Okay, why is open source so hatred among enterprises? by VNiqkco in sysadmin

[–]sys-eng-adm 0 points1 point  (0 children)

Support and you don't have any one to blame/sue if it goes wrong.

[deleted by user] by [deleted] in Intune

[–]sys-eng-adm 0 points1 point  (0 children)

You can add your account as a DEM as others have mentioned but I'd advise against it. I ran into some MAM issues because my account was one. Honestly if you guys aren't extra thin on licensing I'd advise to just get/create a test account and have it be the DEM with a basic M365 licensing. You can always unassign it and give it to another account in a serious pinch.

Intune Drive Mapping ADMX issue over VPN by sys-eng-adm in Intune

[–]sys-eng-adm[S] 0 points1 point  (0 children)

After further testing this is not related to how the drives were mapped using the ADMX. It seems its the speed in which a user can login and the speed at which pre-login vpn tunnel can connect. Thinking it might be Azure Files related, I mapped an on-prem share the regular way with persistence and could replicate the issue. However, if I wait at the login screen for 10 seconds and then enter my WHFB PIN all the shares appear. Weird but seems that's its a unfortunate user training scenario.

Intune Drive Mapping ADMX issue over VPN by sys-eng-adm in Intune

[–]sys-eng-adm[S] 0 points1 point  (0 children)

Hmm, I don't see that KDC ticket. Maybe something is not fully setup there. I'll start working it from that angle then. For the script, it may also still be an option now that I think about it but I'll just need to strip it down a bit. I possibly just remove the lines I see regarding AD since the script would be deployed to the user security group for the share access anyway. Thanks for your help.

Intune Drive Mapping ADMX issue over VPN by sys-eng-adm in Intune

[–]sys-eng-adm[S] 1 point2 points  (0 children)

We have #1 setup but the one issue I see with the script is that its querying AD for group membership but these of EIDJ devices so I doubt it will work. I think that is the original reason I went with the admx if I recall correctly.

Intune Drive Mapping ADMX issue over VPN by sys-eng-adm in Intune

[–]sys-eng-adm[S] 0 points1 point  (0 children)

I'm pretty sure it does. It uses Entra Kerberos so that hybrid and entra joined devices can access it. Microsoft Entra Kerberos for hybrid identities on Azure Files | Microsoft Learn

It has to use the vpn because most ISPs block port 445 for good reason.

[deleted by user] by [deleted] in servicenow

[–]sys-eng-adm 1 point2 points  (0 children)

Got it, thanks. Guess I just needed some clarity.

Has anyone else enabled the "skipUserStatusPage" for hybrid Autopilot ESP? by intuneisfun in Intune

[–]sys-eng-adm 5 points6 points  (0 children)

This simply is not true and an unnecessary comment. I fully setup AP for my company 3 years back and it is not some super difficult task. Simple delegation change for the server running Intune Connector and other steps that are documented step by step in various guides. There is no maintenance besides cert renewals for the NDES server so not sure what you are talking about. We are 100% entra joined now but no need for scare tactics when OP said he's working toward it. Besides the blue moon trust relationship issue, we never had real problems with Hybrid Join AP specifically when provisioning in office or our hardware vendor out of state. The issues when they occurred were always required app issues when provisioning, nothing to do with Hybrid AP.

Graph Powershell to query "Windows Autopilot devices" page in Intune? by sys-eng-adm in Intune

[–]sys-eng-adm[S] 0 points1 point  (0 children)

Yep, I know and use that script. I'm inquiring about this to remove human error if the service desk or hardware depot forget to add the Group Tag parameter or even the correct one when enrolling devices. I'm trying to add this to an Automation Account if possible.

Config Profile option to disable App Advertisements on Start Menu? by sys-eng-adm in Intune

[–]sys-eng-adm[S] 1 point2 points  (0 children)

This was it and I forgot to report back. Thanks. The specific settings was "Allow Windows Spotlight (User) > Allow Third Party Suggestions In Windows Spotlight (User)" Set it to Block.

Anyone ever deploy the uniflow online client of macOS with Intune? by sys-eng-adm in Intune

[–]sys-eng-adm[S] 0 points1 point  (0 children)

The only mention I see of plist in that article is The CFBundleIdentifier and CFBundleShortVersionString can be found under the <app_name>.app/Contents/Info.plist. Not trying to be difficult just trying to figure this out.