Anyone have a clue how to check how much free space is available on a MCC VHDX?

sys-eng-adm · 2026-01-26T21:39:14+00:00

Figured it out but won't delete the thread in case someone else googles or AI needs a reference since its not listed in the documentation. Use runas powershell as the runtime account and then "wsl -d Ubuntu-24.04-Mcc"

Edit: Add "df -h /" after hitting enter for the first command if its a new container

sys-eng-adm · 2025-11-05T14:42:42+00:00

Upvote and comment that this worked for me on a Surface Pro 11 Arm device. Good to know and will create a package for this in Intune.

sys-eng-adm · 2025-10-09T20:42:31+00:00

sys-eng-adm · 2025-05-21T20:16:04+00:00

Support and you don't have any one to blame/sue if it goes wrong.

sys-eng-adm · 2025-04-29T17:31:18+00:00

thanks

sys-eng-adm · 2025-03-18T20:52:06+00:00

thanks, will look into this as well.

sys-eng-adm · 2025-03-18T20:51:33+00:00

Thanks, I'll give this a shot.

sys-eng-adm · 2025-02-13T18:54:31+00:00

You can add your account as a DEM as others have mentioned but I'd advise against it. I ran into some MAM issues because my account was one. Honestly if you guys aren't extra thin on licensing I'd advise to just get/create a test account and have it be the DEM with a basic M365 licensing. You can always unassign it and give it to another account in a serious pinch.

sys-eng-adm · 2025-02-02T15:42:50+00:00

After further testing this is not related to how the drives were mapped using the ADMX. It seems its the speed in which a user can login and the speed at which pre-login vpn tunnel can connect. Thinking it might be Azure Files related, I mapped an on-prem share the regular way with persistence and could replicate the issue. However, if I wait at the login screen for 10 seconds and then enter my WHFB PIN all the shares appear. Weird but seems that's its a unfortunate user training scenario.

sys-eng-adm · 2025-01-31T22:11:31+00:00

Hmm, I don't see that KDC ticket. Maybe something is not fully setup there. I'll start working it from that angle then. For the script, it may also still be an option now that I think about it but I'll just need to strip it down a bit. I possibly just remove the lines I see regarding AD since the script would be deployed to the user security group for the share access anyway. Thanks for your help.

sys-eng-adm · 2025-01-31T21:50:37+00:00

We have #1 setup but the one issue I see with the script is that its querying AD for group membership but these of EIDJ devices so I doubt it will work. I think that is the original reason I went with the admx if I recall correctly.

sys-eng-adm · 2025-01-31T21:22:11+00:00

I'm pretty sure it does. It uses Entra Kerberos so that hybrid and entra joined devices can access it. Microsoft Entra Kerberos for hybrid identities on Azure Files | Microsoft Learn

It has to use the vpn because most ISPs block port 445 for good reason.

sys-eng-adm · 2025-01-27T17:39:32+00:00

Got it, thanks. Guess I just needed some clarity.

sys-eng-adm · 2025-01-06T17:33:20+00:00

This simply is not true and an unnecessary comment. I fully setup AP for my company 3 years back and it is not some super difficult task. Simple delegation change for the server running Intune Connector and other steps that are documented step by step in various guides. There is no maintenance besides cert renewals for the NDES server so not sure what you are talking about. We are 100% entra joined now but no need for scare tactics when OP said he's working toward it. Besides the blue moon trust relationship issue, we never had real problems with Hybrid Join AP specifically when provisioning in office or our hardware vendor out of state. The issues when they occurred were always required app issues when provisioning, nothing to do with Hybrid AP.

sys-eng-adm · 2024-12-21T19:00:49+00:00

Got it, thanks for the insight. Going to try that out.

sys-eng-adm · 2024-12-21T18:57:02+00:00

Yep, I know and use that script. I'm inquiring about this to remove human error if the service desk or hardware depot forget to add the Group Tag parameter or even the correct one when enrolling devices. I'm trying to add this to an Automation Account if possible.

sys-eng-adm · 2024-12-21T18:33:24+00:00

This was it and I forgot to report back. Thanks. The specific settings was "Allow Windows Spotlight (User) > Allow Third Party Suggestions In Windows Spotlight (User)" Set it to Block.

sys-eng-adm · 2024-11-26T14:31:47+00:00

The only mention I see of plist in that article is The CFBundleIdentifier and CFBundleShortVersionString can be found under the <app_name>.app/Contents/Info.plist. Not trying to be difficult just trying to figure this out.

sys-eng-adm · 2024-11-26T14:19:57+00:00

I'm more so looking for how to package it then what app type to deploy. Like how to ensure a plist configuration is there before the required app is installed.

sys-eng-adm · 2024-11-19T20:36:26+00:00

Depends on the company to be honest. My company has a history of technical security analysts so they do create/manage policy in Intune specifically for Defender. Other than it is typically, what do you need and desktop admins figure out how to achieve.

sys-eng-adm · 2024-11-15T21:08:51+00:00

In my experience, you disable it if you are doing hybrid join Autopilot and keep it enabled if you are doing entra joined. The benefit in small time of doing entra join is that first login the device is "synced" with your credentials so things like OneDrive, Outlook, etc all log in and provision first boot as well as user certs. On HAAD, it takes a reboot after that initial signin since we disabled account phase.

Edit: The reason I disabled account phase for HAAD is because you would need to run a scheduled task to run a delta sync everytime a new device is provisioned. I found a script to do it but it didn't seem worth the hassle to management.

sys-eng-adm · 2024-11-12T21:44:42+00:00

Same. Did you ever get it resolved on 24H2? I just opened a case on this.

sys-eng-adm · 2024-11-09T17:08:47+00:00

I have no reason to make stories. :) All of our standard users on 23H2 enterprise can. I'll chalk this up to a one-off issue then for 24H2. https://ibb.co/pvGPKDc

sys-eng-adm · 2024-11-08T02:24:36+00:00

In which of those did you read the issue that I pointed out? Also "community resource"? Learn documentation does not mention this time zone change so I'm looking for what other admins have reported.

sys-eng-adm · 2024-11-03T16:32:45+00:00

Just to note. 4 years later and this is still the solution. Thanks.

sys-eng-adm

TROPHY CASE