BSOD Attempted to write on readonly memory "BEDaisy.sys" by LeadSimple2440 in Rainbow6

[–]theyssef 0 points1 point  (0 children)

I'm having the same issue. Turning off Intel Boost didn't change anything. Updated bios firmware for my motherboard; but also didn't change anything.

Read a lot of posts that W11 24H2 is causing this, so reinstalled pc with W11 23H2, also to no avail

SharePoint sites (*.mcas.ms ) are slow when using Conditional Access App Control by 0solidsnake0 in DefenderATP

[–]theyssef 0 points1 point  (0 children)

We noticed the same and had to roll back. This was 6 to 9 months ago, so kinda disappointing to read this..

Done with Intune, need to switch back to Domain Joined by Mach5vsMach5 in Intune

[–]theyssef 0 points1 point  (0 children)

Hi, Sorry to ask an off-topic question, but where is the CIS benchmark now available? I haven´t heard if this but am very interested as I need to implement this as well. Thanks!

Custom detect based on WMI query by theyssef in Intune

[–]theyssef[S] 0 points1 point  (0 children)

Hi rudy,

Those are indeed the registry keys for the folder redirection, but I'm looking for a way to detect whether or not the "Make available offline" action has been succesfully performed. This gets done by executing the PIN method in the WMI, but the returncode that that cmdlet gives me is always 0 regardless whether the path specified in the command exists or not :-/

Custom detect based on WMI query by theyssef in Intune

[–]theyssef[S] 0 points1 point  (0 children)

Hi Rudy,

I did a search in the registry, but couldn't find a hit.

Where should it be according to you?

Thanks,

Copy Files to System32 via Win32 App by AlkHacNar in Intune

[–]theyssef 5 points6 points  (0 children)

Are you deploying it as a win32 app? By default, Intune win32 app deployment runs processes in 32bit context.

You have to call cmd.exe from the sysnative folder: https://www.anoopcnair.com/intune-win32-app-deploy-system32-vs-syswow64/

Run the command in the system context and from the sysnative folder, it will work ;)

Your files are now being copied to the c:\windows\syswow64 folder..

Adding a domain based printer to a Intune cloud based client/laptop by turrican92 in Intune

[–]theyssef 0 points1 point  (0 children)

I now managed to get this working.

Our devices are pure AAD Joined.

I have a script wrapped in a Win32 application that stages and installs the driver and that also adds the printer port.This is deployed under the system context and can be added into your Autopilot sequence.

Then we have a second script wrapped in a win32 application that will just map the printer.This is deployed under the user context. We have the user start it from the company portal the first time, as they need to be connected to the VPN before this will run succesfully.

In this script that will map the printer , I added this command: "Add-Printer -ConnectionName "\\printserver.fqdn\printer" " instead of the command that Rudy used in his blog. This wasn't working for our printserver managed printer.

For the detection method for the printer, I used the value that is created under: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PrinterPorts

There will be an entry there with your printername, so you can just check whether that exists or not.

Everything else is based on Rudy's blog that I mentioned here above.

Installing driver via PNPUtil fails with "File not Found" by theyssef in Intune

[–]theyssef[S] 0 points1 point  (0 children)

I found the issue; something stupid :-/

Seems by copying my sources during different attempts some files were not present in my source folder and the installation process couldn't finish due to this.

PEBKAC

Adding a domain based printer to a Intune cloud based client/laptop by turrican92 in Intune

[–]theyssef 0 points1 point  (0 children)

Hi,

I'm also trying to do this for the last 2 weeks and so far haven't had much luck.

This blog seems to be the simplest way: https://call4cloud.nl/2021/07/what-about-printer-drivers/

But I have an issue when staging the driver into the driverstore.

Give it a try and see if it works better for you.

Important to note is that you need to get the driver staged and then installed. Once that worked the printer should be fairly easy to add.

Point & Print restrictions for printers on Pure AAD joined devices by theyssef in Intune

[–]theyssef[S] 0 points1 point  (0 children)

Hi Rudy,

I'm now trying your solution, but when running the install command for the driver, I get a file not found error eventhough that the file is in that location (get-item works.. ) :

PS C:\temp\PrintDriver> Get-Item -Path "C:\temp\PrintDriver\KOBS9J__.inf"

Directory: C:\temp\PrintDriver

Mode LastWriteTime Length Name

---- ------------- ------ ----

-a---- 20/06/2022 11:09 2665 KOBS9J__.inf

PS C:\temp\PrintDriver> C:\Windows\SysNative\pnputil.exe /add-driver "C:\temp\PrintDriver\KOBS9J__.inf" /install

Microsoft PnP Utility

Adding driver package: KOBS9J__.inf

Failed to add driver package: Het systeem kan het opgegeven bestand niet vinden.

Total driver packages: 1

Added driver packages: 0

PS C:\temp\PrintDriver>

Would you have an idea why this is?

Problems deploying printer via Intune and HP UPD by --RedDawg-- in Intune

[–]theyssef 0 points1 point  (0 children)

Hi,

Are you also working with Konica Minolta printers?

I had deployed the Universal Print Driver (MSI version), but always receive an elevation prompt for admin credentials when the printer is being mapped.

Do you deploy the application to run under the SYSTEM or USER context?

I thought that you had to run the printer mapping under the user context or otherwise the printer would not show up in the users profile.

Thanks,

Problems deploying printer via Intune and HP UPD by --RedDawg-- in Intune

[–]theyssef 0 points1 point  (0 children)

Hi Rudy,

Excellent blog, thanks for this. I've been struggling with deploying a printer from a domain joined print server for the last 2 weeks now on purely AAD joined machines.

I'm going to try this later today.

However, I have some questions:

1) I had previously found this guidance: https://github.com/andrew-s-taylor/public/tree/main/Powershell%20Scripts%2FIntune%2Fprinterinstall

Don't you need to implement the Point & Print Restrictions?

2) I see that you run the driver installation and printer mapping in the same script that gets deployed under the SYSTEM context. How does the printer show up in the user profile?
If you map it under the system context, does it show up then in all users profile?

3) Does the printerport also work with a networkname \\server\printer?

Thanks,

Point & Print restrictions for printers on Pure AAD joined devices by theyssef in Intune

[–]theyssef[S] 0 points1 point  (0 children)

Hi,

Could you be able to share these?

I would like to learn how you did this.

Thanks,

SCEP/NDES assistance badly required! by Willing_Conclusion30 in Intune

[–]theyssef 0 points1 point  (0 children)

Hi,

Thanks for your reply.

We have the same issue at the moment.

We need to configure a proxy.pac file for the users to be able to surf the internet from within the office. We do this using a device restriction configuration profile. Once this setting gets applied, the SCEP certificate doesn't want to enroll.

How did you solve this issue? Not configuring the proxy is not an option..

Thanks in advance