Modifications to Endpoint manager (HELP)
Hello, I have some Sufaces subscribed to Endpoint Manager. Due to physical changes, I need to change some. What I did was "clone" a group that was already created, and pass some surfaces to the new group I created, however it gives me this…
Microphone access to voice commands on HL2
I am locking down a Hololens 2 with MS Intune. I need to deny access to the microphone for all apps other than my LOB custom app. I use the CSPs LetAppsAccessMicrophone: force deny policy and then whitelist my app using…
Uninstalling Google Drive through Win32 not Powershell
So, I'm trying to have Intune uninstall Google Drive, and I'm using the Intune Win Utility. I have tried both way. Neither work. The Registry Key is correct, I've checked it multiple times. The only thing I can think of is that the uninstall command is…
Remove a provisioning package
Hello Please i need your help on this issue. We are trying to remove a provisioning package and obtaining full admin provision on a computer PC. I want to remove a user's computer from the device Intune management. To give the user full access so she…
How to enable the "set time zone automatically" for all users on Azure
Our devices are all managed by Azure DevOps. All of our US employees are remotely based and travel frequently, both domestically and internationally. Currently, our devices all have the "set time zone automatically" option disabled (it's…
Issues with Intune Configuration Profile for Disabling Microsoft Store
Is there any known conflict between Intune configuration profiles and applying them to Windows 10/11 PCs? I am trying to disable the Microsoft store for non-admin field users to improve our endpoint security. I have already made the profile, tested it on…
![](https://techprofile.blob.core.windows.net/images/uRgLOXvYlECsoSK6yXqyfA.png?8DA102)
0x87d1fde8 Error Code Intune
I've created a Configuration Policy through Intune for Windows devices, so that after one minute of inactivity the laptop goes to lock screen. However I'm getting this error and I have no idea as to why. MaxInactivityTimeDeviceLock DataType:Integer…
How to stop user from ‘System Properties’ only?
I have my client window 10 device domain joined with AZURE AD, and I am using Intune for the management. I want to assign the TestUser with permission to everything on the domain joined device except for going to ‘System Properties’ and add On-Premises…
Issue with FIDO2 Security Key Sign-in on Hybrid AD Joined Machine
Hello Team, I am encountering an issue with a Hybrid AD joined machine where I am unable to log in using FIDO2 security keys for Windows Hello for Business. Below are the details of the setup: System Details: Hybrid AD Joined PC: Operating System:…
How can standard users on a Windows 10 device remove bluetooth devices without admin credentials?
Is there a way to get around the restriction that standard users on a Windows 10 device are unable to remove bluetooth devices without admin credentials? Can this be achieved using policies or other admin settings?
Windows 11 Autopilot enrolled devices are not getting encrypted
Having issues with windows 11 devices getting enrolled with autopilot. The Bitlocker doesn't kick in and when I try to run the manually I get the error "The Group Policy settings for BitLocker startup options are in conflict and cannot be applied.…
Set up new company computers on intune to be restricted to work purposes only
Hello, I purchased new laptops running windows 11 pro for the company. I'd like to set up these computers to be restricted to work purposes only. Restrictions such as software or app installations, personal emails, usb and external storage devices,…
How to enable and see the Remote assistance options?
I using Intune to fully manage a android tablet. I deployed TeamViewer, TeamViewer Host, TeamViewer QS and Remote help, but I can't find anything for Remote assistance option. I also assigned Microsoft Intune Remote Help License myself as a admin and to…
What is the product ID for Visio and Project Online Desktop client, in the Office Configuration XML
I am trying to create an xml document to uninstall a previously deployed instance of Visio and Project Online Desktop using intune. In the normal case these apps are removed from the suite using an exclude app tag like: <ExcludeApp…
Android phone; Security policy prevents installation of this application
I have user that are using their personal phones to register with Intune to register and that device is compliant. A user has an application that is needing to be updated but is met with this error message " Security policy prevents installation of…
Windows 11 23h2 inplace through Intune
Hi All, We are performing feature Inplace upgrade from Windows 10 22H2 to Windows 11 23h2 through Intune Feature update policy. But I would like know of below limitation about restart and notification to the end users. Can we have custom notification…
Changing per-app VPN profile assignment from user group to device group
Is it possible to swap the assignment of a per-app VPN configuration profile from a user group to a device group without affecting the users? The profile settings will remain the same; only the assignment needs to be changed.
![](https://techprofile.blob.core.windows.net/images/QxtuBtKPXkyIXZ8r8-5FTA.png?8DB0A7)
Export & import Intune tenant settings (Windows | Configuration profiles)
I have tried the following but seems like not working between Azure…
Intune - MDM ConfigurationManager: Command failure status - Error: The parameter is incorrect.
Hi, to control some Windows workstations, I configured some administrative templates and attack surface reduction policies. The policies seem to be partially pushed to the devices. I see following error: MDM ConfigurationManager: Command failure status.…
How to set up Intune android device custom background?
I am using Intune to manage a fully android device (Tablet 13 Vortex), but every time I go to Configuration> Device Restriction> then Device Experience and put the URL of public background it doesn't work. no matter what kind of link i do, it…