Office 365 Deployment Efficiency: Intune Strategies
Hi Expert, I have deployed Visio, Access, Project, and Publisher (O365) in my environment using SCCM. These packages are working perfectly fine individually and installing as expected. I have also created these packages in Intune, but there is an issue…
How to block USB devices in Mac from Intune.
Hi tried to block USB devices from Intune was creating the policy and getting the below error. MAC Usb policy .png
Issues Setting Up Edge Kiosk Browser In Windows 11 via Intune
My organization wants to deploy Kiosk computers that will be available to the public in our waiting rooms, but since the public will be using these computers, we ideally want to use a Kiosk profile so that they are basically only able to browse the web.…
Cannot get Intune to remove users as Administrators
Hello we are transitioning from AD to AZURE AD (not autopilot) and registering our devices with AZURE AD, and installing Intune from the Microsoft store on the endpoints afterword's, set to auto enrolment. We noticed that when we join the device to…
Authorization error from deploying management group to tenant using az cli with owner/contributor role.
Below is the error I got trying to deploy new management group. I have contributor role on my service principle. {"code": "AuthorizationFailed", "message": "The client '' with object id '' does not have…
SCCM console not working - Configuration Manager cannot connect to the site
Dear experts, Out of sudden, my SCCM console is not working at my win 11 client machine. It's been working just fine since May 2022 and I didn't recall there was any system change in recent days. Any idea how I can overcome this? I've tried…
Can't install app from company portal
A few users report that they can't install our apps from the company portal. Get below error message: "Your company hasn't made any apps available to you on this device" How to troubleshoot this issue?
Intune Android Compliance
Hi There, I have a compliance problem with the below two devices: The users used to enroll devices have Microsoft 365 E3 licenses (AD, Intune, etc... everything under Microsoft 365 E3) I have two Dynamic groups: a group for fully managed (Dynamic…
MacOS InTune-Enrolled Device. Keychain Access to 'Microsoft Workplace Join Key'
I have a MacBook with Monterey OS that is enrolled through Intune. For some reason when the user attempts to access SharePoint online through Google Chrome she receives a prompt "Google Chrome wants to sign using key "Microsoft Workplace Join…
register FIDO2 security key as sign in method without the need to install Microsoft Authenticator app
Hello, Here's briefly about policies across the tenant: Enabled FIDO2 security key as sign - in method for the user under. FIDO2 is the only enabled sign-in method for this user. Disabled Windows Hello for Business using Intune configuration…
Intune Configuration Profiles, Remediation and Preferred Wi-Fi SSID
We are attempting to replace an existing wifi network that uses standard RADIUS. With a new network uses PSK without RADIUS for authentication. The goal is to get our fleet of Windows devices (mostly 10s, and a few 11s) to switch over to the new network…
Getting error 0x81039001 on PC reboot
Getting error 0x81039001 on PC reboot PC registered in InTune and was working until recently. S/N C5HRDF3
copy paste is not working
Hi All, we have policy configured the App protection policy in Intune for Android and iOS. Under the Data Protection setting for "Restrict cut, copy, and paste between other apps" set to "Policy managed apps with paste in" however…
Intune Keeping (Line of Business Apps) Up to Date
We have a number of LoB Apps which I need to deploy via Intune. My question is what is the best way to make sure the Apps that are deployed are using the latest version? For example, I need to push out SQL Studio Management Studio, or other free…
Intune policy for "Download email for the past"
Hi All I was hoping someone could guide me in the right direction with this one. I was looking for an Intune policy (preferably) or registry key that can manage the "Download email for the past" setting for the devices joined to Azure. I want…
Deadline randomization for application deployment
I know there is a client setting Disable deadline randomization, if I set it to No, the clients use an activation delay of up to two hours to install required software updates. But the setting doesn't apply to applications. My question is: Is there any…
SMS_MP_CONTROL_MANAGER with Error 12175
I‘m having issue with SMS_MP_CONTROL_MANAGER with Error 12175. I also checked my SCCM server's certificate and found that both SMS Role SSL Certificate expried 25/03/2023 and MECM llS Servers Certificate expired 13/04/2024. I suspected this might be the…
Unable to distribute driver package to local DP
Hello, I have the latest SCCM, when trying to distribute content showing me error Error 0x800704c8
How to create security group based on Operating system SKU
I need to install Media Feature Pack to all Windows N machines and for that I need to create group that cointains all the Windows N versions. Dynamic Group won´t work here and I can´t use Filters either, since they only work on Compliance policies…
I can't configure a personal profile and a Work profile on COPE
Hello, everyone I have a question regarding the registration of corporate-owned devices with work profiles. I created a record, took a factory reset phone, and read the token. The device goes through the entire setup process, but it doesn't create two…