Archives
-
Categories
-
Recent Posts
-
Recent Comments
- ncbrady on How can I use multiple monitors with Windows 365
- ashwina on How can I use multiple monitors with Windows 365
- bahusafoo on How can I get BitLocker Recovery Keys from the ConfigMgr database in SCCM?
- rud on Logitech C920 webcam flickering with a Thinkpad Thunderbolt 3 gen 2 dock? try this
- ncbrady on Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 8 Migration
-
-
Meta
Category Archives: Intune
Troubleshooting SCEP: Certificate enroll failed. Result: (Gateway timeout (504).).
Introduction We had an issue where Windows Autopilot enrollments were hanging (and later failing) in the Account Setup phase.This problem occurred when the device should be applying a certificate targeted to the user via SCEP/NDES, but it was failing. The … Continue reading
Posted in Intune, SCEP
Leave a comment
Automating group tags for Windows Autopilot registered devices
Introduction I’ve recently blogged about Provisioning Windows Autopilot devices to get the encrypted with Bitlocker at the factory to speed up compliance. You can review those blog posts below: Encrypting devices during Windows Autopilot provisioning (WhiteGlove) – Part 1 Encrypting … Continue reading
Posted in Graph, group tag, Intune, Windows AutoPilot
Leave a comment
Encrypting devices during Windows Autopilot provisioning (WhiteGlove) – Part 3
Introduction Note: This method is not officially supported by Microsoft. That said, this speeds up compliance and more importantly increases security as the device is already encrypted (part 1) before the user logs on (part 2). BitLocker recovery key changes … Continue reading
Posted in AzureAD, BitLocker, functionapp, httptrigger, Intune, win32 app, Windows AutoPilot
Leave a comment
Encrypting devices during Windows Autopilot provisioning (WhiteGlove) – Part 2
Introduction Windows Autopilot preprovisioning (WhiteGlove) is the ability to pre-stage content and policies to devices while it’s been installed in the factory. We had a challenge to speed up the overall compliance of Windows Autopilot devices and the obvious solution … Continue reading
Posted in BitLocker, Compliance, win32 app, Windows AutoPilot
Leave a comment
Encrypting devices during Windows Autopilot provisioning (WhiteGlove) – Part 1
Introduction Note: This is not supported by Microsoft and your mileage may vary. That said, this speeds up compliance and more importantly increases security as the device is already encrypted by the time the user logs on (in Part 2). … Continue reading
Posted in BitLocker, IntuneWinAppUtil.exe
Leave a comment
Migrate to the cloud – Part 3. Troubleshooting
Introduction This blog series is comprised of 3 parts. In part 1 you reviewed a video of the solution and then carried out the initial steps to set everything up. In part 2 you saw how you could modify files, … Continue reading
Posted in Auto MDM enrollment, Azure AD, AzureAD, Intune, sendgrid
Leave a comment
Migrate to the cloud – Part 2. Customization
Introduction This blog series is comprised of 3 parts. In part 1 you reviewed a video of the solution and then carried out the initial steps to set everything up. In this part, you’ll see how you can modify files, … Continue reading
Posted in Auto MDM enrollment, Azure AD, AzureAD, Intune
Leave a comment
Migrate to the cloud – Part 1. Setup
Introduction This blog series is comprised of 3 parts. In this part I’ll cover how you can migrate your existing configuration manager managed, domain joined devices to Azure AD joined, and Intune managed devices. During that process the app also converts … Continue reading
Zscaler SSL inspection throwing a wobbler during OOBE in Windows Autopilot
Introduction Note: We’ve been using Windows Autopilot with Zscaler configured with Microsoft URLs whitelisted without issue for a long time, this latest problem is new. Read on for more… I needed to setup a virtual machine for a colleague, and … Continue reading
Posted in Intune, Windows AutoPilot, Zscaler SSL Inspection
Leave a comment
Do you have required Win32 Apps skipping Windows Autopilot ESP or not installing until after login ?
Introduction I saw an interesting tweet from @brucesaaaa where he talked about issues observed in multiple tenants during Windows Autopilot enrollment with required Win32 apps. The following was seen for required deployments of Win32 apps during Windows Autopilot enrollment: ESP … Continue reading
Posted in Intune, IntuneWinAppUtil.exe, win32 app, Windows AutoPilot
Leave a comment
Prompting standard users to confirm or change Regional, Time Zone and Country settings after Windows Autopilot enrollment is complete
Introduction When users complete Windows Autopilot Out of Box Experience (OOBE), they can be asked to confirm Country and Keyboard settings, based on what is configured in the following Windows Autopilot Deployment Profile settings. Below is the Windows Autopilot deployment … Continue reading
Posted in Intune, PowerShell scripts, Windows 10 AutoPilot
Leave a comment
Using the updated & secure Retire My PC app via Company Portal
Introduction I previously posted a blog post showing you how your users can decommission their old domain joined PC using the Retire My PC app. I showed you how to create the app and deploy it via Software Center to … Continue reading
Posted in Azure AD, BitLocker, Intune
Leave a comment
Forcing a time sync during Windows Autopilot OOBE to combat time related issues
Introduction I recently encountered an issue when after Windows Autopilot enrollment was completed, the end user was unable to browse on-premises network resources such as file shares when logged on with using the Windows Hello for Business login method. The … Continue reading
Posted in Windows AutoPilot
Leave a comment
Cloud attach – Endpoint Managers silver lining – part 6 Enabling conditional access
Introduction This is part 6 in a series of guides about cloud attach in Microsoft Endpoint Manager, with the aim of getting you up and running with all things cloud attach. This part will focus on enabling the compliance policies … Continue reading
Posted in Cloud Attach, Compliance, Conditional Access
Leave a comment
Gathering logs and sending an email when you need to reset Windows Autopilot – part 3
Introduction In a previous blog post I explained how you could use the SendGrid resource in Azure to send emails, and with a PowerShell script create an Intune app to give end users additional options when resetting their Windows Autopilot … Continue reading
Posted in AzureAD, httptrigger, troubleshooting, Windows AutoPilot
Leave a comment