Event banner
AMA: Windows management with Intune
Event details
Do you manage Windows endpoints in Intune? Do you have questions that extend beyond configuration and involve ensuring security, compliance, and a seamless user experience on Windows? Join this Ask Microsoft Anything (AMA) and engage directly with Microsoft product engineers to get your questions answered. Let’s talk about hardware-backed device attestation, the settings catalog, BitLocker, App Control, firewall settings, baselines, and anything else related to endpoint management and security!
Post your questions in the Comments below. We'll have experts responding in the live stream and others in chat.
This session is part of Microsoft Intune: Tech Community Live. Add it to your calendar, RSVP for event reminders, and post your questions and comments below! This session will also be recorded and available on demand shortly after conclusion of the live event. |
192 Comments
- BlueLeafCopper ContributorAnyways to match drivers in driver management to what vendors have on their site? I understand the vendors upload the data but can this be worked on with them. Its hard to figure that part out. Also can we get what drivers apply to which machines the driver is applicable to instead of having to go to Graph. Driver management is the most anticipated feature yet its so hard to implement as the disruption to users is a scary part. (maybe I just don't know some of the best practices here)
- AntonDobschenskyBrass ContributorMore details on what the drivers are would also be helpful. for example, BIOS updates for HP are just named Firmware 1.12.123 with the driver category as firmware. I end up needing to search to figure out what some of these drivers are.
- KammilewskiCopper ContributorWhat is the best place to track what changes are in the way for Intune? I heard about new RBAC, printers, network drives which are not in roadmap but are in the way if I get if right.
- DistortionBrass ContributorThere are two MS Learn pages for What's New and an In-development pages that I monitor. They appear to get updated monthly. https://learn.microsoft.com/en-gb/mem/intune/fundamentals/whats-new?ns-enrollment-type=Collection&ns-enrollment-id=8w7ys0w25z27p8 https://learn.microsoft.com/en-gb/mem/intune/fundamentals/in-development?ns-enrollment-type=Collection&ns-enrollment-id=8w7ys0w25z27p8
- Joe_Lurie
Microsoft
Distortion correct. In Development gets updated monthly. What's New gets updated weekly.
- lckoelling78Occasional ReaderWhat's the best option for eliminating comanagement when SCCM servers have been decommissioned prior to changing management options in the intune environment without manually running ccmcleaner on each device?
- Joe_Lurie
Microsoft
lckoelling78 Not sure I understand the order of your operations, so I'll try to clarify how I understand it and how I'll be answering it.
You enable co-management via SCCM and move all of the workloads to Intune. This enrolls the clients in Intune and tells the client to listen to Intune for all management workloads.
You then decommission the SCCM servers. At this point, the devices should be cloud-native managed in Intune. Removing the SCCM client agent can be done via a Win32 app or script in Intune, but it's a secondary task.
Am I misunderstanding the question?
- Badger-ScottCopper ContributorWhen is Bare Metal Windows install coming to Intune?
- Max_Stein
Microsoft
No details to currently share, though you can stay up to date on new features and capabilities coming to Microsoft Intune via: https://aka.ms/IntuneID or https://aka.ms/IntuneRoadmap. Please also share this over on our Feedback Hub via: https://aka.ms/IntuneFeedback so that other customers can comment and vote on the same!
- MaenXeBrass ContributorWhat's the recommended practice for addressing major hardware repair? For example, a motherboard replacement on a laptop causes a silent failure on Intune check-in. In combing the internet, we have found a practice of deleting a registry key manually and re-enrolling the device, but it would be great if this type of hardware change would trigger an alert that could be actioned on.
- Joe_Lurie
Microsoft
MaenXe I assume you want an alert on the device that it couldn't check into the Intune service, maybe in Company Portal? This is not something that happens today. Typically, we'd recommend a few steps when you make a major hardware change, including deregister the device from Autopilot, replace the motherboard, re-register with Autopilot. If you are just asking about Intune and not Autopilot, you should not need to unenroll/re-enroll the device, but in some cases that might be required.
- MaenXeBrass ContributorYes, an alert generated by the CP would be good. In the use case that we frequently run into, we have a laptop die and have to replace the motherboard, then when the laptop is functional again everything "seems to work", however checkins just don't work. We don't currently use Autopilot, and our devices are Hybrid Joined.
- rushikesh09Copper ContributorHow to troubleshoot deployment issues where most apps/policies do get push for few device but still shows error for most devices, eg in tenant with 200 devices policies/app only gets deployed for only 50/60 devices.
- Joe_Lurie
Microsoft
rushikesh09 Without troubleshooting the policy, the tenant, or the endpoint, it's hard to give an absolute answer. But I'd check the enrollment status of the device, the filters and targeting of the policies, and the MDM Diagnostic logs. You may need to open a ticket for further troubleshooting.
- MaenXeBrass ContributorAny plans to bring AI recommendations to Intune's base license level(M365 E3), or will this require an additional purchase?
- Joe_Lurie
Microsoft
MaenXe I answered this in the Enterprise App Management and Advanced Analytics AMA. Here's a permalink directly to the answer: https://techcommunity.microsoft.com/t5/endpoint-management-events/ama-enterprise-app-management-advanced-analytics-in-intune-suite/ec-p/4091982#M4424
- DMorris320Copper ContributorWhen EDR is enabled can it work along side other AV solutions?
- Mike-Danoski
Microsoft
Yes.
- Thomas_ShirleyCopper ContributorAnother issue is that with our naming convention in the autopilot deployment profile that starts with a prefix and %RAND:10% we have seen several devices getting the same name
- Joe_Lurie
Microsoft
Thomas_Shirley Probably not the best answer, but Intune and Entra don't care about the NETBIOS name like AD does, so it's possible (and likely) that using %RAND% will result in duplicate names As long as the IDs are different, there won't be a conflict. Now, your helpdesk would likely prefer unique names for all of your devices, and that's where the :number after %RAND% might have to be increased. Or you can use a PowerShell script to rename the device during provisioning.
- a_icon2227Occasional Reader
We have an app protection policy in Intune for all MS apps deployed to iOS with Company Portal installed. However, the Office App does not work on sign in, and the user is put into a sign in loop of doom. Outlook, Word, Excel, Edge, Authenticator (all other MS standalone apps) work as normal. What is the best method to troubleshoot where Office seems to be failing this app protection check to allow users to use Office?
- Max_Stein
Microsoft
Hi, Alvin! Here are a couple of troubleshooting docs from our Learn docs that might help with this: https://learn.microsoft.com/mem/intune/apps/mam-faq & https://learn.microsoft.com/troubleshoot/mem/intune/app-protection-policies/troubleshoot-mam. Should you continue to run into further issues, if you're out on X/Twitter, feel free to drop our @IntuneSuppTeam (aka.ms/IntuneSuppTeam) team a note where we can talk though your scenario in more detail. Thanks!