Event details
111 Comments
- Also under the Endpoint Security Blade > Account protection in order to give someone admin right on a device we need to currently create a policy Create Group "group name" add a user to it then assign it another group just for the device. This used to be under Microsoft Managed Devices as just a toggle to make the device power user. We also want to make sure Only the Autopilot Assigned user is allowed to logon to the device other than the LAPS account.
- Hey, this is very last minute so apologies for blunt aspect. - Remote Help seems unloved, and MSPs would like cross-tenant compatibility. Will that happen? - Functions in Intune Suite that some would deem worthy being part of the base license such as PKI and Remote Help. It has left a sour taste for a lot, if not all, administrators. New features are never made clear if they will also be part of base or Suite. Could this be clarified when new features are available, without having to dig around? - Remote Help is very overpriced! - Script Remediations for Business Premium users? - Security Baselines leave a lot to be desired. I even saw one setting clash between Defender and Windows profiles! Why aren't these better managed, and updated more regularly? Edge included in that one. - Why are Microsoft not consistent on their application deployment methods? Sometimes we get MSI, MSIX, Microsoft Store, EXE... it's really, really inconsistent and an utter nightmare to manage. Apple as a competitor, every app they make is available in the Apple App Store. Why is this not the same for Windows?
- Thank you for this MDM product. We have been using Intune for a couple of years now. Our current concern is how do I keep Apps current? With out having to review each individual app monthly and updating the app manually?
- look at https://apps.microsoft.com/detail/xp89bsk82w9j28?hl=en-us&gl=US we use it but be cautious an use a whitelist to add apps you have tested rather than a blanket. you don't want to use apps that have user interaction without changing some commands to make it silent. same with Elevated access read the readme
- If I understand your question correctly, I'd say: Strategically default to sourcing apps from the Microsoft App Store (new) first. Next, if you have the budget then you'd get something like Intune Enterprise App Catalog to look after other apps not in the store. Other app packaging/catalog services exist. Where there is a budget constraint, you could consider using winget but it can be a steep learning curve and you'd have to automate it yourself, perhaps with Task Scheduler.
- Will there be a way in the Intune device blade to select multiple devices and apply wipes and or delete the items like in Entra? This would save time when trying to bulk retire hardware.
- Heather_Poulsen
Community Manager
Welcome to Feedback on Microsoft Intune and the Intune Suite at Tech Community Live: Microsoft Intune edition. Let's get started! Please post your questions here in the Comments. We’ll be here until 10:30 a.m. Pacific Time! We will be answering questions in the live stream—and others will be answering here in the Comments.
- The error messages / handling for app installs leaves much to be desired. We see cryptic error messages -- with no clear indication of how to resolve the app installation issue. Restart IME service? Reopen Company Portal? In particular, "failed to retrieve content information" -- would be nice to have some way to retrigger the installation immediately. Tied in with this is the inability to retry an app that happens to be mandatory -- not optional. The app failed, but the "Reinstall" button is grayed out. Can you please allow for retries on mandatory apps -- if the app failed to install?
- Will we be able to scope policies and applications to individual computers rather than to only security groups? Quite often I find myself needing to scope a quick app or configuration profile to only a handful of machines but have to create extra groups just to support a small task; I don't think filters resolves this either.
- Man, and this question got skipped over again... 😞
- Jason_Sandys
Microsoft
Although any and many things are ultimately possible, I don't see this happening without a compelling ROI given that you can create a one-off Entra ID group for this purpose. Yes, there's admin overhead and permissions to consider, but those, in general, are considered small and not impactful -- at least not impactful enough for us to consider prioritizing this ask above other work. You are certainly free to keep asking and suggesting this as I do think there's value here, just not enough in comparison to our core intent on improving and adding features and functionality. If you (and others) can quantify a real business impact for not having this (business usually equates to $$$). If this is something you can provide, then it's much easier for us to weigh and possibly prioritize.
- We've seen problem with detection rules not "refreshing" to the reality of the app status on the device. For example, the app *really* isn't installed, but the Company Portal is indicating that it is. What is the surefire way to run the detection rule again? Sometimes we have had to restart the IME service and Company Portal app. I think there is room for improvement here.
- Our experiences with application delivery with Intune have not been entirely smooth either. When it works well it's been great, but troubleshooting is more cumbersome and opaquer than I feel it should be. Any QoL, or ease of access improvements around this area would be incredibly welcome.
- 10 years ago, we had full control of Windows devices on our network. Anything we needed to do, anything we wanted to know was 100% possible in PowerShell, as well as other well-documented tools, native and 3rd-party. Today with Azure, no so great. It feels like the 90's with the amount of control we have natively, without 3rd-party tools. We cannot remote to a device without the user present. We cannot bulk rename based on specific conditions. We cannot use WinRM or WMIC to do live queries of hardware or software. We have to use MS Graph, which for me is a poorly documented tool, to get only some of the info we are used to receiving. Perhaps it's me coming from the Novel world into NT 3.5 just 30 years ago, or just not being as up to speed on Azure/Intune as I should be. Whatever the reason is, it sure would be great if we could utilize the skillsets we know well, to do the things we are used to doing, to keep good control over our devices. Thoughts?
- Jason_SandysHi Jaime Alexander. Your question is more or less along the same lines as that posted by Dylan Gould and thus my answer is similar (or the same really).
- Jason, may I DM you?
As I am sure you're aware, the time that it takes for devices to receive configurations from intune has long been a pain point current Intune MDM users and an obstacle for those looking to adopt Intune that are coming from faster services like SCCM or even GPO. I have been impressed with the speed on MacOS for Intune, but for Windows, it leaves much to be desired.
Has there been any update on this front that you can share? I remember hearing details about switching the backend to more push rather than a pull for configurations, but I don't recall the specific details about that.
