Event banner
Event details
- Dylan_Snodgrass
Community Manager
Welcome to the Microsoft Intune & Configuration Manager: best practices to help you prepare for Windows 11 Ask Microsoft Anything (AMA)! This live hour gives you the opportunity to ask questions and provide feedback to the engineering and product teams building Windows. Introduce yourself by replying to this thread. Post each question in the Comment on this event… box above.
Here's who's on deck today to answer questions about preparing for Windows 11 with Intune and Configuration Manager:
Joe Lurie, Jason Sandys, Harjit Dhaliwal, David Guyer, Yunduan Bao, Harjit Dhaliwal, Max Stein
- Will there be a Windows Package Manager Integration in ConfigMgr in the future? The article from today announced it only for MEM (Intune): https://techcommunity.microsoft.com/t5/windows-it-pro-blog/evolving-the-microsoft-store-for-business-and-education/ba-p/2569423
- Joe_Lurie
Microsoft
We are investigating this integration and will have more to share when more info is available. Sorry to be vague, but we are still looking into this.- Thats great, Thanks!
- Hello there! Will there be ways to clean up inactive devices both in MEM and Azure? MEM (Intune) has a built-in inactive device clean-up - But Azure AD does not. Will there be built in methods in Azure to clean-up inactive devices that syncs with the MEM inactive device clean up?
- Jason_Sandys
Hi emyloa, thank you for the question. Similar to on-premises Active Directory, there is no built-in capability for this in Azure AD. I don't of any specific plans to add anything either. Also, similar to cleaning up on-prem AD, most organizations use a custom script that leverages the Graph API to accomplish this goal.
We're interested in what you'd like to see though and why using a custom script does not meet your needs?
- Is there a way to automate the Azure AD Graph API script to clean up inactive devices - now and\or in future updates? Could you provide a reference to web links here? Thanks!
- Is this going to be a streamed event or a text-only AMA?
- Joe_LurieThis is a text only AMA. Feel free to post your questions here!
David_GuyerText!
- would be very interesting to know when all the MSIX Goodness (except the simple already included MSIX deployment) come to Configuration Manager TPs and Releases. I hope very soon for MSIX App Attach, Config Packages, Updates, Bundles etc.
- Harjit_DhaliwalThe MSIX session is starting soon at 12PM PDT. https://techcommunity.microsoft.com/t5/windows-events/what-s-new-and-what-s-next-with-msix/ev-p/2557312
- David_GuyerMichael, that's very interesting, can you please share a bit more about how you'd like to use such a feature and what capabilities you would like to see?
- Support for Integrating MSIX App Attach for example integrate it into ConfigMgr and roll out Apps based on User Groups (AD based etc) to Windows 10/11 desktops, Support for MSIX Configration Packages and Bundles etc.
- I've been trialing out Windows 11 with Intune management Currently I experience issues with Always On VPN. Deploying it using the conventional Configuration Policy seems to create a VPN profile requiring me to input a Username + Password, even though the VPN client should be using a certificate When deleting the VPN client and syncing the device a new one should be created within a few minutes but it never is Attempting to create the VPN tunnel using a XML file doesn't work as well as Intune says the device is "Not Applicable" under Deployment Status Enrolling the device manually (a VM) using a Powershell Script pointing to the Profile XML seems to work and it then authenticates with the correct certificate Are you aware if this should work in Windows 11 or not?, I've not filed a bug report yet as I've been busy doing other tasks but I'd like to see that our setup works smooth on Windows 11 prior to the official launch date
- David_GuyerPlease file feedback, and if you can do so from the feedback hub, logs care uploaded that help the engineering team understand and fix the issue. Thank you for trying out Windows 11!
- We currently migrated our work computers to Hybrid Join - when we deploy Windows 11, what do we need to do so that the Windows 11 computers are also in hybrid join mode?
- Jason_Sandys
Hi EmyLoanzon, short answer here is nothing. The device state will be preserved during an in-place update/upgrade to Windows 11. Keep in mind though that hybrid Azure AD join is only meant as an interim path for existing devices that require a cloud identity. You should be pursing [full] Azure AD join for new devices going forward.
- You mean making Azure AD as the Source of Authority for our devices? We have apps that rely on on premise domain.
- Harjit_DhaliwalSame procedures applies to Windows 11 as it is with Windows 10 today.
- Will there be more cross management capabilities between Config Manager and Intune moving forward to make a better single pane management point for both cloud managed devices and those which are still on prem.
- Joe_LurieWe are constantly adding co-management features into Configuration Manager. If there's something specific you're looking for please let us know!
- Jason_SandysBe sure to check out tenant attach as well as this is technically a separate feature set and capability that offers synergistic value that we are continuing to iterate on as well. See https://docs.microsoft.com/en-us/mem/configmgr/tenant-attach/ for more details.
- We have been using Co-Management with SCCM and Endpoint Manager. Devices are showing up in Endpoint Manager as Hybrid Azure AD joined machines, but not always in Azure AD under the user profile. Is there a reason why. If it should be in both places, is there a way to fix it?
- Jason_Sandys
Hi Carol DeMuth, thank you for the question. To clarify here, do the devices show in Azure AD at all, just not with the desired user set as the owner?
- They show in Azure AD, but not with the registered owner. We are using Azure AD Connect to enroll devices
- We have employees who access some of our M365 apps from their personal Windows 10 workstations - what info can we share about their questions on updating or upgrading their personal computers to Windows 11?
- David_GuyerEmy, I think you are asking about computers the employees own and how they would upgrade to Windows 11. If that's the case, then Windows 11 will be offered via Windows Update to devices that meet the requirements once we are ready to release it. If they'd like to get an early look, then they can join their computers to the Windows Insider Dev or Beta channels.
