Event banner
Event details
- Heather_Poulsen
Community Manager
Welcome to Windows Office Hours! I see we have some questions already posted (great!). Let's get started! Our engineering and product teams will be answering here in the chat, and if anything is beyond our scope today, we'll work to find the right person to get you the info you need.
- I see a lot of questions but no responses one hour later
- ThomasTrombley
Microsoft
How can I assist you Abraham? We're still answering many of the questions here, but have replied to most.
File Explorer is not as responsive in Windows 11, as it was in Windows 10. Slower to open and slower to browse. We’ve experienced this behavior across a fleet of pc’s some high end workstations. Is this a known issue? Is this being worked on?
- We are experiencing File Explorer slowness issues as well.
- Same here
- It's definitely been slower on Windows 11, but even worse on the latest optional update that was pushed out on Tuesday (22621.2361). It seems related to OneDrive integration. If I browse non-OneDrive folders, they're nice and snappy, like Windows 10.
- We have issues where in File Explorer, the OneDrive menu is missing completely or portion of it missing.
- ThomasTrombleyHi Abraham, please file this issue with Feedback Hub as soon as possible. Thank you.
- With the presentation of Copilot, we have been left with a lot of unanswered questions as to how this will be presented and controlled from an administration point of view. As admin in a company that is a bit more strict on how AI can be used, am I correct in assuming that Copilot will be an optional feature of 22H2 and will remain that way but become part of the standard install of 23H2? That would give us an opportunity to get to learn how to work with or block Copilot while we are preparing for 23H2. I also came across some documentation that appeared to suggest that Copilot will initially be placed behind a licensing option to give organizations the chance to block the functionality until the time they are ready to adopt it. But it also seemed to suggest to me that over time, Microsoft will enable it for everyone. Any light you can shed on that?
- Aaron Czechowski
Thanks hroes for your interest in Copilot in Windows! First, a couple of specific resources in our official product documentation on Microsoft Learn to help you:
- Manage Copilot in Windows - Windows Client Management | Microsoft Learn - the current home for this topic. To be honest, a bit light right now, but it provides info on the CSP and group policy to Turn off Copilot in Windows.
- Enterprise feature control in Windows 11 - What's new in Windows | Microsoft Learn - info on controlling features of Windows 11, and what specific features are under temporary or permanent control.
The short answer for Copilot is to use the first policy to turn it off for appropriate groups of users. Because it's under permanent control, then it will apply for both 22H2 and 23H2.
Things would get more interesting if you weren't using that policy for some reason, but aren't allowing temporary feature control, and then upgrade to 23H2. If necessary, I can go down that road to explain.
I'm not aware of any "licensing" aspects that apply here at this time. Can you share the link of the source that stated a licensing option and that it will be enabled for everyone? (I have an idea of what you're referring to, but don't want to assume!)
- Aaron Czechowski
I obviously answered specific to Copilot in Windows. If your questions are more general or for Microsoft 365 apps, you can check out the Microsoft 365 Copilot AMA - Microsoft Community Hub that starts in a few minutes. I see there are some questions already posted there that are similar to yours.
- For months now, I have been experiencing an issue whereby my explorer jumps to the front and takes focus at random times. I assumed it was just me and a configuration issue on my machine until I noticed it happening on another PC from one of my colleagues. That made me look into this issue a bit more and it seems that this is quite a common occurrence and that Microsoft is aware of this issue. Do you know of any updates surrounding this issue or is there a place where we can follow up? Because I'm afraid that as we start rolling out Windows 11 within the company, we will get complaints from end users and later on potentially management as well.
- ThomasTrombleyGood Morning/Afternoon/Evening, apologies for the delay. I am assuming you tried: Open Settings, select Personalization, click on Start, turn off the Show recently opened items in Jump Lists on Start or the taskbar and in File Explorer. I'll follow up once you reply, but would also suggest filing an item in Feedback Hub right away so our engineers can directly troubleshoot with you.
- ThomasTrombleyI also dug around in some of our prior content and saw one fix that worked more often than not: https://answers.microsoft.com/en-us/windows/forum/all/windows-explorer-jumps-to-top/9537cd98-7eb1-4df1-847c-c6e35193e06e. Let me know!
Our devices are currently on HAADJ. We also want to prevent customers Azure AD joining their personal device by setting the "Users may join devices to Azure AD" to None. Will changing this setting have any effect on Autopilot with HAADJ?
- Is it possible that someone will get back to me on this in the future?
- ThomasTrombleyYes, Shijil. The team is working on your question.
- ThomasTrombleyThe setting is for Microsoft Entra joined and having None blocks user initiated but still allows flows like Entra joined via Autopilot, Azure VMs enabled with Azure AD auth, etc..
- So having that setting changed to None will hinder user driven Autopilot for Hybrid Entra ID Joined devices as well?
Hi. We have recently switched away from OnPrem Servers to full Azure & InTune Deployment / Management. One element we are having issue with, is OneDrive on the client windows 10/11 machines. for what ever reason, i cant seem to get either clear guidance on this, or a video demonstrating how this is achieved. I note from your YouTube Video, "Preparing your devices for 23-24 school year with InTiune" you shows that you logged in as a student, and the onedrive mapped itself automatically ( Time Stamp 16:27 ). Our school runs on all shared machines, with no 1 allocated user to any specific device, except the office, where there is normally 1 specific user ( Until a temp has to cover ). Can you please either let us know how this is achieved, or point to a Useful Document where it will walk one through the necessary steps. Also need to auto link the user to any Sharepoint document repository that they are a member of,
What I want to achieve is...
* On Windows Desktop, user is automatically logged into OneDrive on Windows Desktop ( 10 or 11 )
* The Sharepoint Document Repositories automatically on Windows Explorer for ease of access
* Desktop, Documents locations on logged in users one drive.
In Regards to MultiFactor Authentication, we have this enabled for all STAFF members, however for students, this is kinda stupid, as our school ranges from 4yr to 18yr kids, and one thing general is that no child is allowed to have personal mobile devices with them whilst in class. so for students, we have disabled MFA requirement. Interested to know your thoughts however on this MFA subject and how we apply this to education sensibily.
Appreciate your assistance. Sue Graves, Location : United Kingdom.- In Intune you can add a policy (search onedrive and it will list them all) to "Silently sign in users to the OneDrive sync app with their Windows credentials", and "Configure team site libraries to sync automatically".
- Only thing is Michael, it isn't working. I therefore feel something is a miss. I kinda need to know what to specify in the policy's, and which elements to specify correctly in order to get this working...
- With Windows Update for Business, we can deploy updates for Microsoft MSI Products. Do the WUfB reports in Monitor show the compliancy for just quality updates or for all updates?
David_GuyerHi Dawn, It would be helpful to know exactly which policies you are referring to. Here's a few things that I hope will help. If you create a compliance policy in Intune, and specify the compliant OS Versions, then the reports for those policies will show how many, and which devices are currently compliant or not. The reports for Windows Updates under Monitor are primarily for finding devices that have errors or other update blocking issues so that you can help remediate and get those devices healthy. In the Reports section of Intune, there's a Windows Updates section. Generally these reports are for reporting on devices assigned to policies. The device readiness and upgrade risks reports do report on all devices in the tenant when you have enabled collecting Windows data in the Tenant -> Connectors section. And we are working on adding more reporting that will provide information on all devices. Hope that helps.- We are moving from Config Mgr to Intune. In Config Mgr I could run an update compliance report that showed me the compliance for all product updates. I see on the "Update Right for Windows 10 or Later" that I set "Microsoft Product Updates" to Allow. How do I know which devices are not compliant will all product updates? I have a query in Monitor / Logs looking at the "UCClient" table. Does this show compliance for all updates? I will look at the reports section to see what is there.
- Intune Question Regarding Update Rings - we have an issue where Intune updated machines to Windows 11 Insider Preview that were on Windows 10 and when you attempted to manually update them to Windows 11 the machine was not eligible because of the processor, etc. How did Intune update those machines to Windows 11 Preview if you manually attempted to update to Windows 11 and was stopped.
- David_GuyerHi Rich, interesting question since Intune only configures devices based on available device settings and uses Windows Updates, so doesn't have any way to work around that system. My understanding is that Windows Insider builds are published with the same hardware requirements. So, I'm not sure how your devices were able to get on Win11 Insider Preview. The only idea I have is that perhaps those devices were on Insider Preview on Windows 10 and were moved to Windows 11 before the hardware checks were implemented. I don't know if that helps, I hope so!
- Those machines were NOT on Windows 10 Insider Preview. What we say is that Intune installed a generic driver and then the devices got updated to Windows 11 Insider Preview.
- What is the best way to deploy an app by using Intune - by the msi or should that be converted into an exe?
- David_Guyer
Hi Rich, No need to convert an MSI to an EXE, you can upload and deploy an MSI with Intune. I'd start with this topic... and it might be helpful to read some other topics in the table of contents if you want more context. Understand line-of-business apps for your managed environment | Microsoft Learn
- David_GuyerI forgot to mention, if you already have an MSI and it's not a Store app, look at LOB apps as well as Win32 apps!
I have found that the two best ways to deploy an app in Intune are:
- Microsoft Win32 Content Prep Tool
- Win32 app management in Microsoft Intune | Microsoft Learn
- The best feature of this tool is its superscedence functionality and that alone is why we now use it for all installations.
- Microsoft Store Apps
- Microsoft Win32 Content Prep Tool
- Is there anyway to get a device out of Windows 11 Insider Preview without having to reset the OS on the device? We have found no luck with any other options?
- Also add that if you are consumer you can just opt out. But if you are an enterprise user you have to reset the device. This is a huge issue in my company because Intune enrolled devices got updated to Windows 11 Insider Preview when they should not have been because when you manually tried to update to Windows 11 you were stopped by TPM, Processor, etc.
- David_GuyerIf you are using Update Rings policies, you can set the Enable Preview Builds to Not Configured. This will set devices to offboard from Insider builds once the next Feature Update is released. If the device didn't use Update Rings to get there, then you can still set the Manage Preview Builds setting to the value of 1 (see more info here: https://learn.microsoft.com/en-us/microsoft-365/solutions/apps-type-lob?view=o365-worldwide ). This setting keeps the device on Insider builds until the next Feature update is released because that's the only way to keep the device getting security updates without reimaging the device to an official build. Once the new Feature update is released, the device will be moved off of insider builds automatically and be on the General Availability train. HTH.
