Forum Widgets
Latest Discussions
Local Admin Rights
Hi Experts, I have a customer running a Hybrid Azure AD Join environment with all Windows devices enrolled in Intune. Currently, Domain Users are being added to the local Administrators group on all devices via an on-premises Group Policy from the Domain Controller (Restricted Groups / Local Admin configuration). This effectively gives all users local admin rights. I want to remove Domain Users from the local Administrators group on endpoints while not modifying the Domain Users group itself in Active Directory. What is the recommended / best-practice approach to handle this in a Hybrid + Intune setup? Specifically: What is the safest migration strategy to avoid device or admin lockouts? Any Hybrid-specific gotchas when transitioning from on-prem GPO to Intune? Looking for advice from those who’ve implemented this in production environments.
Outlook Autodiscover Caching, MAC OS
Environment: - Microsoft 365 tenant - New Outlook for Mac - macOS Tahoe Scenario: An email address (email address removed for privacy reasons) previously existed as an alias on a mailbox whose primary address was on Domain B (email address removed for privacy reasons). Today, that alias was removed from the Domain B mailbox, and a new licensed mailbox was created using the same SMTP address on Domain A (email address removed for privacy reasons). Behavior: - Sign-in to the new mailbox works immediately in Outlook Web (OWA) - Mailbox is accessible and functional online - Adding the account in New Outlook for Mac fails with: “This account has already been added” - Account reset, sign-out, removal of all accounts, reinstall, and keychain cleanup do not resolve the issue Observation: This appears to be related to Autodiscover or mailbox GUID caching in New Outlook for Mac when an SMTP address previously existed as an alias on a mailbox under a different primary domain. Questions: Is there any supported method to force New Outlook for Mac to re-resolve the mailbox identity after alias removal? Is this a known limitation or bug specific to New Outlook for Mac? Additional note: The issue occurs even though the mailbox is fully functional in OWA immediately after alias removal and mailbox creation.Read this BEFORE you post!
The community lounge is a place for you to you provide feedback about the Microsoft Tech Community (https://techcommunity.microsoft.com). Please use the community directory to find the correct place to post about Microsoft Products / Services. Off topic posts may not be answered and maybe removed.
Microsoft Authenticator help
keep getting Microsoft Authenticator attempts on my Hotmail account every 15 mins or so from an overseas location that im not aware of. I have changed my password, however im still getting attempts. I deny the request every time, and when i look at security section under my account > view my sign-in activity. it doesn't appear here .
