Event banner
Event details
170 Comments
- To enhance filter flexibility: what about allowing us to create our own properties based on WMI queries executed on the client? We will always have special filter requirements in our enterprise environments that will be hard to fulfill w/ static property definitions. And at the end the list of properties will grow to an unusable size. E.g. to support special custom configurations in GPO and Configuration Manager we started to create our private WMI class reflecting special configurations. This allowed us to have GPO WMI filter and CM collections based on that data.
- The various Retire, Wipe, Autopilot Reset, Fresh Start, Delete options are a mess. The names do not reflect what they do. I can't keep track in my head of what each one does, and many of them have sub-options too. I spent a day testing each one, and reading what they should do, and then came to the conclusion that generally I want 'Wipe'. (Which IIRC is the same as the "Reset" option within Windows 10 - why not name it consistently?) Look at it from my perspective. I either want to blow it away completely (it's EOL), I want to Reset it because it is playing up, or I want to quickly clear down user data to reallocate it to someone else. 3 options that cover those scenarios, with names that match the use case, and a description that tell the admin what they will do is all we need.
- And if I want to blow it away, it should clean up Autopilot, AAD, and Intune. And exclude it from reporting in MDE. At the moment I am using a fairly complex Powershell script to the cleanup, but it's a scenario every customer faces. And my life would be much simpler if the AAD device had Serial Number in it too! 🙂
- At the least.... disable the Azure AD object of a "Wiped" device. We have yet to implement Conditional Access (still cleaning up non-compliant legacy PCs in the field). When a Wipe fails, the user only has to click past a warning to have a functional yet unmanaged PC. Because of this, we now always check the "Wipe until clean" box.
- We used Azure as our SSO. We use gmail for email. When deploying BYOD management through intune we find an issue with managing email access once someone removes the profile. So while users will be required to add a management profile to their device to get access to email initially, if they remove management from their device, they will retain access? Is there any way to ensure access to gmail email is removed when the profile is removed?
- Would just love to see some stability in the Autopilot experience. We get very inconsistent behaviour each time we Autopilot a device. Often the information on the ESP does not match up with what is actually happening behind the scenes. It's also difficult to troubleshoot and see what is actually happening on a device at any given time as the Intune portal is not up to date and log files on the device are impossible to understand. Would be useful to have a screen in Settings on the device that shows all the configuration profiles applied or applications / updates installing in real time and the status of each.
- Scott Duffey
Microsoft
Thanks for the feedback. I passed it on to our Autopilot PM team (that I know for a fact is driving towards better and more troubleshoot-able autopilot/ESP experiences)
- MrsKellyC
Here is a link to all the poll questions. The polls will be open until Friday, October 28th:
https://aka.ms/TTAboutYou
https://aka.ms/TTReporting
https://aka.ms/TTGrouping
https://aka.ms/TTAdminUI
https://aka.ms/TTRBAC- Why wasn't Microsoft's Polls used? For that matter, why isn't Microsoft Teams Live Meetings being used (where the polls and Q&A could be tied to the meeting)?
I want to congratulate all teams involved in developing and improving experience for Microsoft Intune!
- Thanks! This was one of the most satisfying sessions! 🙂
Adding specific devices to an enrollment profile under an enrollment token (iOS) is slow and tedious - you have to search for the device, click the select box, then click save. You can't select more than one device in that list. It needs to use the identity object selector which has a "shopping cart" system instead of the "only act on selected items" selector!
So, here's what this looks like: if I go and find ONE device in the Add box, and click add..
...then I can't add ADDITIONAL devices here (it's greyed out?!) without clicking Save.
And clicking Save takes forever! Super annoying 🙂 I just use graph for these but it's very unfriendly to non-graph/ps admins.
- Scott DuffeyI just shared with my iOS PM colleagues who think you have a really good point here. Thanks for the feedback!
- Agree! Super annoying, please fix. And if there are multiple objects of the same name, there's no way to sort which one you need because there are only name and ID listed; further requiring navigation to another window to confirm which ID is the correct one. Ugh!
- Autopilot Autopilot Autopilot!!! 🙂
- Heather_Poulsen
Community Manager
We’re happy you’re here with us at the Microsoft Technical Takeoff! Whether you are attending one session or many, please take this 2-minute survey and let us know your thoughts on this event.
Please continue to take our polls below!
