User Profile
StefanKi
Iron Contributor
Joined 9 years ago
User Widgets
Recent Discussions
AD connect not sync device objects
Hello, I have a challenge. I installed AD connect the user objects are synchronized. Only the device objects are not synchronized. AD connect for device sync is configured correctly. As soon as I create a new device object in AD (in the same OU as the existing device objects / same group membership) it is synchronized. Only the existing device objects are not synchronized. I think it may be due to the security permissions of the device objects. How can I check it? Which security permissions the sync user needs on the device objects? What can I do to ensure that the device objects are synchronized? Thank you for your support? Regards StefanReport conditional access policies and sign in logs
I would like to create a PowerShell report about the relation between sign in logs and the conditional access policies. For me it is important to see the effects of the conditional access policies (in reporting mode) on the user signs. Thank you for your support227Views0likes3CommentsRollout Windows hello for Business
Hello, I would like to roll out Windows Hello for Business (cloud trust). The configuration with Endpoint Manager is complete. Everything works very well for new installations. There are problems with clients with activated Windows Hello (without Business). The only option here is to delete the Windows Hello configuration and then log on to the client with TPA. Windows Hello for Business can then be configured. Is there a better way to configure it for existings cliens with active windows hello (without Business)? If the user first login with password the PIN create runs in a timeout with the information it needs more secure informaton. The user has no MFA configured. Thanks for your help StefanSolvedAVD and Bicep
Hello, I’m trying to deploy AVD as ADD joined using bicep but it failed.The session host is created but not correctly assigned to the host pool. There is always an error with theDomainTrustCheck andDomainJoinedCheck My code: resource joinAzuredomain 'Microsoft.Compute/virtualMachines/extensions@2024-07-01' = { name: '${vmPrefix}/joinAzuredomain' location: location properties: { publisher: 'Microsoft.Azure.ActiveDirectory' type: 'AADLoginForWindows' typeHandlerVersion: '1.0' autoUpgradeMinorVersion: true } dependsOn: [ vm ] } resource dscextension 'Microsoft.Compute/virtualMachines/extensions@2024-07-01' = { name: '${vmPrefix}/dscextension' location: location properties: { publisher: 'Microsoft.Powershell' type: 'DSC' typeHandlerVersion: '2.73' autoUpgradeMinorVersion: true settings: { modulesUrl: 'https://wvdportalstorageblob.blob.core.windows.net/galleryartifacts/Configuration_1.0.02627.270.zip' configurationFunction: 'Configuration.ps1\\AddSessionHost' properties: { HostPoolName: hostPoolName registrationInfoToken: HostPoolToken aadJoin: AADJoin } } } dependsOn: [ joinAzuredomain ] } I follow steps found on the following links to make most of my deployment. Ref :https://rozemuller.com/avd-automation-cocktail-avd-with-bicep-and-azure-cli/ Ref:https://tighetec.co.uk/2021/07/07/deploy-azure-virtual-desktop-with-project-bicep/Solved482Views0likes4Commentsew created team to be indexed so that I can copy the files into it
Hello, I would like to create a Teams template with folders and files. Unfortunately this is not possible. That's why I created a MS Teams template from a template team. I generate new teams from this Teams template. This works. Then I copy the files from the template team to the newly created team using the copy function in Teams / SharePoint online. How long does it take for the new created team to be indexed so that I can copy the files? Because it sometimes takes up to 24 hours until I see the target ( newly created team ) in the copy function. Thank you for your support StefanPowershell Script not running on Client
Hello, I had created a powershell script in Endpoint Manager / Inutne. But the script will not load and run a my Windows 10 test client. When I look on my test client i do not see the EnterpriseDesktopAppManagement CSP by Intune. I see only logs. When I create a configuration policies it will push ( also apps) to the client. What can I do to run ps scripts on the client via Intune? Regards StefanSolved1.2KViews0likes6Commentsit is possible to create a site with site template with one click?
I have a site template. Via New, by selecting the site template, I can create a new Modern site based on the template. Is it possible to place a link on the site that creates a new site based on the site template? Thanks for your Support244Views0likes0Comments