Intune auto pilot international settings
Hi everyone, I'm trying to achieve the following for new computers in autopilot: Set time zone to my time zone Set system locale, culture and windows home location to my country Set a language list to use en-US and my country's language Make sure that my country language is installed on the compute In MECM this is the Apply windows settings which looks like this: The end result I'm looking for is this: I searched the web and also found theCopy-UserInternationalSettingsToSystem, but this is for windows 11... We are still deploying windows 10. I found and tested multiple options such as deploying the LXP and using several powershell commands to apply what I need but it doesn't exactly work. This is my autopilot profile: Is there a way to use some unattended file or any other way to configure the operating system to our international settings? Rahamim.
Event Grid for Intune?
Hi! I have an app (TOPdesk) where I am currently trying to integrate with Intune. I have learned that Azure has Event Grids and I can use this to fire off PowerShell Runbooks to execute a PS script which will then send off an HTTP request to connect to my app. The question that came to mind is whether it's possible for Event Grids to listen in to activities from Intune? Basically, I was thinking that whenever a new device is created, the Event Grid can help trigger a runbook to send off a HTTP request to connect to the app. Unfortunately, I have no access to Intune and Event Grid so I cannot confirm this myself. Any insight or alternatives will be appreciated! Thanks!How to Setup Endpoint Manager RBAC
:pushpin:My new blog post on setting up Endpoint ManagerRBAC permissions. In this article I explain how to assign the admins with correct and enough access without assigning them the powerful Intune Admin role. Hope this helps to anyone who is planning on introducing and setting up RBAC in their Endpoint Manager environment. How to Setup Endpoint Manager RBAC – Shehan Perera:[techBlog]Pros and Cons of Using Microsoft Endpoint Manager Policy Sets Feature
What else can be a great feature in Microsoft Endpoint Manager other than bundling up all the policies and create that “Golden Image” type policy and assign it to the Device or User groups so from an Administrators perspective, you don’t need to individually assign groups in to policies and apps and managing this will be super easy. A great MEM function which is still in Preview though, but I already see great benefits as well as some caveats using it. Benefits of Using Policy Sets Most of the organizations when they move from SCCM or from their current management solution to MEM/ Intune, they look for similarities so things can be managed without an additional hassle. In a world where you don’t have MEM Policy Sets feature, you would have apps – each app assigned to a group, device profiles – each one assigned to group/s, Compliance policies – each one assigned to group/s etc. It is an overwhelming task to make sure every policy that’s created, every app that has been added has been assigned to the group/s etc. The main usage of Policy Sets is very simple to understand. It’s basically bundling up the policies, apps, configuration profiles etc. in one place and from that point onwards, if you have your set of users/ devices that needs to be assigned to those, rather than going to each policy and assigning them, you can go other way round. Assigning the Policy Set to the group/s. Also this is a great feature to set up that SOE level and maintain it as one single entity. You always have the ability to do modifications as you go. As an example, you can maintain 3 policies for Windows, iOS and Android devices which are manages by MEM. At this stage, below are available to configure in Policy Sets Apps App configuration policies App protection policies Device configuration profiles Device compliance policies Windows autopilot deployment profiles Enrollment status page Caveats of Using Policy Sets Microsoft have already identified some known issues with Policy Sets which is basically stopping the administrators to think twice before using it. In high level, Some policies can’t be applied to User groups Some apps which will be required by special devices/ users must be added separate to the policy sets Even in this form, the goal of creating that Super Policy and add all the policies and Apps that needs to go in and then assigning groups (Device or User) is bit dicey as if you assign a device group to the Policy Set object, the underlying policies that needs to be assigned to a user policy will not work. So to overcome this you would introduce chaos by direct assigned policies which are not a part of the policy set. According toMicrosoft documentation, below are the Policy sets issues new to version1910 The following app types are currently supported by policy sets: iOS/iPadOS store app iOS/iPadOS line-of-business app Managed iOS/iPadOS line-of-business app Android store app Android line-of-business app Managed Android line-of-business app Microsoft 365 Apps (Windows 10) Web link Built-in iOS/iPadOS app Built-in Android app Setting a policy set assignment ofAll UserstoAutopilot Profileis unsupported. Policy sets have the following enrollment restrictions and Enrollment Status Page (ESP) issues: Restrictions and ESP do not support virtual group assignments. Restrictions and ESP do not strictly support exclusion group assignments. Restrictions and ESP use priority-based conflict resolution. Restrictions and ESP might not be applied to the same users as the rest of a policy set’s payloads if the restrictions and ESP are also targeted by a higher priority restriction and ESP. The default restrictions and ESP cannot be added to a policy set. MAM policy types that support policy sets include the following: MAM WIP (Windows) MDM targeted managed app protection MAM iOS/iPadOS targeted managed app protection MAM Android targeted managed app protection MAM iOS/iPadOS targeted managed app configuration MAM Android targeted managed app configuration MAM policy types that do not support policy sets include the following: MAM WIP (Windows) targeted managed app protection MAM processes policy set assignments as direct assignments for the following policy types: MAM iOS/iPadOS targeted managed app protection MAM Android targeted managed app protection MAM iOS/iPadOS targeted managed app configuration MAM Android targeted managed app configurationIf a policy is added to a policy set that is deployed to a group, the group would show as directly assigned in the workload, not “assigned via the policy set”. As a result of this, MAM does not process group assignment deletions coming from policy sets. MAM does not support deployment toAll UsersandAll Devicesvirtual groups for any policy types. The Device Configuration Profile of type “Administrative Templates” cannot be selected as part of a policy set. The Verdict I believe Policy Sets are still in Preview because of this situation as they have these known issues than the usages. Everyone’s requirement is not he same and If you can tackle the caveats, you can still use the Policy Sets, but since this is out there for a while now and because Microsoft has identified the issues, they may working on a better version of this that we call can use without any hesitation. Pros and Cons of Using Microsoft Endpoint Manager Policy Sets Feature – Shehan Perera:[techBlog]How to Migrate Group Policies to Microsoft Endpoint Manager using Group Policy Analytics
An exciting feature was recently available in MEM and I wrote a step by step guide on how to analyse and migrate your GPOs to MEM. Hope you'll find this informative. How to Migrate Group Policies to Microsoft Endpoint Manager using Group Policy AnalyticsQuarterly Tech Community Live events for Endpoint Manager
Tech Community Live will now be a quarterly event for Microsoft Endpoint Manager! In case you missed it, this week's event -- April 27th -- will offer 4 Ask Microsoft Anything (AMA) sessions. Here are the topics. Select the desired topic to add it to your calendar and RSVP for reminders. Linux management– 8:00 a.m. Pacific Time Endpoint security in Microsoft Endpoint Manager– 9:00 a.m. Pacific Time Endpoint analytics and the user experience– 10:00 a.m. Pacific Time Windows manageability– 11:00 a.m. Pacific Time First, we realize these times may or may not work for your time zone. Please post your questions early. We are checking daily and providing updates to our teams of experts so they can prepare to answer your questions during the event. Second, what endpoint management topics would like to see at the next Tech Community Live? These events are for you, our esteemed community, so help us make sure they address the areas that matter most to you! #CommunityRocks
Federate the domain or not
We have a simple setup. Users are assigned to groups that get Apple VPP apps installed on the iPads assigned to them. They are only using the company portal app to login and setup the device for the first time then access the device via passcode. I now have a group of users that want to use Shared iPads which will require me to federate the MDM domain. Once I federate the domain, can the users who are using the user assigned iPads continue to do so or will they have to be converted to logging into the devices with AppleID's created by federating the domain? I'm looking for more of a 'yes' or 'no' type answer. In other words, can the two types of login coexist?Announcing the public preview of Windows Autopilot for HoloLens 2
Microsoft is now bringing Windows Autopilot capabilities to every HoloLens 2 and Microsoft Endpoint Manager customer, allowing administrators to pre-configure new devices and set them up for productive use. Get all the details inYannis_Lempidakis's post on the Windows IT Pro Blog.Save the date: Ask the Experts - Securing Windows Devices with Microsoft Endpoint Manager
Save the dateand get answers to any questions you have around securing Windows devices with Microsoft Endpoint Manager in this special Ask the Experts event! This event will take place on Teams Live Events. At (or just before) 9:00 a.m. Pacific Time on Tuesday, October 27, 2020, visithttps://aka.ms/MEMATE/SecWinto join the meeting. We'll have members of the engineering and product teams on camera and on chat to help answer your questions large and small, including: Matt Shadbolt Mike Danoski Laura Arrizza Tyler Castaldo Aasawari Navathe Lance Crandall Dave Randall Dilip Radhakrishnan Mahyar Ghadiali Sameer Yadav Shiv Patel Matt Call We hope you can join us for a great discussion!
