Windows 11 Autopilot and language packages
Hi everyone, I work for a Company with about 10.000 employees. We have a working SCCM envoirenment and an Autopilot PoC which should go live in the near future. The whole project was in cooperation with DELL. The problem here is that DELL scammed us a little bit, because they always ensured us, that we will get the DELL ready image for the region where Notebook is deployed (DELL ready Image contains the LPs for all countries in the Region e.g. central Europe, Asia pecific etc.). At the End Dell told us, that it us technically not possible to provide us this image and the only thing they can do is to provide us the basic US image That's where our problem started... We need some languages for our subsidaries in some countries. Thus we tried to create a package for the Language install. 1. First idea was to use the Powershell cmdlet install-language (https://learn.microsoft.com/en-us/powershell/module/languagepackmanagement/install-language?view=windowsserver2022-ps). The problem here is that this package runs pretty unstable. During Autopilot the command needs about 30 Minutes to finish. Sometimes the command throws an error: "Language Pack or feature could only be partially installed. Error Code: -2147023436“ (I guess it is a timeout but I didn't find anything on Google). The strange thing here is that this cmdlet runs pretty good and stable in private envoirenment. I tested it on my PC at home with Windows 10 22H2 and on a company device with the Microsoft en-US base Image (Win 11 23H2). With Autopilot it worked 70-80% of the time and the rest failed. It was very strange that in the logs the cmdlet faild with error Code: -2147023436, but after Autopilot finished, the Language was available if I called get-language. I also monitored it in the OOBE with the powershell. Result: cmdlet sometimes failed, Language was av Does anyone know how install-language works in the Background? Which URLs are called or what this error code means? Thank you for every kind of help Best regards Sven
Application Restrictions with Intune
Afternoon, I work for a school and we have started the migration to Intune but come across a sticking point for locking shared windows devices down under exam conditions. We require to prevent a specific exam user account from accessing all applications other than Word and Adobe DC Reader, therefor blocking access to apps such as maps, calculator, Edge, Chrome.... Currently this is achieved using AppLocker via Group Policy and set to apply to an AD user group that contains the exam user account. I have replicated the Applocker policies in Intune but don't see a way to apply these to an EntraID group in the same way as AD groups. The Device Configuration Policy is assigned to the exam user and has applied when logged in to a Shared Windows Device, however if another user logs on to the shared device they are also blocked from using the apps. Is there a way to ensure that only the specific user is restricted when signing in to shared windows devices ? Regards