Applications not appearing in Company Portal
I am looking for some help on why my applications I set up in Intune are not appearing in our Company Portal. Background Info: I work for an MSP and we have a client that we are taking on with devices enrolled in Intune. We have a remote agent that we would like to push to one of our clients as a Win32 app and make it a required install for the devices. My Setup: I have run through the process of packaging the app as a .intunewin file, I don't believe there is any error here. I am familiar with the install/uninstall commands and have tested via a direct install on a VM to ensure they work. I have a group set up with both a test user, and the test VM which is enrolled in Intune. I assigned this group and required the install. I also made the application available to all users in the Company Portal. The Issue: I believe all of these settings and setup are correct; however, I am not seeing any install or anything show up in the Company Portal. I verified that the device is definitely Intune-enrolled from within Endpoint Manager, and I verified I was logged in as my test user to the Company Portal app. I also checked the online version and same issue there. Within Intune, if I go to Devices > 'Test VM' > Managed Apps I can see my application listed there, with a status of "Waiting for Install Status". After letting this cook overnight, nothing changed. I synced from the VM and from Endpoint Manager with no success. To eliminate some of the complexity, I set up another app, this time just Spotify from the Windows Store which is fairly cut and dry. Same issue- I made it available for all users, it says that status is "Available for Install" from within Endpoint Manager on my test VM, but I see no apps in the Company Portal on that device. Has anyone experienced this before? Can you see anything I may be missing? Thanks in advance for any help you provide.
Revoking elevated privileges in Endpoint Privilege Management
I found a thread from last year asking this question. When I revoke someone's elevated access in Intune Endpoint Privilege Management (removing them from the AD group linked to an Intune EPM policy) the "run with elevated access" option remains in the right click context menu. The post from last year said it can take hours for access to be removed but that the app was still in preview mode. This was over a year ago so I'm wondering if anyone from Microsoft or anyone can advise if this is now quicker or if there is a way to speed it up? We want to start a secondary proof of concept with multiple policies with different levels of access, but testing this would take so long if we're waiting 8+ hours each time we remove access. Thanks allIssue setting up Managed Google Play in Intune Endpoint
When trying to setup Managed Google Play in Intune Endpoint, it sometimes lets me check the box, and sometimes it is greyed out. After I select to Launch when I can check the box it either asks for my google account which I put in my business account after having signed in to the page per https://learn.microsoft.com/en-us/mem/intune/enrollment/connect-intune-android-enterprise and it comes up and says the page has expired. Refresh on your EMM console. Have tried a couple times and not getting anywhere. There has been some discussions on Reddit and such in the last 24 hours about this so wondering if there is an issue somewhere? I don't see anything in the M365 system health about an issue.
GIA - Get Intune Assignments Application
Hello Everyone, Some time ago I was struggling to get all Assignments Intune for a Specific Azure AD Group. This option does not exist at console, and we need to run a lot of queries at MS Graph and/or use PowerShell to retrieve. So, to help the community I started to create PowerShell scripts to help to query some of the Assignments but, still, I had a lot of scripts each one to retrieve a specific type of items (like profiles, conditional access, apps, etc). After a while I decide to develop a C# .NET Application to facilitate the process. Today I want to share with all you my GIA App (Get Intune Assignments). It's available on my gitHub page: https://github.com/sibranda/GetIntuneAssignments I hope this app can help you guys the same way is helping me and my customers. RegardsGIA - 2.0 - Get Intune Assignments
GIA - Get Intune Assignments Hello everyone I just released a new version from my App. https://github.com/sibranda/GetIntuneAssignments/releases/tag/v2.0 It's a C#.NET application developed for Intune to query MS Graph Information from Intune Assignments who target the Azure Ad Groups. You can export the data to CSV file if you wish. In this new version you can get information from the following types of assignments: Adm Templates; Applications; App Config Policies; Autopilot Configurations (new on 2.0); App Protection; Conditional Access; Compliance Policies; Configuration Profiles; Settings Catalog; Endpoint Security Policies; Enrollment Restrictions (new on 2.0); iOS App Provisioning (new on 2.0); Policy Sets; PowerShell Scripts; Proactive Remediations (new on 2.0). All this from a Graphic Interface with just a few clicks. https://github.com/sibranda/GetIntuneAssignments/releases/tag/v2.0 Please send me any feedback you want. This can help me to fix bugs and make better solutions to help everyone.
Turn on device encryption, endpoint
Hi, I have migrated to new macOS device using Migration assistant and in company portal it states to Turn on device encryption even though FileVault is turned on. We got following setup: All devices have been managed by our organisation, we use macs In Endpoint there is Compliance policy setup that requires computer to have FileVault disk encryption enabled. If it is not, device will not be compliant. After migrating to new mac it shows the disk encryption is not setup even though it is. Have tried to turn it off and on again but some basics do not really help in this case. When checking the status in Company portal it still shows the same that it is not compliant. Maybe someone knows what could be done so this could be fixed? Other option would be to reinstall macOS but do not really want to do it.
UPN missing from Devices in Endpoint
Hello all, At my workplace we have a mixed AD/AAD environment. We need to deploy a specific configuration profile through Endpoint, which, I've found out, is pending for all of those devices which aren't having any UPN associated. All those machines have a "primary user" configured, but for the majority of those older machines (which are also in the AD), no UPN is attached to the device. All our clients are based on Windows 21H1. I managed to get one working by assigning one user to a machine and then logging in with this user. After that the user relative UPN was correctly assigned to the machine. On another device I wasn't able to replicate this solution, so it's not clear to me what's wrong. What can I do to be sure to assign the UPN of the primary user to her/his device?Unable to block organizational data from appearing in Teams mobile notifications | Intune
This message is associated with Microsoft 365 https://www.microsoft.com/microsoft-365/roadmap?rtc=1&filters=&searchterms=66744. The app protection policy is created and it works for MS outlook but the notification is not blocked for MS teams. The MS team is on its latest version. quick help will be appreciated.
