HP TamperLock(Hardware) - Information in MS Intune
Can someone help me with this: I want to know if a HP hardware TamperLock(Cover removal sensor) feeds it's information into Microsoft Intune or SCCM. If yes, where can I see it? Irrelevant of whether the check boxes in BIOS are checked or not, if someone opens the back cover, then it should trigger in MS Intune.
Zebra OEMConfig APP not in the APP policy list in Intune
Hi, I have a question about adding an APP policy in Intune. I installed the Zebra OEMConfig Powered by MX app through the Intune Google Managed Play Store. When I try to create an app policy for this app, it doesn't show up in the app list. A lot of other apps do, but this one specifically doesn't. The app does appear in the all apps list in Intune. According to Microsoft, the app is fully supported in Intune. Does anyone have experience with this or any tips on how to get the app to appear? I hope someone can help me out! TIA.I no longer have an edit button for assignments on one EndpointSec>DiskEncrypt>Bitlocker profiles
I have two Intune>Endpoint Security>Disk Encryption>Bitlocker policies. One is the 2+ year old deprecated policy everyone is currently on, and the other is a new policy I made two months ago. I am in the process of testing to move the company from old to new. Old policy no longer has an "Edit" button for group assignments and exclusions, much like when you don't have permissions. However, I am still able to edit the actual policy. Has anyone seen this or can help with this? Attached picture. I am using Intune Administrator permissions, and again, it's not a permissions issue as I can edit the actual policy. I have tried different browsers. I have tried another computer. The policy is scoped to default. I was last able to edit group assignments 10/25/25 Solution right now will just be to delete the old profile and move to new with no more testing. Thank you in advance, -ZP
Uninstalling bundled/preinstall O365 during Autopilot
We recently purchased a bunch of new HP ProBook 400 laptops that come bundled/preinstalled with O365 x64. However, since all staff use a 32-bit line of business application, we need to install and use O365 32-bit. We want to Autopilot the new laptops and have packaged and deployed O365 32-bit as a Win32 app (ie: using the Office Deployment Tool and a custom XML configuration). The XML file contains commands to remove any existing versions of Office before installing O365 32-bit. When we manually run the ODT setup.exe with xml file, it functions correctly (i.e., it uninstalls the 64-bit O365 and then installs the O365 32-bit). However, when we package this up as a Win32 app and set it as a mandatory app in the Autopilot deployment profile, it seems to fail or get ignored. All other Intune apps and configuration profiles install successfully, but the laptops still have O365 64-bit installed. Below is what we included at the top of the ODT XML file. Any suggestions would be greatly appreciated. <Configuration> <Remove All="TRUE"/> <Display Level="None" AcceptEULA="TRUE"/> <Property Name="FORCEAPPSHUTDOWN" Value="TRUE"/>
Platform SSO - MacOS Authorization Groups and Additional Groups
Working with Platform SSO...all is well for the most part. Has there been any advancements or continued development for Authorization Groups and Additional Groups? The ability to leverage these groups, IMO, is critical. I do have some scripts granting some general authorizations to users on a device (time, print, network), but leveraging groups to manage authorizations/ permissions with a diverse group of users and needs is the way.InTune Enrollment Loop for MacBook loops at i.manage.microsoft.com during setup
Good afternoon, is anyone using InTune seeing issues with enrollment? I have ABM set up with InTune for automatic enrollment. The InTune instance is fairly new and simple. In the last two months, I have rolled out four machines with painless success. I bought a fifth machine and it gets stuck during the Remote Management portion of enrollment, in an endless loop of connecting to http://i.manage.microsoft.com/. Between the last enrollment and now, absolutely nothing was changed in InTune. The machine is a M4 MacBook Air on OS version 15.7.1. I have reset it multiple times to no avail. It doesn't seem to be getting stuck on anything and shows up as responsive in InTune. If I force the machine off and back on, it allows me to complete enrollment, but after a reboot, I get the initial setup screen and when proceeding past that I get a black screen that never progresses. I assume this is an enrollment issue. Where would you suggest starting to troubleshoot this? Has anyone seen it so far? The last successful setup on my tenant before this was around three weeks ago. Thanks in advance! Other things I have tried: Renewing the ABM enrollment token Removing troublesome configuration profiles Creating and using another enrollment program token profile Different networks, including the network I successfully enrolled previously successful machines in Different user accounts with the correct license for InTune management Logging into ABM to make sure that there are no pending terms to accept. I confirmed that I accepted the latest new ABM terms directly from ABM.Configuration profile to set File and browser preferences in Outlook Options > Advanced
Hello, Wondering if anyone has found a way to set these settings in Outlook (classic) via Intune. We do not want hyperlinks from Outlook opening with Edge and likewise we do not want email attachments for office files opening in the browser, we want them to open with the office apps.
Ubuntu 24.04 LTS + Entra ID Authentication + Intune Enrollment
Hi Community I want to combine in Ubuntu 24.04 LTS the new user authentication with Entra ID along with enrollment in Intune using the new version of the intune portal. The goal is that the user can log in Ubuntu with the local user created during the Device Authentication process and then be able to enroll in Intune and sign in to the portal whenever he wish. During my tests, I have seen that if you install the necessary components for authentication with Entra ID, along with Microsoft Edge and the Intune company portal using the Ubuntu installation user, and then authenticate with the Entra ID user after the device authentication process, you get this error when you try to enroll using the company portal: Continuing with my tests, I have seen that if you start Microsoft Edge you can save a default keyring with a password. This security feature is specific to GNOME as far as I have read. With this keyring, it will be possible to enroll the device in Intune later. When starting the company portal, the default keyring password is requested, and after entering it, enrollment can be completed. From then on, the user can sign in to the portal as long as they enter that password However, the generation of this default keyring is a process that we do not want to leave in the hands of the user. The goal is to deliver the device to the user with all the necessary software, so that once they have authenticated the device with Entra ID, they can open the company portal and enroll in Intune. Does anyone know if there is a way to avoid using such keyrings in a scenario like this? On a machine with only Ubuntu and Edge, it is possible to make this process transparent, by disabling user autologin or setting an empty password for this keyring, but in the scenario of Ubuntu + Entra ID + Intune, I can't manage it. Thanks for your help and I wish you a great 2025
Entra Application: "Windows Backup and Restore" blocked OOBE autopilot enrollment
I have a Conditional Access policy to block users not on a Compliant Windows PC and the Intune app and Intune enrollment app are excluded from the CA policy for device enrollment. Last night I manually added a reimaged Windows PC to Autopilot (using PowerShell) and during the OOBE user sign-in the app "Windows Backup and Restore" failed for token issuance. This app, Application: Windows Backup and Restore | Application ID: 74d197dc-b84d-4d43-a1b2-b5bf3bb91c11 is not found in Entra Enterprise apps or App registrations. The Windows OS build was 25H2 Pro, looks like a new service. It would be nice if MSFT would add these new apps to Entra. Now I need to manually add the app using PowerShell so I can exclude it from my policy. Anyone have any news about the Application: Windows Backup and Restore | Application ID: 74d197dc-b84d-4d43-a1b2-b5bf3bb91c11?
