Yealink AOSP Phones and Intune Scep certificate configutation Profile
Hi, Im looking for guidance if Yealink Teams phones can have scep certificates deployed via Intune to be used for 802.1x authentication. We can push root certificates to the devices, but even though the scep certificate configuration shows that a certificate has been created it never gets onto the phone.AzureADSharedMode - Teams without PIN
I prepared in Intune profile for Samsung devices in kiosk mode with a multi-app setting. I added Teams, Outlook, Egde and Managed Home Screen as apps. In addition, I also created a configuration profile for the Managed Home Screen application in which I set that it is necessary to configure a PIN for the session. I also set the Require PIN code after returning from screen saver option. Everything works great until the user leaves the Teams app on or someone calls the user logged into Teams. At this point, no PIN is needed to unlock the device. You can easily access Teams of the logged-in user. The user is asked for the session PIN only when he wants to switch to another app. I didn't set screen lock in android settings because in my opinion it's pointless since the device is in shared mode. Have you encountered anything like this? It poses a potential security risk if a logged-in user leaves the Teams app open, puts the phone down and walks away from it, and at that moment someone calls the phone and the person who picks it up without probelm gets access to the logged-in user's teams.Deploying Microsoft Teams Rooms via Autopilot in Self-Deployment Mode
Description: We are experiencing issues with deploying our Microsoft Teams Room (MTR) systems via Windows Autopilot in Self-Deployment Mode. Despite following the official Microsoft documentation (https://learn.microsoft.com/en-us/microsoftteams/rooms/autopilot-autologin), the device fails to complete the login process. Setup Details: Device: Certified Intel NUC, previously in use. OS Installation: Windows 11 Pro pre-installed. Autopilot Import: The device was successfully imported into Autopilot. Group Assignment: GroupTag "MTR-ConsoleName" has been correctly assigned. Dynamic Group: The device appears in the associated dynamic MTR group. Profiles and Assignments: Deployment Profile and Enrollment Status Page (ESP) are assigned to the device. Teams Room Update App: Deployed via Intune and assigned to the MTR group (also included in ESP). LAPS: Local Administrator Password Solution (LAPS) is active on the device. Teams Rooms Pro Console: The device appears in the console and has been assigned to a resource account with a Teams Room Pro license. Issue: After completing the deployment process, the device hangs on the login screen and cannot connect to the resource account. This prevents the self-deployment process from completing. Steps Already Taken to Resolve the Issue: The device has been completely removed from Intune and Autopilot and re-added. A custom device restriction policy was created to ensure the device is allowed. All Intune and Azure policies were reviewed and optimized to avoid conflicts. Despite these efforts, the issue persists. Questions: Are there specific requirements or limitations that we might have overlooked? Are additional settings or policies required to ensure the device connects to the resource account successfully? Could existing policies, such as LAPS, interfere with the login process? Are there any known issues related to Autopilot and Teams Room deployments, particularly for previously used devices? We urgently request your assistance in identifying and resolving this issue, as these MTR systems are critical for our operations. Thank you for your support!
New Teams Won't Show in Start Menu or Add/Remove Programs After Intune Install
Hi.. We are starting to add the new Teams app to our Intune autopilot deployment sequence. We are using the teamsbootstrapper.exe file to install The problem is that while we know it does install as we can see the Teams folder in c:\ProgramFiles\WindowsApps directory, Teams icon/shortcut does not get added to the Windows start menu nor is it listed in add/remove programs. In Intune we've tried the following install commands: 1: teamsbootstrapper.exe -p 2: and this powershell script: function ProvisionTeams { param ( [string]$ProvisionMode ) if ($ProvisionMode -eq "AllUsers") { Start-Process -FilePath ".\teamsbootstrapper.exe" -ArgumentList "-p" -Wait -WindowStyle Hidden } elseif ($ProvisionMode -eq "CurrentUser") { Start-Process -FilePath ".\teamsbootstrapper.exe" -ArgumentList "-p" -Wait -WindowStyle Hidden } else { Write-Host "Invalid ProvisionMode specified. Use 'AllUsers' or 'CurrentUser'." } } # Provision for all users ProvisionTeams -ProvisionMode "AllUsers" # Provision for the current user ProvisionTeams -ProvisionMode "CurrentUser" And neither yield allow for Teams to show up in start menu for users to access. Anyone got any ideas????
Teams no longer autostarts and asks for login
Hello We switched the Update channel for Microsoft 365 Apps from Monthly Enterprise Channel to Current Channel (Preview) because it's recommended by Microsoft and we wanted the new Teams. Since then Teams is no longer autostarting after device enrollment and also asks for login. Previously it was always autostarting and logged in automatically. Some additional info: - Azure AD (Entra ID?) account is listed under Access work or school and shows as connected, so everything should be fine there and as mentioned is was working before. - We are only rolling out Teams from Microsoft 365 Apps, so no Word, Excel, etc. Has anyone else observed this behavior and does anyone know how to restore the old behavior? Thanks Michael
New Teams and Outlook not working for my organization.
Hi All. I've been trying to allow the New teams/Outlook for my organization. Here's how we curently have everything setup: We use Windows Information Protection with enrolled devices. WIP works with “classic” version of MS Teams and Outlook but not the latest “new” version that is being rolled out. We know that it relates to WIP, as both new versions work fine with WIP turned off. We don’t seem to able to add the correct details to the WIP policy in order to add the new MS Team and Outlook as protected apps (enlightened or unenlightened); they keep showing as “personal” in Task Manager “Enterprise Context”. These are the configurations that I've tried so far and didn't seem to work for both apps. Outlook Name: Outlook Product name: microsoft.windowscommunicationsapps Type: Universal app Publisher: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US Min Version: * Max Version: * Action: Allow Teams Name: Microsoft Teams Product name: * Type: Desktop apps Publisher: O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US File: ms-teams.exe Min Version: * Max Version: * Action: Allow Is there anyone who can advise with the WIP config or is there an alternative way to get the users to switch to the new Apps? Thank you.GPO settings for MS Store - teamsbootstrapper.exe says "Store Failure"
Dear Community, we're working hard to distribute apps via Intune. Currently we're having problems with MS Teams. We use the teamsbootstrapper.exe and get error codes 0x80073CF0 / 0x80073CF9 over and over again. Both errors point to the MS Store. The MS Store is activated in our company. Does anyone know which GPO must be activated or deactivated so that communication with the MS Store works without errors? I've tested it within a sandbox on my system - everything worked fine (only the download from teams didn't work caus of no connection to the MS Store). Thanks a lot!
Microsoft Teams not working when Company Intune Portal is installed
Hello can someone help me why MS Teams force to closed the app when the company intune portal is installed. I need the company portal to sign in on teams because of policy in our company. But when I installed it crashed the MS team app Using android 13.
