User Profile
GerardoHernandez
Brass Contributor
Joined 3 years ago
User Widgets
Recent Discussions
Re: Blocking USB drives but allowing USB Mouse & Keyboard
Hi, This is what you are looking for: In Settings Catalog System > Removable Storage Access ------------------------------------------------------------------------ Removable Disks: Deny read access (User) Enabled Removable Disks: Deny write access (User) Enabled2.4KViews2likes3CommentsRe: No Drivers and Firmware updates option available
Hi It can take a couple of weeks to be shown in all tenants. https://techcommunity.microsoft.com/t5/windows-it-pro-blog/manage-windows-driver-and-firmware-updates-with-microsoft-intune/ba-p/3851402 David_Guyer Microsoft Jun 26 2023 09:34 AM Wanted to let everyone know that the release is starting today and will be done throughout the week across Intune scale units. So, if you don't see it right away, check throughout the week, it's in progress!1KViews1like2CommentsRe: Enforcing blank value in Settings Catalog, Local Security policies User Rights
Oh well...that is Microsoft issue. At least the policy works. My problem is it takes too long (don't know exactly how long) to overwrite changes done by a creative user (to say so). as it now allow changes. That is the main concern for me.3KViews0likes0CommentsRe: Enforcing blank value in Settings Catalog, Local Security policies User Rights
Hi JimmyWork Was just facing the same issue and I tested the CIS value: No one <Blank> And also the Value from doing Group Policy Analytics [] Both of them were written in the registry and even if you edit (which is possible in local policies with Intune (don't know why)) after another sync or some time I guess the values went back to blank. Still waiting on other policy where I added another account to see if it leaves the policy value. Im trying to create MS baseline with Intune and just what is missing in Intune add it in a small GPO. Hope it works.3KViews0likes2CommentsRe: What does blank in ServiceProfileIdID means?
manoth_msft Thanks! For some reason none of my devices get the ID but they do get the officeupdate registries after the process you mentioned. Many were completed already so they didn't get the policy until today (couple of days after PT). Maybe if they don't get the ID is not a big deal?2.1KViews0likes5CommentsRe: What does blank in ServiceProfileIdID means?
Hi, Thanks for the information on the task schedule. Regarding the registries that means that we enroll the devices 2 weeks ago when they were update no actual enrollment was done until this month's cycle? So most of our devices won't follow the policies until probably next month? My device for example should update on day 0 and it still won't get any registries even if it was showing fine in the inventory and dashboard in servicing profile2.1KViews0likes7CommentsRe: What does blank in ServiceProfileIdID means?
manoth_msft Hi! What about having ServicingProfileId empty and also non existent officeupdate under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\cloud\office\16.0\Common. We have enrolled devices about 4 days ago. All looks good from the Console with devices showing as complete or not started but devices are not getting the configuration. We checked the office serviceability manager task schedule and it looks like is yet to run but everyday remains the same. If you run it manually it ends with an Operational Code 2 (the output been Task Scheduler successfully completed task "\Microsoft\Office\Office Serviceability Manager" , instance "{GUID here}" , action "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe" with return code 0.), but still shows as it has never ran before. What could be happening?2.2KViews0likes1Comment
Recent Blog Articles
No content to show