User Profile
StefanKi
Iron Contributor
Joined 10 years ago
User Widgets
Recent Discussions
Re: AD connect not sync device objects
Sorry for my late response. I can see the devices in the metaverse. Here have some devices an $ sign on the end and some not. But the devices will not sync into the entra id. For an reason there was a group filtering in AD Connect configrued. The group has user and devices inside. User sync perfect. But the devices will not sync.74Views0likes0CommentsAD connect not sync device objects
Hello, I have a challenge. I installed AD connect the user objects are synchronized. Only the device objects are not synchronized. AD connect for device sync is configured correctly. As soon as I create a new device object in AD (in the same OU as the existing device objects / same group membership) it is synchronized. Only the existing device objects are not synchronized. I think it may be due to the security permissions of the device objects. How can I check it? Which security permissions the sync user needs on the device objects? What can I do to ensure that the device objects are synchronized? Thank you for your support? Regards Stefan731Views1like9CommentsReport conditional access policies and sign in logs
I would like to create a PowerShell report about the relation between sign in logs and the conditional access policies. For me it is important to see the effects of the conditional access policies (in reporting mode) on the user signs. Thank you for your support382Views0likes3CommentsRe: Rollout Windows hello for Business
micheleariis Thank you for your awesome support. That's a very good idea. That way I can simplify the rollout for the user. 1) Create a TAP for the user 2) Provide script (store - then the user can set the time, in a time frame, himself) 3) After the restart, the user can perform a pin reset on the start page348Views1like1CommentRe: Rollout Windows hello for Business
Thanks for the information. How can I make the process: “However, by automating the removal of existing credentials and implementing MFA, the migration process will be smoother.” ? I was thinking of a way via Destructive PIN reset and TPA. Here I can define a time period in which the PIN must be reset. The TPA must be used for the pin reset. How can I switch between non-destructive and destructive pin reset?430Views0likes3CommentsRollout Windows hello for Business
Hello, I would like to roll out Windows Hello for Business (cloud trust). The configuration with Endpoint Manager is complete. Everything works very well for new installations. There are problems with clients with activated Windows Hello (without Business). The only option here is to delete the Windows Hello configuration and then log on to the client with TPA. Windows Hello for Business can then be configured. Is there a better way to configure it for existings cliens with active windows hello (without Business)? If the user first login with password the PIN create runs in a timeout with the information it needs more secure informaton. The user has no MFA configured. Thanks for your help StefanSolved781Views0likes5CommentsAVD and Bicep
Hello, I’m trying to deploy AVD as ADD joined using bicep but it failed. The session host is created but not correctly assigned to the host pool. There is always an error with the DomainTrustCheck and DomainJoinedCheck My code: resource joinAzuredomain 'Microsoft.Compute/virtualMachines/extensions@2024-07-01' = { name: '${vmPrefix}/joinAzuredomain' location: location properties: { publisher: 'Microsoft.Azure.ActiveDirectory' type: 'AADLoginForWindows' typeHandlerVersion: '1.0' autoUpgradeMinorVersion: true } dependsOn: [ vm ] } resource dscextension 'Microsoft.Compute/virtualMachines/extensions@2024-07-01' = { name: '${vmPrefix}/dscextension' location: location properties: { publisher: 'Microsoft.Powershell' type: 'DSC' typeHandlerVersion: '2.73' autoUpgradeMinorVersion: true settings: { modulesUrl: 'https://wvdportalstorageblob.blob.core.windows.net/galleryartifacts/Configuration_1.0.02627.270.zip' configurationFunction: 'Configuration.ps1\\AddSessionHost' properties: { HostPoolName: hostPoolName registrationInfoToken: HostPoolToken aadJoin: AADJoin } } } dependsOn: [ joinAzuredomain ] } I follow steps found on the following links to make most of my deployment. Ref : https://rozemuller.com/avd-automation-cocktail-avd-with-bicep-and-azure-cli/ Ref: https://tighetec.co.uk/2021/07/07/deploy-azure-virtual-desktop-with-project-bicep/Solved909Views0likes5Commentsew created team to be indexed so that I can copy the files into it
Hello, I would like to create a Teams template with folders and files. Unfortunately this is not possible. That's why I created a MS Teams template from a template team. I generate new teams from this Teams template. This works. Then I copy the files from the template team to the newly created team using the copy function in Teams / SharePoint online. How long does it take for the new created team to be indexed so that I can copy the files? Because it sometimes takes up to 24 hours until I see the target ( newly created team ) in the copy function. Thank you for your support StefanRe: Powershell Script not running on Client
No. On the device is a folder "C:\ProgramData\Microsoft\IntuneManagementExtension". The folder is empty except for a subfolder "Logs". Inside the subfolder "Logs" there a the log files. Also there is no service "IntuneManagementExtension (IME)" on the device. Is it possible to install IntuneManagementExtension (IME) over Endpoint Manager?1.2KViews0likes2CommentsPowershell Script not running on Client
Hello, I had created a powershell script in Endpoint Manager / Inutne. But the script will not load and run a my Windows 10 test client. When I look on my test client i do not see the EnterpriseDesktopAppManagement CSP by Intune. I see only logs. When I create a configuration policies it will push ( also apps) to the client. What can I do to run ps scripts on the client via Intune? Regards StefanSolved1.4KViews0likes6Comments
Recent Blog Articles
No content to show