What happens if you have Windows 11 and 10 workstations in your environment how do add both build numbers to the device properties?

This doesn't work for me. As of right now, if I setup the enrollment like you have showen, then add the company portal app to my android and log in, I don't get any of the other setup options like you do, it just takes me to the apps screen and shows me "no app available". I even see a warning in the devices tab under "my andorid". Your device does not meet requirements to enroll and may not be able to gain access to some of the resources.

"Whats a catalog folder? No clue, I've hit no every single time." LOL thanks for making me feel better by doing the same thing forever. ⁠😂😂 Glad you guys have been enjoying life but nice to see a long video too!

Love these videos guys! It's kind of rough when you talk over each other but other than that the content is amazing!

Did you guys release a newer version of this video?

Can you have both Configuration Policy and Disk Encryption running to make sure devices are covered? I ask because we only set Config Policy and we have machines that are not encrypted or were previously encrypted and Intune did not escrow keys.

nothing about non-user .ppkg / BPRT enrollment via powershell in SYSTEM context for non-domain devices with local user accounts only 😞 (my use cases are very specific)

I got a certificate Authority and managed to configure the template and PKCS as per the company requirements. It's been working for almost a year with all platforms "Android, Windows, macOS." Everything seemed to be fine until we tried to enroll new macOS devices at the beginning of July. We noticed that the certificate policy doesn't work only with macOS devices. We checked Intune reports and found that everything works well in terms of deploying the policy, but it comes up with an error with no codes. We reviewed the root certificate on the app school manager, and it seems fine. The certificate type is: device. The subject alternative name: UPN. This problem takes place on just the new macOS devices as the oldest ones work well. Any insights?

Hey guys, great video, thanks for the content! One thing I wasn't quite clear on: what prevents a user from using their work account in their personal folder? For example, if BYOD is set up with two versions of Outlook (one in the personal folder, one in the corporate folder), how can I restrict users from logging into Outlook with their corporate email in the personal folder? They might do this for convenience, but the issue I see is that I wouldn't be able to manage the corporate data in this scenario, which poses a security risk. Edit: I was thinking about using Conditional Access Policies (CAP) to ensure that Outlook only opens if the device is compliant. However, I still don’t see how this would prevent users from using their corporate email in their personal account.

Very helpful videos. Please create a video about Dell Command Configure and Intune. Thank you!

As always, very informative video. Any way y'all could do one that goes over enrolling the device as a Microsoft Entra Shared Mode device? I'm so lost on how SSO works on it with multiple users. I've set it up to test, but I am not sure I'm doing it right and I haven't found much documentation or any good videos on it. The purpose I am trying to fulfill is to provide an iPad for a certain Team that will need to have one user using it when they are in the office as an alternative to using a laptop, but it is also going to be needed for other users to use for events where they may play music connected to a bluetooth speaker or have it setup to do surveys so they can hand it to people to fill out. We are a University in Texas, and this will be used for multiple purposes and multiple users. So, I didn't think doing Enroll with User Affinity was the way to go. Any videos you could do on this particular mode would be great! Thanks guys!

So you guys idea of the future is that admins have a computer at home to run printers? This seems highly unlikely. The whole video is anything but serious anthing but how a real company would want to do anything. I mean.... it's a useless tool for the home user and you guys "explain" it is a way thats completly useless and unprofesional for corperate users as well. A real company is not going to set a connector up on a random computer that is unmanaged in your example a random laptop. So what if the user takes the laptop home or the laptop is turned off? What a rubbish "demo"

Great tutorial. Can you cover in a future video how and when it will be best to use a powershell script to install a win32 app and wrap it with intunewin?

Ahh thanks guys! This was great! Also, Adam, totally read the Adobe app the same way 🤭

Impeccable timing 🤣I just spend a few days struggling with a CA policy and in the end having to actually build a solution to bypass it. We are doing deploys with Autopilot and, don't hate me for this, they are hybrid joined. Believe me when I say, I did my best to make them non-hybrid and we have placed it back on the roadmap, maybe next year, with Windows 12 as we are killing our last dependency on the hybrid join. But anyway, not the topic of this post. As everyone knows, hybrid is a pain in the ass because you need line of sight to your domain controllers when you initiate the account setup phase. For this, I can use our VPN provider which does provide a pre-logon authentication provider. The VPN solution also utilizes authentication through Intune and is guarded by conditional access. One of the requirements is that you either have a hybrid joined device or your device is compliant. This is to prevent the VPN software from being installed and used from a non company laptop. As some might have guessed, this does not work while you are in the OOBE. I could get the laptop to report as being compliant in Intune, but the CA always reported that the laptop was in fact not compliant. In the end I contacted Microsoft and they told me that it will most likely not work (can't really say they were sure of their own answer) until the laptop had completed the hybrid setup. So far, I luckily have not yet locked myself out of any tenant with those policies, but we did once get close on our firewalls. We were working with the vendor on onboarding new firewalls while in a migration project and at one point the engineer made a change on the already active firewalls that disabled the HA link between the active and standby firewall so both became active. All hell broke lose and I, as the newbie with a few days in this new company, was left with the only working browser session to the management platform. Saved us an emergency drive to the datacenter which on a good day is 40 minutes away. By the way, did you guys skip over the break-glass account you were going to set up first? Because that is an internal discussion we are currently having inside our company as MS appears to be enforcing MFA on those as well these days and mgmt isn't happy with the solutions being proposed.

Been doing more and more CAP with APP on all my Intune projects lately - specifically blocking native mail and requiring Intune enrollment to use O365 apps. Good stuff as always. Please make some APP videos. I get them until I don't. LOL. Would love to see you guys setting them up.

Wooo i miss you guys

If you want to prevent users to gain permanent local admin rights by adding their Entra account to the loacal admins group, you can now use Endpoint security > Account protection > Local user group membership to remove all users from le Administrators group

@10:55 I can't get to have this screen appearing in an iPad I'm testing with... both devices (configurator installed iphone and the new ipad) are in latest iOS17 version available, started both fresh and still can't see it. I don't see that having the 'configurator iphone' ABM enrolled in advance is a prereq, isn't it? what am I doing wrong here?

Hey guy's is there an update method to this for 2024, or is this still the default?

Nailed it 😃

Hi there! I setted up properly everything, but I have an issue. After a computer enrolled in Intune, it gets the user cert, and the root cert, but when I want to connect to a Wi-Fi network, NPS says: "Authentication failed due to a user credentials mismatch. Either the user name provided does not map to an existing user account or the password was incorrect." The only thing what I found is the user missing the certificate from local AD userCertificate attribute. Does anybody faced with this? Thank you!

I'm still very much hybrid with AD/SCCM, but recently moved all our app installs over to Intune, slowly getting there!

Howdy I.T Training! I was wondering if you would consider doing a new Intune/MacOS PSSO video using the password method instead of the User Enclave method and step us through it all. My understanding is that we shouldn't need to use the CP to do the enrollment where it wants to download a new management profile. Currently, ours is doing this and we aren't sure why. Thanks for the consideration.

How can you map the drive but use specific credentials?

Please reboot this.

When you hit the sync button "multiple times" - I realise I wasn't alone in this world LOL. What about onprem printers? I am okay with file access.

Passed my md-102 today with the help of these videos. Watched all of your Intune videos from the last ~9 months and it really helped on the test. Ms-102 content next ?🙏🏽

After deploying this I am getting " Incorrect PIN" I have tried resetting the PIN multiple times but still no luck, anyone seen anything like this?

Congrats guys for this channel and for helpful videos. You rock ❤

Awesome, thank you so much!!! When's Ben getting a title and some pay, and can we clone him? 😂😅😂 🎉🎉🎉❤❤❤

why do 'Available for enrolled devices' apps enroll quicker than required apps?

I'm fairly well versed in app packaging, but this was worth watching solely for the GIF integration portion! Never knew I needed this.

Is the IntuneWinApp application ever going to be FIPS compliant? It is a little annoying for us to have to turn off the reg setting, build the package, then turn it back on.

When iam starting the company portal he wants to set up intune enrollment. But this was setting up at start so i dont understand why. All enrollment profiles are already installed but the portal show up its not enrolled. Any advice?

I still need to install the profiles after log in to the company portal. What is the problem here? Of course its not possible to install the profiles because they were enrolled automatically

I have zebra android scanners, and I was wondering about the dedicated management of these systems as they are focused tasks.

This method no longer works. I tried removing the mail and Xbox apps (User and System context).

What Im struggling to understand is how to transition from managing machines by OU in AD to Intune. I cant make groups off of an OU so I dont know how to group machines.

Love these videos. Windows Updates Reboot soon?

Is it possible If we have using the Hybrid ENV , and need to map drive the local AD (through by IP)?

The beards are getting longer guys!

Hello! I would like to know if these problems have already been corrected in 2024?

is byod user supposed to select 'join this device to AAD'? i thought "join" was only for corporate devices

Thanks for the training videos, guys. I love the bubbling tension between you two just simmering under the surface at all times

i love your video, steve im based in sydney as well and would love to meet up with you one day

"Maybe, if you care"... lol

Can you cover WDAC?

Adam and Steve! Good to see you guys again. Great content.

I was just thinking how I have missed the Steve and Adam show.. and there you all are!