Thank you for your feedback and appreciation. I'm glad you found the video informative. Unfortunately, I do not have PPT's available for this video at the moment. However, feel free to reach out to me if you have any specific questions or need further clarification on any topic discussed in the video. Thank you for watching!

Thank you for your kind words and for watching the video. I'm glad you found it informative. If you have any questions or would like to see more content like this, feel free to let me know. Thank you again for your support.

Thank you for your feedback. We understand that personal preferences vary, and we appreciate your suggestion for a more customizable start button placement. We will definitely take your input into consideration for future updates. Thank you for watching and supporting Windows.

Hi theeban1987, Thank you for bringing this issue to our attention. It seems like there may be a compatibility issue with Google Chrome blocking downloads on company devices. We recommend trying to download the file on Microsoft Edge as an alternative. We apologize for any inconvenience this may have caused and we will look into resolving this issue as soon as possible. Thank you for your understanding. Sincerely, Paddymaddy

Hello Karthikg548, thank you for your question. While I cannot speak to specific questions that may be on the current AZ-900 certification exam, I can say that Microsoft regularly updates its exams to ensure they reflect the most current technologies and industry trends. It is always a good idea to review the most recent exam objectives and study materials to ensure you are prepared for any new topics or changes that may have been implemented since the time of this video. Good luck with your certification journey!

Hello @viji001, In a hybrid situation where Windows devices are not enrolled in Intune, preventing file downloads can be challenging. However, you can consider implementing the following measures: 1. Implement a network firewall to restrict access to certain websites or types of files. 2. Use a mobile device management (MDM) solution to enforce policies on device usage and data access. 3. Utilize endpoint protection solutions to monitor and control file downloads on devices. 4. Educate users on the importance of secure downloading practices and the risks associated with downloading files from unknown sources. These are just a few suggestions, and I recommend consulting with a cybersecurity professional for more tailored solutions to your specific situation. Thank you.

Yes with defender cloud app

Hello naveenkumara435, Thank you for reaching out. I recommend checking this page learn.microsoft.com/en-us/mem/intune/fundamentals/free-trial-sign-up Best regards, Paddymaddy

I just used "Microsoft Inture Plan 1 for Education" and which gave me 90days trial.

Thank you for your comment. I appreciate your feedback!

Hello, thank you for reaching out. I would be happy to help you with patching using Intune. Can you please provide me with more information about your specific needs and we can work together to find a solution? Feel free to message me with any additional details. Thank you.

@@PaddyMaddy26 Hi Sir, Iam new to Intune now a days all the organizations will be asking Intune as well as sccm. so, In that case Iam seeing your videos in KZbin. One of friend told me that learn how to do Patching using Intune. Can you please provide that video also

It’s already cover Praveen

Hi Sir , How to track the interview on Intune can you please provide me Real time interview Questions to track the Interview

Thank you for your feedback. We will definitely take note of the English in our future videos to ensure a better viewing experience for all our viewers. Thank you for pointing that out.

@@PaddyMaddy26 It might sound mean or bad, but not meant so. But consider making the video and running AI voice-over for script. It might be simpler for production as the visuals are great.

Hello RameshYadav-ke5bl, Thank you for reaching out with your question about other certifications for becoming an Intune architect admin. In addition to the MD-102 certification, I would recommend looking into certifications such as Microsoft 365 Certified: Modern Desktop Administrator Associate, Microsoft 365 Certified: Security Administrator Associate, and Microsoft 365 Certified: Enterprise Administrator Expert. These certifications will provide you with a well-rounded knowledge and skills needed to excel in the Intune support role. Additionally, staying up to date with the latest advancements in cloud technologies and attending professional development courses or workshops can also help further enhance your expertise in this field. I wish you the best of luck in your journey towards becoming an Intune architect admin and your upcoming transition to Intune support. Thank you for considering my suggestions. Best regards, Paddymaddy

Hello @machisri, thank you for your suggestion! I will definitely consider creating a video on Generative AI in Databricks in the future. Keep an eye out for updates on my channel. Thank you for your support!

Hello venkateswarluyadav6880, It's great to hear that you are considering taking an Intune course to further your career growth. As a Device management support executive, gaining expertise in Intune can definitely enhance your skills and open up new opportunities for you. Intune is a widely used device management platform that is in high demand in the industry. I would recommend taking the course to expand your knowledge and stay ahead in your field. Best of luck in your career advancement! Warm regards, Paddymaddy

Ee videos lo full course cover avuthundaa

@satoo3118 Thank you for taking the time to watch my video and leave a comment. I appreciate your feedback and support. If you have any other questions or suggestions, feel free to let me know.

Hello rajakumarn8036, To gain access to GitHub, you will need to create an account on their website. You can sign up for an account by visiting the GitHub homepage (github.com/) and following the instructions to create your account. Once you have created an account, you will have access to all the features and tools that GitHub has to offer. If you have any specific questions or need further assistance, feel free to reach out to GitHub's support team or consult their documentation for more information. Best regards, Paddymaddy

@@PaddyMaddy26 thanks for the classes

Hello, thank you for your interest in our SCCM+Intune course. I am happy to inform you that we offer a comprehensive course that covers all the features and functionalities .. in this channel stay tune for more course updates starting from this week

@@PaddyMaddy26 prasent cals vastunna ya indulo feature baaguntunda

@rabinreddy78 yes it will

Hello @jongomez3480, I understand your concern about the copy library ID option no longer being available. One possible solution to quickly retrieve the value could be to manually locate and note down the library ID from the SharePoint site or document library settings. Alternatively, you may consider reaching out to the SharePoint support team for further assistance on how to obtain this crucial value. I hope this helps you in resolving the issue. Thank you for your comment.

Thank you for letting us know that the solution worked for you. If you have any further questions or need assistance, feel free to reach out.

Hello sheraazaliinamdar1216, EMS 5 (Enterprise Mobility + Security) is a separate license that can be purchased in addition to either M365 E3 or E5 licenses. It provides additional security and management features for mobile devices and users. If you have any further questions or need more information, please feel free to ask. Thank you.

@@PaddyMaddy26 thanks a lot for the response and I really appreciate that, That means download blocking conditional access policy is not included in M365 E3 and E5

Hello KumariCh-de1uc, Thank you for your comment. In order to restore a VM from backups, you can use an existing storage account that is in the same region as the VM. However, it is important to ensure that the storage account has enough capacity to accommodate the restored VM. Using an existing storage account for restoration should not overwrite any other data that exists in the storage account. The restoration process will only affect the specific files and data required for the VM restoration. If you have any further questions or concerns, please feel free to ask. Thank you for your understanding.

@@PaddyMaddy26 Thanks Maddy

@@PaddyMaddy26 Thanks Maddy will come with some questions. Your azure videos are so nice👍

@@PaddyMaddy26 enough capacity means? For example if the vm has 2TB os and data disk. Storage account should have this capacity. If yes can you please specify where we need to define the size while creating storage account.

Hello KumariCh-de1uc, Thank you for your questions regarding creating a new VM from an existing domain joined VM using a snapshot. 1. Creating a new VM from a snapshot of an existing VM will not affect the existing VM. The snapshot is a point-in-time copy of the VM's disk, so any changes made to the new VM will not impact the existing VM. 2. When deploying a VM from a snapshot in Azure, it does not automatically run sysprep during the deployment process. You may need to manually run sysprep on the new VM if necessary. 3. Yes, when creating a VM from a snapshot, it will have a new hostname and a new SID (Security Identifier). 4. If the VM snapshot is domain joined, the new VM created from the snapshot should retain its domain join status. However, you may need to verify and ensure that the necessary configurations are in place for the new VM to automatically rejoin the domain after deployment. I hope this answers your questions, please let me know if you need any further clarification. Thank you.

@@PaddyMaddy26 So if we run the sysprep for azure vm. After power on normally it will ask admin password and some other default setting . But in azure we don't have the console how this will be proceed. Can you please create a video on this to have better understanding

Hi KumariCh-de1uc, Yes, you can run sysprep on an Azure VM and then power it on and add it to a domain. Sysprep is a tool used to prepare a Windows installation for duplication, allowing you to create a customized image that can be used to deploy new virtual machines. After running sysprep on the Azure VM, you can power it on and join it to a domain just like you would with any other Windows machine. I hope this information helps. Let me know if you have any other questions. Thank you.

Feel free to comment as a new comment to get immediate response. Running Sysprep on an Azure VM is a common practice to generalize the VM before capturing it as an image. However, there are some key considerations and steps to follow: 1.Running Sysprep: You can run Sysprep on an Azure VM, but it is essential to understand that Sysprep generalizes the VM by removing system-specific data. This includes machine-specific security identifiers (SIDs), settings, and more. Once generalized, the VM will be in an out-of-box experience (OOBE) state on the next boot, requiring you to complete the setup process again. 2.Taking a Snapshot vs. Image Capture: Snapshot: A snapshot captures the state of the VM's disks at a specific point in time. While you can use a snapshot to create a new VM, it is not the same as an image. A snapshot is best used for backup or restoring a VM to a previous state. Image Capture: Capturing an image of a generalized VM creates a reusable template that can be used to deploy multiple identical VMs. This is ideal for creating standardized environments. 3. Post-Sysprep Considerations: If you Sysprep a VM and take a snapshot, you can use that snapshot to create new VMs. However, each VM created from the snapshot will be in the OOBE state and will not automatically join the domain. After creating a new VM from the snapshot, you will need to complete the OOBE process, set up the VM, and then manually join it to the domain. 4. Recommendations: If your goal is to deploy multiple VMs with a consistent configuration, it's better to capture an image of the generalized VM. This image can then be used to create new VMs that will also be in a generalized state, ready for domain joining and further configuration. If you only need to restore the state of a single VM, taking a snapshot might be sufficient. In summary, while you can use Sysprep on an Azure VM and take a snapshot, using an image is generally the preferred method for deploying multiple VMs with consistent configurations.

So you mean if we deploy a vm from the snapshot . Azure will take care of sysprep during vm creation process This kind of vm creation will it effect the running domain vm where we taken the snapshot

Hello, thank you for sharing your experience with testing entra hybrid join and Intune. It sounds like you are encountering an issue with one of the devices not fully enrolling in Intune despite showing as enrolled in entra hybrid join. Based on the error codes you provided (azureprt:no and attempt status:0xc0090011), it seems like there may be a specific configuration or licensing issue causing the problem. I would recommend checking the device's Intune and Azure AD license assignments, ensuring that the user has the appropriate licenses and permissions for enrollment. Additionally, double-checking the Intune automatic enrollment settings and any conditional access policies that may be affecting the enrollment process. If the issue persists, it may be helpful to reach out to Microsoft support or your IT admin for further assistance in troubleshooting this enrollment issue. Thank you for bringing this to our attention.

@@PaddyMaddy26 hi paddy user has Microsoft 365 E3 license and no conditional access policy blocking

Hello Winterbear009, To remove a device from Microsoft Intune, you will need to follow these steps: 1. Sign in to the Microsoft Endpoint Manager admin center. 2. Go to Devices > All devices. 3. Select the device you want to remove. 4. Click on Actions and then select Retire/Wipe. This will start the process of removing the device from Intune. Keep in mind that the device might still show up in the portal for a short period of time until the process is completed. I hope this helps! Let me know if you have any other questions.

@@PaddyMaddy26 okay sir. Bye what if the device is registered using samsung knox? Because on intune it's not visible tries searching using IMEI number.

Hello @kiranalla9599, thank you for reaching out. I'm sorry to hear that you are having trouble downloading a specific file. In order to assist you better, could you please provide me with more details about the issue you are facing? This will help me find a solution for you. Thank you for your cooperation.

Pls provide EMS E3 or E5 trail license URL.

Hi @rohithlethota4308, Thank you for watching my videos and for your positive feedback. I'm glad you found them informative. If you have any suggestions for future content or any questions, feel free to let me know. Happy to help! Best regards, Paddymaddy

Sir I'm working as sccm admin and partial intune related activities in Accenture from 2.5 years Need your personal guidance to foster my growth in this domain ..could you please help me

Hello MrSachinraj, thank you for your comment. At this time, we do not have any plans to start a series specifically focused on Defender for Endpoint. However, we are always open to suggestions for new content and will certainly consider adding it to our future content schedule. Thank you for your interest and feedback!

Thank you so much for your kind words! We really appreciate your support and love. Have a great day!

Hello @yomicode802, thank you for your feedback. It is possible to modify the script testing option to send notifications to a specific batch of users instead of everyone in the organization. You can achieve this by customizing the script to target only certain users based on specific criteria such as role, department, or location. This way, you can tailor the notifications to reach only those users whose passwords are about to expire. Thank you for watching our presentation!

@@PaddyMaddy26 Thanks for the response.

@@PaddyMaddy26 May I get your assistance to modify script testing option to send notifications to only a few testing users for now?

Hi pramod2bobby, I'm sorry to hear that you're experiencing issues with implementing the policy to only allow corporate USBs and block the rest. It sounds like you've followed the steps correctly and the policy rules have been successfully applied, but the problem still persists. I would recommend checking the configuration settings again to ensure everything is set up correctly. You may also want to double-check the permissions and access rights on the policy group and rules. If the problem continues, it may be helpful to check events… ensure you added properly the serial number and other values shown, you can use hwinfo tool to extract the usb details and enter these values … for sure it works…

Hello PoojaTale-o6b, thank you for your kind words about the video. I'm glad you enjoyed it! The video you watched is a standalone piece, but I do have a series of videos on similar topics that you may enjoy. Feel free to check out my channel for more content. Thank you for your support!

Thank you for your feedback on our video. To specify all users in a particular distribution group, you can use the Get-DistributionGroupMember cmdlet in PowerShell. This cmdlet allows you to specify the distribution group you want to retrieve users from and can help you narrow down your search to only include members of that specific group. If you have any further questions or need assistance with this process, please feel free to reach out.

where you able to resolve this with the distribution group? if so please kindly share the change you made on the script if you can

Hello @mazdanaqvy3754, thank you for your comment. I appreciate your feedback. If you have any questions or concerns, feel free to reach out to me. Thank you for watching my content.

This is the same video what’s not there in this video as per you?

Hello vinodkumardalai5844, Thank you for reaching out with your question. In regards to your inquiry about creating a configuration profile to allow specific hardware IDs and USBs, it may depend on the specific requirements and capabilities of your system. Intune Defender Endpoint Security is a robust option that can help manage security configurations and policies for your devices. It offers advanced protection features and can be an effective solution for controlling access to hardware peripherals like USBs. I would recommend discussing your specific needs and goals with your IT team or a cybersecurity professional to determine the most suitable option for your organization. They can provide insights on the best approach based on your unique environment and security requirements. Thank you for considering these options and feel free to reach out if you have any further questions or need additional assistance. Best regards, Paddymaddy

Hello @ezazamber007, thank you for your suggestion. I will definitely consider making videos in Hindi or English in the future. I appreciate your feedback and support. Thank you for watching!

Hello! Thank you for your comment. If you have any questions or feedback, feel free to let me know. I appreciate your support.

Thank you for your question. The price of $8 for Microsoft Intune Plan 1 is typically a monthly cost per device license. This means that the $8 fee would need to be paid each month for each device that is being managed under the Intune Plan 1 subscription. If you have any further questions or need clarification, please feel free to reach out. Thank you.

Hi inertiafantasm6316, Thank you for your question! When using Microsoft Intune for app management, the process does require you to log in to download and manage apps. However, you should still have the ability to download apps from your iOS device without logging in to Intune. Intune is primarily used for managing apps and devices within a work environment, so you may not need to log in for personal app downloads. I hope this clarifies things for you. If you have any further questions, feel free to ask! Best regards, Paddymaddy

​@@PaddyMaddy26 That did! I'm mainly trying to discover these because I'm setting it up for myself and a client on a work trip that requires us to leave the country. Our goal was to: 1) If the phone was lost or stolen, be able to wipe it or lock it for email. 2) control email so it can only be assessed in the US. Let me verify the 2nd one and ask again if I have anymore questions but that helped!

Hi srinivasnaidu173, Thank you for reaching out about the issue you are experiencing with BitLocker and device compliance on your device. It seems like there may be a misconfiguration or an issue with the device compliance policy settings. I recommend checking the following steps to troubleshoot the problem: 1. Ensure that the device is indeed encrypted with BitLocker. Check the BitLocker settings on the device to confirm this. 2. Verify that the BitLocker recovery key is available for the device. You may need to retrieve this key from the BitLocker management console. 3. Double-check the conditional access policies applied to the device and ensure that they are correctly configured. 4. Check for any errors or warnings in the Intune console that may provide more information about the compliance issue. If the issue persists after checking these steps, I recommend reaching out to Microsoft Intune support for further assistance. They may be able to provide more specific guidance on resolving the compliance issue. I hope this helps, and please let me know if you have any further questions or concerns. Thank you.

Ideally the policy may not be applied to this device

@@PaddyMaddy26 policy applied.but tpm not enabled in the device may be this is the issue