2023E13 - Device Configuration (I.T)

[@JWBCvideos]

I started a working as the sole IT professional for a small organization recently, and I've been consuming your videos religiously to learn how to migrate us from an on-prem infra to our own cloud-first system. Thank you so much for all the info on Intune, its invaluable! I just this week have finally been deploying devices with Autopilot successfully, so this video couldn't be better timed to help me figure out how to fully manage my device configuration profiles. Once again, thank you thank you thank you!

[@IntuneTraining]

Thanks for sharing! It’s stories like this that inspire us to keep making content. Good luck with your cloud migration!

[@jonshaw2780]

@@IntuneTraining Yep, these videos are invaluable, thank you so much for making them. In my workspace I will soon have to configure a lot of shared devices. I'm in an educational environment so will need to lock down some users more than others.

[@DanielCarey-sp4xl]

Love these videos guys! It's kind of rough when you talk over each other but other than that the content is amazing!

[@thepete1338]

Really great content from you guys! Just been working on my Intune skills and your videos are a great help!!

[@leogaudier6232]

Very helpful videos. Please create a video about Dell Command Configure and Intune. Thank you!

[@borjagomezvillar2982]

Great video guys. Thanks! If I am correct the device administrator options will be deprecated this years but only for devices that have GMS so they can be enrolled with Enterprise, I understand device admin for non GMS devices will remain. :)

[@IntuneTraining]

That lines up with what we've heard as well.

[@mcrowl01]

Super helpful content guys! Thanks!

[@mrnobodyjo]

Thank you! Please do one episode on WDAC (not just Application Control) using Intune.

[@HollisMedley]

We use PIM for azure joined local device admin and have no problem issues at all! Once it refreshes after verifying activation, I can immediately use my creds for admin prompts. Didn't know other people had issues with this.

[@johncorbin355]

I'd certainly like to know how to see if a policy / setting fails on the device side AND a session on compliance, seems we have different #'s of non compliant devices in different places inside Intune

[@borjagomezvillar2982]

Have you guys noticed the new Windows configuration profile called "BIOS configurations"? I cannot find a public article about it or detect it in the What's new in Intune. Weird. Thanks

[@IntuneTraining]

Are you talking about DFCI? learn.microsoft.com/en-us/mem/intune/configuration/device-firmware-configuration-interface-windows

[@borjagomezvillar2982]

@@IntuneTraining not that one, at least in my tenant I can see one just right before the custom one that is called "BIOS configuration", it only allows to select Dell as manufacturer, select per device bios password and upload a configuration file, there is a bellow message indicating it requires a Win32 app, but there is no link to article or more info. Thanks

[@DamagedDingo]

Problem with Mac is the packaging. With windows you can just use something like PSADT and make software available or required, but with Mac you are severely limited in what’s possible. Can either package an app that can only be included or excluded, or you have to go the LOB route that requires signing packages. The last option is to put everything in a shell script but again you can’t make it available nor will it then show as a managed app on the device. Not sure if this is an Apple or MS issue but not being able to manage devices in a similar fashion makes management extremely difficult.

[@Hans-gb4mv]

Mac has an even bigger issue they still haven't solved. We don't want our users to be admin on their device. JAMF can do it, why can't Intune still not do it?

[@DamagedDingo]

@@Hans-gb4mv we allow ours to be admins so I don’t know about that, but with the coming platform sso changes I’ve seen you can create standard users now.

[@bayzantine4715]

Please could you do a video about WDAC ?

[@Hans-gb4mv]

My number 1 priority would be getting around the forced reboot when enabling it. It messes up everything.

[@bayzantine4715]

@@Hans-gb4mv you could check "Deploy Microsoft Defender Application Control policies without forcing a reboot" from Peter van der Woude. There is blog about it

[@Hans-gb4mv]

Should I trust someone who, after 5 years, still messes up the intro? Meh ... it's the internet. What could go wrong?

[@IntuneTraining]

You should see when Steve tries it!

[@snek101]

Thank you guys! Always helpful!🫶🏼