You can tell summer is over when the shops are stocking Christmas decorations! To all of you returning from the Workplace Ninja summit, I hope you had a great time.
Community Content
We start this week with the 8th part of the Windows 365 series from Niklas Tinner, concluding why it is a technolog you should be considering for your organisation
https://www.oceanleaf.ch/windows-365-why-its-a-revolution-for-windows-2
An often overlooked aspect of app deployment, monitoring and managing exit codes. Learn more in this post from Nicklas Olsen
https://www.learnintune.net/exit-codes-the-key-to-smooth-app-deployments
If you’re deploying ARM devices and hitting issues with MDE, check out this script from Joost Gelijsteen
https://joostgelijsteen.com/resolving-mssense-issues-windows-11-24h2/
If you are still deploying office templates with Win32 apps and PowerShell scripts, please try doing it the better way as covered here by Alex Durrant
https://letsconfigmgr.com/office-template-deployments-with-sharepoint
Whilst the Enterprise subscription fix has worked for many, it still isn’t 100% and there are some occasions where it won’t work. If this applies to you, Rudy Ooms has you covered as usual
https://call4cloud.nl/2024/09/subscription-activation-issue-stuck-on-pro/
We now have two posts from Michael Niehaus, the first is an update to the Autopilot branding package to fix the MDE issue on ARM devices which have been built from a Home base image.
https://oofhours.com/2024/09/14/autopilot-branding-package-updated-for-mde/
Michael’s second post looks at the MS announcement that updates will be force installed during OOBE (more in the Microsoft content below)
https://oofhours.com/2024/09/16/cumulative-updates-will-be-installed-during-oobe-like-it-or-not/
If you are using EPM, this excellent troubleshooting guide from Michael Meier is well worth bookmarking!
https://mikemdm.de/2024/09/15/troubleshooting-intune-endpoint-privilege-management/
Peter van der Woude also looks at EPM troubleshooting, but using the included PowerShell module
Deploying Adobe Creative Cloud via the Store integration is currently broken due to a missing version number. This post from Simon Skotheimsvik looks at using the WinTuner module to deploy the faulty app using Winget
https://skotheimsvik.no/wintuner-the-ultimate-fix-for-microsoft-store-app-problem
Next, Prajwal Desai looks at the new logging for Win32 apps, where to find the log and how to interpret the output
https://www.prajwaldesai.com/intune-appworkload-log-for-win32-apps/
Prajwal also takes a look at all of the available logs here
https://www.prajwaldesai.com/microsoft-intune-management-extension-logs/
You can now use the Graph API to register Fido2 keys on behalf of users as covered here by Jan Bakker
Next, Maxime Guillemin continues looking at certification, this time end-to-end setup for iOS devices with SCEP
https://cloudflow.be/ios-and-certificate-based-authentication/
If you’re having issues with duplicate device names from Autopilot provisioned machines, Ľuboš Nikolíni has a solution for you
You no longer need to create a Google account to connect Intune to the Managed Play Store, learn more here from Torbjorn (Mr T-Bone) Granheden
https://www.tbone.se/2024/09/19/the-new-way-of-connecting-microsoft-intune-with-managed-google-play/
Mattias Melkersen Kalvåg has a deep dive here on exactly what happens when windows updates itself during OOBE
https://msendpointmgr.com/2024/09/19/oobe-will-force-you-to-quality-update-during-onboarding/
Learn how to remove the classic Teams client with the bootstrapper tool in this post from Jesse Weimer
https://www.getrubix.com/blog/bootstrap-the-classic-away
When dealing with Graph, sometimes it is difficult to find out what permissions a particular command needs (without digging around in Graph explorer). This script from Harm Veenstra will do the hard work for you and quickly list what you need
https://powershellisfun.com/2024/09/19/query-the-required-permissions-of-a-microsoft-graph-cmdlet/
If you’re onboarding iPadOS devices with MDE, this post with hints and tips from Rahul Jindal is worth a read
https://rahuljindalmyit.blogspot.com/2024/09/intune-web-based-device-enrolment-with.html
Video Content
Now onto the video content, starting with a look at how to automate compliance reports from Sujin Nelladath
The built-in filters don’t include device type to restrict apps to particular chassis, but you can use a requirements script as covered here by Steve Weiner
Steve also looks at using filters for assignments
We have a third video from Steve showing how to collect custom logs from Intune
In the latest podcast from Shady Khorshed, Maxime Guillemin discusses cloud PKI
Microsoft Content
Here is the official Microsoft announcement covering updates during OOBE from the Intune Support Team
The Windows app is now generally available, learn more here from Hilary Braun, Ankur Biswas and John Spencer
macOS 15 is causing some compliance issues with Stealth Mode as covered here by the Intune Support Team
That’s it for this week, have a wonderful weekend!