Video

If you want to prevent users to gain permanent local admin rights by adding their Entra account to the loacal admins group, you can now use Endpoint security > Account protection > Local user group membership to remove all users from le Administrators group

@10:55 I can't get to have this screen appearing in an iPad I'm testing with... both devices (configurator installed iphone and the new ipad) are in latest iOS17 version available, started both fresh and still can't see it. I don't see that having the 'configurator iphone' ABM enrolled in advance is a prereq, isn't it? what am I doing wrong here?

Hey guy's is there an update method to this for 2024, or is this still the default?

Nailed it 😃

Hi there! I setted up properly everything, but I have an issue. After a computer enrolled in Intune, it gets the user cert, and the root cert, but when I want to connect to a Wi-Fi network, NPS says: "Authentication failed due to a user credentials mismatch. Either the user name provided does not map to an existing user account or the password was incorrect." The only thing what I found is the user missing the certificate from local AD userCertificate attribute. Does anybody faced with this? Thank you!

I'm still very much hybrid with AD/SCCM, but recently moved all our app installs over to Intune, slowly getting there!

Howdy I.T Training! I was wondering if you would consider doing a new Intune/MacOS PSSO video using the password method instead of the User Enclave method and step us through it all. My understanding is that we shouldn't need to use the CP to do the enrollment where it wants to download a new management profile. Currently, ours is doing this and we aren't sure why. Thanks for the consideration.

How can you map the drive but use specific credentials?

Please reboot this.

When you hit the sync button "multiple times" - I realise I wasn't alone in this world LOL. What about onprem printers? I am okay with file access.

Passed my md-102 today with the help of these videos. Watched all of your Intune videos from the last ~9 months and it really helped on the test. Ms-102 content next ?🙏🏽

After deploying this I am getting " Incorrect PIN" I have tried resetting the PIN multiple times but still no luck, anyone seen anything like this?

Congrats guys for this channel and for helpful videos. You rock ❤

Awesome, thank you so much!!! When's Ben getting a title and some pay, and can we clone him? 😂😅😂 🎉🎉🎉❤❤❤

why do 'Available for enrolled devices' apps enroll quicker than required apps?

I'm fairly well versed in app packaging, but this was worth watching solely for the GIF integration portion! Never knew I needed this.

Is the IntuneWinApp application ever going to be FIPS compliant? It is a little annoying for us to have to turn off the reg setting, build the package, then turn it back on.

When iam starting the company portal he wants to set up intune enrollment. But this was setting up at start so i dont understand why. All enrollment profiles are already installed but the portal show up its not enrolled. Any advice?

I still need to install the profiles after log in to the company portal. What is the problem here? Of course its not possible to install the profiles because they were enrolled automatically

I have zebra android scanners, and I was wondering about the dedicated management of these systems as they are focused tasks.

This method no longer works. I tried removing the mail and Xbox apps (User and System context).

What Im struggling to understand is how to transition from managing machines by OU in AD to Intune. I cant make groups off of an OU so I dont know how to group machines.

Love these videos. Windows Updates Reboot soon?

Is it possible If we have using the Hybrid ENV , and need to map drive the local AD (through by IP)?

The beards are getting longer guys!

Hello! I would like to know if these problems have already been corrected in 2024?

is byod user supposed to select 'join this device to AAD'? i thought "join" was only for corporate devices

Thanks for the training videos, guys. I love the bubbling tension between you two just simmering under the surface at all times

i love your video, steve im based in sydney as well and would love to meet up with you one day

"Maybe, if you care"... lol

Can you cover WDAC?

Adam and Steve! Good to see you guys again. Great content.

I was just thinking how I have missed the Steve and Adam show.. and there you all are!

Amazing!! i will present this video to the team!! can you make a video about GSAC? Keep up the good work!!

25:10 what did johannes say?

can you please explain why you block all byod? that would mean employees cant work from home or cellphone unless you provision laptop for them? if they entra join byod + conditional access/compliance policy then personal device should be no concern?

11:50 would it be more secure to allow auto enrollment for a default security group that includes ALL staff?

7:30 is this still true, only way supported by msft for domain joined to entra only? once you wipe, you would then configure for AP?

can you do a video on connecting google workspace with intune and entra

license assignment has been moved to 365 admin as of september 2024

my devices enrolled with no assigned group and I can't find a place that will let me add them to a group

Great Deep Dive Video..Thanks Joy and Anoop

this is nice dive in windows enrollment options but usually the company's with existing on-prem DC switching first to hybrid to ensure they manage their devices and push heavy software's by SCCM on-prem... etc , as still the intune will be slow slow for heavy SW to be installed!

Hey Adam! Hope you are doing well! Can you tell me exactly how I block users from being able to download/install all games/gaming applications on their windows devices, whether from the Microsoft Store, the web, downloading them from online, etc. Where in Intune can I block this? I need to block users from being able to get games/gaming applications on their Windows devices…

thanks for video! its means what is AAD devices need to access on-prem service (like shared drives) is enable sync with password and the device should be able to communicate with on-prem servers like ping! is this right?

Does this also include other versions of Linux, CentOS, AIX and Ubuntu?I want to onboard all Linux servers to MDE.

i have installed apple configurator and trying to enroll devices to intune - i can see the devices in ABM but unable to enroll devices in intune- it shows it's ready to renroll. i made sure profile is assigned to device. later is reset deivce and it shows it controlled by my organisation but no apps are pushed like company portal etc. Can you please guide me what am i doing wrong. or do it have to install company portal manually

Thank you for this great tutorial. is there a similar video about how to renew this TLS when it reaches its expiration ?

Intune will end support for user enrollment with Company Portal shortly after the release of iOS/iPadOS 18, because Apple will no longer support profile-based Apple User Enrollment. From what I understand the Account driven user enrollment: Also referred to as account-based enrollment is the new way to enroll BYOD iOS devices.

Thanks for your videos! I have trial business premium subscription which extended (2 months), is it possible i can trial E3 now with same tenant? Or can i create new trial tenant using same registered credit card ?