Видео

Great run through as always guys! Much appreciated.

This video is incredibly impressive and highly informative. It provides clear and comprehensive guidance for anyone struggling with application packaging. The explanations are easy to follow, and the tips are practical and useful. Thank you for creating such a valuable resource! I wish to connect with Intune Admin so discuse more up coming issue in the world of Intune.

Great video. Tip, add the time 00:00 in the description. Then RUclips will add the time marks in the video it self.

Great news with iOS update in settings catalog! You had to wait for the next Intune release for Microsoft to add the newest iOS version number. If they remembered to… sometimes they forgot

Great as always 🎉

Hooray Nickolaj and your mic 🙂 It could definitely be closer to you as there's still a bunch of room sound, however, it's vastly improved from last time 😀 Thank you! 20:27 - I'm a bit confused with the enrollment requirement. Previously you had to enable personal devices to enroll because there was a bug that did not let anything enroll even if the corporate id was added. Is this bug fixed? Do we still need to enable personal devices? (I haven't tested yet as I just checked a minute ago and see that my tenant now has the new id type for CSV upload). 39:25 - Where did you get that new Company Portal app from? My tenant version is 11.2.58.0 (installed via New Store). I'm guessing it's in beta? 41:34 - Ah this reminds me I need to re-test the enrollment to see if my group gets populated now (it was broken before). OS Version picker - This is great to see but it's frustrating when they start putting similar settings in multiple spots. It adds to the confusion when trying to set it up - where do I do it?

Hey guys, that is amazing stuff ❤ I just started to work with PSADT and would love it already, thanks a lot 👍

Is Intune capable to skip versions? In my case we have W10 22H2 machines and I would like to replicate your setup, with the exception that the feature update will be set not to "Windows 11" but "Windows 11, version 23H2"

hello guys, may i get your query to find out changes described in video? :)

Thanks guys - looking forward to the macOS stuff :)

Sorry for the terrible sound, I had forgotten to move my mic closer (it's standing behind my monitor) 😅

Thanks again guys. Would be interested to hear how you guys are exporting the log files to do your own reporting? Is it Automated?

Great insight with the Bitlocker policy. Maybe Mattias could show us how he set up the log analytics workspace and show us some more example queries?

Thanks guys! Good points all around. - The UI for Company Portal is a car crash. So much wasted space, and useless info. This doesn't look any better. The status messages are inaccurate, laggy at best. It's massively unresponsive. - The security baselines are unusable because of conflicts, they conflict with each other, and with your existing endpoint security policies. It's nuts that Intune lets you create conflicting policies without even warning you about it. Why do we have to assign them to devices, and then manually check for conflicts post enforcement? It shouldn't be hard for it to warn you and even suggest how to resolve conflicts. - One the one hand we are told 'device names don't matter', and then we find Entra and Defender get swamped with stale device records. How do we know what these are, which are duplicates? That's fiddly. We try to assign device names based on serial number, but this should be easy in all deployment scenarios, and it should be easier to discover and resolve duplicate devices. - with the Android pre-prov, do all the assigned apps land before initial user sign in? And once they sign in to Intune app, are they pre-authenticated to Outlook, etc??

Nickolaj, I know your office isn't done yet, but maybe grab some cushions or towels or something to reduce the echo in the room a bit?? It's hard to hear you. Thanks!

11:55 - We were too eager and added many of our computer to Autopilot in the beginning before we knew what it would do in the back end and ended up with a whole load of these temporary entra objects (they show up as NO_SERIAL in many reports). Is there any way of removing them? We have since removed all but required devices from the AP Device list. 18:28 - I added the correct SP as the owner of the group but the ADP Profile keeps removing it after I save the profile. No idea what's happening. I also don't have the tuple csv upload option yet so I'm wondering if those are related. Finally - first time watching this series, well done! The only critique I have is Nickolaj's voice is a bit difficult to hear due to the room echo. Perhaps a headset mic or dedicated lapel mic would be better?

I really love your videos. Keep up the excellent work!

1st 😀

I have applied a scoping filter for the single OU that I need to sync for two AD security groups. This all saves properly. However, when I go to enable the configuration, I get an overview of what changes will occur and the scoping filters section at the bottom shows clearly "All Users" even though my configuration has defined scoping filters setup. In your demo, I can see that your configuration review shows the scope filters you applied using your custom OU. Is this a known bug? I am using the latest agent version installed on my on-prem DC. Thanks for any suggestions.

Not sure anyone will answer this question, but how can I setup BIOS profiles? and change any\all device BIOS settings from within Intune? and is this even possible? We use Lenovo & HP laptops. Any help is appreciated .. thx

Thank you for taking me from zero towards hero

Hi there, I cant seem to get my head around support approved, am i right in syaing you dont need to create a rule as it should just allow a user to ask for approval on any app ? my user can just simply double click the exe and it runs, is this normal ?

So I have users already existing in my azure Ad then I setup a new on prem ad then went ahead to install and configure cloud sync but when I try to provision, I get the azuredirectoryserviceattributevaluemustbeunique error. This is because of the proxyaddress and objectid. How do I resolve this serious

Hi, great video. Is it possible that you could make a special video with only "Auto update available with Win32 app supersedence". I think as an Intune admin this new feature is great, and I would like to know 100% how to use it. How do I set up the install command lines correctly for the superseeding app, see some examples etc.

Great video, thanks. Wording at 19:43 can be a bit confusing. Pretty sure the setting is applied during enrolment only and doesn't apply to already enrolled devices.

49:21 copilot for security is really expensive thus much and fast feedback from use cases will not really flushing in I believe. But I do want to see it grow to easy the troubleshooting for IT support guys, so they can discover the issue faster and less press on second or thirdline teams

Hi Mattias, When trying to run your app, I'm getting the following: Error: "This installation package could not be opened. Contact the application vendor to verify that this is a valid Windows Installer package."

Thanks guys - great as always

Thanks a lot for this recap , very helpful

Amazing Content !!

Intune Superstars are back 🤩

Awesome - thank you for the update!

❤

Hi, unfortunately the repo is no longer available. Is there a way to still download the whole thing?

The problem is all the software you cant get in msi format and no silent install parameters for the exe

What do you think the most common title would be for someone who does all this (config/build/deploy/manage AAD/intune). Would it be system administrator or IT administrator or something else? What would differentiate System Administrator from System Engineer?

Thanks guys really appreciate these videos as an admin. 👍👍

Thank you both, excellent walkthrough.

Thanks for the content

Great Video! would it be possible to get the link to where the scripts are located?

I also think that the new name "App Control for Business" sounds like a non-enterprise product. Confusing naming :D

Amazing tool. Thanks!

I wanted to say thank you for your work. I am learning along the way about the PowerShell Application Deployment toolkit. Thank you Johan and Andrew for introducing this videos. Thank you Guys for your help

Yeah the ready button was crazy annoying. Thanks guys and have a nice holiday. Enjoy it.

Hey, how do you add the custom domain to on prem before you do the sync?

1. Initial Setup and Choices: The video begins with an explanation of downloading and installing the Cloud sync installer on a domain controller, recommending a separate server for production environments. The presenter discusses the choice between HR-driven provisioning and on-premises application provisioning, emphasizing the benefits of HR-driven provisioning, which includes Azure AD Connect Cloud sync. 2. Authentication and Service Account Creation: The user must authenticate (preferably with a Global admin or hybrid admin account) to proceed with the setup. The video highlights the creation of a Group Managed Service Account (gMSA) for secure and efficient operation, advising against custom account creation unless necessary due to complex organizational structures. 3. Domain and High Availability Considerations: The presenter advises that the installation can be done in disjoint domains without needing trusts, recommending the installation of multiple agents in each domain to ensure high availability. 4. Cloud Configuration and Agent Monitoring: Once the on-premises setup is complete, the video shifts to cloud configuration in the Entra portal. Here, the presenter demonstrates how to monitor the installed agents and set up the Cloud sync configuration, including choosing domains and enabling password hash synchronization. 5. Scoping, Attribute Mapping, and Synchronization: The final part involves setting up a scoping filter using organizational units or distinguished names for targeted synchronization. The video guides through attribute mapping customization and concludes with enabling the configuration, explaining how synchronization occurs every 10 minutes and can also be triggered on-demand for specific users.

Not sure if anyone else picked it up on the drop-down list that was scrutinized.... What is the difference between "Select All" and "All"? It seems like this could be 2 options for the same thing. Again, if GA I question the QA process.

Hello Team, I am searching for good blog to migrate SCCM to intune with Co-management, Migrating workloads, polices and all. With detailed plan if there is

Great videos and amazing skills Bravo 👏👍

Thanks guys! Always a pleasure.