![Mobile Jon](/img/default-banner.jpg)
- Видео 288
- Просмотров 159 164
Mobile Jon
США
Добавлен 15 янв 2021
Mobile Jon, a mobility and UEM evangelist shares some great tutorials to building various technologies.
Creating Microsoft Entra Auth Strengths for Conditional Access Policies
Creating Microsoft Entra Auth Strengths for Conditional Access Policies
Просмотров: 37
Видео
Using Entra Conditional Access Policies to Block OneDrive Downloads
Просмотров 4712 часов назад
Using Entra Conditional Access Policies to Block OneDrive Downloads
Windows Autopilot Pre-Provisioning Technician Workflow
Просмотров 14414 дней назад
Windows Autopilot Pre-Provisioning Technician Workflow demo showing the "technician side" of the best Autopilot option as featured in my blog article: mobile-jon.com/2024/05/06/windows-11-best-practices-part-one-onboarding/
Windows Autopilot v2 (Device Preparation) OOBE User Experience
Просмотров 16121 день назад
Windows Autopilot v2 (Device Preparation) OOBE User Experience of a device using the new device preparation policies and corporate device identifiers in Microsoft Intune
Setting up Microsoft Autopilot v2 and Corporate Identifiers
Просмотров 12721 день назад
Setting up Microsoft Autopilot v2 and Corporate Identifiers
Using Intune Remediations to Help with the Crowdstrike Driver Issue
Просмотров 292Месяц назад
Using Intune Remediations to Help with the Crowdstrike Driver Issue Blog Article with GitHub Links can be found here: mobile-jon.com/2024/07/19/using-intune-remediations-to-address-massive-crowdstrike-outage
Setting up Windows 365 Cross Region Disaster Recovery
Просмотров 94Месяц назад
Setting up Windows 365 Cross Region Disaster Recovery
Checking Windows 365 Cloud PC Cross-Region Disaster Recovery Status in Intune
Просмотров 71Месяц назад
Checking Windows 365 Cloud PC Cross-Region Disaster Recovery Status in Intune
Using the M365 Apps Admin Center to Manage Office Updates
Просмотров 2342 месяца назад
Using the M365 Apps Admin Center to Manage Office Updates with things like moving Update Channels, Pausing Updates, and Rolling Back Updates
Using Temporary Access Passes to Enroll in Microsoft Authenticator
Просмотров 1282 месяца назад
Using Temporary Access Passes to Enroll in Microsoft Authenticator as featured in my blog article: mobile-jon.com/2024/06/26/moving-toward-a-passwordless-world-powered-by-temporary-access-passes-and-passkeys/
Enrolling Windows Devices with Microsoft Authenticator Passkeys During OOBE
Просмотров 1192 месяца назад
Enrolling Windows Devices with Microsoft Authenticator Passkeys During OOBE as featured in my blog article: mobile-jon.com/2024/06/26/moving-toward-a-passwordless-world-powered-by-temporary-access-passes-and-passkeys/
Enrolling Windows Devices in OOBE with Temporary Access Passes
Просмотров 1572 месяца назад
Enrolling Windows Devices in OOBE with Temporary Access Passes as featured in my blog article: mobile-jon.com/2024/06/26/moving-toward-a-passwordless-world-powered-by-temporary-access-passes-and-passkeys/
Setting up Temporary Access Passes in Microsoft Entra
Просмотров 1412 месяца назад
Setting up Temporary Access Passes in Microsoft Entra as featured in my blog article: mobile-jon.com/2024/06/26/moving-toward-a-passwordless-world-powered-by-temporary-access-passes-and-passkeys/
Creating your Microsoft Authenticator Passkeys on iOS
Просмотров 3162 месяца назад
Microsoft Authenticator Passkeys on iOS User Experience Demo as featured in my blog article: mobile-jon.com/2024/06/26/moving-toward-a-passwordless-world-powered-by-temporary-access-passes-and-passkeys/
Building OneDrive for Business Policy in Intune for Folder Backup and Sync Health Monitoring
Просмотров 2302 месяца назад
Building OneDrive for Business Policy in Intune for Folder Backup and Sync Health Monitoring
Creating Device Control Policies in Microsoft Intune
Просмотров 4003 месяца назад
Creating Device Control Policies in Microsoft Intune
Configuring App Control for Business in Microsoft Intune
Просмотров 6093 месяца назад
Configuring App Control for Business in Microsoft Intune
Workspace ONE to Intune: Ask Us Anything About Our Journey and Our Migration Tool | Webinar 5/29/24
Просмотров 6213 месяца назад
Workspace ONE to Intune: Ask Us Anything About Our Journey and Our Migration Tool | Webinar 5/29/24
Importing Security Baselines into the Microsoft Intune Settings Catalog
Просмотров 5993 месяца назад
Importing Security Baselines into the Microsoft Intune Settings Catalog
Setting up and Using FIDO2 Passkeys in Microsoft Entra
Просмотров 6994 месяца назад
Setting up and Using FIDO2 Passkeys in Microsoft Entra
How Do Windows Autopatch Groups Work?
Просмотров 3134 месяца назад
How Do Windows Autopatch Groups Work?
Configuring the Local Admin Password Solution (LAPS) in Microsoft Intune
Просмотров 7345 месяцев назад
Configuring the Local Admin Password Solution (LAPS) in Microsoft Intune
Locking Down the Local Administrators Group on PCs with Intune
Просмотров 3215 месяцев назад
Locking Down the Local Administrators Group on PCs with Intune
Deploying Apps from the Intune Enterprise Application Catalog
Просмотров 1965 месяцев назад
Deploying Apps from the Intune Enterprise Application Catalog
Working with Templates in ControlUp Secure DX
Просмотров 425 месяцев назад
Working with Templates in ControlUp Secure DX
ControlUp Secure DX Admin and Remediation Demo
Просмотров 805 месяцев назад
ControlUp Secure DX Admin and Remediation Demo
Using ControlUp Edge DX to monitor Microsoft Teams Performance
Просмотров 616 месяцев назад
Using ControlUp Edge DX to monitor Microsoft Teams Performance
how can we do this without e5 license?
You could buy a defender for cloud apps license, they’re 3.50 per user
Is it possible to log into the local PC with a local admin account? I have enabled local admin and laps on intune, but when I try to log in with it it still tries to put me through to a cloud pc (and fails, because the local account doesnt have a cloud pc). This is in dedicated mode.
@@divinity176 not with Boot. You can access local settings from the settings menu for certain things
Can you use this with Autopilot V2?
Not yet. Pre-provisioning will be coming at a later time.
Hi, Can we do it in On-premises?
I'm guessing the question is if AD has support directly for passkeys. No, it's only in Entra.
Does Autopilot v2 support white gloving? Would you do a video comparing the pro's and con's on v1 vs v2 as so far v2 seems to be a step back from v1.
@@bw_merlin sadly it doesn’t. That’s one of the things we lose. From my perspective I don’t even like calling this v2 because the only problem it seems to solve is OEMs fighting us about hardware hashes
@Mobile Jon, when you return from getting well. Can you tell what does choosing the "Enter xml data" option does? I know you showed the path to see those example defaulted xml's there but what do they do or mean to have a need to select any of them? 2nd Thing: If selecting the 2nd option "Use built in-controls" I understand the choosing of Enforce or Audit Mode But the selecting additional rules for trusting apps: you selected both. The second one , "trust app from managed installers" That only applies if we DID Add the Intune Management Ext as the Managed Installer right? ( I read on the Microsoft documents that you did NOT have to add the IME as a managed installer, it wasnt required) I am curious about this because apps in our environment are managed by Intune and a third party tool Patch My PC. So my BIGGEST Question is how does using this WDAC (App Control for Business) allow me to be able to block users from downloading, installing, accessing games/gaming applications on their Windows device? What "policy" do I use to conquer this task?
So you didnt need to install the WDAC Wizard? I didnt see you do any of that
As far as I know, the wizard is needed for building policy. My examples were just for using the base policy. The wizard does make life way easier though when building policies.
Hey @mobile Jon I am asked to block users from being able to download/install games/gaming applications on their window devices, whether it's from the MSFT store, the web, online, etc. How do I block this in Intune? How can I block all the gaming applications from being able to be downloaded on Window devices?
I'll try to get back to you tomorrow, fighting a nasty cold :)
@@mobilejon6160 thank you!!! Get better!!
Thanks for sharing. I just tried setting this up with Intune and EntraID. I get an additional auth popup after clicking signin to iCloud. So user has to enter credentials 2x. Wonder how Okta respects the previous sign-in session even though you mention it is opening in a incognito browser in background.
Does this work for windows servers as well as the windows client os?
@@wallacb2 yeah they do as long as they’re regular servers
I can see the device gets moved from ws1 to Intune and the Enterprise reset with the &keep apps retains the installed applications. Just curious if there is a way to migrate the WS1 Native Application library vs having to upload them 1x1. I have not an easy way to gather the installation details from WS1 such as the detections and install/remove commands.
Ok will try it Your github link to download?
Updated with Blog link
Any plans to maybe come back to WS1 now that is has been spun out into Omnissa?
No sadly because that doesn’t really solve my problem. Thank you for reaching out.
Do you inevitably end up manually editing the Intune machine profile to associate Prime and/or Enrolled User along with the management name?
Nope my code will set the primary user at the end of everything
nice.. more videos plss
thank you.. how much did you spent on the yubikey and what are the license requirements
Yubikey Bio is $100, but they vary from $25-100. License-wise you just need Entra P1 I believe.
@@mobilejon6160 thanks. I'll get one
I installed Microsoft Defender on my iPhone 15, and it stinks! I had to delete it, LOL!
I think it depends on what you enable. If you use the content filtering stuff it can do a real number on your device. I still prefer Lookout
Can you block multiple apps (Facetime and Messages for example) using this method? I tried adding a custom setting for each app and it only blocks one of them randomly at each login.
Thanks for putting this out there
I cant see get started as its faded out
Thank you for your content
This is awesome right ? This is a game changer
This is exactly what others should have been doing for awhile. I hope you will be able to bring in custom scripts eventually
@@mobilejon6160 I believe you should be able to write , create your own remediation
thanks
Thank You all you knowledge sharing you will never know how much it has helped me in my WS1 career over the years. I look forward to what you share concerning Intune and other technologies as it always informative and a great source to learn my skills from.
Hi , the api takes +- 15 to 20 min to pull trough the data. If you click on the teams drop down you will see live calls , takes a min or 2 to load but then you should see you live call . Doesn’t always show all calls ( I should probably log a ticket for that )
Yeah I noticed. Starting to dig deeper into it
I feel granted
Why would you choose to deploy to devices instead of users? Or does it not make any difference?
Also would you choose to deploy the scep policy to users or devices?
Technically it wouldn't matter, but you would probably deploy policy to Entra AD groups with users in them.@@chriswibberley3412
Thanks!
Jon, you're an amazing person! It's an honor to call you a close friend!
Thanks for everything Jon, you made WS1a tolerable product
Thanks for your content on WS1, it's been very helpful.
Promo'SM 👀
Hi , what’s your thoughts of Controlup EDGE DX ? Would love to connect with you and have a offline discussion if you don’t mind.
Sure feel free to reach out. Jon@mobile-jon.com
Cool video. How to set this up?
Check out my article: mobile-jon.com/2021/11/15/elevating-your-workspace-one-deem-rollout-with-microsoft-365-apps-admin-center/
Great if I could see something
I'm going to try to find the original video and add in some Zoom, thanks for the feedback. My blog article is here which might be more helpful: mobile-jon.com/2021/08/23/delving-into-the-ether-of-android-apks-to-answer-existential-questions/
yeah, it's awful unless you have a 2m TV set @@mobilejon6160
That took 30 minutes
New Team, who dis?
I am fairly new to WS1 and I have a question regarding this video. Is this showing that WS1 sees a machine at a particular OS, and this allows you to create a policy to bring other devices to the same level?
Check out my blog article that covers all of that and it should help quite a bit: mobile-jon.com/2023/08/14/workspace-one-uem-2306-reviewing-the-biggest-ws1-platform-update-in-2023/
If I delete that VM after capture, will it affect aynthing?
Nope it won't matter. Once the capture is done you're good
Good video! Thanks! How did you capture video of the physical Boot device?
Magewell HDMI, best product I’ve used and way better than Elgato
Can we use a team identifier to block/restrict an application? Do you have your sample XML listed anywhere to download or a document on how to create this?
Can we use a team identifier to block/restrict an application? Do you have your sample XML listed anywhere to download or a document on how to create this?
Bump, @Mobile Jon
Sorry I thought I replied to this. My article is here which should give you what you need: mobile-jon.com/2021/12/20/no-api-to-block-that-pesky-macos-service-workspace-one-to-the-rescue/
Great video, thanks!
Hi Jon. Very brave of you to make this video. Thanks !!
What does that allow my company to monitor as they put it on my own devices
The Intelligent Hub captures the apps on your device. They can put it in a few different modes, some will let you see what personal apps and some won't depending on how its setup.
What are the considerations for an organisation using WS1 and OKTA that is migrating to Intune? Should we consider trying to remote OKTA and keep things as 'native' to MS as possible?
Well obviously #1 is keeping Okta as the IDP. Okta JIT accounts to office 365 still. I would definitely keep using Okta directory and keeping it that way. Azure IDP is not great and Okta is far more feature rich. I’d also consider going Okta adaptive SSO/MfA if dumping WS1 so you get device assurance
Hi Jon, thanks for the instructional video. I have to do this about twice a year and this time I completely forgot how I'd done this in the past. Keep up the great work. This was a very helpful video, clear, concise, and straight to the point.
My pleasure, I just built a new full automation with WS1 for DCU if interested: mobile-jon.com/2023/05/17/the-ultimate-freestyle-orchestrator-workflow-dell-command-update/
Is the app available for older versions of LG webOS?
Sadly no its not, I had to go pay $1300 on a 42 inch C3
@@mobilejon6160 🤦♂ Come on LG.
Does it support RDP too?
Yeah they support the Google Remote Desktop and Microsoft RDP
It is not a real '0' touch integration :)
Near 0 :)