VBallantyne

Same issue, I'm unable to run install-script get-windowsautopilotinfo to enrol devices into Intune!

In this instance I would have strongly have thought it was intelligent enough as it was the Apps category under macOS and the app itself says Microsoft 365 for macOS. But yes I know where you are coming from with your query. Any concerns, just use the assignment option and apply it to groups defined by you.

Not knowing your level of integration all I can say is, the ios and macos devices we use are present in Apple School Manager (ASM) either via a reseller or some devices were assigned to the ASM via Apple Configurator. Then the whole enrolment integration for ASM and Intune has been setup with Enrolment tokens / push certificates etc. So for installing Microsoft 365 apps it was just a case of assigning the bult in app profile to all devices, or you could target it to a specific AAD Group:

Cant say I've ever used Slack in my line of work so wouldn't have known about it. Might give it a try, although an area full of MacAdmins I'm worried they laugh a Microsoft 365 guy out of there with pitchforks at the ready!

Hey all, Ok, so managed the basics fine, I've configured a macOS device to be enrolled into Intune successfully fairly straight forward. I'm able to log onto the device with a Microsoft 365 email account. The problem I am having is meeting the requirements set out by the school. For Windows devices I am able to add a domain prefix so when logging in we only have to enter the samaccountname (Username) i.e. "Student" rather than the full UPN [email protected] Anyone made this work? Next issue is, the Token To User Mapping. I cant seem to find any other values or variables that could be used in the Account Name. Only option provided in documentation is userPrincipalName. Yet the local account created on the macOS ends up being the email address (almost). The Display name is Student but the account name becomes studentmhs.bright-futures.co.uk. It misses out the "@" because a macOS local account cant include an "@" This becomes a problem because I have a SMB share shortcut configured on the Dock but it prepopulates the username field with studentmhs.bright-futures.co.uk so having to manually enter in the "@". I noticed if I just enter "Student" the share works. So ideally I need a new variable in the Token to User Mapping that creates the local macOS account as just the Username and not the full UPN. Hopefully that would kill two birds with one stone with the domain prefix also just being the username and not the full UPN. Thoughts anyone? Thanks

Morning, Yes I did manage to get this resolved. The final thing I did was you need to run the Papercut Authentication steps on the actual Papercut Server so the address Localhost is applicable. If you try and do it only your own client laptop/pc it wont work. Needs to be completed on the papercut server directly. Also as a reminder from above, make sure the Client Secret value is correct and not the Secret ID and you use the SMTP user account and credentials and not a random Global Admin account.

ok my mistake was I was using the Secret ID instead of the Secret Value also to confirm the account to use when asking to authorise is the SMTP email and not a domain admin.

Just looking at setting this up myself now, and the settings wont apply. I've done the app reg in Entra following this guide: Configure an SMTP server over OAuth2 for Office 365 or Microsoft 365 | PaperCut but the Client Secret box keep clearing itselt and I get the status on papercut saying Status: Not configured?! Tried inprivate mode and it asks for a Microsoft 365 sign in for authorsation and tried bother my admin accocunt and the SMTP account.

Id say with you having 1600 ipads that you are the expert and with a failure rate of only 30devices (less than 2%). Seems to be one of those problems that either the end user has given up on, or has resolved itself as I've not heard anything on the subject myself for sometime. I dare not run a report on EndPoint Manager now to check. Not what I need going into the weekend

Yes I did, I ended up making the install command more basic and I had previously had included INSTALL_LOOPS. Once I went back to just /qn it deployed. To setup student mode though, I still ended up deploying a separate startmenu batch file that checks for a temp file. If the temp file does exist it run once to enable student mode. Install.ps1 to copy the batch file. # Copy runonce.bat to the target directory Copy-Item -Path ".\runonce.bat" -Destination "C:\Program Files\Mixcraft10_0" # Wait for the installer to finish Start-Sleep -Seconds 30 # Create a new shortcut $shell = New-Object -ComObject WScript.Shell $shortcut = $shell.CreateShortcut("$env:ALLUSERSPROFILE\Microsoft\Windows\Start Menu\Programs\Acoustica Mixcraft 10 Recording Studio\Mixcraft.lnk") $shortcut.TargetPath = "C:\Program Files\Mixcraft10_0\runonce.bat" $shortcut.Save() Batch file: @echo offsetlocalset "flagFile=%TEMP%\MixcraftInstalledv10_0.flag"if not exist "%flagFile%" ( "C:\Program Files\MixCraft10_0\mixcraft10.exe" /school_install /user "{username}" /pass "{password}" /auto_install echo Installed > "%flagFile%") else ( "C:\Program Files\MixCraft10_0\mixcraft10.exe")

Morning all, Just a thought exercise at the moment with the potential in the near future. Has anyone been at an Academy that has been transferred to a new trust due to a DFE termination notice? My academy is part of a MAT, so all our IT systems and contracts are all tightly woven together, even just starting with the obvious such as Microsoft 365 is a single tenancy. Any one any experience that can elaborate on the process they went through?

What do you mean by IntuneWin Installer. The MSI was already wrapped as a .Intune file via IntuneWinAppUtil.exe. Is that what you were referring too?

In the example with INSTALLDIR was because by default it was installing to c:\program files\ but since that now had this blank file called MixCraft 10 I used the INSTALLDIR to try a different location to see if it was a problem with permissions in Program Files rather than Program Files (x86)

Morning/Afternoon all, So what should have been a straight forward MSI deployment within Intune Endpoint Manager has turned into a nightmare. The MSI deploys fine with the Msiexec command line from a admin command prompt during testing, but when uploaded to Intune it creates a blank file in the installation direction and fails to install via Company Portal. msiexec /i "mixcraft10.msi" INSTALLDIR="C:\PROGRAM FILES (x86)\MixCraft10" install_loops="1" /quiet You can then not delete the file. Further attempts to install the app fail because the blank file is the same name as the required installation folder so further msi installation attempts fail because a file or folder of the same name exists. Anyone else had this behaviour? How do people troubleshoot issues in Intune, where do they look for logs etc as you can look at the app deployment within Intune and often it just says Failed with error code that has no further details?

Quick update, had a slight wobble on Friday evening re-enrolling the iPads to pick up the new profile. When you log in as a guest only user, you only get allocated 2GB of Guest storage. This wasn't enough for the assigned apps to install into. However it seems to have managed to deploy over the weekend successfully. You can either sign out and sign back in to gain the 2gb of storage again, or it might be the apps continue to push out and install whilst the device is on the lock screen / sleep.