VBallantyne

Same issue, I'm unable to run install-script get-windowsautopilotinfo to enrol devices into Intune!

In this instance I would have strongly have thought it was intelligent enough as it was the Apps category under macOS and the app itself says Microsoft 365 for macOS. But yes I know where you are coming from with your query. Any concerns, just use the assignment option and apply it to groups defined by you.

Not knowing your level of integration all I can say is, the ios and macos devices we use are present in Apple School Manager (ASM) either via a reseller or some devices were assigned to the ASM via Apple Configurator. Then the whole enrolment integration for ASM and Intune has been setup with Enrolment tokens / push certificates etc. So for installing Microsoft 365 apps it was just a case of assigning the bult in app profile to all devices, or you could target it to a specific AAD Group:

Cant say I've ever used Slack in my line of work so wouldn't have known about it. Might give it a try, although an area full of MacAdmins I'm worried they laugh a Microsoft 365 guy out of there with pitchforks at the ready!

Hey all, Ok, so managed the basics fine, I've configured a macOS device to be enrolled into Intune successfully fairly straight forward. I'm able to log onto the device with a Microsoft 365 email account. The problem I am having is meeting the requirements set out by the school. For Windows devices I am able to add a domain prefix so when logging in we only have to enter the samaccountname (Username) i.e. "Student" rather than the full UPN [email protected] Anyone made this work? Next issue is, the Token To User Mapping. I cant seem to find any other values or variables that could be used in the Account Name. Only option provided in documentation is userPrincipalName. Yet the local account created on the macOS ends up being the email address (almost). The Display name is Student but the account name becomes studentmhs.bright-futures.co.uk. It misses out the "@" because a macOS local account cant include an "@" This becomes a problem because I have a SMB share shortcut configured on the Dock but it prepopulates the username field with studentmhs.bright-futures.co.uk so having to manually enter in the "@". I noticed if I just enter "Student" the share works. So ideally I need a new variable in the Token to User Mapping that creates the local macOS account as just the Username and not the full UPN. Hopefully that would kill two birds with one stone with the domain prefix also just being the username and not the full UPN. Thoughts anyone? Thanks

Morning, Yes I did manage to get this resolved. The final thing I did was you need to run the Papercut Authentication steps on the actual Papercut Server so the address Localhost is applicable. If you try and do it only your own client laptop/pc it wont work. Needs to be completed on the papercut server directly. Also as a reminder from above, make sure the Client Secret value is correct and not the Secret ID and you use the SMTP user account and credentials and not a random Global Admin account.

ok my mistake was I was using the Secret ID instead of the Secret Value also to confirm the account to use when asking to authorise is the SMTP email and not a domain admin.

Just looking at setting this up myself now, and the settings wont apply. I've done the app reg in Entra following this guide: Configure an SMTP server over OAuth2 for Office 365 or Microsoft 365 | PaperCut but the Client Secret box keep clearing itselt and I get the status on papercut saying Status: Not configured?! Tried inprivate mode and it asks for a Microsoft 365 sign in for authorsation and tried bother my admin accocunt and the SMTP account.

Id say with you having 1600 ipads that you are the expert and with a failure rate of only 30devices (less than 2%). Seems to be one of those problems that either the end user has given up on, or has resolved itself as I've not heard anything on the subject myself for sometime. I dare not run a report on EndPoint Manager now to check. Not what I need going into the weekend

Yes I did, I ended up making the install command more basic and I had previously had included INSTALL_LOOPS. Once I went back to just /qn it deployed. To setup student mode though, I still ended up deploying a separate startmenu batch file that checks for a temp file. If the temp file does exist it run once to enable student mode. Install.ps1 to copy the batch file. # Copy runonce.bat to the target directory Copy-Item -Path ".\runonce.bat" -Destination "C:\Program Files\Mixcraft10_0" # Wait for the installer to finish Start-Sleep -Seconds 30 # Create a new shortcut $shell = New-Object -ComObject WScript.Shell $shortcut = $shell.CreateShortcut("$env:ALLUSERSPROFILE\Microsoft\Windows\Start Menu\Programs\Acoustica Mixcraft 10 Recording Studio\Mixcraft.lnk") $shortcut.TargetPath = "C:\Program Files\Mixcraft10_0\runonce.bat" $shortcut.Save() Batch file: @echo offsetlocalset "flagFile=%TEMP%\MixcraftInstalledv10_0.flag"if not exist "%flagFile%" ( "C:\Program Files\MixCraft10_0\mixcraft10.exe" /school_install /user "{username}" /pass "{password}" /auto_install echo Installed > "%flagFile%") else ( "C:\Program Files\MixCraft10_0\mixcraft10.exe")

Morning all, Just a thought exercise at the moment with the potential in the near future. Has anyone been at an Academy that has been transferred to a new trust due to a DFE termination notice? My academy is part of a MAT, so all our IT systems and contracts are all tightly woven together, even just starting with the obvious such as Microsoft 365 is a single tenancy. Any one any experience that can elaborate on the process they went through?

What do you mean by IntuneWin Installer. The MSI was already wrapped as a .Intune file via IntuneWinAppUtil.exe. Is that what you were referring too?

In the example with INSTALLDIR was because by default it was installing to c:\program files\ but since that now had this blank file called MixCraft 10 I used the INSTALLDIR to try a different location to see if it was a problem with permissions in Program Files rather than Program Files (x86)

Morning/Afternoon all, So what should have been a straight forward MSI deployment within Intune Endpoint Manager has turned into a nightmare. The MSI deploys fine with the Msiexec command line from a admin command prompt during testing, but when uploaded to Intune it creates a blank file in the installation direction and fails to install via Company Portal. msiexec /i "mixcraft10.msi" INSTALLDIR="C:\PROGRAM FILES (x86)\MixCraft10" install_loops="1" /quiet You can then not delete the file. Further attempts to install the app fail because the blank file is the same name as the required installation folder so further msi installation attempts fail because a file or folder of the same name exists. Anyone else had this behaviour? How do people troubleshoot issues in Intune, where do they look for logs etc as you can look at the app deployment within Intune and often it just says Failed with error code that has no further details?

Quick update, had a slight wobble on Friday evening re-enrolling the iPads to pick up the new profile. When you log in as a guest only user, you only get allocated 2GB of Guest storage. This wasn't enough for the assigned apps to install into. However it seems to have managed to deploy over the weekend successfully. You can either sign out and sign back in to gain the 2gb of storage again, or it might be the apps continue to push out and install whilst the device is on the lock screen / sleep.

Thats fine. We are a Microsoft 365 school so all data should be saved to OneDrive anyway. The iPads are just in iPad carts, so from one lesson to the next a student will pick up a iPad at random, they are not assigned to particular students so once again any data on a device is surplus.

That'll be interesting to monitor, because you would think it would remain static in remaining space as it warns you on use that all data will not be retained.

So after spending the day testing etc. I settled on using the Temporary Session Option. This way the device when powered on is in Guest Mode. They reach the homepage, and all published apps such as MS Teams are already present and they just sign in with their email credentials. Then either after a timeout or the next person picks up the device they sign in with guest mode and in testing, Apps like MS Teams prompt for logon again which resolves the initial issue I was having of credentials being too persistent between classes. Also when logging in as guest, there is no Language/Location or Pin setup screen prompts, just straight in.

When you say config profile do you mean this screen (see attached). Yes it was set to "Enroll without User Affinity"

Afternoon, For reasons, I've decided to try and configure the iPads that are enrolled into Intune Endpoint Manager to have user accounts via Azure AAD. This is all now setup with federated domain within Apple School Manager. My last hurdle it seems is, each new logon to a device, first askes for your email/password (thats great), but then the setup assistant kicks in and asks for Language/Location and to setup a PIN. If nothing else, I want to suppress the PIN requirement. See attached screenshots. Has anyone any experience with Shared iPads in Schools using user profiles on Intune MDM?

It seems to only happen at my Primary school that only has a 100/100 internet connection that is heavily utilised a lot of the time. The problem doesn't seem to exist at the High School on 1000/1000 link with more devices. The fix still at the Primary school is to just factory reset the device. This has to be done by cable and iTunes because if the apps aren't downloading then the MDM is also not talking to the device and therefore I cant sent a wipe command. More information for this may come about eventually as I did have a ticket open with Apple Support but I was unable to provide them analytic logs as they had been disabled by the MDM. Any new device being enrolled / re-enrolled this restriction has been removed. So if the problem happens again, hopefully I'll be able to send some logs to Apple Support.

Good afternoon all, Can the locations feature in ASM be used in anyway with Intune Endpoint Manager? i.e. Use a central ASM but create the locations, and then somehow assign the licences to the correct groups in Endpoint Manager/Intune. I can't see anything in Intune that links to the ASM individual locations. Thanks

Fiddlesticks but thanks. Raised a ticket with Microsoft but I just know I'll get some offshore call centre calling me back, I'll struggle to hear what they are saying and they'll be low level tech working through a script of suggestions I've already covered in the ticket raised. I tried holding down the app icons and selecting cancel, but on reboot or sync they reappear as expected but fail / get stuck again. I'll update if MS do actually come up with a solution but not hopeful.

Title pretty much says it all. I have increasing number of iPads at one of my schools that the apps seem to stop updating and then show as Waiting or Loading. They have internet connectivity. There are sufficient VPP licences available for each of the apps. I've tried a different network i.e. home Wi-Fi network to rule out any strict firewall rules. The only way it seems to fix the issue is to Wipe the device, delete it from Endpoint Manager / Intune and re-enrol. At this stage it could be at least a dozen devices and I have no evidence yet to suggest the same thing wont happen again to the wiped devices. Any thoughts or ideas ladies and gents? Thanks in advance

Morning all, Wondering if anyone knows of an application or a desktop widget that would pull through the Meraki Live Data Uplink traffic monitor for an Appliance. Rather than having the webpage open which then times out and logs off after x amount of minutes. Would just like to keep a closer eye on it for awhile. thanks in advance.