talksr

Super, thank YOU for sorting this. It wouldn't let me edit the OP to add the images so I have made a new post and it is working really well. Do you have the powers to delete the OP? It is this one that needs to go.... This is the new post which posted perfectly...

Not sure if anyone else has had this issue, but if I Fresh Start an Intune Windows 11 system, it resets, asks if it is ok to clear the TPM, then asks user to log in as usual (we use user-driven Entra Hybrid join), it has a think, and then shows the following error: Quote Something went wrong. Confirm you are using the correct sign in information and that your organization uses this feature. You can try to do this again or contact your system administrator with the error code 80070774. If I run CMD, I can see it is able to ping, so it has a connection to the internet. There is a great Test Device Connectivity PS script online. I have tried this and can see everything worked as expected so I know 100% there are no connectivity issues: If I run, dsregcmd.exe /status, I see the following, where it is clear it hasn't joined Azure. I have attempted this on a few systems, and I am getting the same problem. If I try and re-join the system to the tenancy using ps and get-windowsautopilotinfo.ps1 -online, it comes back saying error 806 ZtDeviceAlreadyAssigned. Does anyone know what could be causing this? We are cloud only, nothing on prem here.

Thank you, it has let me post the text but the images when I upload to edit it are then showing the sad face again and it is not putting them on.

Thanks everyone, This post was the first I saw, thanks @alordcharlie and everyone else for your useful posts. The Andrew S Taylor script worked really well, however it removed OneDrive which was no good for us. I made a comment on his site and he did update the ps1. What I decided to do, was copy his ps and put it on my own repository and then customised it to what we need, which currently is, OneDrive installed locally, Dell Command Update Apps etc. On his original script, the Dell software was set to remove. So far, it is working really well. It is a very good script.I just changed this part of the invoke script: To my version in my repository. It now means, I can make changes as necessary to RemoveBloat.ps1, if for instance, we needed Camera App or certain apps which are currently set for removal by adding to whitelist. I have left Andrew’s details on the scripts in my repository for his credit. Thanks everyone for your help on this.

Unfortunately, it won't let me upload the notepad file.

Same thing I am afraid. I tried to paste exactly what I have in notepad here to show you and I got the unhappy face again so it must be something in my text it is not liking. I will try and attach the notepad instead. I didn't even bother with photos this time round but still it didn't like it.

Yes that's right. And then I tried adding the images as attachments but what is in the word doc, I copied to Notepad, and then to the post page so there is no formatting and no images.

Same problem I am afraid

Just had this email through from RM🫠.....

Thanks, that would be great. Forgot to say, I also tried a different browser, same issue.

Trying to post the attached, I just keep getting an unhappy face saying I am offline when I am not. Tried posting with unformatted text from notepad and no images, same issue. Tried posting with different text, same issue. Tried posting with different title, same issue. EduGeekPost.docx

Thanks for your post, I had a good look through the Device Configuration and I can see nothing else other than the Device Power Management Profile (which is the correct one) showing. It has really stumped me.

Hi, not sure if anyone else is having this issue? We have an Intune config policy set Power Management plan to High Performance. Active power plan is set to Enabled. It seems to be working well and appying to all groups however of all the compuers, the head's is showing sleep time set at 10 minutes. So it has the correct High Performance, but their system keeps going off after 10 minutes. Has anyone else had this before?

Hmm it's been a long day so forgive me if I am not understanding this but on the basis it is working on Intune for another site, same model, your .intunewin is working, so all I can think is for the problem site, do the devices in question already have that IP as a prexisting port for a printer? I am referring to the bit where if you added it manually, it would be Device Type: TCP/IP, Hardware IP Address: xxx.xxx.xxx.xxx, Port Name: Whatever you call it. Is it that the IP and Port Name combo has already been used?

Not sure if anyone else has had similar, but the head (of all people) had been having some PC issues. Couldn't VNC to their computer which was odd. Pinged it and the responses were very erattic. Went down, gave the mouse a wiggle, it was all on. Assumed must be network. Back to my office and again, pings all over the place, some responding, some not. Have ascertained that despite it being on High Performance, Turn of Display and Put Computer to Sleep are both set to 10 minutes and locked as managed by admin. As far as I can see, our Intune policy is configured correctly. Checked a few other systems and they seem to have exatly the same config so not just the head machine. Has anyone else had this?

Hi there, I would be really grateful if anyone could share their methods for removing annoying Windows 11 bloatware from their Intune-connected systems. By default, we seem to get Xbox, Solitaire & Casual games, Microsoft Clipchamp, LinkedIn and possibly more. I tried making a few PowerShell scripts to deal with this, but most seem to fail. Has anyone found a way around this? We are running Windows 11 24H2 26100.3775. Here is an example of one of the ps1 scripts I tried.... # Remove Windows 11 Bloatware and also Learn about this picture ico on desktop for all users, with Windows Event Logging # Ensure the script runs with elevated permissions if (-not ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] "Administrator")) { Write-Host "Please run this script as Administrator!" -ForegroundColor Red exit } Write-Host "Starting bloatware & Windows Spotlight removal process..." -ForegroundColor Green # Register an Event Source (if not already present) $EventSource = "IntuneBloatwareRemoval" if (-not [System.Diagnostics.EventLog]::SourceExists($EventSource)) { New-EventLog -LogName Application -Source $EventSource } # Log Start of Script Execution Write-EventLog -LogName Application -Source $EventSource -EntryType Information -EventId 1000 -Message "Starting bloatware & Windows Spotlight removal process." # List of apps to remove $BloatwareApps = @( "*Xbox*", "*LinkedIn*", "*Clipchamp*", "*Solitaire*", "*Weather*", "*News*", "*Paint3D*", "*MixedRealityPortal*", "*Skype*", "*People*", "*WindowsTips*" ) # Remove provisioned packages (for new users) Write-Host "Removing provisioned packages for new users..." -ForegroundColor Yellow foreach ($App in $BloatwareApps) { try { Get-AppxProvisionedPackage -Online | Where-Object {$_.PackageName -like $App} | Remove-AppxProvisionedPackage -Online -ErrorAction SilentlyContinue Write-EventLog -LogName Application -Source $EventSource -EntryType Information -EventId 1001 -Message "Provisioned package removed: $App" } catch { Write-EventLog -LogName Application -Source $EventSource -EntryType Error -EventId 1002 -Message "Error removing provisioned package: $App - $($_.Exception.Message)" } } # Remove installed packages (for existing users) Write-Host "Removing installed packages for existing users..." -ForegroundColor Yellow $Profiles = Get-CimInstance -ClassName Win32_UserProfile | Where-Object { $_.Special -eq $false } foreach ($Profile in $Profiles) { if ($Profile.SID -and $Profile.LocalPath) { Write-EventLog -LogName Application -Source $EventSource -EntryType Information -EventId 1009 -Message "Processing user profile: $($Profile.LocalPath) with SID: $($Profile.SID)" try { foreach ($App in $BloatwareApps) { $Packages = Get-AppxPackage -User $Profile.SID | Where-Object {$_.Name -like $App} foreach ($Package in $Packages) { Remove-AppxPackage -Package $Package.PackageFullName -User $Profile.SID -ErrorAction SilentlyContinue Write-EventLog -LogName Application -Source $EventSource -EntryType Information -EventId 1003 -Message "Removed app for user $($Profile.LocalPath): $Package.PackageFullName" } } Write-Host "Removed apps for user: $($Profile.LocalPath)" -ForegroundColor Green } catch { Write-EventLog -LogName Application -Source $EventSource -EntryType Error -EventId 1004 -Message "Failed to remove apps for user: $($Profile.LocalPath) - $($_.Exception.Message)" } } else { Write-EventLog -LogName Application -Source $EventSource -EntryType Warning -EventId 1005 -Message "Skipping profile with invalid SID or path: $($Profile.LocalPath)" } } # Remove "Learn about this picture" Windows Spotlight icon Write-Host "Removing 'Learn about this picture' desktop icon..." -ForegroundColor Yellow $RegPaths = @( "HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{2cc5ca98-6485-489a-920e-b3e88a6ccce3}", "HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel", "HKLM:\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{2cc5ca98-6485-489a-920e-b3e88a6ccce3}", "HKLM:\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" ) foreach ($RegPath in $RegPaths) { if (Test-Path $RegPath) { try { Remove-Item -Path $RegPath -Recurse -ErrorAction SilentlyContinue New-ItemProperty -Path $RegPath -Name "{2cc5ca98-6485-489a-920e-b3e88a6ccce3}" -PropertyType DWORD -Value 1 -Force -ErrorAction SilentlyContinue Write-EventLog -LogName Application -Source $EventSource -EntryType Information -EventId 1006 -Message "Removed Windows Spotlight registry: $RegPath" } catch { Write-EventLog -LogName Application -Source $EventSource -EntryType Error -EventId 1007 -Message "Failed to modify registry: $RegPath - $($_.Exception.Message)" } } } # Log completion Write-EventLog -LogName Application -Source $EventSource -EntryType Information -EventId 1008 -Message "Bloatware and Windows Spotlight removal completed successfully." Write-Host "All specified apps and Windows Spotlight have been successfully removed!" -ForegroundColor Green

That's an interesting approach. I had never really looked at filters, but the way I always do things is the hostname is the device asset ID. Just makes things easier for me. Never seen that approach anywhere else I have worked, but it is helpful for identifying devices quickly and also if an auditor is wanting to check. Glad I am not the only one!! Wasn't aware of the 3rd party solutions. Thanks, I will have a look at that. Not sure if this would help you, but I used Powerpoint to create the following for my office wall. It helps visualise what groups we have to easily differntiate. There are other graphics I have done which show what apps are assigned to each respective group. I also deploy our printers as apps so it is handy for ascertaining what printers a device in a given group would pick up. In addition to the assigned sec groups, I also have two device categories which are just "Admin Computer Systems" or "Curriculum Computer Systems". I have my network segmented, so admin systems are totally seperate to the curriculum ones.

They are on HDDs so well worth replacing to SSD. I had not really considered a 64gb SSD. Thanks for the suggestion. Ah thanks. I am going to have a look myself this week. Just going on what the bursar has pulled from the inventory document which was Elite Desk 600. Sounds like a type on their end so I will let them know once I have had a look at what is in there. Thanks again.

Thank you - again really helpful. In that case, it sounds like it might still be worth converting them. I just need to count up how many are 600 G2's as they are not even on the list, so I would leave those until last and focus on the ones that are at least supported. Thanks for your help on this. 😉

Thanks ever so much for the link…that’s really helpful. Hmm so the bad news (for us). We seem to have a mixture of HP EliteDesk 600 G2 SFF and EliteDesk 800 G1 USDT. The 600 G2 doesn’t even appear on the list so I guess that one is out, and the 800 G1 will only get updates until 2026 according to the list. Ideally, I would stick in an SSD just to give the system the best chance to run, not like a 128GB SSD costs the earth but, we have quite a lot of these systems. If they will only get support until next year, I am not really sure it is worth all of the hassle in changing them to Chrome. Does anyone else run unsupported or out of support Chrome devices? Feels a little risky to me with Cyber Security compliance etc.

Hi guys, I would be very grateful for some clarification on how the extended updates work for Windows devices converted to Chromebooks using ChomeOSFlex? As an example, if we have 30 HP Elite Desks, running Windows 10 very nicely. We know…they won’t take Windows 11, so before or after October, it would be good to convert these to Chromebooks, but I am just conscious that this would involve a lot of replacement SSDs and the OS Flex Licences, so how do we ascertain their usable life as Chromebooks? Just a bit unclear on how it works and want to get maximum use out of perfectly good devices. Thanks for any help on this.

I had a PM through from @ITSystems_JamesE - they are offering a CC4 Client Pack for Windows 11. Sounds very clever. Might help you out if you are not in a position to get onto the cloud as quickly as you need to. Good luck

Thank you, I had been wondering if there were any decent HP models. That's a good idea. I think initially, I just need some ideas on what would constitue a suitable teacher Chromebook and I could get a couple to trial, but I am really not sure what to go for. Obviously, it would need to be a little larger, but not really sure if I should be considering something really powerful like an i7 or if an i5 or equivilant would suffice. I have never given staff Chromebooks for them to teach with so it is a new area for me!

Thank you, that is useful to know. These would be kept in school in Chromebook trolleys but even so, they may be even more likely to break as the way things are looked after in school is appalling compared to ones assigned to specific people. Thanks for the info - very helpful!

Hi all, I am looking for some recommendations on good Chromebooks for primary school use. I would like to get around 12 Chromebooks for teaching staff. These would be used to wirelessly display to their Clevertouch interactive screens likely using Chromecast. The staff would also take these home. I am wanting to use as few cables as possible, hence the chromecast but these laptops need to be able to do everything the teachers would need them to do - I have never had teachers teaching with Chromebooks so a little lost on what models to go for and what sort of budget I should be looking at. In addition to this, I am looking to get around 60 Chromebooks for our pupils to use. Last time I ordered pupil Chromebooks, I went with Lenovo 100e Chromebook 2nd Gen which was a super device and has really stood the test of time. Just wondering if anyone would recommend anything else as this model is no longer made? I would welcome any recommendations. The school is a 1 form entry primary, so not a lot of money, but I am keen to get something that will last and save money over time by being more reliable. Thanks in advance for any suggestions.