bicky

I think this is related to the Intune PowerShell application ID (d1ddf0e4-d672-4dae-b554-9d5bdfd93547). You will need to create new app with the permission you require and use that to authenticate. https://learn.microsoft.com/en-us/mem/intune/fundamentals/in-development#plan-for-change-update-your-powershell-scripts-with-a-microsoft-entra-id-registered-app-id-by-april-2024 Authenticate MS Graph https://learn.microsoft.com/en-us/powershell/microsoftgraph/authentication-commands?view=graph-powershell-1.0#using-connect-mggraph https://www.alitajran.com/connect-to-microsoft-graph-powershell/

Instructions - we use OneNote as you can copy/paste the screenshot.

All our Students devices are Microsoft Surface (Go/Pro) - managed via Intune. We make VSCode, NotePad ++, PyCharm, Python, Python libraries available on Company Portal and they go there to install it.

yes it is a signature as a disclaimer. For the fresh new email it will be added at the bottom of their current email, however for the replies/forwards it gets added at the bottom of the chain.

We use mail flow rules on Office 365/EAC mail flow rules. Staff has been told not to add signature from their end. In mail flow we use HTML code to create the email signature template: PowerShell sync Job Title and rest of the details from MIS to the AD User fields. Office = Job Title

Lease time = 30 minutes (changed from 24 hours when bad_address started appearing) This is the only DHCP server.

Wireless Isolation is turned on. I noticed quite lot of BAD_Address early January, but scope running out of IP started happening since early last week.

Dear All, We have Windows DHCP server with several scopes. One particular (10.19.0.0/20) used for student BYOD devices, is frequently running out of IP and 90% are bad_address. DHCP lease is 30 minutes. Conflict detection has been set to 2. DHCP logs for these bad address has incomplete (8 digit) mac-address. These 8 digit mac-address are ip address reversed in hex format. Rogue DHCP Server detection shows no other DHCP server on the network. Wireshark packet capture on the DHCP server and on the wireless device shows no devices that is handing out the IP. We use Ruckus vSZ and student has to go through Ruckus Cloudpath to onboard their devices. There aren't any physical network ports on the school which is untagged on this network vlan i.e. no ethernet devices are connected to this network via cable. Beside student iOS, Android & Windows devices, no other devices are connected to this network. All our network switches are HP Procurve/Aruba. Ruckus vSZ running latest firmware. As a test I have already tried moving that particular DHCP scope to a separate DHCP Server. I am running out of ideas, any help on this would be much appreciated, thank you.

I have used Advanced Installer to repackage (MSI) it with the serial + unlock code and deployed via Intune.

Please check Print Spooler service is running on the server. I had a similar issue where all the printers were missing from the Print Management, found out Printer Spooler service was stopped.

Hi, We use FortiGate firewall/web filter. All our domain controllers has FSSO agent that sends the user details to the FortiGate, so on the internet usage report we can see the username & the IP of the device. However for the mobile devices/non-domain computers (Azure AD joined) the username is blank and only the device IP is shown. We have another school who use iBoss and its same on theirs as well. How do you guys do the users internet reporting? Any help would be much appreciated, thank you.

Hi, we use myschool.surrey.sch.uk domain. We would like to add A record to this domain, who do we contact ? I cannot find any details of the domain on the handover docs that has passed to me by my predecessor and no one in the school knows about it. Any help would be much appreciated, thank you.

We have been using DBA and now it no longer works. We are on OVS volume licensing. Read this https://contosoedu.com/deploying-office-365-proplus-device-based-subscription-for-edu/ , however it needs "Microsoft 365 Apps for Education (device)" license and device must be Azure AD joined or Hybrid Azure AD joined. How you guys are doing it ?

I think you need Office 365 ProPlus to use the offline version.

We are using same domain for both O365 & G-Suite. O365 - Email/OneDrive/SharePoint [email protected] G-Suite - Drive/Docs/Sheets [email protected] (I have noticed user can send emails between these G-Suite hosted accounts) mx records point to Office 365 The only record for G-Suite we have is a domain verification TXT record.

I have deployed the Mobility Print Queue using the Print Deploy for the non domain & Intune devices. End users devices has "Print Deploy" icon on the system tray and the Mobility Print Queue. - When user prints, I can see the jobs listed on Print Server under the Follow-me queue. - Upon login to the printer we can see the number of jobs for the user, however when releasing it the printer makes the noise but no print comes out. Printing works if I install the printer by UNC \\printserver\follow-me and print to this. Printing works if I install pc-mobility-print-printer-setup-1.0.240.exe and print to this. Not sure if anyone has experienced this.

Hi Jack, We are running it on Standard_B2ms (2 vCPU, 8GB RAM, Server 2016) - costs about £50 per month.

We have Site-to-Site VPN with the Azure. Few servers hosted: Additional DC for each of our domains Application Server (this hosts licensing server for several software, portable applications etc) Print Server (PaperCut Site Server) Net2Access Paxton Server We also use Intune to manage the Staff Windows 10 Surfaces. Devices are joined to AZ AD then used Intune to manage/deploy the settings/policies & the software (Office 365, Chrome, Adobe Reader, TeamViewer, VLC)

We moved away from Folder Redirection to OneDrive Known Folder Move that redirects Desktop/Documents to the OneDrive. You can do this via GPO https://docs.microsoft.com/en-us/onedrive/redirect-known-folders

thanks for letting me know. We are trying to use the mobility print for the Intune managed devices, at the moment we are installing it manually.

Hi OllyM, I am looking to do the same, did you manage to find the solution ?

Have you tried doing via PowerShell, I have always used PowerShell and migrated about 1700 users. Import-Module MSOnline $TenantUserName = "[email protected]" $TenantPassword = "password here or use encrypted key" $TenantCredentials = new-object -typename System.Management.Automation.PSCredential -argumentlist $TenantUserName, $TenantPassword $exchangeSession = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri "https://outlook.office365.com/powershell-liveid/" -Credential $Tenantcredentials -Authentication "Basic" -AllowRedirection $exchangeSession1 = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri "https://ps.compliance.protection.outlook.com/powershell-liveid/" -Credential $Tenantcredentials -Authentication "Basic" -AllowRedirection Import-PSSession $exchangeSession –AllowClobber Import-PSSession $exchangeSession1 –AllowClobber Connect-MsolService -Credential $TenantCredentials $Company = Get-MsolCompanyInformation | select -exp DisplayName $InitialDomain = Get-MsolCompanyInformation | select -exp InitialDomain $host.ui.RawUI.WindowTitle = "You are connected to: " + $Company + " (" + $InitialDomain + ") " ######################################################################### ######################################################################### ## Forest administrator credential for New-MoveRequest $ONPREMUserName = "mydomain\administrator" $ONPREMPassword = "password here or use encrypted key" $ONPREMCREDS = new-object -typename System.Management.Automation.PSCredential -argumentlist $ONPREMUserName, $ONPREMPassword New-MoveRequest -Identity mydomain\username2 -Remote -RemoteHostName myOnPremExchnageBox.mydomain.com -TargetDeliveryDomain mydomain.com -RemoteCredential $ONPREMCREDS -BadItemLimit 1000

I couldn't do with the App-locker so used the way dfergusson suggested.

Hi, We have been asked to install Arduino Web Editor browser plugin (https://create.arduino.cc/getting-started/plugin). The plugin is available for Chrome/Edge/Firefox and comes as .exe file. This plugin installs on admin user APPDATA folder which means it will not be available to the other users. Has any one come across this ? Any help would be much appreciated, thank you.

Hi, We have Azure AD Connect with "Password Synchronisation" & "Enable single sign on" selected. AADConnect sync all the on-premise AD users to the Office 365. When users logon to the Windows 10 domain computer, they are are auto signed on to the Office 365 via Chrome/Edge, however when they open Office 2016 applications (Word, Excel, PPT) they are prompted for the credentials, does this mean I need ADFS ? Any help would be much appreciated, thank you.