Search the Community

Link: Windows 11's built-in Weather app wastes more than 1 GB of RAM - Notebookcheck News

Using Autopilot Group Tags + Dynamic Groups (Intune) Here’s a guide on something I’ve been working on around Intune, Dynamic Groups, and Autopilot. With MDT effectively reaching end of life, I wanted to put something in place that could act as a solid replacement and also set the groundwork for how we use Autopilot going forward. This all started while looking into Group Tags (OrderID) — I discovered the character limit is 2048, which opens things up quite a bit. From there, I started experimenting with more structured tagging and dynamic grouping. Where to set the Group Tag Just to clarify (as this wasn’t obvious at first), Group Tags are set in the Intune portal here: Devices → Windows → Enrollment → Devices Select your device Click Edit Populate the Group Tag field That’s the value the dynamic group queries will pick up and evaluate. The basic idea Instead of manually putting devices into groups, just use the Autopilot Group Tag (OrderID) to store useful info about the device, then build dynamic groups off that. Once it’s set up properly, everything just sorts itself. Tagging devices When importing devices into Autopilot (or after), set a tag like this: dept=SCI|role=Teacher|site=SiteA|building=BlockA|room=LAB1|dtype=LAP|os=WIN It looks a bit heavy at first, but it lets you store everything in one place: department role location device type Dynamic groups You can then create dynamic groups that match against any part of that tag. Example: all teacher devices device.devicePhysicalIds -any (_ -match "^\\[OrderID\\]:.*\\brole=Teacher\\b") Example: department device.devicePhysicalIds -any (_ -match "^\\[OrderID\\]:.*\\bdept=SCI\\b") Example: room device.devicePhysicalIds -any (_ -match "^\\[OrderID\\]:.*\\broom=LAB1\\b") What this gives you Once those groups exist, you just assign: apps policies configs …and devices land in the right place automatically when they enrol. No more dragging devices into groups. Slightly less obvious bit (worth doing) While testing, I came across something really useful — if you add the following as an owner of your dynamic group: Intune Autopilot ConfidentialClient …it helps the group behave more like an authoritative source. Why this helps Without it: People can still manually fiddle with group membership Devices can drift away from your tagging logic With it: The group effectively becomes “hands off” Membership stays driven by Autopilot + your tags Devices stay correctly associated, even after things like an Autopilot reset Things to watch Be consistent with your tag format (biggest one) Dynamic queries must match values exactly Regex needs testing before rollout Keep tags readable — easy to overcomplicate Simple vs structured tags You can do this: Staff-Laptop …but you lose flexibility. Structured tags like: dept=SCI|role=Teacher|room=LAB1 give you much more control without needing loads of extra groups. Final thoughts Once it’s set up properly, it’s one of those “why didn’t I do this earlier” things. Devices get: the right apps the right policies the right config …just based on how they’re tagged. It would be great if there was a proper tag generator or database tool for this, as it’d make maintaining consistency much easier. At the moment I’ve just been using a Copilot-built Excel-style lookup, which works but can be a bit slow. ✅ Hopefully this helps someone — happy to share more examples or what I’ve tested if useful 👍

My PC has started acting weirdly lately where it wakes up immediately after it goes to sleep (I've set it to go to sleep after 10 minutes). What's weird though, is that if I manually set it to sleep (via the Start menu) it stays asleep. But if it goes to sleep itself, after it's 10 minute setting, it wakes up immediately. I'm using the Logitech MX Keys S and the MX Master 3S. If I switch them off, the PC will stay asleep. But if I leave them on, the PC will wake up immediately, unless I put it to sleep manually, where it will stay asleep, even with the keyboard and mouse switched on. I know that I can disable USB power on, but I don't want to as I like being able to wake the PC up using either the keyboard and mouse. Any ideas? I'm running Windows 11 Pro 25H2 (26200.8328) and the latest version of Logi Options+ (2.3.879545)

We recently setup a Data Collection Policy in Intune so we can see if our devices were Windows 11 Ready under Endpoint Analytics > Work from Anywhere > Windows. We had a lot of devices showing as needing a System Firmware Update so we carried these out over 24 Hours ago but they are still showing in Endpoint Analytics as requiring them. Does anyone happen to know how often these reports update and look for any changes? Had a look around Microsoft Documentation but can't seem to find any real answer.

Hi all, I'm the IT Manager at Twynham School - Do you know if 'it's the thing' to start getting devices onto Windows 11? When Windows 10 came out, we really jumped on that but we've held fire on this one. All our PCs in the IT office are on Win11 but I'm just reluctant to move staff and students over... I assume you can do things like Sysprep in Win11 but what about the start menu import changes as I know they're now based on JSON? I did attempt making an image when Win11 very first came out but it didn't go very well haha! Many thanks!

The basic Question is Does MDT support windows 11, i ask because when looks at the Microsoft documentation windows 11 is not listed.... is it not officially supported? Or did they forget to update the docs? https://docs.microsoft.com/en-us/mem/configmgr/mdt/release-notes#supported-platforms The reason i ask, is as we move away from SCCM to Intune, we would like a quick way to PXE and image a machine and install the Intune enrollment package (For machine that don't have an OS or need a clean install), and was wanting to use MDT. Does Microsoft plan to continue to support MDT?

So probably looking over something really small, but I can't find it. Right now, I'm in the testing stages of deploying Windows 11 via a MECM task sequence. After about a week of tweaks and VM reverts, I finally got a successful upgrade without Teams and the other junk that gets installed. Before the upgrade, printers worked just fine...even with all the print nightmare updates. Instead of GPOs, re deploy printers from our print server using WMI. The reason we don't do a direct add is because we use pCounter. $printclass = [wmiclass]"win32_printer" $printclass.AddPrinterConnection("\\server.fqdn.edu\Sample Printer") And this worked with no issue. Then after I upgrade to Windows 11, this breaks. Gives me different error codes for different printers (3221225480 & 1722). I checked to see if the printers were configured any differently, but they're aren't. Again, these are in production with Windows 10 just fine. We also pre-install the Universal HP Drivers, so that's not a problem as well. I'm not sure if Windows 11 supports type 3 drivers or not, but that would be a bit weird if it didn't. Even then, pCounter is unable to support Type 3 drivers...according to my reading. I just can't figure out the issue here.

Hello all! I've found that whenever we select 'reset password' and select 'user must change password at next logon', it never works in the sense that it always says the password does not meet the complexity requirements despite it meeting the requirements. They have to enter the password directly on AD but doesn't work until the device has been restarted. This seems to work fine on Windows 10. Any help would be much appreciated.

Hey Geeks 👋 We're running a promotion on some Mini PC favourites, including the Aspect Nano and Micro. Exclusive pricing is available until 22nd January 2025. We've got a page with all the specs, details, and pricing. If you're after a Mini PC that really packs a punch, have a look! > Mini PC Power for Education < We are supporting the Nano machines with Windows 11 Education (Shape the Future*), Windows Pro, and Windows IoT You can reach out to your usual contact or fill in our quick form, and someone will give you a call back. If there's anything else we can help with, just let us know! *for schools with a valid Microsoft Letter of Eligibility

We often copy and paste website from the address bar of our browsers. However, despite copying the entire address, the system doesn't copy the content even if I right click and select the copy option after selecting the entire address. I have to go back and copy it multiple times before pasting it on another place. The problems is not specific to Chrome, but Edge is also having the same issue. Has anyone faced this bug?

Had an issue where GWSMO (Google Workspace Sync for Microsoft Outlook) profile setup immediately fails and tells you to reinstall Outlook. The logs claim: 3f1c E:Generic profileeditor!MAPISubsystem::LoadMAPIFunctions @ 143 ()> Failed with 0x8007007e, last successful line = 123. 3f1c E:Generic profileeditor!MapiInit @ 5929 ()> Failed with 0x8007007e, last successful line = 5927. Internet came up dry so looked at it through procmon and found it was failing to find vcruntime140.dll All you need to do is install the latest Visual Studio Redistributables from here https://learn.microsoft.com/en-us/cpp/windows/latest-supported-vc-redist?view=msvc-170 Publishing here in case someone else encounters it.

Evening All, I am battling a confusing random user logout that is occurring for most students on many different devices (both Windows 10 and Windows 11). It doesn't seem to affect any admin or teacher accounts logged into the same devices. The device logs seem to to suggest the users initiated the logouts but I know from the test devices I have running that it just happens regardless of whether the devices are in use or have been idle for a while. I have gone through a range of ideas from app updates (Minecraft Edu), Classroom control software (Veyon and Sophos for AV) through to various power management settings and things like CEIP. I believe i have isolated it to our Student User GPO, which has evolved for years from well before I started. My thoughts now are to manually recreate the GPO a few settings at a time until I can find out any that seem to cause this. The downside is this will take for ever since there doesn't appear to be any way to force the logout. Some days we can have a couple of logouts in the morning and then nothing for the rest of the day and then you get days like today when it was non-stop all day. Does any of the collective knowledge here have any suggestions of areas I should concentrate on. My initial thoughts are Google Chrome and MS Edge policies since I have already removed all power management ones which I thought could be the reason. Nothing is immediately obvious in the rest of the policies but this MS afterall so anything is possible. A positive to this though is that I could get a much cleaner GPO. If it helps, the devices are all Intune hybrid joined too, so management is through both GPO and Intune. Thanks Vince

Hello, Has anyone been able to get ThumbnailPhoto from an on premises AD, to work on Windows 11? I have looked and tried several different powershell scripts, set up group policies, and followed this guide https://www.codetwo.com/admins-blog/use-active-directory-user-photos-windows-10/ as I have also tried their free software, but no matter what I do, the photos do not appear. Has anyone else been able to make this work? Thanks

Hi, I am just starting planning a new Windows 11 image and start deployment from windows 10. Please can you give me recommendations for the following please? Currently using WDS version 10.0.17763.1 and MDT Windows 11 version education version ect? Microsoft Office version 2024? And any other settings you would recommend? removing apps etc. Thanks in advance

Afternoon all, Just wondering if anyone else has come across this problem or its just me? Upon testing a new install i noticed the C: Drive on a fresh machine was maxed out, a bit of digging and it appears OneDrive was syncing my entire directory to the device, or at least windows thinks it is! (despite files on demand being turned on). This has happened on a few machines with the 2024-07 Cumulative Update installed so i thought i'd cross check a device that didn't have the update. The device that didn't yet have the update worked fine and the C: drive was normal, i noted the Onedrive client version as 24.151.0728.0003 and proceeded to install the update. After it had completed i noticed the C: was now full like the other devices, I checked the OneDrive version again and it had changed to 24.146.0721.0003 which leads me to believe there's a bug in that version and the July update is installing it. I've created a quick fix script to remove the affected version and reinstall using Winget, this puts it back to 24.151.0728 and the storage issue is no more. https://liam-robinson.co.uk/july-2024-onedrive-client-disk-space-bug-workaround-fix/ I can't find anything online so I'm thinking it might just be me that's affected, has anyone else come across this? Liam

It's look tricky or something. I can't find a straight forward filter online. People are using version numbers but are concerned about future collisions?

I have 2 computers setup as Windows 11 (mine and a test one for staff). Whenever someone logs onto a Windows 11 PC and then logs onto a Windows 10 PC their Clock, Network and Volume icons have disappeared from the System Tray. The only way back is to go in Settings -> Personalisation -> Taskbar -> Turn System Icons on or off However this is only temporary! as soon as log off and back in they have gone again. This ONLY happens after they have logged in to one of the windows 11 PCs