Intune – Mac – Deploy a Mobileconfig
Add assignments. Force a sync on the Mac. Notes Create a mobileconfig file https://imazing.com/profile-editor Example of mobileconfig
Category: Intune
Mac – Intune/SCCM – Sign PKG, Wrap PKG for Deployment
Create a Signed Package {{{ Required for Intune }}} [devuser@mac-lab1 Downloads % sudo productsign –sign “Developer ID Installer: Eddie Jackson (YourAppleID-DDD3V2X8N)” Skype-8.83-unsigned.pkg Skype-8.83-signed.pkg Password: {enter password} productsign: using timestamp authority for signature productsign: signing product with identity “Developer ID Installer: Eddie Jackson (YourAppleID-DDD3V2X8N)” from keychain /Users/devuser/Library/Keychains/login.keychain-db productsign: adding certificate “Developer ID Certification Authority” productsign: adding Read More …
Windows – Disable – Allow my organization to manage my device (Azure)
This is how you disable the ‘Allow my organization to manage my device’ option in certain Microsoft apps, like Microsoft Remote Desktop, Office 365, and OneNote. Why do you want to disable this? If a user allows this option to be checked (which is the default setting), company apps and policies get applied to their Read More …
Intune – Flow of Downloads
This is just some information I’m tracking with Intune. Maybe it will be useful to you. Flow 1 – Content is downloaded to the Incoming folder. 2 – The downloaded file moves from Incoming folder to Staging folder. 3 – Hash value is checked to verify downloaded content is consistent. Decryption starts after hash verification. 4 – Once unzip completes, Read More …
Azure – PowerShell – Device User and Owner ObjectId
Return the User objectId and Device objectId to be able to make changes to the device record in Azure.
Windows – Intune – Disable Smart Screen
Command reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer” /v SmartScreenEnabled /t REG_SZ /d Off /f /reg:64 Intune – Device Configuration Profile MS Intune > Device configuration > Profile > Create profile > Name > Windows 10 and later > Profile type Endpoint Protection > click Create button > Name > Description > click on Microsoft Defender SmartScreen > Read More …
Intune – SCCM – Change Time Zone
Various methods of changing the time zone. PowerShell and command methods can be used in SCCM and Intune. PowerShell Command tzutil /s “Eastern Standard Time” Intune – Custom Device Configuration Profile * requires 1903 and newer Microsoft Intune > Device configuration > Profiles > Create Profile > Windows 10 and later > Custom > click Read More …
Intune – Set up Power Management
#1 Access Intune > click Device configuration > click Profiles > click Create profile button #2 Select Platform: Windows 10 or later > click Profile: choose Custom > click Create button > Enter Name and Description > In Custom OMA-URI Settings, click Add. #3 Add each of these: Name: DisplayOffTimeoutOnBattery OMA-URI: ./Device/Vendor/MSFT/Policy/Config/Power/DisplayOffTimeoutOnBattery Data Read More …
Azure – Intune – Disable Antivirus Notification
This is how you get rid of the AV toast notification from the Windows Security Center. Create Policy Log into Azure Microsoft Intune > Device configuration > Profiles Configure the Profile Name: Disable Antivirus Notification Platform: Windows 10 and later Profile type: Endpoint protection Select ‘Settings Configure’ Select ‘Microsoft Defender Security Center’ Read More …
Azure – Intune – Deploy Apple iTunes Package
Deploy Apple iTunes using Intune. Steps Step 1 – Create C:\intune\iTunes folder. Step 2 – Extract and copy iTunes setup files to the C:\intune\iTunes folder. Step 3 – Create _Intune.cmd in iTunes folder containing the following code: cd “%~dp0” msiexec.exe /i “AppleApplicationSupport.msi” /qn /norestart msiexec.exe /i “AppleApplicationSupport64.msi” /qn /norestart msiexec.exe /i “AppleMobileDeviceSupport64.msi” /qn /norestart msiexec.exe /i “Bonjour64.msi” /qn /norestart Read More …