Lab Core | The Lab of MrNetTek
A blog about IT, technical solutions, and code.
I took this JS from the Distribution file in the latest Citrix Workspace Mac install, v24.05.0. Maybe you’ll find the internal workings interesting. I do. Located: Citrix.dmg\Citrix Workspace\Install Citrix Workspace.pkg\Distribution I ended up packaging the DMG into a PKG, signing the PKG, and publishing to Macs from Intune. Code.js # MrNetTek # eddiejackson.net Read More …
This will return the primary user of a computer, and detect if that user is in the local administrators group (very useful for InfoSec reporting). I’m using it with Intune. Works perfectly. This is a slightly modified version, as I’ve removed site data, but you’ll get the idea. NOTE: I made this for domain users, Read More …
This is how you would force an Intune sync for ALL devices. Code.ps1 # MrNetTek # eddiejackson.net # 7/10/2024 # free for public use # free to claim as your own Install-Module -Name Microsoft.Graph.Intune -Force -AllowClobber Install-Module -Name Microsoft.Graph.DeviceManagement.Actions -Force -AllowClobber Install-Module -Name Microsoft.Graph.DeviceManagement -Force -AllowClobber # Connect to Graph Connect-MgGraph -scope DeviceManagementManagedDevices.PrivilegedOperations.All, Read More …
Add assignments. Force a sync on the Mac. Notes Create a mobileconfig file https://imazing.com/profile-editor Example of mobileconfig
Create a Signed Package {{{ Required for Intune }}} [devuser@mac-lab1 Downloads % sudo productsign –sign “Developer ID Installer: Eddie Jackson (YourAppleID-DDD3V2X8N)” Skype-8.83-unsigned.pkg Skype-8.83-signed.pkg Password: {enter password} productsign: using timestamp authority for signature productsign: signing product with identity “Developer ID Installer: Eddie Jackson (YourAppleID-DDD3V2X8N)” from keychain /Users/devuser/Library/Keychains/login.keychain-db productsign: adding certificate “Developer ID Certification Authority” productsign: adding Read More …
This is how you disable the ‘Allow my organization to manage my device’ option in certain Microsoft apps, like Microsoft Remote Desktop, Office 365, and OneNote. Why do you want to disable this? If a user allows this option to be checked (which is the default setting), company apps and policies get applied to their Read More …
This is just some information I’m tracking with Intune. Maybe it will be useful to you. Flow 1 – Content is downloaded to the Incoming folder. 2 – The downloaded file moves from Incoming folder to Staging folder. 3 – Hash value is checked to verify downloaded content is consistent. Decryption starts after hash verification. 4 – Once unzip completes, Read More …
Return the User objectId and Device objectId to be able to make changes to the device record in Azure.
Command reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer” /v SmartScreenEnabled /t REG_SZ /d Off /f /reg:64 Intune – Device Configuration Profile MS Intune > Device configuration > Profile > Create profile > Name > Windows 10 and later > Profile type Endpoint Protection > click Create button > Name > Description > click on Microsoft Defender SmartScreen > Read More …
Various methods of changing the time zone. PowerShell and command methods can be used in SCCM and Intune. PowerShell Command tzutil /s “Eastern Standard Time” Intune – Custom Device Configuration Profile * requires 1903 and newer Microsoft Intune > Device configuration > Profiles > Create Profile > Windows 10 and later > Custom > click Read More …