Microsoft's official KZread channel for Windows IT professionals. Explore the latest capabilities, find expert deployment and endpoint management guidance, learn tips and tricks, and more. Looking to stay up-to-date? Follow us @MSWindowsITPro on X.
I have a question regarding Mac computer login. How can users log in using their Entra ID on existing Mac devices? Is it necessary for everything to go through Autopilot, or is there an alternative method?
@marcotje88812 күн бұрын
Is it just me or are some talking point still not available in Intune yet?? Like the Manage Driver blade with Applicable Devices or the Driver Model Data and the Previously approved drivers. Were are running Intune Release 2404 now.
@unkownuser232014 күн бұрын
how to leverage normal application from the standard users and how application will be copied to the users windows devives
@ebesugabriel466115 күн бұрын
i'm alive again. you're the best 👏
@informol984326 күн бұрын
How to install NEW laps on Windows Server 2012 r2 domain controller? Best way to migrate from old Laps to New laps?
@branimirmatovic362026 күн бұрын
Is Platform SSO available with a BYOD enrollment of Macbooks?
@nickcowley783120 күн бұрын
No, only with ABM
@marcnahum20 күн бұрын
yes it is
@jonnokid20 күн бұрын
yes
@michaelepping120 күн бұрын
Yes, the enrollment type doesn't matter for PSSO. It can be deployed via MDM regardless of enrollment type, but MDM management is always required.
@JeanNeves-sy5hk4 күн бұрын
I'm getting issues with the user account being populated by the Entra ID automátic and the to register the device. Company portal is not prompting
@David-es9rl26 күн бұрын
Why is the "local account" screen necessary if the password gets synced anyways. This was the main thing I was hoping to get rid of..
@nickcowley783120 күн бұрын
Unfortunately this is a Apple macOS requirement, no way to bypass. Alos this is happening before the password sync is initiated due to the way macOS builds
@jonnokid20 күн бұрын
PSSO requires a local account for the first identity to sync to, there is no way around that currently.
@michaelepping120 күн бұрын
Its how macOS works today, I'd recommend providing feedback to Apple if your organization has contacts with them.
@seanyboy319 күн бұрын
You still need it because the sync doesn't happen until after the local account creation point in the setup assistant process. It's the company portal app I believe that helps drive the process.
@hristobochev98727 күн бұрын
Finally !
@MichaelRubino-wp8sk27 күн бұрын
Will this work in a lab environment where you have various students logging into the same Macs?
@ThatGamerPhantom23 күн бұрын
I have this question as well. Tested successfully here in a school setting but if its only good for one account then its terrible in a multi user environment
@nickcowley783120 күн бұрын
No, really only for one user, one device. Similar to Windows autopilot
@jonnokid20 күн бұрын
PSSO supports shared device, we're currently working on a video and some instructions for that scenario too.
@michaelepping120 күн бұрын
Yes, you can configure it to support multi-user devices where anyone from the Entra ID tenant can log in. This does require macOS Sonoma though, it doesn't work in Ventura.
@VijayKumar-jv7szАй бұрын
Thank you so much guys for such information.IT admins will get more time for other stuff.
@MrSteelBullАй бұрын
It is very good presentation. Thanks.
@GeneT-yr8jbАй бұрын
Great video! I especially liked the clarity provided around what is 'supported' and 'not-supported' by Intune on multi-session Windows 10/11. Thank you!!
@valentinoromelio5414Ай бұрын
Hello, I dont know who to contact. I experiencing more than 2 months bugs from the partner center app submission process. Sofar I done some things via work arounds but at some point I am really tired, I feels like that its obstruction in some sense. App submission shows bugs, also developing against the store apis attempting to validate whether or not the constomer has done a purchase. I contacted Microsoft by phone but it redirects to the contact forms. When using the contact forms their is hardly any response, teams point to each other because its not there responsibility, the dev team hardly response and suggest me to release an app in development stage to production available for everyone which is just like saying take financial and reputational damage. I am really stuck with Maui Windows Store App development.
@user-gz4vx1pc3bАй бұрын
good video, thank you. you said there is a github you have with scripts? Can you post that link for me pls?
@yannaraАй бұрын
I was disapointed not seeing entire demo from beginning to the end. How to create Issuing CA, how to create certification enrollment policy, how to identify that certificate is enrolled correctly and where to find it.
@fbifido2Ай бұрын
@4:35 - can you show & explain this diagram with these noted changes for 100 users: - No on-premises AD - we have Azure AD, Microsoft 365 Pre, and Azure IaaS - the Azure AD joined devices are external (at home behind cable modem) & internal (at the office behind the firewall) - 12x HP m612 network printers are internal (behind the firewall) - 4x Azure IaaS RDP session host VM (16vCPU,32GvRAM, connect Printers via VPN) - 2x Azure IaaS VM as File Server - 2x Azure IaaS VM as SQL Server - 1 Azure VPN (only for internal devices (printers & RDP)) 1. How can Internal & external AADJ devices access the file servers using SSO?
@brinkhoff_CАй бұрын
Who likes the magic trick?
@brinkhoff_CАй бұрын
Thanks for watching everyone!
@BigIveDownunderАй бұрын
What is the process if a customer has a requirement for customisations to the app? Can you attach a MST to the app (if it is an MSI) to apply any specific customisations that they require?
@user-fj4wu1wf6zАй бұрын
thx
@Its_us802Ай бұрын
Thank you, for this very informational episode on Copilot. It answered all of the questions I had about the software and questions I had not thought of yet.
@ashy2clasy2 ай бұрын
Anyone have experience with entrust with regards to certificates? Would the exact same setup described in this video apply to entrust certs?
@nickhairapetian17562 ай бұрын
Nice New Feature. You are on a very positive Role. Keep on Rolling. :-)
@nickhairapetian17562 ай бұрын
Very helpful Video. Thank You.
@nickhairapetian17562 ай бұрын
Awesome Video. Thank You So Much!
@brinkhoff_C2 ай бұрын
Thanks for watching!
@cornerstoneww2 ай бұрын
Licensing. Is the cost 2.40/device for licensing? Or, is it more of an "technician" or "operator" cost. Meaning, if per device, if I had 100 devices managed by Intune, it'd be $240/mo?
@PhO3NiX962 ай бұрын
I'm struggling to find a way to trace what script/program writes down a specific file under a specific directory at startup, meaning like when I start my PC, the file is already there so I can't trace after using Procmon, which would mean I need to use the boot thing mentioned in the video but for some reason I can't find what program writes down this file.
@andydhlamini84642 ай бұрын
Great session. Learnt a lot. I am starting in Intune Management an this was such an invaluable session.
@brayandomecrubio44692 ай бұрын
top superrr
@user-yz5zp5vx4v2 ай бұрын
Mark Russinovich's work over the years with computer systems and security has been nothing short of amazing. I would like to hope that in the future though, SysInternals would automatically find, discover and flag all vulnerabilities within a system, create and generate a report with the findings and then give the option to the computer user whether or not to eradicate these infiltrations, delete them or quarantine them. It takes too long for normal users to learn this stuff and we all deserve a higher level of protection than what is currently being made available to the public. I believe SysInternals can provide that higher level of protection.
@jeffreyfilmore38112 ай бұрын
This has been immensely informative and understandable for me. Great work!
@glueckkanja2 ай бұрын
Thanks!
@lasolution3652 ай бұрын
Do you need to enable WIP in Automatic Enrollment?
@yaya84412 ай бұрын
Merci pour cette présentation
@HSITSolutions2 ай бұрын
how can I exclude Azuread joined devices from conditional access? or any method to identify personal and company devices?
@MrParkerSaidit2 ай бұрын
Excellent video! I have a question. Will the user be redirected or instructed to use Edge if they try to use Google Chrome to access company data with this policy in place?
@RedNinja2 ай бұрын
please create a playlist dedicated for Windows 365. This is new and we got to learn fast to support customers. @brinkhoff_C, thanks for sharing this.
@RedNinja2 ай бұрын
learned a lot from this. hope to see more ama's or this type of content on the wiki's or maybe add a channel where this kind of videos can be watched internally.
@mathieup.17863 ай бұрын
Merci pour ce partage, c’est top
@richieschuster30673 ай бұрын
Gents, wonderful presentation thank you. Could you supply the pre-script please, used before installing the Defender Package. Thank you.
@peace_corp3 ай бұрын
How did you get the "decode WU etl" decoder that we saw in the video, where you right click on USO>Send to>decode wu etl .??
@user-xn5nm2my7u3 ай бұрын
Hello! thanks for ProcDump demo! Could you explain please what wrong with the command "procdump -e 1 -f "" example" ? When i use it, the process "example" exits: Process Exit: PID 11588, Exit Code 0xdeadc0de The process has exited. Dump count not reached.
@miroslavkelekovic25073 ай бұрын
I used his tools silce late 90s..
@AndreJHoward3 ай бұрын
I thought this would be so much farther ahead than it is. PatchMyPC, Scappman etc. are so far ahead of this and optionally cheaper. I hope this keeps getting built up but the features are lacking and the app list is tiny. Have to pass until this is much more mature. ROI doesn't make sense.
@johnrhines34733 ай бұрын
Waiting for unattended remote access to be enabled.
@papajohnscookie3 ай бұрын
I've just realized this is an Intune add-on 🤦♂🤦♂
@C1rnobyl3 ай бұрын
Untrusted kernel code shouldn't be a thing with strict driver signing.
Пікірлер
Thanks for watching!
I have a question regarding Mac computer login. How can users log in using their Entra ID on existing Mac devices? Is it necessary for everything to go through Autopilot, or is there an alternative method?
Is it just me or are some talking point still not available in Intune yet?? Like the Manage Driver blade with Applicable Devices or the Driver Model Data and the Previously approved drivers. Were are running Intune Release 2404 now.
how to leverage normal application from the standard users and how application will be copied to the users windows devives
i'm alive again. you're the best 👏
How to install NEW laps on Windows Server 2012 r2 domain controller? Best way to migrate from old Laps to New laps?
Is Platform SSO available with a BYOD enrollment of Macbooks?
No, only with ABM
yes it is
yes
Yes, the enrollment type doesn't matter for PSSO. It can be deployed via MDM regardless of enrollment type, but MDM management is always required.
I'm getting issues with the user account being populated by the Entra ID automátic and the to register the device. Company portal is not prompting
Why is the "local account" screen necessary if the password gets synced anyways. This was the main thing I was hoping to get rid of..
Unfortunately this is a Apple macOS requirement, no way to bypass. Alos this is happening before the password sync is initiated due to the way macOS builds
PSSO requires a local account for the first identity to sync to, there is no way around that currently.
Its how macOS works today, I'd recommend providing feedback to Apple if your organization has contacts with them.
You still need it because the sync doesn't happen until after the local account creation point in the setup assistant process. It's the company portal app I believe that helps drive the process.
Finally !
Will this work in a lab environment where you have various students logging into the same Macs?
I have this question as well. Tested successfully here in a school setting but if its only good for one account then its terrible in a multi user environment
No, really only for one user, one device. Similar to Windows autopilot
PSSO supports shared device, we're currently working on a video and some instructions for that scenario too.
Yes, you can configure it to support multi-user devices where anyone from the Entra ID tenant can log in. This does require macOS Sonoma though, it doesn't work in Ventura.
Thank you so much guys for such information.IT admins will get more time for other stuff.
It is very good presentation. Thanks.
Great video! I especially liked the clarity provided around what is 'supported' and 'not-supported' by Intune on multi-session Windows 10/11. Thank you!!
Hello, I dont know who to contact. I experiencing more than 2 months bugs from the partner center app submission process. Sofar I done some things via work arounds but at some point I am really tired, I feels like that its obstruction in some sense. App submission shows bugs, also developing against the store apis attempting to validate whether or not the constomer has done a purchase. I contacted Microsoft by phone but it redirects to the contact forms. When using the contact forms their is hardly any response, teams point to each other because its not there responsibility, the dev team hardly response and suggest me to release an app in development stage to production available for everyone which is just like saying take financial and reputational damage. I am really stuck with Maui Windows Store App development.
good video, thank you. you said there is a github you have with scripts? Can you post that link for me pls?
I was disapointed not seeing entire demo from beginning to the end. How to create Issuing CA, how to create certification enrollment policy, how to identify that certificate is enrolled correctly and where to find it.
@4:35 - can you show & explain this diagram with these noted changes for 100 users: - No on-premises AD - we have Azure AD, Microsoft 365 Pre, and Azure IaaS - the Azure AD joined devices are external (at home behind cable modem) & internal (at the office behind the firewall) - 12x HP m612 network printers are internal (behind the firewall) - 4x Azure IaaS RDP session host VM (16vCPU,32GvRAM, connect Printers via VPN) - 2x Azure IaaS VM as File Server - 2x Azure IaaS VM as SQL Server - 1 Azure VPN (only for internal devices (printers & RDP)) 1. How can Internal & external AADJ devices access the file servers using SSO?
Who likes the magic trick?
Thanks for watching everyone!
What is the process if a customer has a requirement for customisations to the app? Can you attach a MST to the app (if it is an MSI) to apply any specific customisations that they require?
thx
Thank you, for this very informational episode on Copilot. It answered all of the questions I had about the software and questions I had not thought of yet.
Anyone have experience with entrust with regards to certificates? Would the exact same setup described in this video apply to entrust certs?
Nice New Feature. You are on a very positive Role. Keep on Rolling. :-)
Very helpful Video. Thank You.
Awesome Video. Thank You So Much!
Thanks for watching!
Licensing. Is the cost 2.40/device for licensing? Or, is it more of an "technician" or "operator" cost. Meaning, if per device, if I had 100 devices managed by Intune, it'd be $240/mo?
I'm struggling to find a way to trace what script/program writes down a specific file under a specific directory at startup, meaning like when I start my PC, the file is already there so I can't trace after using Procmon, which would mean I need to use the boot thing mentioned in the video but for some reason I can't find what program writes down this file.
Great session. Learnt a lot. I am starting in Intune Management an this was such an invaluable session.
top superrr
Mark Russinovich's work over the years with computer systems and security has been nothing short of amazing. I would like to hope that in the future though, SysInternals would automatically find, discover and flag all vulnerabilities within a system, create and generate a report with the findings and then give the option to the computer user whether or not to eradicate these infiltrations, delete them or quarantine them. It takes too long for normal users to learn this stuff and we all deserve a higher level of protection than what is currently being made available to the public. I believe SysInternals can provide that higher level of protection.
This has been immensely informative and understandable for me. Great work!
Thanks!
Do you need to enable WIP in Automatic Enrollment?
Merci pour cette présentation
how can I exclude Azuread joined devices from conditional access? or any method to identify personal and company devices?
Excellent video! I have a question. Will the user be redirected or instructed to use Edge if they try to use Google Chrome to access company data with this policy in place?
please create a playlist dedicated for Windows 365. This is new and we got to learn fast to support customers. @brinkhoff_C, thanks for sharing this.
learned a lot from this. hope to see more ama's or this type of content on the wiki's or maybe add a channel where this kind of videos can be watched internally.
Merci pour ce partage, c’est top
Gents, wonderful presentation thank you. Could you supply the pre-script please, used before installing the Defender Package. Thank you.
How did you get the "decode WU etl" decoder that we saw in the video, where you right click on USO>Send to>decode wu etl .??
Hello! thanks for ProcDump demo! Could you explain please what wrong with the command "procdump -e 1 -f "" example" ? When i use it, the process "example" exits: Process Exit: PID 11588, Exit Code 0xdeadc0de The process has exited. Dump count not reached.
I used his tools silce late 90s..
I thought this would be so much farther ahead than it is. PatchMyPC, Scappman etc. are so far ahead of this and optionally cheaper. I hope this keeps getting built up but the features are lacking and the app list is tiny. Have to pass until this is much more mature. ROI doesn't make sense.
Waiting for unattended remote access to be enabled.
I've just realized this is an Intune add-on 🤦♂🤦♂
Untrusted kernel code shouldn't be a thing with strict driver signing.
Thanks for watching!