วีดีโอ

Hi! you are talking about security risks of deploying the managed installer of Intune, which allows apps from Intune. What are those security risks?

Hi, thanks for sharing the knowledge, it's really useful with detailed explanation. please guide me, to restrict the local device admin access for corporate MacOS and iOS devices? do there is any such option? I have been searching for a long, but I was unable to identify the sol, please share your knowledge on this area as well?

Hi Dean, I would need ur help as i have to migrate 50 MAC corp devices on Intune, which are currently being managed by local IT only, no option to set up ABM, So can i follow this practice and manually change the ownership to corp ? Kindly suggest

Excellent video

Funny. I've been waiting.. thinking my configuration was messed up. Then I restarted the machine when you did and boom, pop up for FileVault.

Excellent! very detailed video for IT Administrator to follow to setup windows autopilot.

Very helpful, now to figure out what to tell our 400+ conflicting users....

Dean, the fact that you "do it live" makes your content the best. Thanks for keeping it real!

what happens to the existing trial plans? mine is expiring in a month. will i get a free extension?

The only free option working. Thanks Dean!!

Hi Dean. This no longer works. When you push this out via Intune, you get the following error in the install status in Intune: "One or more apps contain invalid bundleIDs. (0x87D13BA2)" When installing from Company Portal, the app gets stuck on the install, even though it does install. When trying to push as required, it gets stuck in a loop of installing and uninstalling, then reinstalling again. There's something wrong with Zoom's PKG file now. I've tried multiple times.

intune provisioning account not found

Hi Dean. Thank you for all your helpful videos. I do have a question. I'm new at Intune and I'm trying to prepare for OS 15. I do not want my users to be able to update to it until IT has had a chance to test it in our environment. After watching your video, I'm assuming you would use this to push the desired OS version, but use the System Updates > Software Update settings to block the user from updating. Am I right here. Is the the best practice to control what OS version the company is on?

You still didn't spell organisation's correctly.....

I am in this situation: the company were I work has 11 accounts with microsoft 365, but they already use those email to log into apple to use their mac books and other apple devices. Now we need to federate entra Id and apple Business manager but all those accounts are in conflict. BUT if we need 11 new emails address we have 2 options: buy 11 new licenses in microsoft 365 (and this is a big problem) or change the email addresses of all the users (presuming it is possible to do, this is a much bigger problem). there is a way to solve this?

Does the [Shift]+[Fn]+[F10] and subsequent PS commands at OOBE only work on Win 11 or does it work on Win 10?

Great video, sad news. What if we buy ms 365 business Basic and intune or entra id seperatly? I want to build webparts with a azure functions backend and secure it with entra id.

Mac auto Pilot?

Great work

I am encountering an issue while configuring a device using the Windows Autopilot device preparation method. On my Windows laptop, the option to log in with a work or school account is not showing up. Instead, the laptop only provides the option to create a local user. As you know, for the Windows Autopilot device preparation method, it is essential to create an account with a work or school account. I have tried using other laptops, but I am facing the same issue. How can I resolve this problem?

@39:10 - why would a deployment of a new devices take more than 3hrs ???

In Azure portal or Microsoft 365 admin portal, there is no way to set each user Outlook signature, other than to log into that user outlook-web account, then create the signature & set the new & reply option. - can we just give the user a new laptop and everything that they need to get up and running is done? - is there a way to create a Windows OS configuration file & an Office configuration & setting file for each user?

@38:01 - how to make OneDrive and all the Office apps auto sign-in/configure?

@27:10 - what does it mean "Targeted Devices"??? - do we have to select the devices, or put them into "Windows autopilot group" ? - or will it just use all the devices i have in Azure? - does it matter if they are Entra-ID-Joined or Entra-ID-Register ???

A very practical demonstration, wonderful content sir!

Can you still change it to corporate in device properties after the enrollment?

Hi Dean, thanks for the Video, i have different question not related to this topic. I want to block USB access for windows devices either from Intune or Defender for Endpoint but allow the basic USB devices like Mouse and Keyboards to work. I have tried creating policy from Configuration Profile (Administrative Template) and from Device Control (ASR) but nothing seems to work the way it should be. As per the MS documents it is simple but in practical it is not working. Either it is blocking all USB or Allowing all. I have gone through many youtube video but could not find a easy and best way which work. Have you tried this scenario and did it work, if not then could you add this to your list as it will be very helpful for others as well, since this is the basic requirement of every organization which is using Defender for Endpoint but achieving the desired result seems quite difficult.

I am facing an issue when Iam trying to enroll the device with this method windows does not give me the option to log in with work or school accounts it just gives me the option to join as a local user, Iam trying many times, but i am not able to fix that issue, so could you help me to solve this.

Where is the Convert-WindowsImage powershell script from? Have I missed that being mentioned?

This remote assistance works for iphone devices on Intune? Edit: Only supports those platforms Windows 10/11 Windows 11 em dispositivos ARM64 Windows 10 em dispositivos ARM64 Windows 365 Android Enterprise Dedicado (dispositivos Samsung e Zebra) macOS 12, 13 e 14

@DeanEllerbyMVP is it possible to block adding Corp and Personal Outlook Or OneDrive account on a iOS BYOD device. Please advise how THanks

can we use this to uninstall and reinstall a program?

Amazing! Thank you so much. Got a basic setup first try!

Great video, but I’m a little confused. Don’t we want our users to sign-in to our corporate owned Apple devices with an Apple ID associated to the corporate email? Why is it prompting them to change it to a non-corporate email?

Thanks Dean. I need to do this for both new devices and devices already in the wild which are corporate owned but not under intune or autopilot. They were on prem machines which left the building during covid and mostly havent had line of sight to adc since then...

Great! Looking forward for new content regarding Autopilot V2 ;-)

Great video Dean. I can't believe I've never used the online option for device hash capture before. Thanks for sharing. All the best 👍David.

Hi Dean, i got stuck with one situation and need your guidance in solving it. We have our own .apk file for android devices, these are custom in-house developed applications, i want to deploy the application to Android Fully Managed devices (Since the device belongs to company). I did it before with publishing them to google play store as a private app but now the size is the problem as it exceed 200MB, so i cannot use this option. I tried with deploying them as Line of Business application but its been 2 days nothing shows on device and even in intune portal it neither failed or success. Question: How to deploy your custom .apk files to android fully managed devices if the file size se more than 200MB? Appreciate your advice and guidance on this matter as i got stuck here from last one week.

Is your detection method ok to install updates of the app?

The Developer Program was NOT for learners to do just anything. It's obvious you never read the fine print. This is probably the reason why they got rid of the program.

SCIM is no longer available in Apple Business Manager :/ Is there another way to sync only specific users or groups?

Thanks for the video. At the owner, the "Intune Provisioning Client" is not there! Any idea?

Does the owner really "only" have to be set for the "Windows Autopilot device preparation device group" and not also for the "Windows Autopilot device preparation user group"?

This looks cool, some of our users needs to be local admin on their devices. Which meant I needed to set the Group tag on the device beforehand to get the correct profile. Which also meant that mistakes could happen where an device on the shelf never was assigned the correct group tag before being handed to a user. This looks promising as the device can get a profile that is meant for that user :D

Thanks for the video. Can you advise where to view the reports when configured in audit mode?

Dean, great video. I'm curious.. as a Win32 app.. how do you ensure that when Zoom auto updates itself, Intune doesn't try to revert the install to the version deployed by Intune?

I heart this so much Dean, thank you!

Thank you very much for this. Reading the documentation is always first and foremost but having a video walk-through is such a great thing to have. Well done. This helped my fix a couple of configuration profiles that were setup before me joining my company.

can we use the same account azure?