- 18
- 35 027
TheDeploymentGuy
United Kingdom
เข้าร่วมเมื่อ 13 ม.ค. 2022
This TH-cam channel provides in-depth coverage of Microsoft Intune, Microsoft Endpoint Manager, Microsoft Autopilot, OSD, Software Packaging, and Software Deployment. The channel is designed to help IT professionals and system administrators with tips, tricks, and latest information on how to set up, configure and troubleshoot issues on Intune, Endpoint Manager, Autopilot, OSD, Software Packaging and Deployment. The channel is updated regularly and the creator is available to answer any questions.
Enhanced Hardware Inventory in Microsoft Intune | Ignite 2024 Update #MicrosoftIntune
Discover the game-changing Enhanced Device Hardware Inventory in Microsoft Intune, announced at Ignite 2024! This tutorial walks you through configuring and using this powerful new feature to optimize device management. Learn how to collect detailed hardware data from Windows devices, improve troubleshooting, and make better business decisions.
Don't Forget:
👍 Like | 💬 Comment | 🔔 Subscribe for more Intune tips!
#MicrosoftIntune #EnhancedInventory #DeviceManagement #ITPro #EndpointManagement #TechTutorial
00:00:00 - Introduction
00:00:45 - Resource Explorer - First Look
00:01:10 - Create Advance Device Inventory Policy
00:02:04 - Properties Picker
00:04:11 - Agent Installation
00:05:15 - Wait, wait and wait some more
00:05:57 - We have data (finally!)
00:08:03 - Outro
Don't Forget:
👍 Like | 💬 Comment | 🔔 Subscribe for more Intune tips!
#MicrosoftIntune #EnhancedInventory #DeviceManagement #ITPro #EndpointManagement #TechTutorial
00:00:00 - Introduction
00:00:45 - Resource Explorer - First Look
00:01:10 - Create Advance Device Inventory Policy
00:02:04 - Properties Picker
00:04:11 - Agent Installation
00:05:15 - Wait, wait and wait some more
00:05:57 - We have data (finally!)
00:08:03 - Outro
มุมมอง: 133
วีดีโอ
Mastering Autopilot Device Preparation: Step-by-Step Setup & Key Configurations for Microsoft Intune
มุมมอง 1.9Kหลายเดือนก่อน
Unlock the full potential of Autopilot Device Preparation in Microsoft Intune! This comprehensive tutorial dives into the essentials of device preparation for optimized device enrolment and Intune management. Perfect for IT admins and tech professionals in schools and businesses, this video explores the step-by-step setup process and key configurations for smooth, user-friendly deployments with...
How to Use Microsoft Intune Filters for Precise App Deployment #MicrosoftIntune #DeviceManagement
มุมมอง 4682 หลายเดือนก่อน
Welcome back to The Deployment Guy! 🎉 In this video, we dive into Microsoft Intune Filters and show you how they can make your device management tasks so much easier. Learn how to use filters to target specific devices for app deployment, settings, or policies based on real-time conditions like device type, ownership, or enrollment profile. I’ll also walk you through why filters are more effici...
Discover the Power of Intune Enterprise App Catalog! #microsoftintune
มุมมอง 37410 หลายเดือนก่อน
🚀 Quick Guide to Microsoft Intune’s Enterprise App Catalog with @TheDeploymentGuy! In this 4-minute tutorial, we’re taking a rapid journey through the Enterprise App Catalog in Microsoft Intune. This video is designed to give you a quick understanding of the Enterprise App Catalog and its key features. 🔍 What’s Inside: A brief introduction to the Enterprise App Catalog A quick walkthrough of it...
Intune Simplified: The Essential Guide to Remote Help Setup and Configuration #intunetutorials
มุมมอง 1.6K11 หลายเดือนก่อน
🌟 Welcome to Intune Simplified 🌟 🎥 In today's tutorial, we're diving deep into Microsoft Intune to bring you a clear, comprehensive guide on setting up and configuring Remote Help. Whether you're a seasoned IT professional or new to the world of Intune, this video is tailored to help you master Remote Help with ease and confidence. 🔍 What We Cover: Licensing Requirements: Get the lowdown on wha...
Mastering Compliance Policies: Secure Windows Devices & Office 365 Access #DeviceCompliance
มุมมอง 274ปีที่แล้ว
🔐 Dive deep into the world of device compliance with The Deployment Guy! In this comprehensive tutorial, we explore how to craft robust compliance policies for Windows devices, ensuring top-notch security. Learn step-by-step how to prevent Office 365 access on non-compliant devices, safeguarding your digital environment. Perfect for IT professionals and security enthusiasts, this video covers: ...
Complete Lockdown: How to Block Control Panel & Settings Access for Users #intunetutorial
มุมมอง 1Kปีที่แล้ว
Discover the ultimate guide to enhancing your network's security by completely blocking control panel and settings access for users. This comprehensive tutorial walks you through every step of securing your system using advanced methods. Ideal for IT professionals, system administrators, and tech enthusiasts, this video ensures you maintain control and security in your network environment. Key ...
Mastering Intune: Step-by-Step Guide to Configuring Control Panel Visibility #IntuneTutorial
มุมมอง 517ปีที่แล้ว
Unlock the power of Microsoft Intune with this detailed tutorial. Learn how to expertly configure control panel visibility in your organization's network. This video provides a step-by-step guide, covering everything from the basics of Microsoft Intune to advanced control panel settings. Whether you're an IT professional or a tech enthusiast, this tutorial will enhance your skill set and unders...
Effortless Autopilot Configuration: Step-by-Step SCCM Hardware Hash Tutorial
มุมมอง 1.1Kปีที่แล้ว
Discover the easy way to upload hardware hash values to Microsoft Autopilot using Config Manager. In this tutorial, we'll guide you through the quick steps to obtain and upload hardware hash values for efficient device provisioning. 🔧 What You'll Learn: Accessing Config Manager to obtain hardware hash values. Uploading hardware hash values to Microsoft Autopilot. Whether you're an IT administra...
Boost Your Windows Security: Step-by-Step Guide to LAPS in Microsoft Intune
มุมมอง 4.7Kปีที่แล้ว
Welcome to this step-by-step tutorial on setting up Windows Local Administrator Password Solution (LAPS) in Microsoft Intune. In this concise video, we'll guide you through the process of implementing LAPS, an essential security measure, to manage local administrator passwords for your Windows devices efficiently. With LAPS, you can enhance your organization's security by ensuring unique, compl...
Enhance Security with Azure MFA and Conditional Access
มุมมอง 616ปีที่แล้ว
In this quick tutorial, I will guide you through the process of setting up Multi-Factor Authentication (MFA) in Azure using Named Locations and Conditional Access Policies. Follow the step-by-step instructions to configure a named location and create a policy that exempts users from MFA prompts when accessing Azure within the named location. Step 1: Configure Named Location Learn how to define ...
Intune - Office 365 Package & Deploy (Win32) #intune #mdm
มุมมอง 3.9Kปีที่แล้ว
Learn how to package and deploy Office 365 using Microsoft Intune with this step-by-step video tutorial. I will quickly walk you through the entire process, from creating the package and config files for deployment and finally, deploying it. With clear, easy-to-follow instructions, you'll be up and running in no time! Office Deployment Toolkit www.microsoft.com/en-us/download/details.aspx?id=49...
Transform Your Experience with Intune's Start Menu Layout | #intune #mdm
มุมมอง 5Kปีที่แล้ว
Are you tired of the default start menu on your Windows 10 & 11 devices? Look no further! In this Microsoft Intune tutorial, I'll show you how to create and deploy a custom start menu tailored to your organization's needs. With Intune, creating a custom start menu is quick and easy. We'll go step-by-step through the process of creating a custom JSON file, importing it into Intune, and deploying...
Intune - Do Not Display Last Signed in User (Shared Device Scenario) #intune #mem
มุมมอง 1.2Kปีที่แล้ว
Welcome to this video on how to configure the "Do not show last logged in user" setting in Microsoft Intune. This feature allows you to hide the name of the last user who logged in to a Windows 10 device, which can be useful for security and privacy reasons. The below books are excellent resources and starting points for anybody starting out in Intune ➩ amzn.to/3Xzrk96 ➩ amzn.to/3Kj4PlQ #intune...
Save Time with Microsoft Intune: Setting a Default Domain Tutorial
มุมมอง 707ปีที่แล้ว
Save Time with Microsoft Intune: Setting a Default Domain Tutorial
Intune - How to Dynamically Create Groups Using Group Tag in Autopilot #intune #autopilot
มุมมอง 4.4Kปีที่แล้ว
Intune - How to Dynamically Create Groups Using Group Tag in Autopilot #intune #autopilot
Mastering IntuneWinAppUtil: The Ultimate Guide #microsoft #intunetutorials
มุมมอง 2.9Kปีที่แล้ว
Mastering IntuneWinAppUtil: The Ultimate Guide #microsoft #intunetutorials
Windows Autopilot - Register Device During OOBE (Online)
มุมมอง 4.3Kปีที่แล้ว
Windows Autopilot - Register Device During OOBE (Online)
You explain things very well, and anyone watching this can understand it easily. I was hoping for more videos on Intune, with detailed, step-by-step explanations on specific topics.
Great content. Thanks.
Much appreciated!
Simple and very informative. Thanks for sharing
Glad it was helpful!
Your video was very accurate. I applied it in my organization, and it worked. Is there a way to pin the apps on the Taskbar and the Start Menu and deploy them using Intune?
What i don't get is why they didn't just pull through on the use of PKIDs. With device identifiers we keep having the "Is it HP, Hewlett Packard, Hewlett-Packard, HP Inc., etc" issue.
Yeah trying to guess the actual vendor name can be a bit of a pain in the ass.
When I use the powershell command it populates a blank .json file
If you are using WIN11, you can press CTRL+SHIFT+D and save the logs into a pendrive. Sharing is caring 😉
Thought there still was an issue with the device restriction policy, blocking BYOD enrollment and corp identifiers not working..... but it is working for you.....
how do you know the uninstall parameters?
Can users still adjust the start menu after this policy has been applied?.
it does not work for me. Do i need to create a deployment profile under Windows Autopilot?
No deployment profiles are for traditional Autopilot you don't need to use them. Which version of Windows is on the machine your testing it on? I had it fail on devices running older versions of 10/11 but when I downloaded the latest ISO from the below it worked www.microsoft.com/en-gb/software-download/windows11/?msockid=35089725c4f8650d208883d3c53a6487 Could it be that the OS on your device is older than 23H2 and doesn't have patch KB5035942 as detailed here learn.microsoft.com/en-us/autopilot/device-preparation/requirements?tabs=software
Short, quick and informative. Appreciate the videos you make 👍🏽
I appreciate that!
Very helpful. Thank you.
@@kabookeo thank you 😀
Thanks
Silly question, why using the file version instead of the app version in the detection rules ?
is there a way to change the password remotely via intune?
I'd love to see a video with a basic CA set up, perhaps one that mimics security defaults as a base, so orgs will have a basic set up they can add too when needed!
Great video, I didn't want to completely block access to the control panel as that would make life difficult, this is a perfect work around! Thank you. I hope you continue these videos.
Glad it helped and thank you for your kind comment it’s much appreciated. 👍👍👍
@@thedeploymentguy Random question that occurred to me. Is there a way to set this up so I have the option to run control panel as admin so once the system is live I can remote in and help users easier?
Thanks you made this hella easy to implement.
Thank you for your wonderful comment. Glad my video helped. ❤️
I need assistance here. Recently win 10 device motherboard replace due to which user getting TPM issue. To mitigate it we exported hash id, deleted device profile in Intune and uploaded latest hash in Intune. While uploading we getting error 808 - ZtdDeviceAssignedToOtherTenant. How to resolve it? Pls provide solution
Have you deleted it in autopilot aswell as Intune?
@@thedeploymentguy yes deleted
@@thedeploymentguy device deleted from Intune completely
We are using window autopilot to prep new device for end user and but how can a user logon to the device to create a user profile first time at home without connecting to virtual private network.
If you are using Autopilot to prep your devices I’m assuming your using Intune to manage them and Entra AD as your identity provider rather than an on-prem Domain controller. The user would literally be able to sign in from anywhere and it will contact Entra AD to authenticate them rather than them having to be onsite and the device having to contact a domain controller to authenticate.
Volume is very low. Please increase your mic on next video
Thanks dude!
Thank you for the tutorial! Can i deploy this to device group too or has it to be deployed to user groups only?
Personally I’ve always deployed start menus to users even in my GPO and SCCM days so I’ve not actually tried deploying to devices. Try it and let me know how you get on.
Thanks for the video, but there isn't a good chance an organization has the Remote Help license as it does not come with anything. Either add-on or part of Plan 2 or Suite, (both purchased separately). Sad how horrible the deployment and use experience is and good luck getting it working half the time. Very annoying software and for the money, you might as well just use Quick Assist (comes free with all Windows 10+ machines). Either way, thanks for the share. Figured I would come see some of the newer videos to see about any new methods of deploying the required software before this works.
If I’m honest I’m inclined to agree with you. I’ve literally been on 2 support calls with Microsoft this week and even they used Quick Assist. Just thought I’d do a video showcasing Remote Help to let people make their own minds up.
Did we need to login administrator if or end user account
You would use the admin account. This is simply to import the device into Autopilot at which point you would then assign it a deployment profile. Once the profile is assigned you would run through OOBE and if you have used a user-driven deployment profile it will prompt the end user for credentials and the device would then enrol in Intune.
Your a legend. Thank you so much
Quite possibly the nicest comment I’ve had on this channel. Thank you my friend much appreciated!
Thanks for video bro , your mic is bit low but your instructions were clear , 2. questions ,1. what would be faster in a auto pilot deployment , your way using Intunewin or just the bogg standard 365 store app , 2nd . what diagnostic logs would use to troubleshoot e.g the IME logs clientside... ty u in advance
Could you make a video on how you set up the sign in being n.tella. Below the password you have Sign in To: deploymentguy.... Dose this mean you have set up the device so any body in the entra directory can log in without entering there full email ?? i only ask because i currently moving loads of students to off prem.. Just want to set it up so they share laptops and sign in with just the username
Hi do you mean this? Save Time with Microsoft Intune: Setting a Default Domain Tutorial th-cam.com/video/OSg312s6XFg/w-d-xo.html
Life saver !@@thedeploymentguy
Thanks for the video. If you don't mind me asking what is the advantage of installing as a Win32 app / .intunewin file?
Various reasons. One of the big ones is that when you package it as an Intunewin file there’s a decent amount of compression involved. This is obviously a good thing when having to upload it to Intune and then each endpoint downloading it.
Thanks for the video. Keep it up. Aside from blocking the the whole Settings section, I do see there is an option to block each blade under Settings like Accounts, Network, Personalization, etc. I've tried to block almost all settings but It worked for only a few settings like Gaming and Windows Update. Is there any workaround for this issue? Appreciate the videos and your efforts. Cheers
Did you get anywhere with this issue as I'm having the same thing with a AVD multi session VM?
Fantastic guide, thanks mate!
No worries pal hope it helped.
@thedeploymentguy Thanks a lot, greetings from Monterrey México
Thank you
Hey no probs at all 😊
TheDeploymentGuy@ Hi, does it that information is by default in monitor reporting sccm menu or you have to create some script to create it?
No this should be by default if you have reporting services installed on your sccm server.
question, though you already have enrollment the device it should be Joined to a intunes group in order to Applying some policy for app installation right?
Yes this will just import it into AutoPilot. You then need to setup a deployment profile and assign it to a group. I typically use either a dynamic group which pulls all Autopilot devices in or a dynamic group based on a group tag which you can set on the device in Autopilot.
Thank you for this, it's very helpful.
Thank you so much. I’m a relatively new and small channel so it means a lot when people provide positive comments.
@@thedeploymentguy The only problem I can think of is if you wanted to grant access to display settings for a visually impaired pupil so they could make adjustments if they needed to.
Thanks for sharing. You made my day.
Thanks. Glad you liked the video.
Thanks for the info but I ran into a minor issue. When I register the computer I get hit by a "needs autherization" or "need a business reason" (sorry it's been a while) as I am not Global Admin. I was wondering where the option is to allow this through in Intune so I can tell my Manager? Thanks again!
You may have to have somebody add you as a Device Enrollment Manager in Intune. learn.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-manager-enroll
Thanks for the reply. I am a Intune Administrator and listed under the enrollment managers but still get flagged. I'll try it again and see if it works. it's been a while since I tried. Thanks again!@@thedeploymentguy
Love the test user 🤣 I need to up my game! I also didn’t realise you could just use the friendly names, a lot easier than the MS Settings GPO having to put the full ms-settings:printers
Yeah using the settings picker is a lot easier. I remember the string you had to use with GPOs for visibility and you can still use it with oma uri but this way is much easier lol.
Thanks for this video, I would like to see more on locking down student users as I'll have to be doing that in a few months time.
No probs. I will try and do a video for locking down settings and control panel for Students this week. I’m slowly trying to compile a list of videos I can create most of which will be based around an educational setup.
thank you for the videos they have been a great help. Out of interest I see you are targetting users. If a member of the IT Admin sign into the laptop does the policy still remain on the computer blocking the admin too? I've locked computers down for students but had issues where the policies still applied to admins when they sign in. Thanks again!
Great question! As long as the admin isn’t part of that group that the policy has been applied to then you should be fine. I have just logged into the VM in the video with an admin account and was able to see every setting in the control panel.
I’ve also had this problem, eventually the device will realise an admin is logged in and revert to default settings but in my experiences it can take a while!
You could target per user too I imagine, so if x user is part of group endusers then block control panel.That is p much what I have done, you can also mark admins as exempt from this ruling.
You da Man! I love the quick, simple explanation. Great job
Hey I appreciate that thank you. Don’t forget to subscribe to the channel if you haven’t already.
Great Video! I just started working with Azure & Intune. I will be spending some time on your videos!!!!
Thank you so much I really appreciate that. I’ve not been able to make many videos recently due to being busy with projects at work but I’m hoping to start again in the coming weeks so stay tuned.
indeed a very good feature.
Thank you
Any turtorial on Customizing win 11 taskbar aswell?
I have recently launched a website to compliment this channel and I have posted a tutorial on there today as it was much quicker than doing a video. You can get to it via www.thedeploymentguy.co.uk
@@thedeploymentguy Thank you but that link is not working.
@@bella2028volleyball For now I am concentrating on the TH-cam channel. I decided to take the website down but it may be something I do again in the future if this channel grows enough.
Awesome! I've been worried about configuring this one because I work in a school - and enabling MFA on devices that teachers use in the classroom that then requires them to have a phone out is a big 'no' here!! Am I correct in thinking that those who haven't got a form of MFA registered will be walked through the process if they are prompted and haven't completed those steps yet?
Yes it should prompt them with more information needed and then guides them through setting it up. I was in same boat as you because I also work in schools and was worried about staff constantly being prompted for MFA but this has done the job for me. I’d suggest creating a group with some test users and then point the policy to this group first just to make sure it does what you expect.
@@thedeploymentguy Awesome! Huge thanks for that!!
Thank you, very useful video. Do you perhaps know how to show all the icons on the taskbar in the right corner using Intune? Greetings from Belgium.
Sorry I missed this comment. When you say right corner do you mean how to pin icons to the right of the start button on the taskbar?
@@thedeploymentguy Hi, no problem. I mean the small icons next to the date on the taskbar. Now, most of them are hidden. Tray icons they are called, I think.
when I am restarting the machine from locked screen after enabling this policy, user name field remains there
Did you give it time to sync and did you check your device in Intune to see if the state of the policy had succeeded? One thing Intune isn't is quick.
we have sound :) thanks man, keep up the good work
Thanks will do! Hopefully I start getting more confident and can do some longer videos.
What do you do in this workflow when you upload an .exe? Since those dont auto populate the /msi flags etc
If im honest I always try and avoid using .exe's whether it be with ConfigMgr or Intune. A lot of the time .msi installers are available from the vendor or if they only provide an exe file I use the trick where you run the exe and it spits an msi into %temp% and then you can take that and edit it with Orca for example and make changes to shortcuts etc. If an exe is the only option I tend to script the install and uninstall and then wrap these in with the exe in the win32 app. From here you would point the install and uninstall commands in Intune to the relevant script i.e. install.cmd, uninstall.cmd. If you are adamant you want to wrap the exe as it is then you need to know the switches to install the exe which are easy to find using something like USSF or if you have been packaging for a while you know the usual ones to try. In Intune in the install command field you would simply put the name of the executable followed by the switches i.e. "npp.8.4.9.Installer.x64.exe" /S. The uninstall field is slightly harder to work out. I tend to obtain the uninstall string from HKEY_LOCAL_MACHINE > SOFTWARE > Microsoft > Windows > CurrentVersion > Uninstall and then the uninstall command line in Intune would be this string from the reg or it might be a GUID which you would use with msiexec /x with. Obviously with the detection method they wont auto populate either so you need to do a bit of work to work out the product codes, installed exes or reg files.
@@thedeploymentguy thanks for the extensive answer! Orca and ussf are good suggestions. So I guess I was on the right track and it really is that painful haha. Good thing Microsoft is doing win32 winget apps. I love this series! Keep up the good and clear answers about intune