Sheik's Site
Deploying the Claude Desktop application across enterprise devices can be achieved using Microsoft Intune with the Win32 app packaging method. This guide walks through the complete process—from downloading the installer to assigning the application to devices. 1. Download the Claude Desktop Installer Download the Claude Desktop installer from the official website: Example:C:\IntuneApps\Claude\ 2. Download the … Read more
Thanks to Maxime Rastello for creating this article. Without data or configuration loss There is a way to manually re-enroll your Windows 10 PC without loosing all the current configuration and apps deployed by Microsoft Intune. This method is not officially supported by Microsoft As you may know, automatic enrollment can be triggered either by … Read more
Since the configuration service provider (CSP) or group policy (GPO) settings to configure access to the Microsoft Store app are available to Windows Enterprise and Education editions, we have come up with an alternate workaround through Applocker Store App Rules Save the below content as an XML file. Create a custom Administration template under the … Read more
Enable Microsoft Defender for Endpoint integrations To enable the connection in Defender for Endpoint follow the following steps: For checking the state and configuring more settings go to the Intune portal and select Microsoft Defender for Endpoint. Connection status and last synchronized shows the status between MDE and Intune. Now lets get back to the steps available for … Read more
Create a configuration profile
We can use Intune to stop syncing personal accounts on OneDrive. Go to Configuration -> Create -> New Policy -> Windows 10 or Later -> Templates -> Administrative Templates -> “Give the desired name for the policy -> User Configuration -> Prevent users from syncing personal OneDrive accounts. As shown below. How to Prevent Users … Read more
Prepare your files to copy Prepare a folder and add all the necessary files that you want to copy to managed devices. Create a cmd file Next, create a cmd file with the instructions to copy all the files previosuly added and place it on the same folder. For our deployment we used the files … Read more
OMA URL. On the Custom OMA-URI Settings screen, select Add then enter the following settings: Additional OMA-URI formats. Generating the XML The first step is to generate the XML we need for Intune by modelling the policy on a Windows 10 computer. 1. On a computer running Windows 10 Enterprise, start Group Policy Editor (GPEdit). 2. Under Computer Configuration\Windows Settings\Security Settings\Application … Read more
You can disable adding the email account from the Outlook app via the Intune configuration profile setting catalog option. Find the screenshot below. To Restrict Personal Email for Outlook To Restrict other IMAP and PoP3 email. This setting will block the GMAIL and other emails.
Deploy File to Intune Enrolled Devices Deploy a file to Intune enrolled device’s to “C:\Users\Public\Desktop” through Intune Step 1: Prepare the files: Step 2″ Create an Install, Remove & Detect script & save each scripts A. Install: #Installation Script: Install-file.ps1 $FileName = “FileToDesktop.pdf” $ScriptPath = [System.IO.Path]::GetDirectoryName($MyInvocation.MyCommand.Definition) Copy-Item -Path “$ScriptPath\$FileName” -Destination “$Env:Public\Desktop” B. Remove: # Remove … Read more
Configure Endpoint Protection profile At the moment of writing, I still use an Endpoint Protection profile in Microsoft Intune to configure encryption settings as I haven`t tested the BitLocker settings yet which are found on the Endpoint Security tab. Give the configuration profile a Name Under Windows Encryption it is important to at least configure these settings for … Read more
I understand that some of your Hybrid Azure AD joined devices are not showing up in Intune. Here are some settings and troubleshooting steps to confirm: Hybrid Azure AD devices should be auto enrolled using either Group policies or Autopilot. To ensure that the auto-enrollment feature is working as expected, you need to verify the auto-enrollment … Read more
https://learn.microsoft.com/en-us/troubleshoot/mem/intune/device-protection/secure-boot-enabled-device-shows-not-compliant Symptom You create a compliance policy for Windows 10 devices in Intune. You set the Require Secure Boot to be enabled on the device setting to Require. In this scenario, a Windows 10 device that meets the requirement is marked as Not Compliant. Check Secure Boot status To check the status of Secure Boot on your PC: Cause … Read more
Basics Tab In basics tab, we will provide information about the device configuration profile like Name and Description. Configuration settings Click on + Add settings and then search for Microsoft App store. This should list all settings related to Microsoft App store. Check Require Private Store Only and toggle the setting to Enable. OMA-URI setting to block Microsoft Store