Intune Scripting Pro @ScriptingIntune

Helping IT pros unlock the Windows Digital Workplace ⚡ | Intune & MECM expert | PowerShell & Graph API scripting tips | Defender security insights 🚀 Joined March 2020

Tweets

226
Followers

67
Following

250
Likes

451

Mike Terrill [MVP] @miketerrill

2 months ago

Creating an Autopilot from cloud task sequence is easy as 1, 2, 3 with @2pintsoftware #DeployR

2 10 51 5K 27

View Details

Intune Scripting Pro @ScriptingIntune

4 months ago

@iyoushetwt Pascal COBOL Fortran

0 0 0 7 0

View Details

Intune Scripting Pro @ScriptingIntune

4 months ago

@sukh_saroy But you could anyway in vscode 🥸

0 0 0 452 0

View Details

Intune Scripting Pro @ScriptingIntune

4 months ago

@dfinke Fun times

1 0 0 24 0

View Details

Intune Scripting Pro @ScriptingIntune

5 months ago

@ccmexec @jarwidmark Question for the GOAT @jarwidmark Does anyone really just use Intune baselines CIS L1? They don’t cover it all; a greenfield starting point is all the Intune baselines are good for.

1 0 1 97 0

View Details

Intune Scripting Pro @ScriptingIntune

5 months ago

@ccmexec @jarwidmark OIB all the way

0 0 1 70 0

View Details

Intune Scripting Pro @ScriptingIntune

5 months ago

@PrajwalDesai ☠️One is a homoglyph attack☠️, They look identical, but one URL swaps a normal Latin letter for a Unicode look-alike character (often Cyrillic). onlinebanking → оnlinebanking (That “o” isn’t English 👀)

0 0 0 17 0

View Details

Intune Scripting Pro @ScriptingIntune

5 months ago

@PJ_Marcum @TheWMIGuy @TomDegreef Remove the Packaged app deny rule (and ensure you have the default allow for signed packaged apps) to avoid breaking modern/UWP apps on domain-joined devices – that’s a common gotcha when Exe rules are enforced without proper Packaged app allows. Test in audit mode first!

0 0 0 32 0

View Details

Intune Scripting Pro @ScriptingIntune

5 months ago

@PJ_Marcum @TheWMIGuy @TomDegreef Switch to an Exe deny rule for quickassist.exe – it’s in System32 and signed by Microsoft (Publisher: O=Microsoft Corporation, Product: Microsoft Windows Operating System, Binary: QUICKASSIST.EXE).

0 0 0 138 0

View Details

Intune Scripting Pro @ScriptingIntune

5 months ago

@NathanMcNulty Great work 🤘

1 0 1 247 0

View Details

Intune Scripting Pro @ScriptingIntune

7 months ago

@rnabmitra @jarwidmark Better late than Never

0 0 2 321 0

View Details

Intune Scripting Pro @ScriptingIntune

7 months ago

@acjuelich @ariaupdated What version of OS are you on ?

0 0 0 42 0

View Details

Intune Scripting Pro @ScriptingIntune

8 months ago

@mwbengtsson @Mister_MDM @IntuneSuppTeam Elevate as current user new in try resync/update. Checks: PS: Import EpmCmdlets.dll (C:\Program Files\Microsoft EPM Agent\EPMTools); Get-EpmElevationRule -FilePath “cmd.exe” Event Viewer: DeviceMgmt-Ent-Diag-Prov/Admin Intune sync/latest agent If whoami=virtual acct, check rule

1 0 1 96 0

View Details

Intune Scripting Pro @ScriptingIntune

8 months ago

@NathanMcNulty Spot on! RoleManagement.ReadWrite. All is a sneaky beast lets apps assign any Azure AD role, including Global Admin. It’s like handing over the keys to the kingdom. Admins: Always review perms with least privilege in mind. Audit those consents! #EntraID #CyberSecurity

0 0 2 125 0

View Details

Intune Scripting Pro @ScriptingIntune

8 months ago

@StevenKister1 @jarwidmark Yes, that's correct and expected. When you change the co-management workload slider, it only affects new deployments of that type. Existing ConfigMgr-required application deployments will continue to be managed by ConfigMgr and will install.

0 0 4 155 0

View Details

Intune Scripting Pro @ScriptingIntune

8 months ago

🕵️‍♂️ Microsoft is investigating and will roll out a fix soon. Keep an eye on the Microsoft 365 Service Health Dashboard (ID: IT1168328) for updates. #Intune #Microsoft #WinGet #EndpointManager #SysAdmin

0 0 1 228 0

View Details

Intune Scripting Pro @ScriptingIntune

8 months ago

🧰 Temporary fix (official Microsoft guidance): 1️⃣ Delete the folder contents at %windir%\Temp\WinGet\defaultState 2️⃣ Restart the device Admins can also push a cleanup via Intune Proactive Remediations to automate this.

1 0 0 225 0

View Details

Intune Scripting Pro @ScriptingIntune

8 months ago

🚨 Heads up Intune admins: Microsoft has confirmed a bug in the Intune Store application (Incident ID: IT1168328) that can cause Windows devices to run out of disk space due to runaway WinGet logs.