A year ago, Apple announced a new method of iOS/iPad device enrolment which is called User Enrollment. This enrolment method is available in iOS 13 and macOS 10.15 Catalina and later OS. with user enrollment, we can use federated authentication to link Apple Business Manager to your instance of Microsoft Azure Active Directory (Azure AD). As a result, your users can leverage their Azure AD usernames (User Principal Name) and passwords as Managed Apple IDs. They can then use their Azure AD credentials to sign in to their assigned iPad or Mac and even to iCloud on the web. Users can also…
Author: Eswar Koneti
I was helping a customer who was trying to set up an android enterprise personally enabled (BYOD) work profile configuration. In this blog post, I will try to explain the expected behavior (based on my testing) of the Android Enterprise work profile password. A work profile is something that you can be set up on an Android device to separate work apps and data from personal apps and data. With a work profile you can securely and privately use the same device for work and personal purposes. Using Intune, the work profile can be used in Android Enterprise personally owned…
Microsoft has released another update rollup (KB4575790) to fix client setup content download issue from CMG distribution point.The following listed issues and the rollup update is available in updates and servicing node only if you have installed the recently released update rollup KB 4578605 for Configuration Manager 2006 build.If you have not installed KB 4578605, then you will not see this update in the updates and servicing console.Issues:1. If you have configured cloud management gateway along with cloud DP and running the ccmsetup.exe (client installation) , the client will failed to download the client installation file (ccmsetup.cab) from Azure blob…
I was asked by a customer to find the devices with excluded apps in C2R products such as Office 365 Proplus or Microsoft 365 Apps or Office 2019 etc.When you create a configuration file for C2R products such as office 365 proplus/Microsoft 365 Apps, you can define which app in Microsoft 365 Apps product not to be installed such as Word, Excel, PowerPoint, Publisher, Visio, or Skype. If you don't want Publisher installed with those applications, use the ExcludeApp element to remove itFollowing are the allowed values to be used in the configuration for Exclude App element.ID="Access" ID="Excel" ID="Groove" ID="Lync"…
Over the last couple of years, I have been using this method to extract the status messages for various components in Configuration Manager such as SMS provider, Site server and client. These status messages critical and useful when it comes to troubleshooting the components, clients etc. Status messages are similar to Windows NT Events and they have a severity, ID, description, etc. These status messages ID appear in lot of places like logs, event viewer,configuration manager console. During the troubleshooting, it is hard to find out the description for the status message ID that you looking for and not everything…
There are times where you need to troubleshoot the Microsoft Teams client issues such as app crashing, poor call quality, new features not working as expected, etc. When you get any of such issues, you will need to collect the team’s client logs to investigate further and if possible, you likely need to share the logs with the Microsoft support engineer for further help. There are different logs in Teams client that help you to troubleshoot the issue. The following are the important set of logs. Debug logs Media logs Desktop logs Event viewer As the teams client installed in…
Google has already announced the depreciation of the android enrollment using device administrator, for more information, please refer to https://developers.google.com/android/work/device-admin-deprecation and is highly encouraged to use Android enterprise for devices where GMS available. There is still a need to fallback to device admin in countries where there are no GMS available such as mainland China. If you don't have GMS services available, the device cannot be managed by Microsoft Endpoint Manager using the work profile. I recently did a blog post on this, for more information, please refer to https://systemcenterdudes.com/endpoint-manager-android-china/ In this blog post, we will see how to move…
Microsoft released Configuration Manager technical preview version 2010.2 which is 2nd release for Oct 2020. These Technical previews released every month for testing, explore new and improved features and provide feedback in case of any issues. This Technical previews brings the following new and improved features. Tenant attach: Troubleshooting portal lists a user’s devices based on usage Tenant attach: Create and deploy firewall policies Enhancements to applications in Microsoft Endpoint Manager admin Center Manage BitLocker policies and escrow recovery keys over a cloud management gateway (CMG) Improvements to deploy an OS over CMG using boot media Desktop Analytics support for…