EMS – All about Microsoft Endpoint Manager

Streamlining Primary User UPN Fix in Intune Using PowerShell

Posted on July 7, 2023 by Eswar Koneti | 0 Comments | 745 Views

Introduction: In Intune world of device management, the concept of the primary user plays a crucial role, especially when it comes to application deployments. In this blog post, we will explore the significance of the primary user and how it affects the installation of applications using the company portal in Intune. We will also…

Company portal – Install option grayed out due to primary user

Posted on May 9, 2023 by Eswar Koneti | 0 Comments | 2,941 Views

Introduction: During my testing of Intune's delivery optimization feature using win32 apps, I encountered an issue where the installation option for an application was grayed out on one device while working fine on another. In this blog post, I will share my troubleshooting journey and explain the concept of primary users in Intune and…

Troubleshooting Azure MFA call to phone option missing (TwoWayVoiceMobile)

Posted on January 14, 2023 by Eswar Koneti | 0 Comments | 657 Views

Recently, while working on an office 365 hardening project, I came across an issue that was causing problems for many users in verifying the 2nd factor authentication (Azure MFA). During the 2nd factor authentication process, users were presented with the following screen. As you can see, the user has the option to verify their identity…

Intune manage write access to mobile storage and removable data drives

Posted on November 11, 2022 by Eswar Koneti | 0 Comments | 928 Views

I was recently working on an assignment to manage windows 10 devices using Microsoft Intune. One of the ask is to Block the write access to the mobile storage devices when the user plugs into the windows device and Allow write access to the removal data drives (thumb drives) if they are bitlocker protected. I…

Add bulk devices to the Azure AD security groups for Intune deployments

Posted on July 18, 2022 by Eswar Koneti | 0 Comments | 3,965 Views

I was recently involved in a task to have the Intune deployments targeted to multiple groups (Pre pilot, pilot, and prod). Each phase has a large set of devices from various regions and they all have different naming conventions too. All the devices are hybrid Azure AD joined. The list of devices from each phase…

How to manage the bitlocker reboot (toast notification) in intune with device compliance policy

Posted on July 12, 2022 by Eswar Koneti | 5 Comments | 2,355 Views

There was recently a discussion on twitter on how the bitlocker encryption is being enforced using intune and what the possible ways to bring the device into compliant state post the bitlocker task is done. Read the conversation here Based on the discussion, I thought I would probably write a blog post on how to…

Troubleshooting windows Autopilot – stuck at account setup working on it

Posted on May 6, 2022 by Eswar Koneti | 5 Comments | 34,029 Views

Updated: 27-May-2022 Windows Autopilot is a collection of technologies such as Azure AD, Microsoft Intune etc., used to set up and pre-configure new devices, getting them ready for productive use. When working with windows autopilot, there is one common question that keep rising in the forums is, account setup stuck and takes longer time while…

How to upgrade the Intune certificate connector

Posted on April 26, 2022 by Eswar Koneti | 12 Comments | 12,295 Views

Microsoft recently announced that, Starting April 2022, certificate connectors earlier than version 6.2101.13.0 will be deprecated and will show a status of Error. This status does not affect functionality. Starting June 2022, such connectors will not be able to issue certificates. This includes both the PFX Certificate Connector for Microsoft Intune and Microsoft Intune Connector,…