I recently ran into an issue with a client when trying to capture a new AVD image. When trying to sysprep the VM before image capture, we were receiving the below error – “Sysprep was not able to validate your Windows Installation. Review the log file at %WINDIR%\System32\Sysprep\Panther\setupact.log” The above error on its own is […]
You may or may not know that there is a specific way to install Teams when using a VDI solution. AVD is what I end up working with in almost every situation, so this article is catered to AVD. However, this solution can be used for any VDI solution that uses the Teams machine-wide installer.
Keep Teams Machine-Wide-Installer Updated on AVD (or other VDI) with Intune Remediations Read More »
Here’s a quick tip if you’re using Microsoft Entra Connect (Azure AD Connect) to sync your user identities, and you need to enforce a password change for users at the next logon. This can be useful if your user identities are all synced from AD but you have a mixed bag of devices with PCs
Force Password Change at Next Sign-in for Entra Connect Synchronized Identities Read More »
I recently had a situation I hadn’t encountered before while moving a client to Hybrid Device Join + Intune (or Entra ID Join, HAADJ, EIDJ, or whatever you want to call it these days). This involved both firewall settings and configuration manager blocking device registration (see Ben’s post here for more on that Co-management Series
Hybrid Device Join – What Happens Behind the Scenes Read More »
***A new post covering how to do this for New Teams is available here – Deploy Custom Backgrounds to New Teams with Remediations – SMBtotheCloud A client recently wanted to deploy organizational backgrounds to all Teams users. However, this is now a Teams Premium feature, which is an additional cost per user per month (Custom
Intro Every couple of weeks I see a Reddit post or question asking about device group memberships or filters for certain properties that Azure AD doesn’t natively contain. One common request is making a dynamic group for all desktops or all laptops. There may be other specific properties about your devices that Azure AD doesn’t
Dynamically add Device Extension Attributes using Remediations Read More »
Conditional Access is constantly evolving and adding new features. One of the newer features is conditional access for workload identities. This allows us to secure service principals for our app registrations. At the moment, this is limited to two conditions – service principal risk and/or Locations. Personally, I’d like to see grant controls for compliant
Testing Conditional Access for Workload Identities Read More »
Whether you love it or hate it, AD Connect is still vital to many organizations. As more organizations shift away from Hybrid joined devices, some applications or business processes still rely on AD Windows Authentication for applications or Kerberos for legacy services, like SMB file shares. For that, AD connect is still required for SSO
AD Connect Sync Issues – Manually Hard Match User Identities Read More »
