Skip to main content

Neil Petersen - This is my Blog

Search This Blog

Modern Management - Part Six - Resetting Autopilot Devices

on July 31, 2019

Get link
Facebook
X
Pinterest
Email
Other Apps

Following on from my last post Part Five - Windows Updates here's a quick post around Modern Management and how to reset Autopilot devices.

Modern Management - Part One - Autopilot Demo on Hyper-V

Modern Management - Part Two - Office 365 Deployment via Intune

Modern Management - Part Three - Packaging Win32 Application for Intune

Modern Management - Part Four - OneDrive Silent Configuration

Modern Management - Part Five - Windows Updates

Modern Management - Part Six - Resetting Autopilot Devices

Modern Management - Part Seven - Bitlocker

Modern Management - Part Eight - Windows Activation

Modern Management - Part Nine - BGinfo via Intune

Modern Management - Part Ten - Harvesting Autopilot Hardware IDs

Modern Management - Part Eleven - Migrate File Shares to Teams

Modern Management - Part Twelve - Synchronising AD Groups with Office 365 Groups

Modern Management - Part Thirteen - Skype for Business to Teams Migration

Modern Management - Part Fourteen – MCAS Blocking File Downloads

To do this we create a Device Configuration profile with the following settings:

This allows users to reset Autopilot devices (for insturctions on this take a look at https://docs.microsoft.com/en-us/education/windows/autopilot-reset)

We can also reset devices from within Intune:

10 AutoPilot device device configuraiton profiles devices Intune management Modern reset windows

Get link
Facebook
X
Pinterest
Email
Other Apps

Comments

Post a Comment

Popular Posts

Troubleshooting Azure AD Hybrid Join and Intune AutoEnrollMDM

Working for a number of clients recently and we were deploying Self-Service Password Reset from a Windows 10 logon screen ( https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-sspr-windows ) and we came across was the machines would not Hybrid Join . using dsregcmd /status we could see the AzureAdJoined still had a value of No so w e went through the following checklist: Checked Hybrid Join was enabled using the Azure AD Connect wizard - https://docs.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-managed-domains Checked the device control Group policies - https://docs.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-control Checked the device settings within the Azure Portal - https://docs.microsoft.com/en-us/azure/active-directory/devices/azureadjoin-plan#configure-your-device-settings Checked the SSO URLs had been added into local intranet zone (SSPR) - https://docs.microsoft.com/en-us/azure/ac

Modern Management - Part Seven - Bitlocker

Sorry it's been a while but following on from my last post Modern Management - Part Six - Resetting Autopilot Devices , here is my lastest post around Modern Management and deploying Bitlocker Device Configuration Profiles as part of an Autopilot deployment. Modern Management - Part One - Autopilot Demo on Hyper-V Modern Management - Part Two - Office 365 Deployment via Intune Modern Management - Part Three - Packaging Win32 Application for Intune Modern Management - Part Four - OneDrive Silent Configuration Modern Management - Part Five - Windows Updates Modern Management - Part Six - Resetting Autopilot Devices Modern Management - Part Seven - Bitlocker Modern Management - Part Eight - Windows Activation Modern Management - Part Nine - BGinfo via Intune Modern Management - Part Ten - Harvesting Autopilot Hardware IDs Modern Management - Part Eleven - Migrate File Shares to Teams Modern Management - Part Twelve - Synchronising AD G

Azure AD SSO - Troubleshooting

If you have configured Azure Active Directory Connect to use Seamless Single Sign on and are having trouble with signing on ensure the following: You are logging onto a Domain Joined machine connected to the corporate network, the machine must have line of sight to a Domain Controller to request a Kerberos ticket. The following URLS are added to the Local Intranet zone via GPO (User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page by modifying the "Site to Zone Assignment List") https://autologon.microsoftazuread-sso.com https://aadg.windows.net.nsatc.net Enhanced Protected Mode is disabled (Computer Configuration\Computer Policy\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page\Turn on Enhanced Protected Mode) You can use klist purge to purge the Kerberos tickets, then klist get AZUREADSSOACC to ensure that you can receiver a Kerberos ticket

SCCM - PS - Detection Method for User APPDATA

I needed a detection method to confirm the presence of a file under the %APPDATALOCAL% directory and a HKCU registry key. Thanks to this post and this one I was able to achieve this. #Detects if C:\Users\%username%\Appdata\Roaming\folder_name\file_or_subfolder_name exists Function CurrentUser{ #CurrentUser function converts the username object string "@{username=domain\user}" # to the exact logon string "user" like the example below #@{username=DOMAIN\USER} #@{username DOMAIN\USER} #DOMAIN\USER} #DOMAIN\USER #DOMAIN USER #USER $loggedInUserName = get-wmiobject win32_computersystem | select username $loggedInUserName = [string]$loggedInUserName $loggedinUsername = $loggedInUserName.Split("=") $loggedInUserName = $loggedInUserName[1] $loggedInUserName = $loggedInUserName.Split("}") $loggedInUserName = $loggedInUserName[0] $loggedInUserName = $loggedInUserName.Split("\") $loggedInUserName = $loggedInUserName

EOL - Troubleshooting Exchange Online Mailbox Migration Speeds

Working for a client we run into numerous issues where we were seeing sluggish performance when migrating mailboxes to Exchange Online, here are a few of the troubleshooting steps we went through. (The actual was being caused by some barracuda load balancer devices which we had to remove out of the migration path.) Ensure the Exchange servers are patched with the latest CU Ensure all flood mitigation, SSL offload, traffic inspection and any IP connection limits are removed from the firewall connections to mail.domain.com (including TMG) Review Migration endpoint and ensure that MaxConcurrentMigrations are set to a reasonable number for your infrastructure, currently using 35 and 25 MaxConcurrentIncrementalSyncs (use Get-MigrationEndpoint | fl to check.) Ensure that the correct AV exclusions are in place as per - https://docs.microsoft.com/en-us/exchange/anti-virus-software-in-the-operating-system-on-exchange-servers-exchange-2013-help ? (There is a PS script that wi

AADC - 0x8023134a - AttributeValueMustBeUnique

I ran into an error during an SMTP matching excercise while merging Active Directory accounts with existing Azure AD Accounts for an Office 365 project I was working on. The account would just not sychronise. Unable to update this object because the following attributes associated with this object have values that may already be associated with another object in your local directory services: [ProxyAddresses SMTP:user.name@domain.com;]. Correct or remove the duplicate values in your local directory. Please refer to http://support.microsoft.com/kb/2647098 for more information on identifying objects with duplicate attribute values. Tracking Id: f6334212-fc15-4eea-9407-xxxxxxxxxxxx ExtraErrorDetails: [{"Key":"ObjectId","Value":["cb866447-5dfb-4fdf-xxxx-xxxxxxxxxxxxx"]},{"Key":"ObjectIdInConflict","Value":["516338b6-8cc4-4d78-xxxx-xxxxxxxxxxxxx"]},{"Key":"AttributeConflictName"

SSPR 0029 We are unable to reset your password due to an error in your on-premises configuration.

This was one of those annoying ones that took hours (days) with Microsoft to resolve. We're sorry We cannot reset your password at this time because of a problem with your organisation’s password reset configuration. There is no further action you can take to resolve this situation. Please contact your admin and ask them to investigate. To learn more about the potential issue, read the article Troubleshoot password writeback. If you'd like, we can contact another administrator in your organisation to reset your password for you. Additional details: SSPR _0029: We are unable to reset your password due to an error in your on-premises configuration. Please contact your admin and ask them to investigate. EVENTID 6329 - An unexpected error has occurred during a password set operation. "ERR_: MMS(5624): E:\bt\863912\repo\src\dev\sync\ma\shared\inc\MAUtils.h(58): Failed getting registry value 'ADMADoNormalization', 0x2 BAIL: MMS(5624): E:\bt\8

msExchRecipientDisplayType and msExchangeRecipientTypeDetails

The below presents all the possible values for the msExchRecipientDisplayType and msExchRecipientTypeDetails Active Directory attribute. Taken from http://www.msexchange.org/kbase/ExchangeServerTips/MicrosoftOffice365/ExchangeOnline/msexchangerecipienttypedetails-active-directory-values.html and https://blogs.technet.microsoft.com/johnbai/2013/09/11/o365-exchange-and-ad-how-msexchrecipientdisplaytype-and-msexchangerecipienttypedetails-relate-to-your-on-premises/ This tip presents all the possible values for the msExchRecipientDisplayType and msExchRecipientTypeDetails Active Directory attribute. A while back, while performing a migration to Office 365, I had to convert a Distribution Group into a Room List. However, due to the nature of the migration, I didn’t have access to an on-premises Exchange to use the Shell and convert it, so I had to resort to using ADSIedit. As many other AD attributes, these are represented by an Integer value in AD. Here are all the possi

Office 365 - Exchange Hybrid Relationship Reference

I have listed a working known good reference deployment so you can compare this against your deployment when troubleshooting free/busy sharing for example. In the following commands the mailbox locations are important Office 365 mailbox - Test.MBX1@devpetersenit.ltd On-Premise Mailbox - Neil@ devpetersenit.ltd Other articles that may help are Troubleshooting free/busy issues in Exchange hybrid environment https://support.microsoft.com/en-us/help/10092/troubleshooting-free-busy-issues-in-exchange-hybrid-environment https://support.microsoft.com/en-us/help/2752387/users-from-a-federated-organization-cannot-see-the-free-busy-informati - https://blogs.technet.microsoft.com/exovoice/2016/01/04/freebusy-troubleshooting/ Testing Autodiscover - https://testconnectivity.microsoft.com https://support.microsoft.com/en-us/help/2838688/-free-busy-information-couldn-t-be-retrieved-becau se-the-attendee-s-m From On-Premise Test-OAuthConnectivity -Service EWS -TargetUri https://o

Modern Management - Part Nine - BGinfo via Intune

I've used BGinfo ( https://docs.microsoft.com/en-us/sysinternals/downloads/bginfo ) for years across numerous clients to present helpful support informaiton to clients on the desktop. Modern Management - Part One - Autopilot Demo on Hyper-V Modern Management - Part Two - Office 365 Deployment via Intune Modern Management - Part Three - Packaging Win32 Application for Intune Modern Management - Part Four - OneDrive Silent Configuration Modern Management - Part Five - Windows Updates Modern Management - Part Six - Resetting Autopilot Devices Modern Management - Part Seven - Bitlocker Modern Management - Part Eight - Windows Activation Modern Management - Part Nine - BGinfo via Intune Modern Management - Part Ten - Harvesting Autopilot Hardware IDs Modern Management - Part Eleven - Migrate File Shares to Teams Modern Management - Part Twelve - Synchronising AD Groups with Office 365 Groups Modern Management - Part Thirteen - Skype f

Powered by Blogger