Marius (Mr Wyss)

Customer Engineer at Microsoft, on Twitter I am on a private quest. new on Bluesky

[ariaupdated @ariaupdated]

You can now enable users in your organization to #Seek for #Windows11 (aka they can choose whether to upgrade and when they want to do so) - I'm so excited! 🥳
ps If you hadn't started your #Win11 deployment before, no time like the present to get started! https://t.co/68dL0XTCyt

[Marius (Mr Wyss) @MrWyss]

🫰🐉 X Plus, i hope it delivers the promise
https://t.co/420EQDIUPq

[Marius (Mr Wyss) @MrWyss]

@IntuneSuppTeam I have reports from customers that the Reports > Windows Update > Reports > Windows Feature Updates Report, are either not loading at all or show devices in progress for a Feature Update that has been long completed, since a few days. thx

[Marius (Mr Wyss) @MrWyss]

@JohnEijg Good point, The Kiosk scenario wouldn't work. For that, best thing, IMO, are Group Tags. This solution was born of a specific customer use case. Where they wanted to have CAD machines classified as soon as there was CAD software installed.

[Marius (Mr Wyss) @MrWyss]

Unofficial 📢: #MSintune Device Classification - “Classifies devices for dynamic Entra ID group creation.”
- No client side secrets, no client component
- Easy and fast setup with jupyter-like notebook

https://t.co/rPGWYsqh68

🙏Test in lab, share feedback, contribute 🙏

[Marius (Mr Wyss) @MrWyss]

@WerWolv @mniehaus @Mister_MDM

[Marius (Mr Wyss) @MrWyss]

For the Geeks🤓 out there!! An ImHex file (wip) for Autopilot hw hash (bin). https://t.co/PqWr86F26d
Something that bugged me for a while was that DateTime field, which is, 4 bytes of Secs after Jan 1, 2000 and 1 byte timezone

#MSIntune thanks to @WerWolv @mniehaus @Mister_MDM

[Marius (Mr Wyss) @MrWyss]

and shout out to @thilojaeggi for https://t.co/TsfCmSut3k, very 🆒

[Marius (Mr Wyss) @MrWyss]

I just spent too much time 😒 to set the CSP - DesktopAppInstaller - EnableAdditionalSources
ICYWW: that would be your string value: ✅

<enabled/><Data id="AdditionalSources" value="1{"Arg":"https://t.co/gVbneWpRi6;}"/>

#MSIntune

[Marius (Mr Wyss) @MrWyss]

For the few that care 😜 :
https://t.co/UjAJ6ZK3tu
Script to that convert configured winget sources to OMA-Uri CSPs.

[Marius (Mr Wyss) @MrWyss]

Happy 25th #Halflife anniversary @valvesoftware
Give that webdev a raise 😁

[Marius (Mr Wyss) @MrWyss]

@bdam555 @eskonr @ariaupdated Another trick I learned to check active hours restriction, is to change the device time zone. This allows you to quickly move in or out the active hours.

[Marius (Mr Wyss) @MrWyss]

@bdam555 @eskonr @ariaupdated yes, the docs for SetEduRestart, state download and installing only. But my observation was that it would not even scan and therefore offer, unless manually checked. Worked on a case, where compliance was very low due to that. Restart Checks = skip is meant for EDU Devices only.

[Marius (Mr Wyss) @MrWyss]

@eskonr @ariaupdated UCClient
| where LastWUScanTime != ""
| where TimeGenerated > ago(30d)
| where Country in ("CH","DE")
| extend Hour = floor( datetime_utc_to_local(LastWUScanTime, 'Europe/Zurich') % 1d , 1h)/ 1h
| summarize Scans=count() by Hour, Country
| order by Hour asc
| render columnchart

[Marius (Mr Wyss) @MrWyss]

@eskonr @ariaupdated To get an "idea" as to when your clients scan, you can run a query "like" this against log analytics.

[Marius (Mr Wyss) @MrWyss]

I blogged another🛑hacky way 🛑to get inventory data from your windows #msintune devices:
https://t.co/inwA9tA497

[Marius (Mr Wyss) @MrWyss]

I wish, I had https://t.co/qYcXqsMXFs earlier in my toolbox.

GPO/Intune Policies Szenario:
1. Export
reg export HKLM\SOFTWARE\Policies\Microsoft\Windows Policies.reg

reg export HKLM\SOFTWARE\Microsoft\PolicyManager PolicyManager.reg

2. Open it with Registry Preview
#msintune

[Marius (Mr Wyss) @MrWyss]

@mniehaus @SCCMentor @michael_mardahl Yep, in my LAB. Also, Using CertifyTheWeb UI, CloudFlare DNS API, Deployment Task https://t.co/SypKG4K56q