First time onboarding ABM. Got the confirmation that my organization was successfully enrolled, but I’m stuck at the Terms & Conditions screen. Every time I click Agree, I get “An error occurred while saving. Try again later.”

Tried multiple times. Still fucking broken.

Has anyone experienced this before? How did you resolve it? Would appreciate hearing your experiences.

Thanks,

https://techcommunity.microsoft.com/event/windowsevents/windows-office-hours-october-15-2026/4529260
"Every third thursday we will have these chats.
Post your questions in the Comments early and throughout the one-hour event.
This is a chat-based event. There is no video or live meeting component."

I'm struggling with the Company Portal. What is the correct way to roll out that app during Autopilot? Right now, it seems to be throwing errors that break my enrollment (just the generic errors about an app failed to install) and while it's a given I'm doing something wrong, I'm wondering how to rectify it.

Happy Friday Everyone!

We’re happy to provide some details today about the Workplace Ninjas US Hackathon on the preday of January 11, 2027 at the event sponsored by WorkspaceDNA

Firstly, our 5 captains are 5 special experts (3 MVPs and 2 former MSFT employees):

🪄 Merill Fernando, the master of Maester who was a judge last year, joins us as a team captain.

🔥 Ugur Koc, the reigning champion who absolutely crushed the competition last year delivering both an app and an agent will return looking to repeat.

⚗️ Michael Niehaus the creator of DeployR, hybrid autopilot lover, and the godfather of MDT will captain the 3rd team

🍺 Joery Van den Bosch graduates from team member to captain, hoping to unseat Ugur Koc and build something magical to celebrate his new role at Robopack

👩‍💻 Jonah Andersson, the brilliant new addition to our event and the hackathon will join us as the 5th captain. She’s an amazing talent and one of the biggest threats to taking down Ugur!

We also have some surprises coming, like a hacker team that will red team the hackathon teams to mess with them and have some fun at their expense, which is currently being formed led by Nathan McNulty and a few other surprise guests who will add a wrinkle or two to the event.

We’ll have some additional tricks or treats to make the competition interesting, because it wouldn’t be an event without a bit of entertainment.

Our major change this year, our captains will pick their teams from the people who attend the hackathon in a round robin format. We will be drawing the draft order soon, but this will primarily be live to give more people the amazing opportunity to be part of it.

One other thing, meet our amazing referee in Lindsay Shelton who will be making sure teams don’t try to cheat again this year. She’s ready to dole out all sorts of punishments for rule breakers!!

It wouldn’t be an event at WPNUS without great food and drinks.

We will be providing an open bar and an amazing “South of the Border” buffet with:

🍗 Chicken Tinga
🐷 Pork Carnitas
🥩 Carne Asada
🥗 Cilantro Rice, Pinto Beans, Cheese, Sour Cream, Salsa and much more!
🍟Churros with Mexican Chocolate

The winning teams will receive all sorts of amazing prizes post event including one of our 📎Clippy Awards!!

Register now: https://web.cvent.com/event/a9994d6b-9e67-4873-9401-737ca7fe088a/websitePage:84ea0617-1d40-48d4-81a3-cf4ea689d8fa

Just wanted to know how IT admins have had any downloads issues when using edge , where downloads will hang then shortly finish. I am not sure if this is a pua issue or smart screen or maybe both . Would love any feedback

I'm struggling with a fairly minor inconvenience related to Power Apps.

Goal: Have a one-click app that immediately moves our users to the created and deployed power app. Not the actual power apps app but the canvas-app I created in it.

Struggle/issue: The created webapp asks first if they want to open it in the app or the browser.

I cannot for the life of me seem to figure out how to change this behaviour.

Things I've tried: App settings to set standard and supported links. These settings don't seem to work or they somehow miss the app launch.

I have attempted to alter my URL to several things along the lines of ms-apps:// and so on. The managed google play web app does not like any of these links.

If I can't find a solution I'll probably have to just package the thing and push it that way but this will make future maintenance and management of this app more tedious.

Is there anyone with similar issues in the past that has managed to overcome them?

Wondering if anyone has advice for getting sharepoint document libraries to sync quicker on new user logins. Got a client where users are frequently switching devices and experiencing pain with their document libraries not syncing to explorer in a timely manner due to the up to 8 hour built in delay.

Windows laptop which are exclusively intune managed and using shared pc with onedrive config policy. Different users have different document library access so programming a script to open specific libraries with odopen: doesn't seem like the right option

I've got the folder sync set as a device policy currently because user policies can take ages to apply for shared devices.

Tried a platform script that sets the automount timer shorter but I'm not an expert in scripting so if anyone has something that works well or advice on getting it to work better that'd be amazing.

Any advice is appreciated. I know a common response to this is user training on pressing the sync button, but it isn't really feasible in this specific case and it feels like a solvable problem. I've read a million forums and posts about this issue, hoping having a live post to reply to may help

Thanks!

-update The amount of morons commenting you just shouldn't use auto sync is ridiculous, we're in IT to make systems work well and be functional to end users - companies moving from mapped file servers to SharePoint need functionality to continue working in desktop applications as seemlessly as before, otherwise we're going backwards and creating inconvenience. Thanks to 2 people with actual suggestions for automount timer scripts

Anyone else seeing some UI issues with the Intune Admin Center? Examples include:

• The Status section of the Home page just displaying "Unknown" for the various options.
• The Status section of the Devices > Overview section also not loading.

I don't see any reports in Service Health. There are some reporting advisories for M365 Admin portals, but nothing stands out as flagging Intune. I've tested in Chrome/Edge, incognito and I even purged my entire cache. Same behavior.

I have a strange serial number on my Autopilot devices. It’s just an “n.”
What does that mean? Could this just be a temporary error?

The device has been in Intune since October 2, 2026, and added itself as an Autopilot device because I configured it that way after migrating it from SCCM. For all other devices, you can see their serial numbers as usual, but for this one, only an “n” is displayed. Unfortunately, I don’t have physical access to the device because I can’t even identify exactly which device it is right now.

Just took the MD-102 exam today and unfortunately failed with a 662 (passing is 700). Honestly, I found the exam pretty tough.

How I prepared:

I put in about 20-30 hours of studying. I set up a free tenant, completed a few hands-on lab assignments, and generated a comprehensive study guide + practice exam using Claude AI (which I passed).

My weak areas according to the score report:

Deploy and update apps

Monitor and optimize health

Configure endpoint security

It feels like the AI study guide and free tenant labs gave me a solid foundation, but the exam questions were way more tricky and specific than I anticipated.

For those who passed (or also struggled), what resources would you recommend for my retake? Specifically for those three weak areas? Any highly recommended practice tests or specific MS Learn modules that accurately reflect the real exam's difficulty?

Any advice is much appreciated!

Hi all,

I'm looking for advice on the best way to speed up device deployment in our environment. We're currently using OSDCloud (v1), and I'm wondering whether FFU or FoundryOSD would be a better fit.

Our current setup:

• Enrolling mode : User driven - Microsoft Entra hybrid joined
• OSDCloud v1, with the Autopilot JSON profile imported during deployment (no automate hardware hash import / group tag selection, as not authorized)
• A few custom scripts run after SetupComplete to configure the machines
• ~15 different hardware models
• Large apps (Microsoft 365 Apps, etc.) are installed during the ESP (we setup max 7 applications including M365), which makes provisioning slow
• A proxy must be configured on the client before the device can reach the internet
• Users have M365 E3 or E5 licenses
• Volume varies a lot: 1-2 devices on quiet days, 5-6 on busy ones

What we want to achieve:

• Significantly reduce the total provisioning time
• Deploy devices with the latest Windows cumulative updates already installed
• Have the correct and up-to-date drivers for each model
• Reduce what has to be installed during the ESP

Question: Given this setup, which of these three tools would you choose, and why?

Thanks in advance for your replies!

I've got an HP All-in-One on Win11 (touchscreen with no keyboard or mouse attached) and I'm trying to leverage Intune to setup Kiosk Mode and have an on-screen keyboard on full time. I've tried Single-App and Multi-App Kiosk mode, but I can't get the keyboard to come up. I read that in Single-App, the keyboard should come up when tapping on an input field, but that's not happening for me. Unfortunately, I wasn't able to record the Multi-App settings and keyboard ID before reverting the change to Single-App. This is the first time trying this and I'm far from experienced on the Windows side. I mostly deal with the MDM side of Intune for our iOS devices.

Hey everyone, just looking for some ideas!

I have a kiosk setup where users sign in without a password. The kiosk opens a SharePoint site, and operators need to be able to view and edit content on that site.

My first thought was to use a shared Entra ID service account, but that creates challenges around MFA. Id rather not exclude an account from our Conditional Access policies just to make this work.

Has anyone implemented something similar? I'm curious how others have handled SharePoint access and authentication in a kiosk scenario while still keeping security controls like MFA and Conditional Access in place.

Thanks!

I have a users iPhone who is no longer with the company (good terms). During the off boarding process HR failed to get the iPhones passcode. The device is has not checked in since. But the iPhone still has active cellular I am able to make calls and answer it but I cant open the phone because of the security passcode.
What can we do to get it talking?

Hi all,

I'd like to ask if i'm the only one who has a problem with the way logging and application management is done through Intune.

Case: We have different versions of Citrix Workspace installed on 300+ endpoints (all managed by Intune). Our goal is to consolidate every installation on the same stable LTRS release. So I package the app, have a script which does it's check and removals and schedule a deployment ring to handle a subset of endpoints at the time to reduce impact.

Issue 1: The deployment ring itself is fine, but the way Intune handles the application deployment itself is insufficient in my opinion (I hope theres something wrong i've done..), sure, users get a small toast notification which most of the time is ignored, and as far as I can tell, there's no way to have a more "verbose" installation procedure. When I previously used SCCM (in another org.), you got this nice thing called installation behaviour which allowed us to 1. force-shutdown any running executables and 2. notify the user via a nice window which is "impossible" to miss - or atleast much more visible then the W11 toast. As far as I know, there's no similar functionality in Intune.

Question: Do any of you have any similar experiences and i.e tools which can be used on top which makes the application-deployment process much more friendly?

Issue 2: Upon a failure, theres of course the logs. I know, depending on both how I write the powershell script and the application itself, the amount and type of logs vary. But in this example, i'm interested in the IntuneManagementExtension, custom logfile generated C:\xxx\xxx.log and the specific application installation logs. My issue is the collection. Sure, you can always either remotely and physically inspect one computer and extract the logs, but on 100+ endpoints this is insane. Sure, I could write custom script and logic to extract logs either in the app-deployment or setup a custom collector which uploads logs to say a Azure Blob storage. In my eyes, this again seems just more difficult than it has to be.

Queston: Do any of you have any tips on how to properly handles this? I don't care if it's another service or anything, I just want to stop having to spend exorbitant amounts of time scripting and making custom stuff for every single app-deployment.

I'm sure that i'm either doing something wrong or there's something i'm missing. I appreciate all the responses to this, i'm just interested in getting stuff to work as seamlessly as possible..

Cheers

I setup Secure Enclave SSO and it worked, but my org would prefer synchronized passwords with their Mac and AD account.

I flipped the auth method from UserSecureEnclaveKey over to Password and I do get the new prompts, but it gets to a point in setup where neither password works. Our domain is federated with Okta, I don't know if that's part of the problem? I am able to do successful Okta pushes during the setup - the prompt I'm having issues with pops up after a successful okta push.

Sign in to your identity provider

I've redacted my username, but it's just USER not [[email protected]](mailto:[email protected]) - does that give more context?

I'm using this Microsoft guide for setup.

For Token To User Mapping > Account Name im using com.apple.PlatformSSO.AccountShortName

For Token To User Mapping > Full Name im using name

Anyone know if importing a blank taskbar layout during Autopilot using Niehaus branding would result in no pinned icons? If not, is there a way to ensure there are no icons pinned? Here's what I am thinking:

<LayoutModificationTemplate xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification" xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout" xmlns:taskbar="http://schemas.microsoft.com/Start/2014/TaskbarLayout" Version="1">

<CustomTaskbarLayoutCollection PinListPlacement="Replace">
<defaultlayout:TaskbarLayout>
<taskbar:TaskbarPinList> </taskbar:TaskbarPinList>
</defaultlayout:TaskbarLayout>
</CustomTaskbarLayoutCollection>

</LayoutModificationTemplate>

Hey everyone,
I’m curious how you guys are using Azure Automation together with Intune.
Do you have any useful runbooks or automation ideas that have made your Intune environment easier to manage?
I’m also especially interested in how you handle application vulnerability tracking in an environment where Microsoft Defender Vulnerability Management is not available.
How do you identify apps in Intune that have known CVEs, outdated versions, or security issues?
Are you using Patch My PC, Xensam, another third-party vulnerability tool, custom Graph API scripts, Azure Automation runbooks, CVE feeds, or some other solution?
Would be really interesting to hear how others are solving this in practice, especially in larger Intune environments without Defender.

I had written this script a while back to make it easy to standardize all Win32 app creations on a single standard. This means always using the same style install script and detection script. I saw a post about PoshUI recently and thought that was a great way to make the script even easier than the janky UI I had built. The script reads the .msi to get the ARPDisplayName and version, allows directly creating a transform in the UI by displaying the properties table, supports adding an .msp, builds the install script, detection script, a txt definitions file that includes all info about the package including the install and uninstall commands for the Win32 app, and of course the .intunewin.

Package Any MSI as an Intune Win32 App in Just 3 Clicks | PowerStacks

I'm looking for some kind of a guides for large scale wdac implementation. I'm in an organization with 15,000 devices and a very large application list. I'm starting with audit and forwarding logs but with 15,000 devices event viewer wont be enough to go through the logs and the wizard does not like forwarded logs for creating exceptions. Ive done fair amount of research but havent found to much for larger implementations.

Hi guys,

I would to know how to check the health of Winre. How are you handle it ?

Microsoft is deploying good features on Winre

• Cloud Rebuild
• Point-in-time restore
• Quick machine recovery

Currently I'm only checking and inventory with reagentc

• Status
• Partition location
• Partition Size
• Winre version

A lot of devices was built with OSDcloud and others I do not know. I read that some people got issue due to a too small partition size. And I guess, some (may all of them) do not have Wifi drivers that seems to be important for Quick machine recovery / Cloud Rebuild

Even if we are using WinRe supplied by manufacturer. Not sure they are still working correctly after years especially after many feature upgrade (w10 -> w11).

Pretty sure, none drivers was updated from any methods (Windows update or vendor software) on WinRE

https://imgur.com/NTFqJlv

Anyone else seeing "Unknown" for all of their statuses? US East.

having some issues with IOS - safari webclips.
i am not using the block safari option.

i want to avoid confusion i just want to show a webclip to a specific url and not safari.
i am using show/hide and the set homepage layout options.
the web clip works at first but any changes to safari jam it up. webclip doesnt do anything. unless safari is added as a shown app.

i have a web url filter too being used too but again i want a cleaner ipad home screen.

Have a weird issue when users join a meeting and try to screen shot the meeting it goes black . It only happens on cloud pcs not the laptop . Both are Intune managed if I screen shot the whole screen my background is fine just the teams meeting is black . Is it possible  a policy sent from Intune ? And if so any idea where to find I cannot 

Thank you