Posts

Append a domain to Intune, set up a custom domain

Image
   Append a domain to Intune, set up a custom domain An external client ran into an issue where Azure AD–joined devices were not recognizing an application license hosted on an on-premises app server. This came up after migrating to Autopilot devices. From the investigation, it looks like the application relies on communication with the on-prem server to validate its license. While reviewing the device configuration in the registry, it became clear that the domain information is responsible in how this communication is handled. On the affected devices, the default domain is set to WORKGROUP instead of the expected domain (aztik.net). This indicates that the devices are not domain-joined, which is likely why the application cannot properly validate the license against the on-prem server. a temporal solution will fix this. also we contacted the app vendor that will bring a new method to apply the license. for testing porpuses i decided to manually place the domain name and surpr...
Post a Comment
Read more

Mapping printers on Intune

Image
  Printers can be tricky, you really have to tailor things to the customer's needs and be ready to try different solutions to get them working properly. In a hybrid environment, we've had a hard time figuring out how to map printers on Autopilot devices without manually browsing for them. As we were aware of the  "Print Nightmare" situation, we realized we needed to set up strict policies that only let the print server handle drivers and printer mapping. According to this  Article , non-admin users can't use Point and Print anymore without admin rights. During testing, we found that simply disabling the Point and Print restrictions would work,but it did not feel secure and left things too open. So instead, we created a policy that specifically allows connections only to a trusted print server and limits it to certain driver GUID classes (which you can find in the .INF file of the driver). Device-->Configuration-->New Policy --> Settings Catalog -->Admi...
Post a Comment
Read more