Windows Hello WHfB issue with June 2023 Patch KB5027215
Let's understand the WHfB issue with June 2023 Patch KB5027215 from this video. It's impacting only Windows 10 devices. It's only applicable to Windows Hello for Business Configured devices.
== WHfB Consent Page Issue with Windows 10 June patch?
Impacting Windows 10 Devices Windows Hello for Business Configured devices Workaround from the Community Microsoft acknowledgment
Many users report KB5027215 Issue with Windows Hello OOBE Style Popup Message after rebooting and signing back to Windows 10 devices. End users see this Biometric Consent Notice prompt when restarting the device and signing in back.
== What is the WHfB Notice Issue patching?
Choose if You want to Keep Signing in with your face or fingerprintDo you want to keep storing your face or fingerprint data on this PC?
Option 1 - Yes, sign in with my face or fingerprintKeep storing my data so I can sign in to the PC with Windows Hello face or fingerprint recognition
Option 2 - No, change how I sign inTake me to settings where I can remove sign-in options and delete my data
== Workaround to WHfB issue with Windows 10 June Patch?
Deploy the above registry fix before installing the KB5027215. Open regedit.exe Navigate to HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\WindowsHello\ Create a REG_BINARY value called BioConsentNoticeShownTime with a HEX value for the timestamp (more details below). How to get the HEX Value? https://www.epochconverter.com/hex
HTMD-MI4️⃣9️⃣WIP Intune Policies Network Boundaries?Protected Domain?Cloud Resources?Exchange
Day #49
?Why WIP policies are not getting applied to Office web portal and internal web apps?
?How to define network boundaries in WIP policies using the Intune portal?
?What is the protected domain option in network boundary for WIP policies?
? How to troubleshoot Windows Information Protection?
?How Windows Information Protection can prevent data leakage?
? Below 4 network location settings WERE mandatory settings
? Protected Domain - Primary Domain (my primary domain is trail tenant) - howtomanagedevices.onmicrosoft.com
? Enterprise Cloud Resources (Exchange Online) - outlook.office.com|outlook.office365.com, payroll.htmd.com
? Enterprise Network Domain (Dummy URL is fine I think – it worked for me) - Inutne.HDTMDForum.com
? Enterprise IPv4 Range (Any IP range is fine I think – Hyper-V lab IP Range worked for me) - Internal IP range 192.0.0.1-192.255.255.254
? How to enable Windows Information Protection Policy on Windows 10 MDM enrolled devices?
? What is private domain Windows Information Protection mode – Block
? What is Corporate identity - howtomanagedevices.onmicrosoft.com configuration for WIP
? WIP optional or advanced configurations Network perimeter & Network boundary
? Exempt and Add store and desktop application to WIP policy.
? WIP enlightened application examples – Notepad, Office 365 ProPlus, Company portal etc…
? WIP Registry Entries Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\Providers\AAB267BF-EBF2-4649-822C-74511A4CC253\default\Device\DataProtection?
? WIP Troubleshooting using enterprise context option in Windows 10 application?
? WIP troubleshooting
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\Providers\AAB267BF-EBF2-4649-822C-74511A4CC253\default\Device\NetworkIsolation
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\Providers\AAB267BF-EBF2-4649-822C-74511A4CC253\default\Device\Search
===================
? Stay Connected - https://howtomanagedevices.com/stay-connected/ ? https://howtomanagedevices.com/sccm/1791/how-to-manage-devices-live-digital-events-weekend-learning/
More Blog posts related to SCCM/Intune/Windows 10/Hyper-V/Cloud/IT Pro/Azure -
https://howtomanagedevices.com/
Learn SCCM Read https://www.anoopcnair.com/sccm/
https://www.anoopcnair.com/learn-sccm-intune/
Learn Intune Read - https://www.anoopcnair.com/intune/
https://www.anoopcnair.com/learn-microsoft-intune/
Learn Windows 10 Read - https://www.anoopcnair.com/windows-10/
Learn Hyper-V Read - https://www.anoopcnair.com/hyperv-2/
Learn About Cloud Read - https://www.anoopcnair.com/cloud/
Learn about Azure Read - https://www.anoopcnair.com/cloud/azure/
Learn About IT Pros Events - https://www.anoopcnair.com/itpro/
Learn about me - https://www.anoopcnair.com/about/
#Intune #MicrosoftIntune #IntuneVideos #IntuneTutorials #IntuneGuide #IntuneStudy #MSIntune #IntuneTraining #HowtoManageDevices
? Event logs related to WIP policies using Intune
MDM Evaluator Scenario Evaluate Result: Scenario: (EDP), Previous State: (EdpOnPending), Last Dependency: (NULL), Final State: (EdpOn), Result: (The operation completed successfully.).
MDM PolicyManager: Set policy int, Policy: (AllowIndexingEncryptedStoresOrItems), Area: (Search), EnrollmentID requesting merge: (AAB267BF-EBF2-4649-822C-74511A4CC253), Current User: (Device), Int: (0x1), Enrollment Type: (0x6), Scope: (0x0).
MDM PolicyManager: Dedicated notification (WNF): (0xA3BCD075, 0x13920028) published for Policy: (AllowIndexingEncryptedStoresOrItems).
Windows Information Protection dependency check result: Dependency Name: (EDPPolicy), State: (EdpOff), IsDependencySatisfied: (0x1), Result: (0x1).
? Why WIP https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip
? Create WIP https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/overview-create-wip-policy
?WIP Post 1 by Joy https://www.anoopcnair.com/windows-information-protection-the-concepts-1/
?WIP SCCM Config - https://www.anoopcnair.com/sccm-intune-how-to-create-configure-and-deploy-windows-10-edp-wip-policies/
...
https://www.youtube.com/watch?v=1_ToALSvc8w
SCCM 2111 Upgrade Step by Step Video | Configuration Manager Current Branch Latest Release
⭐This is the complete guide for SCCM 2111 upgrade. Let's check How to upgrade your SCCM (MEMCM) infra to the 2111 production version.
⭐The 2111 version of the Configuration Manager is now generally available as an opt-in version.
⭐I will be publishing a list of SCCM 2111 known issues after a few weeks.
⭐ SCCM 2111 New Features
⭐ Deprecated Features Announced with SCCM 2111
⭐ How to Fix SCCM 2111 Dot Net version 4.6.2 Prerequisite Error
⭐ What is Opt-in Ring of ConfigMgr 2111
⭐ Prerequisites of SCCM 2111 Version
⭐ SQL Requirements for SCCM 2111
⭐ SCCM 2111 Server OS Support
⭐What is the SCCM 2111 Version Upgrade Check List
⭐ Offline Scenario - SCCM Server 2111 Upgrade
⭐ Download / Enable ConfigMgr Version 2111
⭐ How to Upgrade to SCCM 2111 Step by Step Guide
⭐ SCCM 2111 Download Stuck
⭐ SCCM Primary Server Upgrade to 2111
⭐ SCCM 2111 Upgrade issue Troubleshooting with Log Files
⭐ SCCM 2111 Upgrade Completed
⭐ SCCM Admin Console Upgrade to 2111 Version
⭐ Is SCCM 2111 version production ready?
⭐ Is the SCCM 2111 version the latest baseline version?
⭐ What is the minimum SCCM version required to upgrade to 2111?
⭐ Is Windows 11 fully supported with ConfigMgr / SCCM 2111 version?
⭐ What is the minimum SCCM 2111 Client Version?
⭐ What is the ConfigMgr 2111 admin Console Version?
⭐ What is the Configuration Manager 2111 Build version?
=================================
More Blog posts related to SCCM/Intune/Windows 11/Cloud PC/AVD/Hyper-V/Cloud/IT Pro/Azure -
✔ https://www.anoopcnair.com/windows-365/
? Stay Connected - https://howtomanagedevices.com/stay-connected/ ? https://howtomanagedevices.com/sccm/1791/how-to-manage-devices-live-digital-events-weekend-learning/
#CloudPC #Windows365 #W365
https://howtomanagedevices.com/
Learn SCCM Read https://www.anoopcnair.com/sccm/
https://www.anoopcnair.com/learn-sccm-intune/
Learn Intune Read - https://www.anoopcnair.com/intune/
https://www.anoopcnair.com/learn-microsoft-intune/
Learn Windows 10 Read - https://www.anoopcnair.com/windows-10/
Learn Hyper-V Read - https://www.anoopcnair.com/hyperv-2/
Learn About Cloud Read - https://www.anoopcnair.com/cloud/
Learn about Azure Read - https://www.anoopcnair.com/cloud/azure/
Learn About IT Pros Events - https://www.anoopcnair.com/itpro/
Learn about me - https://www.anoopcnair.com/about/
#SCCM #ConfigMgr #SCCMVideos #SCCMTutorials #SCCMStudyVideos #SCCMFreeTraining #SCCMTraining #HowtoManageDevices
#Intune #MicrosoftIntune #IntuneVideos #IntuneTutorials #IntuneGuide #IntuneStudy #MSIntune #IntuneTraining #HowtoManageDevices
...
https://www.youtube.com/watch?v=kc9JmLJghMA
Intune 2305 New Features and Updates #window #microsoftintune
HTMD Post - https://www.anoopcnair.com/new-features-in-intune-service-release-2305-may/
Admins now have more flexibility in assigning and fine-tuning Intune app protection and app configuration policies with filters for mobile application management (MAM).
Previously, admins could only set app protection policies (APP) and app configuration policies (ACP) by platform, user group, and application. The new release supports assignment filters for both enrolled and unenrolled devices and allows admins to tailor MAM policy deployments to specific use cases.
https://learn.microsoft.com/en-us/mem/intune/fundamentals/whats-new#week-of-may-22-2023-service-release-2305
...
https://www.youtube.com/watch?v=x7qXDrdVMOk
Free Tool - Windows 10 Backup & Restore - How to Backup Windows 10 and Restore Windows 10 Files. More Details - https://howtomanagedevices.com/restore-windows-10-backup-free-tool/ & https://www.anoopcnair.com/windows-10-backup-free-tool/
#VeeamBackup #VeeamVanguard #VeeamAgent #Windows10BackupTool #Windows10RestoreTool #Windows10FreeTool
In Microsoft Windows Explorer, browse to the backup target and find a VBK or VBM file in the backup chain.
Double-click the VBK or VBM file.
In the displayed window, select a restore point from which you want to restore the file.
...
https://www.youtube.com/watch?v=qoxTPiCwbes
Let's learn about the options on Intune Removal Process from Windows personal Devices using Company Portal | Settings App | Intune Admin Center.
This video is for removing Windows personal devices (BYO scenario) from Intune management. How to Remove Intune from Windows PC.
#msintune #microsoftintune #microsoft365 #windowspc #windows11 #windows12
Manual Removal process
End-User Side
Admin Side
BYO (Personal Device)
==
Perform Bulk Device Actions in Intune Remote Actions - https://www.anoopcnair.com/perform-bulk-device-actions-in-intune-mem/
Remote Actions Windows 365 Device Actions Using Intune - https://www.anoopcnair.com/cloud-pc-remote-actions-windows-365-intune/
==
Device Lifecycle using Intune
Need to define the lifecycle management process for all devices that you manage. Intune can help you manage this lifecycle: from enrollment, through configuration and protection, to retiring the device when it's no longer required.
Enroll Devices
Configure Devices
Protect Devices
Retire
==
Fresh Start the Device
The Fresh Start device action removes any apps that are installed on a PC running Windows 10, version 1709 or later, and Windows 11(?).
BYOD devices will be unenrolled from Azure AD and mobile device management.
IMP: Select Retain User Data on this device
==
Retire the Device from Intune Admin Center
The Retire action removes managed app data (where applicable), settings, and email profiles that were assigned by using Intune.
The device is removed from Intune management.
Removal happens the next time the device checks in and receives the remote Retire action.
Personal Data won’t be removed.
==
Remove Intune from Windows PCs / Laptops
Make sure there are no policies in place to block the removal of the MDM profile
Company Portal
Settings Apps
==
More Blog posts related to SCCM/Intune/Windows 11/Cloud PC/AVD/Hyper-V/Cloud/IT Pro/Azure -
✔ https://www.anoopcnair.com/windows-365/
? Stay Connected - https://howtomanagedevices.com/stay-connected/ ? https://howtomanagedevices.com/sccm/1791/how-to-manage-devices-live-digital-events-weekend-learning/
#CloudPC #Windows365 #W365
https://howtomanagedevices.com/
Learn SCCM Read https://www.anoopcnair.com/sccm/
https://www.anoopcnair.com/learn-sccm-intune/
Learn Intune Read - https://www.anoopcnair.com/intune/
https://www.anoopcnair.com/learn-microsoft-intune/
Learn Windows 10 Read - https://www.anoopcnair.com/windows-10/
Learn Hyper-V Read - https://www.anoopcnair.com/hyperv-2/
Learn About Cloud Read - https://www.anoopcnair.com/cloud/
Learn about Azure Read - https://www.anoopcnair.com/cloud/azure/
Learn About IT Pros Events - https://www.anoopcnair.com/itpro/
Learn about me - https://www.anoopcnair.com/about/
#SCCM #ConfigMgr #SCCMVideos #SCCMTutorials #SCCMStudyVideos #SCCMFreeTraining #SCCMTraining #HowtoManageDevices
#Intune #MicrosoftIntune #IntuneVideos #IntuneTutorials #IntuneGuide #IntuneStudy #MSIntune #IntuneTraining #HowtoManageDevices
...
https://www.youtube.com/watch?v=6YrStI1jsIY
Microsoft released the latest update rollup hotfix for ConfigMgr 2010. Let’s have a look at the details of 28 Issues Fixed with ConfigMgr 2010 Update Rollup Hotfix KB4600089.
More Details - https://www.anoopcnair.com/28-issues-fixed-with-configmgr-2010-update-rollup-hotfix-kb4600089-sccm/
=========================
More Blog posts related to SCCM/Intune/Windows 10/Hyper-V/Cloud/IT Pro/Azure -
? Stay Connected - https://howtomanagedevices.com/stay-connected/ ? https://howtomanagedevices.com/sccm/1791/how-to-manage-devices-live-digital-events-weekend-learning/
https://howtomanagedevices.com/
Learn SCCM Read https://www.anoopcnair.com/sccm/
https://www.anoopcnair.com/learn-sccm-intune/
Learn Intune Read - https://www.anoopcnair.com/intune/
https://www.anoopcnair.com/learn-microsoft-intune/
Learn Windows 10 Read - https://www.anoopcnair.com/windows-10/
Learn Hyper-V Read - https://www.anoopcnair.com/hyperv-2/
Learn About Cloud Read - https://www.anoopcnair.com/cloud/
Learn about Azure Read - https://www.anoopcnair.com/cloud/azure/
Learn About IT Pros Events - https://www.anoopcnair.com/itpro/
Learn about me - https://www.anoopcnair.com/about/
#SCCM #ConfigMgr #SCCMVideos #SCCMTutorials #SCCMStudyVideos #SCCMFreeTraining #SCCMTraining #HowtoManageDevices
...
https://www.youtube.com/watch?v=B7uAW2uACv4
Let's understand more about the Number 1 Intune App Deployment Method. This is what is Explained in this video. This is the recorded session from the October HTMD User Group meeting. The session was delivered by Sujin Nelladath.
Sujin's Posts - https://www.anoopcnair.com/author/sujin/
#msintune #microsoftintune #intune #windows365 #windows #appdeployment #intunewin
Deploy Win32 App in Intune - https://www.anoopcnair.com/intune-win32-app-deployment/
Intune Win32 App Issues Troubleshooting Client-Side Process Flow - https://www.anoopcnair.com/intune-win32-app-troubleshooting/
==
What is Intune Win32 App Deployment
Win32 application deployment is for 32-bit and 64-bit application deployments. Using Intune Win32 App deployment, you can deploy x86 and x64-bit applications
Win32 app management allows you to manage different types of files, such as . msi, .exe.
Win32 applications are programs written for the Windows operating system.
We will use the Win32 Content Prep Tool to convert application installation files into the .intunewin format
==
Prerequisites for Intune Win32 App Deployment?
The following criteria should be met for Win32 app deployment.
OS version: Windows 10 version 1607 or later (Enterprise, Pro or Education editions)
Devices must be joined or registered to Azure Active Directory (Azure AD) and be auto-enrolled. The Intune management extension supports devices that are Azure AD joined, Azure AD registered, hybrid domain joined, or group policy enrolled.
The application size must not be greater than 8 GB per app (Upon request, Microsoft can increase the size of app)
==
Prepare the Win32 app content for upload?
You must prepare the app by using the Microsoft Win32 Content Prep Tool before you can add a Win32 app to Microsoft Intune
Use the Microsoft Win32 Content Prep Tool to pre-process Windows classic (Win32) apps.
The Microsoft Win32 Content Prep Tool converts application installation files into the .intunewin format
You can download the Win32 app packaging tool from GitHub, https://github.com/microsoft/Microsoft-Win32-Content-Prep-Tool/releases
==
Client-side requirements for Intune Number one app deployment method.
So now, Windows 10/11 (client-side) is ready to deploy complex Windows apps via the Win32 app deployment agent. Intune (Server-side) has implemented a solution called “Intune Win32 App Deployment” to deploy complex Windows applications via the Intune portal.
You must prepare the app by using the Microsoft Win32 Content Prep Tool before you can add a Win32 app to Microsoft Intune
Use the Microsoft Win32 Content Prep Tool to pre-process Windows classic (Win32) apps.
The Microsoft Win32 Content Prep Tool converts application installation files into the .intunewin format
You can download the Win32 app packaging tool from GitHub, https://github.com/microsoft/Microsoft-Win32-Content-Prep-Tool/releases
==
More Blog posts related to SCCM/Intune/Windows 11/Cloud PC/AVD/Hyper-V/Cloud/IT Pro/Azure -
✔ https://www.anoopcnair.com/windows-365/
? Stay Connected - https://howtomanagedevices.com/stay-connected/ ? https://howtomanagedevices.com/sccm/1791/how-to-manage-devices-live-digital-events-weekend-learning/
#CloudPC #Windows365 #W365
https://howtomanagedevices.com/
Learn SCCM Read https://www.anoopcnair.com/sccm/
https://www.anoopcnair.com/learn-sccm-intune/
Learn Intune Read - https://www.anoopcnair.com/intune/
https://www.anoopcnair.com/learn-microsoft-intune/
Learn Windows 10 Read - https://www.anoopcnair.com/windows-10/
Learn Hyper-V Read - https://www.anoopcnair.com/hyperv-2/
Learn About Cloud Read - https://www.anoopcnair.com/cloud/
Learn about Azure Read - https://www.anoopcnair.com/cloud/azure/
Learn About IT Pros Events - https://www.anoopcnair.com/itpro/
Learn about me - https://www.anoopcnair.com/about/
#SCCM #ConfigMgr #SCCMVideos #SCCMTutorials #SCCMStudyVideos #SCCMFreeTraining #SCCMTraining #HowtoManageDevices
#Intune #MicrosoftIntune #IntuneVideos #IntuneTutorials #IntuneGuide #IntuneStudy #MSIntune #IntuneTraining #HowtoManageDevices
...
https://www.youtube.com/watch?v=YPc7fNtsCkg