Anton Varshavskiy

24 posts

Anton Varshavskiy

Anton Varshavskiy

@apps_mgr

Software Engineer at Microsoft working on Endpoint Manager

Katılım Mayıs 2020
9 Takip Edilen391 Takipçiler
Adam Gross [MVP] - ASquareDozen.com
Hey @IntuneSuppTeam, any clue why #AVD hosts would be working fine and registered in Intune then 2 weeks later they vanish from Intune? The device still thinks it's Intune enrolled and even completes a Sync but it doesn't exist in the tenant - still in AAD and dsregcmd looks fine. Second time we've seen something like this recently. No evidence of anything in Intune audit logs either. #MVPBuzz
English
14
3
15
7.9K
Anton Varshavskiy retweetledi
Matt Call
Matt Call@DeviceDeploy·
Well - Over the next 72 hours or so everyone will have access to EPM (aka.ms/IntuneEPMDocs). Some of you may get access earlier if you're part of another Intune preview, if you see something funky that's probably the reason. This is the beginning of our journey to help organizations run as a standard user by using the conduit already on the device, Microsoft Intune. We have a pretty rich backlog and plan on delivering a ton of value over the next 12 months. Our goal is that you don't use us just because it's built in, you use us because we're the best... and we have our work cut out for us. Our plan is to ship our first two feature pillars, User Confirmed and Automatic. We will GA those two pillars in the April timeframe. Then we will shift our sights to Support Approved in the summer timeframe. We have a lot we want to add that wouldn't fit in this release (see our deployment considerations doc page), but we're committed to fixing all of those items over the coming weeks/months. Let me know if I can help.
English
22
79
212
27.5K
Anton Varshavskiy
Anton Varshavskiy@apps_mgr·
If you are utilizing tenant attach, the long-awaited RBAC controls via admin center are now available! Check out the new functionality in CM2207 and admin center. Very excited about this one as it provides one place to define access control. #MEMCM. docs.microsoft.com/en-us/mem/conf…
English
0
19
39
0
Anton Varshavskiy
Anton Varshavskiy@apps_mgr·
Happy friday, everyone! More #MEMCM tenant attach functionality is now generally available. Get information about the device and take actions right from the admin center. As always, let us know about your experience and how we can make it better! #tenant-attach-features-are-generally-available-ga" target="_blank" rel="nofollow noopener">docs.microsoft.com/en-us/mem/intu…
English
1
5
19
0
Anton Varshavskiy
Anton Varshavskiy@apps_mgr·
@hypercube33 @sejesok Hey Brian, "require approval" deployments are actually suspended on the server. In other words, client does not get the policy until the approval/action is triggered for the specific device, so there is virtually no perf hit.
English
1
0
1
0
Brian Thorp
Brian Thorp@hypercube33·
@apps_mgr @sejesok Knew about it but didn't know the approval part was as polished. Any hit to having all apps deployed to every machine with doing an app evals?
English
1
0
0
0
Panu Saukko
Panu Saukko@panusaukko·
Windows Dashboard in #MEMCM 2107 shows #Windows11 devices as "21H2". But if you like to see 21H2 devices, the device list is empty. ☹️ (You get the correct list of devices from the "real" Windows 10 builds)
Panu Saukko tweet media
English
1
4
13
0
Anton Varshavskiy
Anton Varshavskiy@apps_mgr·
For those who upgraded to #MEMCM 2103, few improvements to tenant attach / admin center preview features: - AD user discovery is now sufficient - See and take action on all applications of the device Thanks for your feedback and let us know what you think! #microsoft-endpoint-manager-tenant-attach" target="_blank" rel="nofollow noopener">docs.microsoft.com/en-us/mem/conf…
English
0
0
0
0
Anton Varshavskiy
Anton Varshavskiy@apps_mgr·
@wmadm90 @robdotyork Hey Walker, you can already run any approved script (no parameters) within your security scopes using Run script option! Let us know what you think.
English
2
0
0
0
Walker Rünzi
Walker Rünzi@wmadm90·
@robdotyork got it installed and working: super cool! I assume at some point we'll be able to run any script and not just those recently run? I think that'd be the last hurdle to clear before ditching the console for my Support team...
English
1
0
0
0
Anton Varshavskiy
Anton Varshavskiy@apps_mgr·
@lalanc01 @AdamGrossTX Hey Stephane, could you send me PM and I can help troubleshoot with some SQL queries to figure out why apps are not displayed ? Then we can post the result here.
English
1
0
0
0
stephane lalancette
stephane lalancette@lalanc01·
@apps_mgr @AdamGrossTX The app is in default security scope. When I go in the security tab, I see that my user has read,approve, run report for this app. Also check for user/aad info and all seems set/unique.
English
1
0
0
0
stephane lalancette
stephane lalancette@lalanc01·
Hi @AdamGrossTX , have you already tried apps (preview) in Memac? asking because I've followed all the pre-reqs shown on MS docs and I can't see to view any apps that I've made available for my devices. Anything that I should be on the look out for? Thks #SCCM #ConfigMgr
English
3
1
3
0
Anton Varshavskiy
Anton Varshavskiy@apps_mgr·
@lalanc01 @AdamGrossTX Thanks, can you check if apps are in default or custom scope and user is assigned to that scope ? Also, can you check if there are any duplicate user records ? Steps here, look for part of username, check that there is one user and correct AAD ID/UPN : #bkmk_noinfo" target="_blank" rel="nofollow noopener">docs.microsoft.com/en-us/mem/conf…
English
1
0
0
0
stephane lalancette
stephane lalancette@lalanc01·
@apps_mgr @AdamGrossTX Yes I see it. As for the rights, I've copied, just to be sure it wasn't an rbac issue, the read only analyst role and added the approve apps rights like it's mentionned in the docs
stephane lalancette tweet media
English
1
0
0
0
Anton Varshavskiy
Anton Varshavskiy@apps_mgr·
@lalanc01 @AdamGrossTX Can you check if you see the list of apps in CM console when clicking on device -> Install Application option ? If you don't see apps there, likely a problem with app deployment. If you see apps there, can you check if apps are assigned to the right scope MEMAC user can access ?
English
1
0
0
0
stephane lalancette
stephane lalancette@lalanc01·
@apps_mgr @AdamGrossTX Yes that has been done. So is the rbac permission for the user in memac and the configuration manager service permission (admin user)
English
1
0
0
0