CSP
5 TopicsHowTo OMA-URI - something not working
Hi folks, i'm trying to experiment with OMA-URI within custom profiles. In this Use-case we're trying to achive, that we can manage Google Chrome Updates. Therefore i've downloaded the GoogleUpdate.admx and ingested it into the Intune custom profile. This is working, i'm able to see the admx at the clients registry under "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\AdmxInstalled" as well as the corresponding, possible values under ..\PolicyManager\AdmxDefault. Well, this looks good. Now i want to add the first setting to the custom profile. I had a look in ..\PolicyManager\AdmxDefault and found the value "ChromeUpdate~Policy~Cat_GoogleUpdate~Cat_Preferences\Pol_AutoUpdateCheckPeriod". Afterwards i've build the oma-uri path like this: ./Device/Vendor/MSFT/Policy/Config/ChromeUpdate~Policy~Cat_GoogleUpdate~Cat_Preferences/Pol_AutoUpdateCheckPeriod What i really don't get: How to find out what value type (and what spelling) is required? In this case i think it should be Integer and e.g. 60 (for 60 minutes). Unfortunatelly this setting is marked as "remediation failed".Solved25KViews0likes19CommentsCSP Remediation failed
Hi, i'm currently facing a problem with a CSP: I want to set the Timezone via CSP to my intune managed devices. So i created a custom profile like that: OMA-URI: ./Device/Vendor/MSFT/Policy/Config/TimeLanguageSettings/ConfigureTimeZone Data type: String Value: i tried "W. Europe Standard Time" (with and without quotation marks) I already had a look at the CSP Reference for this. So this should work, isn't it? After that i received in eventlog the following error: "system cannot find the file specified" After that i tried the OMA-URI without "Device/ (./Vendor/MSFT/Policy/Config/TimeLanguageSettings/ConfigureTimeZone) Afterwards i got another error event: "An invalid Field name was used in the query string" 0x80040204 Edit: After about half an hour it was working... :D Azure... :D Thank you in advance! Patrick :)6.1KViews1like3CommentsCSP Remediation failed
Hi, i'm currently facing a problem with a CSP: I want to set the Timezone via CSP to my intune managed devices. So i created a custom profile like that: OMA-URI: ./Device/Vendor/MSFT/Policy/Config/TimeLanguageSettings/ConfigureTimeZone Data type: String Value: i tried "W. Europe Standard Time" (with and without quotation marks) I already had a look at the CSP Reference for this. So this should work, isn't it? Thank you in advance! Patrick :)Solved3.5KViews0likes2CommentsAdding route to existing AlwaysOn VPN
Hi, We deployed a AlwaysOn VPN via a custom Intune Policy. This is working great, now we are facing a problem with a new route which has to go through the VPN tunnel. So we have to add a route to the VPN. I found the VPNv2 CSP page from MS but cannot figure out how to add a route to the existing AlwaysOn VPN. Anyone who have experience with adding a route to an existing AlwaysOn VPN?2.9KViews0likes1CommentCustom Policy CSP for NCSC Guidance for Windows 10
The NCSC Guidance for Deploying Intune managed Windows 10 clients (HERE) lists two custom OMA-URI settings that block unwanted devices from being installed. ./Device/Vendor/MSFT/Policy/Config/DeviceInstallation/PreventInstallationOfMatchingDeviceIDs ./Device/Vendor/MSFT/Policy/Config/DeviceInstallation/PreventInstallationOfMatchingDeviceSetupClasses Unfortunately the policy JSON that the NCSC supply is missing these settings. I tried to create the SyncML for both IDs using guidance from the Internet but I get a catastrophic failure error message in the logs and the policies do not apply. The settings that I have used are ./Device/Vendor/MSFT/Policy/Config/DeviceInstallation/PreventInstallationOfMatchingDeviceIDs <enabled/> <data id="DeviceInstall_IDs_Deny_List" value="PCI\CC_0C0A"/> <data id="DeviceInstall_IDs_Deny_Retroactive" value="1"/> ./Device/Vendor/MSFT/Policy/Config/DeviceInstallation/PreventInstallationOfMatchingDeviceSetupClasses <enabled/> <data id="DeviceInstall_Classes_Deny_Retroactive" value="1"/> <data id="DeviceInstall_Classes_Deny_List" value="{d48179be-ec20-11d1-b6b8-00c04fa372a7}{7ebefbc0-3200-11d2-b4c2-00a0C9697d07}{c06ff265-ae09-48f0-812c-16753d7cba83}{6bdd1fc1-810f-11d0-bec7-08002be2092f}"/> Has anyone successfully applied these settings using a custom device configuration policy? If so where am I going wrong? Any assistance will be gratefully receivedSolved6.6KViews0likes8Comments