OMA-URI
5 TopicsCustom profile: hide known file extensions
Hi, i would like to configure our WIndows 10 clients so that they show all the file extensions. There is a GPO to configure this but i would like to configure this through MS Intune. Do you have any advice on how to achive this? (I already know how to use custom admx policies, how to ingest them, but i don't know how to configure this.) Is there a way to do this via OMA-URI or any other possibilities to set a registry value? (I don't like the powershell via intune way) Thank you in advance. 🙂 Kind regards Patrick14KViews1like3Commentsmanage Interactive logon & Windows Hello multi-factor unlock
Hi everyone, We're going step by step on the passwordless strategy from Microsoft. Windows Hello multi-factor unlock is deployed in a Pilot Group but now I have two questions, which I hope someone here can answer. Question 1: disable Windows Hello multi-factor unlock Managed to enable WHMFU over custom OMA-URI Settings. But how can I disable it again? I tried it with a second custom OMA-URI Settings configuration profile which is configured as follows: It works, but it seems, that it isn't disabled correctly. Sometimes I still get a message in the logon process which says something like "additional factor needs to verify" but it displays very quickly, and I verified that I can log on with only one factor again. Disabling the second unlock factor is configured like this as well. Question 2: Enable "Interactive logon: Require Windows Hello for Business or smart card" We want to enable this security option. However, Intune doesn't offer to manage this setting. So, I think that I must enable this over a custom OMA-URI Setting too or PowerShell script. How can I achieve this? Thanks so much for any support ❤️1.7KViews0likes0CommentsNeed help with admx custom oma-uri
Hi guys, I have asked this question elsewhere but no one can help out. I have a customer that has win 10 pro and needs control panel and settings to be partly hidden for normal users but for admins it should be fully accessible. The settings part is working but I can't figure out how to get it to work for control panel. I have written this in the custom oma-uri: ./User/Vendor/MSFT/Policy/Config/ADMX_ControlPanel/RestrictCpls Microsoft.Mouse;Microsoft.EaseOfAccessCenter;Microsoft.DateAndTime Any idea what I am doing wrong or why it's not working?Solved2.9KViews0likes2CommentsEnable WinRM through Intune
Hello everybody, I'm trying to enable WinRM to remotely manage our devices, when onprem. Therefore i tried to add a custom profile with the following OMA-URI: ./Device/Vendor/MSFT/Policy/Config/RemoteManagement/AllowRemoteServerManagement (With value <enabled>). Unfortunatelly the result is "-2016281112 (Remediation failed)". What am i making wrong? Thanks in advance. 🙂 Regards Patrick29KViews0likes12CommentsUnderstanding of custom policies / oma-uri / registry
Hi, i would like to understand the whole topic belonging custom policies / OMA-URI / registry a little deeper. I hope that some of you guys would like to join the disscussion to gain some new knowledge together. The first goals should be: Configuring some basic "onboard" registry values Implementation of some Group Policy Objects through Intune Config Let me outline one or two examples: I would like to create / edit a registry value at a specific path. (e.g. HKCU\Software\sample\subfolder) I would like to take an existing GPO and move this one completely to Intune management (e.g. User Configuration \ Preferences \ Folder Options -> hide known file extensions:false) My thoughts on this: This should be possible, right? 😄 I already used "admx ingesting" before e.g. for use with Google Chrome ADMX / Google Update ADMX, which worked fine after understanding it. 😉 Is it possible to use all the other gpo related settings within intune, when they' aren't present in the "administrative templates profile", yet? If yes, how? Any participation in discussion is highly appreciated. Regards PatrickSolved47KViews0likes5Comments