Run remediation on-demand on Windows Client using Microsoft Intune

-


In this new article, we will focus on an option that has been available in Preview for a few months now, it is Remediation on-demand


The proactive remediations is scripts package available in the Microsoft Intune administration console. They detect and resolve common support issues on a user's device before they even realize there is a problem.

We will see below what the necessary prerequisites are and how to use this new functionality.

Prerequisites

Whether enrolling devices via Intune or Configuration Manager, Remediation scripting has the following requirements:
  • Devices must be Microsoft Entra joined or Microsoft Entra hybrid joined and meet one of the following conditions:
    • Is managed by Intune and runs an Enterprise, Professional, or Education edition of Windows 10 or later.
    • A co-managed device running Windows 10, version 1903 or later. Co-managed devices on preceding versions of Windows 10 will need the Client apps workload pointed to Intune (only applicable up to version 1607).
  • Licences :
    • Windows 10/11 Enterprise E3 or E5 (included in Microsoft 365 F3, E3, or E5)
    • Windows 10/11 Education A3 or A5 (included in Microsoft 365 A3 or A5)
    • Windows 10/11 Virtual Desktop Access (VDA) per user
  • A remediation available in the Microsoft Intune

Run remediation script on-demand

Go and signing to Intune.microsoft.com and execute all steps below :
  • Click Devices / Windows and select a user's computer
  • In the ribbon, click on the three little dots and click Run Remediation (preview) from the list

  • In the panel that appears, select a remediation to run on the user's computer and click Run Remediation

  • A message appears at the top right to confirm the execution of the remediation
  • In the Actions state on the device, you can find the execution status and an error code if the remediation was not carried out correctly.


To conclude

The Remediation On Demand is a very interesting feature that saves a lot of time.
Another important point, you do not need to attribute the correction to anyone. You can simply run it on demand on your test targets. Time saving. You can simply run it on demand on your computer.


Popular posts from this blog

How to implement Applocker with Microsoft Intune

-
Image
Applocker is tool included in Windows 10 and 11. It permit to set up policies or rules for allow or deny apps from running on your device.  We can create Applocker rules for below file types:  EXE files : .exe and .com Windows Installer files : .msi, mst, and .msp Scripts : .ps1, .bat, .cmd, .vbs, and .js DLLs : .dll and .ocx Packaged apps and packaged app installers : .appx and .msix. Sources :  https://learn.microsoft.com/fr-fr/windows/security/threat-protection/windows-defender-application-control/applocker/understanding-applocker-rule-collections The Applocker solution purpose a multiple possibilities for secure your device. We have possibilities to block or allow apps. By default, it is recommended to allow all applications and add a custom rules for a scpecific application. Prérequisites for used Applocker Device with Windows 10 or 11 for prepare the Applocker rules Application Identity service enabled Enable Applocker For create an Applocker policy, you need to login as an admin
Read more »

How to reset computer in OOBE mode

-
Image
When you receive a new computer, it may contain various applications that are useless in a business context. To solve this problem and start with a clean PC, it may be interesting to reset it.  Here is two procedures that can be performed in OOBE mode Manual process Click CTRL + Shift + F3 , your computer restart. The Windows session is automatically opened Go to Start Menu \ Parameters \ Update & Security \ Recovery and click on Get Started Select Remove everything Select Local reinstall Click Next Click Reset Your computer restarts and proceeds to a complete reinstallation. With Command Line Click  Shift + F10 , your computer restart. Used this command line : systemreset -factoryreset Select Remove everything Select Remove files and clean the drive Click Reset Your computer restarts and proceeds to a complete reinstallation.
Read more »

Microsoft Intune, Uninstall Win32 app with the company portal

-
Image
With the arrival of build 2307 of Microsoft Intune , Microsoft provides a new option on the Application part. Source :  What's new in Microsoft Intune | Microsoft Learn This option allows us to offer users the possibility of uninstalling an Win32 application via the Company Portal. Below you will find the procedure to activate the option in the Microsoft Intune console. Prerequisites Intune tenant up to date Win32 app available in the company portal A valid Uninstall command line Enabling the Uninstall option Go to  Intune.microsoft.com Navigate to Apps / Windows Select an  Win32 App and click Properties On Program , click Edit Activate the option Allow available uninstall  by switching the option to Yes Click Review + Save for all sections and click Save User side Open the company portal then select an available Win32 application. After updating, you should see the mention Uninstall.  Click Uninstall for remove the application.
Read more »