Allow powershell scripts to be used with Hybrid Joined devices
Currently its only possible to run Powershell scripts against Azure Domain Joined Machines. Could allow powershell scripts to be run against Hybrid Domain Joined machines?
Paul
shared this idea
32 comments
-
Sascha
commented
For me it works on our hybrid aad joined devices
-
Tim
commented
Support for mdm only enrolled devices should be added too. There needs to be much better support for powershell as its the only way to get so much stuff done easily on Windows.
-
Michael Mardahl
commented
For those that want powershell scripts to run all the time. Look here: https://www.iphase.dk/force-reload-intune-powershell-scripts/
-
Anonymous
commented
Apparently this is still not fully supported. For Hybrid Joined devices, you have to use GPO to get this working even though this is not stated anywhere. It only states you have to have auto-enrollment setup (MDM page).
-
EliWallic
commented
People - please vote for this: https://microsoftintune.uservoice.com/forums/291681-ideas/suggestions/32433451-run-powershell-script-on-a-schedule?
-
EliWallic
commented
Currently on hybrid joined devices PowerShell scripts gets only executed once after assignment. It will not run after service restart or machine reboot. Hope that will get fixed soon.
-
Dale Hayter
commented
The issue where it stopped working has now been resolved by Microsoft. Essentially the URL that the agent downloaded from did not exist in public DNS so the agent never downloaded. If you have a similar issue check the URL published in this registry key
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseDesktopAppManagement\S-0-0-00-0000000000-0000000000-000000000-000\MSI\{4832C413-61A3-4703-BCB8-BB9AD35FD643}
If you cant resolve the address then you have the same issue. We had to log a ticket with Microsoft to resolve.
So for us, hybrid joined devices can now run PowerShell scripts and Intune 32 apps. Great news...
-
Dale Hayter
commented
This seemed to be working on domain joined devices the other day. Now seems to have stopped for new devices. I think this was released to go with the Intune 32 app deployment which uses the Intune Management Extension. This element is now no longer being deployed to new devices for some reason. Anyone else seeing this?
-
Michael Mardahl
commented
Guys this works. I have a large number of AAD Hybrid W10 devices, and they all get loads of stuff via powershell scripts, Drive maps, chocolatey, weird registry stuff, you name it.
It runs like a dream! -
Anonymous
commented
There appears to be a silent roll out for this as PowerShell scripts can now be executed on hybrid domain-joined endpoints.
-
David Engelmark
commented
We are a comapany that only have hybrid joined devices and today we noticed that the "IntuneManagementExtension" had gotten istalled by itself, so we tried to add a script and after some time the scripts got executed on the computers! In all the docs its says this should not be possible, have there been som silent rollout of this feature?
-
Anonymous
commented
Really microsoft? Without this solution, intune is totally useless. I don't know who is responsible for the functional requirements of such solutions but should be fire from MS.
-
Dan Macgowan
commented
There is no documentation that states that PS scripts cannot be used on AD joined machines. 30 hours wasted troubleshooting. Come on Microsoft. At least have it warn that the feature cannot be used on a pc that is domain joined.
-
lyonheart14
commented
I don't see a reason this isn't already implemented. Also, it is kind of scary that this request seems like its being ignored.
-
Anonymous
commented
Must have!! This is a show stopper for many larger deployments, avoiding setting up. SCCM clusters again!!
-
Stefan N.
commented
Customers want this feature all the time. Any roadmap insights to share?
-
Anonymous
commented
I agree with Jason... Needs resloving ASAP!
-
Jason
commented
A big issue for several clients we support. This needs more attention.
-
Anonymous
commented
Took me a while to understand that PS script were only working on AAD joined device (maybe that should be clearly notified in the UI).
This request is still not even marked as noted... I'm wondering if they can have it working on hybrid joined device, maybe some permission issue. Or they just think that as these devices are "hybrid" we relay on another on-prem solutions for computer management and software deployment. However in many cases we can't go full Cloud so it's important that we have as many options as possible available to support a broad range of scenario.
Having the possibility to run PS script is not only a good thing for installing software but can be used also in place of GPO (when no MDM policy).
-
Ramon
commented
Same here, any news on this?