Microsoft

Microsoft Intune Feedback

Suggestion box powered by UserVoice

James Read

My feedback

  1. 71 votes
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • sso
    • facebook
    • google
      Password icon
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      4 comments  ·  Ideas » App protection policies (APP/MAM)  ·  Flag idea as inappropriate…  ·  Admin →
      James Read supported this idea  · 
    • 204 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • sso
      • facebook
      • google
        Password icon
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        21 comments  ·  Ideas » Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →

        As @Robert suggested, I will merge “IOS email profile does not support MFA” into this one.

        Also, when I asked the PM, he said “Conditional Access does have the ability to require Outlook only. They call it app access.” So check that out. :-)

        James Read commented  · 

        This looks like it has been completed for iOS native mail app

        James Read commented  · 

        This is a much needed feature.

        James Read supported this idea  · 
      • 25 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • sso
        • facebook
        • google
          Password icon
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          0 comments  ·  Ideas » Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
          James Read shared this idea  · 
        • 85 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • sso
          • facebook
          • google
            Password icon
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            5 comments  ·  Ideas » Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
            James Read commented  · 

            This is another response from Cisco regarding this issue. My question was why can I configure this with Airwatch and not Intune.

            From Cisco Anyconnect feedback:
            This is because Airwatch uses Android restrictions to configure AnyConnect while InTune relies on URI function. This is not a limitation set by Cisco. InTune should move to the other method.

            James Read commented  · 

            I can't believe this is not configured already. This feature is available with other MDMs like Airwatch and Mobile Iron. Why can't Microsoft configure Intune to configure Anyconnect without having to turn off external controls.

            I talked to the Cisco anyconnect PM and this was their response:

            This is not an AnyConnect limitation. This is an implementation decision from InTune. If this was a Cisco limitation, you obviously wouldn’t be able to do this with your existing product. FWIW, I discussed this exact problem w/ the InTune PM a few weeks ago. Suggest you escalate your concerns directly to Microsoft.

            James Read shared this idea  · 
          • 36 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • sso
            • facebook
            • google
              Password icon
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              3 comments  ·  Ideas » iOS-specific  ·  Flag idea as inappropriate…  ·  Admin →

              As of the Oct 2018 release, when a device is not compliant, you can create an action on the compliance policy that locks the device remotely. This is supported on iOS, as well as Android, MacOS, Win10 Mobile, and WinPhone 8.1 and later.

              Does that get you want you need or is there something else still missing?

              James Read commented  · 

              This item is referring to the iOS activation lock feature. I believe that was already completed when you added your bypass activation lock feature for iOS devices.

              Thanks for the heads up for the compliance item to force locking devices. I don't think that addresses this suggestion, but I already consider this suggestion completed with the bypass activation lock feature added.

            • 442 votes
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • sso
              • facebook
              • google
                Password icon
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                25 comments  ·  Ideas » Mobile Device Management (general)  ·  Flag idea as inappropriate…  ·  Admin →
                James Read commented  · 

                Known folder move works for my purpose

              • 196 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • sso
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  16 comments  ·  Ideas » iOS-specific  ·  Flag idea as inappropriate…  ·  Admin →

                  I know it’s not a total, perpetual block, but as of the week of August 27 you can configure the days and times when you don’t want devices to install any updates. In a future update, you’ll be able to delay when a software update is visibly shown on the device, from one to 90 days.

                  When we deliver the 90-day delay, is that good enough to call this complete? As @Daniil points out, that’s what’s Apple is offering now. And it’s not great to get yourself too out of date with updates.

                  James Read commented  · 

                  Having the ability to delay updates should be good enough.

                • 1,146 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • sso
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    54 comments  ·  Ideas » Azure Admin Console  ·  Flag idea as inappropriate…  ·  Admin →
                    James Read commented  · 

                    Do you have an update on this

                  • 30 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • sso
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      1 comment  ·  Ideas » Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
                      James Read commented  · 

                      This is a much needed feature

                    • 3 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • sso
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        1 comment  ·  Ideas » Mobile Device Management (general)  ·  Flag idea as inappropriate…  ·  Admin →
                        James Read commented  · 

                        This would be a nice feature

                      • 12 votes
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • sso
                        • facebook
                        • google
                          Password icon
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          1 comment  ·  Ideas » Android-specfiic  ·  Flag idea as inappropriate…  ·  Admin →
                          James Read commented  · 

                          Intune is falling behind implementing Knox related features

                          James Read supported this idea  · 
                        • 16 votes
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • sso
                          • facebook
                          • google
                            Password icon
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            3 comments  ·  Ideas » Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →
                            James Read commented  · 

                            A username/password option would be terrific for VPN.

                          • 43 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • sso
                            • facebook
                            • google
                              Password icon
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              4 comments  ·  Ideas » Android-specfiic  ·  Flag idea as inappropriate…  ·  Admin →
                              James Read commented  · 

                              This would be a nice feature to add

                            • 732 votes
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • sso
                              • facebook
                              • google
                                Password icon
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                                55 comments  ·  Ideas » Inventory (all platforms)  ·  Flag idea as inappropriate…  ·  Admin →
                                James Read commented  · 

                                better inventory is important

                              • 141 votes
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • sso
                                • facebook
                                • google
                                  Password icon
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  7 comments  ·  Ideas » Certs, Email , VPN, Wi-Fi  ·  Flag idea as inappropriate…  ·  Admin →

                                  AS of the week of April 23, 2018, you can use the OnPremisesSamAccountName the common name in a custom subject on an SCEP certificate profile. For example, you can use CN={OnPremisesSamAccountName}).

                                  As of Dec 11, when you create a SCEP certificate profile in Intune, you can now use the AAD_DEVICE_ID variable when you build the custom subject name. When the certificate is requested using this SCEP profile, the variable is replaced with the AAD device ID of the device making the certificate request.
                                  https://docs.microsoft.com/en-us/intune/whats-new

                                  I don’t think it gives you everything you want, but how close are we?

                                  James Read commented  · 

                                  How close are you to move forward with this?

                                • 59 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • sso
                                  • facebook
                                  • google
                                    Password icon
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    9 comments  ·  Ideas » Android-specfiic  ·  Flag idea as inappropriate…  ·  Admin →
                                    James Read commented  · 

                                    I like how Intune uses the Knox Enrollment program, but it does feel incomplete. I would be great to use it for Kiosk devices.

                                    James Read commented  · 

                                    Thanks for the update.

                                    James Read supported this idea  · 
                                  • 4 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • sso
                                    • facebook
                                    • google
                                      Password icon
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      3 comments  ·  Ideas » Android-specfiic  ·  Flag idea as inappropriate…  ·  Admin →
                                      James Read shared this idea  · 
                                    • 580 votes
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • sso
                                      • facebook
                                      • google
                                        Password icon
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        63 comments  ·  Ideas » Mobile Device Management (general)  ·  Flag idea as inappropriate…  ·  Admin →

                                        The PMs involved have been talking about how best to give you a way to disable the “remove device” action. They think rather than focusing on platform enrollment types (iOS, Android, Windows), they could allow you to disable based on corporate vs personal ownership. I said I’d ask if that would work for you. :-)

                                        Would that get you want you need?

                                        James Read commented  · 

                                        Disabling removing devices by ownership is exactly what we need.

                                        James Read supported this idea  · 
                                      • 1,076 votes
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • sso
                                        • facebook
                                        • google
                                          Password icon
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          27 comments  ·  Ideas » Azure Admin Console  ·  Flag idea as inappropriate…  ·  Admin →

                                          We haven’t forgotten that many of you want PowerShell to manage the service! I’ll update this thread when I have more information on that which I can share. In the meantime, here are a few things related to Graph that may be of interest to you:

                                          November 2017 we released the Intune management extension, which lets you Manage PowerShell scripts in Intune for Windows 10 devices (https://docs.microsoft.com/en-us/intune/intune-management-extension)

                                          We’ve announced that Intune APIs in Microsoft Graph are no longer in beta and are now generally available https://cloudblogs.microsoft.com/enterprisemobility/2018/01/31/intune-apis-in-microsoft-graph-now-generally-available/

                                          At Ignite 2018, we demonstrate key automation scenarios using PowerShell, using Microsoft Graph APIs to simplify Microsoft Intune administration; and transitioning profiles, apps, and policies from a pre-production to production environment.
                                          https://myignite.techcommunity.microsoft.com/sessions/64603

                                          Also, as of the Oct 29 2018 release we have a public preview for a new PowerShell module, which provides support for the Intune API through Microsoft Graph. More info…

                                          James Read commented  · 

                                          I am excited about this feature

                                          James Read commented  · 

                                          Powershell use with Intune is important.

                                        • 11 votes
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • sso
                                          • facebook
                                          • google
                                            Password icon
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            3 comments  ·  Ideas » Mobile Device Management (general)  ·  Flag idea as inappropriate…  ·  Admin →
                                            James Read commented  · 

                                            Yes allowing restriction for MDM enrollment would be a great feature. I would smooth out the management of users allowed to enroll into Intune.

                                            James Read supported this idea  · 
                                          ← Previous 1

                                          Feedback and Knowledge Base