S02E12 - OMA-Goodness w/ Jeff Gilbert - How to Configure CSP & OMA-URI in Microsoft Intune - (I.T)

00:00 - Intro
00:50 - Jeff Gilbert - Microsoft - Senior Customer Engineer, Azure & Endpoint Management
03:30 - Custom OMA-URI policy
20:38 - Configuration service provider reference
22:34 - Policy CSP
27:53 - RestrictedGroups policies
31:41 - Policy discussion
38:46 - Custom XML
39:28 - Creating custom OMA-URI policy
43:15 - Administrator members
47:33 - Intune events
52:47 - Creating MDM wins over GP policy
1:01:20 - Creating allow SSPR on the login screen policy
1:16:26 - Wrapping up

CSP Cheat Sheet

Visit our websites and social media for more or to get in touch with us

Steve Hosking - Microsoft MMD Team

Adam Gross - Microsoft MVP - Enterprise Mobility

Ben Reader - Microsoft MVP - Enterprise Mobility

[donovansobrero]

Adam it's funny you did this video and it has been a problem for a few of us to get our heads around As i'm new to intune and just beginning to figure out the different things we can do with powershell and workarounds . You my find this script a friend and i put together to solve this OMA-URI problem for us. As i'm always spending more time figuring out what to put on those lines.
If you like it give us a shoot out. :)

[MisterMonkeySpanker]

Great video, crafting OMA URIs always drive me a little crazy. This is a great guide.

[greggwhiteforest]

Great Video! We are in the early stages of planning a move to modern management. Thanks for sharing! Liked and a subscribed!

[MisterMonkeySpanker]

Roled on the floor laughing about Azure CSP question.

[adrianmcdonald]

Where are these policies found or set? The reason I ask is we run CIS checks and devices are failing some of the checks because it is looking specifically for GPO value set, but we've set some of the CIS settings via device profiles or config profiles.

[gigomikol]

Would love some help with the "restrictedgroups" attempting to add local admins to systems.
ive configured the configuration to a T, the SID actually do show up in the group of systems they are assigned to, but NONE of the users have admin access. when they attempt to run as admin, or even run as a different user from within those groups they get a "username and password are incorrect"
there are no errors in the backend, configuration shows success, all the correct version of windows, im stumped as to whats happening

[rafaelquecuty]

Do you have a solution for an Azure AD registered device to change the password of a local admin account created through an OMA-URI?

[lionelsimmons]

Developer mode for intune ???? how do you get there

[ronald]

i need a good video about bitlocker without remedation failed like all bitlocker settings i try. I tried your old video about it but its not complete.

[KjetilBalstad]

Soooo.... Why move the Teams window in and out of the viewport, while having video of each and one of you blocking the OMA-URI description :p

[chandc]

Please try not to be funny here. rest others are good