Intune

I have been working with Intune Proactive Remediation scripts I wanted to share a few that I am working on.If you want to know more about Intune Proactive Remediation you can check on past blogs of mine.

Using Intune’s Proactive Remediation Script Packages to configure clients to retrieve Kerberos tickets for Azure Files.

Intune Proactive Remediation - Check if KB5007253 is installed.

The following scripts are currently in my GitHub repo called ProactiveRemediations.

I want to start this blog out by saying I am not an Intune expert. In fact I don’t really spend much time with Intune. However, once in a while there are projects that require certain tools like InTune so once in a while I do get my hands on Intune. So I want to share what I have learned about Intune Proactive Remediation and how to create and apply them in your Endpoint environment.

In order to map an Azure File share with Azure AD Kerberos authentication for hybrid user accounts enabled you need to make sure that you configure the clients to retrieve Kerberos tickets.

There are three methods that can accomplish this on your client computers.

1. Configure an Intune Policy and apply it to the clients.
2. Configure Group Policy on the clients
3. Apply a registry value on the client.

I am going to use the registry method, but I will also be using Microsoft’s Intune Proactive remediation. Proactive remediation is part of Endpoint Analytics. The devices must be enrolled into Endpoint analytics in order for this to work.