2023 - The Lazy Administrator

Allow Non-Admin Users to Manage Their Desktop Icons Using Intune

February 10, 2023 Brad Wyatt Comments 1 comment

Many IT organizations do not allow their end users to be local administrators on company endpoints, and for good reason. But one issue I have ran across is that some applications install an icon on the public desktop (C:\Users\Public\Desktop) and the end user is unable to delete the icon as it requires administrative rights. Using PowerShell, we can modify the ACL of the public desktop folder and allow our non-admin users to delete these shortcuts.

Copy the PowerShell script below and save it somewhere we can reference it later. This script modifies the permissions for the folder ‘C:\Users\Public\Desktop’ and adds the ‘authenticated users‘ entity to it with the ‘modify’ permission.

$folderPath = "C:\Users\Public\Desktop"
$acl = Get-Acl $folderPath
$user = New-Object System.Security.Principal.SecurityIdentifier('S-1-5-11')
$rule = New-Object System.Security.AccessControl.FileSystemAccessRule ($user,"Modify", "ContainerInherit,ObjectInherit", "None", "Allow")
$acl.SetAccessRule($rule)
Set-ACL $folderPath $acl

Open a web browser and navigate to Intune.Microsoft.com > Devices > Scripts and Add a … Continue...

Fix Issue with Connecting Managed Google Play to Intune (We couldn’t connect to that service)

February 9, 2023 Brad Wyatt Comments 7 comments

Recently, I was connecting Google Play to Intune and ran across an issue that I did not see documented anywhere. I spent a great deal of time pulling my hair out trying to figure out where the disconnect was. I was at the intune portal (intune.microsoft.com) and went to Devices > Android > Android enrollment and clicked Managed Google Play to connect Google Play to Intune.

The Google Play window would pop up and I would sign into my account. In the top right corner you can see my account is signed in. I would click the Re-Enroll button (of if its your first time you would click Enroll or Sign-In)

I would get a redirection window that would hang for 15-20 seconds.

Until it ultimately failed with the following error:

Try that again using a different browser

We couldn’t connect to that service, likely because of settings put in

… Continue...

Set Google as Default Search Engine for Microsoft Edge using Intune

January 21, 2023 Brad Wyatt Comments 1 comment

Using an Intune Settings Catalog we can change Microsoft Edge’s default search engine from Bing! to Google Chrome.

Navigate to the Intune admin portal at intune.microsoft.com
On the left pane, click Devices
In the Devices Overview page, click Configuration Profiles found under the Policy
Click + Create Profile
Under Platform, select Windows 10 and later. And under Profile Type, select Settings catalog
Give your new policy a proper name and description and then click Next
In the Settings Catalog search for Microsoft Edge and then select Microsoft Edge\Default search provider
Select the following four (4) settings:
1. Configure the new tab page search box experience
2. Default search provider name
3. Default search provider url
4. Enable the default search provider
Enable the four new settings and configure the following
1. Default Search provider search URL: https://www.google.com/search?q={searchTerms}
2. Default search provider name: Google
3. New tab page search box experience: Address bar
On the next page configure