Intune FAQ For Admins

Owned by Salam Abdelgader
Oct 29, 2024
2 min read

 

  1. What account should I use in Intune for administrative tasks?

    • Use the Admin-Kerberos@ad3.ucdavis.edu account for all Intune-related administrative tasks and permissions. The ! Account is only recognized as a standard account in Intune, so continue using it for AD and OU domain tasks only.

  2. Can I reset an Intune device?

    • No, do not reset an Intune device from the device itself. This option is only reserved for transitions from OU to Intune.

  3. How can I reimage an Intune device?

    • In the Intune admin center, locate the device and select Wipe without checking any additional boxes—this acts as a reimage. Ensure the device is plugged in and connected to a network for the process to complete.

  4. Can I use multiple accounts on an Intune computer (e.g., Kerberos and student accounts on a shared device)?

    • No, Intune currently does not support multiple account logins effectively and defaults to authenticating only the primary account. Use the OU account exclusively.

  5. How do I elevate a user's permissions from Standard to Admin on their device?

    • Open Command Prompt as an admin, log in with your admin account, and run this command, replacing “UID” with the actual user ID:

      net localgroup administrators "azuread\UID@domain.com" /add

  6. How do I remote into an Intune device?

    • Use Bomgar to remote in. Have the user visit Support.ucdavis.edu and provide them with a code. In the future, Bomgar will be installed directly on devices for easier access.

  7. How do I elevate my rights in Bomgar on an Intune device?

    • Sign in with azuread\admin-Kerberos@ad3.ucdavis.edu and advise the user to approve the elevation request.

  8. What should I do if Intune enrollment fails?

    • Enrollment failure is often due to low or unstable internet speeds, especially if you see error code 0x81036502 during app installations. Follow these steps:

      • Restart the device via Intune.

      • Once restarted, most users should be able to log in. If it returns to the enrollment page:

        • In Intune, select Fresh Start to redeploy and initiate the enrollment process again.

  9. What should I do if all troubleshooting steps fail?

    • Contact Salam Abdelgader via Teams or email at SAbdelgader@ucdavis.edu, or call the direct line at 530-219-3706 if urgent.