#DevDecember Week 1 Recap: Growth

by Contributed | Dec 3, 2020 | Technology

This article is contributed. See the original author and article here.

In 2020, developers (along with the rest of the world) were challenged like never before, but the traits of determination and persistence describe practically every dev. I mean, honestly, you can’t code without them – like when you get an error and realize you forgot a “;” somewhere and are scrolling through your IDE for dayyyssss – sigh.

So, to get our first week of #DevDecember off to a running start, we highlighted how resourceful developers proved to be in overcoming unexpected circumstances. Throughout the week we’ve shared various pieces of content that highlight this growth and determination.

But, before we get to recapping those, we wanted to highlight a few fun things that we are doing in #DevDecember this year:

Reflect with our fun fill-in-the-blank

So much of getting through the year was about bridging gaps, so we thought a fill-in-the-blank would be the best way to review some of the ways you became more skilled and resilient as a dev. Check out the template, fill it in, tag it as #DevDecember, and share what you got done and how.  

#DevWithABev fun on social

Before we recap, we should also mention #DevWithABev, a growing collection of developer-with-a-beverage selfies. Check out everyone’s favorite winter beverage, and add your own personal flavor by taking a snapshot of yourself with yours and tagging it #DevWithABev. It’s 2020 and we could all use some friendly faces.

Now, let’s recap what we highlighted this week: 

Beginner’s series to JavaScript

Taking your first steps toward mastering a new programming language is exciting, but it can also feel overwhelming. To help you get started with JavaScript, we’ve created short and easy-to-consume videos that break down the key concepts you need to know.

Start watching the series

Agrotech IoT workshop

Want to grow your professional IoT skills? Your first stop may be the garden. Get your hands dirty with a workshop on how to build an internet-connected device to gather soil moisture data that will tell you (by lighting up an LED) if a plant needs watering.

Start digging in

Bringing browser developer tools to Visual Studio Code

One of our favorite releases in 2020 was the Microsoft Edge Tools for VS Code extension, designed to simplify workflows. Connect to an existing browser instance, start a new one, or use a “headless” browser.

Explore the extension

Building a first “Power Apps”​ app

@JoeCamp13 built an app to track inventory entirely with Power Apps. His explanation of how he did it, is illustrated with screenshots so you can follow along.

Start the walkthrough

Next week, we’ll talk about some of the ways the dev community came together in 2020. Keep following #DevDecember for daily updates and affirmations of awesomeness.  

Not sure what #DevDecember is all about? Check out our homepage for more info!  

Intune MDM enrollment certificate not present after updating to a newer version of Windows

by Contributed | Dec 3, 2020 | Technology

This article is contributed. See the original author and article here.

We recently had a case escalation and wanted to provide a few more details on a Windows 10 certificate issue. Windows has documented the behavior and resolution. There’s been additional blog posts describing this scenario by several of our MVP’s. In this post, we’ll add on a script we developed to detect whether or not the Intune Mobile Device Management (MDM) enrollment certificate is on a co-managed Windows device and provide a few recommendations for how to resolve.

Let’s start with what devices could be affected:

From the Windows KB article – “System and user certificates might be lost when updating a device from Windows 10, version 1809 or later to a later version of Windows 10. Devices will only be impacted if they have already installed any Latest cumulative update (LCU) released September 16, 2020 or later and then proceed to update to a later version of Windows 10 from media or an installation source which does not have an LCU released October 13, 2020 or later integrated.”

We see impact when managed devices are upgraded using outdated bundles or media through an update management tool such as Windows Server Update Services (WSUS) or Configuration Manager. This might also happen when using outdated physical media or ISO images that do not have the latest updates integrated.

From a device perspective, here’s what you’ll see:

• The MDM enrollment certificate is no longer on the Windows device. Once this certificate is not on the device, it can’t establish the trust needed to get policy from Intune.


• The Windows 10 device may no longer have corporate Wi-Fi, VPN, or other certificate-based authentication policies.


• End users may report they are unable to access sites that they typically had access to (and there’s no other compliance policy or issue affecting their access).


• You may notice a high volume of traffic in the Intune Management Extension logs.

What you can do to determine impact:

The sample script linked below is specifically developed for Intune co-managed devices and can be deployed to find those Windows 10 devices that don’t have the MDM enrollment certificate. We’ve tested this script in our internal environment and also worked with a customer to run the detection portion of the script. Please keep in mind the script is unsupported. If we make any changes to it, we’ll update this post.

You can download the script here –  https://aka.ms/mdm_enrollment_cert_script 

Again, as shared above this script will only work on Intune co-managed devices – those that have the ConfigMgr client installed and are enrolled into Intune. As described in what devices could be affected, there are a number of other scenarios that could be affected depending on your update path.

How you can mitigate impact:

You have a few different options, depending on your preferred approach:

• If you have already encountered this issue on your device, you can mitigate it within the uninstall window by going back to your previous version of Windows using the instructions here.  Windows has documented this as the preferred approach in their KB article.


• The sample script we shared above includes optional remediation logic for co-managed devices. One important end-user caveat though, if you use this remediation logic, the following message will appear in the Windows 10 notification center when the device is unenrolled before it is re-enrolled:

This is a standard your device is being unenrolled message which is what the script automates. Once re-enrolled, though, policy will return apps and settings.

Other information:

1. The detection logic in the script only returns the devices missing the MDM enrollment certificate.


2. You can run the script in detection only mode vs. remediation:
   
   
   
   1. Running mdmcertcheckandremediate.ps1 without any parameters is detection mode only.
   
   
   2. Running mdmcertcheckandremediate.ps1 -Remediate 1 is detect and remediate.
   
   
   
   


3. If you are a co-managed customer, the remediation process of re-enrolling the device to Intune is done by the Configuration Manager client (ccmexec) based on the co-management policy targeted. The ConfigMgr client uses existing co-management enrollment process if the domain joined device remains in Azure AD-joined state or enrollment is retried as soon as the device re-joins to Azure AD. Co-management enrollment is retried when ccmexec starts up and also during scheduled co-management enrollment process scheduled every day.

Again, keep us posted if you have any feedback by responding on this post or tagging @Intunesuppteam out on Twitter!

Releasing Now: Teams Breakout Rooms in GCC

by Contributed | Dec 3, 2020 | Technology

This article is contributed. See the original author and article here.

Both Microsoft Teams Administrators AND all End Users should review this article in order to understand how to enable and use Virtual Breakout Rooms in your Microsoft Teams Desktop Client.

Note: Teams Virtual Breakout Rooms will begin rolling out to all GCC tenants starting in early December with completion happening by mid-December. 

Administrators – What to do to Prepare Your Organization:

1. As an admin, ensure users can schedule private meetings with the following settings:
   
   
   
   1. Allow scheduling private meeting = on
   
   
   2. Allow Meet now in private meeting = on
   
   
   3. Allow channel meeting scheduling = on
   
   
   4. Allow meet now in channels = on
   
   
   
   

All Users in the Organization Should do the Following in their Teams Desktop Client:

1. To see the breakout rooms option within your meetings, you must turn on the new Teams meeting experience by
   
   
   
   1. Clicking on your profile image within Teams
   
   
   2. Selecting Settings
   
   
   3. Checking the “Turn on new meeting experience” option within General settings.
   
   
   4. Restart your Teams client.
   
   
   5. You can double check that the setting is setup correctly by starting a meeting and verifying that the meeting opens in its own window.
   
   
   
   


2. Make sure all participants, including the meeting organizer are using the latest version of Teams. If joining on Android or iOS mobile or tablet, make sure participants go to their App Store and download the latest update.


3. As a meeting organizer, join a channel / private scheduled meeting, or channel / private meet now meeting. Once you are in the meeting you should see the breakout room option next to the raise hand control.
   
   
   
   
   
   • You must be a meeting organizer to see the option. Meeting attendees and presenters will not see the breakout rooms option.
   
   
   
   
   
   
    
   
   

Features available for Organizers:

• Breakout room setup on Teams desktop client


• Create breakout rooms in scheduled private meetings (including recurring) and private meet now meetings


• Meeting organizers can manage rooms and hop between rooms freely


• Setup breakout rooms during an active meeting


• Create up to 50 breakout rooms in a single meeting


• Add, remove, delete breakout rooms


• Rename rooms to the title of your choice


• Reassign room participants from one room to another before as well as while the rooms are open


• Room transition: as an organizer, you can decide if participants get moved to the room automatically when you open the room, or, if they need to click to confirm the move. The “auto-accept” setting is available per meeting.


• Send an announcement that will show up as a meeting chat message in each room.


• Chats, files, and recordings: only the organizer will always have access to all rooms meeting artifacts

Features available for the participants::

• Join breakout rooms from web, desktop, iOS, iPads, Android mobiles and tablets. Note that organizers cannot move participants who joined via Desk phones or Teams devices join to a breakout room, they can stay in main meeting as their breakout room.


• Participants join the room as presenters, so they can present, share Whiteboard, etc. freely.


• Participants cannot add others to meeting chat, copy meeting details, nudge others to the meeting, or use “call me back”


• Hoping between rooms: Meeting participants cannot hop back to main meeting or between rooms on their own. They must wait for the meeting organizer to pull them back to the main meeting.


• Chat during the breakout session. Chat and artifacts shared during meeting are viewable for room participants.


• Chats, files, and recordings: Participants have access to artifacts, but only organizer has access to the links – if link is shared by meeting organizer, then participants will have access


• Multi-device join: breakout room is not supported when the participant joins the same meeting and same account from multiple devices

Where and when can I set up breakout rooms?

• You can set up breakout rooms after you join the meeting as the organizer. You can bulk create rooms at the start, or manually add or remove rooms.


• You can set up breakout rooms from desktop client, but not in mobile and web.


• We plan to enable the ability for you to set up breakout rooms before the meeting very soon.

When can I assign participants to breakout room?

• You can assign participant when you are setting up the rooms. You can do so manually before the rooms open or reassign participants to a different room while the room is open.


• You can also auto-assign the participants to rooms when you first set up the rooms in the meeting.