Comments on: Manage Local Users and Groups with Microsoft Intune https://inthecloud247.com/manage-local-users-and-groups-with-microsoft-intune/ Intune, Windows, Office 365, Microsoft 365, Azure, Automation Wed, 16 Mar 2022 09:42:25 +0000 hourly 1 By: Goodwin Ziyada https://inthecloud247.com/manage-local-users-and-groups-with-microsoft-intune/#comment-180106 Wed, 16 Mar 2022 09:42:25 +0000 https://inthecloud247.com/?p=6243#comment-180106 In reply to Aaron Soares.

Was this done? if yes then please share how it was reolved am stuck with the same problem

]]> By: Dirk Walstra https://inthecloud247.com/manage-local-users-and-groups-with-microsoft-intune/#comment-179608 Mon, 28 Feb 2022 20:41:23 +0000 https://inthecloud247.com/?p=6243#comment-179608 How can you add to multiple groups? For example add a group to Administrators but also add another domain group to Remote Desktop Users?

]]> By: Aaron Soares https://inthecloud247.com/manage-local-users-and-groups-with-microsoft-intune/#comment-178435 Thu, 27 Jan 2022 21:17:28 +0000 https://inthecloud247.com/?p=6243#comment-178435 Hello all,
Bringing this one up from the past. So i have been tasked at removing Administrator access from contractors only. Is there a way to remove all user accounts from the administrators group (except the administrator account of course) without explicitly specifying each individual account name? I can see in the example here, the xml snippet reads “remove member = Peter” which removes the account name “Peter” as expected; However is there a “wild card” of sorts i can add to the xml script to remove all domain user accounts since I would be potentially deploying this to a group of domain users all having different names? for example “remove member = DOMAIN\*”

I hope this all makes sense?

Thanks,
Aaron

]]> By: Peter Rieger https://inthecloud247.com/manage-local-users-and-groups-with-microsoft-intune/#comment-174563 Wed, 03 Nov 2021 13:04:18 +0000 https://inthecloud247.com/?p=6243#comment-174563 If you get the status “-2016281112 (Remediation failed)” change the

to

This will ignore any language problems

]]> By: Technik Alkoholik https://inthecloud247.com/manage-local-users-and-groups-with-microsoft-intune/#comment-172238 Wed, 08 Sep 2021 12:29:29 +0000 https://inthecloud247.com/?p=6243#comment-172238 In reply to Peyton Young.

If your OS is in a different language that English, the ‘Administrators’ group will be named differently. Use the SID S-1-5-32-544 instead.

]]> By: Peyton Young https://inthecloud247.com/manage-local-users-and-groups-with-microsoft-intune/#comment-171876 Mon, 30 Aug 2021 13:54:24 +0000 https://inthecloud247.com/?p=6243#comment-171876 In reply to Johnny.

Could you elaborate on the actual language in use?

]]> By: Michael Jurado https://inthecloud247.com/manage-local-users-and-groups-with-microsoft-intune/#comment-164977 Tue, 11 May 2021 17:47:19 +0000 https://inthecloud247.com/?p=6243#comment-164977 I have this working in the sense it is deploying and displaying the SID in the admins group on all my systems with 20H2, however none of the users in the groups are admin, nor can be run as as different user with getting the error that “the user name and password are incorrect”

the group i am trying to add is a group with many nested groups within it

additionally this main groups properties – source: Windows server AD

When i quickly create a new group within intune the properties = source: cloud
this group works just fine without issues, however it is not nested

so:
Can we use nested groups?
if so is there an issue with SID from Cloud vs Windows Server AD groups?
if not then anything else i can try?

]]> By: Changhian https://inthecloud247.com/manage-local-users-and-groups-with-microsoft-intune/#comment-161535 Wed, 14 Apr 2021 12:08:53 +0000 https://inthecloud247.com/?p=6243#comment-161535 My Environment is just standalone Azure AD, i am using this “./Device/Vendor/MSFT/Policy/Config/LocalUsersAndGroups/Configure” and i can deploy out AzureAD/User and Group using the securityIdentifier property. But on the device for Group deployment, i am able to see it appearing in my computer management > Local Users and Groups > Groups > Administrators . but all the member within the group do not have the admit right when i run command prompt as administrators and it still prompt for admin credential

]]> By: teun https://inthecloud247.com/manage-local-users-and-groups-with-microsoft-intune/#comment-160612 Wed, 31 Mar 2021 19:11:07 +0000 https://inthecloud247.com/?p=6243#comment-160612 What OMA-URI do i need to use?

./Vendor/MSFT/Policy/Config/LocalUsersAndGroups/Configure

or

./Device/Vendor/MSFT/Policy/Config/LocalUsersAndGroups/Configure

Now im using the first one but im receiving the following error message:

0x87d1fde8
Remediation failed

]]> By: Ryan https://inthecloud247.com/manage-local-users-and-groups-with-microsoft-intune/#comment-158811 Mon, 15 Mar 2021 15:50:33 +0000 https://inthecloud247.com/?p=6243#comment-158811 I spent ages trying but couldn’t get this to deploy the SID to the local group.“-2016281112 (Remediation failed)” However, once I changed the OMA-URI to the following it deployed without issue:

“./Vendor/MSFT/Policy/Config/LocalUsersAndGroups/Configure”

Hope this helps anyone having similar issues.

Windows 10 20H2
Build: 19042.867

]]>