This may be what you’re looking for. Treat the system like a VDI install when you’re installing things and look for “machine-wide” installers. Also consider getting FSLogix (free from Microsoft) to put user profiles in portable containers.
this post was submitted on 17 Oct 2023
9 points (76.5% liked)
Sysadmin
10552 readers
1 users here now
A community dedicated to the profession of IT Systems Administration
No generic Lemmy issue posts please! Posts about Lemmy belong in one of these communities:
!lemmy@lemmy.ml
!lemmyworld@lemmy.world
!lemmy_support@lemmy.ml
!support@lemmy.world
founded 2 years ago
MODERATORS
Interesting article but not really what we're looking for:
This option is especially useful for computers with multiple users and for when you don't want executable files running from a user profile.
Other than where the sync app is installed, the behavior is the same.
It's not the installation but the configuration that is causing trouble. FSLogix would require on-prem hardware.
You should be using machine wide installers not user appdata installers. Are you not?
So aside from using machine wide installers and ensuring that users are licensed for those products, you also need to setup enterprise roaming.
By the way, intune policies if they aren't changing don't take 8 hours to propogate to the machine, they take hours to propogate world wide like group policy takes hours to propogate in international sized ad forests.
So if you've got your intune policy set to auto sign in one drive and teams and whatever apps, assuming all your devices are intune registered, that setting doesn't take hours to get to the machine. It's immediate on first login. If you change that setting, it's some hours to get it across every single machine. By the way in my experience, generally 80% of the time with a forced sync from the company portal app you should deploy with intune, it's practically as fast as gpupdate. There's a few times where you need to patiently wait 15 minutes but you can see that if you name your configuration profile like (v12) and you'll see it's either still (v11) or immediately (v12) and you stuffed a setting and it's still not working.