We're in the very early stages of it, but what are the rest of you doing about Group Policy Preferences (registry, folders, files, shortcuts) after moving to Intune, since it cannot do Preferences?

I would continue to use WEM.

We're not using WEM for GPO at all right now. Purely AD.

That's a good distinction for User vs Machine GPP. WEM does support reg values in HKLM. In fairness, I do not have user level GPPs as any of that is in WEM, but do still have machine level GPPs in GPO. My theory is machine level GPP's don't affect logon as much as user GPP's do.

Just use PowerShell scripts in InTune 🙂

Given what little I know today, I think WEM GPO would be my first choice for preferences.

Of course it's backwards, Why let something that has worked without an update to the core engine since circa 2007 continue to work?

I'm going to resurrect clippy and use him to put a hit on these developers

Buy Ivanti 😉

WEM. I moved almost all my GPOs, both user and computer to WEM and they work great.

Jeff I'm curious, just because I never know if I go about it the best way, but what do you assign computer GPO's to in WEM? "Everyone"?

Yup. Everyone does it.

So Everyone assignments get applied at boot and not user logon?

image.png

I'm going to have to use AD OU assignments for ListOfDDCs and a few other things.

Would that work? Maybe filters based upon Everyone.

So right now I only have the WEM, UberAgent, DDC and Devicetrust settings in AD.