Tag Archives: azure

Tracking Down AzureAD Device Sign-Ins

I recently needed to track down who had recently used a device bound to AzureAD. We don’t tend to make use of the Primary User field, since our devices tend to be handed out in bulk to large groups of people at once, rather than one-at-a-time. This meant I had to track down who was using which device in a more roundabout method.

To accomplish this, you’ll need to use both Microsoft Graph and Microsoft Endpoint Manager.

Lookup the Device ID

First you’ll need Azure’s device ID for the computer.

Go to https://endpoint.microsoft.com

Click Devices on the left then Windows Devices.

Search for the device you are looking for.

Click on it

In the address bar of the browser, the last part of the URL will be the device ID. Select and copy it.

Query Device Sign-In Information

Now that you have the Device ID, you can lookup the login history using Microsoft Graph.

Go to https://developer.microsoft.com/en-us/graph/graph-explorer

Make sure to sign into graph, or you’ll only see the sample data.

Query type: GET

Version: beta

URL: https://graph.microsoft.com/beta/deviceManagement/managedDevices/[device ID here]

Click Run Query

You’ll only see the first several lines, which probably won’t show the logged on users.

Click the Expand button

Scroll down to where it says usersLoggedOn then select and copy the ID inside of the quotes.

Go back to Endpoint Manager

Click Users on the left.

Paste the user ID into the search field. This should tell you the name of the user who logged into that device. If there were multiple people recently signed in, they’ll all be in the usersLoggedOn array.

Deploying Minecraft Education Edition With Intune

Another day, another app to deploy! Today it’s Minecraft Education Edition. If you’re looking to deploy the desktop version of Minecraft Education Edition using nothing but Intune, you’ve come to the right spot!

Package the Installer

Go to https://education.minecraft.net/get-started/download/ and download the Windows Desktop Edition to your Downloads folders.

Make a new folder in your Downloads folder called “MinecraftEducation”.

Open Terminal or PowerShell and change directory int your Downloads folder.

cd ~/Downloads

Extract the Minecraft Education Edition exe into the new folder by running following command in Terminal or PowerShell, replacing [user] with your username. I found the command only worked for me when I used the full path to the extraction location.

.\MinecraftEducationEdition_x86_1.14.50.0.exe /extract C:\users\[user]\downloads\MinecraftEducation\

This will extract the .msi and cab for Minecraft Education as well as the installer for the Visual C++ 2017 redistributable.

If you haven’t already, download a copy of the Microsoft Win32 Content Prep Tool to your Downloads folder from https://github.com/Microsoft/Microsoft-Win32-Content-Prep-Tool

From Windows Terminal or PowerShell run:

IntuneWinAppUtil.exe -c <folder with the msi it in> -s <name of the .msi file extracted to MinecraftEducation> -o <where you want the package file saved>

I had IntuneWinAppUtil.exe in the Downloads folder, Minecraft version, and wanted the package file in my current folder so I ran:

.\IntuneWinAppUtil.exe -c .\MinecraftEducation\ -s MinecraftEducationEdition_x86_1.14.50.0.msi -o .

If you have a newer version of Minecraft, just use the name of the .msi file in your MinecraftEducation folder.

Once you have done so, you will have a file called MinecraftEducationEdition_x86_1.14.50.0.intunewin that can be uploaded to Intune.

Create & Deploy in Intune

Go to https://endpoint.microsoft.com

Choose Apps->All Apps

Click the Add Button

Choose the App Type “Windows app (Win32) then click Select at the bottom of the screen.

Choose the MinecraftEducationEdition_x86_1.14.50.0.msi you created.

Choose 64bit Windows 10 under the Requirements

Under Detection Rules choose “Manually configure detection rules”

Click + Add

Choose MSI for rule type. Intune will automatically enter the correct MSI Product code. Keep “MSI Product version check” as “no” so that the app won’t re-install if upgrades are done on the client side.

No Dependencies are needed.

Finally, assign it to whatever device groups you need. Devices in those groups will automatically download Minecraft Education Edition.

That’s it! Enjoy Hour of Code!