PowerShell in Intune - How to Copy file(s) (1/3) 

Thanks a lot Xian

Thanks @Abdirashid Muhammed for that comment, makes me happy to hear, and the purpose of these videos.

Thanks a lot Rodrigo for your comment, well done!

Thank you so much for this nice comment, more videos are coming :)

Thanks! would that be printers on-prem, such as \\server\print01 installation?

@shankhan-xm1yp That will be a good video for network printers. I'm been searching for that (add a printer from a printer server) but I been having a lot of issues trying to add one) Also, Here in our company already have some bat that install network printers but the hard part is that it always asked for admin credentials (install print driver)

Thanks you so much for your comment Ibrahim, happy it helps

Thanks a lot, love to read comments like this one, thanks again

Thanks a lot Mike for your support

@Aniket Chavda, cool you noticed and good question, happy it could be answered with a video :) CMTrace is nearly a must for us who troubleshoot and read Intune logs, thanks a lot for your comment

Hi Steevo! thank you so much, some I find while doing my work, which I like the most since I know those could be useful for others. Then I always check what is new in Intune (also a link there showing what is in Development) to follow and see what is coming :) learn.microsoft.com/en-us/mem/intune/fundamentals/whats-new

@@IntuneVitaDoctrina Thank you for sharing. I'm always amazed on how you and other content creators in this space are always quick to new features that are released and create content for it immediately. Much appreciated.

Hi, that is an excellent question, since we are in Powershell lets use this one: $JBNRoamingAppData = [System.Environment]::GetFolderPath('ApplicationData') Then you have a variable that goes to C:\Users\X\Appdata\Roaming, just remember that now you must run the script as USER and NOT as SYSTEM, and you will be fine

@@IntuneVitaDoctrina Can you show me an example (using the path that i showed you?)

if the path is under Roaming, the user profile, maybe a sub folder called Microsoft or Office, then just append that to the variable $JBNRoamingAppData = [System.Environment]::GetFolderPath('ApplicationData') then the path to the place be $JBNRoamingAppData\Microsoft $JBNRoamingAppData\Office

Yes you can! thanks for posting. You have to add all the PDFs in the package source and then change the command to copy all files instead.

@@IntuneVitaDoctrinaThank you I will try the scrip now.

@@IntuneVitaDoctrina Hello, your videos are very helpful to me, can I ask you what should be modified to copy everything that is in the source directory? Or, if not the other alternative, would it be like adding more files? Thank you very much from Argentina.

@@fedemazza9928 thank you so much (cool from Argentina, Messi land! :) ), if you wanted to copy ALL from the source directory, you can just change it to a wildcard, * or as you mentioned add one line per file. If you use wildcard it looks like this (but it will copy the ps1 file also, so if only images you can change to like *.png instead): $JBNScriptRoot = Split-Path -Path $MyInvocation.MyCommand.Path $JBNCMtraceDir = "C:\Program Files\CMtrace" if (!(Test-Path -Path $JBNCMtraceDir)) { New-Item -ItemType Directory -Path $JBNCMtraceDir } Copy-Item -Path "$JBNScriptRoot\*" -Destination $JBNCMtraceDir -Recurse

Thanks a lot, so cool you got your own Intune tenant and can follow along :)

Thanks a lot Ashwini for taking time to comment

since the script runs as SYSTEM it got no permission in SharePoint. Could be done without Win32 app, and do it only by script alone and use MS Graph to copy from SharePoint. You would need an access key and all that setup to use in the script and then use this MS Graph: learn.microsoft.com/en-us/graph/api/driveitem-copy?view=graph-rest-1.0&tabs=http

Hi, sad to hear you getting errors, since we package this as a Win32 app, I would troubleshoot the logs for that, got a video for that also :) ru-vid.com/group/PL1JNh3sw_Qyd0tNx3zwXaG7LamwAvYv3N

Hi @M L, yes, so during Assignment, instead of choosing "Available for enrolled devices" (which goes to Company Portal) you add devices to "Required" and also click on it and hide notification, users are rarely interested in knowing those things.

@@IntuneVitaDoctrina Ok thanks you i'm going to test it ;)

@@IntuneVitaDoctrina very nice channel btw it helped me a lot during my practice ;)

very very happy to hear, thanks a lot :)

Interesting, so you want to collect files FROM the Intune clients, so the opposite direction? You can run a PowerShell script that copy the file and then you need a storage, which is your question basically, you can store it on SharePoint Online as long as you give the script permission there, or Azure Storage. Could be a future video, but for now this link got solutions for it: www.systanddeploy.com/2021/02/intune-troubleshooting-collect-remotely.html

@@IntuneVitaDoctrina I have an application that collects data from each device to a standard location on each device. Then I need to collect this data to run some reports. You had mentioned storing these files on SharePoint which looks to be to be the better option. I'll review your suggested video. And thanks!

SFC /Scannow, the System File Checker is in the following video 2/3: ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-zzwirfPNZHw.html&ab_channel=Intune%26VitaDoctrina We create a script that create a scheduled task that runs SFC on a regular basis

It would work, is it the best solution I'm not sure. You have to package in Win32 package with the files each time. So yes it works, you could also put a schedule task that runs on the devices and download through FTP or alike every week or from AzureAD storage... but yeah do PowerShell copy with Win32 works fine.

Hi M. Dff, I got a video doing that already: ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-MnFL2FQLjp4.html I use it a lot at my work. I already assume winget is on the device. A tricky part which is mention in the video I link is that SYSTEM (the account that Intune installs with) cannot find winget.exe by just simply call winget.exe, you must give the full path to it and since it got a version number you cannot hardcode it. If it is ONLY a PS1 script calling winget.exe you don't even have to package it as a win32 app (but you can do) I do a lot of updates with Proactive Remediation scripts (got a video about that also: ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-ea0g1Y1zaek.html) long answer, but 100% you can Win32 app package just a PS1 script calling winget.exe and install :) (watch out for detection script as you will have to call winget.exe there also to verify if locally installed is same version as online winget version for it to be a success)

@@IntuneVitaDoctrina aah perfect!! Many thanks again ;). It worked for me! And now, here is another idea. I am still fighting with it a little, but say a users has a windows device swap, in the app store I want to let him select ''SwapLaptop export apps'' so in the background ''winget export -o %userprofile%\Desktop\MyApps.txt'' will run, and on the new laptop he selects in the appstore ''SwapLaptop Import apps'' so command ''winget import -i %userprofile%\Desktop\MyApps.txt'' runs and than the install command.

I like that idea! You could also package all software in Win32 with winget in script, and then deploy to a user AzureAD group, and then add the user (not device) to the group of software user should have. Then when user get new device, since you target user the software will follow the user due to the group membership

@@IntuneVitaDoctrina no, I have setup standard / basic apps everyone should have and assigned it to all users (1400) and all the rest I made available in the company portal. Our company is just to dynamic for department groups. Only when sso apps licenses that are assigned to a user and a package is needed, then it will be assigned to the user, because he is a member of the license group. But the laptop swap app is cool for people that installed multiple apps from Company portal already, but have to swap their laptop for some reason. It saves a lot of time. They only have to manually set up the settings again.

Yeah you need to have three bases of software: 1. The software you want everyone to have such as anitvirus, office, your communication tools, maybe 7-Zip etc.. 2. Based on job function (often department) and if you can group these users together with an attribute or script with logic and then deploy for example Sales tools to the sales teams etc.. 3. Software you cannot know who will need it or maybe even licensed software, put in Self Service/Company Portal and have as a la carte You seems to have more of group 1 and 3 so your idea makes a lot of sense

thanks a lot Texy for all support!

Not done it myself, but there are PowerShell cmdlets that does the upload automated, such as add-IntuneWin32app, and it has to be HTTP based. Need to include Authentication so probably pretty much to do, but possible, read here: github.com/MSEndpointMgr/IntuneWin32App

@@IntuneVitaDoctrina thank you very much for your instant anwer..i have tried and succeeded the authentication, yet the only api tha i have found, expects json so i cannot upload an msi or .intunewin file to intune through http call..i dont know where to look

impressive work you have done, hat off, sorry I cannot help more.. yeah .intunewin file in json format is not possible ;)

@AriJandro very good question. The reason why using a relative path such as "-Path $MyInvocation.MyCommand.Path" is only because we later in the video deploy this with Intune in a .intunewin file and then it later be downloaded to clients through the cloud.. and there we do not know the path, it is where Intune cache it so we cannot hard code it, so we do a dynamic path, hope that makes sense