u/segagamer

I'm not really sure which subreddit to post this so hopefully this covers it...

We're trying to configure Microsoft Defender for our Intune devices, and the Org ID viewable on security.microsoft.com's Settings > Microsoft Defender XDR does not match the Org ID found when running Get-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows Advanced Threat Protection\Status". This has happened to two of our autopilot laptops, and they both end up with the same Org ID. It just doesn't match the OrgID we want it to, and therefore doesn't get the policies we're trying to configure as Intune can't determine the "Risk factor" of the device.

Can someone help me determine where these laptops are getting this other OrgID from so that we can put a stop to it?

• We don't have any scripts configured on Intune, just two that were included from Microsoft; "Restart stopped Office C2R srv" (disabled) and "Update stale Group Policies" (enabled).

• We tried changing the OrgID manually by turning off the connector from Intune to Defender, so that the devices didn't get enrolled into Defender automatically. Then downloaded and ran an offboarding script, re-enabled the connector, and then Intune detected a device not enrolled with Defender and enrolled it appropriately with the correct OrgID. But then after one restart, the OrgID changed back to the same unrecognised one.

So I decided to finally start this recently and am determined to figure out Sega Rally and its controls.

I came off it before because I couldn't figure out hairpin turns. I'm driving manual transmission. I wondered, if anyone here still remembers how to play it properly, if anyone could give any tips on the controls, particularly surrounding hairpin turns and S turns.

On a Windows device, if I'm trying to get the value that Entra is going to read from the firmware, how do I see the exact value?

I tried entering the value that was output from Get-CimInstance -ClassName Win32_BaseBoard | Select-Object Product and this didn't work. Also tried what Entra is reporting in the "Model" column on another enrolled device, also didn't work (failing in the "Validate Rules" screen)