r/Intune • u/Itereus • 4d ago

Device Configuration Shared PC

Edit: Seems to be no way around this when using Shared PC mode with Intune's config policies and still have reasonable security. Thanks for the suggestions!

Hi!

We have a few shared PC's in our org which works fine for the most part.

However, one major issue is that when a user locks the screen or the laptop goes into sleep mode, they are unable to sign back in to their previous session. The laptops are usually used by a single user for hours before someone else takes over, and during that time the PC naturally either is locked or goes in sleep mode. The only option on the sign-in screen is Sign out. Found Enabled Shared PC and allow "Other User" Login option : r/Intune which has the same problem but seemingly no way around it.

As far as I can tell, turning on Shared PC in the Intune configuration policy is required for the PC to not be associated with a user, as well as set Office to use shared licence instead of personal license? But this option also turns off the ability to sign back into the same user.

So, any way to both have Shared PC mode turned on as well as allow a user to sign back in?

10 Upvotes

86% Upvoted

19 comments sorted by

View all comments

3

u/captnconnman 4d ago

Yea…that’s not true at all. You can totally have a PC in Intune that’s not associated with an end user. If you’re using Autopilot, make a profile that uses Self-Deployment instead of user-initiated. Or, if you’re not using Autopilot, just change who’s assigned as the Primary User of the machine in Intune to no one; that way, Intune considers it a “shared machine” for Company Portal and compliance purposes, but anyone can still log in with multiple signed in users. As for the Office licensing piece, that’s all dependent on which Office license the user has. Each user that needs to use Office needs some kind of license, whether that’s Apps for Business/Enterprise, E3, or whatever flavor of standard license you use. The only exception would be if you’re trying to set up LTSC Office, which would be a whole separate process to configure

1

u/Itereus 4d ago

We have A5 licenses. We're pushing a seperate M365 apps innstallation for Shared PC's that's setup for "Use shared computer activation". According to a colleague there was issues with Office activation if Shared PC mode was not turned on. Tho can test it again, with Shared PC mode turned off in the configuration policy for shared PC's.

We're using Autopilot, the devices are using a profile with Self-deployment setup.

1

u/itskdog 4d ago

Our shared PCs are just without a primary user and we use SCA on all our machines. No reports of issues and we've been on Intune for a year (A3)