Post

Want to run roadrecon, but a device compliance policy is getting in your way? You can use the Intune Company Portal client ID, which is a hardcoded and undocumented exclusion in CA for device compliance. It has user_impersonation rights on the AAD Graph 😃

12/12/24, 3:59 pm20 reposts45 likes

Fabian Bader

@fabian.bader.cloud

12 Dec 2024

Those hardcoded, but often not good documented exclusions can really be a challenge.

Dirk-jan

@dirkjanm.io

12 Dec 2024

Client ID: 9ba1a5c7-f17a-4de9-a1f1-6178c8d51223 I originally shared this in an Outflank OST knowledge sharing session about a year ago, but since this was dropped at BH EU as well I guess the cat is out of the bag now 😄