Thank you! will give it try but will also recommend signing scripts

Thank you!
But wouldn't the execution itself be subject to the restriction? Meaning the command to set it as unrestricted will not even be evaluated because it is in effect restricted or am I wrong?

Yes please 🙂

You're right and I will use "one incident is more expensive"!
My biggest concern is that the allow personal devices is implicit and for everyone regardless of what they access
Going to propose a deeper review based on criticality
Thanks again! I knew I needed your opinion🙂

Agreed, but how would you handle a customer with thousands of users that travel constantly, are not issued a corp device and rely on M365 and custom apps to work?
I am still trying to convince them to do MAM

I use the ZSA Voyager, have been for over a year and I cannot go back. It is worth it to go through the learning curve of proper typing. And to taje the time to configure shortcuts and layers, especially to replace the mouse
I do not use a mouse anymore it it has help greatly with shoulder pain.

Hmm this is a good lead to follow! need to go check thanks again 😊

So I checked the folder and for the issue servers there's nothing special. Comparing to the only server there are Jason files missing related to the policies
I have an open ticket with support.I am at loss here hopefully they'll be able to help😊

Could you please repost the link it is giving a 404

Thank you for the tip will check the folder and report back

Yes all is correctly created group targeted MDE ClientAnalyser not showing any issue servers are 2016 (and thank you)

The Answer is your question Andrew your are a community person 🙏

And I think we have a winner!