

It’s time to fix the CVE-2021-40444 issue using Intune registry fix method. Microsoft provided a registry file to fix this vulnerability with the office application. There are other methods also to fix the vulnerability, like group policy. You can use the best option suited for your organization. But in this post, I’m going to cover Intune method for Azure AD joined Windows 10 PCs. IntuneWin app installation is handled by a new agent called Intune Management Extension.

This client agent is created by Intune team only for IntuneWin application deployments.

You can also use a remediation script to deploy registry fixes using Intune.
:max_bytes(150000):strip_icc()/001_how-to-use-sfc-scannow-to-repair-windows-system-files-2626161-5c65bae746e0fb0001e80983.jpg)
I will cover that later in a different post. Create IntuneWin Package to Deploy Registry Fix I think Intune remediation script method is much better if you have appropriate licenses. You need to create two files to deploy registry fix using Intune. You will need to paste the following registry information to a notepad and save it as ActiveXFix.reg file.Ĭopy "%~dp0*.reg" C:\Windows\Temp\ActiveXFix /Y The first file is the registry file itself. Regedit.exe /s 1.0>C:\Windows\Temp\ActiveXFix\Ver1.0.txtĭownload the IntuneWinAppUtil.exe to covert the files created above into the IntuneWin package. This helps to deploy the registry fix to Windows 10 or 11 Azure AD joined PCs using Intune. Paste ActiveXFix.reg and ActiveXFix.cmd files into the above folder.Create a folder called Intune Source\ActiveX Reg Fix\ Package.Create a Folder called Intune Source\ActiveX Reg Fix\Source.Before proceeding further, create a folder structure to store the source files and package files. Now you need to create an IntuneWin package using the tool called IntuneWinAppUtil.exe. Please specify the setup file: specify the source folder: C:\Users\digit\OneDrive\Work\Intune Source\ActiveX Reg Fix\Source.Enter SOURCE path where you have stored the.Run the IntuneWinAppUtil.exe tool from Command prompt.You need to paste the tool into the “ Intune Source” folder that you created above.
