@ElecEng said in Is the domain .Local a real problem in a private lan that has no public facing services?:

@scottalanmiller What's the best thing to use on green field networks that are private and have no public facing services?

Not AD.

@Super-Sundae : Can you run Sysinternal's RegMon and patch another machine with InTune? That way you can capture the changes.
Perhaps running SysMon at the same time in case it makes changes to file permissions would help..

If you can find out what the policy changes then you should be able to revert on both machines. Hopefully 🙂

So this has been changed in their newest release 2.0.0.25 (not sure if it's publically available), and while the credentials are no longer in plain-text there are a few things you lose the ability to do.

Namely to tell if any given used is logged into a device, and secondly to sign in/out as a user on any given device.

I've provided my feedback to Yealink and hope to hear back soon. Neither of the above 2 issues are deal breakers, as the bigger goal is to be able to set configuration options, screensavers, time servers etc and have the user deal with the login.

Especially since the "Web Sign in" functionality is so simple, there is little reason to need the ability to sign in for a user.