Cloud Kerberos Trust for Windows Hello for Business is the apex of single sign-on solutions for your Windows devices. in this Trilogy you can expect to learn the what, the how and the wow! Table of ContentsThe story so...
Author - Ben Whitmore
Ben Whitmore
Michael Mardahl
Simplify Windows Hello for Business SSO with Cloud Kerberos Trust – Part 1
Cloud Kerberos Trust for Windows Hello for Business is the apex of single sign-on solutions for your Windows devices. In this Trilogy you can expect to learn the what, the how and the wow! Table of ContentsThe story so...
Moving to the Cloud. Co-management workloads and capabilities (revisited)
In this post I will revisit Co-management workloads, capabilities and take a walk down memory lane. BackgroundConfiguration Manager “The steady ship”Intune “The Cloud”Co-management “The...
Remove Built-in Windows 11 apps leveraging a Cloud-Sourced reference file
In this quick post we will be removing built-in Windows 11 apps, for all users, and optionally showing you how to leverage a “Cloud-Source” as a reference file to select apps for removal. Table of Contents...
Maurice Daly
Jan Ketil Skanke
Block the Office File Transfer Endpoints to help prevent data leakage on Managed Devices
In this post we will look at the Office File Transfer feature and implement a simple solution to prevent “one way” that users can leak corporate data. Table of Contents Mobile Devices – The Trojan...
AzureAzure ServicesClientCo-managementEndpoint AnalyticsIntuneLog AnalyticsMicrosoft Endpoint ManagerProactive RemediationsSoftware Updates
Windows Update Settings Compliance
In this post I will show you how to use Proactive Remediations and Log Analytics, together, to ensure Windows Update Settings are Optimal and Compliant on your devices. This post comes on the back of a session both Aria...
Sandy Zeng
Use a Scheduled Task to Rotate Passwords for CloudLAPS
Introduction If you haven’t seen it yet, CloudLAPS is a community developed solution, maintained by Nickolaj Andersen from MSEndpointMgr including community members Thomas Kurth (@ThomasKurth_ch), Maurice Daly...
Use Proactive Remediations to pop a Toast Notification when Unsupported Apps are found
Introduction Many organsiations, against strong advice, still allow some users to install apps on their devices. Quite often this is applicable to software developers and IT admins, both being given permission to...
Microsoft Endpoint ManagerCertificate DistributionHybrid Entra JoinIntuneModern ManagementSSOWindows 10
SSO to domain resources from Azure AD Joined Devices – The MEGA Series – Part 5 – Configure the Network Device Enrollment Service (NDES)
SSO to domain resources from Azure AD Joined Devices OverviewConfigure Active Directory and CertificatesConfigure the VPN Server (RRAS) Configure the Network Policy Server (NPS)Configure the Network Device Enrollment...
SSO to domain resources from Azure AD Joined Devices – The MEGA Series – Part 4 – Configure the Network Policy Server
SSO to domain resources from Azure AD Joined Devices OverviewConfigure Active Directory and CertificatesConfigure the VPN Server (RRAS) Configure the Network Policy Server (NPS)Configure the Network Device Enrollment...