Dive into Microsoft Graph authentication with PowerShell. In this blog we explore OAuth flows, PKCE security, and token handling. Learn how to build a secure auth flow from scratch and why the SDK might still be the...
Category - Automation
Ben Whitmore
A Mini Dive into the Microsoft Entra PowerShell Module: An Intune Administrator’s Perspective
In this post, we'll analyse the Entra PowerShell module's authentication implementation and discuss whether it's necessary for your Intune automation needs if you're already using the Microsoft.Graph.Authentication...
Deep Diving Microsoft Graph SDK Authentication Methods
Learn how to securely authenticate to Microsoft Graph SDK in your automation workflows using Azure Key Vault, client secrets, and certificates. Discover best practices for securing private keys, when to use certificates...
Unpacking the Microsoft Intune MDM and Entra ID Certificate
In this post we take a small deep-dive into the Intune MDM certificate and talk about OID's and how they can be leveraged to elevate your trust in the device identity.
Win32 app State Messages Demystified
In this post we will do some digging on Win32 app state messages and look at the compliance state and enforcement state messages stored in the local registry for win32 app policies processed by the client. We will also...
Intune Graph APIAutomationAzureAzure AutomationGraph APIIntuneMicrosoft GraphModern ManagementPowerShell
An easy way to get started with Certificate Based Authentication for AAD applications
In this blog post I will be showing you how to get started with certificate based authentication for Azure Active Directory (AAD) applications. Table of ContentsThe story so farApp RegistrationsClient...
Remove Built-in Windows 11 apps leveraging a Cloud-Sourced reference file
In this quick post we will be removing built-in Windows 11 apps, for all users, and optionally showing you how to leverage a “Cloud-Source” as a reference file to select apps for removal. Table of...
Maurice Daly
Jan Ketil Skanke
Use a Scheduled Task to Rotate Passwords for CloudLAPS
Introduction If you haven’t seen it yet, CloudLAPS is a community developed solution, maintained by Nickolaj Andersen from MSEndpointMgr including community members Thomas Kurth (@ThomasKurth_ch), Maurice Daly...
Delayed targeting in Intune
Have you ever had the need to delay targeting in Intune for some of your app deployments, PowerShell script , policies or Proactive Remediations? In a normal situation we would like most of this to be targeted...
Managed Identities in Azure Automation (PowerShell)
If you love Azure Automation and Security, you probably know that since around April 2021, Managed Identities in Azure Automation is the best way to access resources securely. This article will show why and how you...
Michael Mardahl