If you have ever having issues with Autopilot or Enrollment Status page failing or timing out due to issues with Office installation, this blog post is for you. Over the years working in this area, the Office CSP has...
Category - Intune
Jan Ketil Skanke
Manage Windows Hello for Business (WHfB) with Intune
Manage Windows Hello for Business (WHfB) with Intune is very “easy”, you have so many options: At device enrollment: Tenant-wide policyAfter device enrollment, at least four methods: Endpoint Security >...
Sandy Zeng
Remove Built-in Windows 11 apps leveraging a Cloud-Sourced reference file
In this quick post we will be removing built-in Windows 11 apps, for all users, and optionally showing you how to leverage a “Cloud-Source” as a reference file to select apps for removal. Table of...
Ben Whitmore
Maurice Daly
Block the Office File Transfer Endpoints to help prevent data leakage on Managed Devices
In this post we will look at the Office File Transfer feature and implement a simple solution to prevent “one way” that users can leak corporate data. Table of ContentsMobile Devices – The Trojan Horse...
AzureAzure ServicesClientCo-managementEndpoint AnalyticsIntuneLog AnalyticsMicrosoft Endpoint ManagerProactive RemediationsSoftware Updates
Windows Update Settings Compliance
In this post I will show you how to use Proactive Remediations and Log Analytics, together, to ensure Windows Update Settings are Optimal and Compliant on your devices. This post comes on the back of a session both Aria...
Delivery Optimization Configuration & Monitoring
With more and more organisations making the move to obtain applications and Windows updates through Intune and Windows Update for Business (WUfB), one thing that often goes overlooked is how to optimise data throughput...
Use a Scheduled Task to Rotate Passwords for CloudLAPS
Introduction If you haven’t seen it yet, CloudLAPS is a community developed solution, maintained by Nickolaj Andersen from MSEndpointMgr including community members Thomas Kurth (@ThomasKurth_ch), Maurice Daly...
Securing Windows MAM Only Access with Conditional Access
With more and more companies today allowing BYOD scenarios we need to consider all the potential security risks around this. Working primarily with larger enterprise customers I don’t usually get into the Windows...
Use Proactive Remediations to pop a Toast Notification when Unsupported Apps are found
Introduction Many organsiations, against strong advice, still allow some users to install apps on their devices. Quite often this is applicable to software developers and IT admins, both being given permission to...
Microsoft Endpoint ManagerCertificate DistributionHybrid Azure AD JoinIntuneModern ManagementSSOWindows 10
SSO to domain resources from Azure AD Joined Devices – The MEGA Series – Part 5 – Configure the Network Device Enrollment Service (NDES)
SSO to domain resources from Azure AD Joined Devices OverviewConfigure Active Directory and CertificatesConfigure the VPN Server (RRAS) Configure the Network Policy Server (NPS)Configure the Network Device Enrollment...