In this blog post we cover the unusual characteristics of the Intel Optane drive, and how we need to approach task sequence builds to ensure we do not hit an unforeseen issue when it comes to in-place upgrades later in...
Category - Microsoft Endpoint Manager
Maurice Daly
Remove Built-in Windows 11 apps leveraging a Cloud-Sourced reference file
In this quick post we will be removing built-in Windows 11 apps, for all users, and optionally showing you how to leverage a “Cloud-Source” as a reference file to select apps for removal. Table of...
Ben Whitmore
Jan Ketil Skanke
Block the Office File Transfer Endpoints to help prevent data leakage on Managed Devices
In this post we will look at the Office File Transfer feature and implement a simple solution to prevent “one way” that users can leak corporate data. Table of ContentsMobile Devices – The Trojan Horse...
AzureAzure ServicesClientCo-managementEndpoint AnalyticsIntuneLog AnalyticsMicrosoft Endpoint ManagerProactive RemediationsSoftware Updates
Windows Update Settings Compliance
In this post I will show you how to use Proactive Remediations and Log Analytics, together, to ensure Windows Update Settings are Optimal and Compliant on your devices. This post comes on the back of a session both Aria...
Sandy Zeng
Delivery Optimization Configuration & Monitoring
With more and more organisations making the move to obtain applications and Windows updates through Intune and Windows Update for Business (WUfB), one thing that often goes overlooked is how to optimise data throughput...
Use a Scheduled Task to Rotate Passwords for CloudLAPS
Introduction If you haven’t seen it yet, CloudLAPS is a community developed solution, maintained by Nickolaj Andersen from MSEndpointMgr including community members Thomas Kurth (@ThomasKurth_ch), Maurice Daly...
Securing Windows MAM Only Access with Conditional Access
With more and more companies today allowing BYOD scenarios we need to consider all the potential security risks around this. Working primarily with larger enterprise customers I don’t usually get into the Windows...
Use Proactive Remediations to pop a Toast Notification when Unsupported Apps are found
Introduction Many organsiations, against strong advice, still allow some users to install apps on their devices. Quite often this is applicable to software developers and IT admins, both being given permission to...
Microsoft Endpoint ManagerCertificate DistributionHybrid Entra JoinIntuneModern ManagementSSOWindows 10
SSO to domain resources from Azure AD Joined Devices – The MEGA Series – Part 5 – Configure the Network Device Enrollment Service (NDES)
SSO to domain resources from Azure AD Joined Devices OverviewConfigure Active Directory and CertificatesConfigure the VPN Server (RRAS) Configure the Network Policy Server (NPS)Configure the Network Device Enrollment...
SSO to domain resources from Azure AD Joined Devices – The MEGA Series – Part 4 – Configure the Network Policy Server
SSO to domain resources from Azure AD Joined Devices OverviewConfigure Active Directory and CertificatesConfigure the VPN Server (RRAS) Configure the Network Policy Server (NPS)Configure the Network Device Enrollment...