How can you migrate Bitlocker to Azure AD without needing to re-encrypt or add new recovery keys to your managed devices? This article will illustrate one way to escrow (backup) the existing recovery key, using nothing...
Tag - Azure AD
Michael Mardahl
Microsoft 365 Group Based licensing automated
If you have already total control of your licenses in your Microsoft tenant, this article is not for you. But what we see with a lot of customers though, is that they do not have the insight and control they need to be...
Jan Ketil Skanke
How to monitor Intune connectors with Azure Automation and Teams
After the release of App-based authentication for MS Intune Graph access, I decided to have a look at setup some Intune monitoring with Azure Monitor and integrating this with Microsoft Teams for alerting. What I am...
Get started with Azure AD Report Only Mode for Conditional Access
The Microsoft Azure AD Team has just released a long awaited feature in public preview. That feature is called Azure AD Report Only Mode for Conditional Access. Report-only mode allows administrators to evaluate the...
Synchronize Device Collection memberships to an Azure AD group with ConfigMgr
Groups in Azure AD have sometimes proven difficult to fully utilize when it comes to querying a set of devices based out of various specific data. These groups are limited to a defined set of properties available on the...
Nickolaj Andersen
Certificate deployment for mobile devices using Microsoft Intune – Part 5 – Deploy SCEP Certificate profile
It’s been a while since this series started, but let’s continue. At this point the certificate templates have been configured including the setup and configuration of NDES have been taken care of. The Intune...
Hybrid Azure AD join Windows Autopilot devices using Microsoft Intune
Since the release in 2017 of Windows Autopilot we’ve been able to provision devices using cloud technologies and joining them to Azure Active Directory. Organizations have shown great interest in Autopilot but one...
Enabling BitLocker on non-HSTI devices with Intune
This is a post about enabling BitLocker on non-HSTI devices with Windows 10 version 1809 and standard user permissions. First of all a little background on HSTI. HSTI is a Hardware Security Testability...
Oliver Kieselbach
Certificate deployment for mobile devices using Microsoft Intune – Part 4 – Install Intune Certificate Connector
Up until now in this blog series we’ve covered the certificate templates creation, issuing of certificates for the NDES server including automating the installation of NDES server role including all of the post...
Certificate deployment for mobile devices using Microsoft Intune – Part 1 – Overview
A little over two years ago, I wrote a blog post regarding the same subject that will be covered in this series. Since then much has changed in two years, like Microsoft Intune is now running on Azure and Azure AD...