Microsoft have recently released a redesigned IT Admin experience for Apple device enrollment the new Azure portal preview for Intune. The new experience is available in all newly created accounts, and will be rolled out to existing accounts in the coming months. Prereq: A Intune created after January 2017 in the Azure portal preview for Intune […]
[CmdletBinding()] Param ( [Parameter(Mandatory=$false)] [ValidateSet(‘Install’,’Uninstall’)] [string]$DeploymentType = ‘Install’, [Parameter(Mandatory=$false)] [ValidateSet(‘Interactive’,’Silent’,’NonInteractive’)] [string]$DeployMode = ‘Interactive’, [Parameter(Mandatory=$false)] [switch]$AllowRebootPassThru = $false, [Parameter(Mandatory=$false)] [switch]$TerminalServerMode = $false ) Try { ## Set the script execution policy for this process Try { Set-ExecutionPolicy -ExecutionPolicy ‘ByPass’ -Scope ‘Process’ -Force -ErrorAction ‘Stop’ } Catch {} ##*=============================================== ##* VARIABLE DECLARATION ##*=============================================== ## Variables: Application [string]$appVendor […]
With Windows 10 1607 there is a new feature called SharedPC. SharedPC is applying to Windows 10 Pro, Pro Education, Education, and Enterprise. It is not possible to deploy settings to create a SharedPC with a GPO – so there for we need another solution. With use of the Windows Imaging and Configuration Designer (ICD) tool […]
With the release of Microsoft Edge Version 81.0.416.53 from April 13 2020 we are able to deploy Edge without creating the desktop icon. This is from the release note: Added an MSI command line parameter that lets you suppress Desktop icon creation when you install Microsoft Edge. The following example shows how to use this […]
When you have tested devices and need to deliver the hardware back, you need to remove the device from your Autopilot service in Intune so the device can be reused. It is the same when you have had a Autopilot device in your tenant for the company hardware life time – you need to remove […]
The SharedPC configuration service provider is used to configure settings for Shared PC usage. What is Shared PC mode: A Windows 10 PC in shared PC mode is designed to be management- and maintenance-free with high reliability. In shared PC mode, only one user can be signed in at a time. When the PC is […]
In the Azure Active Directory (AzureAD) portal it is possible to create dynamic groups for users and devices based on attributes. In this blog post I will show how to create a dynamic group for every Windows 10 Build that has been released at this moment. First you need to find out what information you […]
Device Health is yet another solution in Windows Analytics – the other two are Upgrade Readiness and Update Compliance. This solution will give the IT department a better understanding of the health of the devices – this works both with cloud managed devices but also with onprem managed devices. How to enable Windows Analytics with […]
The CleanPC configuration service provider (CSP) allows removal of user-installed and pre-installed applications, with the option to persist user data. This CSP was added in Windows 10, version 1703. In the post I will show the benefits and the user experience for using the CleanPC from Intune. This it a way of removing preinstalled application […]
Upgrade Analytics is a great tool to get information on your Windows Client platform to see if your are ready for Windows 10. The easiest Windows upgrade ever The Windows Upgrade Analytics Service uses telemetry data to provide powerful upgrade readiness insights and recommendations about the computers, applications and drivers in your organization. This new service […]
When we are using Intune in the new Azureportal (Ibiza) then we what to take advanced of dynamic device groups. In many cases we what to make Device Configuration and deploy to either to personal or corporate devices, the easy way is to create 2 dynamic devices groups. One for personal devices: Powershell: New-AzureADMSGroup -Description […]
It is a lightweight management solution for BOYD devices. MAM protects company data on a unmanaged device. MAM extents data management to applications configured with a MAM policy in Microsoft Intune while the devices is self is managed. Policies is applied to user groups in Azure Active Directory (AzureAD). Only the managed applications have access […]
When we talk about devices and modern devices in education we also are saying Intune for Education, in this blog post I will show how to use Windows Autopilot and Intune for Education to provision a shared device nice and easy. In many education cases I have been involved in there is one student per […]
With Windows 10 1607 there is a new feature called SharedPC. SharedPC is applying to Windows 10 Pro, Pro Education, Education, and Enterprise. It is not possible to deploy settings to create a SharedPC with a GPO – so there for we need another solution. With use of the Windows Imaging and Configuration Designer (ICD) tool […]
