![Windows-Hello-For-Business-Active-Directory[1]](https://maciejrebisz.com/wp-content/uploads/2025/08/Windows-Hello-For-Business-Active-Directory1-1024x576-720x300.png "Windows-Hello-For-Business-Active-Directory[1]")
By default it is not configured – so this means that the default behavior on Windows 10 takes effect. When a Windows 10 device is Azure Active Directory joined there will kick in a two-step verificering of the user, that is a part of the Azure Multifactor Authentication (MFA) service that ensures that the users are who the said […]
![B-Intune-Graphic[1]](https://maciejrebisz.com/wp-content/uploads/2025/08/B-Intune-Graphic1-1024x603-720x300.png "B-Intune-Graphic[1]")
When we talk about devices and modern devices in education we also are saying Intune for Education, in this blog post I will show how to use Windows Autopilot and Intune for Education to provision a shared device nice and easy. In many education cases I have been involved in there is one student per […]
![wp-1593849019379[1]](https://maciejrebisz.com/wp-content/uploads/2025/08/wp-15938490193791-720x300.jpg "wp-1593849019379[1]")
When we are starting to test a new browser in our organization we also need an how we are configuring the browser both from a end user and a security perspective. If your end user has one browser on there device that are not managed, then in my experience that is also the browser that […]
![office-365-4333220-1024x576[1]](https://maciejrebisz.com/wp-content/uploads/2025/08/office-365-4333220-1024x5761-1-720x300.webp "office-365-4333220-1024x576[1]")
I’m writing this blogpost to help understanding what happens when you are deploying Office Pro Plus on a Intune managed device. First of all Office 365 installation is not a application installation in traditional sense!! It is not the same as a Win32 app deployed from Intune that are using the Intune Management extension (IME) […]
Now it is finally available – that being the feature to restrict enrollment for Windows device in Intune to corporate owned device only. There is many companies that will not allow there user to enroll private owned devices in there corporate environment. It has been a possibility for some time on other device type like […]
This blogpost is about how to get a Windows UWP into the Windows Store for Business when you cannot search for it. There is 2 examples in this post: Skype Room System App – It is “hidden” and cannot be searched in the public store or in Windows Store for Business Windows Configuration Designer – It […]
One of the biggest issue with Windows servicing on Windows 10 is language packs, from Windows 10 1803 this will be fixed with Microsoft using Microsoft Store to deliverer language packs. The benefit of using store app for language packs is that they are not removed as part of the Windows servicing and will there […]
With Intune update in juni 2016 (version 5.0.7000.0) we got Conditional Access for Outlook Web Access (OWA). This meens that the company can grant or deny access to portal.office.com based on the device is: Domain joined Compliant Domain joined or Compliant Support for mobile devices iOS 7.1 and later Android 4.0 and later, Samsung Knox Standard […]
I see more and more customers that are allowing Azure Active Directory join of Windows 10 Devices also with automatic MDM enrollement into Intune, and many are concerned about letting personal devices getting into Intune and there for having the possibility to be complaint. When a device is compliant, we can use it to give […]
The SharedPC configuration service provider is used to configure settings for Shared PC usage. What is Shared PC mode: A Windows 10 PC in shared PC mode is designed to be management- and maintenance-free with high reliability. In shared PC mode, only one user can be signed in at a time. When the PC is […]
Microsoft Intune Win32 App management support was announced at Microsoft Ignite 2018, this has been the biggest ask from customers around the world since Microsoft released Windows 10 back in Aug 2015 with a build-in MDM stack so we was able to AzureAD join and automatic MDM enroll a device into Microsoft Intune. At the […]
From Windows 10 1607 it is possible to buy Windows 10 Enterprise E3 on Microsoft CSP (Cloud Solution Provider) the benefits is that you don’t need to use a MAK key or KMS service. When you AzureAD joiner a Windows 10 Pro device – the device is getting a SKU transformation and are becoming a Windows 10 Enterprise with […]
We are constantly trying to get more security on login other then username and password, so Multi Factor Authentication (MFA) is a good solution, MFA combined with Azure AD conditional Access it a even better way. MFA is relatively easy to implement in a organisation where the end user has a company owned mobile phone […]
When MDM managed Windows 10 devices with Intune – I’am missing a overview of who my devices is compliant with my Software Update strategy. Here is the solutions – Using MSOMS as a extra management tool, now I can report my software update compliant level. How do we accomplice this with minimal work – I already have my […]
