Window Autopilot is getting better and better with every release of Microsoft Intune and Windows 10 build. The latest is that we can put a Autopilot payload down on the device before the OOBE and then make it a Autopilot device without collection the hardware hash for older devices or get the information from the […]
Azure AD Privileged Identity Management – also called AzureAD PIM. This it a Azure AD Premium feature that give you Just-in-Time Admin Access in Azure. The feature is just what you need is you a concerned about who, where and when a admin user have access to your Microsoft cloud. This is the first of […]
First of all – I love the Intune Enrollment status page, but there has been some scenarios where it has been less success full. Like on a share device where every new user that are logging on to the device is getting the Enrollment status page shown. But with Intune 1809 it is now possible […]
Microsoft is constantly improving the features in the Intune Service – this applies also for the Conditional Access part, with the latest update for Intune in March 2018 we got some new compliance settings that we can check for. This settings will apply both for AzureAD joined devices that are MDM managed with Intune – […]
A very common feature introduces in MDT 2010 copy and paste actions between Task Sequence. In MDT 2013 Update 1 the content of a copy / paste “command line” is missing some times I am use to copy a action group from one Task Sequence to another And since MDT 2010 it has been working – […]
With the release of Intune update Week of July 23, 2017 there is only two new features. Light and dark modes available for the Company Portal app for Windows 10 End users will be able to customize the color mode for the Company Portal app for Windows 10. The user is able to make the […]
Pointing to “manage.microsoft.com” will no longer work for enrollment – this will stop working beginning from February 11 2017. This means that if you are using the old CNAME you need to change it. Check with powershell resolve-dnsname -name EnterpriseEnrollment.osddeployment.dk -Type CNAME As you can see the EnterpriseEnrollment.osddeployment.dk is redirected to enterpriseenrollment.manage.microsoft.com – so it […]
Microsoft has in January 2018 released news applications for Intune Managed Application Management (MAM) both for IOS and Android. Remember then when new Intune MAM applications is enabled in Intune the Intune administrator need to enabled the new MAM apps in the Intune App Protection policies under target apps. For IOS the apps is: PrinterOn […]
With the new Intune released from the Week of November 6, 2017 Microsoft has enabled Enrollment Status Screen (Preview) This is a nice feature to show progress to the end-user when AzureAD joining and automatic MDM enrollment. It works both with and without Windows Autopilot. I have at this moment only tested with Windows 10 1709. […]
One of the biggest issue with Intune from the beginning of modern management with the MDM stack on Windows 10 – has been software inventory. Many companies has a CMDB where they love to put in software inventory for different reasons there has been no good way other then installing a asset management solutions with […]
With the release of windows 10 anniversary update the client site of Windows Defender Advanced Threat Protection (WDATP) will be integrated. To read more about Windows Defender Advanced Threat Protection (WDATP) take a look here: https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp This blog post is not how the WDATP is working but how to get a Windows 10 onboarded with the help of […]
In a on-premise Active Directory a normal user can read the directory by default using a LDAP browser. We put firewall and other security measure in place so that it is impossible to reach from the outside. When we sync all our users to Azure Active Directory – I often see that no security measure […]
I have a some deployment scenarios when the customer does not what the Windows Store App on the Task bar on Windows 10. I have found this GPO settings to remove the store App from the Task bar with out chancing the functionality of the Windows Store. Create a User GPO Change the settings: User Configuration […]
It is possible to create and deploy Windows Installer through MDM (*.msi) with Microsoft Intune in Azure. When managing Windows 10 as a MDM device – aka Modern Management the limitation for deploying software is for some companies an issue. But in my experience some companies can every user be under modern management and in […]
