From Windows 10 1607 it is possible to buy Windows 10 Enterprise E3 on Microsoft CSP (Cloud Solution Provider) the benefits is that you don’t need to use a MAK key or KMS service. When you AzureAD joiner a Windows 10 Pro device – the device is getting a SKU transformation and are becoming a Windows 10 Enterprise with […]
I often get this question from customers and colleagues : What is MDM authority MDM authority is set when setting op the Intune subscription. This can be change after worth but requires a Microsoft Support Case. See later in this blog post. In the Intune console you can see what MDM authority your tenant is […]
Microsoft has in January 2018 released news applications for Intune Managed Application Management (MAM) both for IOS and Android. Remember then when new Intune MAM applications is enabled in Intune the Intune administrator need to enabled the new MAM apps in the Intune App Protection policies under target apps. For IOS the apps is: PrinterOn […]
It is a lightweight management solution for BOYD devices. MAM protects company data on a unmanaged device. MAM extents data management to applications configured with a MAM policy in Microsoft Intune while the devices is self is managed. Policies is applied to user groups in Azure Active Directory (AzureAD). Only the managed applications have access […]
When we are doing modern management of Windows 10 devices with AzureAD then sometimes we are missing the easy way from group policies preferences, but in Intune we have the Intune Management extension previous known as Project Sidecar. In basic it is just a way to run a powershell script on a Intune managed devices […]
To deploy Adobe Reader DC in the enterprise you must download it from ftp://ftp.adobe.com/pub/adobe/reader/win/AcrobatDC/ In the 1500720033 folder you find the .MSI file download the language you need ex. AcroRdrDC1500720033_en_US.msi In the 1500820082 folder you find the .MSP patch file AcroRdrDCUpd1500820082.msp To customize the .MSI files you need to create a .MST file – that can be […]
Microsoft has release Microsoft Whiteboard (Preview) app to Windows 10 and Windows 10 Team, this means that now you can collaborate with other users in your organisation from the Microsoft Whiteboard app across Windows 10 devices and SurfaceHub. In this blogpost I will cover how to deploy Microsoft Whiteboard app from Microsoft Store for Business […]
In Windows 10 1709 there is a lot of new CSP policies and on of them is LocalPoliciesSecurityOptions in this blogpost I will show how to: This will be done on AzureAD joined Windows 10 device with Intune. Create a Device configuration profile for Windows 10 and later – Custom OMA-URI Settings The easy way to […]
I found some things strange in my last hybrid Intune project. The Customer has a new SCCM site – installed with SCCM 2012 R2 Sp1 and upgraded to CU1. The email profile are not ot be found in the SCCM console: Screen shot from a SCCM R2 SP1 CU1 installation where the Microsoft Intune Subscriptions was […]
In the Azure Active Directory (AzureAD) Preview portal it is possible to create dynamic groups for users and devices based on attributes. In this blog post I will show how to create a dynamic group for every Windows 10 Build that has been released at this moment. First you need to find out what information […]
It is possible to create and deploy Windows Installer through MDM (*.msi) with Microsoft Intune in Azure. When managing Windows 10 as a MDM device – aka Modern Management the limitation for deploying software is for some companies an issue. But in my experience some companies can every user be under modern management and in […]
MDT 2013 Update 2 is released. http://blogs.technet.com/b/msdeployment/archive/2015/12/22/mdt-2013-update-2-now-available.aspx From TechNet blog: MDT 2013 Update 2 is primarily a quality release; there are no new major features. The following is a summary of the significant changes in this update: Security- and cryptographic-related improvements: Relaxed permissions on newly created deployment shares (still secure by default, but now also […]
This I a post about using a normal Ad user only member od Domain Users to Domain Join a Device doing OSD. First create a user called CM_DJ: Remember to set the: “User cannot change password” and “Password never expires” Now you are ready to Delegat control by using the Wizard in “Active Directory Users […]
First you need to have a KMS service up and running : See my blogpost Windows 10 KMS Active Directory Activation Then you have to Download the “Microsoft Office 2016 Volume License Pack” Now you can install the Microsoft Office 2016 Volume License Pack Click on the download file to install Select “Click here to accept the Microsoft […]
