With the release on Microsoft Edge Insider release for testing – I started by testing the deployment of the new Edge from Intune. The new Edge has become my favorite browser already, it is fast using less system resources and having a good user experience. Note: Microsoft Edge insider is in preview and is not […]
In a on-premise Active Directory a normal user can read the directory by default using a LDAP browser. We put firewall and other security measure in place so that it is impossible to reach from the outside. When we sync all our users to Azure Active Directory – I often see that no security measure […]
When we are using modern management on our devices that are running Windows 10 – then we are updating them with WUfB (Windows Update for Business), and that is a good thing, we can manage it so we have control over when a Windows 10 device is getting quality updates and feature update by creating […]
When you are AzureAD joining a Windows 10 device that are Hardware Security Test Interface (HSTI) also known a InstanceGo the device will automatic be Bitlocker encrypted with XTS-AES 128 With Windows 10 1809 you can choose which encryption algorithm to apply automatic BitLocker encryption to capable devices. This allows the encryption algorithm (and other […]
Back in July i did a blog post on how to deploy Edge Dev with Intune – that guide is also working for Edge Beta. This is a short blog post on how to set Edge Beta as the default browser in Windows 10 with Intune. When starting testing the Edge beta app in your […]
In a on-premise Active Directory a normal user can read the directory by default using a LDAP browser. We put firewall and other security measure in place so that it is impossible to reach from the outside. When we sync all our users to Azure Active Directory – I often see that no security measure […]
Using security keys like FIDO2 keys when you are logging in to a service helps you go password-less. Security keys is not only for end user, it can also be for administrators that are logging into a web service, in this case Microsoft Endpoint Manager admin center. In this blog post I will walk you […]
In a on-premise Active Directory a normal user can read the directory by default using a LDAP browser. We put firewall and other security measure in place so that it is impossible to reach from the outside. When we sync all our users to Azure Active Directory – I often see that no security measure […]
In a on-premise Active Directory a normal user can read the directory by default using a LDAP browser. We put firewall and other security measure in place so that it is impossible to reach from the outside. When we sync all our users to Azure Active Directory – I often see that no security measure […]
Window Autopilot is getting better and better with every release of Microsoft Intune and Windows 10 build. The latest is that we can put a Autopilot payload down on the device before the OOBE and then make it a Autopilot device without collection the hardware hash for older devices or get the information from the […]
With the release of Microsoft Intune 1901 we finally got MDM security baseline, the first time Microsoft talked public about this was at Ignite 2018, everybody I have talked to since has been waiting for this feature, in the waiting time we have been using other security baseline like the one from NCSC. When doing […]
With the release of Microsoft Intune 1901 we finally got MDM security baseline, the first time Microsoft talked public about this was at Ignite 2018, everybody I have talked to since has been waiting for this feature, in the waiting time we have been using other security baseline like the one from NCSC. When doing […]
Microsoft has released information on Windows Autopilot – it is the automation process that was missing when we do cloud only management of Windows 10 devices with Azure Active Directory and Intune. Some of the benefits of Windows AutoPilot are: Intune can push policies, settings, and configuration to the device, and install Office 365 and […]
Starting with Windows 10, version 1803, the device name is no longer collected by default and requires a separate opt-in. It shows in Windows Analytics Upgrade Readiness that the computer does not have a name after upgrading to Windows 10 1803. The way to fix it with Intune is to deploy a PowerShell Script that […]
