When you are AzureAD joining a Windows 10 device that are Hardware Security Test Interface (HSTI) also known a InstanceGo the device will automatic be Bitlocker encrypted with XTS-AES 128 With Windows 10 1809 you can choose which encryption algorithm to apply automatic BitLocker encryption to capable devices. This allows the encryption algorithm (and other […]
Back in July i did a blog post on how to deploy Edge Dev with Intune – that guide is also working for Edge Beta. This is a short blog post on how to set Edge Beta as the default browser in Windows 10 with Intune. When starting testing the Edge beta app in your […]
In a on-premise Active Directory a normal user can read the directory by default using a LDAP browser. We put firewall and other security measure in place so that it is impossible to reach from the outside. When we sync all our users to Azure Active Directory – I often see that no security measure […]
Using security keys like FIDO2 keys when you are logging in to a service helps you go password-less. Security keys is not only for end user, it can also be for administrators that are logging into a web service, in this case Microsoft Endpoint Manager admin center. In this blog post I will walk you […]
In a on-premise Active Directory a normal user can read the directory by default using a LDAP browser. We put firewall and other security measure in place so that it is impossible to reach from the outside. When we sync all our users to Azure Active Directory – I often see that no security measure […]
In a on-premise Active Directory a normal user can read the directory by default using a LDAP browser. We put firewall and other security measure in place so that it is impossible to reach from the outside. When we sync all our users to Azure Active Directory – I often see that no security measure […]
Window Autopilot is getting better and better with every release of Microsoft Intune and Windows 10 build. The latest is that we can put a Autopilot payload down on the device before the OOBE and then make it a Autopilot device without collection the hardware hash for older devices or get the information from the […]
With the release of Microsoft Intune 1901 we finally got MDM security baseline, the first time Microsoft talked public about this was at Ignite 2018, everybody I have talked to since has been waiting for this feature, in the waiting time we have been using other security baseline like the one from NCSC. When doing […]
With the release of Microsoft Intune 1901 we finally got MDM security baseline, the first time Microsoft talked public about this was at Ignite 2018, everybody I have talked to since has been waiting for this feature, in the waiting time we have been using other security baseline like the one from NCSC. When doing […]
Microsoft has released information on Windows Autopilot – it is the automation process that was missing when we do cloud only management of Windows 10 devices with Azure Active Directory and Intune. Some of the benefits of Windows AutoPilot are: Intune can push policies, settings, and configuration to the device, and install Office 365 and […]
Starting with Windows 10, version 1803, the device name is no longer collected by default and requires a separate opt-in. It shows in Windows Analytics Upgrade Readiness that the computer does not have a name after upgrading to Windows 10 1803. The way to fix it with Intune is to deploy a PowerShell Script that […]
Microsoft has released information on Windows Autopilot – it is the automation process that was missing when we do cloud only management of Windows 10 devices with Azure Active Directory and Intune. Some of the benefits of Windows AutoPilot are: Intune can push policies, settings, and configuration to the device, and install Office 365 and […]
Last year I did a blogpost on How to deploy OneDrive Known Folder Move with Intune that uses the Intune Management Extension to deploy a PowerShell script – that one is still working and you can see all the detailed information from my blog post on Known Folder Move. I found that in production this works […]
Intune, OMS, Uncategorized, Windows 10 How to setup Update Compliance (Preview) February 10, 2017 — 3 Comments AZUREAD, EMS, Uncategorized How to use Windows 10 E3 from CSP September 25, 2016 — 4 Comments EMS, Uncategorized Intune – What is MDM authority – and who to “Reset mobile device authority” September 13, 2016 — 1 Comment AZUREAD, […]
