Window Autopilot is getting better and better with every release of Microsoft Intune and Windows 10 build. The latest is that we can put a Autopilot payload down on the device before the OOBE and then make it a Autopilot device without collection the hardware hash for older devices or get the information from the […]
This is not a new feature – but it is new that I can be done the new Azure Portal (Codename Ibiza) https://portal.azure.com The reason for settings this up is: when a Windows 10 devices is AzureAD joined then it is also automatic enrolled in Intune as a MDM managed Windows 10 devices. This blogpost is […]
Java Download Java from – http://java.com/en/download/manual.jsp Download 32 bit and 64 bit. Install Java on a test PC. Get the java MSI files from: C:\Users\\AppData\LocalLow\Sun\Java\jre Copy the jre to the SCCM packages source Create the SCCM application: Click Next Click Next Set installation Program msiexec /i “jre1.7.0_xx.msi” AUTOUPDATECHECK=0 IEXPLORER=1 JAVAUPDATE=0 JU=0 MOZILLA=1 deployment.security.level=MEDIUM /q Properties; […]
From Intune version 1902 it is possible to deploy Office 365 ProPlus wit h a custom XML file. There are many scenarios where it makes sense not to use the default settings that are build in the Intune UI. One of the advantage is that you can use application preferences so that you are helping […]
In Windows 10 1709 there is a lot of new feature – one of them is enabling of password reset from the user login prompt. We all know of users that have been on a long weekend or a vacation the first think they do when they come back to work is to call the […]
I often get the question “How to deploy a custom set of ADMX-based policies with Intune” In this blog post I will try to describe the workflow on ADMX based policies with Intune – it does not only applies to Intune but also 3 part. MDM solutions as a part of it is how it […]
With Windows 10 we have the possibility to change Windows 10 Mobile into Windows 10 Mobile Enterprise. I can be done with a provision profile or a Intune CSP policy. I will show how it is done with a Intune CSP policy: Create a new Configuration Policy Select “Custom Configuration (Windows 10 Desktop and Mobile […]
SCCM2012 Sp1 CU3 Add support for Windows 8.1 in SCCM 2012 SP1 – With CU3 Software distribution Software update management Compliance Settings Will also support Endpoint Protection on the following OS Windows 8.1 Pro Windows 8.1 Enterprise Windows Server 2012 R2 Standard Windows Server 2012 R2 Datacenter http://blogs.technet.com/b/configmgrteam/archive/2013/09/16/support-questions-about-win-8.1-and-winsvr-2012-r2-for-configmgr-and-endpoint-protection.aspx
Last year I did a blogpost on How to deploy OneDrive Known Folder Move with Intune that uses the Intune Management Extension to deploy a PowerShell script – that one is still working and you can see all the detailed information from my blog post on Known Folder Move. I found that in production this works […]
Pointing to “manage.microsoft.com” will no longer work for enrollment – this will stop working beginning from February 11 2017. This means that if you are using the old CNAME you need to change it. Check with powershell resolve-dnsname -name EnterpriseEnrollment.osddeployment.dk -Type CNAME As you can see the EnterpriseEnrollment.osddeployment.dk is redirected to enterpriseenrollment.manage.microsoft.com – so it […]
I have upgraded a customer’s AD Connect to the new version just release – with the feature of Device Write back gone from preview to GA. (remember Device back is a AzureAD premium feature) https://azure.microsoft.com/da-dk/documentation/articles/active-directory-aadconnect-version-history/ The device write back was enable as this guide descripted https://azure.microsoft.com/da-dk/documentation/articles/active-directory-aadconnect-get-started-custom-device-writeback/ The only problem was that it was not working […]
One of the biggest issue with Intune from the beginning of modern management with the MDM stack on Windows 10 – has been software inventory. Many companies has a CMDB where they love to put in software inventory for different reasons there has been no good way other then installing a asset management solutions with […]
We are constantly trying to get more security on login other then username and password, so Multi Factor Authentication (MFA) is a good solution, MFA combined with Azure AD conditional Access it a even better way. MFA is relatively easy to implement in a organisation where the end user has a company owned mobile phone […]
Microsoft is constantly improving the features in the Intune Service – this applies also for the Conditional Access part, with the latest update for Intune in March 2018 we got some new compliance settings that we can check for. This settings will apply both for AzureAD joined devices that are MDM managed with Intune – […]
