Since the release in 2017 of Windows Autopilot we’ve been able to provision devices using cloud technologies and joining them to Azure Active Directory. Organizations have shown great interest in Autopilot but one of the deployment blockers have been that they can’t perform a traditional Active Directory join. This is now changing when Microsoft is […]
Since the release in 2017 of Windows Autopilot we’ve been able to provision devices using cloud technologies and joining them to Azure Active Directory. Organizations have shown great interest in Autopilot but one of the deployment blockers have been that they can’t perform a traditional Active Directory join. This is now changing when Microsoft is […]
Since the release of Windows 10, it has been common for organization to try and reduce the footprint of built-in apps (or default apps) in their reference images, or even during bare-metal deployment. Over the years, the community has provided several solutions on how to accomplish this including myself. During this time, I’ve attempted to […]
You have probably ready the excellent write-up from Sandy on how to setup CO-Management already, but since CB 1806 there is a simpler method for implementing this without any need for PKI or certificates on-premises instead you can use Azure AD for client authentication. If you are using PKI client authentication certificates, this post is […]
At first, happy new year 2019 to you all! I have been thinking what topic would be my first blog post of year 2019, maybe something about ConfigMgr or Intune? Turns out, neither! In these two days, I have been make a idle notification/action tool, because I have some needs log off user from machine […]
The new Intune Win32 app management is a great way to deploy Win32 apps with Microsoft Intune. Imagine you have a kind of source share for all the .intunewin files you have created. At some point in time you like to modify a package but you do not have the source files right now, only the .intunwin […]
If you are in the process of migrating to modern management and are used to the on-premise world, things can be a bit daunting at first when getting familiar with where to set settings in the Intune portal. This post is to help those making this move, with practical examples of what the different methods […]
In part two of this multi-series blog on managing devices with Microsoft Intune, we will look at how to apply setting using the configuration service provider (CSP). Series Links: Managing Windows 10 with Microsoft Intune – Part 1 (MDM Profiles) Managing Windows 10 with Microsoft Intune – Part 2 (CSP Policies) Managing Windows 10 with […]
Windows Analytics provides a key component in a modern managed environment. If we use Windows Update for Business we have no way of monitoring key performance metrics of our environment without Windows Analytics. Windows Analytics is based on an Azure Log Analytics instance which provides three key solutions. Update Compliance to monitor Quality Updates, Features […]
In the final part of the series, we will look at the newest means of controlling settings, Administrative Templates (ADMX). We will also look at working around some limitations with exported pre-created group policies. Series Links: Managing Windows 10 with Microsoft Intune – Part 1 (MDM Profiles) Managing Windows 10 with Microsoft Intune – Part […]
Shared PC mode is very useful feature when building lock down device, most useful setting that I like is restrict access to local storage, there are other main features as well. Account Models Account management Local Storage Power Policy Sleep time out Sign in when PC wakes Maintenance policy Education Policies Fast first sign in […]
For earlier posts, please find them here: Building lock down device – Part 1 – (Keyboard Filter) Building lock down device – Part 2 (Shell Launcher) Building lock down device – Part 3 (Shared PC mode) Last year I wrote a post about Create Windows 10 Kiosk devices using Microsoft Intune – multiple apps, When […]
Since the release of Windows 10, it has been common for organization to try and reduce the footprint of built-in apps (or default apps) in their reference images, or even during bare-metal deployment. Over the years, the community has provided several solutions on how to accomplish this including myself. During this time, I’ve attempted to […]
When testing and implementing Windows Autopilot as your provisioning solution for Windows 10 devices, you need to import the device hash including other values into the Autopilot service. This can be done through the Intune portal by uploading a CSV file that has been gathered from the device in question or multiple devices depending on […]
Ever since the first public announcement of Desktop Analytics back at Microsoft Ignite in September 2018, companies have been asking for this cloud service for a while now and it’s finally here (although in Public Preview). In this blog post we’re going to have a look at how we can setup and connect ConfigMgr with […]
Recently I was at a customer site, where several people where deploying Windows 10 devices and Hybrid enrolling them in Intune MDM via GPO. However they sometimes struggled with keeping track of when the computers where successfully enrolled with Intune, and had begun policy provisioning. We had already setup notifications in Microsoft Teams, for computers […]
As for many organizations, it’s an extremely common requirement to be able to configure the local Windows Firewall on any given in terms of adding specific rules. Up until today, there’s been no built-in way to manage these configuration requirements other than resorting to custom PowerShell script deployed using the Intune Management Extension. However, this […]
WIM Witch is a utility that can be used to update and modify WIM files for Windows deployment scenarios. It allows the WIM to be patched, drivers to be applied, in-box applications to be removed, and .Net 3.5 binaries to be injected. It also supports the ability to inject an Autopilot configuration file into the […]
For a modern workplace these days, Microsoft is enabling provisioning of devices without the need of managing the image that resides on the devices. With this new way of managing devices from a provisioning perspective, previous methods that administrators used to leverage to get a device into a desired state become obsolete. For provisioning a […]