Community Content
We start this week with a useful automation for those of you running Lenovo devices from Damien Van Robaeys. This script will export the BIOS status of your devices and report if they need an update
https://www.systanddeploy.com/2024/04/export-bios-status-uptodate-or-not-for.html
We are all used to update rings for our Windows devices, but what about those running macOS? Fortunately Nick Benton has you covered in this post
https://memv.ennbee.uk/posts/macos-updates-phased-deployment
Next, learn all about device filters in Intune with Daniel Keer
https://thedxt.ca/2024/04/intune-device-filters
Jan Mulder looks at Copilot for Intune and what functionality it offers in this first part of a new series
https://wolkenman.wordpress.com/2024/04/09/microsoft-copilot-in-intune-part-i
The Intune Security Baseline has finally been updated to use Settings Catalog (although be careful with non-English Operating Systems). Find out more here from Tim Beer
https://timbeer.com/2024/04/09/intune-baseline-23h2-as-settings-catalog
If you don’t want your mobile devices using Copilot for Edge, Rahul Jindal has a guide here with the policies you need to configure within Intune
https://rahuljindalmyit.blogspot.com/2024/04/manage-copilot-in-edge-microsoft-365.html
Another addition to the new baselines, it now recommends settings based on similar organizations. To find these insights using Graph (and why wouldn’t you!), grab this script from Sander Rozemuller
https://www.rozemuller.com/monitor-security-baseline-insights-recommendations
Niall Brady builds on the excellent script to remove devices from Autopilot in part 1 and extends to deploy as a Win32 app which users can trigger themselves
https://www.niallbrady.com/2024/04/06/pc-buyback-for-windows-autopilot-devices-part-2
Rudy Ooms does some more digging around with Config Refresh, this time enabling it manually
https://call4cloud.nl/2024/04/2024-03-update-config-refresh
Rudy has also found a new option in Device Query which you can read about here
Similar to CIS baselines for Windows, for macOS admins, check out mSCP here with Somesh Pathak
https://www.intuneirl.com/secure-contain-protect-your-data-deploy-mscp-with-intune
MAM for Windows is an excellent addition, when it works. If you’re hitting issues with your setup, follow this troubleshooting guide from Peter van der Woude
https://www.petervanderwoude.nl/post/troubleshooting-mam-for-windows
Finding your Intune assignments just became a lot easier with this report from Trevor Jones
https://smsagent.blog/2024/04/08/intune-assignments-report
Next, Thomas Marcussen looks at all of the new features in both Windows 365 Boot and Switch
https://blog.thomasmarcussen.com/windows-365-boot-and-windows-365-switch-latest-features
If for some reason you need to decrypt Bitlocker devices managed by Intune, use this script from Gannon Novak
https://smbtothecloud.com/disable-bitlocker-on-existing-devices-with-intune
If you have an NFC enabled Yubikey to hand, did you know you can use it to sign into your W365 machine? Learn how in this post from Dominiek Verham
https://techlab.blog/signing-into-a-cloud-pc-from-windows-365-boot-using-a-nfc-capable-security-key
Whilst not strictly Intune related, I am sure many of you are being asked about M365 copilot from work colleagues. Fortunately, Mattias Melkersen Kalvåg has a beginners guide here
https://blog.mindcore.dk/2024/04/ai-writing-assistant-a-beginners-guide-into-microsoft-365-copilot
You really want to make sure you are locking down your Windows devices, but there will be admins who require elevated privileges. Jon Towles looks at how to lock down the permissions here
https://mobile-jon.com/2024/04/10/securing-local-administration-with-microsoft-intune
Video Content
Now onto the video content, starting with a look at the incredible DeployIntune.com tool which you should definitely be using with Steven Weiner
Steve also runs through how to grab app usage in Intune
We also have the latest podcast, this one featuring Andy Jones
We also have a look at what’s new in Intune 2401 and 2402 releases with Nickolaj Andersen and Mattias Melkersen Kalvåg
Andy Jones has released the second part of a video series running through onboarding users automatically with Power Automate with a full demo
We also have the latest Windows in the cloud video with Christiaan Brinkhoff, Mark Florida and Michael Raschko. This episode looks at Windows Autopatch and the newly announced Windows 10 Extended Security Updates and how Windows 365 can help
Microsoft Content
And onto the Microsoft content with a full new season of Tackling Tech videos from Harjit Dhaliwal with interviews with many people across Microsoft and the community. Well worth checking out!
We also have the latest skilling snack looking at everything around Entra joined devices from Jason Sandys
That’s all for this week, have an amazing weekend!
