Community Content
We start with some troubleshooting steps from Rudy Ooms investigating a bug which could stop apps from installing during Autopilot Device Prep
https://call4cloud.nl/2024/06/the-battle-of-the-local-administrator-and-autopilot-device-preparation
Rudy also has a debugging guide for Autopilot device prep
https://call4cloud.nl/2024/06/debugging-the-autopilot-device-preparation-profile
Next, Curtis Cannon runs through importing ADMX templates into Intune and how to spot if they have pre-requisite templates
https://traversecloud.co.uk/import-admx-templates-into-microsoft-intune
The PRT is a critical, but not well known part of modern authentication. Learn what it does here from Imran Awan
https://modernizingmobility.blogspot.com/2024/06/understanding-importance-of-primary.html
Michael Niehaus has been doing more experimenting with Autopilot Device Prep and we have four posts on it this week, starting with how to run an SCCM task sequence using the new ESP-less experience
https://oofhours.com/2024/06/09/running-an-sccm-task-sequence-during-apv2
Michael’s second post covers the many questions and comments from across the internet about the new functionality, well worth checking out
https://oofhours.com/2024/06/07/windows-autopilot-v2-random-chatter
And some further thoughts
https://oofhours.com/2024/06/11/autopilot-v2-my-second-thoughts
You may have noticed that the ability to set a device name during Autopilot has also disappeared. Here is a fix
https://oofhours.com/2024/06/11/setting-the-computer-name-with-apv2
Gannon Novak also looks at setting the device name using APv2 with a script here
If you want to keep your compliance policies updated with the minimum Windows version, but without the manual tasks, check out this comprehensive post from Maxime Guillemin
https://cloudflow.be/automated-windows-update-compliance-policy-in-intune
Maxime also runs through Cloud PKI setup in this part 1 of a new series
https://cloudflow.be/certificate-based-authentication-with-microsoft-cloud-pki-part-1
This post from Maxime looks at using Graph to export reports from Intune
https://cloudflow.be/microsoft-graph-api-reports-for-intune
This post from Steve Weiner is the first part of a series covering setting up the new Autopilot Device preparation functionality
https://www.getrubix.com/blog/autopilot-device-preparation-part1
And part 2 covering the user experience
https://www.getrubix.com/blog/how-to-configure-autopilot-device-preparation-part-2-user-experience
And part three looking at how the new flow works compared to V1
https://www.getrubix.com/blog/how-to-configure-autopilot-device-preparation-part-3-the-new-flow
Michael Meier has released part 2 of the time-based Entra group membership. This one layers a PowerApp on top of the code from part 1 to create a UI for admins to use
https://mikemdm.de/2024/06/09/time-based-group-membership-for-entra-devices-part-2
If you are managing devices across countries, this post from Sandy Zeng covers how to handle language and region settings for your Windows 11 devices
https://msendpointmgr.com/2024/06/09/managing-windows-11-languages-and-region-settings
Did you know Remote Help also has a web app? If not, learn about it here with Peter van der Woude
https://www.petervanderwoude.nl/post/getting-started-with-the-remote-help-web-app
Learn how to create an App attach package for AVD using PowerShell in this post from Johan Vanneuville
https://johanvanneuville.com/application/create-an-app-attach-package-using-powershell
Take your device experience to the next level with Managed Home Screen as covered here by Thomas Marcussen
https://blog.thomasmarcussen.com/enhancing-the-intune-experience-with-managed-home-screen
Next, Manish Bangia runs through configuring Autopilot device prep
https://www.manishbangia.com/windows-autopilot-device-preparation-aka-autopilot-v2-configuration
Quick off the mark, Somesh Pathak has already started testing iOS 18 and macOS 15 with Intune, find out more here
https://www.intuneirl.com/early-bird-gets-the-worm-testing-ios-18-macos-15-beta-devices-with-intune
If you aren’t using Update for Business reports in your tenant, follow this guide from Alex Durrant to get you started
https://letsconfigmgr.com/configuring-windows-update-for-business-reports
Next, Rahul Jindal shows how to block Chrome extensions on macOS using Intune
https://rahuljindalmyit.blogspot.com/2024/06/blocking-chrome-extensions-with-custom.html
Learn how to check your estate readiness for Windows 11 using inbuilt Intune reports on this post from Jonathan Lefebvre
https://www.systemcenterdudes.com/how-to-evaluate-windows-11-readiness-with-intune
If you are using Quick Assist in your environment, this remediation from Dominiek Verham will show how to deploy the icon to the users desktop
https://dominiekverham.com/using-remediations-to-deploy-a-quick-assist-shortcut-on-the-desktop
If you need to allow AVD SSO through your CA policies, why not automate it with this guide from Sander Rozemuller
https://rozemuller.com/add-windows-cloud-login-application-to-ca-automated
Use MDE and Intune to block USB devices and report on them as covered here by Tim Beer
https://timbeer.com/usb-security-using-microsoft-defender-for-endpoint
Video Content
Now onto the video content, starting with the second part of the cloud PKI series from Shady Khorshed running through why you need it and how to configure it
Steve Weiner has part 4 of the autopilot device prep videos, this time comparing the experience between Win 11 Pro and Win11 Enterprise and how to monitor your deployments
Steve also has a look at Robopack for app management
If you want to test APv2 on Hyper-V, this video from Steve will quickly get you up and running
Learn what’s new in Intune 2405 release with Nickolaj Andersen, Mattias Melkersen Kalvåg and Peter van der Woude
Chander Mani Pandey runs through Autopilot device prep in this video
The latest intune.training video is here and covers disk encryption for both Windows and macOS with Adam Gross and Steven Hosking
Next, Sujin Nelladath runs through creating mobile apps using Graph
Microsoft Content
Onto the Microsoft content with a look at all of the Intune resources available to you from Microsoft in this post from Lior Bela
There are very few blockers from going fully cloud native. Read about some of the misconceptions in this post from Harjit Dhaliwal
Find out what’s new in Autopatch with Diana Hoffman
That’s it from this week, have a great weekend!