There are many ways to enrol Windows devices into Intune, each works slightly differently and some work better than others depending on your situation. This post aims to run through each, how to use them and when to use them. We all know how often the Entra and Intune portals change so if you are … Read more
I am very excited to announce the launch of EUCToolbox.com where you can find all of my SaaS apps to work alongside Intune and take your management further. https://euctoolbox.com The best part, you can access everything for $99 per month via the GitHub Sponsor program It includes: Deploy Intune – Sponsored A new look to … Read more
I have just published an update to the get-windowsautopilotinfocommunity PowerShell script available here: https://github.com/andrew-s-taylor/WindowsAutopilotInfo/blob/main/Community%20Version/get-windowsautopilotinfocommunity.ps1 Or from the PS Gallery This new version has options to work with the new Autopilot Device Identifier functionality: New parameter “-identifier” tells it to use the new functionality and not the hash Thie can be used with either -online or … Read more
Introduction Packaging, deploying and updating applications can be hugely time consuming, especially when trying to keep on top of the latest zero-day exploit in your apps (I’m looking at you Chrome!) Fortunately there are now a handful of package managers available to take away this pain, especially useful when you have multiple customers with largely … Read more
Moving to a fully managed Intune/Autopilot/Entra ID setup is not an overnight task, it needs careful planning and migration, no-one is expecting you to wipe every device and instantly move to Autopilot, that simply isn’t realistic for larger organisations. That’s not to say give up now and don’t bother, especially with Windows 10 EOL looming … Read more
Picture the scene, you have developed a remediation to do some sort of device magic involving Graph API and device. Then you find out that whilst you can absolutely add app registration secrets in your remediation, they are displayed in plain text on the device, certainly not an ideal situation! Fortunately there is a solution … Read more
If you have ever used the original GitHub selection of PowerShell Intune Samples from Microsoft at the URL below, it will have included a hard-coded application registration (multi-tenant) which will be removed from the Microsoft tenant on 1st April and at that point your scripts will stop working. https://github.com/microsoftgraph/powershell-intune-samples How do I know if I … Read more
Whilst I have many scripts which run in Azure runbooks (some are designed to do so), I’ve never actually covered how to setup your first automation account to use with Graph so now is the time to sort it! Pre-requisites You’ll need an Azure subscription, pay-as-you-go is fine as nothing in this will acrue costs. … Read more
There have been plenty of posts covering the new Enterprise App Management functionality in the Intune suite, but I’ve now had a chance to look at what’s going on within the API and more importantly, how I can automate it! This didn’t make the cut-off for my book, but if there is a second edition, … Read more
If you deal with Teams Rooms devices, you will no doubt have come across device identifiers as a way of specifying certain devices to enroll as corporate rather than personal. This post won’t cover what they are or how to manually add them as that is well covered on the Microsoft site: https://learn.microsoft.com/en-us/mem/intune/enrollment/corporate-identifiers-add Instead we … Read more