Intune Newsletter – 2nd December 2022

Happy December everyone and welcome to this weeks winter Intune newsletter in what has been a busy week for content creators!

Featured Content

This weeks featured video from Dean Ellerby looks at the new Store Integration which as you’ll find, we are very excited about

Community Content

We start this week with a look at the single most complicated part of M365, Licensing. To get a better understanding, have a look at this post form Niklas Tinner

https://oceanleaf.ch/m365-license-guide/


I’m a big fan of Dynamic Groups in Azure AD, they take a lot of the admin work away from the starters and leavers process if nothing else. This post from Anoop Nair gives an excellent run-through on how they work and how to set them up.

https://www.anoopcnair.com/create-azure-ad-dynamic-groups-managing-devices-via-intune/


Next, we have two posts from Jitesh Kumar, the first showing how to fix the Namespace Missing error when uploading custom ADMX files in Intune

https://www.anoopcnair.com/intune-admx-file-upload-error-referenced/

The second post looks at the newly released Store/Winget integration in Intune, a very exciting new development!

https://www.anoopcnair.com/deploy-microsoft-store-apps-from-intune-winget/


Damien Van Robaeys has released part 7 of the excellent Log Analytics guides, this one looking at using queries to better present your data in graphs and charts

https://www.systanddeploy.com/2022/11/starting-with-log-analytics-part-7-give.html


Another look at the new Microsoft Store integration, this time from Simon Skotheimsvik

https://skotheimsvik.blogspot.com/2022/11/the-new-microsoft-store-experience.html


Global Admins are a necessary evil, but should be secured. To find out how, have read of this post from Moe Kinani

https://cloudbymoe.com/f/best-practices-to-secure-the-global-admin-accounts?blogcategory=O365


Next we have a Rudy Ooms deep-dive special, this time looking at the Autopilot hardware hash and a hidden marker which could cause you issues with certain builds/rebuilds.


If you have M365 E5 licensing, I would recommend checking out this new functionality in Microsoft Defender. To find out more and how to enable it, read this post from Johan Arwidmark


Desktop Analytics was an excellent tool for Intune admins, but it’s time has now come and it is now deprecated. To find out how to remove it from your environment and what to use instead, have a look at this guide from Mattias Melkersen Kalvåg


We are all familiar with the ESP for Autopilot devices, but by default it doesn’t display for a Win365 cloud PC. If you want to enable it to find out what’s happening on first login, read this from Dominiek Verham

https://techlab.blog/enrollmentstatuspage-for-cloud-pcs/


If you want to use custom images for your Windows 365 machines, have a look at this post from Niels Kok


If you’ve ever wanted to create a golden AVD image using PowerShell (and haven’t we all!), have a read of this from Aresh Sarkari (congratulations!)

In the second post from Aresh, you can learn how to create a custom image for Win365 machines using PowerShell


Shehan Perera has put together an extremely thorough look at identity management in Microsoft Entra including lifecycle flows and managing your admin accounts. This is well worth reading!

https://shehanperera.com/2022/11/26/entra-identity-gov-connecting-the-dots/

If you are starting on your Windows 365 journey, this second post from Shehan gives an excellent starting point to make sure you have the foundations in place first

https://shehanperera.com/2022/12/01/w365-planning-1/


If you’ve used Microsoft Graph, you’ll have come across the joys of pagination. Fortunately Jannik Reinhard has released a script to grab everything you point it at

https://jannikreinhard.com/2022/11/27/intune-mass-export-with-the-graph-report-api/


One of my favourite posts from this week comes from Michael Niehaus with a website which lists the end of life dates for pretty much anything

https://oofhours.com/2022/11/25/want-to-see-end-of-life-dates-for-well-anything/


Whilst they may be cloud machines, Win365 needs restarting as much as a physical machine and we all know what users are like! To schedule your machines to reboot using Azure Automation, have look at this guide from Joey Verlinden

https://www.joeyverlinden.com/schedule-windows-365-cloud-pc-reboots-with-azure-automation/


Now for three posts from Prajwal Desai, the first one showing how to use Intune Settings Catalog to lock down the taskbar

The second post lists all Windows 10 ADK versions including their download links

Prajwal’s third post demonstrates how to install and use the ADMX templates for Windows 10 and the settings within, especially useful when looking at ADMX imports in Intune


There are some excellent Intune community tools available, to see Florian Salzmann‘s top 5, have a look at this post.

https://scloud.work/en/top-5-intune-community-tools/


Log analytics are extremely powerful and well worth learning. If you want to ingest your own Intune data into a custom log analytics table, have a look at this post from Sander Rozemuller

https://www.rozemuller.com/route-own-intune-data-to-log-analytics-using-custom-logs/


Another look at the new MS Store integration, this time from Somesh Pathak

https://intuneirl.com/2022/12/say-hi-to-the-new-microsoft-store-in-intune/

Nathan Hutchinson has looked at everything related to Enterprise Mode site lists in this post

https://www.natehutchinson.co.uk/post/how-to-manage-your-microsoft-edge-enterprise-cloud-site-list-like-a-boss


If you’ve ever looked at Update Compliance and wanted just a bit more, try these thorough custom reports from Trevor Jones

https://docs.smsagent.blog/microsoft-endpoint-manager-reporting/windows-update-for-business-custom-reporting


Now onto this weeks video content, starting with the next part of the MDE tutorial series from Harvansh Singh. This episode looks at onboarding your devices into MDE using Intune


The latest episode from Intune.Training is now live, this one looks at all things Autopatch. If you aren’t using Autopatch, it’s well worth checking out. Featuring Adam Gross, Steven Hosking and this weeks special guest Adam Nichols


The new video from the MSEndPointMgr team looks at everything KQL featuring Mattias Melkersen Kalvåg, Michael Mardahl, Rod Trent and Jan Ketil Skanke


Microsoft Content

Now onto the Microsoft content, starting this week with a Microsoft Mechanics video looking at the new Store for Business/Winget integration with Jason Githens


Also on the subject of the new integration, these are group policies that are well worth keeping in mind as you start to transition

https://learn.microsoft.com/en-us/mem/intune/apps/store-apps-microsoft#store-group-policies-restrictions


Autopatch now has new quality update reports which are worth checking out

https://learn.microsoft.com/en-us/windows/deployment/windows-autopatch/operate/windows-autopatch-wqu-reports-overview


If you want to learn more about improving your security posture, check out this new learning module

https://learn.microsoft.com/en-us/training/modules/m365-advance-organization-security-posture/


The final content for this week is a guided simulator for deploying machines using Autopilot, a complete end-to-end look at everything involved including the end user experience

https://regale.cloud/Microsoft/viewer/1339/deploying-windows-11-with-autopilot/index.html#/0/0

Leave a Comment