Intune Newsletter – 21st July 2023

Welcome to a holiday special newsletter, this week coming to you from the little island of Anglesey in North Wales!

Community Content

Video Content

Microsoft Content

Community Content

We start this week with a post from Michael Niehaus looking at why after the announcement of 23H2 as an enablement package should be the push you need to migrate to Windows 11

2023 might be Windows 11’s year after all

https://oofhours.com/2023/07/13/2023-might-be-windows-11s-year-after-all/

Next, Sander Rozemuller has created a script to check for roles assigned outside PIM and send notifications to Teams

https://www.rozemuller.com/monitor-assigned-roles-outside-pim-and-sent-to-ms-teams-using-openai/

This post from Vidya M A looks at the new Entra announcements including Global Secure Access

https://www.anoopcnair.com/what-is-entra-global-secure-access/

A second post from Vidya, looking at the new MDE security settings console

https://www.anoopcnair.com/new-mde-security-settings-management-experience/

An excellent new feature in public preview now allows you to manage Intune security settings from within the Defender Security portal. Find out how in this post from Sheehan Perera

How to Enable the New Security Settings Management Feature in Defender Security Portal

https://shehanperera.com/2023/07/15/device-mgmt-in-mde-01/

This post from Jannik Reinhard demonstrates how to use Microsoft Fabric to export your Intune data to use for PowerBi reporting

Using Microsoft Fabric to export Intune data into the OneLake for PowerBi reporting

https://jannikreinhard.com/2023/07/16/using-microsoft-fabric-to-export-intune-data-into-the-onelake-for-powerbi-reporting/

If you have applications or scripts which you want your users to be install multiple times, have a look at this script from Michael Meier

Run Applications in Intune Company Portal on Demand

https://mikemdm.de/2023/07/16/run-applications-in-intune-company-portal-on-demand/

For those of you managing macOS devices, find out how to install Chrome in this post from Prajwal Desai which covers everything including detection methods

Install Google Chrome on macOS using Intune

https://www.prajwaldesai.com/install-google-chrome-on-macos-using-intune/

A second post from Prajwal looking at how to set the device name on a macOS device to the serial number

Set MacOS Device Name to Serial Number using Intune

https://www.prajwaldesai.com/set-macos-device-name-to-serial-number-intune/

Next, Peter van der Woude looks at the new Windows Driver Update functionality in Intune

Getting started with Windows driver update management

https://www.petervanderwoude.nl/post/getting-started-with-windows-driver-update-management/

Ugur Koc has released another new application, this one to fully off board devices from Intune

https://github.com/ugurkocde/IntuneOffboarding/

Find out how to enable tamper protection with Intune on your macOS devices and what it does in this post from Snehasis Pani

https://www.anoopcnair.com/enable-tamper-protection-for-macos-using-intune/

Find out all you need to know about MDE attach in this usually thorough deep-dive from Rudy Ooms

If MMP-C is what you want, all you have to do is close your eyes and enroll your device into MDE Attach V2

https://call4cloud.nl/2023/07/mmpc-mde-attach-v2-enroll-checkin-onboard/

Niklas Tinner looks at how to enable Network Authentication on your AAD/Entra ID joined devices here

https://oceanleaf.ch/enable-network-authentication-with-azure-ad-only-joined-devices-intune/

If you want to deploy Teams organisational backgrounds but don’t have Teams Premium, check out this solution from Gannon Novak

https://smbtothecloud.com/deploy-organizational-teams-backgrounds-without-teams-premium-licenses-azure-storage-account-intune-remediations/?utm_source=rss&utm_medium=rss&utm_campaign=deploy-organizational-teams-backgrounds-without-teams-premium-licenses-azure-storage-account-intune-remediations

https://smbtothecloud.com/deploy-organizational-teams-backgrounds-without-teams-premium-licenses-azure-storage-account-intune-remediations/

Damien Van Robaeys has put together another excellent Log Analytics dashboard, this one for driver inventory

https://www.systanddeploy.com/2023/07/drivers-inventory-dashboard-on-devices.html

Next, Florian Salzmann has put together a very useful remediation to keep your apps updated by checking vendor executables

https://scloud.work/en/app-update-remediation/

Learn all about Update for Business rings and how you can create intelligent ring membership in this post from Nick Benton

https://memv.ennbee.uk/posts/windows-update-phased-deployment/

This excellent post from Eric Woodruff will tell you all you need to know about Privilege Access Workstation (PAW)

Protect your privilege with PAW

https://ericonidentity.com/2023/07/17/protect-your-privilege-with-paw/

We have an in-depth post from Geir Dybbugt covering how to make the Windows kiosk mode work better for you

Hacking Windows kiosk mode – Single Intune config for multiple devices needing unique URL’s, with self-provisioning autopilot.

https://dybbugt.no/hacking-windows-kiosk-mode-single-intune-config-for-multiple-devices-needing-unique-urls-with-self-provisioning-autopilot/

Next, Dominiek Verham covers the different ways to resize a Windows 365 PC

https://techlab.blog/ways-to-resize-windows-365-cloud-pcs/

Video Content

Now onto the video content, this week starting with a demonstration on how to set Windows 365 alerts for machines in their grace period from Anusha Reddy

https://www.youtube.com/watch?v=gxwEv1Y2YKc

Matt Call has released the next part of the video series, this time looking at Intune custom roles

https://www.youtube.com/watch?v=is0y7kPiByo

This latest video from Andy Malone looks at all of the new functionality in Entra

https://www.youtube.com/watch?v=ThT3n2Yass4

The latest unpacking endpoint management video is out looking at Hybrid Join featuring Susan Taylor, Rachelle Blanchard, Jason Sandys and Steve Thomas

https://www.youtube.com/watch?v=hU9o6vv7OzA

Niklas Tinner and Jannik Reinhard discuss Intune driver update management in their latest discussion

https://www.youtube.com/watch?v=8D9lxB6KlyQ

Find out all about personal desktop auto scale in AVD from Dean Cefola

https://www.youtube.com/watch?v=MTzRShTXvcI

With the upcoming deprecation of the AzureAD PowerShell module, now is the time to switch your scripts to using Microsoft Graph SDK. John Savill explains how and why here: