Community Content
We start this week with a look at ambient authentication in Microsoft Edge, what it is and how to configure it using Intune from Abhinav Rana
https://www.anoopcnair.com/ambient-authentication-for-inprivate-and-guest-intune/
After the demise of Windows Information Protection (WIP), there has been a gap when it comes to managing your Windows BYOD machines using Intune. Fortunately MAM for Windows Edge is now here and you can find out how to configure it in this post from Peter van der Woude
https://www.petervanderwoude.nl/post/getting-started-with-mobile-application-management-for-windows/
Ákos Bakos has added a 10th post on the series covering OSD Cloud (if you haven’t read the others, I would recommend them!). This one looks at how to automate the whole build process using OSDCloud and PowerShell
OSDCloud #10 – full automation flow – Ákos Bakos (akosbakos.ch)
If you are just starting out on your Intune journey, keep an eye on this blog series from Florian Salzmann
https://scloud.work/en/introduction-to-microsoft-intune/
Next, find out how Windows 365 provdes up-to-date computing in this post from Thomas Marcussen
https://blog.thomasmarcussen.com/windows-365-always-up-to-date-computing-for-your-business/
For those of you managing macOS devices, find out how to deploy custom configuration using Apple Configuration and Intune from Tom Machado
https://poemtomdm.fr/2023/07/21/secure-macos-devices-with-custom-configuration-profiles-and-intune/
A second post from Tom, this one covers deploying un-managed apps to macOS devices
https://poemtomdm.fr/2023/07/28/deploy-un-managed-macos-applications-with-intune/
Part three of the series looking at modern endpoint management from Simon Hartmann Eriksen is now out, this time looking at evergreen IT, what it is and how to achieve it.
https://www.simsenblog.dk/2023/07/21/future-client-zero-trust-pt3/
The ability to run remediations on demand is a game-changer in Intune (please can we have them on Business Premium though!). Find out how to run them on demand in this post from Torbjorn (Mr T-Bone) Granheden
https://www.tbone.se/2023/07/21/run-intune-remediations-on-demand-for-windows-devices/
We have a useful script from Christopher Mogis to restrict or allow users rights on the C-drive which may be of use.
https://www.ccmtune.fr/2023/07/how-to-limit-rights-on-c-drive-for.html
Next, Lewis Barry looks at Autopilot and Intune for those thinking of making the transition to modern management with some tips to get you started
https://conditionalaccess.uk/let-autopilot-and-intune-do-the-work/
If you want to restrict users access to Graph with Powershell, this post from Daniel Bradley should help
https://ourcloudnetwork.com/protect-microsoft-graph-powershell-logins-with-conditional-access/
A quick post from Rudy Ooms covering what MMP-C is/does and why it is so useful for device management
https://call4cloud.nl/2023/07/the-treasure-of-the-mmp-c-madre/
A second post from Rudy, this one with a fix if you are experiencing issues with silent bitlocker encryption:
https://call4cloud.nl/2023/07/0x80072f8f-a-bitlocker-odyssey/
Find out all you need to know about driver update management in this post from Jannik Reinhard
https://jannikreinhard.com/2023/07/23/get-started-with-intune-driver-update-management/
If you need to add or remove the enrolled user from admins on an Autopilot managed device, try this script from Berkant Kucuksolak
https://berkihub.com/add-or-remove-enrolled-user-as-local-admin
For those of you managing AVD environments, this post from Dominiek Verham looks at the new custom image template functionality in preview:
https://techlab.blog/using-custom-image-templates-to-create-and-update-avd-images/
Whilst not strictly Intune related, if you are a heavy PowerShell user, this post from Harm Veenstra looking at out-consolegridview and F7 history will help out!
https://powershellisfun.com/2023/07/26/powershell-out-consolegridview-and-f7history/
Find out how to use Defender for Endpoint and Defender for Apps to block unsanctioned apps in this post from Jeffrey Appel
Find out how to deploy Intel ME updates in Intune here from Philip Jorgensen
https://blog.lenovocdrt.com/#/2023/update_intel_mefw
There have been some exciting new improvements to Windows 365 as covered here by Niall Brady
Next, Somesh Pathak looks at your options for updating Office apps on macOS
Find out how to deploy custom wallpaper to macOS devices in this post from Snehasis Pani
https://www.anoopcnair.com/set-wallpaper-in-macos-using-intune/
Video Content
Now onto the video content, starting with a look and demo of mobile application management for Edge from Dean Ellerby
This video from Chander Mani Pandey covers the back-end process used when deploying drivers using Intune
After the big rename, find out more about the Entra portal in this video from Dean Cefola
The latest Windows 365 AMA is live and this one looks at Frontline, featuring Colby Hanley, Go Komatsu and Donna Ryan
Microsoft Content
We start with a must-view, the 2307 updates:
Some exciting news for mobile devices. Samsung and Microsoft can now offer hardware backed attestation to further protect your devices. Find out more in this post from Michael Wallent
Ramya Chitrakar looks in details at the new features in 2307 including the very exciting ability to uninstall apps from Company Portal!
The latest skilling snack is now available and comes from Chris Morrissey with key links to Microsoft information for Windows IT Pros
That’s all for this week, have a great weekend!
