Welcome to what is a special newsletter for me as today is the day my book is finally released after many months of hard work. If you want to learn all about automating Intune, you can find links to it here:
https://andrewstaylor.com/store/#books
Community Content
We start this weeks community content with a script and thorough instructions from Simon Skotheimsvik on how to create and use Group tags with devices enrolled using offline JSON
https://skotheimsvik.no/intune-chronicles-the-automation-secrets-of-seamless-group-tags
Next, Mattias Melkersen Kalvåg shows how to deploy M365 apps packaged as Win32 in a way to make sure the deployed app is always the latest version
https://blog.mindcore.dk/2024/01/building-m365-apps-designed-for-autopilot-and-beyond/
If you want better control over when your devices restart after an update, this script from Ľuboš Nikolíni will prove very useful!
Next, Gowdhaman Karthikeyan has put together a useful script to utilise Winget and Log Analytics for a thorough software inventory tool.
https://blogs.gowdhaman.in/intune-software-inventory-using-winget-and-log-analytics/
If you are managing macOS devices, this post from Vidya Sasidharan demonstrates how to use Remote Assistance with it
https://www.anoopcnair.com/intune-remote-assistance-for-macos-devices/
On the subject of macOS, learn how to configure an RBAC role to display the filevault recovery key with Jitesh Kumar
https://www.anoopcnair.com/intune-rbac-macos-filevault-recovery-key/
Whilst you can clean-up Intune devices, the functionality doesn’t extend into Autopilot. For that, check out this script from Niklas Tinner
https://niklastinner.medium.com/autopilot-cleanup-script-e29c98a71aa6
Learn all about the latest Windows 365 features in this post from Michael Meier
https://mikemdm.de/2024/01/14/new-windows-365-boot-features-available-for-windows-insiders/
Jon Towles also looks at the latest features for Windows 365 here, including those in preview
https://mobile-jon.com/2024/01/17/new-windows-365-boot-features-in-public-preview/
Another look at the new Windows 365 boot features, this one from Dominiek Verham
https://techlab.blog/a-first-look-at-the-new-windows-365-boot-features/
Florian Salzmann runs through Winget deployment using PSADT and Intune here
https://scloud.work/winget-deployment-with-psappdeploytoolkit-and-intune/
This post from Damien Van Robaeys looks at the log analytics API v2 and how to send custom data to it using PowerShell
https://www.systanddeploy.com/2024/01/log-analytics-v2-send-custom-data-with.html
The discovered apps functionality is a useful way to inventory your devices. Peter van der Woude drills into it more to look at how it works
https://www.petervanderwoude.nl/post/understanding-win32-app-inventory/
Intune can do a lot of things, especially with remediations, but running actions on start-up and login are sadly not available yet. If you need to do these, check out this script from Joey Verlinden
https://www.joeyverlinden.com/logon-script-for-intune-managed-devices-start-apps-actions-at-logon/
If you want to protect your Win365 access behind conditional access, learn how to access it from the AVD portal here with Jan Mulder
https://wolkenman.wordpress.com/2024/01/17/windows-365-conditional-access/
If you want more granular control over compliance grace period (hours instead of days), find out how to do so using Graph in this post from Dennis Rietveld
This post from Jon Jarvis looks at the different security baselines available for Intune
https://practical365.com/revised-security-baselines-for-microsoft-365-and-intune/
Next, Torbjorn (Mr T-Bone) Granheden covers how to manage your M365 apps using Office policies and Intune
https://www.tbone.se/2024/01/18/how-to-use-policies-for-office-apps-in-intune/
If you are using the Settings Catalog export functionality in Intune, Gannon Novak has a script here to bulk import your json files
https://smbtothecloud.com/bulk-import-intune-settings-catalog-profiles/?
Video Content
Now onto the video content, starting with a guide on moving your on-prem AppAttach file shares and FSLogix content to cloud shares with Dean Cefola
Next, Steven Weiner demonstrates how to set a lockscreen on your Windows pro licensed devices
We have a second video from Steve, this one showing how to get started with Log Analytics which is in my opinion, must have knowledge when looking at reporting (and something I need to brush up more on)
We also have the next episode of Steve’s podcast, this time joined by Jesse Weimer looking at custom reporting with Graph
We now have two videos from Chander Mani Pandey, the first of which shows how to use logic apps to export Intune reports into SharePoint
The second video runs through enrolling a macOS device into Intune
Find out all about Intune Suite (including the much anticipated IntunePivot) and Windows 365 in this video featuring Christiaan Brinkhoff, Dilip Radhakrishnan, Mike Danoski, Matt Call and Matt Shadbolt
Niklas Tinner has also started a Windows 365 series and in this first episode it shows how to get started including pre-requisites, licensing and configuring your provisioning policies
Microsoft Content
Learn how to deploy and enrol into MDE with zero touch on iOS and iPadOS devices in this post from Arnab Mitra
That’s it for this week, have a great weekend!!