Intune Newsletter - 2nd February 2024

Welcome to this weeks newsletter, your place to catch up on all things Intune, Entra and more! It’s a bumper one this week with lots of Intune suite news.

Community Content
Video Content
Microsoft Content

Community Content

We start this week with a look at another new Windows 365 feature in public preview, this time it’s shared mode for Win365 boot from Dominiek Verham

Windows 365 Boot: Shared mode

https://techlab.blog/windows-365-boot-shared-mode/

Dominiek also looks at the other preview functionality, dedicated mode

Windows 365 Boot: Dedicated mode

https://techlab.blog/windows-365-boot-dedicated-mode/

Next, Peter van der Woude looks at IME logs, what’s in them and how to work with them

Getting familiar with the Intune Management Extension log files

https://www.petervanderwoude.nl/post/getting-familiar-with-the-intune-management-extension-log-files/

Niall Brady and Paul Winstanley have added a new post in their series covering Windows 365, this one looking at dedicated boot

A quick look at Windows 365 Boot dedicated mode

https://www.niallbrady.com/2024/01/29/a-quick-look-at-windows-365-boot-dedicated-mode/

You may have noticed it is difficult to deploy desktop shortcuts to Windows store apps (Appx and MSIX), Florian Salzmann has a script here to sort that for you!

https://scloud.work/create-desktop-shortcuts-for-windows-apps/

If you are considering security baselines, or haven’t yet deployed them, this post from Shehan Perera is well worth checking out

Device Hardening with Intune Security Baseline for Windows Policy

https://emsroute.com/2024/01/27/intune-security-baseline-1/

Shehan has also written this helpful post to rapidly onboard devices into MDE

How a Synthetic Registration in Entra ID Can Protect the Devices ASAP with Defender for Endpoint?

https://emsroute.com/2024/02/01/managed-by-mde-01/

A third post from Shehan, this time looking at Enterprise app management

Microsoft Intune Enterprise App Catalog is Here!

https://emsroute.com/2024/02/02/microsoft-intune-enterprise-app-catalog-is-here/

If you’re having any autopilot issues, it could be a Windows update as covered here by Michael Niehaus

Autopilot randomly not working? Perhaps KB5033055 is to blame.

https://oofhours.com/2024/01/26/autopilot-randomly-not-working-perhaps-kb5033055-is-to-blame/

We have a second post from Michael with an update to the excellent Autopilot branding script

Autopilot branding app improvements

https://oofhours.com/2024/01/31/autopilot-branding-app-improvements/

The latest Windows 11 build can automatically create an account for LAPS to save scripts or policies which error. If you want to disable it, follow this guide from Daniel Bradley

How to Enable Automatic Account Creation for LAPS in Intune

https://ourcloudnetwork.com/how-to-enable-automatic-account-creation-with-laps-in-intune/

We have a second post from Daniel this week showing how to deploy apps with the new Enterprise App Management which has gone GA for those with Intune Suite

How to Deploy Apps from the Enterprise App Catalog In Intune

https://ourcloudnetwork.com/how-to-deploy-apps-from-the-enterprise-app-catalog-in-intune/

Michael Meier also looks at the new Enterprise App catalog functionality here

Enterprise App catalog now available in Intune Suite

https://mikemdm.de/2024/02/01/enterprise-app-catalog-now-available-in-intune-suite/

If you’re managing macOS devices, the Mac Evaluation Utility could prove useful as described here by Somesh Pathak

https://www.intuneirl.com/uncover-the-secrets-of-appleseed-part-iii-mastering-the-tools/

Thomas Marcussen has found an issue with another windows update which could cause issues with SSO

User is required to permit SSO

https://blog.thomasmarcussen.com/user-is-required-to-permit-sso-windows-11/

Jannik Reinhard has been experimenting with device enrollment and has potential found a way to re-enrol them without needing to wipe

Reenrol devices without wipe

https://jannikreinhard.com/2024/01/29/reenrol-devices-without-wipe/

If you have users who need to RDP into their machines, but don’t want to allow others to do so, have a look at this script from Jörgen Nilsson

https://ccmexec.com/2024/01/enable-rdp-access-only-to-the-enrolled-by-user-in-windows-using-intune/

With the release of the LAPS account creation in the latest canary builds, Rudy Ooms has gone digging to find out how it all works, many flow charts within…

Windows LAPS Under the Hood: Automatic Account Management

https://call4cloud.nl/2024/01/windows-laps-under-the-hood-automatic-account-management/

Rudy also has a deep dive into the new Device Query functionality to see how it all works here

Device Query: A Mad Max Intune Suite Feature

https://call4cloud.nl/2024/02/device-query-a-mad-max-feature/

A third post from Rudy, this time troubleshooting device query

Five Push Notifications at Device Query

https://call4cloud.nl/2024/02/five-push-notifications-at-device-query/

If you’re one of those with issues installing Windows updates due to recovery partition sizes, Nick Benton has instructions here on how to fix it using remediations

https://memv.ennbee.uk/posts/winre-parition-resize-kb5034441/

Learn how to use Group Policy Analytics to assist in your cloud migration in this post from Niklas Rast

Transitioning from Group Policy Objects to Intune Configuration profiles: A modern approach to Client management

https://niklasrast.com/2024/02/01/transitioning-from-group-policy-objects-to-intune-configuration-profiles-a-modern-approach-to-client-management/

We also have Device Query now in GA for Intune suite users which may look familiar to those who use (or used) CMPivot. Learn all about it here from Chris Hudson

https://www.threesixtythrive365.com/post/intune-device-query-intune-advanced-analytics

Joost Gelijsteen also tests the new Device Query functionality in this post

Intune Device query

https://joostgelijsteen.com/intune-device-query/

If you allow BYOD, MAM is essential to protecting your data. This post from Tom Machado runs through configuring it and the end user experience

Intune MAM Policies : The Key to Protecting Data on Unmanaged Devices

https://poemtomdm.fr/2024/02/01/intune-mam-policies-the-key-to-protecting-data-on-unmanaged-devices/

Learn how to deploy power plans using remediations in this post from Trevor Jones

Deploying a Custom Power Plan with Intune Remediations

https://smsagent.blog/2024/02/01/deploying-a-custom-power-plan-with-intune-remediations/

The latest insider build also includes support for Config Refresh. This post from Nicklas Olsen shows how to configure it

https://www.learnintune.net/config-refresh/

Next, Peter Klapwijk has a script to automatically set the time zone during Autopilot OOBE

Automatically configure the time zone (during Autopilot enrollment)

https://www.inthecloud247.com/automatically-configure-the-time-zone-during-autopilot-enrollment/

With the many new releases for the Intune suite, Niklas Tinner runs through exactly what is included now

https://oceanleaf.ch/unboxing-the-intune-suite/

Video Content

Now onto the video content, starting with a look at how to handle conflicts when using Apple Business Manager federation from Dean Ellerby

https://www.youtube.com/watch?v=mYZyjxSjNmY

Next, Steven Weiner extends the series looking at the PowerShell SDK, this one covering invoking web requests.

https://www.youtube.com/watch?v=ccwqYg4NxUM

Steve’s second video shows how to make a POST call in Graph to create items within Intune/Entra

https://www.youtube.com/watch?v=C2ldqZD8JXI&feature=youtu.be

Putting everything learned from the previous videos together, Steve demonstrates how to use these new skills to create a script to cleanup primary users

https://www.youtube.com/watch?v=DgZhzjHBzik

Steve is joined by Dominick Fidotta to discuss Intune macOS management in the latest podcast

https://www.youtube.com/watch?v=Xti6-6KrWQ8

The latest unpacking endpoint management episode is here featuring Clay Taylor, Rachelle Blanchard, Steve Thomas and Danny Guillory Jr. This one covers zero trust, the secure future initiative and more