Welcome back, or if this is your first newsletter, welcome! Plenty of exciting content for you to learn about this week so lets get started…
Community Content
We start this week with a guide on using Device query from Peter van der Woude including some useful queries to get you started
https://www.petervanderwoude.nl/post/getting-started-with-device-query/
This post from Abhay Patil uses Power Automate to upload a hardware hash to Intune via simply sending an email to a shared mailbox
https://www.anoopcnair.com/power-automate-to-import-autopilot-devices-hash/
Next, Joost Gelijsteen runs through troubleshooting steps when dealing with Windows updates, including devices which are also GPO managed
https://joostgelijsteen.com/troubleshooting-windows-updates-wufb/
Damien Van Robaeys uses Logic Apps here to send a teams message with the top 20 devices experiencing BSOD
https://www.systanddeploy.com/2024/02/export-top-20-intune-devices-with-bsod.html
Sometimes you need an app or config to only apply to net new devices, but up until now that involved creating Group tags which can become unmanageable. Fortunately Michael Meier has an automation script here which will create an Entra group for devices enrolled after a particular date
https://mikemdm.de/2024/02/11/entra-id-group-for-intune-devices-enrolled-after-a-given-date/
Next, Davide Salsi looks at what Security Copilot can do in Intune
https://emm-blog.com/2024/02/10/security-copilot-ai-in-endpoint-management/
This script from Gowdhaman Karthikeyan gives an easy to read report of where your assignment filters are being used
https://blogs.gowdhaman.in/intune-assignment-filters-summary-report/
You can now force Filevault during macOS setup in Intune. Find out how here with Somesh Pathak
https://www.intuneirl.com/security-without-sweat-enabling-filevault-during-macos-setup/
This post from Torbjorn (Mr T-Bone) Granheden looks at cleaning up inactive Intune devices and also a script to handle Entra devices
https://www.tbone.se/2024/02/09/cleaning-up-inactive-intune-and-entra-id-devices/
If you are managing shared devices, this post and requirements script from Jörgen Nilsson will help with app deployment
If you want to group your devices by user department, check out this guide and script from Remy Kuster
Thomas Marcussen compares Windows 365 and Dev boxes in this post
https://blog.thomasmarcussen.com/windows-365-cloud-pc-and-microsoft-dev-box-a-detailed-comparison/
If you want to deploy custom backgrounds to the new Teams client, follow this guide from Florian Salzmann
https://scloud.work/new-teams-virtual-background-with-intune/
Next, Niklas Rast looks at how you can block external USB access using Intune
For those of you managing macOS devices, this post from Nick Benton includes shell scripts for deploying custom Teams backgrounds for both new teams and the older one
https://memv.ennbee.uk/posts/macos-teams-new-backgrounds/
If you are enrolling iOS devices, this post from Gannon Novak will help if you hit a passcode required error
https://smbtothecloud.com/ios-mam-error-device-passcode-required/
Johan Vanneuville covers creating and updating your MSIX AppAttach packages for AVD here
https://johanvanneuville.com/application/how-to-create-and-update-app-attach-packages/
Next, Jon Towles covers how to configure Kerberos cloud trust for on-prem SSO with cloud joined machines
https://mobile-jon.com/2024/02/16/cloud-kerberos-trust-the-windows-hello-for-business-easy-button/
Video Content
Now onto the video content, staring with a look at the improved user experience in the Intune migration tool from Steven Weiner
Steve also does a deep dive into how the new script works here (parts 1 and 2)
Craig Camacho looks at the new Enterprise App Management functionality in this video
Alex de Jong looks at the Windows device enrollment flow in this video
Alex also looks at ensuring your devices are compliant here
Learn about the new features for Windows 365 here with Christiaan Brinkhoff, Rinku Stephen, Elina Luthra and Derek Liu
Microsoft Content
Now for the Microsoft content starting with information about strong certificate mapping from the Intune support team
There is an update to supported Android versions with Intune, find out about them here
Learn about the new Windows Autopatch features here with Diana Hoffman
Learn how to protect your unmanaged Android and iOS devices using MDE with Arnab Mitra
That’s all for this week, have a great weekend!