Intune Newsletter - 22nd March 2024

Welcome back to the post MVP Summit newsletter and a Tech Community Live special with four videos from Microsoft below!

Community Content
Video Content
Microsoft Content

Community Content

We start with a very useful bash script from Somesh Pathak to remind your macOS users to restart their devices and then eventually forcing a reboot.

https://www.intuneirl.com/cool-clicks-swift-kicks-the-mac-admins-guide-to-seamless-reboots/

Next, Peter van der Woude runs through how to use Cloud PKI to create your certificates

Getting started with Microsoft Cloud PKI

https://www.petervanderwoude.nl/post/getting-started-with-microsoft-cloud-pki/

Learn how to enable and configure WUfB reports directly in Graph with David Brook

https://euc365.com/post/configure-wufb-reports-with-graph-api-powershell/

None of us want local admin accounts on managed devices, but there are times where someone will add an account and hope you don’t notice! Make that a thing of the past and be notified as soon as a local admin account is created by following this guide from Damien Van Robaeys

https://www.systanddeploy.com/2024/03/automatically-be-notified-by-mail-or.html

If you are having DMA exception errors with Bitlocker, grab this PowerShell script from Nick Benton

https://memv.ennbee.uk/posts/bitlocker-dma-exceptions/

Michael Meier has updated the Autopilot Companion app and added support to view and change the primary user of the device

Update: Autopilot Companion based on Power Apps

https://mikemdm.de/2024/03/17/update-autopilot-companion-based-on-power-apps/

In this post, Joey Verlinden shows how to use Entra Private access to connect to an AVD session host which is not internet facing.

Connect to Azure Virtual Desktop via Microsoft Entra Private Access

https://www.joeyverlinden.com/connect-to-azure-virtual-desktop-via-microsoft-entra-private-access/

Dominiek Verham runs through the different options to block clipboard transfer with Windows 365 here

Limiting clipboard transfers for Windows 365 Cloud PCs

https://techlab.blog/limiting-clipboard-transfers-for-windows-365-cloud-pcs/

Next up, Jon Towles has released the second part of the guide to help WS One admins transition to Intune. This one looks are profiles, scripts and baselines

The Workspace ONE Admin’s Guide to Microsoft Intune Part 2: To Profiles and Beyond!

https://mobile-jon.com/2024/03/17/the-workspace-one-admins-guide-to-microsoft-intune-part-2-to-profiles-and-beyond/

If you are having issues enrolling hybrid AVD multi-session hosts, check out this troubleshooting guide from Gannon Novak

Intune Enrollment Error 0x80180005 on AVD multi-session host

https://smbtothecloud.com/intune-enrollment-error-0x80180005-on-avd-multi-session-host/

Running commands on-demand is more tricky for Entra joined devices, but Ondrej Sebela has a script here which uses on-demand remediations to replicate invoke-command functionality

https://doitpsway.com/invoke-command-alternative-for-intune-managed-windows-devices

Next, Nicklas Olsen looks at using Web Signin for Windows and some use cases for it

https://www.learnintune.net/configure-web-sign-in-in-intune/

If you are licensed for EPM, you may notice support approved start to hit your tenant soon. Learn more about it here with Jan Mulder

Endpoint Privilege Management – Support Approval

https://wolkenman.wordpress.com/2024/03/21/endpoint-privilege-management-support-approval/

One to keep your users away from, learn how to enrol a personal device into Intune whilst bypassing enrollment restrictions here with John Marcum

https://powerstacks.com/how-to-bypass-intune-device-platform-enrollment-restrictions-on-windows/

If you want to disable Idle Power Save mode, grab these remediations from Harm Veenstra

https://powershellisfun.com/2024/03/21/disabling-idle-power-save-using-intune-and-powershell/

Video Content

Now onto the video content, starting this week with a PowerShell script from Chander Mani Pandey to quickly output Intune license assignments

https://www.youtube.com/watch?v=D24TM_4wQJY

Steven Weiner starts a new video series looking at why you should be moving to cloud native devices with parts 1, 2 and 3. The first part is an overview of what a cloud native endpoint is

https://www.youtube.com/watch?v=PlXLIDVsoJM

The second part looks at your GPOs in the cloud

https://www.youtube.com/watch?v=1BQNrB8huR4

Part 3 covers accessing on-prem resources via SSO

https://www.youtube.com/watch?v=LyVriS-cPkM

We now have four tech community live videos, the first is an AMA covering macOS management with Intune. This video features Jessica Yang, Arnab Biswas, Benjamin Flamm and Neil Johnson

https://www.youtube.com/watch?v=lOpOFU6hF7E

Next, we have an AMA on Windows management with Tyler Castaldo, Laura Arrizza, Mike Danoski and Aasawari Navathe

https://www.youtube.com/watch?v=Hcq-RPcv088

In this Tech Community live video, Joe Lurie, Danny Guillory Jr, David Alessi and Zineb Takafi cover enterprise app management and advanced endpoint analytics