Community Content
We start this week with a look at the various different options available for configuring M365 apps from Jan Mulder
https://wolkenman.wordpress.com/2024/08/13/policies-for-office-apps/
If you are getting started with macOS management, this comprehensive post from Joery Van den Bosch runs through various settings to get you started
https://intunestuff.com/2024/08/14/macos-intune-policies-guide-to-start/
Michael Niehaus has updated the excellent media tool to download Windows builds and write to USB sticks. It’s an excellent approach for your totally dead machines
https://oofhours.com/2024/08/12/updated-media-tool-available/
On a similar note, Alex Semibratov looks at why using Rufus for your bare metal builds is often not the best approach
Next, Niklas Tinner covers your options when looking at managing your mobile devices, both personal and corporate
https://www.oceanleaf.ch/ios-android-with-intune
The first of a new series of posts from Shehan Perera looking at securing your web browsers. This one covers blocking extensions across the different available browsers.
If you have yet to configure ASR in your environment, this guide from Lewis Barry should get you started
https://conditionalaccess.uk/attack-surface-reduction-action-required/
For those of you managing split environments with access delegated by scope tags, this script from Michael Meier will assign scope tags automatically based on location
Next, Florian Salzmann has an excellent script for displaying a splash-screen for many tasks during OOBE, well worth checking out
https://scloud.work/splash-screen-for-windows-start-splashscreen
Video Content
Now onto the video content starting with Steve Weiner looking at the hidden Winget information in store apps
Steve also has videos covering troubleshooting and issues with the early release of the latest device migration script, the first looks at the bulk refresh token
And the second looks at an issue some were having with the domain unjoin step
Steve also runs through how to use Autopilot pre-provisioning (or whiteglove for those old enough)
Next, Shady Khorshed demonstrates how to configure Intune for mobile application management (MAM)
This video from Chander Mani Pandey looks at the autopilot deployment report and how to retrieve it from Graph
We now have two videos from Dean Ellerby, starting with looking at setting up your devices for cloud native with Intune (existing non-domain joined devices)
Dean then looks at the option to allow MDE to enforce security configurations via Intune
We also have a new intune.training video covering all things application deployment and management from Adam Gross and Steven Hosking
Microsoft Content
If you’re using All Apps or All Microsoft Apps in your app protection policies, watch for this known issue from the Intune support team, it won’t include any new applications.
MFA will also soon be enforced on the Intune admin portal as covered here by the Intune support team
That’s it for this week, have a great weekend!