Not quite the spooky special yet so I’ll hold off the puns for now and instead let you enjoy this weeks exciting content
Community Content
We start this week with a guide on how to run KQL queries against MDE using Azure Automation from the KQL expert Damien Van Robaeys
https://www.systanddeploy.com/2024/10/running-kql-queries-on-microsoft.html
Next, Peter van der Woude looks at the new protected print mode included in 24H2 and how to configure it with Intune
https://petervanderwoude.nl/post/getting-started-with-windows-protected-print-mode/
Since the announcement of Administration Protection (and Rudy’s previous posts), there has been some confusion around how it compares to EPM. To clear things up, Rudy Ooms has a post looking at the two here
https://call4cloud.nl/windows-11-administrator-protection-vs-epm/
Windows 11 24H2 also included the release of Sudo for Windows, something anyone who has used Linux will be very familiar with. Find out exactly how it works in this deep dive from Jon Towles
https://mobile-jon.com/2024/10/14/deep-dive-into-windows-sudo/
Learn all about the Intune MDM certificate and some handy details about the included OID’s in this post (and script) from Ben Whitmore
https://msendpointmgr.com/2024/10/12/unpacking-the-microsoft-intune-mdm-certificate/
Default internet access on AVD machines will end in just under a year. Follow this guide from Johan Vanneuville to use Terraform to configure Azure Firewall to handle the traffic
A lot of 24H2 related content this week! If you’re having issues enrolling new devices into MDE, it could be the SENSE client is missing. Fortunately Mads Johansen has a fix here
https://evil365.com/intune/windows%2011%2024h2/SENSEClient-Missing-Windows11-24H2
Also missing from 24H2, ISE has gone from Windows Sandbox. Upgrade your experience by switching to VS Code instead as covered here by Jóhannes Geir Kristjánsson
https://johannesblog.com/2024/10/15/adding-vs-code-toolbox-to-windows-sandbox/
If you have mixed MDE licensing, you can now specify who gets which as covered here by Rahul Jindal
https://rahuljindalmyit.blogspot.com/2024/10/mixed-mode-defender-subscription.html
For those of you wanting to get started with Windows 365, check out this guide from Jonathan Lefebvre
https://www.systemcenterdudes.com/intune-windows-365-cloud-pc-step-by-step-guide
Once you have your Windows 365 machines configured, learn how to upgrade them to 24H2 with this post from Dominiek Verham
https://dominiekverham.com/updating-windows-365-cloud-pcs-to-windows-11-24h2/
Andy Jones has created an excellent new site with quick links for all things Intune, both official and community links:
Find out what happens behind the scenes in Intune, both server and client side in this post from Niklas Tinner
https://www.oceanleaf.ch/inside-intune
For those of you with Lenovo devices, you can now deploy the Intel Processor Power Management package with Intune. Read this post from Philip Jorgensen to find out how
https://blog.lenovocdrt.com/deploying-the-intel-processor-power-management-package
Find out exactly what a Winget manifest includes with this script from Harm Veenstra
https://powershellisfun.com/2024/10/17/query-winget-software-installer-data-with-powershell/
Video Content
Now onto this weeks video content, starting with a look at how to use TAP to onboard users from Steve Weiner
Steve also covers how to deploy fonts in this video
A busy week from Steve (well, a busy week for anyone else), a third video running through the different options to customize the taskbar
If you’re using SCCM, this video from Manish Bangia runs through how to enable co-management
Next, we have the latest podcast from Shady Khorshed discussing the IntuneMacAdmins Copilot tool from Ugur Koc
Have a look at the new features in 24H2 from Dave Plummer (a channel well worth subscribing to)
Microsoft Content
Onwards to the Microsoft content with a support tip from the Intune Support Team for those of you still insisting on using Hybrid Autopilot…
Another support tip from the Intune support team, this one covers an issue with Autopilot Device Prep when you are using a managed installer policy
That’s it for this week, have a wonderful weekend!