Intune Newsletter – 13th December 2024

Happy Friday 13th which is especially lucky for all of you because you have this wonderful newsletter to enjoy!

If you have Graph automations, make sure you check out the Microsoft announcement at the bottom, it’s an important one!


Community Content

We start this week with a look at how Connected Cache for Enterprise works as well as how to configure it from Jeroen Burgerhout

https://www.burgerhout.org/deploy-smarter-microsoft-connected-cache-for-enterprise/


For those of you using SCCM, we have the second part of the series from Mike Shellenberger.  This one covers your options for in-place upgrades

Upgrade to Windows 11 in the Enterprise Series – Part II


Most tenants will have been onboarded into Hardware Inventory now, find out more about the new feature here from Michael Meier

Intune hardware inventory is now available


Joery Van den Bosch also runs through configuring Device Inventory here

How to setup Enhanced device hardware inventory in Intune

A second post from Joery this week, a full step by step guide to implementing Autopatch and Hotpatch

How to setup Windows Autopatch and enable Hotpatch – The Complete Step by Step guide

Joery also looks at the different ways to block the new Outlook app with Intune

How to control the installation of the “new” Outlook – Different methods to disable this – And yes we can do this with Intune!


If you want to know exactly what’s happening underneath Device Inventory, read this deep-dive from Rudy Ooms

Under the hoods of the Windows Device Inventory Agent

Rudy also looks at how Device Inventory uses the MMP-C functionality here

How Device Inventory is Delivered: From MMP-C to Resource Explorer


Jon Towles also looks at device inventory here

Introducing Intune Device Inventory


If you prefer text to video content, Steve Weiner has a written version of the Graph getting started guide here

https://www.getrubix.com/blog/microsoft-graph-a-beginners-guide-to-apis-endpoints-and-urls


Learn how to enable Hotpatch for Windows 11 Enterprise here with Peter van der Woude

Enabling hotpatch for Windows 11 Enterprise


Onboarding Android devices into MDE isn’t quite as zero-touch as the device enrollment itself.  For a “low touch” option, check out this post from Nick Benton

https://memv.ennbee.uk/posts/android-enterprise-defender-onboarding/


Next, Sander Rozemuller runs through the excellent Intune Assignments tool and what it can do

https://www.rozemuller.com/get-intune-assignments-overview-and-more/


We have an excellent selection of scripts apps and tools in this repo from Brandon Miller-Mumford

https://github.com/bbmumford/Intune-Toolkit


Admin protection was announced at Ignite to secure elevated accounts.  Learn more about it in this post from Jörgen Nilsson

Administrator protection in Windows 11 – First look


Read more about the new Windows 365 Link device in this post from Ola Ström

Windows 365 Link – What’s the fuzz all about?


Dieter Kempeneers also looks at Windows 365 link here

Windows 365 Link: a new compact device for a modern workplace


If you’re managing macOS devices with JAMF, Somesh Pathak has made an excellent migration tool here to migrate them to Intune

https://github.com/pathaksomesh06/MDM-Migrator


It’s the time of the year where some companies increase headcount temporarily to cope with seasonal demand.  Learn how Windows 365 frontline shared can help in this post from Florian Salzmann

https://scloud.work/windows-365-frontline-shared-cloud-pc/


PIM is a feature of Entra I find is often underused.  Niklas Tinner runs through the benefits here

https://www.oceanleaf.ch/pim/


Have you ever wondered how Windows CSPs work (and the music James was listening to in 2010)?  Dive in and find out in the first of a new series from James Robinson.

https://skiptotheendpoint.co.uk/windows-csp-a-tale-of-magic-intrigue-and-betrayal-part-1/


There are some situations where you want to restrict web access to only allowed URLs rather than blocking only unwanted sites.  If this is something you need, Joey Verlinden has you covered

Block and whitelist specific URL in Microsoft Edge or Google Chrome


Next, Peter Klapwijk troubleshoots an unusual error with Kerberos cloud trust

How I solved a strange Kerberos issue


Video Content

Now onto the video content starting with two videos from Chander Mani Pandey starting with a look at Windows 11 hotpatch

The second video covers how to migrate your co-managed workloads when moving to cloud native device management


A lot of excitement around device inventory.  For a look at it visually, watch this video from Andrew Jones


Steve Weiner also looks at device inventory in this video and how to configure it

Following on and after resolving the issue, Steve then looks into it further here

Steve also extends the Graph series, this one looking at daily tasks that can be automated

Steve has had a busy week, we also have part 5 of the Graph series, this one showing how to create objects


Learn about all of the features in 2410 and 2411 releases with Mattias Melkersen Kalvåg and Peter van der Woude


 


Now we have the Technical Takeoff with a selection of videos, the first one looking at all of the Windows security options in Win11

This video covers update management for Windows now it’s all unified under the same team.

Now for an AMA on Windows hotpatch

This video is a feedback session on new feature requests around Autopatch and others.

And it wouldn’t be a Microsoft event without AI, this one covers Copilot and AI PCs.


Microsoft Content

A very important message from Microsoft this week with an update to the beta Graph APIs when dealing with security policies.  Make sure you update your scripts (that’s a fun job for me…).  Read more here from Julia Idaewor here

https://techcommunity.microsoft.com/blog/intunecustomersuccess/updates-to-beta-apis-for-windows-endpoint-security-and-administrative-templates/4357002


That’s it for this week, have a great weekend!

Leave a Comment