Hello and welcome to this weeks exciting Intune newsletter and my travels continue with this one coming from Tallinn and the excellent Cloud Tech Tallinn conference (although it’s a bit cold…). It is a bumper edition this week with 4 Tech Community Live Videos from Microsoft, well worth checking out
Community Content
Whilst Windows 365 USB redirection works for most devices, what if you have those which aren’t on the list? Fortunately Michael Meier has a solution here for many others
Harm Veenstra looks at how to use the new PowerShell installer for Win32 apps in this post
Whilst number matching MFA is much better than simply clicking approve, many users still just blindly enter numbers. Craig Camacho looks at a very under-used feature in Conditional Access to show the exact location of the request here
There are times where you need to patch machines quickly and you just can’t wait for Windows Update to kick in. In these situations, try this app deployment approach from Mads Johansen
https://evil365.com/intune/Intune-CompanyPortal-OSPatches/
Jon Towles has finally written the second part of the Autopatch series, this one looking at exactly what is happening on the devices and how you can manipulate it with the API (and more)
If you need to force a re-install of company portal from Intune, try this post and script from Daniel Gebler
https://danzi.blog/force-company-portal-app-repair-reinstall-by-intune-management-extension/
Somesh Pathak has updated this excellent post covering how to install Palo Alto GlobalProtect onto macOS using Intune.
Deploy the GlobalProtect VPN on macOS using Microsoft Intune: Updated Guide
An important preview addition for AVD, you can now select where the metadata is being stored regionally, crucial for data sovereignty. Learn more here from Johan Vanneuville
I’m sure everyone is using update rings for windows updates and maybe even apps, but what about driver updates? If you aren’t, learn how to in this post from Jörgen Nilsson
If you want to launch specific apps via Windows App without users having to click through, try this guide from Joey Verlinden
You can now securely share Edge passwords with users which will appear only within the work profile. Learn how here from Peter van der Woude
Getting started with secure password deployment in Microsoft Edge
Now Edge is basically the enterprise browser of choice, you may want to block others from installing (especially those which install into the user profile so do not need admin rights). Fortunately you can block them with an easy to configure app-locker as covered here by Nicklas Olsen
https://www.learnintune.net/restrict-access-to-third-party-browsers/
Whilst you have been able to use an Entra account in Google Play for a while, switching to it has always been a painful process. Worry no more, you can now upgrade in the portal. Learn more in this post from Nicky De Westelinck
Upgrading Managed Google Play: Moving from Google Accounts to Microsoft Entra ID in Microsft Intune
I think it’s safe to say we all miss Group Policy Preferences and the web links in Intune apps just aren’t good enough. Florian Salzmann runs through your various options here and the pros and cons of each
https://scloud.work/deploying-shortcuts-intune/
I am sure many of you ignored expedited updates until Outlook broke last week! Now is a good time to learn how to use them following this guide from Maxime Guillemin
LAPS is great, but you probably don’t want your users accessing the portal to get the passwords (and I imagine your servicedesk don’t really want calls to request them). If this sounds familiar, try this approach from Michael Frank
https://michaelsendpoint.com/m365/getLAPS.html
Running business premium? Check out these quick fixes to rapidly improve your secure score. Thanks to Tobias Eriksson for putting these together!
Browser extensions are quickly becoming the toolbars of the early 2000s. Luckily you can at least control them using Intune or Defender using this guide from Shehan Perera
Browser Extensions – How to Take Control Before It’s Too Late?
Next, Sander Rozemuller looks at the new Unified Tenant Configuration APIs now available
https://rozemuller.com/use-utcm-to-monitor-intune-compliance-policy-desired-state/
Video Content
Now for this weeks exciting video content, starting with a look at Autopilot and Autopilot Device Prep, how they compare and the advantages and disadvantages of each from Jonathan Edwards
Manish Bangia completes the series on Win32 apps, this one covers one of the most important aspects, troubleshooting.
Now for the tech community live videos, the first one covering a very popular and important subject, Security Copilot and Agents with Joe Lurie, Lavanya Lakshman and Juanita Baptiste
This tech community live looks at all things Zero trust with Jon Callahan, Clay Taylor, Angela Robertson and Mike Danoski
Next, learn how to manage your apps with Intune featuring Joe Lurie, Nicole Zhao, David Guyer and Iris Yuning Ye
The final tech community live video covers securing your devices using Intune and Defender from Matt Call, Laura Arrizza and Mike Danoski
Microsoft Content
Onto the Microsoft news and this one is for any of you reading this from South America, Windows 365 is now supported in the Brazil-South region as covered here by Ron Coleman
RDP Shortpath is now available and can be configured via Settings Catalog. Learn more here from Rinku Dalwani
That’s all for this week, have a fantastic weekend!