We are back for another week of exciting Intune reading, it feels like it has rained constantly since last summer so I hope the weather is better where you are!
I’m preparing for a busy few weeks with a trip to Agdiwo next week, followed by Experts Live Denmark and Experts Live Germany (getting the air miles in). If you are at any, feel free to stop by to say hello.
Community Content
It feels like you can’t go on social media without someone talking about OpenClaw (or whatever it is called now). For those managing a macOS estate, you definitely want to check out this post from Somesh Pathak showing how to block it on your managed devices.
On the subject of macOS, this guide from James Vincent runs through how to configure Platform SSO for a seamless authentication experience
How to enable Platform SSO (PSSO) for Apple macOS using Intune
If you want to use Google as your identity provider for Windows 365 machines, check out this guide from Dieter Kempeneers
Using Google Workspace and Gmail as External Identities in Windows 365
Are you struggling to keep your AVD image updated? You can now do so with Terraform and Image Builder following this post from Aresh Sarkari
Windows 365 and AVD are proving popular this week. This post and script from Justin Verstijnen shows how to launch the Windows App on Windows startup
Mr T-Bone has made some fixes to the remediation to update the secure boot certificate. You can find it here
Update Secure Boot Certificate by using Intune Remediation – Take 2
If you are setting the domain on your devices for login, be careful as it can break some parts, especially during OOBE. Check out this post from Peter van der Woude for more
Being careful with the ability to configure the preferred Entra tenant domain name
Finding last login of a user on any cloud managed device is a challenge, add AVD into the mix and it gets really tricky. Fortunately Niels Kok has a script here for you
Worried about secure boot? There used to be a report, but that has temporarily vanished. in the meantime, Liam Robinson has an alternative here (which probably works better)
A setting which is often forgotten, managing location services on your devices. Learn how, why and even how to allow for only certain apps here with Sandy Zeng
Gannon Novak also looks at location services and how one ESP setting can cause headaches
Triple Threat Match: Location Services vs Autopilot vs Intune
Next, Thomas Marcussen continues the thorough guide on creating Windows 365 provisioning policies here, definitely worth a read
Simplifying The Creation of Windows 365 Provisioning Policies (part II)
This post from Nicky De Westelinck looks at the new Windows 365 integration with Autopilot Device Prep to provision those machines in the same way as a standard non-cloud device
Modern Provisioning for Cloud PCs: Windows Autopilot Device Preparation and Windows 365 Enterprise
Nicky also looks at the new Android Enterprise functionality in the 2601 Intune release
What’s New for Android Enterprise in Microsoft Intune 2601: January Highlights
Before your Edge extensions become out of control, follow this guide from Nicklas Olsen to manage them centrally
https://www.learnintune.net/restrict-the-use-of-extensions-in-microsoft-edge-part-1/
Next, Joymalya Basu Roy looks at Autopilot, how to enrol devices and which method to use when deploying
Windows Autopilot In A Nutshell: Quick Start Guide to Modern Windows Device Provisioning
Video Content
Now for this weeks video content, starting with a script to show how to find the last logged in user on a standard Intune device from Chander Mani Pandey
Chander also covers how to deploy a wallpaper onto machines without Windows enterprise licensing using PowerShell scripts
Next, Dean Ellerby looks at the new PowerShell script install method in Win32 apps
Dean also has a guide on how to package your Intunewin file here
Steve Weiner also looks at the new PowerShell script installer for Win32 apps here
Microsoft Content
We start this weeks Microsoft content with a look at the 26H1 release (not upgrade, full install), only for devices running a Snapdragon X2. Learn more here from Aria Hanson
More expansion for Windows 365, it now includes New Zealand North. Learn more in this post from Ron Coleman
That’s all for this week, have a fantastic weekend!