What a week it has been for the IT world between a PHP CVE which hit most of the internet to a certificate secured by the number 4 (or not secured), I imagine a lot of you are very much looking forward to the weekend!
Hopefully everything is now patched and you can enjoy this weeks Intune news
Community Content
We start this week with the first part (of 7 at the time of writing) in a new series from the legend Dave Randall covering all things Intune RBAC. His blog is definitely worth browsing if you want to know the inner workings of Intune and Graph
https://dave-randall.com/rbac/day-01/
Then when you have learned all about RBAC and implemented it, use this excellent script from Jeff Gilbert to document everything
https://www.linkedin.com/pulse/intune-rbac-documentation-script-jeff-gilbert-3ephe/
The final secure boot certificate expires on Monday, check this won’t cause you any issues in this post from Mr T-Bone
Secure Boot, Take 3: The Last 2011 Certificate Expires on Monday
Lisa Berenberg continues looking at your mobile device management and following on from looking at iOS last week, this weeks post covers Android Enterprise enrollment and enrollment time grouping
Intune Device Enrollment Part 2: Android Enterprise and Enrollment Time Grouping
If you are licensed for Defender for Endpoint, even if you use 3rd party AV, it is still protecting you in passive mode as covered here by Andrew Blumhardt
This post from Jannik Reinhard looks at the new AI Agent Runtime protection available in the Intune portal
https://jannikreinhard.com/intune-ai-agent-runtime-protection/
We have an excellent new tool from Simon Hartmann Eriksen to quickly associate your Autopilot Device prep devices without having to mess with CSVs and USB-sticks
We now have two posts from Jonathan FIEVET, starting with a guide for implementing Administrator Protection
Administrator Protection sous Windows 11 : guide complet avec Microsoft Intune
The second post was always a gap in EPM. Some industries have staff who need to be able to change the IP address and it used to require either full admin, or a 3rd party application. Fortunately you can now allow certain settings to be managed by EPM
If you’ve switched to iOS enrollment profiles and are finding your devices keep trying to re-enrol, check out this post from Kevin Malinoski
Company Portal Ghosting Your iOS ADE Enrollment? Here’s the Fix for the New Enrollment Policies
Next, Craig Camacho looks at the often overlooked enrollment restrictions in Intune, how to use them and why you need them
Intune Enrollment Restrictions: Because “Anyone Can Enrol Anything” Isn’t a Policy
We have an excellent new tool from Oliver Kieselbach to watch your Autopilot deployments in real-time and best of all, it’s free with the community version
https://www.autopilotmonitor.com
Another tool, this one for quickly creating EPM rules directly from the executable itself. This tool is made by Mathias Borowicz
https://zerotruststories.com/epm-rule-creator/
Video Content
Now for this weeks video content with a return to the What’s New video series from Nickolaj Andersen, Mattias Melkersen Kalvåg and Peter van der Woude, looking at the new features in the 2609 release
You may have noticed Autopilot Device Prep doesn’t install updates automatically. Learn how to get around this here from Steve Weiner
Microsoft Content
Not for the Microsoft content, starting with all things Windows release information from Chris Morrissey
You can now require managed Google accounts on Android Enterprise devices as covered here by Samuel Vara and Mayur Jadhav
That’s all for this week, have an amazing weekend and for those of you travelling to MMS, have a safe journey