Welcome back and to those at MMS, I hope it was great fun. Next week I’m off to Experts Live Switzerland, hopefully I’ll see some of you there. There will also be an exciting announcement about this newsletter very soon as well, don’t worry, it isn’t going anywhere, but after 5 years, it’s time for a slight change. Same news, but better, watch this space…
Of course, it’s also the Halloween special!
Community Content
We start this week with a look at how to manage AI on your managed Android Enterprise devices from Nicky De Westelinck
Managing Generative AI on Android Enterprise Devices with Microsoft Intune
Dave Randall has released a lot more posts for the 20 days of RBAC which I would suggest also checking out, but this deep dive into scope tags is definitely worth a read!
https://dave-randall.com/rbac/scope-tags-deep-dive/
On the subject of Scope Tags, Michael Frank looks at the new Scoped Permissions functionality in preview
https://michaelsendpoint.com/intune/ScopedPermissions.html
This post from Michael Meier looks at the Properties Catalog functionality to grab registry keys
Learn about all Graph App reg permissions, roles and more importantly what has recently changed in this post from Roy Klooster
https://rksolutions.nl/posts/microsoft-graph-is-a-maze-graphlens-gives-you-the-map/
If you’re running AI Agents (or are worried about the ones you don’t know about), try the AI Agent runtime protection available in Defender for Endpoint as covered here by Peter van der Woude
Take your Defender for Endpoint management to the next level with custom data collection rules in this post from Jeffrey Appel
Microsoft Defender for Endpoint: Beyond default telemetry with Custom Data Collection Rules
For those working in DoD environment, the new STIG audit baselines are going to be of interest. Check out this post from Joost Gelijsteen looking at how they work and how to troubleshoot them
STIG audit baseline in Intune: auditing what is actually on the device
You can finally get unlimited licenses for free Apple VPP apps as covered here by Craig Camacho
Unlimited VPP Licences in Intune: Because Counting App Licences Was Nobody’s Hobby
If you are going fully passwordless, you can now remove the “Current Password” field from SSPR, learn how here with Jan Bakker
https://janbakker.tech/allow-password-change-after-secure-sign-in/
Next, we have an in-depth guide covering best practices when deploying quality updates from Kenneth van Surksum
Configuring Windows quality update policies for your Microsoft Intune managed Modern Workplace
Video Content
Now for the video content with a look at the new RDP functionality added to the Windows app here from Dean Cefola
Microsoft Content
Onto the Microsoft content with a guide on how to make a macOS security baseline using custom compliance from Iris Yuning Ye
That’s all for this week, have a spooky weekend!