Andrew Taylor 
I like to think of Azure AD as the front door to a house. Whilst you can have a perfectly secure wireless network configured with filtering and all of the other fun bits, if you leave the front door open, they’ll just steal your computer! This is why securing Azure AD should be the first … Read more
Welcome to this weeks bumper newsletter, crammed full of amazing content from the MEM community. Put your feet up, grab your favourite drink and read on… Community Content We start this week with this post from Sandy Zeng looking at the different ways to configure and deploy WHfB and the differences between them. Manage Windows … Read more
By now I’m sure you’ve heard about the new AutoPatch service from Microsoft (if you haven’t, read this and watch this excellent video explaining how it works). UPDATED 07/09/2022 During activation, you will be prompted to make sure devices are not currently assigned to a current update ring, easy enough, I’ll just go and unassign … Read more
Welcome to the first MEM newsletter of September. I hope everyone has had a fab summer! Community Content We start this week with a post which looks at my favourite part of Intune, Proactive Remediations. Joey Verlinden has helpfully put together an excellent list of remediations which you can just grab and deploy. https://www.joeyverlinden.com/my-most-used-proactive-remediations/ I’m … Read more
The Microsoft store is a useful app, but realistically, no-one needs it pinned to the taskbar, especially on Intune managed machines where you want everyone using Company Portal. So, how do we remove it? In this post I’m going to run through the 4 different options available to you: Registry PowerShell Script Proactive Remediation Custom … Read more
Welcome everyone to this weeks Endpoint Manager newsletter with another feast of content for you to enjoy. Community Content We start this week with a post from Manish Bangia with a thorough look at the difference between MDM and MAM enrollment. https://www.manishbangia.com/mdm-user-scope-vs-mam-user-scope/ Next, we have two posts from Jannik Reinhard, the first uses Automation runbooks … Read more
I’m sure most if not all of you have a test tenant (never test in production) for new policies, features etc. What happens when you then want to push this change out to live (or even to multiple customers)? You either have to JSON the policy and run the script, use a backup and restore … Read more
Community Content We start this week with an excellent look at Autpatch from Katy Nicholson, not only looking at implementing, but the requirements and the various groups and policies it creates. https://katystech.blog/mem/windows-autopatch Next, we have two posts from Michael Niehaus, the first looking at different firmware versions and why they vary across devices. https://oofhours.com/2022/08/12/fun-with-tpm-firmware-version-numbers/ For … Read more
Microsoft Dev Boxes have today entered Preview. If you don’t know anything about them, they are pre-configured machines to deploy to your developers with all of the software they are likely to use (and admin rights if needed). Fully secure and high performance, they meet the needs of developers without IT staff having to worry … Read more
I love Autopilot and always use the enrollment status page (ESP), but sometimes I feel like I’m spending hours looking at the very limited updates and want to know what’s actually happening. Whilst there is the excellent log collection tool from Microsoft, that’s a snapshot and not a live view. With that in mind, I … Read more