This post will cover how to create a new Azure PIM Eligible assignment and link it to an Azure AD group, but all done via Powershell. For Azure AD joined devices, using Privileged Identity Management and the built-in Device Administrators role you can control who has access to be a machine admin and for how … Read more
In today’s exciting post, I’m going to create a Conditional Access policy in Entra ID to restrict cloud apps to only Intune compliant devices, using my favourite scripting language, Powershell (and we all know how much I love a good script!) As usual, the script can be found on my ever-growing GitHub here I’ll be … Read more
Update: Update Compliance is now EOL, please use Windows Update for Business reports instead: https://techcommunity.microsoft.com/t5/windows-it-pro-blog/now-generally-available-windows-update-for-business-reports/ba-p/3677018 Today’s post is about a Microsoft tool which is completely free and a great way of tracking Windows updates across the estate. Did I mention it’s free? If you want to read up more about it, here is the Microsoft … Read more
Sometimes, especially in large environments, keeping track of who is making which changes within Intune can be a pain and there is always that one time where change control isn’t followed and something breaks. In this post I’m going to configure Intune to alert on Audit Logs, send to an Azure Event Hub and then … Read more
Update, the cross-tenant version here is more updated and works on the same tenant as well, please use that one I often find myself needing to take a copy of individual Intune policies, either for a bit of UAT, or even to change one setting for a different group of people. Whilst there are ways … Read more
I often find myself having to create the same selection of Entra ID groups when deploying a new Intune environment and whilst the Entra Portal is easy to use, I always look to find a way to cut down how long each task takes. The more I can automate, the more I can get done … Read more
I often find myself looking in Intune to find a PC name of a machine assigned to a user (it saves having to deploy bginfo or similar), but as with many of my scripts, I like to find a quicker and easier way of doing it. This one is available both on github and Powershell … Read more
A very quick script today but one which I use regularly. There is nothing worse than deploying a new policy or app and then waiting for the machines to check-in, especially if you’ve just missed a cycle. This script runs through all devices and nudges them along. As usual it’s on GitHub and PS Gallery … Read more
For anyone in an environment with multiple customers, packaging, configuring and deploying the same app multiple times seems such a waste of valuable time, especially when having to do so with every update too! Some thanks first, this script has come together with some help from others; First up, Niels Kok for his excellent Packaging … Read more
Sometimes with a large estate you need to quick check if a new device has been added, or how many stale devices there are cluttering up your deployment reports. Yes, you could export devices and filter, or go into the GUI and sort by date, but I’m always looking for ways to bypass the GUI … Read more