Some exciting news today, the Microsoft Graph SDK V2 has been released and it has some changes which could cause you problems! You can find out more about the changes here: https://github.com/microsoftgraph/msgraph-sdk-powershell/blob/dev/docs/upgrade-to-v2.md The key things to note from an Intune perspective: To get around the connection changes, I have written a new function which detects … Read more
An exciting new addition to the IntuneBackup.com website, I have added the ability to deploy applications via the GUI. The app deployment at present uses the Winget community repository (when Advanced App Management is released by Microsoft, I will try and add that as an alternative) After clicking on the Deploy Apps menu, you will … Read more
A feature fresh into Public Preview, Application Control using either a GUI for standard settings, or you can upload a custom WDAC XML. I’m not going to go into how to configure it because that is well described here: https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-app-control-policy For creating your XML, WDAC Wizard is your friend: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/wdac-wizard As usual, the first thing … Read more
Whilst Microsoft have fixed the official script and module, unlike a lot of their scripts and documents, it does not seem to live anywhere public so we cannot make changes for review. Version 2.0 just released with new parameters:-wipe (Sends an Intune wipe to Intune managed devices, such as if you are shifting from hybrid … Read more
As I am sure you have noticed, the Get-WindowsAutoPilotInfo script and associated WindowsAutoPilotIntune module have been updated and whether you are using the official one, or my forked version, the authentication method has changed to the Microsoft.Graph SDK. In this post we will look at the two different authentication methods and the permissions required: User … Read more
Update 14/06/2023 – I have created a Community version and added it to the PowerShell gallery so we can all add fixes, improvements and updates as a community effort. Read more here or download them with the commands below The Get-WindowsAutopilot script is in the toolbox or every Intune administrator, it does have over 48 … Read more
Moving to a fully managed Intune/Autopilot/AzureAD setup is not an overnight task, it needs careful planning and migration, no-one is expecting you to wipe every device and instantly move to Autopilot, that simply isn’t realistic for larger organisations. That’s not to say give up now and don’t bother, especially with Windows 10 EOL looming, now … Read more
With the exciting release of Windows 365 Frontline, you might now find yourself juggling multiple different SKUs. Fortunately now we can nest groups in Azure AD, we can create groups for each SKU and then nest them into central groups for management (in this post I’m using one for Frontline and one for non-frontline as … Read more
With the release of Intune release 2304 there have been some (welcome) new additions to Windows Autopatch including Autopatch groups and policy checks. Autopatch Groups For some of you Autopatch is a click, set and forget service, but for those in larger organizations, you may want more granular control over quality and especially feature updates … Read more
I’m not writing a post covering Windows LAPS or how to set it up, there are many excellent articles out there which have you covered. For this one, you can automate the setup, not only of the LAPS policy, but also creating a new local administrator on the device to use with it. It will … Read more
