Intune

If you’re starting on your device management journey, considering moving from Config Manager to Intune or switching from another platform, here is an article I have written looking at the two platforms and how they compare from a purely application perspective: Hopefully you find this a useful read!

We’ve all been there, you created that Bitlocker policy (other policies are available) years ago, it’s working fine, but you can’t remember which section you created it in. You could click around in the portal until you find it, or you could run my latest script: Also available on Github here Simply run intune-findby-name.ps1 -name … Read more

With the exciting release of Endpoint Privilege Management, I immediately went digging around in Graph to see just what’s happening behind the scenes. It will come of no surprise that it is based on the ever-growing Settings Catalog so why not automate it? We all know I love avoiding a GUI Here is the result, … Read more

Remote Help is a feature of the new Intune Suite, but if you look at the onboarding documentation, it is a bit long-winded, you need to enable your tenant and then download, package and deploy the application itself. I then came across this post from Aresh Sarkari which covers the onboarding and thought why not … Read more

We all know I’m a huge fan of PowerShell and Intune and obviously that makes Proactive Remediations one of my favourite features (if anyone from Microsoft is reading, please can we have it with Business Premium) Many of us in the community have scripts we have put together and Jannik Reinhard came up with the … Read more

Update 03/05/2023 – If you want to self-host and customise this further, you can now purchase a custom version with installer here I’m excited to announce Intune Backup a web-based GUI for managing Intune backup, restoration and policy deployments. It is multi-tenant out of the box, free to use and runs off my Intune Backup … Read more

In Intune, you can use enrollment restrictions or a standard compliance policy to block machines based on version numbers, but this means every time a new version is released, or a version goes EOL, you need to manually change the settings. This is fine for a small environment, but what if you are supporting multiple … Read more

For your frontline users, the M365 F-sku licenses are an excellent option, you get all of the advantages of an E-sku, just without the Office apps. These days even your frontline users are going to need to click mailto links on webpages or emails and the last thing an enteprise admin needs is the Mail … Read more