With the exciting release of Endpoint Privilege Management, I immediately went digging around in Graph to see just what’s happening behind the scenes. It will come of no surprise that it is based on the ever-growing Settings Catalog so why not automate it? We all know I love avoiding a GUI Here is the result, … Read more
Remote Help is a feature of the new Intune Suite, but if you look at the onboarding documentation, it is a bit long-winded, you need to enable your tenant and then download, package and deploy the application itself. I then came across this post from Aresh Sarkari which covers the onboarding and thought why not … Read more
We all know I’m a huge fan of PowerShell and Intune and obviously that makes Proactive Remediations one of my favourite features (if anyone from Microsoft is reading, please can we have it with Business Premium) Many of us in the community have scripts we have put together and Jannik Reinhard came up with the … Read more
Update 03/05/2023 – If you want to self-host and customise this further, you can now purchase a custom version with installer here I’m excited to announce Intune Backup a web-based GUI for managing Intune backup, restoration and policy deployments. It is multi-tenant out of the box, free to use and runs off my Intune Backup … Read more
In Intune, you can use enrollment restrictions or a standard compliance policy to block machines based on version numbers, but this means every time a new version is released, or a version goes EOL, you need to manually change the settings. This is fine for a small environment, but what if you are supporting multiple … Read more
For your frontline users, the M365 F-sku licenses are an excellent option, you get all of the advantages of an E-sku, just without the Office apps. These days even your frontline users are going to need to click mailto links on webpages or emails and the last thing an enteprise admin needs is the Mail … Read more
With the end of Windows Information Protection (and with it App Protection for Windows devices), I wanted to take a look at the best way of securing data on a BYOD machine with the tools currently available (at the time of writing this article). For the tests, I used a freshly imaged Win11 22H2 device … Read more
Update June 2023: This can now also be completed using Settings Catalog: Teams Chat is an annoying addition to Windows 11 and whilst you can remove the package itself, it doesn’t actually fully remove so you then need to push out extra policies. Whilst updating my de-bloat script I wanted to include the ability to … Read more
In an ideal world you would be alerted whenever someone messes your the environment and then if it’s unplanned, roll-back from your regular backup. We all know, that this isn’t an ideal world and things happen, someone clicks delete on the wrong policy, changes assignment to the wrong group, anything can happen and often you … Read more
Dynamic security groups in Azure AD are great, but wouldn’t it be great if a dynamic query existed to add to groups based on Windows 11 compatibility. Until such a query exists, I have put together a script using the metrics from Endpoint Analytics Work from Anywhere report. As usual, the script can be found … Read more