A new feature within Intune, currently in Preview is the ability to create a custom compliance policy to give a bit more granular control over what is allowed to connect. You could require certain apps to be installed (or not installed), a minimum BIOS version, or a particular service needs to be running. If it … Read more
One of the things I’m always aware of is certificate expiry, especially the ones used for Apple VPP, if those expire and aren’t renewed in time, you may find yourself factory resetting and re-enrolling again which I’m sure we all want to avoid. Whilst Outlook reminders are a wonderful thing, there is still an element … Read more
One question I’m often asked is around security policies within Intune, where to set them and why can they be set in so many different places? Before I start on what I prefer, there is no right or wrong answer for this one, ultimately they are all changing the same files/registry keys so it is … Read more
Following on from Part 1 where I looked at Intune Monitor in the Devices Blade, now we can look at the same within the Apps Blade App Licenses This first option looks at any Microsoft Store, Managed Google Play Store, or Apple App Store applications. It can see how many licenses have been purchased for … Read more
Welcome, in this post I’m going to look at the Monitor tools in Devices within Intune, an icon I’m sure you’ve all seen, but rarely clicked on: What lies inside these icons I hear you ask, well, it is a wealth of information covering the vast majority of settings within Intune, although it’s a bit … Read more
Windows 11 has been out a while now and I’m sure most of you have been testing and are nearing the point of looking at deploying to your userbase. As we all know, however, the requirements are a lot stricter than they were for Windows 10 (or even 7) so you may find yourselves needing … Read more
Greetings one and all. For this post I’m going to review the various options available today for managing Azure AD Joined devices with admin rights. This isn’t looking at it from the users perspective, I don’t believe there are any circumstances where a user requires admin access on a corporate device, I’m looking at this … Read more
I’m sure most of you are now either moving to or considering a switch to Windows 11 and want to configure the start menu the same as on Windows 10. I’m sure you’ve also noticed that the method to configure it has changed so the previous policies won’t be working. In this post I’ll run … Read more
Picture the scene, you have a large organisation (or possibly multiple large organisations) and many little silos within, each has their own IT department and traditionally they all did their own thing with imaging, app deployment, probably via a delegated OU in active directory. Now you want to go cloud native, but the idea of … Read more
I’m sure everyone reading this has deployed many applications within Intune using the win32 format and most likely used an MSI code or a file/registry detection method to monitor for a completed install (and why wouldn’t you, they work perfectly) Sometimes however, you might come across an application which is more tricky to detect, or … Read more