This is something new I want to try, keeping track of everything which is changing in Intune can be a tricky task. I go for an RSS aggregator (happy to share my list), but to make it easier for everyone, I’m going to attempt to do a weekly roundup of … Read more
Following on from the previous post on environment backup, how we’re going to look at the users own data. I’m sure we’re all following the 3-2-1 rule for our infrastructure, but what about user data on the device. We now have wonderfully cloud managed devices which can be remotely rebuilt … Read more
For the next couple of posts I’m going to cover something close to the hearts of us all, backups! Picture the scene, someone has accidentally deleted a reasonably complex Intune policy (worse still, it’s a Custom one) and it’s critical at that. Now, obviously at this point we all fall … Read more
This post will cover how to create a new Azure PIM Eligible assignment and link it to an Azure AD group, but all done via Powershell. For Azure AD joined devices, using Privileged Identity Management and the built-in Device Administrators role you can control who has access to be a … Read more
In today’s exciting post, I’m going to create a Conditional Access policy in Azure AD to restrict cloud apps to only Intune compliant devices, using my favourite scripting language, Powershell (and we all know how much I love a good script!) As usual, the script can be found on my … Read more
Update: Update Compliance is now EOL, please use Windows Update for Business reports instead: https://techcommunity.microsoft.com/t5/windows-it-pro-blog/now-generally-available-windows-update-for-business-reports/ba-p/3677018 Today’s post is about a Microsoft tool which is completely free and a great way of tracking Windows updates across the estate. Did I mention it’s free? If you want to read up more about … Read more
Sometimes, especially in large environments, keeping track of who is making which changes within Intune can be a pain and there is always that one time where change control isn’t followed and something breaks. In this post I’m going to configure Intune to alert on Audit Logs, send to an … Read more
Update, the cross-tenant version here is more updated and works on the same tenant as well, please use that one I often find myself needing to take a copy of individual Intune policies, either for a bit of UAT, or even to change one setting for a different group of … Read more
I often find myself having to create the same selection of Azure AD groups when deploying a new Intune environment and whilst the Azure Portal is easy to use, I always look to find a way to cut down how long each task takes. The more I can automate, the … Read more
Packaging, deploying and updating applications can be hugely time consuming, especially when trying to keep on top of the latest zero-day exploit in your apps (I’m looking at you Chrome!) Fortunately there are now a handful of package managers available to take away this pain, especially useful when you have … Read more
