I’m excited to announce the pre-order of my new book “Intune Cookbook” which covers a full Intune setup and management from start to finish as well as the all important PowerShell and Graph commands (we all know how much I love automating!) It’s many months of effort and a long read which I hope you … Read more
During the excellent Modern Endpoint Management summit in Paris, I was sitting in the equally excellent session from Florian Salzmann and one of the questions was if the Device bulk commands could send an on-demand remediation to multiple devices and the answer was no. This gave me an idea so I built this script on … Read more
When migrating to the modern Autopilot world, if you are not purchasing net-new devices, you may find yourself having to rebuild current ones. This means getting these devices into Autopilot devices. The most popular option (and rightly so) is to use the Get-WindowsAutopilotInfo script, whether that’s the official one or the community edition Sometimes though, … Read more
With the release of MAM for Windows I thought I would revisit securing your data on BYOD with Windows (previous post here) In this post we will cover how to fully protect your data so that your Windows users can only access corporate information via a protected browser and keep the data contained. To make … Read more
In 2307 Intune release, users now have the ability to uninstall apps themselves in Company Portal. I’m not going to show you how to do that manually as that’s well covered by others like this one from Prajwal: https://www.prajwaldesai.com/intune-uninstall-apps-in-company-portal/ Instead, I am going to give you a quick way to switch as many apps as … Read more
With the recent changes to the store, both the Intune integration and the new Windows 11 store, you may want to restrict what your users can install. Blocking the store completely is an option, but that will stop your Windows apps from updating (including the likes of calculator and notepad) and also block any apps … Read more
After the addition of App support using Winget, I had a few requests for the policy backup/restore to also support assignments. Assignments It turns out, it is not as easy as I was expecting. Within Graph, the assignments are based on group ID and obviously the group ID won’t be the same between tenants so … Read more
Some exciting news today, the Microsoft Graph SDK V2 has been released and it has some changes which could cause you problems! You can find out more about the changes here: https://github.com/microsoftgraph/msgraph-sdk-powershell/blob/dev/docs/upgrade-to-v2.md The key things to note from an Intune perspective: To get around the connection changes, I have written a new function which detects … Read more
An exciting new addition to the IntuneBackup.com website, I have added the ability to deploy applications via the GUI. The app deployment at present uses the Winget community repository (when Advanced App Management is released by Microsoft, I will try and add that as an alternative) After clicking on the Deploy Apps menu, you will … Read more
A feature fresh into Public Preview, Application Control using either a GUI for standard settings, or you can upload a custom WDAC XML. I’m not going to go into how to configure it because that is well described here: https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-app-control-policy For creating your XML, WDAC Wizard is your friend: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/wdac-wizard As usual, the first thing … Read more