Automating App Control Policy Deployment

A feature fresh into Public Preview, Application Control using either a GUI for standard settings, or you can upload a custom WDAC XML. I’m not going to go into how to configure it because that is well described here: https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-app-control-policy For creating your XML, WDAC Wizard is your friend: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/wdac-wizard As usual, the first thing … Read more

Authenticating to new Get-WindowsAutoPilotInfo

As I am sure you have noticed, the Get-WindowsAutoPilotInfo script and associated WindowsAutoPilotIntune module have been updated and whether you are using the official one, or my forked version, the authentication method has changed to the Microsoft.Graph SDK. In this post we will look at the two different authentication methods and the permissions required: User … Read more

Updated Get-WindowsAutoPilotInfo with Groups fix

Update 14/06/2023 – I have created a Community version and added it to the PowerShell gallery so we can all add fixes, improvements and updates as a community effort. Read more here or download them with the commands below Install-Script -Name get-windowsautopilotinfocommunity Install-Module -Name WindowsAutopilotIntuneCommunity The Get-WindowsAutopilot script is in the toolbox or every Intune … Read more

Windows Autopatch Groups – A First Look

With the release of Intune release 2304 there have been some (welcome) new additions to Windows Autopatch including Autopatch groups and policy checks. Autopatch Groups For some of you Autopatch is a click, set and forget service, but for those in larger organizations, you may want more granular control over quality and especially feature updates … Read more

A look at Intune vs Config Manager from an apps perspective

If you’re starting on your device management journey, considering moving from Config Manager to Intune or switching from another platform, here is an article I have written looking at the two platforms and how they compare from a purely application perspective: Intune vs. Microsoft Configuration Manager: Packaging and deployment comparison Hopefully you find this a … Read more

Finding Anything in Intune from its name

Policy search by name console output

We’ve all been there, you created that Bitlocker policy (other policies are available) years ago, it’s working fine, but you can’t remember which section you created it in. You could click around in the portal until you find it, or you could run my latest script: Install-Script -Name intune-findby-name Also available on Github here Simply … Read more