If you ever see an Intune environment where Windows PCs are showing up with unknown ownership, and no apps or configuration policies apply to those devices, then your devices are probably enrolled under the wrong MDM authority of Office 365 Mobile instead of Intune. Here’s what you will see in Intune. And in Entra, we […]
Fixing Existing Office 365 Mobile MDM enrollments Read More »
Update 10/16/25 – The script has been completely rewritten to use raw Microsoft Graph API endpoints via Invoke-MgGraphRequest, rather than relying on the Microsoft Graph PowerShell SDK cmdlets. It also pulls the policy and configuration profile JSON files from my GitHub instead of as objects inside the script. If you want to use your own
Configure MAM for iOS/Android with one Script Read More »
Azure Temp storage and Page file review If you do any work with Azure Virtual Machines, you have probably run into VM SKUs that contain a temporary storage disk. These are VMs with a “d” in the name (e.g. – D4ds). Many people don’t know what they’re for or why they are even an option.
Azure v6 VMs and AVD: Automating Page File Setup on Temp Storage with Intune Read More »
If you’ve been working with Intune and Autopilot for at least the last few years, you’ve probably heard the saying “Friends don’t let friends use Hybrid-Joined Autopilot”. Trust me, I agree with that, but as an IT Consultant/Advisor, you can only guide and advise clients. You can’t force them to do things. In addition, some
App deployment is something just about every Intune admin must be comfortable with. Recently, most apps have become simpler to package and deploy. However, occasionally you’ll still have proprietary, legacy, or just poorly written apps that don’t contain silent installers or do things out of the ordinary. This was the case for an app I
IMECache Permissions Errors with User Context Win32 Apps Read More »
If you’re running virtual servers in Azure, it’s a good idea to explore removing your servers in favor of PaaS/SaaS solutions. Running VMs is often more expensive, and you have more overhead and maintenance. With that said, VMs are still very common, and oftentimes, migrating existing VMs to Azure is one of the first steps
How to in-place upgrade your Azure Windows Servers Read More »
The Issue As someone whose primary responsibility includes Endpoint Management, I received a question several weeks ago regarding managing Office add-ins on endpoints. Typically, Group Policy and/or Intune controlled this in the past. However, as things have changed with the M365 Apps over the last several years, so has managing the add-ins. Now, managing add-ins
From COM to Web: Managing Microsoft 365 App Add‑Ins Read More »
Group tags are a great way to break up your autopilot profile assignments based on the device’s needs. Since I work primarily with smaller businesses, I often see that no group tags are in use, and a blanket autopilot profile is assigned to all devices. While this works for some smaller organizations, as they grow
Bulk Change Autopilot Group Tags by PC Model Read More »
