This post walks through how to deploy the CrowdStrike Falcon Sensor for Windows using Intune. First, download the CrowdStrike Falcon Sensor executable from your CrowdStrike portal. You’ll also need the Customer ID (sometimes referred to as the CCID or CID). The Customer ID is different than the Installation token. Make sure you are copying the […]
Deploy CrowdStrike Falcon Sensor with Intune Read More »
I’ve configured password writeback dozens of times, but just recently, I stumbled upon the ADSyncConfig PowerShell module. If you don’t know how to configure password writeback, it’s a fairly simply process. You can follow the Microsoft Learn document for a tutorial. However, this post will look at making the permissions section much more efficient and
Easily set Entra Connect Password Writeback Permissions with PowerShell Read More »
Several months ago, I made a post on how to deploy the Cisco Umbrella Roaming client with Intune. Well, just recently Cisco announced the end-of-life dates for the Umbrella Roaming Client, and April 2, 2025, is the end of servicing & support (End-of-Life Announcement for the Cisco Umbrella Roaming Client). The replacement software is the
Deploy the Cisco Secure Client with Umbrella Module using Intune Read More »
Before I get into this, no, I do not suggest disabling BitLocker or running with decrypted drives in production. BitLocker is good and should be used. However, sometimes clients have requests that we must fulfill. Perhaps they are moving to a third-party encryption solution, or they want to re-encrypt their devices using a stronger encryption
Disable BitLocker on Existing Devices with Intune Read More »
This seems to come up every once in a while, as a question on Reddit or on LinkedIn – How can I block browser Internet access or only allow access to certain sites on an Intune managed device? This post will cover how to completely block internet access from web browsers and how to only
Block Internet Browsing with Intune Read More »
This issue started out as a support ticket where many users were being asked to authenticate to M365 apps every time they signed into AVD. For context, this was a smaller environment with only a few Windows 11 multi-session hosts. The session hosts are also hybrid-joined and Intune enrolled. So, the first thing I usually
Intune Enrollment Error 0x80180005 on AVD multi-session host Read More »
While troubleshooting some client AVD issues, I came across something I had not seen before. There were many errors in the FSLogix event log showing that a volume had errors, and this was pointing to user VHDX profile disks. After taking a closer look, this was happening on around half of the user profile disks.
Repair all FSLogix Profiles using PowerShell (or any VHDX files) Read More »
I do a lot of MAM rollouts. Most of them go off without a hitch and any issues are usually resolved by reinstalling the application. However, I encountered a couple of issues recently and figured I’d share this. I should say that I’ve rolled MAM out to thousands of devices and this is the first
iOS MAM error “Device Passcode Required” Read More »
