Intro: I just recently moved into a new house. Moving with four young kids meant some of my things had to take a back seat being unpacked. One of which was my home lab hardware. I forgot how much I used my home lab until it wasn’t available for a few days. That’s what sparked […]
A Guide for Creating an Entra & Intune Lab Read More »
***A new post covering how to do this for New Teams is available here – Deploy Custom Backgrounds to New Teams with Remediations – SMBtotheCloud A client recently wanted to deploy organizational backgrounds to all Teams users. However, this is now a Teams Premium feature, which is an additional cost per user per month (Custom
Intro Every couple of weeks I see a Reddit post or question asking about device group memberships or filters for certain properties that Azure AD doesn’t natively contain. One common request is making a dynamic group for all desktops or all laptops. There may be other specific properties about your devices that Azure AD doesn’t
Dynamically add Device Extension Attributes using Remediations Read More »
Conditional Access is constantly evolving and adding new features. One of the newer features is conditional access for workload identities. This allows us to secure service principals for our app registrations. At the moment, this is limited to two conditions – service principal risk and/or Locations. Personally, I’d like to see grant controls for compliant
Testing Conditional Access for Workload Identities Read More »
Updated 5/24/2023 – New Custom Detection Script to update your images without updating your Win32 App I recently had a client come to me asking about setting the wallpaper and lock screen, which is a fairly simple task by following the original post content under this section. However, they had several business units where they
Set desktop & lock screen background on Windows 10 Pro using Intune Read More »
There never seems to be a shortage of issues when dealing with Hybrid Azure AD Joined + Intune Enrolling endpoints. Especially when you inherit a setup and have no history of what was implemented in the past. I encountered a new issue the other day and figured I’d made a quick post. In this situation,
Resolve HAADJ Intune auto-enrollment errors for devices previously enrolled in MAM Read More »
Naming Hybrid Joined devices during autopilot has always been very limited. You can’t use variables like %SERIAL% to add the serial number to the device name. You’re basically stuck using a prefix and a randomly generated string of characters. That’s not the best naming convention and it usually adds an additional step for IT admins
Introduction Sometimes you end up discovering pretty neat things as a result of working on an unrelated issue. That’s how this post was born. I have been working on a way to rename hybrid AADJ devices during Autopilot to use their serial number for several weeks (I’ll have that post finished in a week or
Automate a Reboot or Custom Script When the Autopilot ESP is Complete Read More »
One big blog post I’ve been working on has spawned a couple of other smaller ideas, including this. There have been times when a complex custom application or customization needs to be deployed to endpoints. For applications and certain customizations, Win32 apps are usually the best way. However, this solution can also be applied to
I came across an interesting Microsoft learn page about using custom attributes on a user’s profile card a couple of weeks ago and did some testing. I felt the MS Learn article was a bit confusing, so I made this post to help clarify some things. Extension Attributes are essentially custom values you can add