Intune

Automate a Reboot or Custom Script When the Autopilot ESP is Complete

Introduction Sometimes you end up discovering pretty neat things as a result of working on an unrelated issue. That’s how this post was born. I have been working on a way to rename hybrid AADJ devices during Autopilot to use their serial number for several weeks (I’ll have that post finished in a week or […]

Automate a Reboot or Custom Script When the Autopilot ESP is Complete Read More »

Receive Teams Notifications with Details of Failed Custom Detection Scripts or Proactive Remediations

One big blog post I’ve been working on has spawned a couple of other smaller ideas, including this. There have been times when a complex custom application or customization needs to be deployed to endpoints. For applications and certain customizations, Win32 apps are usually the best way. However, this solution can also be applied to

Receive Teams Notifications with Details of Failed Custom Detection Scripts or Proactive Remediations Read More »

User extensionAttributes: Customizing User Contact Cards, Dynamic Groups, and Automating with Power Automate

I came across an interesting Microsoft learn page about using custom attributes on a user’s profile card a couple of weeks ago and did some testing. I felt the MS Learn article was a bit confusing, so I made this post to help clarify some things. Extension Attributes are essentially custom values you can add

User extensionAttributes: Customizing User Contact Cards, Dynamic Groups, and Automating with Power Automate Read More »

Skipping the First-Run Experience for the Windows 365 Preview application

Introduction: The Windows 365 Preview application is a great store app for organizations utilizing Windows 365 virtual desktops. Although currently, there is no “official” way to bypass the first run experience. From what I’ve heard, Microsoft says there may be some more options for this once the app is GA, but there is no timeline

Skipping the First-Run Experience for the Windows 365 Preview application Read More »

Azure AD Joined AVD with FSLogix + AAD Kerberos authentication

I’ve made it a priority recently to push organizations away from active directory domain controllers and adopt Azure AD Joined devices as much as possible. AVD has often been a hurdle since it’s usually configured to use pooled desktops, which rely on FSLogix, which use SMB shares, which rely on Kerberos authentication, which traditionally relies

Azure AD Joined AVD with FSLogix + AAD Kerberos authentication Read More »

Troubleshoot Intune Win32Apps with multiple detection rules

If you’re using Win32 apps with more than one detection rule, it’s advantageous to quickly determine which detection rule is failing. We get this information by inspecting the IME log on an affected device, but you need to know what to look for. The Intune Management Extension log is located in %programdata%\Microsoft\IntuneManagementExtension\logs\IntuneManagementExtension.log. It contains tons

Troubleshoot Intune Win32Apps with multiple detection rules Read More »

Deploy Custom Toast Notifications with Intune – Part 2

This is a continuation of where we left off in part one. Part one covered the structure of toast notifications, how we can craft customized notification content, and how to trigger a toast notification using PowerShell. We also reviewed how to use the action buttons to run PowerShell scripts. Part two of this post covers

Deploy Custom Toast Notifications with Intune – Part 2 Read More »

Deploy Custom Toast Notifications with Intune & how to run scripts from the action buttons – Part 1

You’re probably familiar with toast notifications in Windows. They are the notifications that pop up in the bottom right-hand corner of your screen. They can be purely informational or have action buttons to click, such as opening a website. I wanted to figure out how to create custom notifications and use the action buttons to

Deploy Custom Toast Notifications with Intune & how to run scripts from the action buttons – Part 1 Read More »