This post describes a recent issue I had with BitLocker drive encryption. It started with Hybrid AAD joined devices showing successfully encrypted, but keys are not uploading to Azure AD, and the encryption settings were not really being deployed. Further investigation revealed a strange BitLocker state on most of the machines. If you find yourself in […]
Before I begin, you should not use Hybrid Azure AD Join unless the organization truly needs it. This was a unique situation where due to a compliance requirement, MDM needed to be implemented in less than a week. There wasn’t time to move to AADJ in the very short term. Therefore, it was decided to
HAADJ devices stuck with pending registration state Read More »
As organizations continue to expand their remote workforces, those refusing to adopt modern cloud solutions are neglecting tools that enhance mobility and productivity. They’re also putting corporate data at higher risk of compromise by not taking advantage of modern cloud security solutions. It wasn’t that long ago where nearly all employees were reporting to an
This is a quick post, but useful for anyone who has not stamped out basic authentication in their environment. Or perhaps you’ve inherited several new clients, or need to identify this across many clients. In any case, you can always use the manual method of signing into the Azure GUI and filtering sign-in logs, which
Find successful basic authentications quickly with PowerShell Read More »
Microsoft recently brought back the Windows 365 Cloud PC trial, and with limited Windows 365 experience, this was my chance to get some hand-on experience for free. With AVD and Windows 365 really looking like the future of large scale VDI, I wanted to do some benchmarking on the hardware, test RDP Short path for
Win365 Cloud PC review – Benchmarking, RDP Short path, and Mobile device Experience Read More »
A quick summary on User/System context for app deployments I see posts about this on Reddit pretty often. Usually the OP is trying to copy a configuration file to the target user’s appdata folder. They run the script manually on a workstation, and it all works fine, but when they try deploying it through Intune,
Intro This post was inspired by a question posted to the Modern Endpoint Management LinkedIn group about syncing/backing up users’ teams backgrounds to OneDrive. I work with Teams a lot, so this was something I was interested in solving. Teams backgrounds are stored in the user’s %appdata% folder. So, the challenge was to sync the
Sync Users’ Teams Backgrounds (or other files) with OneDrive using Intune Read More »
Intune does not have a native way to create scheduled tasks, but we can still deploy them to machines by using a Win32 app. If you don’t have the licensing to use proactive remediations, we can use this as a workaround to get some similar results (but without any native reporting in Intune). So, for
Deploy Scheduled Tasks as Win32 Apps Read More »
