Several months ago, I made a post on how to deploy the Cisco Umbrella Roaming client with Intune. Well, just recently Cisco announced the end-of-life dates for the Umbrella Roaming Client, and April 2, 2025, is the end of servicing & support (End-of-Life Announcement for the Cisco Umbrella Roaming Client). The replacement software is the […]
Deploy the Cisco Secure Client with Umbrella Module using Intune Read More »
Before I get into this, no, I do not suggest disabling BitLocker or running with decrypted drives in production. BitLocker is good and should be used. However, sometimes clients have requests that we must fulfill. Perhaps they are moving to a third-party encryption solution, or they want to re-encrypt their devices using a stronger encryption
Disable BitLocker on Existing Devices with Intune Read More »
This seems to come up every once in a while, as a question on Reddit or on LinkedIn – How can I block browser Internet access or only allow access to certain sites on an Intune managed device? This post will cover how to completely block internet access from web browsers and how to only
Block Internet Browsing with Intune Read More »
This issue started out as a support ticket where many users were being asked to authenticate to M365 apps every time they signed into AVD. For context, this was a smaller environment with only a few Windows 11 multi-session hosts. The session hosts are also hybrid-joined and Intune enrolled. So, the first thing I usually
Intune Enrollment Error 0x80180005 on AVD multi-session host Read More »
**CISCO NO LONGER RECOMMENDS USING THE UMBRELLA ROAMING CLIENT. SEE THIS POST FOR INSTRUCTIONS ON DEPLOYING THE SECURE CLIENT WITH UMBRELLA MODULE – Deploy the Cisco Secure Client with Umbrella Module using Intune – SMBtotheCloud If your organization or clients are using Cisco Umbrella for additional endpoint protection, this blog walks through deploying the Umbrella
Deploy the Cisco Umbrella Roaming Client with Intune Read More »
All organizations differ in how they want to secure (or not secure) their data. Inevitably, the weakest points in an organization’s defense are the end users and endpoints. Allowing any device access to corporate resources is generally not a good practice. It’s much easier to control access from company-owned hardware since we can ensure our
Handling Unmanaged Windows Devices – Using Windows MAM with Intune Read More »
I recently ran into an issue with a client when trying to capture a new AVD image. When trying to sysprep the VM before image capture, we were receiving the below error – “Sysprep was not able to validate your Windows Installation. Review the log file at %WINDIR%\System32\Sysprep\Panther\setupact.log” The above error on its own is
With the New Teams app being GA, organizations will eventually move from “Teams Classic” to the “New Teams” app. There are several reasons to make the switch, the biggest reason likely being the performance benefits. As I’ve been testing the new teams, I realized that custom backgrounds that were manually added, or added via remediations,
Deploy Custom Backgrounds to New Teams with Remediations Read More »
You may or may not know that there is a specific way to install Teams when using a VDI solution. AVD is what I end up working with in almost every situation, so this article is catered to AVD. However, this solution can be used for any VDI solution that uses the Teams machine-wide installer.
Keep Teams Machine-Wide-Installer Updated on AVD (or other VDI) with Intune Remediations Read More »
After getting some questions recently about deploying S1 with Intune and noticing some documentation still instructing people to use an MSI LOB app (ew), I made a quick guide on how to deploy the S1 agent to Windows workstations. Hope this helps.
Deploy SentinelOne with Intune Read More »