Windows

Troubleshoot Intune Win32Apps with multiple detection rules

If you’re using Win32 apps with more than one detection rule, it’s advantageous to quickly determine which detection rule is failing. We get this information by inspecting the IME log on an affected device, but you need to know what to look for. The Intune Management Extension log is located in %programdata%\Microsoft\IntuneManagementExtension\logs\IntuneManagementExtension.log. It contains tons […]

Troubleshoot Intune Win32Apps with multiple detection rules Read More »

Deploy Custom Toast Notifications with Intune – Part 2

This is a continuation of where we left off in part one. Part one covered the structure of toast notifications, how we can craft customized notification content, and how to trigger a toast notification using PowerShell. We also reviewed how to use the action buttons to run PowerShell scripts. Part two of this post covers

Deploy Custom Toast Notifications with Intune – Part 2 Read More »

Deploy Custom Toast Notifications with Intune & how to run scripts from the action buttons – Part 1

You’re probably familiar with toast notifications in Windows. They are the notifications that pop up in the bottom right-hand corner of your screen. They can be purely informational or have action buttons to click, such as opening a website. I wanted to figure out how to create custom notifications and use the action buttons to

Deploy Custom Toast Notifications with Intune & how to run scripts from the action buttons – Part 1 Read More »

Removable Storage Automatic BitLocker Recovery Key Escrow to Azure AD | BitLocker-to-go Guide for Intune

BitLocker on removable drives is known as “BitLocker to go”, but I will just refer to it as BitLocker in this writing. Requiring BitLocker on removable drives is fairly easy with the built-in Intune Endpoint Security profile templates.  Some of you may be thinking removable storage should be completely blocked for security reasons. I agree

Removable Storage Automatic BitLocker Recovery Key Escrow to Azure AD | BitLocker-to-go Guide for Intune Read More »

SSO to on-premises resources with Azure AD Joined devices – Use AADJ unless you are certain you need Hybrid.

In this post I’ll take a closer look at how AADJ machines authenticated with an AD Synced identity can seamlessly access on-prem resources. This includes things like SMB file shares or other applications that require AD USER authentication. It’s important to remember if you have services utilizing machine authentication, those devices will need to remain AD joined

SSO to on-premises resources with Azure AD Joined devices – Use AADJ unless you are certain you need Hybrid. Read More »

PowerShell + Intune to edit HKCU registry as System when standard users don’t have permission.

A question was recently asked about how to set the wallpaper fit with Intune (fill, stretch, tile, etc.). This reminded me of a previous blog post about setting the background and lock screen on Windows 10 Pro devices with Intune (you can see that post here). I figured I’d update that post but found myself

PowerShell + Intune to edit HKCU registry as System when standard users don’t have permission. Read More »