When organizations want to secure their company data but still allow employees to use personal mobile devices (Android/iOS), the best option is to use MAM (Mobile Application Management). MAM is accomplished by using an App Protection Policy along with a Conditional Access Policy. You can use MAM in conjunction with MDM, but this post will […]
If you are constantly testing Intune and autopilot configurations, you probably use hyper-v on your local PC or have some form of virtualization to help accomplish this. When you’re testing configs for various tenants, its usually quicker to spin up a machines with a unique VM ID & serial number for testing. I tried to
Use Hyper-V and PowerShell to quickly spin up Windows test machines Read More »
If you have a use case to exclude or include certain devices from a conditional access policy, Microsoft gives us the option to “filter for devices” when creating or editing a policy. For example, you can exclude all Dell devices from a policy. In this demonstration, I have a conditional access policy to block sign-ins from
Use device filters for conditional access policies to exclude/include specific devices Read More »
I just came across this issue and figured I’d make a post about it. Before I begin, I am mostly anti-windows print server. There are cloud print solutions and ways to connect printers via IP port with intune. If you need to deploy printers via IP port to workstations, use Ben Whitmore’s post – https://msendpointmgr.com/2022/01/03/install-network-printers-intune-win32apps-powershell/. I
Deploy Shared Network Printers (SMB) with Intune Read More »
Businesses are increasingly adopting Teams as their company telephony solution. At the same, many are also ditching on prem Active Directory and turning to Endpoint Manager with Azure AD for device and identity management. In many cases, implementing QoS won’t make a noticeable difference in audio/video performance. However, if the organization has a more complex
Use Intune to configure Teams QoS for Windows Clients (when you don’t have GPOs) Read More »
If you do app deployments for numerous tenants, it can be time consuming creating Win32 app packages. Especially for common apps that many businesses use. I had the idea of trying to automate the task of packaging and uploading common apps (Adobe reader, Chrome, Firefox, VLC, etc.). I came across the IntuneWin32App PowerShell module (Github
Using PowerShell to quickly package and upload Win32 Apps to Intune Read More »
Ever have to deal with trying to enroll a large number of existing devices in autopilot? It can be painful. Especially if they are not already Intune enrolled. I wrote a script that utilizes AzCopy to upload the captured hardware hash to Azure Blob storage. The script must be executed as an administrator, but if
Upload Autopilot hardware hashes to Azure Blob storage Read More »
In the event you need to enroll devices with Intune that are already joined to AzureAD, there is an easy way by using MDM only enrollment. Microsoft describes this method as an option to MDM enroll workgroup, AD, or AADJ devices. Microsoft states this method is not recommended because: It doesn’t register the device into
Enroll AzureAD joined Windows devices with Intune Read More »
