Many of us have been testing the new Windows Autopilot Device Preparation Policies (or Apv2, whichever you want to call it). Don’t worry, this is not another blog on how to configure APv2. There are tons of those already out there. I’ve been testing this over the last week and my testing has been mostly […]

Yes, some organizations still rely on client VPNs for access to on prem resources. Hopefully, if you find yourself in this situation, you’re moving towards Entra joining your devices, and have a plan to eventually remove your on-prem AD reliant resources. Until then, you need to deploy a client VPN to your workstations. This post

This post walks through how to deploy the CrowdStrike Falcon Sensor for Windows using Intune. First, download the CrowdStrike Falcon Sensor executable from your CrowdStrike portal. You’ll also need the Customer ID (sometimes referred to as the CCID or CID). The Customer ID is different than the Installation token. Make sure you are copying the

Several months ago, I made a post on how to deploy the Cisco Umbrella Roaming client with Intune. Well, just recently Cisco announced the end-of-life dates for the Umbrella Roaming Client, and April 2, 2025, is the end of servicing & support (End-of-Life Announcement for the Cisco Umbrella Roaming Client). The replacement software is the

Before I get into this, no, I do not suggest disabling BitLocker or running with decrypted drives in production. BitLocker is good and should be used. However, sometimes clients have requests that we must fulfill. Perhaps they are moving to a third-party encryption solution, or they want to re-encrypt their devices using a stronger encryption

This seems to come up every once in a while, as a question on Reddit or on LinkedIn – How can I block browser Internet access or only allow access to certain sites on an Intune managed device? This post will cover how to completely block internet access from web browsers and how to only