Filters in Intune or Microsoft Endpoint Manager are a gamechanger for the product and can help us assign profiles, policies and apps with greater accuracy then ever before. There’s still improvements that can be made for sure but it’s definitely the way forward. If you want the explanation of the logic behind this – read…
Recently I had a request to be able to deploy a “web link” to an iOS device and also make it full screen when launched, as if to look like an app. This concept of a web link exists already in Microsoft Intune – https://docs.microsoft.com/en-us/mem/intune/apps/web-app To add some context, that’s a fairly specific request of…
If you are using role-based access control (RBAC) in your Microsoft Endpoint Manager or Intune environment then you may be creating custom roles. I was asked recently about the permission required to view the Defender for Endpoint connector as setting what was seemingly the obvious option didn’t do the trick. If we look in the…
A quick-fire post here that hopefully should only have time bound validity period due to an impending fix, but there appears to be a ‘feature’ around Office Apps admin that you should be aware of. If you are trying to manage Office policy from the Microsoft Endpoint Manager Admin center (MEMAC) or sometimes many people…
In November 2021 Microsoft added a feature to control the update priority of Android Managed play store apps on enrolled devices. This is great functionality to see, but if you read on you will see that this starts to create a point in time problem with app assignments. IMPORTANT NOTE – this ONLY applies to:…
I never planned to write this post but I’ve found some occurrences recently where organisations wanted to pilot co-management of their devices in Microsoft Endpoint Manager, but had configured it in a less than optimal way which exposed them to some risk of inadvertent changes. In short, don’t just use a single collection for all…
In April 2021, Microsoft announced a new feature which would be integrated into Windows (back-ported to version 1909) – News and Features. If you’re reading this then I’m going to assume you already know all about it. Just in case though, here’s the official post – https://blogs.windows.com/windowsexperience/2021/04/22/personalized-content-at-a-glance-introducing-news-and-interests-on-the-windows-10-taskbar/ Having read and listened to initial feedback on…
I was asked recently about removing the Office Hub from Windows 10. That’s this icon which can be found in the start menu. I don’t know why you would pro-actively remove this, but someone somewhere will want to do it so here we are. I couldn’t find a way to stop it from being installed…
Not the snappiest title, I’ll work on it. But for now I will share the info anyway. I was asked about storing BitLocker recovery keys into Azure Active Directory with Microsoft Intune, which natively is fairly straight forward for Windows 10 fixed or operating system drives but no so much for removable drives. I’ll be…
Before I start, I can’t claim to be the brains behind all of this one as I’m simply sharing what has been shared with me and adding my own interpretations. David Inglis (@thecockneymanc) responded to a post I made on twitter as he’d been through the pain of figuring this one out but doesn’t have…
A very short post to share here based on something I was asked recently. The query below will present you ALL devices which ARE registered for Windows Autopilot, but excluding ones with a specific group tag. I’m sharing this one as it’s not quite as obvious as you may immediately think and it might save…
In Configuration Manager Current Branch* we have a report which automatically gathers the Windows Autopilot hardware hashes and other information. This allows us to handily export the report into a CSV and hey presto it’s in the correct format to upload straight into Autopilot. I wrote it up at the time of the tech preview…
Hopefully, no one will ever need to read this, but I had a weird issue today. I’ve never had this before with Configuration Manager or any other app for that. I use a lab based on virtual machines and at the end of each day the VMs are put into a saved state as the…
This is the third of a three part blog which covers a walk through of Microsoft Azure Active Directory Identity Protection. Other parts can be found here: Part 1 – https://morethanpatches.com/2020/12/04/microsoft-identity-protection-1 What Identity Protection is, what you need and what the policies are. Part 2 – https://morethanpatches.com/2020/12/04/microsoft-identity-protection-2 Looks at the reporting sections and what information…
This is the second of a three part blog which covers a walk through of Microsoft Azure Active Directory Identity Protection. Other parts can be found here: Part 1 – https://morethanpatches.com/2020/12/04/microsoft-identity-protection-1 What Identity Protection is, what you need and what the policies are. Part 2 (this one) Looks at the reporting sections and what information…
More than patches 