Filters in Intune or Microsoft Endpoint Manager are a gamechanger for the product and can help us assign profiles, policies and apps with greater accuracy then ever before. There’s still improvements that can be made for sure but it’s definitely the way forward. If you want the explanation of the logic behind this – read…
Recently I had a request to be able to deploy a “web link” to an iOS device and also make it full screen when launched, as if to look like an app. This concept of a web link exists already in Microsoft Intune – https://docs.microsoft.com/en-us/mem/intune/apps/web-app To add some context, that’s a fairly specific request of…
If you are using role-based access control (RBAC) in your Microsoft Endpoint Manager or Intune environment then you may be creating custom roles. I was asked recently about the permission required to view the Defender for Endpoint connector as setting what was seemingly the obvious option didn’t do the trick. If we look in the…
In November 2021 Microsoft added a feature to control the update priority of Android Managed play store apps on enrolled devices. This is great functionality to see, but if you read on you will see that this starts to create a point in time problem with app assignments. IMPORTANT NOTE – this ONLY applies to:…
I never planned to write this post but I’ve found some occurrences recently where organisations wanted to pilot co-management of their devices in Microsoft Endpoint Manager, but had configured it in a less than optimal way which exposed them to some risk of inadvertent changes. In short, don’t just use a single collection for all…
In April 2021, Microsoft announced a new feature which would be integrated into Windows (back-ported to version 1909) – News and Features. If you’re reading this then I’m going to assume you already know all about it. Just in case though, here’s the official post – https://blogs.windows.com/windowsexperience/2021/04/22/personalized-content-at-a-glance-introducing-news-and-interests-on-the-windows-10-taskbar/ Having read and listened to initial feedback on…
Not the snappiest title, I’ll work on it. But for now I will share the info anyway. I was asked about storing BitLocker recovery keys into Azure Active Directory with Microsoft Intune, which natively is fairly straight forward for Windows 10 fixed or operating system drives but no so much for removable drives. I’ll be…
Before I start, I can’t claim to be the brains behind all of this one as I’m simply sharing what has been shared with me and adding my own interpretations. David Inglis (@thecockneymanc) responded to a post I made on twitter as he’d been through the pain of figuring this one out but doesn’t have…
A very short post to share here based on something I was asked recently. The query below will present you ALL devices which ARE registered for Windows Autopilot, but excluding ones with a specific group tag. I’m sharing this one as it’s not quite as obvious as you may immediately think and it might save…
A really quick one here as I was asked this recently and tested it. Question Can we use a nested Azure AD group for assigning Intune Application Protection (AKA MAM-WE) policies? Answer Short version: Yes, but give it a little thought first Long version: I was asked this one recently and I wasn’t certain but…
More than patches 