If you are using role-based access control (RBAC) in your Microsoft Endpoint Manager or Intune environment then you may be creating custom roles. I was asked recently about the permission required to view the Defender for Endpoint connector as setting what was seemingly the obvious option didn’t do the trick. If we look in the…
A quick-fire post here that hopefully should only have time bound validity period due to an impending fix, but there appears to be a ‘feature’ around Office Apps admin that you should be aware of. If you are trying to manage Office policy from the Microsoft Endpoint Manager Admin center (MEMAC) or sometimes many people…
Not the snappiest title, I’ll work on it. But for now I will share the info anyway. I was asked about storing BitLocker recovery keys into Azure Active Directory with Microsoft Intune, which natively is fairly straight forward for Windows 10 fixed or operating system drives but no so much for removable drives. I’ll be…
This is the third of a three part blog which covers a walk through of Microsoft Azure Active Directory Identity Protection. Other parts can be found here: Part 1 – https://morethanpatches.com/2020/12/04/microsoft-identity-protection-1 What Identity Protection is, what you need and what the policies are. Part 2 – https://morethanpatches.com/2020/12/04/microsoft-identity-protection-2 Looks at the reporting sections and what information…
This is the second of a three part blog which covers a walk through of Microsoft Azure Active Directory Identity Protection. Other parts can be found here: Part 1 – https://morethanpatches.com/2020/12/04/microsoft-identity-protection-1 What Identity Protection is, what you need and what the policies are. Part 2 (this one) Looks at the reporting sections and what information…
This is the first of a three part blog which covers a walk through of Microsoft Azure Active Directory Identity Protection. Other parts can be found here: Part 1 (this one) What Identity Protection is, what you need and what the policies are. Part 2 – https://morethanpatches.com/2020/12/04/microsoft-identity-protection-2 Looks at the reporting sections and what information…
One of my favourite everyday features in Azure Active Directory (AAD) has to be the Validate Rules options of dynamic group memberships, at the time of writing this is in preview. You’ll see this as a separate tab in the Dynamic membership rules section of AAD. I’m writing this as I think it’s easily missed…
Top tip time If you’re searching for groups in Intune/Azure AD/M365 Device Management portal. It’s not a very effective search. Example, searching MDM finds these: Searching “Android” finds nothing despite it clearly being there. Make sure you use the Preview for groups experience And now it works… Moral of the story, use the preview for…
More than patches 