Silently Encrypt Devices using MEM during Autopilot
If you go to the Microsoft Docs and look over which settings are required to silently encrypt devices, it may seem a bit confusing. The policy must not require the use of start PIN...
Author: Janusz
Target users and exclude devices by using Filters in Azure Active Directory Conditional Access
One of the most frequent questions I get about targeting Conditional Access policies is if we can mix and match user and device groups. This is a tempting ask because when you great a...
Deploy Windows 11 now using Intune and Windows Insider for Business
If you’re eager to start testing Windows 11 inside your organization, you’re in luck! For Intune managed devices, you can deploy Windows 11 right now by using Update for Business rings and Windows Insider...
Using FIDO2 keys to deploy passwordless devices
This post makes frequent references to a previous blog post I wrote specifically on deploying passwordless devices: Deploy Passwordless Devices for New Users – Device Advice. I split out the FIDO2 key section because...
Prepare your devices for Windows 11 by enabling Secure Boot and Firmware TPM
If you ran the PC Health Check app from Microsoft and got an error stating that your somewhat new device can’t run Windows 11, it’s likely due to your motherboard not having the firmware...
Do Offline Store for Business apps update automatically?
No – even though Offline Store for Business apps sync automatically with Intune, end users need to reinstall them to get the latest version. Let’s dive in and see how. If you’ve never set...
Deploy Passwordless Devices for New Users
There’s a lot of great discussion going on these days about getting rid of passwords – because they’re unsafe, hard to remember, frequently reused, etc. In that spirit, I’ve been exploring just how to...
Deploy Endpoint Analytics in 30 seconds
Go to endpoint.microsoft.com > Reports > Endpoint Analytics. In the Endpoint analytics tab, select which devices to collect data from (default is all cloud-managed devices), and click Start. Congrats – you’re done! You can...
How to use Autopilot with Smart Cards
Your organization may have a hard requirement to use smart cards (or PIV, CAC, etc.) for authentication. Maybe they’re also using ADFS, disabling passwords, and really don’t want to let anyone have a temporary...
Exploring Hybrid Azure AD Join with a Provisioning Package
In testing a provisioning package deployment, I found out that you can apply the PPKG to a domain-joined device so that it effectively becomes Hybrid Azure AD Joined. Although I’m not exactly sure if...
