Deploy a custom compliance policy in MEM
Did you know that Microsoft Endpoint Manager recently released a feature in preview to use custom compliance settings for Windows 10 and later devices? You may have noticed the Scripts pane in your MEM...
Author: Janusz
Use Proactive Remediations to detect users running out of hard drive space
A component of Endpoint Analytics, Proactive Remediations are an incredibly useful tool in Microsoft Endpoint Manager that help you detect and remediate issues proactively (as the name implies). Provided you are appropriately licensed, Endpoint...
Block screenshots using Microsoft Information Protection
Recently, I’ve been trying to figure out just how you can use sensitivity labels to prevent screenshots. There’s a great blog post on Tech Community that describes when to use Microsoft Information Protection (MIP)...
Set Time Zone Automatically during Autopilot
Every Windows device starts out with the time zone set to Pacific Time (UTC-08:00). Although not an official reason, it’s easy to assume that’s because Microsoft is based out of Redmond WA, which uses...
Use Filters in Intune to target All Devices except Personal
Intune now has the capability to Filter policy, app, and profile assignments. While you could previously also do this with dynamic Azure AD Groups, Filters process significantly faster and can be more reliable. They...
Use MEM to remove Microsoft Teams (Preview)
Depending on how you configure Windows 11, you may have a very confusing Teams experience: What’s going on here? All versions of Windows 11 come with Microsoft Teams (Preview), a consumer-only version of Teams...
Windows 11 in-box apps
All of the following was tested with the Windows 11 Preview ISO version 22454. Subject to change with Official Release. Expect this post to be updated accordingly. One of our most popular blog posts...
Silently Encrypt Devices using MEM during Autopilot
If you go to the Microsoft Docs and look over which settings are required to silently encrypt devices, it may seem a bit confusing. The policy must not require the use of start PIN...
Target users and exclude devices by using Filters in Azure Active Directory Conditional Access
One of the most frequent questions I get about targeting Conditional Access policies is if we can mix and match user and device groups. This is a tempting ask because when you great a...
Deploy Windows 11 now using Intune and Windows Insider for Business
Quick note – Windows 11 is now out! There’s an update at the end of this article detailing the improved way to deploy Windows 11. Updated on 10/5/21 If you’re eager to start testing...
