Silently Encrypt Devices using MEM during Autopilot
If you go to the Microsoft Docs and look over which settings are required to silently encrypt devices, it may seem a bit confusing. The policy must not require the use of start PIN...
Category: Azure AD
Target users and exclude devices by using Filters in Azure Active Directory Conditional Access
One of the most frequent questions I get about targeting Conditional Access policies is if we can mix and match user and device groups. This is a tempting ask because when you great a...
Using FIDO2 keys to deploy passwordless devices
This post makes frequent references to a previous blog post I wrote specifically on deploying passwordless devices: Deploy Passwordless Devices for New Users – Device Advice. I split out the FIDO2 key section because...
Deploy Passwordless Devices for New Users
There’s a lot of great discussion going on these days about getting rid of passwords – because they’re unsafe, hard to remember, frequently reused, etc. In that spirit, I’ve been exploring just how to...
How to use Autopilot with Smart Cards
Your organization may have a hard requirement to use smart cards (or PIV, CAC, etc.) for authentication. Maybe they’re also using ADFS, disabling passwords, and really don’t want to let anyone have a temporary...
Exploring Hybrid Azure AD Join with a Provisioning Package
In testing a provisioning package deployment, I found out that you can apply the PPKG to a domain-joined device so that it effectively becomes Hybrid Azure AD Joined. Although I’m not exactly sure if...
AD FS Authentication Methods supported during Autopilot
If your organization is using AD FS, you may start running into errors when you try testing Autopilot. Reason being – not every AD FS authentication method works during the out-of-box-experience. Let’s take a...
Troubleshooting Autopilot Error 0x801C03ED
During some recent self-deploying Autopilot testing, I ran into an error with “device preparation” so I thought I’d share the simple resolution in case anyone runs into the same issue. From the event log...
Tips for migrating Intune managed Windows 10 devices to a new tenant
Let’s start with the bad news up front – if you need to migrate devices to a new tenant you’ll basically need to reset and re-enroll every device. Why is that? For Azure AD...
How to leave an organization when using a personal Teams account
Normally, personal Microsoft accounts don’t have access to the myapps.microsoft.com site. This would make sense because the MyApps site is generally used to access Azure Active Directory applications that were published to your organization...
