Teaching you how to be a device management expert
Autopilot / Azure AD / Deployment / Intune / Microsoft Endpoint Manager / Mobile Device Management / Windows 10 / Windows 11
by Janusz
Many organizations are moving to cloud native identity and device management. For good reason – it lets your users work from anywhere and reduces the need for maintaining on-prem infrastructure and resources. If you...
Azure AD / Defender / Defender for Endpoint / Deployment / Hybrid / Microsoft Endpoint Manager / Security
by Janusz
A more thorough title for this post would be “Use Security Management for Microsoft Defender for Endpoint to deploy security configurations from Microsoft Endpoint Manager to Windows Servers.” But let’s be honest, that’s way...
Autopilot / Azure AD / Deployment / Intune / Microsoft Endpoint Manager / Security / Windows 10 / Windows 11
by Janusz
If you go to the Microsoft Docs and look over which settings are required to silently encrypt devices, it may seem a bit confusing. The policy must not require the use of start PIN...
One of the most frequent questions I get about targeting Conditional Access policies is if we can mix and match user and device groups. This is a tempting ask because when you great a...
Azure AD / Compliance Policy / Deployment / Security / Windows Virtual Desktop / Zero Trust
by Janusz
This post makes frequent references to a previous blog post I wrote specifically on deploying passwordless devices: Deploy Passwordless Devices for New Users – Device Advice. I split out the FIDO2 key section because...
Autopilot / Azure AD / Deployment / Intune / Microsoft Endpoint Manager / Mobile Device Management / Windows 10 / Zero Trust
by Janusz
There’s a lot of great discussion going on these days about getting rid of passwords – because they’re unsafe, hard to remember, frequently reused, etc. In that spirit, I’ve been exploring just how to...
Autopilot / Azure AD / Deployment / Hybrid / Intune / Microsoft Endpoint Manager / Windows 10
by Janusz
Your organization may have a hard requirement to use smart cards (or PIV, CAC, etc.) for authentication. Maybe they’re also using ADFS, disabling passwords, and really don’t want to let anyone have a temporary...
In testing a provisioning package deployment, I found out that you can apply the PPKG to a domain-joined device so that it seemingly becomes Hybrid Azure AD Joined. Although I’m not exactly sure if...
If your organization is using AD FS, you may start running into errors when you try testing Autopilot. Reason being – not every AD FS authentication method works during the out-of-box-experience. Let’s take a...
During some recent self-deploying Autopilot testing, I ran into an error with “device preparation” so I thought I’d share the simple resolution in case anyone runs into the same issue. From the event log...
More
| Cookie | Duration | Description |
|---|---|---|
| viewed_cookie_policy | 11 months | The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data. |
