Tips for migrating Intune managed Windows 10 devices to a new tenant
Let’s start with the bad news up front – if you need to migrate devices to a new tenant you’ll basically need to reset and re-enroll every device. Why is that? For Azure AD...
Category: Azure AD
How to leave an organization when using a personal Teams account
Normally, personal Microsoft accounts don’t have access to the myapps.microsoft.com site. This would make sense because the MyApps site is generally used to access Azure Active Directory applications that were published to your organization...
How to disable the “Your organization requires Windows Hello” prompt during OOBE
If you’re seeing the “Your organization requires Windows Hello” or “Use Windows Hello with your account” prompt during the out of box experience (OOBE), but thinking to yourself – “I never set up Windows...
How to set up Windows Hello for Business for cloud-only devices
If you’ve ever set up a Windows 10 PC, you’ll know that at one point during the out-of-box-experience you will be prompted for Windows Hello set up. Most of the time you can configure...
Configure Azure AD Identity Protection (AAD IP)
If you looked at the how to set up Azure MFA post, you’ll have seen a step on how to require users to register for Azure MFA using Azure AD Identity Protection (AAD IP)....
Using Conditional Access to block “Sign in from another device”
Recently, I ran into an interesting scenario that fits nicely with our ongoing cybersecurity posts. What if your organization is using a non-Intune mobile device management platform and you’d like to use Conditional Access...
How to set up Azure Multi-Factor Authentication (MFA)
Remember the Cybersecurity Reference Architecture we referenced in our post on Windows 10 in S Mode? If we head over to the Identity & Access portion, we’ll find Multi-Factor Authentication. What’s great about Azure...
How to change the primary user for an Intune managed device
Recently released in preview, Intune now supports changing the primary user of Windows 10 devices! The process is fairly simple. In the MEM portal (https://devicemanagement.microsoft.com), select Devices > All Devices (or Windows) > and...
Change a device name in Azure AD using Microsoft Graph
Early this month, we explored how to discover device information using the Graph Explorer. Well one way we can edit that info (which is reported back into Azure AD) is with PowerShell. Let’s take...
Use Graph Explorer to discover property values for Dynamic Groups in Azure AD
You’ve probably created a dynamic Azure AD group for your Autopilot devices – but what does that ZTDID string even mean? Do you have to use that query? In this blog post we’ll explore...
