Deploy a custom compliance policy in MEM
Did you know that Microsoft Endpoint Manager recently released a feature in preview to use custom compliance settings for Windows 10 and later devices? You may have noticed the Scripts pane in your MEM...
Category: Compliance Policy
Use Filters in Intune to target All Devices except Personal
Intune now has the capability to Filter policy, app, and profile assignments. While you could previously also do this with dynamic Azure AD Groups, Filters process significantly faster and can be more reliable. They...
Target users and exclude devices by using Filters in Azure Active Directory Conditional Access
One of the most frequent questions I get about targeting Conditional Access policies is if we can mix and match user and device groups. This is a tempting ask because when you great a...
Using FIDO2 keys to deploy passwordless devices
This post makes frequent references to a previous blog post I wrote specifically on deploying passwordless devices: Deploy Passwordless Devices for New Users – Device Advice. I split out the FIDO2 key section because...
Understanding Intune Application Protection
While Intune provides robust application management and protection policies, it can be a bit confusing to understand when coming from other mobile device management platforms. Let me start by making one point clear: Intune...
Deploy a Delayed Password Policy Change with Email Notifications using Intune Compliance Settings
Compliance policies define rules and settings, such as password or encryption requirements, that users and devices must meet to be “compliant”. They can be combined with conditional access to block users and devices that...
