Tips for migrating Intune managed Windows 10 devices to a new tenant
Let’s start with the bad news up front – if you need to migrate devices to a new tenant you’ll basically need to reset and re-enroll every device. Why is that? For Azure AD...
Category: Intune
Manage and report on Defender Antivirus Signature update versions through Microsoft Endpoint Manager
Microsoft Endpoint Manager provides a ton of functionality for managing Defender Antivirus. In a previous post we dived into configuring Defender Antivirus, so today we’ll be reviewing some of the specifics around Signature updates....
Use Group Policy analytics to convert GPOs to Intune Configuration Profiles
If you’re interested in reducing some of the load on your on-premises environment, transitioning GPOs (group policy objects) to CSPs (configuration service providers) is a great way to start! As a quick background –...
Deploy Microsoft Defender ATP Baseline with Intune (no Defender ATP license required!)
Question: Can you deploy the Defender ATP baseline in Intune without a license for Microsoft Defender for Endpoint (formerly Defender Advanced Threat Protection)? Answer: Yes! In our last blog post, Configure Microsoft Defender Antivirus...
Configure Microsoft Defender Antivirus with Intune
Microsoft Defender Antivirus is a component of Microsoft Defender for Endpoint, previously Microsoft Defender Advanced Threat Protection. But Microsoft Defender Antivirus does not require Microsoft Defender for Endpoint. I personally think those sentences are...
How to disable the “Your organization requires Windows Hello” prompt during OOBE
If you’re seeing the “Your organization requires Windows Hello” or “Use Windows Hello with your account” prompt during the out of box experience (OOBE), but thinking to yourself – “I never set up Windows...
Deploy a desktop shortcut for a Microsoft Store app with Intune
To deploy a Microsoft Store shortcut to the desktop, we’ll need to create a PowerShell script with the following content: In the Arguments line, note that I’m selecting the Company Portal app. If you’re...
How to set up Windows Hello for Business for cloud-only devices
If you’ve ever set up a Windows 10 PC, you’ll know that at one point during the out-of-box-experience you will be prompted for Windows Hello set up. Most of the time you can configure...
Using Conditional Access to block “Sign in from another device”
Recently, I ran into an interesting scenario that fits nicely with our ongoing cybersecurity posts. What if your organization is using a non-Intune mobile device management platform and you’d like to use Conditional Access...
How to change the primary user for an Intune managed device
Recently released in preview, Intune now supports changing the primary user of Windows 10 devices! The process is fairly simple. In the MEM portal (https://devicemanagement.microsoft.com), select Devices > All Devices (or Windows) > and...
