Teaching you how to be a device management expert
Looking for an overview of Windows Virtual Desktop? Take a look at the following YouTube video by Microsoft Mechanics or the overview docs. For this post we’ll be diving straight into the configuration! Before...
Microsoft publicly maintains a Cybersecurity Reference Architecture. If you haven’t checked it out before, head on over to https://aka.ms/MCRA. Over the next few months, we’re going to explore all these options and talk about...
Recently released in preview, Intune now supports changing the primary user of Windows 10 devices! The process is fairly simple. In the MEM portal (https://devicemanagement.microsoft.com), select Devices > All Devices (or Windows) > and...
To deploy updates for Intune-only managed devices, you have to use Windows Update for Business rings. This is a good thing – using update rings sets you up for proactively monitoring and managing Windows...
In a previous post, Autopilot Reset – What does it do? How is it different?, we covered the different Wipe options in Intune. Lo and behold, a few months later and we have another...
My last two posts have covered the DISA STIG in-depth. In reality they were mostly mimicking work I’ve done before – leveraging LGPO and MMAT to apply GPOs. When I first set out to...
MMAT, or MDM Migration Analysis Tool, is an incredible tool that you can use for converting group policy items to custom CSPs. For most organizations, the biggest pain point for moving to MDM only...
Many Government customers I work with have an umbrella requirement to implement DISA STIGs as their baseline security policy. For those unfamiliar, DISA (Defense Information Systems Agency) STIGs (Security Technical Implementation Guide) are a...
In this blog post, we explore the various ways to block Intune unenrollment. The options vary based on whether or not they have administrator rights. Standard users One of the best features of Autopilot...
A few months ago I wrote a post on Device Advice about how to lock down devices to your tenant by assigning them to a user. Now this is no longer required! So what...
More
Azure AD / Intune / Mobile Device Management / Security / Windows 10
Block users from unenrolling from Intune
6 Sep, 2019
