Teaching you how to be a device management expert
Endpoint Analytics / Intune / Microsoft Endpoint Manager / PowerShell / Windows 10 / Windows 11
by Janusz
A component of Endpoint Analytics, Proactive Remediations are an incredibly useful tool in Microsoft Endpoint Manager that help you detect and remediate issues proactively (as the name implies). Provided you are appropriately licensed, Endpoint...
Defender / Microsoft Information Protection / Security / Windows 10 / Windows 11 / Zero Trust
by Janusz
Recently, I’ve been trying to figure out just how you can use sensitivity labels to prevent screenshots. There’s a great blog post on Tech Community that describes when to use Microsoft Information Protection (MIP)...
Autopilot / Deployment / Intune / Microsoft Endpoint Manager / PowerShell / Windows 10 / Windows 11
by Janusz
Every Windows device starts out with the time zone set to Pacific Time (UTC-08:00). Although not an official reason, it’s easy to assume that’s because Microsoft is based out of Redmond WA, which uses...
Autopilot / Compliance Policy / Deployment / Intune / Microsoft Endpoint Manager / Mobile Device Management / Windows 10 / Windows 11
by Janusz
Intune now has the capability to Filter policy, app, and profile assignments. While you could previously also do this with dynamic Azure AD Groups, Filters process significantly faster and can be more reliable. They...
Deployment / Intune / Microsoft Endpoint Manager / Mobile Device Management / Office 365 / Teams / Windows 11
by Janusz
Depending on how you configure Windows 11, you may have a very confusing Teams experience: What’s going on here? All versions of Windows 11 come with Microsoft Teams (Preview), a consumer-only version of Teams...
All of the following was tested with the Windows 11 Preview ISO version 22454. Subject to change with Official Release. Expect this post to be updated accordingly. One of our most popular blog posts...
Autopilot / Azure AD / Deployment / Intune / Microsoft Endpoint Manager / Security / Windows 10 / Windows 11
by Janusz
If you go to the Microsoft Docs and look over which settings are required to silently encrypt devices, it may seem a bit confusing. The policy must not require the use of start PIN...
One of the most frequent questions I get about targeting Conditional Access policies is if we can mix and match user and device groups. This is a tempting ask because when you great a...
Deployment / Intune / Microsoft Endpoint Manager / Mobile Device Management / Windows 10 / Windows 11
by Janusz
Quick note – Windows 11 is now out! There’s an update at the end of this article detailing the improved way to deploy Windows 11. Updated on 10/5/21 If you’re eager to start testing...
Azure AD / Compliance Policy / Deployment / Security / Windows Virtual Desktop / Zero Trust
by Janusz
This post makes frequent references to a previous blog post I wrote specifically on deploying passwordless devices: Deploy Passwordless Devices for New Users – Device Advice. I split out the FIDO2 key section because...
More
Defender / Intune / Security / Windows 10
Configure Microsoft Defender Antivirus with Intune
September 28, 2020
| Cookie | Duration | Description |
|---|---|---|
| viewed_cookie_policy | 11 months | The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data. |
