Tips for migrating Intune managed Windows 10 devices to a new tenant
Let’s start with the bad news up front – if you need to migrate devices to a new tenant you’ll basically need to reset and re-enroll every device. Why is that? For Azure AD...
Tagged: Windows 10
Manage and report on Defender Antivirus Signature update versions through Microsoft Endpoint Manager
Microsoft Endpoint Manager provides a ton of functionality for managing Defender Antivirus. In a previous post we dived into configuring Defender Antivirus, so today we’ll be reviewing some of the specifics around Signature updates....
Enable Audio and Video Redirection for Windows Virtual Desktop
Microsoft recently updated Teams to make it even easier to use audio/video within WVD! While the blog post below may still be useful, check out our more recent post on Enabling Audio and Video...
How to create a Windows 10 in S Mode image (Windows 10 Enterprise Security Features)
Microsoft publicly maintains a Cybersecurity Reference Architecture. If you haven’t checked it out before, head on over to https://aka.ms/MCRA. Over the next few months, we’re going to explore all these options and talk about...
How to change the primary user for an Intune managed device
Recently released in preview, Intune now supports changing the primary user of Windows 10 devices! The process is fairly simple. In the MEM portal (https://devicemanagement.microsoft.com), select Devices > All Devices (or Windows) > and...
Windows 10 update rings – the best user experience
To deploy updates for Intune-only managed devices, you have to use Windows Update for Business rings. This is a good thing – using update rings sets you up for proactively monitoring and managing Windows...
Another new Intune Wipe option – continue even if the device losses power
In a previous post, Autopilot Reset – What does it do? How is it different?, we covered the different Wipe options in Intune. Lo and behold, a few months later and we have another...
Comparing the DISA STIG to Intune Security Baselines
My last two posts have covered the DISA STIG in-depth. In reality they were mostly mimicking work I’ve done before – leveraging LGPO and MMAT to apply GPOs. When I first set out to...
How to use MMAT to convert DISA STIG GPOs to Intune CSPs
MMAT, or MDM Migration Analysis Tool, is an incredible tool that you can use for converting group policy items to custom CSPs. For most organizations, the biggest pain point for moving to MDM only...
Implementing DISA STIGs via LGPO
Many Government customers I work with have an umbrella requirement to implement DISA STIGs as their baseline security policy. For those unfamiliar, DISA (Defense Information Systems Agency) STIGs (Security Technical Implementation Guide) are a...
