Reading Time: 9 minutesIn today’s fast-paced and technology-driven world, managing and securing devices within an organization can be a challenging task. One crucial aspect of this is ensuring that devices are regularly updated and restarted without causing major disruptions to workflow. This is where Microsoft Intune steps in as a game-changer. In this blog post, we will focus…
Reading Time: 3 minutesEmbarking on the journey of Windows Autopilot management? Buckle up as we unveil a nifty script that’s about to become your secret weapon for a seamless bulk update of group tags on Windows Autopilot devices. Say goodbye to tedious manual adjustments and wave hello to efficiency at its finest! Script Logic To seamlessly change the…
Reading Time: 3 minutesIn this short post, we will explore how to view discovered apps on Intune devices. In addition, we will develop a script to obtain the above apps. Discovered apps via Intune Portal Discovered apps in Intune are a list of all the apps that are detected on Intune-enrolled devices in a tenant. This includes both…
Reading Time: 3 minutesIn this post, we will explore how to obtain the hardware specifications of Intune devices using a Remediations script. Device Hardware Specs In the context of this post, we will define ‘Hardware Specs’ as specific attributes of an endpoint, such as memory and CPU information. While Intune provides information about various specifications, such as memory…
Reading Time: 3 minutesIn this post we will write a PowerShell script that gets the assigned groups per application in Intune. Script Logic This script will be used to get the assigned groups for each application in Intune. Initially it will query all the application created and then search for all the groups assigned to these applications. We…
Reading Time: 4 minutesIn this short post we will see an easy hack to find a desired query to be used in graph explorer using the Intune portal. Scenario Many times administrators want to query information regarding Intune data from Graph explorer itself. They may want to see the data directly in the Graph Explorer, which includes sometimes…
Reading Time: 5 minutesIn this post we will develop a script to change a registry key value and deploy with Intune using Remediations script. Scenario Let’s say that we want to enable automatic updates to an application or perform any other action that requires the alteration of a registry value. Although many applications (such as Microsoft 365 apps)…
Reading Time: 4 minutesIn this post we will explore Intune filters and use them in a use case. Intune Filters So what are Intune filters. We can use them to filter devices based on specific rules and narrow the assignment scope of a policy or deployment. Take a look at the image below explaining the way they work….
Reading Time: 3 minutesIn this post we will discuss on how to import devices to an Entra ID group easily using PowerShell. Import Devices to an Entra ID Group Sometimes importing multiple members to Entra ID groups requires significant manual work like exporting CSVs, using templates, or clicking through the Azure portal for each device. A more efficient…
Reading Time: 5 minutesIn this post we will describe the concept of SSPR (self service password reset) and the way to implement it in Azure. What is SSPR? Many times helpdesk or administrators should perform a password reset for the end users either because they forgot their passwords or their account was locked out. Microsoft offers Self service…
Reading Time: 5 minutesIn this post we will discuss how to create custom RBAC roles in Intune and assign them to specific groups. RBAC Roles Intune RBAC (Role-Based Access Control) roles refer to the predefined roles in Microsoft Intune that determine the permissions and actions that users can perform within the Intune service. RBAC allows administrators to grant…
Reading Time: 4 minutesIn this post we will discuss about ways to protect corporate data, prevent save to removable media and ensure proper encryption of those using BitLocker. Corporate data are very important and it is crucial to protect them. Many users use USB drives to store and move their data from one machine to another. In order…
Reading Time: 6 minutesIn this post we will discuss about Session policies and how we can build a mechanism using Microsoft Defender for Cloud apps to block specific actions such as copy, paste etc. Let’s start by first understand what it Defender for Cloud apps. As per Microsoft, Microsoft Defender for Cloud Apps is a Cloud Access Security…
Reading Time: 4 minutesIn this post we will discuss various ways to perform a sync on Windows (and non Windows) devices in Intune. As per Microsoft’s documentation the Sync device action forces the selected device to immediately check in with Intune. When a device checks in, it immediately receives any pending actions or policies that have been assigned…
Reading Time: 5 minutesIn this post we will discuss how we can uninstall an application via Intune. We will focus mainly on the application that were not deployed and installed via Intune, but were installed manually by the end users. Uninstall application deployed via Intune First let’s have a quick reminder on how to uninstall an application deployed…
Reading Time: 3 minutesIn this post we will describe an easy and convenient way to empty an Entra ID group from its members. Introduction Managing Entra ID (formerly Azure AD) groups efficiently is a common challenge for IT administrators. Whether you’re reorganizing your directory structure, cleaning up test environments, or performing routine maintenance, emptying group memberships quickly and…
Reading Time: < 1 minuteIn this post (which I will try to update continually), the most important registry and folder location related to Intune and Intune actions will be mentioned. This way everyone can easily refer to this post to find relevant information about the above. Registry Paths Win32 Apps HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IntuneManagementExtension\Win32Apps Remediation Scripts HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IntuneManagementExtension\SideCarPolicies\Scripts\Execution Enrollment Info HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments Powershell Scripts…
Reading Time: 5 minutesIn this blog we will discuss about Windows Local Administrator Password Solution (LAPS) and its implementation steps. LAPS is a Windows feature that automatically manages and backs up the password of a local administrator account on Azure Active Directory-joined or Windows Server Active Directory-joined devices. It provides administrators an easy way to manage privileged accounts…
Reading Time: 4 minutesThis post will describe how to deploy a policy via Intune to automatically sync known folders to OneDrive in our endpoints. In the modern workplace era almost everything is saved in the cloud. OneDrive provides users (always depending on the plan) enough space to save their files and access them from any device. As administrators,…
Reading Time: 5 minutesIn this post we will create a custom compliance in Intune and describe the way it functions (JSON file and script). As we discussed in previous post, Intune allows us to create compliance policies to secure our devices and ensure that specific configurations and settings are applied. Although there are many settings that we can…
Reading Time: 5 minutesCompliance policies in Intune refer to a set of rules and requirements that organizations can enforce on devices to ensure they meet specific security and regulatory standards. These policies are designed to safeguard sensitive data and maintain a secure environment for corporate resources accessed through managed devices. A compliant device adheres to these rules and…
Reading Time: 7 minutesWindows Autopilot is a feature provided within Intune that simplifies the deployment and management of Windows devices in an organization. Traditionally, deploying Windows devices involved a time-consuming process of manually setting up each device, installing the operating system, configuring settings, and installing necessary applications. Windows Autopilot streamlines this process by leveraging cloud-based services and automation…
Reading Time: 3 minutesIn this post we will discuss the ways we can rename a device or a group of devices though Intune. We will see two ways: For the first way we have to locate the wanted device in Intune portal and select Properties. Then click Rename and enter the new name. Here we can also use…
Reading Time: 3 minutesThis is the first post of a security-centric series, that will try to demonstrate mechanisms and configurations in Azure and Intune, that help administrators secure their environments. In this post we will create a policy to block sign-in to specific application from unmanaged devices. We will create a conditional access policy in Microsoft Azure to…
Reading Time: 2 minutesDeploying win32 applications with Intune is, for the majority of the time, a straightforward procedure. Some times however the download or the installation of them fails and users or administrators should wait some time in order for the application to be redeployed. The same goes for custom Powershell and Proactive-Remediation scripts. In this post we…
Reading Time: 4 minutesIn this post we will see an easy and convenient way to remove devices’ records from Intune, Autopilot and Entra Id using a simple PowerShell script. Many times administrators have come across stale device records in Entra ID and Intune, because the process of removing a device from the organization’s infrastructure is not well defined…
Reading Time: 3 minutesIn this post we will discuss about win32 applications and prepare one for Intune. This is the base of every Intune win32 app deployment and could help you understand the basic process to prepare and upload an app to Intune. App Types We can deploy several types of applications with Intune (shown in the table…
Reading Time: 3 minutesIn this post, an easy way to collect logs from individual endpoints will be described. Many of us have deployed several applications and scripts through Intune, where a logging mechanism is in place. The problem is that by default we are unable to gather these logs and read them. Of course we can reach out…
Reading Time: 3 minutesIT Administrators use PowerShell to automate everyday tasks, create reports and deploy applications and settings to endpoints. Logging is a best practice for the majority of the scripts we deploy. It can be used to provide debug information to them, document the execution flow in a file or simply give information about anything. Although it…