Reading Time: 4 minutesIn this post we will explore Intune filters and use them in a use case. Intune Filters So what are Intune filters. We can use them to filter devices based on specific rules and narrow the assignment scope of a policy or deployment. Take a look at the image below explaining the way they work….
Reading Time: 3 minutesIn this post we will discuss on how to import devices to an Entra ID group easily using PowerShell. Import Devices to an Entra ID Group Sometimes importing multiple members to Entra ID groups requires significant manual work like exporting CSVs, using templates, or clicking through the Azure portal for each device. A more efficient…
Reading Time: 5 minutesIn this post we will discuss how to create custom RBAC roles in Intune and assign them to specific groups. RBAC Roles Intune RBAC (Role-Based Access Control) roles refer to the predefined roles in Microsoft Intune that determine the permissions and actions that users can perform within the Intune service. RBAC allows administrators to grant…
Reading Time: 4 minutesIn this post we will discuss about ways to protect corporate data, prevent save to removable media and ensure proper encryption of those using BitLocker. Corporate data are very important and it is crucial to protect them. Many users use USB drives to store and move their data from one machine to another. In order…
Reading Time: 4 minutesIn this post we will discuss various ways to perform a sync on Windows (and non Windows) devices in Intune. As per Microsoft’s documentation the Sync device action forces the selected device to immediately check in with Intune. When a device checks in, it immediately receives any pending actions or policies that have been assigned…
Reading Time: 5 minutesIn this post we will discuss how we can uninstall an application via Intune. We will focus mainly on the application that were not deployed and installed via Intune, but were installed manually by the end users. Uninstall application deployed via Intune First let’s have a quick reminder on how to uninstall an application deployed…
Reading Time: < 1 minuteIn this post (which I will try to update continually), the most important registry and folder location related to Intune and Intune actions will be mentioned. This way everyone can easily refer to this post to find relevant information about the above. Registry Paths Win32 Apps HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IntuneManagementExtension\Win32Apps Remediation Scripts HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IntuneManagementExtension\SideCarPolicies\Scripts\Execution Enrollment Info HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments Powershell Scripts…
Reading Time: 5 minutesIn this blog we will discuss about Windows Local Administrator Password Solution (LAPS) and its implementation steps. LAPS is a Windows feature that automatically manages and backs up the password of a local administrator account on Azure Active Directory-joined or Windows Server Active Directory-joined devices. It provides administrators an easy way to manage privileged accounts…
Reading Time: 4 minutesThis post will describe how to deploy a policy via Intune to automatically sync known folders to OneDrive in our endpoints. In the modern workplace era almost everything is saved in the cloud. OneDrive provides users (always depending on the plan) enough space to save their files and access them from any device. As administrators,…
Reading Time: 5 minutesIn this post we will create a custom compliance in Intune and describe the way it functions (JSON file and script). As we discussed in previous post, Intune allows us to create compliance policies to secure our devices and ensure that specific configurations and settings are applied. Although there are many settings that we can…
Reading Time: 5 minutesCompliance policies in Intune refer to a set of rules and requirements that organizations can enforce on devices to ensure they meet specific security and regulatory standards. These policies are designed to safeguard sensitive data and maintain a secure environment for corporate resources accessed through managed devices. A compliant device adheres to these rules and…
Reading Time: 7 minutesWindows Autopilot is a feature provided within Intune that simplifies the deployment and management of Windows devices in an organization. Traditionally, deploying Windows devices involved a time-consuming process of manually setting up each device, installing the operating system, configuring settings, and installing necessary applications. Windows Autopilot streamlines this process by leveraging cloud-based services and automation…
Reading Time: 3 minutesIn this post we will discuss the ways we can rename a device or a group of devices though Intune. We will see two ways: For the first way we have to locate the wanted device in Intune portal and select Properties. Then click Rename and enter the new name. Here we can also use…
Reading Time: 2 minutesDeploying win32 applications with Intune is, for the majority of the time, a straightforward procedure. Some times however the download or the installation of them fails and users or administrators should wait some time in order for the application to be redeployed. The same goes for custom Powershell and Proactive-Remediation scripts. In this post we…
Reading Time: 4 minutesIn this post we will see an easy and convenient way to remove devices’ records from Intune, Autopilot and Entra Id using a simple PowerShell script. Many times administrators have come across stale device records in Entra ID and Intune, because the process of removing a device from the organization’s infrastructure is not well defined…
Reading Time: 3 minutesIn this post we will discuss about win32 applications and prepare one for Intune. This is the base of every Intune win32 app deployment and could help you understand the basic process to prepare and upload an app to Intune. App Types We can deploy several types of applications with Intune (shown in the table…
Reading Time: 3 minutesIn this post, an easy way to collect logs from individual endpoints will be described. Many of us have deployed several applications and scripts through Intune, where a logging mechanism is in place. The problem is that by default we are unable to gather these logs and read them. Of course we can reach out…