Reading Time: 14 minutesEntra ID Conditional Access policies, Intune compliance, error AADSTS53000 and token flow. Every admin has heard these words but its not always clear how all these work together. It’s 14:30 on a Tuesday. A user calls the helpdesk – Outlook stopped working mid-session. Nothing changed on their device, no prompt appeared, no warning. Just AADSTS53000…
Reading Time: 5 minutesLearn how to bulk import users to Entra ID group using PowerShell and Microsoft Graph API. Import from a text file, skip existing members and ready. Why Automate This? If you have ever had to onboard a wave of users into an Entra ID group manually – whether it is for a migration, a new…
Reading Time: 8 minutesIf you manage shared devices with Microsoft Intune, chances are you’ve run into this frustrating wall: you deploy Windows Hello for Business, everything looks fine in the portal, and then a user sits down at a shared PC and simply cannot enroll. No biometrics prompt, no PIN setup, nothing. The option is just… gone. This…
Reading Time: 6 minutesIn this practical, enterprise-grade guide we will explore how to tag devices for pilots, rings, and dynamic targeting using extension attributes. When you manage a large device estate in Microsoft Entra ID, the hardest part of “safe change” isn’t creating policies—it’s targeting the right subset of devices without turning group membership into a manual, error-prone…
Reading Time: 14 minutesIn this post, we’ll look at 2 simple ways to correct the primary user of a device in Intune: All the script can be found in my GitHub page. Always test these scripts on a single, non-production device before applying them broadly. Behavior may vary depending on your environment, Intune configuration, and Graph API changes….
Reading Time: 5 minutesIn this short post we will explore how to block personal devices enrollment and allow only corporate identified devices to enroll in an Intune tenant. In modern device management, securing your environment starts with controlling what types of devices can enroll into your MDM solution. With Microsoft Intune, organizations often want to block personally owned…
Reading Time: 4 minutesDiscover an effective way to remove devices based on serial number from an Entra ID group. Managing device membership in Microsoft Entra ID groups is essential for maintaining security, ensuring compliance, and enforcing organizational policies at scale. Manually removing devices one by one is time-consuming and error-prone, especially when dealing with hundreds or thousands of…
Reading Time: 9 minutesModern device management in Microsoft Entra and Intune hinges on understanding where and how a device is registered or joined. The key states are: …and in Intune: Plus the critical distinction between corporate-owned and BYOD (personal) devices. Each state unlocks different management capabilities—from full policy application and remote wipe to app-only protection. Directory Join &…
Reading Time: 6 minutesThe Intune remote actions are always a tricky part when managing devices with Intune. Wipe, Delete, Retire, Autopilot Reset or Fresh Start. What to select and when? That’s always an interesting question. Managing Windows devices with Microsoft Intune means having the right tool for every situation. In today’s post, we’ll explore the remote actions available…
Reading Time: 13 minutesLearn how to utilize sign-in audit Logs and Get-MgAuditLogSignIn to get information related to users, devices, sign-ins and many more. In today’s cloud-driven world, user sign-ins happen almost every second—across different devices, applications, and locations. Yet, for many IT teams, sign-in audit logs remain an underutilized resource, quietly capturing critical details about who’s accessing what,…
Reading Time: 4 minutesIn this post, we’ll walk through a PowerShell script that leverages Microsoft Graph and Get-MgUser cmdlet to retrieve essential user details, such as display name, email, job title, and more, directly from Entra ID. This simple yet powerful script can be a valuable tool for administrators looking to automate user information retrieval. Get-MgUser Cmdlet The…
Reading Time: 5 minutesThe “MG Cmdlets Cheat sheet” post serves as a vital resource for administrators aiming to harness the full potential of Microsoft Graph PowerShell cmdlets. While Microsoft’s official documentation offers excellent instructions on utilizing these cmdlets, it often falls short in revealing the complete array of fields returned upon execution. This gap can lead to missed…
Reading Time: 3 minutesIn the ever-evolving landscape of device management, system administrators play a pivotal role in ensuring that devices are used efficiently and securely within their organizations. A key part of this role involves monitoring who is accessing which devices and when. Specifically, for those managing devices with Microsoft Intune, identifying the last logged-in user on a…
Reading Time: 3 minutesIn this post we will describe an easy and convenient way to empty an Entra ID group from its members. Introduction Managing Entra ID (formerly Azure AD) groups efficiently is a common challenge for IT administrators. Whether you’re reorganizing your directory structure, cleaning up test environments, or performing routine maintenance, emptying group memberships quickly and…