Reading Time: 26 minutesIn this post we will deep dive into ASR (Attack Surface Reduction) Rules of Microsoft Defender and provide all the required information that a System Administrator will need to understand before deploying this amazing security measure. Introduction to Attack Surface Reduction Rules Attack Surface Reduction rules are a critical component of Microsoft Defender for Endpoint…
Reading Time: 14 minutesIn this post, we’ll look at 2 simple ways to correct the primary user of a device in Intune: All the script can be found in my GitHub page. Always test these scripts on a single, non-production device before applying them broadly. Behavior may vary depending on your environment, Intune configuration, and Graph API changes….
Reading Time: 6 minutesIn this post, we’ll explore how to reliably deploy registry changes under the HKEY_USERS (HKU) and HKEY_CURRENT_USER (HKCU) hive using Microsoft Intune. While Group Policy Preferences have long enabled administrators to target HKCU with ease, Intune’s lack of a built-in HKCU registry deployment feature forces us to adopt alternative methods. We’ll first review Intune’s proactive…
Reading Time: 5 minutesIn this post we will develop a script to change a registry key value and deploy with Intune using Remediations script. Scenario Let’s say that we want to enable automatic updates to an application or perform any other action that requires the alteration of a registry value. Although many applications (such as Microsoft 365 apps)…
Reading Time: < 1 minuteIn this post (which I will try to update continually), the most important registry and folder location related to Intune and Intune actions will be mentioned. This way everyone can easily refer to this post to find relevant information about the above. Registry Paths Win32 Apps HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IntuneManagementExtension\Win32Apps Remediation Scripts HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IntuneManagementExtension\SideCarPolicies\Scripts\Execution Enrollment Info HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments Powershell Scripts…