Shoulder surfers To start with, this looks harmless, but a way to scrape screen for Credentials and for sensitive stuff (documents, content) and co-workers and other people. Australian Signals Directorate calls this out in ISM (Information Security Manual) documentation specifically. While the Human Presence settings and Presence monitoring are already available in Windows 11, these … Continue reading Managing Screen Onlooker Detection Settings Via Intune
Tag: Modern Device management
Configure Windows LAPS in Intune – March 2025 Update
Local Admin Password Solution has come a long way and the March 2025 Update (Service release 2503) had some good enhancements for the solution. Randomizing the LAPS username is one of them. Rather than enabling the local Administrator account or creating a special admin account for LAPS, having an auto randomizing username sounds confusing to … Continue reading Configure Windows LAPS in Intune – March 2025 Update
How to Change Intune Security Baseline Policy to Version 24H2?
Intune Security Baseline for Windows 10 and later Version 24H2 is finally here. This is a quick look at the policy and useful details on migration to the new policy. What you will see in the Security Baselines nowWhat's Available in Version 24H2Migrating from 23H2 BaselineTest Before Applying!Useful Links What you will see in the … Continue reading How to Change Intune Security Baseline Policy to Version 24H2?
💻 Intune Policy refresh intervals Vs. Config Refresh in simple terms
These are similar-looking terms that perform two different tasks and this quick nugget is to unpack what they do. ⚡Policy Refresh Intervals⚡ This is the standard way for the device to check in with the Intune service to receive the policies and settings.When the device is enrolled with Intune for the 1st time, notifications will … Continue reading 💻 Intune Policy refresh intervals Vs. Config Refresh in simple terms
How to Use Intune to Create a Dell BIOS Config Profile?
Creating BIOS Configs and ingesting it during the imaging process is a tad bit old school when you think about moving to newer technologies that can do the same. Microsoft Intune recently introduced the BIOS Config Profile as a template in Intune. At this stage, DELL devices can be set up with this. At the … Continue reading How to Use Intune to Create a Dell BIOS Config Profile?
From ConfigMgr to Fully Intune Managed in 2024. Let’s Make That a Reality
If you have Config Manager today and if you are thinking or planning on moving the devices and the workloads to Intune, this article is for you. If you are in that state today, chances are you have a stable (or near stable) method of managing the devices, patch updates, and GPOs. Moving the capabilities … Continue reading From ConfigMgr to Fully Intune Managed in 2024. Let’s Make That a Reality
How to Setup 3rd Party Device Compliance Partners in Intune for Conditional Access
While Intune and Entra ID as a whole provide industry-standard device compliance policies and conditional access policies to govern them, there might be a chance that a subset of your device fleet is managed via a different MDM. In the field when I'm talking with the customers, this is mostly because Microsoft Intune was catching … Continue reading How to Setup 3rd Party Device Compliance Partners in Intune for Conditional Access
New Microsoft Intune Licensing Explained
Microsoft recently announced the new Intune Plans. In this blog post, I want to break down what that is and what it includes. Intune is already enabled in the licenses? Yes. However, the Plans can be separately purchased to help you elevate your device management game. If you are new to Microsoft Intune, a separate … Continue reading New Microsoft Intune Licensing Explained
BYOD – Part 1 – The Love-Hate Relationship
This is a 2 part series and I would like to get to the nitty gritty of BYOD because as IT Pros or leaders who are managing IT in an organization, we have dealt with BYOD (Bring Your Own Device) related questions at least once in our career. Not once, but maybe daily or maybe … Continue reading BYOD – Part 1 – The Love-Hate Relationship
Microsoft Intune Bulk Device Actions
This will be a short blog post, but I want to cover something that is important when you have a large device fleet. This is a useful feature if you haven't seen it yet or not tried it yet, because rather than using a CLI, you can use the Intune Portal to perform bulk actions. … Continue reading Microsoft Intune Bulk Device Actions
Enrolling Linux Devices and Setting Compiance Policies in Intune
My morning coffee hit me in a very different way this morning. I've been sitting on the whole Linux enrollment feature introduced a few weeks ago and this morning I thought I need to do it. This is an early look at the Linux Enrollment and what Compliance Policies are available from Intune. What I … Continue reading Enrolling Linux Devices and Setting Compiance Policies in Intune
Intune to Configure and Lock DFCI for Autopilot Devices
How handy it will be to manage the UEFI (Unified Extensible Firmware Interface) settings of the enrolled devices? That's exactly what I'm going to explore in this article. What I will be covering 👇🏾 What is DFCI? (Device Firmware Configuration Interface)Use CasesDFCI LifecycleRequirements and OEM Vendor SupportOEM Vendor SupportIntune to Manage DFCI?Intune Device Configueration ProfileWrapping … Continue reading Intune to Configure and Lock DFCI for Autopilot Devices
An Attempt to Configure Defender for Endpoint and Endpoint Manager With the Same Device Tag
Most often the device tagging requirements are simple or you do have a set of tags for the devices that are enrolled in Intune and a set of tags for the devices onboarded in Defender for Endpoint. However there can be situations where you need both services to have the same device tagging setup. This … Continue reading An Attempt to Configure Defender for Endpoint and Endpoint Manager With the Same Device Tag
How to Easily Configure Google Chrome Policies via Microsoft Endpoint Manager?
I would say this is a long time coming and Admins can take a bit of a rest without looking for the Google Chrome ADMX files and updating the custom OMA-URI content whenever the ADMX updates.The good news is Microsoft Endpoint Manager has the relevant Google Chrome policy settings within the portal! This is a … Continue reading How to Easily Configure Google Chrome Policies via Microsoft Endpoint Manager?
How To Map a Shared Drive Using Microsoft Endpoint Manager Instead of GPOs
Welcome to another MEM how to article. Among Microsoft Endpoint Manager's wonderful capabilities I see this as a big win towards promoting it's modern device management capabilities. This will simply supersede the local AD, OUs and GPMC that used to manage drive mappings to user sessions. Update [03 Sep 2022] Microsoft have recently announced the … Continue reading How To Map a Shared Drive Using Microsoft Endpoint Manager Instead of GPOs
EMS Route 