It’s been almost a year since I published my original post about how to migrate BitLocker Recovery Key(s) to Azure AD (Microsoft Entra ID) using a remediation script. It didn’t take long before several companies started using it, and since then, I’ve received a few inquiries about support for multiple
Why do we need Role based access controls (RBAC)? In the dynamic world of modern IT management, the need for fine-tuned control and enhanced efficiency has become more crucial than ever. Microsoft Intune, a powerful cloud-based solution, empowers organizations to streamline their endpoint management and secure their devices, applications, and
Until recently, you had to reprovision existing Windows 365 Cloud PCs if you changed the Azure region of the Microsoft Hosted Network or the Azure Network Connection (ANC) in your provisioning policy – only new Cloud PCs would honor these changes! But this has changed with the recent Service Release
Microsoft Remote Help is a powerful tool that allows users to get technical support and assistance from your company’s IT Pros without leaving the comfort of their own homes or offices. With Microsoft Remote Help, users can connect remotely to a support technician who can troubleshoot, diagnose, and solve technical
Welcome to Part 4 in this new Windows 365 End-User Experience blog series. This series will be an educational journey exploring several features that can potentially help improve the end-user experience. Below you’ll find all parts of this blog series. In this part, I‘ll cover the following topics. The Windows
Welcome to Part 3 in this new Windows 365 End-User Experience blog series. This series will be an educational journey exploring several features that can potentially help improve the end-user experience. Below you’ll find all parts of this blog series. In this part, I’ll cover the following topics. Multimedia Redirection
Welcome to Part 1 in this new Windows 365 End-User Experience blog series. This series will be an educational journey exploring several features that can potentially help improve the end-user experience. Below you’ll find all parts of this blog series. In this part, I’ll cover the following topics. Introduction What
Yes, you read it right. Assign ASR rules with Intune on servers. This does not mean we can enroll servers to Intune, so how is this then possible? If you remember my post back in 2022 where I wrote about MDE managed devices and the way to apply policies to
Most environments I worked with 2-3 years back were all configuration manager. I see that picture changing constantly. When using Configuration Manager you are used to have rich data available and the data you do not have, you extend the MOF file and get your clients to upload what you
In September 2022, Microsoft announced the public preview of single sign-on (SSO) and passwordless authentication for Azure Virtual Desktop. – Since then, many of us have been waiting for Windows 365 Azure AD Join SSO support. The wait is finally over because Microsoft has recently announced that Windows 365 now
Are you also in the middle of transitioning from on-premises to the cloud, or are you currently planning this journey? If so, you also want a modern way to migrate Bitlocker recovery key(s) to Azure AD when moving away from on-premises MBAM/Active Directory escrowing. I help our customers achieve this
When Desktop Analytics was first announced, all of us who worked with Intune, at that time, and wanted to primarily work within that product, was kind of disappointed. This new feature from Microsoft to help analyze device health and upgrade readiness was not able to integrate into Intune but only
Are you managing Intune? Maybe you just started, or maybe you have been working with the product for a long time. Nevertheless, we all see stuff where we need to be able to find out what to do with it. In this blog post I will help you out with
In this blog post I will describe how you easily can help yourself and your management to know if someone changed configurations or apps in your Microsoft Intune environment.Many of my customers do have more than one administrator. With a modern way of working “Hybrid work” we sit at different
In this chapter “PowerShell App Deployment Toolkit – Part 2” we will show you how to work with the main PowerShell module in PowerShell App Deployment Toolkit (PSADT). We look at a clever way to sort your logs by using prefix. We look at the standard functions already provided by
In this blog post, we’ll explore Windows Autopatch, which became generally available (GA) in July 2022 for customers with Windows 10/11 Enterprise E3 (or higher) at no additional costs. Because this new Microsoft cloud service supports Windows 365 Enterprise Cloud PCs, it got my full attention and curiosity about the
When you automate your application stack, have you really made the standard you need for your colleagues to be on the same level as you? Are your company fit for application management the cool way? In this demo I will give you a well proven framework to automate applications to
Provide the end-users with a localized Windows 365 Cloud PC experience. Introduction A few months back, I wrote a post about localizing a custom image for Windows 365 Cloud PCs. Back then, the Windows 365 Cloud PCs were only provisioned in English (United States). – Microsoft has
Migrate imported GPOs to Intune with Group Policy analytics (preview) Introduction In our previous blog post, where I wrote about exporting GPOs from Group Policy management on-prem using PowerShell and doing a proper cleanup with Microsoft Graph, I promised you an article about the new migration option within Group Policy
Group Policy analytics (preview) – Export linked and enabled GPOs. Introduction It has almost been a year since I wrote our original blog post about Group Policy analytics (preview) in Microsoft Endpoint Manager. Since then, several improvements have been added to the tool, but there are still a few areas
Introduction Have you started using the awesome filters in MEM? If the answer to this question is NO, then you should get started and try them out. I did a blog post on how to get started with filters and you can read more here But what if you
Introduction I recently was tasked to enroll Microsoft teams rooms device into Intune as the customer needed compliance policy to allow the device to communicate to cloud service. There are plenty of good resources on the internet how to get started, how and what to do. However, I stumbled across
Introduction I have a customer that currently uses Configuration Manager to manage their devices. They have a wish to remove Configuration Manager and go to cloud only management. In this regards they have a lot of GPOs we will need to analyze in order to move to production and fully
Windows 365 Enterprise Azure AD join – Microsoft Hosted Network. Introduction Many of us have been waiting for native Azure AD join for Windows 365 Enterprise since its release in August 2021. But wait no longer! The native Azure AD join support has finally become a reality. In this
Secure your Windows 365 Cloud PC(s) with Conditional Access and FIDO2 security keys. Introduction We have already written about FIDO2 security keys on several occasions (I will add the links below), which has inspired me to see how I could secure Windows 365 using Conditional Access and a FIDO2 security
Infrastructure architect with focus on Modern Workplace and Microsoft 365 security.
Cloud & security specialist with focus on Microsoft backend products and cloud technologies.
Cloud & Security Specialist, with a passion for all things Cybersecurity
Cloud and infrastructure security specialist with background in networking.
Infrastructure architect with focus on design, implementation, migration and consolidation.
Infrastructure consultant with focus on cloud solutions in Office365 and Azure.
