Group Policy analytics (preview) – Export linked and enabled GPOs. Introduction It has almost been a year since I wrote our original blog post about Group Policy analytics (preview) in Microsoft Endpoint Manager. Since then, several improvements have been added to the tool, but there are still a few areas
Introduction Have you started using the awesome filters in MEM? If the answer to this question is NO, then you should get started and try them out. I did a blog post on how to get started with filters and you can read more here. But what if you already
Introduction I recently was tasked to enroll Microsoft teams rooms device into Intune as the customer needed compliance policy to allow the device to communicate to cloud service. There are plenty of good resources on the internet how to get started, how and what to do. However, I stumbled across
Introduction I have a customer that currently uses Configuration Manager to manage their devices. They have a wish to remove Configuration Manager and go to cloud only management. In this regards they have a lot of GPOs we will need to analyze in order to move to production and fully
Windows 365 Enterprise Azure AD join – Microsoft Hosted Network. Introduction Many of us have been waiting for native Azure AD join for Windows 365 Enterprise since its release in August 2021. But wait no longer! The native Azure AD join support has finally become a reality. In this
Secure your Windows 365 Cloud PC(s) with Conditional Access and FIDO2 security keys. Introduction We have already written about FIDO2 security keys on several occasions (I will add the links below), which has inspired me to see how I could secure Windows 365 using Conditional Access and a FIDO2
Learn how to rerun failed win32 apps on a device In this video we will cover some good tips how to troubleshoot on Win32 apps. Have you ever had a failing app? If not, then this blog is not for you, but if you have, go and check it
Prevent sensitive information from being captured on Cloud PCs with screen capture protection. Introduction In this blog post I will show you how to enable a feature called “Screen Capture Protection” which will prevent sensitive information from being captured on your Windows 365 Cloud PC(s), intentionally or by malicious software.
Log Analytics Workspace + Update Compliance = awesomeness In this video we will cover 5 good reasons to implement update compliance and how to implement it in your environment. We will go through which settings to setup in settings catalog in order to have the right telemetry level linked with
Introduction I do see a lot of environments transitioning from On-prem towards the cloud. One of the tasks in this journey is Group Policies which normally will have a huge workload on the business when starting to analyze and transforming the needed policies. Not saying that you should move anything,
Managing local administrator rights on Windows 365 Cloud PCs. Introduction I’ve been writing about Windows 365 over the past few months, and in the original Windows 365 blog post I quickly mentioned that users by default doesn’t have local admin rights on their Cloud PC(s), and how to grant users
Introduction I recently configured some custom profiles in Microsoft Intune, and it turned out that one of the policies failed hard on all devices. I had not seen this error before and went to search on the big internet for the error code to understand more about the return code.
Windows 365 Enterprise Cloud PC with a custom Windows 11 image on my son’s iPad. Introduction A few months back I wrote a blog post about how to configure Windows 365 Enterprise in Microsoft Endpoint Manager, which was provisioned with a standard gallery Windows 10 image and after Windows 11
In this video I will show you the process how to go from Windows 10 to Windows 11 using Microsoft Intune. Your managed devices will NOT upgrade automatically and as for that, you will need to create a feature update policy to actually force the upgrade. Before you can utilize
Source Microsoft https://c.s-microsoft.com/da-dk/CMSImages/Windows-11_1083_Hero_Latest.jpg?version=eab61d0a-2d4e-0e54-4094-8cd3885f553d Introduction Everyone thought Windows 10 would be the last operating system from Microsoft. Personally, I thought that could not be true. Guess what, Microsoft is presenting the new Windows 11 on October 5th. I am super happy about the announcement as I think Windows 11 bring
This is the first video on the brand new MEM tips and tricks YouTube site created by Mindcore’s Mattias Melkersen. The place to see and learn practical endpoint management skills in the real world.
Introduction OneDrive has gained a foothold in most companies. It makes sense to use because of the 1TB available storage (based on the right licenses) and the ability to have a sort of “Backup” for your desktop, documents, and pictures. In a given Microsoft Intune setup it is also standard
Introduction With the expedited updates feature in Microsoft Endpoint you can deploy updates like the most recent patch Tuesday release or out-of-band security updates. For example, we just saw a flaw with the windows print spooler where the attacker could execute arbitrary code with SYSTEM privileges on a non-patch system.
Introduction In this blog post I will be looking at Group Policy Analytics (preview) in Microsoft Endpoint Manager. Organizations have been using group policy objects (GPOs) for decades to configure user and computer settings on devices in their environment. But in these modern days, where many organizations are embracing cloud
Introduction In May Microsoft introduced Filters in Endpoint Manager. Many would go with a device centric approach instead of a user centric approach as one would normally do in configuration manager. So how can filters help us? Filters are here to assign policies and apps to users and then be
Introduction Some time ago I was asked by FEITIAN if I would like to test their FIDO2 key. I said yes, because I am in a project where we will onboard Microsoft HoloLens’s in production, in that journey, we will make use of FIDO2 keys + Windows Hello for Business
Introduction Today I will be looking at enrollment restrictions in Intune, which is a method to block personally owned devices. Did you know that all users (with an Azure AD P1 and Intune license) in your Azure AD by default is allowed to enroll (Azure AD join) their devices
Introduction A while ago, my colleague Mattias Melkersen wrote a blog post on how to remove unwanted apps created during the first sync between Intune and Microsoft Store for Business read more about that here In this blog post I will show you how to remove Windows 10 built-in apps
Introduction This is my notes while playing around with kiosk. I was testing the brand-new Kiosk setting for the new Microsoft Edge and the only result I got out of that was a non-working device. Eventlog saying MDM Session: Failed to get AAD Token for sync session User Token: (Unknown
Introduction A big difference from what we did with classic OSD is that base OS settings are missing like .Net 3.5. So how would we approach this when living in a cloud world with Intune? I will show you a very easy way to manage a baseline like this.
Modern Workplace consultant and a Microsoft MVP in Windows and Devices.
Infrastructure architect with focus on Modern Workplace and Microsoft 365 security.
Cloud & security specialist with focus on Microsoft backend products and cloud technologies.
Cloud & Security Specialist, with a passion for all things Cybersecurity
Cloud and infrastructure security specialist with background in networking.
Infrastructure architect with focus on design, implementation, migration and consolidation.
Infrastructure consultant with focus on cloud solutions in Office365 and Azure.
Modern workplace and infrastructure architect with a focus on Microsoft 365 and security.
