It’s been almost a year since I published my original post about how to migrate BitLocker Recovery Key(s) to Azure AD (Microsoft Entra ID) using a remediation script. It didn’t take long before several companies started using it, and since then, I’ve received a few inquiries about support for multiple
How can you work smarter in your application deployment? By asking for the software state or something else on the device, before trying to execute whatever you want to install. We look at the 3 functions to master registry modification. How to use If you did not see the chapter
Are you also in the middle of transitioning from on-premises to the cloud, or are you currently planning this journey? If so, you also want a modern way to migrate Bitlocker recovery key(s) to Azure AD when moving away from on-premises MBAM/Active Directory escrowing. I help our customers achieve this
If you did not see the chapter 1 and 2, I strongly suggest that you go look at that first and then continue to part 3 as this chapter builds upon what we learned already.
In this chapter “PowerShell App Deployment Toolkit – Part 2” we will show you how to work with the main PowerShell module in PowerShell App Deployment Toolkit (PSADT). We look at a clever way to sort your logs by using prefix. We look at the standard functions already provided by
Cost optimization has become increasingly important with the increased use of cloud services. Cost optimization is a complex, timeconsuming task – nevertheless the task has never been more important. Microsoft does provide companies with many different utilities/tools to monitor/control the cost of your overall Azure consumption. From our experience the
Provide the end-users with a localized Windows 365 Cloud PC experience. Introduction A few months back, I wrote a post about localizing a custom image for Windows 365 Cloud PCs. Back then, the Windows 365 Cloud PCs were only provisioned in English (United States). – Microsoft has since then made
Introduction Have you started using the awesome filters in MEM? If the answer to this question is NO, then you should get started and try them out. I did a blog post on how to get started with filters and you can read more here But what if you
Prevent sensitive information from being captured on Cloud PCs with screen capture protection. Introduction In this blog post I will show you how to enable a feature called “Screen Capture Protection” which will prevent sensitive information from being captured on your Windows 365 Cloud PC(s), intentionally or by malicious software.
Introduction A couple weeks ago I showed you how to get vital logs from a client without disturbing the user. This blog post will cover how to deal with in-place upgrades that did not go as expected. Now as most people still work from home, it can be difficult to
Introduction Transitioning more and more to modern, many strive to get rid of the classic VPN for their endpoints. As we have more options managing endpoint without building a large and complex infrastructure it become natural to disconnect the traditional access model and build more enterprise applications to authenticate with
Introduction When we buy license to use office365 services we have lots of collaboration possibilities. One of the great features is OneDrive. OneDrive gives us the possibilities to backup folders like desktop, documents and pictures what makes the life of working on multiple devices much easier. (e.g., some of this
Introduction Proactive remediations in Endpoint analytics will help your organization to fix common issues automatically. Stuff that you know are broken or reoccur can be automated and your helpdesk and Admins will save time. It can also be used for monitoring in your environment, and in this blog post I
In the last two post we looked at extending Azure AD with our own attributes http://blog.mindcore.dk/2019/10/azure-ad-extension-attributes.html and how to use this attribute to dynamically grant access to a Microsoft team http://blog.mindcore.dk/2019/10/access-to-teams-based-on-our-own.html. This time we will create the team and dynamic group using PowerShell instead. In order to do this we
Starting in December 2018, the Azure PowerShell Az module is in general release and now the intended PowerShell module for interacting with Azure. Az offers shorter commands, improved stability, and cross-platform support. Az also offers feature parity and an easy migration path from AzureRM. Az uses the .NET Standard library,
In some situations I want to be able to run 2 or more PowerShell statements on the same line, without using a script (PS1 file). Semicolon can be used to chain Commands in PowerShell. powershell -command get-date;get-host This could for example come in handy in a Task Sequence as shown
In some scenarios I need to now if PowerShell remoting is enabled on the local host, this can be done in many different ways, but this is an easy way to do it: Start PowerShell on the local machine and enter the command Enter-PSSession -ComputerName localhost If PowerShell remoting is
I have been writing about this before: http://larslohmann.blogspot.dk/2013/05/cscript-error-can-find-script-engine.html Apparently not only vbscript is affected by this but also PowerShell. Get-WmiObject : Retrieving the COM class factory for component with CLSID {xxx} failed due to the following error: 80070005. The script works outside the task sequence also with alternate credentials and
I often need to use a PowerShell script in a task Sequence, so in order to do that without any problems I use the following command line: Powershell.exe -noprofile -ExecutionPolicy Bypass -file .Script.ps1 PowerShell.exe Command-Line The Windows PowerShell Profile
Let’s take a closer look on how to identify the powerShell version installed. We can check the version by using $psversiontable or get-host ($psversiontable is first available from version 2.0). Version 1.0 Version 1.0 is available for Windows XP, Windows Server 2003, Windows Vista and Windows Server 2008. http://support.microsoft.com/kb/926139
You might not be able to logon to your computer and Windows will sat that The trust relationship between this workstation and the primary domain failed. Typical this will mean that the secure channel with the domain is broken, as explained in this post: http://blogs.technet.com/b/asiasupp/archive/2007/01/18/typical-symptoms-when-secure-channel-is-broken.aspx Nowadays we are able to
Modern Workplace consultant and a Microsoft MVP in Windows and Devices.
Infrastructure architect with focus on Modern Workplace and Microsoft 365 security.
Cloud & security specialist with focus on Microsoft backend products and cloud technologies.
Cloud & Security Specialist, with a passion for all things Cybersecurity
Cloud and infrastructure security specialist with background in networking.
Infrastructure architect with focus on design, implementation, migration and consolidation.
Infrastructure consultant with focus on cloud solutions in Office365 and Azure.
Modern workplace and infrastructure architect with a focus on Microsoft 365 and security.
