Introduction A while ago, my colleague Mattias Melkersen wrote a blog post on how to remove unwanted apps created during the first sync between Intune and Microsoft Store for Business read more about that here In this blog post I will show you how to remove Windows 10 built-in apps
Introduction OSDCloud is the most hyped tool I have yet seen in the community. Now does it live up to it.? YES indeed. We needed this kind of solution to simplify daily operations where we want a device fast up and running e.g., after repair of a broken hardware component.
Introduction If you like me have the urge to keep things clean and nice, then you must have come across the exact same situation that I am in. Excel Mobile, PowerPoint Mobile, Sway, Word Mobile which pr default will sync to your Intune environment once the Business store has been
Introduction Have you ever been in a situation where you need to image or reimage your device? Of course, you have and so have I. Recently David Segura launched some awesome PowerShell code called OSDCloud. You might know him better for the Offline patching of images OSDBuilder, which has been
Introduction In the last “MSIX Modern Packaging – Part 4” we did some ninja tricks to be able to use context menu to right click a file and open with Notepad++ captured into MSIX. As you probably also experienced, context menus are something that are not going very
Introduction In the last “MSIX Modern Packaging – Part 3” we transformed Notepad++ from a legacy installer to MSIX. There is more to packaging like testing and make sure the application work as intended after we changed how the bits and bytes flow to the device. Most companies introduce user
Introduction In the last “MSIX Modern Packaging – Part 2” I showed you how to create a certificate (PFX) to use while creating MSIX packages. In this chapter I will show you how to “capture” an easy package to MSIX. Requirements Start packaging MSIX Let’s start by fire up
Introduction In the last “MSIX Modern Packaging – Part 1” I showed you how to get a virtual environment to start creating MSIX. For MSIX to work we need to sign our packages, and this is typically where we say “ok, I give up”. At least back in the days
Introduction If you are working with system management, you also come across applications that need to be mass deployed to your endpoints. Before that can happen the vendor either deliver unattended parameters to their installation process or they deliver another installation format like MSI or MSIX. Every business can benefit
Introduction A couple weeks ago I showed you how to get vital logs from a client without disturbing the user. This blog post will cover how to deal with in-place upgrades that did not go as expected. Now as most people still work from home, it can be difficult to
Introduction Transitioning more and more to modern, many strive to get rid of the classic VPN for their endpoints. As we have more options managing endpoint without building a large and complex infrastructure it become natural to disconnect the traditional access model and build more enterprise applications to authenticate with
Introduction This morning I bummed into “To open the web app, you need to change your browser settings to allow third-party cookies.” Haven’t had issues with login into teams on my browser before. So, this changed during the weekend. Why use Teams on the browser in the first place? Well
Introduction In this blog post I will describe how you can transition to Windows Update for Business from a legacy WSUS environment. It is easy to just set it up “modern management” so to speak but managing legacy systems and make sure every system works and get its updates from
Introduction This blog post is part of a series. If you did not see the first blogpost of the series, you should go through that first. How I manage my device from Endpoint Manager – taste your own medicine – Part 1 of 4 How I manage my device from
Introduction This blog post is part of a series. If you did not see the first blogpost of the series, you should go through that first. How I manage my device from Endpoint Manager – taste your own medicine – Part 1 of 4 How I manage my device from
Introduction Since we moved towards windows 10 we were met with a new way of patching. Patching Cumulative, so that the next patch had all the older patches inside, this made our life as admins much easier. Thinking of the good old days with Windows 7 where we reached a
Introduction This blog post is part of a series. If you did not see the How I manage my device from Endpoint Manager – taste your own medicine – Part 1 of 4, you should go through that first. In this blog post I will go through the security recommendations
Introduction Do you like managing devices? Do you like to keep them safe? Then read along in this blog post. In our company we use Microsoft Defender for Endpoint (aka MDATP) to protect our devices at a deeper level. If you work with Microsoft technology and you can use internet
Introduction When you use the Configuration Manager tenant attach scenario, you can deploy endpoint security policies from Intune to devices you manage with Configuration Manager. Prerequisites The tenant attach and CMG can be configured by using this blogpost by Lars Lohmann here Collection to assign policies First, we
Introduction Microsoft just introduced an updated kit for IT pros to plan, test and validate deployment and management of desktops running Windows 10 Enterprise and Microsoft 365 Apps for enterprise. This was earlier known as “Windows insider lab for Enterprise” or “Olympia”. The lab will cover technologies: So
Introduction Enterprise State Roaming is available to any organization with an Azure AD Premium or Enterprise Mobility + Security (EMS) license. It enables users to sync user- and application settings across devices. It is an upgraded version of what you probably know as Roaming profile, but with no on-premise
Introduction Proactive remediations in Endpoint analytics will help your organization to fix common issues automatically. Stuff that you know are broken or reoccur can be automated and your helpdesk and Admins will save time. It can also be used for monitoring in your environment, and in this blog post I
Last updated 14.08.2020 Introduction I have written the following blog to share some of the valuable sources of information I have discovered while developing my knowledge related to the rollout of Modern Workplace clients using Microsoft365 Intune and Autopilot. Instead of a standard how to guide I have decided
One of my top recommendations is to always encrypt fixed drives. This recommendation is even more relevant in a world where a large percentage of the workforce is mobile and carries around laptops with access to corporate data, or even worse has corporate data on their laptops. For this
Last year we wrote about Azure AD and password-less sign-in http://blog.mindcore.dk/2019/07/azure-ad-and-password-less-sign-in.html Now we also have support (Public preview) for this in hybrid environments, so let’s try it out. We will use the same Yubico security NFC as last time. First thing we need to be aware of is that we
Modern Workplace consultant and a Microsoft MVP in Windows and Devices.
Infrastructure architect with focus on Modern Workplace and Microsoft 365 security.
Cloud & security specialist with focus on Microsoft backend products and cloud technologies.
Cloud & Security Specialist, with a passion for all things Cybersecurity
Cloud and infrastructure security specialist with background in networking.
Infrastructure architect with focus on design, implementation, migration and consolidation.
Infrastructure consultant with focus on cloud solutions in Office365 and Azure.
Modern workplace and infrastructure architect with a focus on Microsoft 365 and security.
