In our company we are consuming a 100% cloud services and we have literally zero servers, network or infrastructure at all. As we still have the need of patching 3rd party software on our clients I started [...]
If you have already total control of your licenses in your Microsoft tenant, this article is not for you. But what we see with a lot of customers though, is that they do not have the insight and control [...]
After the release of App-based authentication for MS Intune Graph access, I decided to have a look at setup some Intune monitoring with Azure Monitor and integrating this with Microsoft Teams for alerting. [...]
At Ignite 2019 Microsoft announced BitLocker key rotation for Intune managed Windows 10 devices. It is a long awaited feature and closes the feature gaps in the cloud managed BitLocker solution. In this [...]
For earlier posts, please find them here: Passwordless journey with FIDO2 – Part 1 – Getting started with Security keys In the last part of this blog post I wrote about the beginning of my passwordless [...]
The Microsoft Azure AD Team has just released a long awaited feature in public preview. That feature is called Report Only Mode for Conditional Access. Report-only mode allows administrators to evaluate [...]
FIDO2, Multifactor Authentication, passwordless, Windows Hello for Business, Microsoft Authenticator, Security keys and a whole bunch of other fancy security words are taking the spotlight these days, [...]
As Apple are getting ready to release iPadOS to the masses on September 30th 2019 there are important matters to take care of. If you have both MacOS and iPads in your enviroment there are difficult choices [...]
Groups in Azure AD have sometimes proven difficult to fully utilize when it comes to querying a set of devices based out of various specific data. These groups are limited to a defined set of properties [...]
It’s been a while since this series started, but let’s continue. At this point the certificate templates have been configured including the setup and configuration of NDES have been taken care [...]
Now that we have in Part 1 integrated Jamf Pro with Intune and Azure AD we need to deploy the Company portal app to our users and a policy for end users to register the devices in Azure Active Directory. [...]
If you have Apple Mac’s in your environment and want to use Conditional Access to control access to your Azure AD integrated applications and data, like Office 365. Then you should take a look at [...]
In part 4 of this series on implementing modern security tools, we will now look at how to empower end users to remove the burden of many an IT helpdesk. Yes of course, we are talking about the “can [...]
The new Intune Win32 app management is a great way to deploy Win32 apps with Microsoft Intune. Imagine you have a kind of source share for all the .intunewin files you have created. At some point in [...]
Since the release in 2017 of Windows Autopilot we’ve been able to provision devices using cloud technologies and joining them to Azure Active Directory. Organizations have shown great interest in [...]
When enabling Hybrid Azure AD join in Azure AD Connect wizard it gives you the option to choose to enable the configuration for Windows 10 and down-level devices (Windows 7 and 8.1). A requirement for [...]
Up until now in this blog series we’ve covered the certificate templates creation, issuing of certificates for the NDES server including automating the installation of NDES server role including [...]
In this series I am going to step through how to help secure your internal infrastructure through the use of modern tools both running both within Azure AD and on your internal AD infrastructure. These [...]
In the previous part of this series we created the required certificate templates and some prerequisite configuration in terms of the NDES service account and a group for the NDES server to be a member [...]
Update (March. 18. 2020) : If you are looking for cloud only print solution, Microsoft is offering now new print solution Universal Print. https://docs.microsoft.com/en-us/universal-print/fundamentals/universal-print-whatis [...]
Azure AD Joined/Azure Device Registration/Intune Enrollment I have spent a lot of time over the past few months working with Azure and Intune, there are a lot of toys to play with and a lot you can do [...]
Having made the migration from onsite Exchange and SharePoint to Office 365 in early 2015 one of the key issues that users had was the lack of single sign on facilities to applications based in the cloud. [...]
In this, the final part of the series, we look at how the MBAM client and settings are deployed in the 2002 release of C...
In part two of this three part series, I will run through how to customise the BitLocker Self Service portal in Configur...
Back in January 2019 I wrote a series on setting up and customising MBAM (https://www.scconfigmgr.com/2019/01/12/step-by...