Another blog post on the subject of Hybrid Azure AD joined devices that have been provisioned using Windows Autopilot. As you may have figured by now, this scenario even though it’s not in preview [...]
With the release of WIM Witch v1.3.0, she now has new capabilities that were requested by the community. While there have been plenty of functional updates to WIM Witch since its release, this version [...]
At Ignite 2019 Microsoft announced BitLocker key rotation for Intune managed Windows 10 devices. It is a long awaited feature and closes the feature gaps in the cloud managed BitLocker solution. In this [...]
For earlier posts, please find them here: Passwordless journey with FIDO2 – Part 1 – Getting started with Security keys In the last part of this blog post I wrote about the beginning of my passwordless [...]
For a modern workplace these days, Microsoft is enabling provisioning of devices without the need of managing the image that resides on the devices. With this new way of managing devices from a provisioning [...]
WIM Witch is a utility that can be used to update and modify WIM files for Windows deployment scenarios. It allows the WIM to be patched, drivers to be applied, in-box applications to be removed, and .Net [...]
As for many organizations, it’s an extremely common requirement to be able to configure the local Windows Firewall on any given in terms of adding specific rules. Up until today, there’s been [...]
Recently I was at a customer site, where several people where deploying Windows 10 devices and Hybrid enrolling them in Intune MDM via GPO. However they sometimes struggled with keeping track of when the [...]
Ever since the first public announcement of Desktop Analytics back at Microsoft Ignite in September 2018, companies have been asking for this cloud service for a while now and it’s finally here (although [...]
When testing and implementing Windows Autopilot as your provisioning solution for Windows 10 devices, you need to import the device hash including other values into the Autopilot service. This can be done [...]
Since the release of Windows 10, it has been common for organization to try and reduce the footprint of built-in apps (or default apps) in their reference images, or even during bare-metal deployment. [...]
For earlier posts, please find them here: Building lock down device – Part 1 – (Keyboard Filter) Building lock down device – Part 2 (Shell Launcher) Building lock down device – [...]
For earlier posts, please find them here: Building lock down device – Part 1 – (Keyboard Filter) Building lock down device – Part 2 (Shell Launcher) For more details how to configure Shared [...]
In Building lock down device – Part 1 – (Keyboard Filter) , we introduce Windows Feature device lockdown. One of the device lockdown feature is Shell Launcher. Requirement is same as Keyboard [...]
Updated: There are two “bugs” I mentioned earlier in this post, but I was totally wrong about it. Those “bugs” I ran into, was because I configured them wrong and still missing [...]
In the final part of the series, we will look at the newest means of controlling settings, Administrative Templates (ADMX). We will also look at working around some limitations with exported pre-created [...]
Windows Analytics provides a key component in a modern managed environment. If we use Windows Update for Business we have no way of monitoring key performance metrics of our environment without Windows [...]
In part two of this multi-series blog on managing devices with Microsoft Intune, we will look at how to apply setting using the configuration service provider (CSP). Series Links: Managing Windows 10 with [...]
If you are in the process of migrating to modern management and are used to the on-premise world, things can be a bit daunting at first when getting familiar with where to set settings in the Intune portal. [...]
The new Intune Win32 app management is a great way to deploy Win32 apps with Microsoft Intune. Imagine you have a kind of source share for all the .intunewin files you have created. At some point in [...]
You have probably ready the excellent write-up from Sandy on how to setup CO-Management already, but since CB 1806 there is a simpler method for implementing this without any need for PKI or certificates [...]
At first, happy new year 2019 to you all! I have been thinking what topic would be my first blog post of year 2019, maybe something about ConfigMgr or Intune? Turns out, neither! In these two days, I have [...]
Since the release of Windows 10, it has been common for organization to try and reduce the footprint of built-in apps (or default apps) in their reference images, or even during bare-metal deployment. [...]
Since the release in 2017 of Windows Autopilot we’ve been able to provision devices using cloud technologies and joining them to Azure Active Directory. Organizations have shown great interest in [...]
Deploying kiosks in Windows 10 through Microsoft Intune offers a straight forward means of locking down a system to a single or even a multi-app kiosk. Sandy has already covered how to set up a multi-app [...]
This is a post about enabling BitLocker on non-HSTI devices with Windows 10 version 1809 and standard user permissions. First of all a little background on HSTI. HSTI is a Hardware Security Testability [...]
While many are of the opinion that organizations should not customize the start menu during Windows 10 deployments, it’s happening almost in every Windows 10 project anyway. There are several blog [...]
Recently PowerBI had its birthday and I put a tweet out there on twitter asking what type of dashboard people would like to see in celebration. Well the results came in pretty quick and it was almost a [...]
The following post is all about a complete process automation of gathering and upload of a device Autopilot information to the Windows Autopilot service with an Azure Automation Runbook. Table of content [...]
Having tested Windows 10 Kiosk device configuration for many weeks now, it is time to write down my findings and experiences. Before I go to details how to configure multiple apps in Kiosk devices, I would [...]
With AutoPilot trending on twitter and in organizations around the world, we’re still creating reference images to support any existing solutions in place. The discussion whether to include Office [...]
Since the release of Windows 10, it has been common for organization to try and reduce the footprint of built-in apps (or default apps) in their reference images, or even during bare-metal deployment. [...]
Apple Admins conference On January 25th I had the pleasure of speaking at the London Apple Admins event at London School of Economics as it was a Apple event I spoke about the crossover with Intune and [...]
What is Auto-Pilot Windows AutoPilot is a collection of technologies used to set up and pre-configure new devices, getting them ready for productive use. I can really see the appeal we use XMA for our [...]
Azure AD Joined/Azure Device Registration/Intune Enrollment I have spent a lot of time over the past few months working with Azure and Intune, there are a lot of toys to play with and a lot you can do [...]
When dealing with Windows 10 upgrades on systems that have a single or multiple language packs installed, most of the time you’d want to keep the same experience in terms of language preferences [...]
What is Windows 10 fast startup Fast Startup in Windows 10 is supposed to help boot Windows up much faster. In a complete shutdown scenario, Windows logs off all users and closes all applications. Fast [...]
For a little more than one year ago, I posted a script that would automate the process of removing built-in applications when creating a Windows 10 reference image. Since then, the script has been amended [...]
In this second post on how to deal with the scenario of converting from BIOS to UEFI, we’ve come to Dell. This series of post consists of the following: Convert from BIOS to UEFI during Windows 10 [...]
I’ve previously written a post on this topic, demonstrating a custom method that could be used before ConfigMgr had native support for the BIOS to UEFI conversion. However, that post should now be [...]
Recently I’ve published a few posts on Upgrade Analytics, like deploying the client script and how to setup a connection between ConfigMgr Current Branch (version 1610+) and Upgrade Analytics. Following [...]
Upgrade Analytics is a solution in OMS that can help you to analyze and assess device readiness and compatibility with Windows 10 for migration or servicing scenarios. Recently, Microsoft released ConfigMgr [...]
A couple of months ago now, Microsoft announced their free service that will replace Application Compatibility Toolkit, called Upgrade Analytics (solution in OMS). If you’ve not yet taken a look [...]
For most Windows 10 deployments, organizations are removing most of the built-in apps that ships with the operating system. However, in situations when this is not dealt with, for various reasons, you [...]
With the release of Windows 10 version 1607, you have the option to install Ubuntu for Windows which gives you a Linux subsystem running in your Windows operating system. At a first glance, you might ask [...]
In previous version of Windows 10, customizing the task bar has been proven difficult to not say the least. Now with the release of Windows 10 version 1607, we finally have built-in support for customizing [...]
Windows 10 version 1607 (also refered to as Redstone 1 or Anniversary Build) comes with built-in support for the Windows Defender Advanced Threat Protection (Windows Defender ATP) service. With the release [...]
When deploying Windows 10 in your organization, it’s strongly recommended to take a look at the new security features Windows brings to the table. One specific feature that I recommend all of my [...]
Blog post have been deprecated, please refer to the series of how switch from BIOS to UEFI found on the link below: Convert from BIOS to UEFI during Windows 10 deployments with ConfigMgr Current Branch [...]
When we think about the concept of managing mobile devices, ever since the release of Windows 10 and the announcement of managing those devices through an OMA-DM agent (also referred to as MDM in some [...]
After the release of App-based authentication for MS Intune Graph access, I decided to have a look at setup some Intune ...
Deploying a Cloud Management Gateway (CMG) with ConfigMgr requires access to an Azure Subscription. Additionally, the CM...
Over the years it’s been relatively common to include Microsoft DaRT into your boot image used for OSD in ConfigMg...