Meet your new browser – Microsoft Edge
Internet browsers have become more than just a means of accessing lines of HTML, JavaScript and CSS over the years. Today we use browsers to control core functions of our business, through portals into [...]
Improving SCEP certificate distribution for Hybrid Azure AD joined devices provisioned using Windows Autopilot
Another blog post on the subject of Hybrid Azure AD joined devices that have been provisioned using Windows Autopilot. As you may have figured by now, this scenario even though it’s not in preview [...]
WIM Witch v1.3.0 – Server Support, OneDrive, and Command Line
With the release of WIM Witch v1.3.0, she now has new capabilities that were requested by the community. While there have been plenty of functional updates to WIM Witch since its release, this version [...]
Enable BitLocker Key Rotation for Intune managed devices
At Ignite 2019 Microsoft announced BitLocker key rotation for Intune managed Windows 10 devices. It is a long awaited feature and closes the feature gaps in the cloud managed BitLocker solution. In this [...]
Passwordless journey with FIDO2 – Part 2 – Usage experiences
For earlier posts, please find them here: Passwordless journey with FIDO2 – Part 1 – Getting started with Security keys In the last part of this blog post I wrote about the beginning of my passwordless [...]
Silently enable BitLocker for Hybrid Azure AD joined devices using Windows Autopilot
For a modern workplace these days, Microsoft is enabling provisioning of devices without the need of managing the image that resides on the devices. With this new way of managing devices from a provisioning [...]
WIM Witch – A GUI Driven Solution for Image Customization
WIM Witch is a utility that can be used to update and modify WIM files for Windows deployment scenarios. It allows the WIM to be patched, drivers to be applied, in-box applications to be removed, and .Net [...]
Manage Windows Firewall rules in Windows 10 with Microsoft Intune
As for many organizations, it’s an extremely common requirement to be able to configure the local Windows Firewall on any given in terms of adding specific rules. Up until today, there’s been [...]
How to notify a Microsoft Teams Channel when a new Windows device has enrolled in Microsoft Intune
Recently I was at a customer site, where several people where deploying Windows 10 devices and Hybrid enrolling them in Intune MDM via GPO. However they sometimes struggled with keeping track of when the [...]
Setup and connect ConfigMgr with Desktop Analytics
Ever since the first public announcement of Desktop Analytics back at Microsoft Ignite in September 2018, companies have been asking for this cloud service for a while now and it’s finally here (although [...]
Import Windows Autopilot device identity using PowerShell
When testing and implementing Windows Autopilot as your provisioning solution for Windows 10 devices, you need to import the device hash including other values into the Autopilot service. This can be done [...]
Remove Built-in apps for Windows 10 version 1903
Since the release of Windows 10, it has been common for organization to try and reduce the footprint of built-in apps (or default apps) in their reference images, or even during bare-metal deployment. [...]
Building lock down device – Part 4 (Kiosk PC mode)
For earlier posts, please find them here: Building lock down device – Part 1 – (Keyboard Filter) Building lock down device – Part 2 (Shell Launcher) Building lock down device – [...]
Building lock down device – Part 3 (Shared PC mode)
For earlier posts, please find them here: Building lock down device – Part 1 – (Keyboard Filter) Building lock down device – Part 2 (Shell Launcher) For more details how to configure Shared [...]
Building lock down device – Part 2 (Shell Launcher)
In Building lock down device – Part 1 – (Keyboard Filter) , we introduce Windows Feature device lockdown. One of the device lockdown feature is Shell Launcher. Requirement is same as Keyboard [...]
Building lock down device – Part 1 (Keyboard Filter)
Updated: There are two “bugs” I mentioned earlier in this post, but I was totally wrong about it. Those “bugs” I ran into, was because I configured them wrong and still missing [...]
Managing Windows 10 with Microsoft Intune – Part 3
In the final part of the series, we will look at the newest means of controlling settings, Administrative Templates (ADMX). We will also look at working around some limitations with exported pre-created [...]
Windows Analytics onboarding with Intune
Windows Analytics provides a key component in a modern managed environment. If we use Windows Update for Business we have no way of monitoring key performance metrics of our environment without Windows [...]
Managing Windows 10 with Microsoft Intune – Part 2
In part two of this multi-series blog on managing devices with Microsoft Intune, we will look at how to apply setting using the configuration service provider (CSP). Series Links: Managing Windows 10 with [...]
Managing Windows 10 with Microsoft Intune – Part 1
If you are in the process of migrating to modern management and are used to the on-premise world, things can be a bit daunting at first when getting familiar with where to set settings in the Intune portal. [...]
How to decode Intune Win32 App Packages
The new Intune Win32 app management is a great way to deploy Win32 apps with Microsoft Intune. Imagine you have a kind of source share for all the .intunewin files you have created. At some point in [...]
How to setup Cloud Management Gateway with Enhanced HTTP
You have probably ready the excellent write-up from Sandy on how to setup CO-Management already, but since CB 1806 there is a simpler method for implementing this without any need for PKI or certificates [...]
Community Tool: SCConfigMgr Idle Notification
At first, happy new year 2019 to you all! I have been thinking what topic would be my first blog post of year 2019, maybe something about ConfigMgr or Intune? Turns out, neither! In these two days, I have [...]
Remove Built-in apps for Windows 10 version 1809
Since the release of Windows 10, it has been common for organization to try and reduce the footprint of built-in apps (or default apps) in their reference images, or even during bare-metal deployment. [...]
Hybrid Azure AD join Windows Autopilot devices using Microsoft Intune
Since the release in 2017 of Windows Autopilot we’ve been able to provision devices using cloud technologies and joining them to Azure Active Directory. Organizations have shown great interest in [...]
Building a shared pc mode kiosk with Microsoft Intune
Deploying kiosks in Windows 10 through Microsoft Intune offers a straight forward means of locking down a system to a single or even a multi-app kiosk. Sandy has already covered how to set up a multi-app [...]
Enabling BitLocker on non-HSTI devices with Intune
This is a post about enabling BitLocker on non-HSTI devices with Windows 10 version 1809 and standard user permissions. First of all a little background on HSTI. HSTI is a Hardware Security Testability [...]
Configure a dynamic Start Menu layout for Windows 10 during OSD with ConfigMgr
While many are of the opinion that organizations should not customize the start menu during Windows 10 deployments, it’s happening almost in every Windows 10 project anyway. There are several blog [...]
SCConfigMgr OSD Dashboard Version 1.0
Recently PowerBI had its birthday and I put a tweet out there on twitter asking what type of dashboard people would like to see in celebration. Well the results came in pretty quick and it was almost a [...]
Automation of gathering and importing Windows Autopilot information
The following post is all about a complete process automation of gathering and upload of a device Autopilot information to the Windows Autopilot service with an Azure Automation Runbook. Table of content [...]
Create Windows 10 Kiosk devices using Microsoft Intune – multiple apps
Having tested Windows 10 Kiosk device configuration for many weeks now, it is time to write down my findings and experiences. Before I go to details how to configure multiple apps in Kiosk devices, I would [...]
Include Office 365 ProPlus in your Windows 10 reference image
With AutoPilot trending on twitter and in organizations around the world, we’re still creating reference images to support any existing solutions in place. The discussion whether to include Office [...]
Remove Built-in apps for Windows 10 version 1803
Since the release of Windows 10, it has been common for organization to try and reduce the footprint of built-in apps (or default apps) in their reference images, or even during bare-metal deployment. [...]
Modern Management of Windows – Intune & Autopilot
Apple Admins conference On January 25th I had the pleasure of speaking at the London Apple Admins event at London School of Economics as it was a Apple event I spoke about the crossover with Intune and [...]
Traditional Management vs Modern Management – Part 4 – Windows AutoPilot
What is Auto-Pilot Windows AutoPilot is a collection of technologies used to set up and pre-configure new devices, getting them ready for productive use. I can really see the appeal we use XMA for our [...]
Traditional Management vs Modern Management – Part 3 – AAD/Auto MDM Enrollment
Azure AD Joined/Azure Device Registration/Intune Enrollment I have spent a lot of time over the past few months working with Azure and Intune, there are a lot of toys to play with and a lot you can do [...]
Automatically retain installed Language Packs during Windows 10 Servicing
When dealing with Windows 10 upgrades on systems that have a single or multiple language packs installed, most of the time you’d want to keep the same experience in terms of language preferences [...]
Manage Windows 10 Fast Startup with SCCM Compliance Baseline
What is Windows 10 fast startup Fast Startup in Windows 10 is supposed to help boot Windows up much faster. In a complete shutdown scenario, Windows logs off all users and closes all applications. Fast [...]
Enhanced script for removing built-in apps when creating a Reference Image for Windows 10
For a little more than one year ago, I posted a script that would automate the process of removing built-in applications when creating a Windows 10 reference image. Since then, the script has been amended [...]
Convert from BIOS to UEFI on Dell systems with ConfigMgr Current Branch – Part 1
In this second post on how to deal with the scenario of converting from BIOS to UEFI, we’ve come to Dell. This series of post consists of the following: Convert from BIOS to UEFI during Windows 10 [...]
Convert from BIOS to UEFI during Windows 10 deployments with ConfigMgr Current Branch – Introduction
I’ve previously written a post on this topic, demonstrating a custom method that could be used before ConfigMgr had native support for the BIOS to UEFI conversion. However, that post should now be [...]
Create Azure AD Application with PowerShell for ConfigMgr and Upgrade Analytics connection
Recently I’ve published a few posts on Upgrade Analytics, like deploying the client script and how to setup a connection between ConfigMgr Current Branch (version 1610+) and Upgrade Analytics. Following [...]
Setup a connection between Upgrade Analytics and ConfigMgr Current Branch
Upgrade Analytics is a solution in OMS that can help you to analyze and assess device readiness and compatibility with Windows 10 for migration or servicing scenarios. Recently, Microsoft released ConfigMgr [...]
Using Upgrade Analytics Deployment Script with ConfigMgr
A couple of months ago now, Microsoft announced their free service that will replace Application Compatibility Toolkit, called Upgrade Analytics (solution in OMS). If you’ve not yet taken a look [...]
Disable Get Office notifications for Windows 10 during OSD with ConfigMgr
For most Windows 10 deployments, organizations are removing most of the built-in apps that ships with the operating system. However, in situations when this is not dealt with, for various reasons, you [...]
Enable Ubuntu in Windows 10 during OSD with ConfigMgr
With the release of Windows 10 version 1607, you have the option to install Ubuntu for Windows which gives you a Linux subsystem running in your Windows operating system. At a first glance, you might ask [...]
Customize Pinned Items on Taskbar in Windows 10 1607 during OSD with ConfigMgr
In previous version of Windows 10, customizing the task bar has been proven difficult to not say the least. Now with the release of Windows 10 version 1607, we finally have built-in support for customizing [...]
Onboarding Windows 10 devices into Windows Defender Advanced Threat Protection with ConfigMgr
Windows 10 version 1607 (also refered to as Redstone 1 or Anniversary Build) comes with built-in support for the Windows Defender Advanced Threat Protection (Windows Defender ATP) service. With the release [...]
Enable Credential Guard in Windows 10 during OSD with ConfigMgr
When deploying Windows 10 in your organization, it’s strongly recommended to take a look at the new security features Windows brings to the table. One specific feature that I recommend all of my [...]
Switch from BIOS to UEFI on Dell Systems during Windows 10 deployment with ConfigMgr
Blog post have been deprecated, please refer to the series of how switch from BIOS to UEFI found on the link below: Convert from BIOS to UEFI during Windows 10 deployments with ConfigMgr Current Branch [...]
Latest Posts
Recently I took on an new task assignment to migrate all users from the Office 2016 client to Office 365 Pro Plus. I tho...
For earlier posts, please find them here: Passwordless journey with FIDO2 – Part 1 – Getting started with Se...
Starting with version 1.4.0, WIM Witch can now import and apply Language Packs, Features on Demand, and Local Experience...