pointing
Posted inDaily life Device Management Intune

Setting up cloud kerberos trust – passwordless access to on-prem resources.

This post will show you how to set up your environment to support AzureAD joined devices authenticating with your on-prem resources. When devices are setup as pure azure ad joined, and not hybrid joined, devices we need to handle authentication to your on-prem resources in a better way. Your on-prem resources does not in itself understand the authentication from these devices. It will also add support for using Windows Hello for Business/biometrics, FIDO security keys
Enabling Microsoft “Cloud enabled LAPS” (Local Admin Password Solution)
Posted inCloud Device Management Intune

Enabling Microsoft “Cloud enabled LAPS” (Local Admin Password Solution)

LAPS - Local Admin Password Solution, has for a long time been one of those great tools to have in the toolbox when it comes to securing your devices from lateral movement from a potential attacker. And Microsoft LAPS have been around for quite some time already. This tool was orginally available for deployment to server/desktop devices connected to a traditional domain (on-prem) setup. This changed as of April 2023, and Microsoft have now introduced Microsoft LAPS (Preview) with support for configuration with Intune, and saving the passwords to Azure AD, giving us - once again - a native LAPS solution to handle the local admin account.
How to configure screensaver settings on non-enterprise editions of Windows with Intune
Posted inApplications Cloud Daily life

How to configure screensaver settings on non-enterprise editions of Windows with Intune

his is another post to deal with one of thelimitations of the various licensing editions of Windows. To be specific, there are certain features that are only available if you have an Enterprise or Education edition of Windows. This post beeing around the limitation of controlling the settings around enforcing and controlling the screen saver on devices via intune. As always, every problem has a solution, or a viable workaround.
Security: How to enable sign-in with FIDO2 security keys on Windows 10 Devices and Azure AD
Posted inCloud Daily life Device Management

Security: How to enable sign-in with FIDO2 security keys on Windows 10 Devices and Azure AD

FIDO2 security keys are an unphishable standards-based passwordless authentication method that can come in any form factor. Fast Identity Online (FIDO) is an open standard for passwordless authentication. FIDO allows users and organizations to leverage the standard to sign in to their resources without a username or password using an external security key or a platform key built into a device. Read the post to see how you can enable this for your Azure ad and windows 10 devices.
Intune: Setting custom wallpaper and lockscreen on Windows 10 devices with PowerShell and Azure Storage Blobs
Posted inAutopilot Daily life Device Management

Intune: Setting custom wallpaper and lockscreen on Windows 10 devices with PowerShell and Azure Storage Blobs

Many organizations want to deploy custom branded wallpapers and lockscreens on corporate managed devices. Doing this with Microsoft Intune is natively limited to Windows 10 Enterprise and Education. Follow this guide to see how you can do this with Intune and PowerShell toghether with Azure Storage Blobs.
Windows Autopilot – Failing on app configuration when running Windows 10:1903
Posted inAutopilot Daily life Device Management

Windows Autopilot – Failing on app configuration when running Windows 10:1903

If you are running Windows autopilot on devices you may experience issues during enrollment/configuration after the 1903 update.
The issue comes when deploying Windows store apps with autopilot, and you may get faced with the enrollment process giving you an error when it gets to this step.

Intune – Publishing win32 applications with Intune
Posted inApplications Cloud Daily life

Intune – Publishing win32 applications with Intune

So, you got licenses for Microsoft Intune, and want to roll out some applications to your devices.
If you are new to this you may be faced with some issues, especially regarding what kind of applications you can publish, and how to do so.
There are numerous formats for applications to manage these days – you got the Windows store applications (appx) from Windows 8>>, Line of business apps in the form of MSI installers, and win32 apps.
I will not go into detail on MSI and Windows store here, as these are rather easy to deploy via the information in the web gui.