Microsoft Intune is a cloud based service which provides Mobile Device Mangement (MDM), Mobile Application Management (MAM) and Windows 10 PC Management along with features such as Remote Lock, Reset passcode, App Selective Wipe, Wipe Data from Enrolled Devices, Device Compliance Policies, Reporting, App Protection Policies (APP). Also supports MAM-WE (Mobile Application Management)-Without Enrollment (WE) which is to manage the Applications without Enrolling your device to Intune.
Intune is included in Microsoft Enterprise Mobility + Security (EMS) and Integrates with Microsoft 365, Azure AD and Azure Information Protection (AIP). Please click the link to find out more information about it. Please leave a comment if you like it.
Microsoft Intune is included in the following licenses:
►Microsoft 365 E5 ► Microsoft 365 E3 ►Enterprise Mobility + Security E5 ► Enterprise Mobility + Security E3 ►Microsoft 365 Business ►Microsoft 365 F3 ►Microsoft 365 Government G5 ►Microsoft 365 Government G3.
For More Information:
https://docs.microsoft.com/en-us/mem/intune/fundamentals/what-is-intune
With Intune, you can create and manage local admin accounts on your Windows 10 devices, which is particularly useful for managing devices that are not connected to a domain. You can easily create a local user account and then add it to Administrators group using Intune. As an example, We …
Default apps in Windows are the programs or applications that are set to automatically open and handle specific file types on your computer. For example: When you open a document with .docx extenstion, it will open it in Microsoft word. A saved document with .pdf extention will open in Adobe …
One of the essential tasks in Intune is to synchronize policies and profiles between devices and Microsoft Intune service. While Intune automatically syncs these updates periodically, there may be times when you need to force a sync manually. You can either go to Settings App on your windows device or …
Deploying emergency zero-day patches is critical to securing your organization’s devices and networks from cyber threats. With the increase in frequency and sophistication of cyber attacks, organizations need to respond quickly to zero-day vulnerabilities to minimize the risk of data breaches and system downtime. Microsoft Intune, a cloud-based mobile device …
When you want to deploy any application using Intune, you have to choose from several deployment options available from Microsoft Endoint manager admin center. Line-of-business apps is used for MSI Installer applications. You can use Line-of-business app option for the deployment of a simple .msi file on end user’s devices. …
When you download an application from software vendor’s website. The application installer can be in the form of .msi file or .exe file. Intune provides different ways in which you can deploy the applications on end user devices. Deployment is MSI files using Intune can also be done in two …
Intune is really a powerful device management tool for any organization. You can setup and configure Intune easily and manage your company devices. There are In-built out of the box deployment methods available on Microsoft Endpoint manager admin center. For example, for Deployment of MSI using Intune, there is a …
Most of the organizations create a dynamic Azure AD group to include all autopilot devices using a Dynamic device membership query (device.devicePhysicalIDs -any (_ -contains "[ZTDID]")). This way you can automate the deployment of Autopilot profile, app deployment, Device configuration etc. to all devices using just one Dynamic Azure AD …
There are different ways to Import ADMX template files into Intune. You can either use OMA-URI method to Import ADMX template files or you can use Import ADMX option recently made available on Microsoft Endpoint manager admin center. For importing an ADMX template into Intune, you first need to download …
Settings app contains Gaming which contains Xbox Game Bar, Captures, Game Mode, Xbox Networking related configuration settings. Most of the organizations I have worked with have configured to hide Gaming under Settings app on Windows 10 or Windows 11 devices. In this blog post, I will show you 2 ways …
When you use Game Mode, Windows will prioritize gaming experience by providing system resources to Games to make the gaming experience smoother and better. There are few actions taken in the background when you turn this switch to On. First, it will not allow Windows update to install drivers and …
You can use Microsoft Intune to upgrade feature update on end user devices. A feature update profile can be created on Microsoft Endpoint Manager admin center from Devices -> Feature Updates for Windows 10 and later (Preview) with the specific release version (for example Windows 10 21H2) you want on …
Windows known folders (Desktop, Documents, Picture) move (redirect) to onedrive is highly recommended for all the users in any organizations specially if users are not having a dedicated device. This is also a best practice when users are logging on to Azure virtual desktop or working in a citrix environement. …
Applocker is a set of policies / rules to allow or deny apps from running on your windows device. Applocker helps to improve the overall security of all your devices in your organization by controlling the execution of applications, scripts, dll files, packages apps etc. What are the requirements for …
Microsoft has made it easier to Import third-party ADMX and ADML files in Microsoft Endpoint Manager admin center. Now, you do not need to use custom device configuration profile and OMA-URI to ingest ADMX and configure application or device settings. You can simply download ADMX and ADML files for any …
There is no easy method to download the line of business MSI application setup file which has been uploaded to Intune. Once you create an application deployment in Intune using any method, the files related to the applications are uploaded to the a storage space maintained by microsoft. But there …
Recently I got a requirement to upgrade Zoom Desktop Client to latest version and also at the same time to remove any older zoom desktop client application from all Intune Managed devices (Windows 10 or Windows 11). After spending a lot of time in testing and troubleshooting I finally managed …
You can use Microsoft Endpoint Manager Admin Center to easily configure Microsoft Edge browser Home Page, Startup Page and New Tab Page. In my previous blog post, I had shown how you can set Microsoft Edge browser as your default browser on Windows 10 or Windows 11 devices using Microsoft …
Applies to: Windows 10 and Windows 11 Microsoft Edge: Version 77 or later You can set Microsoft Edge as your default browser on a Windows 10 or Windows 11 devices using Microsoft Intune. If all your organization devices are enrolled and managed using Intune, then you can create a Device …
Recently I got a request to manage Zoom settings using Microsoft Intune. The most specific setting which was requested is How to configure autoupdate setting of Zoom desktop client using Intune. There are three options for configuring Zoom Desktop Client. You can use an MSI Installer and deploy using pre-configured …
Zoom desktop client can be installed and configured in bulk on Windows systems using one of below methods: Using MSI Installer. Active Directory administrative templates via GPO or Intune. Updating registry keys on windows machines manually. For mass deployment of zoom with pre-configured settings we will be using MSI Installer …
You can manually force sync Intune Policies or configuration profiles or an application deployment from a target device after they have been assigned. Syncing forces your device to connect with Intune to get the latest updates, requirements, and communications from your organization. You could either wait for the next Intune …
You can exclude certain files, folders or Processes from scanning via Microsoft Defender Anti-virus. Exclusions will get applied to Schduled Scans, On-demand scans and always-on real-time protection and monitoring. Please note that Microsoft Defender Antivirus includes a lot of in-built automatic exclusions based on known operating system behaviours. In case …
In this blog post we will see how to deploy Apache OpenOffice 4.1.12 on Windows 10 / Windows 11 devices using Microsoft Intune. For this deployment we will need to download Apache OpenOffice Windows Installer. The Installer is currently only available as a 32-bit application. Download the application by clicking …
In this blog post we will see how to deploy an MSI application package using a Powershell script via Microsoft Intune. I will be deploying this application on few Azure AD joined systems which are enrolled into intune already. I will be using an app called eSigner for which MSI …
You can easily rename a device which is enrolled in Intune. When you take this action, device name is changed In Intune and also device name is changed on that device as well. There are many use cases for this option, for example you have used autopilot on all your …
On Monday May 30, 2022, Microsoft issued CVE-2022-30190 regarding the Microsoft Support Diagnostic Tool (MSDT) in Windows vulnerability. A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code …
Recently deployed Windows Autopilot solution and to simplify the Autopilot Device registration experience, users are given the capability to register their devices themselves from the OOBE (Out of box experience) page by using the Get-WindowsAutopilotinfo -online command. Some of the organizations may not allow this approach and only want their …
ManageEngine Desktop Central Agent is required for managing client PC’s from Desktop Central Agent. Its a lightweight software which can be deployed on the client’s PC using different methods. If you are using On-Premise Active Directory, then you can use GPO and deploy it using a startup script or if …
What is Work Profile A work profile is setup on an Android device to separate company apps and data from personal apps and data. Personal and work profiles have separate storage areas on Android phone. Therefore, for an IT Admin it makes it easier to manage and secure the data. …
When you have configured Microsoft Intune as per your organization requirements and try to Azure AD Join a Windows 10 device you get a pop-up message saying “Something went wrong.” with the error message “This feature is not supported.Contact your system administrator with the error code 80180014“. You may get …
What is Microsoft Intune ? Microsoft Intune which was previously known as Windows Intune is a part of Microsoft Cloud based Mobile device Management (MDM), Mobile Application Management (MAM) and Windows 10 PC Management Solution. No On-Premise Infrastructure is required for using this service from Microsoft and it can be easily managed using Microsoft Endpoint …
In this blog post, we will see how to add, assign, delete and monitor Managed Google Play store apps using Microsoft Intune. To Apply App Protection Policies or App configuration Policies, you will need to add the apps and assign it to the users. If you want to manage iOS store …
In this blog post, we will see how to add, assign, delete and monitor iOS Store Apps using Microsoft Intune. To Apply App Protection Policies or App configuration Policies, you will need to add the apps and assign it to the users. If you want to manage Google Play store …
There are few way in which Android devices can be enrolled. It totally depends upon your requirement of which type of Android enrollment you will use for android devices. For example, if your company allows Personal Android Phones (BYOD) to be used for accessing the company data, you can go …
In this post we will see how to configure Apple MDM Push Certificate which is required to manage Apple devices using Microsoft Intune. We will be using Microsoft Endpoint Manager admin center portal and Apple Push Certificate Portal to configure it. If you are looking to renew Apple MDM Push …
