Recent
Risk Based Windows 11 Feature Update Deployment - Device Attributes
·
loading
Intune
Windows 10 and later
Updates
Groups
PowerShell
Graph API
I’d strongly suggest, if you haven’t already, skimming over the first part of this series as this will give you a good understanding of where we started, and hopefully where we’re trying to get to with putting the Feature Update Readiness Reports in Microsoft Intune to good use allowing for a risk based deployment approach of Windows 11 23H2.
Software Update Deployment Rings for Managed macOS Devices
·
loading
Intune
Apple
macOS
Updates
Groups
Security
I’ve been waiting a little while to put this post together, as unlike the monthly release of Windows Updates, macOS updates come few and far between, with the recent release of Sonoma 14.4 on March 7th 2024, giving me an actual update to test any phased update configurations.
Risk Based Windows 11 Feature Update Deployment - Reporting
·
loading
Intune
Windows 10 and later
Updates
Groups
PowerShell
Graph API
At the time of writing we are only a few hundred days away from the end of support of Windows 10 22H2, and really we should all be recommending the move to Windows 11, not just because it’s shiny and new, but also it’s going to actually get security updates.
Remediating BitLocker DMA Exception Errors with Microsoft Intune
·
loading
Intune
BitLocker
PowerShell
Windows 10 and later
Security
Silently encrypting Windows 10 and later devices in Microsoft Intune isn’t anything new, removing reliance on Administrator permissions to encrypt a device during either Windows Autopilot or otherwise, as long as your configuration meets the pre-requisites and you’re only using a TPM (Trusted Platform Module) as a pre-boot authentication method.
Creating Reusable Groups of Firewall Settings for Microsoft Online Services
·
loading
Intune
Security
PowerShell
Graph API
Settings Catalog
Windows 10 and later
If you’ve been living under a rock, or you don’t have to deal with firewall and proxy requirements for accessing Microsoft Online services, you probably won’t be aware that Microsoft publish their URLs and IP addresses for their services using a web service.
A Flexible Approach to Microsoft Update Deployments
·
loading
Intune
Windows 10 and later
Updates
Groups
Security
So this isn’t the first time we’ve looked at improving the management of updates using Microsoft Intune, and probably won’t be the last time either, especially with declarative device management looming, for Apple and hopefully Windows devices, covering configuration of software updates.
Custom Backgrounds for macOS New and Classic Microsoft Teams Apps
·
loading
Intune
macOS
Apple
Microsoft Teams
Apps
Shell Script
This isn’t the first time we’ve looked at deploying backgrounds for Microsoft Teams on macOS, but it’s been a while since we answered an internet strangers question, and hopefully my scripting has come on a little way since then (spoiler: it hasn’t).
Keeping Windows Store Apps Updated with Microsoft Intune
·
loading
Intune
Windows 10 and later
Updates
Remediation
Apps
PowerShell
Windows Autopilot
Security
So we’re all onboard with the New Microsoft Store, and deploying both UWP and Win32 apps from Microsoft Intune is an absolute breeze, and reduces the effort of deploying applications to a click click next OK exercise. What about the UWP apps that are already installed on a Windows Autopilot device, shouldn’t we give them a bit of love?
Automatically Resizing the WinRE Partition for Windows Update KB5034441
·
loading
Intune
Windows 10 and later
Updates
PowerShell
Remediation
If you’ve been under a rock, or like me, don’t have to manage updates on a Windows device estate any more, chances are you might not have seen the issues with the size of the Windows Recovery Environment or WinRE, partition when applying Windows Updates like KB5034441, luckily Microsoft released a ‘fix’ for this in KB5028997 to resize the partition to allow for updates to install.