↓Skip to main content
MEM v ENNBEE - Battles with Modern Device Management

Providing solutions, assistance, and insight to problems you probably didn’t know existed with Modern Endpoint Management products, aimed toward people like me, who face the endless fight for, with, and against Microsoft Intune and Microsoft Configuration Manager.

Recent

Configuring Google Chrome on macOS for Platform Single Sign-On
· loading
Microsoft Intune Apple macOS Configuration mobileconfig Security Conditional Access
With all the hype about Platform SSO on macOS devices, now is the time to try out not just the standard functionality, but the integration into web browsers such as Google Chrome. We take a look at how to configure this using Microsoft Intune.
Risk Based Windows 11 Feature Update Deployment - Feature Updates
· loading
Microsoft Intune Windows 10 and later Updates Groups PowerShell Graph API
Using the data captured from a Windows 11 Feature Update Readiness report to successfully tag device attributes to device objects, and group them based on risk, we now look at how to deploy Feature Updates to these devices in a controlled manner.
Risk Based Windows 11 Feature Update Deployment - Device Attributes
· loading
Microsoft Intune Windows 10 and later Updates Groups PowerShell Graph API
Having looked into capturing the Feature Update Readiness data for Windows 11 23H2 for our Windows devices, we can now use this risk based data to tag them with their associated risk, grouping them together to allow for sensible Feature Update profile assignment.
Software Update Deployment Rings for Managed macOS Devices
· loading
Microsoft Intune Apple macOS Updates Groups Security
So you’ve pulled the trigger on managing macOS devices in Microsoft Intune, and with this year being the year of macOS for Microsoft (this seems like an oxymoron), you should probably look at how to handle software updates.
Risk Based Windows 11 Feature Update Deployment - Reporting
· loading
Microsoft Intune Windows 10 and later Updates Groups PowerShell Graph API
With Windows 10 support coming to an end sooner than you’d expect, in the first part of this series we look at ways to capture Feature Update Readiness Report data using PowerShell and Graph to help with the rollout of the new Windows 11 operating system.
Remediating BitLocker DMA Exception Errors with Microsoft Intune
· loading
Microsoft Intune BitLocker PowerShell Windows 10 and later Security
So you’ve configured BitLocker silent encryption in Microsoft Intune, but some of your devices are failing to encrypt complaining about a DMA exception issue. How can we fix that without creating a gaping security hole?
Creating Reusable Groups of Firewall Settings for Microsoft Online Services
· loading
Microsoft Intune Security PowerShell Graph API Settings Catalog Windows 10 and later
It’s time to remove another manual process, this time the creation of Microsoft 365 network endpoints for Windows Firewall Rules in Microsoft Intune, because nobody should be creating these manually.
A Flexible Approach to Microsoft Update Deployments
· loading
Microsoft Intune Windows 10 and later Updates Groups Security
It’s been a while since we’ve looked at deploying Microsoft and Windows Updates using Microsoft Intune, this time we look at different ways to phase our deployments across a device estate.
Custom Backgrounds for macOS New and Classic Microsoft Teams Apps
· loading
Microsoft Intune macOS Apple Microsoft Teams Apps Shell Script
With the availability of the new Microsoft Teams client for macOS, we should build upon an existing script to deploy backgrounds, and update it to support not just the new version but the classic version as well.