Intune Newsletter – 16th February 2024

View Online

Welcome back, or if this is your first newsletter, welcome! Plenty of exciting content for you to learn about this week so lets get started…

Community Content

We start this week with a guide on using Device query from Peter van der Woude including some useful queries to get you started

https://www.petervanderwoude.nl/post/getting-started-with-device-query/

This post from Abhay Patil uses Power Automate to upload a hardware hash to Intune via simply sending an email to a shared mailbox

https://www.anoopcnair.com/power-automate-to-import-autopilot-devices-hash/

Next, Joost Gelijsteen runs through troubleshooting steps when dealing with Windows updates, including devices which are also GPO managed

https://joostgelijsteen.com/troubleshooting-windows-updates-wufb/

Damien Van Robaeys uses Logic Apps here to send a teams message with the top 20 devices experiencing BSOD

https://www.systanddeploy.com/2024/02/export-top-20-intune-devices-with-bsod.html

Sometimes you need an app or config to only apply to net new devices, but up until now that involved creating Group tags which can become unmanageable. Fortunately Michael Meier has an automation script here which will create an Entra group for devices enrolled after a particular date

https://mikemdm.de/2024/02/11/entra-id-group-for-intune-devices-enrolled-after-a-given-date/

Next, Davide Salsi looks at what Security Copilot can do in Intune

https://emm-blog.com/2024/02/10/security-copilot-ai-in-endpoint-management/

This script from Gowdhaman Karthikeyan gives an easy to read report of where your assignment filters are being used

https://blogs.gowdhaman.in/intune-assignment-filters-summary-report/

You can now force Filevault during macOS setup in Intune. Find out how here with Somesh Pathak

https://www.intuneirl.com/security-without-sweat-enabling-filevault-during-macos-setup/

This post from Torbjorn (Mr T-Bone) Granheden looks at cleaning up inactive Intune devices and also a script to handle Entra devices

https://www.tbone.se/2024/02/09/cleaning-up-inactive-intune-and-entra-id-devices/

If you are managing shared devices, this post and requirements script from Jörgen Nilsson will help with app deployment

If you want to group your devices by user department, check out this guide and script from Remy Kuster

https://www.iamsysadmin.eu/mobile-device-managment/intune/assign-intune-device-category-based-on-users-department-property/

Thomas Marcussen compares Windows 365 and Dev boxes in this post

https://blog.thomasmarcussen.com/windows-365-cloud-pc-and-microsoft-dev-box-a-detailed-comparison/

If you want to deploy custom backgrounds to the new Teams client, follow this guide from Florian Salzmann

https://scloud.work/new-teams-virtual-background-with-intune/

Next, Niklas Rast looks at how you can block external USB access using Intune

https://niklasrast.com/2024/02/14/device-control-with-microsoft-intune-securing-corporate-assets-with-external-device-management/

For those of you managing macOS devices, this post from Nick Benton includes shell scripts for deploying custom Teams backgrounds for both new teams and the older one

https://memv.ennbee.uk/posts/macos-teams-new-backgrounds/

If you are enrolling iOS devices, this post from Gannon Novak will help if you hit a passcode required error

https://smbtothecloud.com/ios-mam-error-device-passcode-required/

Johan Vanneuville covers creating and updating your MSIX AppAttach packages for AVD here

https://johanvanneuville.com/application/how-to-create-and-update-app-attach-packages/

Next, Jon Towles covers how to configure Kerberos cloud trust for on-prem SSO with cloud joined machines

https://mobile-jon.com/2024/02/16/cloud-kerberos-trust-the-windows-hello-for-business-easy-button/

Video Content

Now onto the video content, staring with a look at the improved user experience in the Intune migration tool from Steven Weiner

https://www.youtube.com/watch?v=wxajjA7J1kQ

Steve also does a deep dive into how the new script works here (parts 1 and 2)

https://www.youtube.com/watch?v=5naxLFkBna8

https://www.youtube.com/watch?v=TJSLXLyhUgA

Craig Camacho looks at the new Enterprise App Management functionality in this video

https://www.youtube.com/watch?v=wxYzapC6uUM

Alex de Jong looks at the Windows device enrollment flow in this video

https://www.youtube.com/watch?v=IavBTdNea6U

Alex also looks at ensuring your devices are compliant here

https://www.youtube.com/watch?v=WJ-sFdnsQLI

Learn about the new features for Windows 365 here with Christiaan Brinkhoff, Rinku Stephen, Elina Luthra and Derek Liu

https://www.youtube.com/watch?v=mworACSCQ_w

Microsoft Content

Now for the Microsoft content starting with information about strong certificate mapping from the Intune support team

https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-implementing-strong-mapping-in-microsoft-intune/ba-p/4053376

There is an update to supported Android versions with Intune, find out about them here

https://techcommunity.microsoft.com/t5/intune-customer-success/intune-moving-to-support-android-10-and-later-for-user-based/ba-p/4055307

Learn about the new Windows Autopatch features here with Diana Hoffman

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-new-in-windows-autopatch-february-2024/ba-p/4056151

Learn how to protect your unmanaged Android and iOS devices using MDE with Arnab Mitra

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/protect-unmanaged-or-3rd-party-mdm-managed-ios-android-devices/ba-p/4057691

That’s all for this week, have a great weekend!