View Online

Welcome, another Friday, another excellent newsletter for you to enjoy...

Community Content

We start this week with a useful automation for those of you running Lenovo devices from Damien Van Robaeys. This script will export the BIOS status of your devices and report if they need an update

https://www.systanddeploy.com/2024/04/export-bios-status-uptodate-or-not-for.html

We are all used to update rings for our Windows devices, but what about those running macOS? Fortunately Nick Benton has you covered in this post

https://memv.ennbee.uk/posts/macos-updates-phased-deployment

Next, learn all about device filters in Intune with Daniel Keer

https://thedxt.ca/2024/04/intune-device-filters

Jan Mulder looks at Copilot for Intune and what functionality it offers in this first part of a new series

https://wolkenman.wordpress.com/2024/04/09/microsoft-copilot-in-intune-part-i

The Intune Security Baseline has finally been updated to use Settings Catalog (although be careful with non-English Operating Systems). Find out more here from Tim Beer

https://timbeer.com/2024/04/09/intune-baseline-23h2-as-settings-catalog

If you don’t want your mobile devices using Copilot for Edge, Rahul Jindal has a guide here with the policies you need to configure within Intune

https://rahuljindalmyit.blogspot.com/2024/04/manage-copilot-in-edge-microsoft-365.html

Another addition to the new baselines, it now recommends settings based on similar organizations. To find these insights using Graph (and why wouldn’t you!), grab this script from Sander Rozemuller

https://www.rozemuller.com/monitor-security-baseline-insights-recommendations

Niall Brady builds on the excellent script to remove devices from Autopilot in part 1 and extends to deploy as a Win32 app which users can trigger themselves

https://www.niallbrady.com/2024/04/06/pc-buyback-for-windows-autopilot-devices-part-2

Rudy Ooms does some more digging around with Config Refresh, this time enabling it manually

https://call4cloud.nl/2024/04/2024-03-update-config-refresh

Rudy has also found a new option in Device Query which you can read about here

https://call4cloud.nl/2024/04/i-can-only-show-you-the-programs-entity-youre-the-one-that-has-to-device-query-it

Similar to CIS baselines for Windows, for macOS admins, check out mSCP here with Somesh Pathak

https://www.intuneirl.com/secure-contain-protect-your-data-deploy-mscp-with-intune

MAM for Windows is an excellent addition, when it works. If you’re hitting issues with your setup, follow this troubleshooting guide from Peter van der Woude

https://www.petervanderwoude.nl/post/troubleshooting-mam-for-windows

Finding your Intune assignments just became a lot easier with this report from Trevor Jones

https://smsagent.blog/2024/04/08/intune-assignments-report

Next, Thomas Marcussen looks at all of the new features in both Windows 365 Boot and Switch

https://blog.thomasmarcussen.com/windows-365-boot-and-windows-365-switch-latest-features

If for some reason you need to decrypt Bitlocker devices managed by Intune, use this script from Gannon Novak

https://smbtothecloud.com/disable-bitlocker-on-existing-devices-with-intune

If you have an NFC enabled Yubikey to hand, did you know you can use it to sign into your W365 machine? Learn how in this post from Dominiek Verham

https://techlab.blog/signing-into-a-cloud-pc-from-windows-365-boot-using-a-nfc-capable-security-key

Whilst not strictly Intune related, I am sure many of you are being asked about M365 copilot from work colleagues. Fortunately, Mattias Melkersen Kalvåg has a beginners guide here

https://blog.mindcore.dk/2024/04/ai-writing-assistant-a-beginners-guide-into-microsoft-365-copilot

You really want to make sure you are locking down your Windows devices, but there will be admins who require elevated privileges. Jon Towles looks at how to lock down the permissions here

https://mobile-jon.com/2024/04/10/securing-local-administration-with-microsoft-intune

Video Content

Now onto the video content, starting with a look at the incredible DeployIntune.com tool which you should definitely be using with Steven Weiner

https://www.youtube.com/watch?v=5x27XqnPV3A

Steve also runs through how to grab app usage in Intune

https://www.youtube.com/watch?v=VFRgIo5A5Uo

We also have the latest podcast, this one featuring Andy Jones

https://www.youtube.com/watch?v=4NlLQBsKEdY

We also have a look at what’s new in Intune 2401 and 2402 releases with Nickolaj Andersen and Mattias Melkersen Kalvåg

https://www.youtube.com/watch?v=VIgdUoZjT68

Andy Jones has released the second part of a video series running through onboarding users automatically with Power Automate with a full demo

https://www.youtube.com/watch?v=Rvth2-R41GA

We also have the latest Windows in the cloud video with Christiaan Brinkhoff, Mark Florida and Michael Raschko. This episode looks at Windows Autopatch and the newly announced Windows 10 Extended Security Updates and how Windows 365 can help

https://www.youtube.com/watch?v=NBzGmcGth9E

Microsoft Content

And onto the Microsoft content with a full new season of Tackling Tech videos from Harjit Dhaliwal with interviews with many people across Microsoft and the community. Well worth checking out!

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/catch-this-new-season-of-tackling-tech/ba-p/4111103

We also have the latest skilling snack looking at everything around Entra joined devices from Jason Sandys

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/skilling-snack-windows-entra-joined-devices/ba-p/4111391

That’s all for this week, have an amazing weekend!