View Online

Community Content

We start with some troubleshooting steps from Rudy Ooms investigating a bug which could stop apps from installing during Autopilot Device Prep

https://call4cloud.nl/2024/06/the-battle-of-the-local-administrator-and-autopilot-device-preparation

Rudy also has a debugging guide for Autopilot device prep

https://call4cloud.nl/2024/06/debugging-the-autopilot-device-preparation-profile

Next, Curtis Cannon runs through importing ADMX templates into Intune and how to spot if they have pre-requisite templates

https://traversecloud.co.uk/import-admx-templates-into-microsoft-intune

The PRT is a critical, but not well known part of modern authentication. Learn what it does here from Imran Awan

https://modernizingmobility.blogspot.com/2024/06/understanding-importance-of-primary.html

Michael Niehaus has been doing more experimenting with Autopilot Device Prep and we have four posts on it this week, starting with how to run an SCCM task sequence using the new ESP-less experience

https://oofhours.com/2024/06/09/running-an-sccm-task-sequence-during-apv2

Michael’s second post covers the many questions and comments from across the internet about the new functionality, well worth checking out

https://oofhours.com/2024/06/07/windows-autopilot-v2-random-chatter

And some further thoughts

https://oofhours.com/2024/06/11/autopilot-v2-my-second-thoughts

You may have noticed that the ability to set a device name during Autopilot has also disappeared. Here is a fix

https://oofhours.com/2024/06/11/setting-the-computer-name-with-apv2

Gannon Novak also looks at setting the device name using APv2 with a script here

https://smbtothecloud.com/apv2-using-a-device-name-template-forcing-a-reboot-after-the-esp-autopilot-device-preparation

If you want to keep your compliance policies updated with the minimum Windows version, but without the manual tasks, check out this comprehensive post from Maxime Guillemin

https://cloudflow.be/automated-windows-update-compliance-policy-in-intune

Maxime also runs through Cloud PKI setup in this part 1 of a new series

https://cloudflow.be/certificate-based-authentication-with-microsoft-cloud-pki-part-1

This post from Maxime looks at using Graph to export reports from Intune

https://cloudflow.be/microsoft-graph-api-reports-for-intune

This post from Steve Weiner is the first part of a series covering setting up the new Autopilot Device preparation functionality

https://www.getrubix.com/blog/autopilot-device-preparation-part1

And part 2 covering the user experience

https://www.getrubix.com/blog/how-to-configure-autopilot-device-preparation-part-2-user-experience

And part three looking at how the new flow works compared to V1

https://www.getrubix.com/blog/how-to-configure-autopilot-device-preparation-part-3-the-new-flow

Michael Meier has released part 2 of the time-based Entra group membership. This one layers a PowerApp on top of the code from part 1 to create a UI for admins to use

https://mikemdm.de/2024/06/09/time-based-group-membership-for-entra-devices-part-2

If you are managing devices across countries, this post from Sandy Zeng covers how to handle language and region settings for your Windows 11 devices

https://msendpointmgr.com/2024/06/09/managing-windows-11-languages-and-region-settings

Did you know Remote Help also has a web app? If not, learn about it here with Peter van der Woude

https://www.petervanderwoude.nl/post/getting-started-with-the-remote-help-web-app

Learn how to create an App attach package for AVD using PowerShell in this post from Johan Vanneuville

https://johanvanneuville.com/application/create-an-app-attach-package-using-powershell

Take your device experience to the next level with Managed Home Screen as covered here by Thomas Marcussen

https://blog.thomasmarcussen.com/enhancing-the-intune-experience-with-managed-home-screen

Next, Manish Bangia runs through configuring Autopilot device prep

https://www.manishbangia.com/windows-autopilot-device-preparation-aka-autopilot-v2-configuration

Quick off the mark, Somesh Pathak has already started testing iOS 18 and macOS 15 with Intune, find out more here

https://www.intuneirl.com/early-bird-gets-the-worm-testing-ios-18-macos-15-beta-devices-with-intune

If you aren’t using Update for Business reports in your tenant, follow this guide from Alex Durrant to get you started

https://letsconfigmgr.com/configuring-windows-update-for-business-reports

Next, Rahul Jindal shows how to block Chrome extensions on macOS using Intune

https://rahuljindalmyit.blogspot.com/2024/06/blocking-chrome-extensions-with-custom.html

Learn how to check your estate readiness for Windows 11 using inbuilt Intune reports on this post from Jonathan Lefebvre

https://www.systemcenterdudes.com/how-to-evaluate-windows-11-readiness-with-intune

If you are using Quick Assist in your environment, this remediation from Dominiek Verham will show how to deploy the icon to the users desktop

https://dominiekverham.com/using-remediations-to-deploy-a-quick-assist-shortcut-on-the-desktop

If you need to allow AVD SSO through your CA policies, why not automate it with this guide from Sander Rozemuller

https://rozemuller.com/add-windows-cloud-login-application-to-ca-automated

Use MDE and Intune to block USB devices and report on them as covered here by Tim Beer

https://timbeer.com/usb-security-using-microsoft-defender-for-endpoint

Video Content

Now onto the video content, starting with the second part of the cloud PKI series from Shady Khorshed running through why you need it and how to configure it

https://www.youtube.com/watch?v=LffxOBT9xPM

Steve Weiner has part 4 of the autopilot device prep videos, this time comparing the experience between Win 11 Pro and Win11 Enterprise and how to monitor your deployments

https://www.youtube.com/watch?v=ScP0WMoyr7Q

Steve also has a look at Robopack for app management

https://www.youtube.com/watch?v=3BJ5aFAq3-M

If you want to test APv2 on Hyper-V, this video from Steve will quickly get you up and running

https://www.youtube.com/watch?v=MK_XCRSRAEo

Learn what’s new in Intune 2405 release with Nickolaj Andersen, Mattias Melkersen Kalvåg and Peter van der Woude

https://www.youtube.com/watch?v=4DXrE53wccs

Chander Mani Pandey runs through Autopilot device prep in this video

https://www.youtube.com/watch?v=CXJ9-R5yyOw

The latest intune.training video is here and covers disk encryption for both Windows and macOS with Adam Gross and Steven Hosking

https://www.youtube.com/watch?v=huApux9aDoo

Next, Sujin Nelladath runs through creating mobile apps using Graph

https://www.youtube.com/watch?v=HNg48776_PI

Microsoft Content

Onto the Microsoft content with a look at all of the Intune resources available to you from Microsoft in this post from Lior Bela

https://techcommunity.microsoft.com/t5/microsoft-intune-blog/the-guide-to-microsoft-intune-resources/ba-p/4161806

There are very few blockers from going fully cloud native. Read about some of the misconceptions in this post from Harjit Dhaliwal

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/myths-and-misconceptions-windows-11-and-cloud-native/ba-p/4162011

Find out what’s new in Autopatch with Diana Hoffman

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-new-in-windows-autopatch-june-2024/ba-p/4167539

That’s it from this week, have a great weekend!