It’s a Friday 13th special this week, but fear not, it’s a bumper edition with a new series of Tackling Tech, I’ve even created a whole section especially for them. Whilst I’ve only featured the Intune related content, I would suggest checking out the channel, the other videos are well worth watching as well!

View Online

Community Content

We start this week with the third part of the MAM series from Joery Van den Bosch, this one covers MAM for your Windows devices

https://intunestuff.com/2024/09/11/how-to-setup-mam-part-3/

Joery also looks at using Kerberos SSO for macOS platform SSO

https://intunestuff.com/2024/09/09/kerberos-sso-macos/

Damien Van Robaeys has a complete solution here to create a dashboard for your Lenovo devices listing the warranty status of them

https://www.systanddeploy.com/2024/09/lenovo-devices-warranty-dashboard-with.html

Next, Peter van der Woude runs through the new functionality when connecting Intune with Google Play to use an Entra account instead of requiring to create a google one

https://petervanderwoude.nl/post/connecting-microsoft-intune-with-managed-google-play-the-new-and-easy-way/

If you need certificates on your Android devices, check out this guide from Maxime Guillemin

https://cloudflow.be/android-and-certificate-bases-authentication/

Windows 10 EOL is not far away, this post from Ola Ström looks at why you should make the move to Win11 now

https://www.olastrom.com/2024/windows-11-make-the-move

Michael Niehaus noticed a new UI feature in the latest Windows build for Autopilot Device Prep. Find out more here

https://oofhours.com/2024/09/09/windows-autopilot-v2-associating-devices-with-a-tenant/

It’s always useful to build up a bank of remediations for common issues, especially with the new run on-demand functionality. This script from Jörgen Nilsson is one to add so you can quickly reset Windows Update on a device

https://ccmexec.com/2024/09/remediation-on-demand-script-resetwindowsupdate/

For those wanting to get started with Intune RBAC and scope tags, this post from Jesse Weimer has you covered

https://www.getrubix.com/blog/backtracking-on-rbac

Some of you may be running macOS and need a Windows VM for testing, find out here with Jannik Reinhard

https://jannikreinhard.com/2024/09/08/setup-an-autopilot-lab-on-macos/

This post from Jon Towles looks at the key CA policies all tenants should have at a minimum

https://mobile-jon.com/2024/09/09/the-magnificent-8-conditional-access-policies-of-microsoft-entra/

Some apps and services need users to be added to specific groups (looking at you Docker). Ahmad Aoun has a solution here using Intune and PowerShell

https://tunemdm.com/2024/09/09/add-remove-current-logged-on-user-to-a-local-group-using-win32-app/

You can now use Purview customer keys with Windows 365 as covered here by Jan Mulder

https://wolkenman.wordpress.com/2024/09/09/windows-365-customer-key/

For those running AVD, if you need to remove stale local user profiles, check out this post from Gannon Novak

https://smbtothecloud.com/removing-orphaned-local-user-profiles-in-pooled-avd-environments

Peter Klapwijk has released the second part of the EPM notification series, this one shows how you can use logic apps to approve or deny requests

https://inthecloud247.com/get-notified-of-new-microsoft-epm-elevation-requests-part-2-approve-or-deny-the-request/

Video Content

Now onto this weeks video content, starting with a look at the new Windows App for connecting to all of your cloud PCs from Dean Cefola

https://www.youtube.com/watch?v=HI2dzbGfV4M

We also have two videos from Dean Ellerby starting with a look at how to connect multiple tenants to Apple Business Manager, especially useful for those with a dev tenant.

https://www.youtube.com/watch?v=FYV1F1g2g8M

Dean’s second video runs through installing and configuring Entra ID Connect to get your on-prem devices into Entra

https://www.youtube.com/watch?v=RPj53B7rxYU

This video from Steve Weiner covers one of the hardest parts when automating in Intune, the different Object IDs in Intune and Entra

https://www.youtube.com/watch?v=fJ5_RAL5Nzk

Steve then puts everything together in part 3, linking Entra, Intune and Autopilot IDs

https://www.youtube.com/watch?v=YPnry49_am0

Steve also runs through how to restrict local admins when using Autopilot

https://www.youtube.com/watch?v=5chPxQ4j38c

We also have the latest intune.training video from Steve Hosking and Adam Gross delving into the murky world of conditional access

https://www.youtube.com/watch?v=vUvh16MR7Bk

We have a new Windows in the Cloud episode covering the new GPU enabled Windows 365 machines from Christiaan Brinkhoff, Ron Martinsen and Femi Adebayo

https://www.youtube.com/watch?v=8NdYIUzLj7Q

Learn all about Intune platform and remediation scripts in this video from Vaishnav K

https://www.youtube.com/watch?v=LdfwbxxOJwU

Learn about all of the new features in the 2407 and 2408 releases here with Mattias Melkersen Kalvåg, Nickolaj Andersen and Peter van der Woude

https://www.youtube.com/watch?v=de3aDivKETk

We also have a step by step runthrough for Autopilot Device Preparation from Shehan Perera

https://www.youtube.com/watch?v=5JxF9gneqw4

Tackling Tech

Your special feature this week, a new series of Tackling Tech from Harjit Dhaliwal and many special guests, I’d suggest checking out the full channel here as well.

First, Harjit interviews MVPs about cloud native vs hybrid joining devices

https://www.youtube.com/watch?v=G_rlO2FU5fM

Next, Harjit covers why the extra features of Windows 11 make it worth moving across now

https://www.youtube.com/watch?v=pssJR2J4OWo

Next, find the balancing point for a secure but productive device

https://www.youtube.com/watch?v=rrAfh3JpVg0

For prioritizing security, check out this video

https://www.youtube.com/watch?v=UMV7sP6g45U

To go cloud-first, check out this video from Australia!

https://www.youtube.com/watch?v=zjwSTc9QIgI

Some key management tools are covered in this video

https://www.youtube.com/watch?v=8kWlTU8cY-4

And finally a look at using Autopatch for update management (and why wouldn’t you!)

https://www.youtube.com/watch?v=AwKg3wFMFTc

Microsoft Content

Now onto this weeks Microsoft content, starting with a save the date from Rachelle Blanchard for the next Tech Community Live event, these are always well worth attending.

https://techcommunity.microsoft.com/t5/microsoft-intune-blog/engage-with-intune-at-tech-community-live/ba-p/4243069

Next, read about the day zero support for iOS and iPadOS 18 from the Intune support team

https://techcommunity.microsoft.com/t5/intune-customer-success/day-zero-support-for-ios-ipados-18-and-macos-15/ba-p/4240269

The big news from this week, device hardware inventory is coming to Intune and best of all, it’s included in plan 1. Read more from Lior Bela, Venkata Pampana, Liz Cox and Alemeshet Alemu

https://techcommunity.microsoft.com/t5/microsoft-intune-blog/device-hardware-inventory-is-coming-soon-to-microsoft-intune/ba-p/4238042

The issue with app protection policies missing new apps when selecting “All Apps” has now been resolved

https://techcommunity.microsoft.com/t5/intune-customer-success/resolved-new-apps-not-added-in-app-when-targeting-quot-all-apps/ba-p/4218018

That’s all for this week, have a great weekend!