View Online

Community Content

We start this week with a guide on how to run KQL queries against MDE using Azure Automation from the KQL expert Damien Van Robaeys

https://www.systanddeploy.com/2024/10/running-kql-queries-on-microsoft.html

Next, Peter van der Woude looks at the new protected print mode included in 24H2 and how to configure it with Intune

https://petervanderwoude.nl/post/getting-started-with-windows-protected-print-mode/

Since the announcement of Administration Protection (and Rudy’s previous posts), there has been some confusion around how it compares to EPM. To clear things up, Rudy Ooms has a post looking at the two here

https://call4cloud.nl/windows-11-administrator-protection-vs-epm/

Windows 11 24H2 also included the release of Sudo for Windows, something anyone who has used Linux will be very familiar with. Find out exactly how it works in this deep dive from Jon Towles

https://mobile-jon.com/2024/10/14/deep-dive-into-windows-sudo/

Learn all about the Intune MDM certificate and some handy details about the included OID’s in this post (and script) from Ben Whitmore

https://msendpointmgr.com/2024/10/12/unpacking-the-microsoft-intune-mdm-certificate/

Default internet access on AVD machines will end in just under a year. Follow this guide from Johan Vanneuville to use Terraform to configure Azure Firewall to handle the traffic

https://johanvanneuville.com/avd/configure-avd-traffic-on-azure-firewall-with-ip-groups-and-terraform-part-1/

A lot of 24H2 related content this week! If you’re having issues enrolling new devices into MDE, it could be the SENSE client is missing. Fortunately Mads Johansen has a fix here

https://evil365.com/intune/windows%2011%2024h2/SENSEClient-Missing-Windows11-24H2

Also missing from 24H2, ISE has gone from Windows Sandbox. Upgrade your experience by switching to VS Code instead as covered here by Jóhannes Geir Kristjánsson

https://johannesblog.com/2024/10/15/adding-vs-code-toolbox-to-windows-sandbox/

If you have mixed MDE licensing, you can now specify who gets which as covered here by Rahul Jindal

https://rahuljindalmyit.blogspot.com/2024/10/mixed-mode-defender-subscription.html

For those of you wanting to get started with Windows 365, check out this guide from Jonathan Lefebvre

https://www.systemcenterdudes.com/intune-windows-365-cloud-pc-step-by-step-guide

Once you have your Windows 365 machines configured, learn how to upgrade them to 24H2 with this post from Dominiek Verham

https://dominiekverham.com/updating-windows-365-cloud-pcs-to-windows-11-24h2/

Andy Jones has created an excellent new site with quick links for all things Intune, both official and community links:

https://www.intuneqlinks.net

Find out what happens behind the scenes in Intune, both server and client side in this post from Niklas Tinner

https://www.oceanleaf.ch/inside-intune

For those of you with Lenovo devices, you can now deploy the Intel Processor Power Management package with Intune. Read this post from Philip Jorgensen to find out how

https://blog.lenovocdrt.com/deploying-the-intel-processor-power-management-package

Find out exactly what a Winget manifest includes with this script from Harm Veenstra

https://powershellisfun.com/2024/10/17/query-winget-software-installer-data-with-powershell/

Video Content

Now onto this weeks video content, starting with a look at how to use TAP to onboard users from Steve Weiner

https://www.youtube.com/watch?v=axpSh39Sch4

Steve also covers how to deploy fonts in this video

https://www.youtube.com/watch?v=FvMkLrcqN1I

A busy week from Steve (well, a busy week for anyone else), a third video running through the different options to customize the taskbar

https://www.youtube.com/watch?v=kjGKUWG-PgU

If you’re using SCCM, this video from Manish Bangia runs through how to enable co-management

https://www.youtube.com/watch?v=9gK7ZtolC-o

Next, we have the latest podcast from Shady Khorshed discussing the IntuneMacAdmins Copilot tool from Ugur Koc

https://www.youtube.com/watch?v=CRH647_mviQ

Have a look at the new features in 24H2 from Dave Plummer (a channel well worth subscribing to)

https://www.youtube.com/watch?v=v7nprsWLq0A

Microsoft Content

Onwards to the Microsoft content with a support tip from the Intune Support Team for those of you still insisting on using Hybrid Autopilot…

https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-always-unenroll-from-mdm-when-unjoining-and/ba-p/4270668

Another support tip from the Intune support team, this one covers an issue with Autopilot Device Prep when you are using a managed installer policy

https://techcommunity.microsoft.com/t5/intune-customer-success/known-issue-windows-autopilot-device-preparation-with-win32-apps/ba-p/4273286

That’s it for this week, have a wonderful weekend!