Welcome to a holiday special newsletter, written back in the cold North East after a few days away in sunny Lanzarote with the family. A lot of content this week, hopefully I’ve caught it all, but please let me know in the comments if I have missed any (add the URL for others to see too)

View Online

Community Content

We start this week with a look at how to deploy a WPA3 Wi-Fi profile to Windows devices using Intune as the built-in options only support WPA2 from Michael Meier

https://mikemdm.de/2024/02/18/deploy-a-wpa3-enterprise-wi-fi-profile-to-windows-endpoints-using-intune/

Remote Help is an excellent tool in the Intune suite, but you may not want your ServiceDesk users to have full Intune admin rights. Fortunately, Nicklas Ahlberg has come to the rescue with this excellent security hardening guide

https://www.rockenroll.tech/2024/02/18/remote-help-security-hardening/

Next, Jorge Suarez has released an excellent selection of pre-configured Device Queries to quickly set you on your way with this new tool from Microsoft

https://www.jorgeasaur.us/untitled/

Damien Van Robaeys has released the third part of the getting started guide for Logic Apps (if you haven’t read the previous two, they are well worth checking out). This part covers security and how to use key vaults to protect your Graph connections

https://www.systanddeploy.com/2024/02/getting-started-with-logic-apps-part-3.html

Next, Peter van der Woude looks at the new automatic account management for LAPS and how to configure it in your environment

https://www.petervanderwoude.nl/post/using-automatic-account-management-mode-of-windows-laps/

Rudy Ooms has been digging around in this new functionality which you can read about here

https://call4cloud.nl/2024/02/windows-laps-under-the-hood-part-2-defuncted/

Learn how to connect to your cloud PC using a Fido2 key with Dominiek Verham

https://techlab.blog/sign-into-a-cloud-pc-using-a-fido2-security-key/

On the subject of Fido2, Simon Skotheimsvik looks at the new Offpas device

https://skotheimsvik.no/fido2-magic-using-the-offpad-with-microsoft-365

Nick Benton looks at better dynamic management of Windows updates here

https://memv.ennbee.uk/posts/flexible-update-deployments/

If you want to add custom branding to your Windows 365 boot sign-in screen, follow this guide from Aresh Sarkari

https://askaresh.com/2024/02/20/customizing-branding-for-windows-365-boot-sign-in-screen/

Niels Kok has released an excellent script here to deploy a scheduled task using Intune

https://www.nielskok.tech/intune/schedule-powershell-script-intune/

We now have two posts from Niklas Tinner, the first looking at Windows 365 tools, tips and tricks.

https://oceanleaf.ch/windows-365-tools-tips-tricks/

The second post contains a logic app to control Windows 365 user requests

https://niklastinner.medium.com/windows-365-cloud-pc-user-request-process-first-party-approach-b211c96b14c8

Salona Sahni has released the third part of the MDE series, this one looking at enrolling devices using Intune

https://www.cubicsolutions.de/microsoft-defender-for-endpoint-series-part-3/

Gannon Novak has released a script to repair FSLogix VHDX files here

https://smbtothecloud.com/repair-all-fslogix-profiles-using-powershell-or-any-vhdx-files/

Ugur Koc covers the different options for deploying apps to your macOS devices here

https://ugurkoc.de/deploy-files-on-macos-devices-with-intune/

If you want to learn about Windows 365 Boot shared mode, this comprehensive post from Niall Brady is well worth reading

https://www.niallbrady.com/2024/02/17/a-quick-look-at-windows-365-boot-shared-mode/

Learn how to query the Lenovo API using PowerShell with Michael Seidl

https://www.techguy.at/query-lenovo-warranty-information-with-powershell/

This post from Jon Jarvis looks at why implementing Intune (and not hybrid Autopilot) is the best approach to take with your end-user devices

https://practical365.com/the-critical-need-for-integrating-devices-with-intune/

Learn how to create a custom Windows compliance policy with Manish Bangia

https://www.manishbangia.com/how-to-create-custom-compliance-policy-in-intune/

John Marcum has released a very useful script here for packaging more complex Win32 apps, developed for Workday, but applicable for others

https://powerstacks.com/conquer-complex-intune-win32-app-installations-with-powershell/

Now for two macOS posts from Somesh Pathak, first looking at the options around local accounts

https://www.intuneirl.com/macos-managed-local-accounts-friend-or-foe-with-a-new-friend-in-town/

The second covers where to find the logs when enrolling devices

https://www.intuneirl.com/from-newbie-to-pro-enrollment-logs-for-apple-devices/

On the subject of troubleshooting, Thomas Marcussen runs through Tenant Attach and how to troubleshoot some common issues

https://blog.thomasmarcussen.com/troubleshooting-tenant-attach-and-device-action-issues/

Oliver Kieselbach runs through the process to configure certificate based Wi-Fi here

https://oliverkieselbach.com/2024/02/21/how-to-configure-certificate-based-wifi-with-intune/

We also have two posts from Lucas Magoni starting with an Intune getting started guide

https://racetocloud.com/microsoft-intune/get-started-with-intune-2024/

Then moving on to device enrollment

https://racetocloud.com/microsoft-intune/enrollment-concepts-2024/

Video Content

Now onto the video content, starting with a look at Device Query from Chander Mani Pandey

https://www.youtube.com/watch?v=HptgoWCcE7E

Now for the latest AVD and Win365 AMA from Christian Montoya, Doug Coombs, Tom Hickling and Donna Ryan, looking at some of the latest announcements

https://www.youtube.com/watch?v=CASsSAvfHE4

We now have four videos from Steven Weiner, starting with the latest podcast, looking at issues with a windows update featuring Jesse Weimer

https://www.youtube.com/watch?v=RhlYaLICv7w

The next post from Steve looks at Enterprise app management in Intune suite

https://www.youtube.com/watch?v=A0s8vadbQTQ

Another Intune suite addition, Steve looks at Device Query

https://www.youtube.com/watch?v=0vWphajPIso

Steve has also released the third part of the deep dive into the migration script

https://www.youtube.com/watch?v=NJoT8fey-XQ

We also have two videos from Jakub Piesik covering things all things Apple and Intune, starting with the initial configuration and token setup

https://www.youtube.com/watch?v=uD810_h2UXQ

The second video covers adding a custom domain and federating accounts.

https://www.youtube.com/watch?v=UpMtQ4117_A

Dean Cefola looks at Twingate as an alternative to a traditional VPN here

https://www.youtube.com/watch?v=uYrEELGIX1g

With many improvements to the macOS management in Intune, Dean Ellerby covers if this is now a complete MDM for your devices

https://www.youtube.com/watch?v=RsR6_49zlc0

That’s it for this week, have a great weekend!