View Online

Community Content

The first post this week comes from Rahul Jindal and looks at how you can use Settings Catalog to stop users from running certain applications

https://rahuljindalmyit.blogspot.com/2023/08/prevent-users-from-running-certain.html

Niklas Tinner has released part two of the series looking at RBAC with Intune and some day-to-day uses

https://oceanleaf.ch/intune-rbac-operations/

The 2307 release allows users to reset their own Windows 365 cloud PCs. To find out how to enable this functionality, read this post from Jitesh Kumar

https://www.anoopcnair.com/enable-cloud-pc-reset-option-windows-365-users/

A second post from Jitesh showing how to block users from installing apps from the store or using Winget with the new policy (covered below in the Microsoft content)

https://www.anoopcnair.com/turn-off-store-application-setting-intune/

You can now use remote help during OOBE, a very welcome addition! Find out how to enable and use it here from Vidya M A

https://www.anoopcnair.com/intune-remote-help-available-for-oobe-screen/

Somesh Pathak has gone down the Android rabbit hole investigating random soft reboots in Project Mainline. Well worth a read

https://www.intuneirl.com/why-your-android-device-reboots/

Microsoft Entra Dynamic groups now include a new field for Employee Hire Date. Find out how this could be useful for you in this post from Jonas Bøgvad

https://blog.skymadesimple.io/entra-id-dynamic-groups-employeehiredate-update/

This post from Niels Kok is one I will be using myself, a quick script to remove the OneDrive Personal icon and leave just the company one.

https://www.nielskok.tech/intune/remove-onedrive-personal-icon/

Next, Lewis Barry looks at everything around Company portal, how to deploy it, how to use it and how to package apps for it.

https://conditionalaccess.uk/self-service-freedom-company-portal/

Windows 365 boot is a useful addition, especially when combined with a frontline license. This post from Michael Meier runs through the deployment and use of it

https://mikemdm.de/2023/08/13/windows-365-boot-directly-to-your-cloudpc/

Jannik Reinhard has released an update to the excellent group assignment script which will quickly tell you everything you have assigned to a particular Group

https://jannikreinhard.com/2023/08/13/new-version-of-the-intune-group-assignment-script/

This post from René Laas shows how to send an email to a manager with a list of devices due for retirement within Intune

https://endpointcave.com/automate-your-retire-actions-and-report/

Next, Prajwal Desai runs through enabling location redirection within Windows 365 so the location matches where you are, not where the virtual machine is

https://www.prajwaldesai.com/turn-on-location-redirection-for-windows-365-cloud-pc/

This thorough post from Jeffrey Appel runs through useful troubleshooting for MDE Live response

https://jeffreyappel.nl/how-to-troubleshoot-live-response-in-defender-for-endpoint/

Florian Salzmann has released the next part of the getting started with Intune series, this time looking at naming conventions

https://scloud.work/en/intune-naming-convention/

Next, Rudy Ooms looks at what happens when the Autopilot profile downloads to your machine

https://call4cloud.nl/2023/08/autopilot-profile-download-more-resilient/

This post from Niklas Rast looks at WDAC and how you can use it to restrict software installs

https://niklasrast.com/2023/08/17/windows-defender-application-control-intune-management-extension-as-trusted-installer-to-prevent-unwanted-software-installations-within-the-user-context-of-your-windows-endpoints/

Ola Ström looks at and tests Windows 365 switch in this post

https://www.olastrom.com/2023/windows-365-switch-the-best-feature-so-far

This post from Gannon Novak looks at what happens when you hybrid join a device

https://smbtothecloud.com/hybrid-device-join-what-happens-behind-the-scenes/

Video Content

Now onto the video content starting with the latest Tackling Tech with Harjit Dhaliwal and Jay Simmons looking at Windows LAPS

https://www.youtube.com/watch?v=bcs1gPB4dOQ

This video from Anoop Nair looks at the new Microsoft PC Manager v3 in beta

https://www.youtube.com/watch?v=sEpTvxztyck

The first step to using Intune is to configure enrollment. This latest video from Dean Ellerby runs through setting your environment up

https://www.youtube.com/watch?v=6DWBsO5eUuI

A second video from Dean this week showing how to create a Windows ISO with the Autopilot JSON included

https://www.youtube.com/watch?v=fRhZ-VaaTRk

Following on from the excellent blog posts, Niall Brady and Paul Winstanley have released a video demonstrating Windows 365 boot

https://www.youtube.com/watch?v=d4F3KzqIRCc

This video from Dean Cefola looks at the new Windows 365 Switch functionality

https://www.youtube.com/watch?v=yQxC5rEBut4

Niklas Tinner and Shehan Perera discuss Microsoft Defender Smart Screen

https://www.youtube.com/watch?v=YI_x_dtrSFQ

This video from John Savill looks at how to use the new Protected Actions functionality in Microsoft Entra

https://www.youtube.com/watch?v=jMe9qaAKfd4

Next, a look at what's new in Intune 2306 and 2307 released with Nickolaj Andersen and Mattias Melkersen Kalvåg

https://www.youtube.com/watch?v=fjrDsEg0HsQ

The latest Intune.Training video is here featuring Adam Gross and Steven Hosking. This one looks at Entra Global Secure Access

https://www.youtube.com/watch?v=ZYOHJWJWpRU

Microsoft Content

Looking at the news from Microsoft, starting with a new (or possibly renamed) policy setting to block your users from installing apps from Microsoft store or Winget without blocking the update of existing applications. This should work better than the "Require Private Store" option recommended previously

https://learn.microsoft.com/en-us/mem/intune/apps/store-apps-microsoft#common-store-policy-settings-and-their-impact-on-microsoft-store-apps

That's it for this week, have a great weekend!