DOWST.DEV

of Intune Devices and ActiveDirectory Computer Accounts with PowerShell.

myself), are managing those iOS devices as private BYOD devices enrolled through the Company Portal. As of such, keeping the devices up to date is the end-user's responsibility and something that's often forgotten and neglected. So what if we could send those devices and users a kind reminder automatically, both as a custom notification directly on the device, but also as an e-mail? Microsoft Intune Powershell SDK to the rescue!

maybe my method would just be redundant. After some slight convincing I figured my method does have its merits. One of them being that it uses the secure application model, and thus its easy to apply to all partner tenants for a CSP, the other benefit is that this could run headless as a completely automated solution.

because it becomes fairly simple to give users a nice OOBE. It also makes setup for devices a lot less of a hassle, the only issue that was spoken about during the webinar is that there is still a lot of manual clicking. This is why I took it upon myself to create some automation scripts for AutoPilot.

PowerShell module instead of MSGraphFunctions

already. At time of writing, the new security baseline for Windows 11 23H2 in Intune configure this as well, restricting local logons to the built-in groups: Users and Administrators. This solution does something else. This solution grabs the currently logged on user and configures the 'Allow logon locally' policy to ONLY allow this very user as well as Administrators to be able to log on locally.

screen wallpaper without having Enterprise or Education by using a PowerShell script and Intune. Now learn how to configure the Windows accent color to also match your corporate branding.

version 7.) However, you want to configure the devices' security and log settings. In this blog post, I will show you how to do that using Microsoft Intune or Group Policy.

which URL shortcut appear on user's mobile device either without user consent or as an optional application. The way to create it is fairly simple, you can look at Microsoft's documentation. Recently I had a need to ...

within a few minutes. Before we can configure the tenant with Powershell, we need to make sure we have configured some prereqs.

virtual machines, which are ideal as I can simply dispose of them after. But you also need to cleanup the device records that were created in Azure Active Directory, Intune, the Autopilot registration service, Microsoft Endpoint Manager (if you're using it) and Active Directory in the case of Hybrid-joined devices.

I also see that a lot of MSPs are still struggling with deploying a default autopilot configuration and are kind of avoiding it with the worries that you make a total mess of things.

document which mobile devices exist in a O365 tenant and put them into IT-Glue as configurations. I figured I'd help him real quick and blog about it.

it to Intune and assigns it. But first things first, credits to Nickolaj Andersen and his module who made it all possible.

configurations, Compliance Policies, Exchange Connector, and may more areas. Check out his blog and Github for the complete list.

(Group Policy Objects). Others are in the preparatory stages. Therefore, I would like to provide some assistance for identifying orphaned Group Policy Objects. These can be relatively easily found and, if necessary, removed using PowerShell.

PowerShell script?

repeatedly.

utilizing for the Intune module, and wanted to share the PowerShell source code for folks who want to adopt the functions into their environment without the GUI application.

and time-consuming. Thankfully, I bring you good news! There is a way to deploy a Win32 app and have it always install the latest version of the app on the computer.

using provisioning technologies like Autopilot, sometimes small things like the computer naming conventions can be overlooked. Autopilot has methods to use to apply computer naming, but what happens if you were to deploy several hundred or thousands of devices and need to change their computers names?

MSIntune PowerShell Autopilot

dove into the technical workings of deploying Windows 10 without any deployment infrastructure. He showed us how Autopilot can be easily configured in OSDCloud, or using AutopilotOOBE for Azure Join. With the OSD Module, WinPE can be customized with PowerShell Gallery support, and full Dell / HP / Lenovo / Surface OS Deployment over the internet ... aka OSDCloud.

again? I blame Gary Block

services." (CVE-2013-1609, CVE-2014-0759, CVE-2014-5455) These might be reported for things like Dell services, and you can fix them manually by editing the Registry on the affected device. But... There is an easier way 🙂 This blog post will show you how to create a Proactive Remediation in Intune for it.

including SCCM, using Powershell & VS Code tasks!

PowerShell and the Intune GraphAPI

of a tenant and also export all settings in JSON format that can also be used for importing settings again in the same tenant or even another. This can be very useful in a scenario where there is a DEV-tenant and then a production tenant to make sure the settings are the same in both.

show you how the additional requirement rules work and how you can use PowerShell for those.

is installed on a system. In the blog post, I will show you how they work and why they are more flexible than file and registry checks. What are detection scripts in Intune?

tool, managing packages with PowerShell, and much more. Create an MSIX package for any Windows app – old or new.

Get-AutopilotDiagnosticsCommunity (and the older Get-AutopilotDiagnostics script too) had events in the wrong order.

on PSCloudScript

is very import that automate what you can. When it comes to application management, there are many ways to do it. Some are more complex than others.

PowerShell SDK (v2), as well as adding paging support to the original two functions. Microsoft recently released a preview capability in Intune to run Remediations (formerly Proactive remediations - stop changing the name of things, Microsoft, really!!) on demand, which is ... Continue reading PowerShell Functions to Invoke an Intune Remediation Script on Demand and View Remediation States ?

password. This password is crucial if other unlocking methods fail and Windows prompts you with the BitLocker recovery console during startup.

machines with Attack Surface Reduction enabled for Macros. (Work-around "Setdefender ASR rule 92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b to audit only unit issue is resolved.") This blog post describes how you can recreate the missing shortcuts and deploy this using Intune or run it manually on the affected system(s).

in the directory, and I'm not that fond of clicking my mouse. So I needed a quicker method to deal with the devices. And as you've probably figured out already, that means PowerShell.

non-compliant Intune devices. The report should give insight into what device has what issue with which setting; the person asking the question was already working on a Microsoft Graph script but couldn't find a suitable way. In this blog post, I will show how to create this report. There are other scripts out there, but I always like a challenge (And Microsoft Graph can be quite a challenge sometimes 😉 )

this to be built-in within Microsoft Intune but we are not there yet. Hopefully, this will be an option in the future. We would like to schedule app installs and scripts via Microsoft Intune directly.

to the Company Portal app to Android and iOS devices. If you?re like Timmy (and me) and don?t want to use the Intune Portal more than absoloutly necessary, there is also the option to send notifications using the Intune PowerShell SDK.

series on doing so with Intune.

to your end users during scripted installs. A must read for those using Intune or Chocolatey.

your Intune packaging pipeline

week, however, the focus is more on the process that is in place to make sure that everything around the Intune Management Extension (IME) keeps functioning. The IME contains many important components for installing Win32 apps, for running PowerShell scripts, for running inventories, and more. That makes it important that the IME is running successfully. To make sure that the IME is running successfully, the Intune Management Extension Health Evaluation was introduced. That evaluation is focused on performing checks on the service of the IME. This post will have a closer look at the IME client health check and the actions that it performs.

a jiffy using PowerShell and Configuration Manager I received a few questions whether the PowerShell script can be used with Microsoft Intune instead of Microsoft Configuration Manager. And sure! This post will explain one of many approaches available with Intune.

more in this step-by-step tutorial.

tenants, but I've transformed this into a module to allow a easy synchronization between your RMM system and M365. There's some prework that'll need to be performed for each supported RMM system. Check out the Github page for the latest and greatest information as the blog can be outdated.

them with PowerShell.

an app will install on a device or not. These are

Windows Sandbox. You can look at this as a throwaway Windows VM, you start and use it, and afterward, there's no trace of it anymore, making it ideal for testing! In this blog post, I will show you how to test PowerShell scripts and Intune packages in Windows Sandbox.

- it's pretty boring overall, showing information that isn't really useful (e.g. what does "Preparing for mobile device management" really mean)

Windows Autopilot - sometimes these were simple configuration issues, other times they were self-inflicted pains (e.g. deleting Azure AD device objects associated with a registered Windows Autopilot device). But as we learn more about the types of challenges encountered, we get better at detecting those issues (and eventually we'll try to prevent them from happening). To help with the detection process, I've published a new script called AutopilotHealthCheck.ps1 to the PowerShell Gallery. You can install it using PowerShell quite easily, along with its pre-requisite modules.