Nathan Sperry

All about Microsoft Intune | Allowing users to request the installation of browser extensions for Microsoft Edge This week is also about Microsoft Edge. More specifically, about managing browser extensions for Microsoft Edge. That has been a subject before, but in that case it was focused on fully managing Mi…

New blog post: Allowing users to request the installation of browser extensions for Microsoft Edge
petervanderwoude.nl/post/allowin...
#MSIntune #Intune #EMS #MDM #Windows11 #MSEdge

Yep not very well known issue until it’s to late! Seen it a few times in a shared device environment, whereby AP user-driven had been used, and the enrolling user leaves the org. One very good reason to use self-deploying. Would be great to be able to change it though.

M365 Companion Apps: A (P)review M365 Companion Apps are coming! What are they, what does this mean as an admin, and what do I think?

There's some companion apps coming to #Windows11 via the M365 Desktop Apps that might catch admins or users off-guard, so I've put some thoughts and information together in a mini-blog.
skiptotheendpoint.co.uk/m365-compani...

Prepare for Change - Upcoming Evergreen Changes Some big changes are coming to Evergreen, so be prepared to update your scripts and pipelines to ensure things don’t break.

If you're an #Evergreen user, you'll need to prepare for some changes: stealthpuppy.com/evergreen-ch...

I'm finally splitting the per-application functions from the Evergreen module, hopefully making it easier to update

Automate Intune Security Baseline Comparisons with PowerShell All about Identity, AVD, Automation, DevOps, Monitoring, Intune and Security

To address Security baseline changes, I created a PowerShell script that automates the comparison of Intune security baselines and generates a detailed HTML report. This blog will explain why I built this script, the problems it solves, and how it can help you.
#intune
rozemuller.com/automated-in...

Automatically inform your users on outdated Windows devices | Peter Klapwijk - In The Cloud 24-7 In this blog post, I’ll describe an example of how we can inform our end users when their device runs an outdated Windows operating system version. Every month Microsoft releases the monthly security ...

Want to inform your users of outdated Windows devices before you update the min allowed version in your compliance policy?

Read this blog post ✍️

#Windows #WindowsUpdate #MsIntune

inthecloud247.com/automaticall...

Congratulations, for some “good” reason just assumed you’d been an MVP for like “forever”

Results - Windows Enterprise Defaults Making Windows images enterprise ready

I've made a bunch of improvements to my Windows Enterprise Defaults solution recently in preparation for a session at #NerdioCon. Check out the results and how it can make Windows desktop images enterprise-ready and improve end-user experience: stealthpuppy.com/image-custom... #AVD #Intune #W365

It is now possible to view application assignments in more detail. See if an application is assigned or not including the assignment type. Also with a lot of filter options.
Check it out at intuneassistant.cloud

#intune #insights #community

GitHub - MG-Cloudflow/Intune-Toolkit at dev The Intune-Toolkit offers a basic & user-friendly interface to connect to Microsoft Graph, manage policy assignments, and handle backup and restore operations - GitHub - MG-Cloudflow/Intune-Too...

Hey Community!

i've been working on #intunetoolkit, which now lets you compare your configuration against awesome community baselines—or even your own custom ones. The enhanced comparison feature is live on the DEV Branch, so give it a try and let me know what you think!

github.com/MG-Cloudflow...

Release windows-v3.5 · SkipToTheEndpoint/OpenIntuneBaseline Windows v3.5 - 2025-02-20 - 24H2 Baseline Edition (Mostly) Added Settings Catalog Win - OIB - SC - Device Security - D - Windows Package Manager - v3.5 Added configuration that will be being adde...

📰 OIB Windows v3.5 - 24H2 Baseline Edition!
A surprise drop of some settings and an updated 24H2 Intune baseline brings some of those additions (and some extra goodies) to the Windows OIB.

Check out the changelog below!
github.com/SkipToTheEnd...

If you fancy listening to
@virtualmanc.bsky.social attempt his very first live stream tonight (UK time) take a look👇what could possibly go wrong!!

www.linkedin.com/posts/neilmc...

Microsoft removes Windows 11 24H2 official support on 8th 9th 10th Gen Intel CPUs Microsoft has finally added the official CPU support list for Windows 11 version 24H2, and the company has strangely removed several Intel processors from it.

Something to be aware of…

www.neowin.net/news/microso...

GitHub - EvotecIT/DesktopManager: DesktopManager is a C# library and PowerShell module that allows to get and set wallpapers to given monitor. DesktopManager is a C# library and PowerShell module that allows to get and set wallpapers to given monitor. - EvotecIT/DesktopManager

I've rewritten DesktopManager in C#, and added Set-DesktopMonitor cmdlet.

github.com/EvotecIT/Des...

- Get-DesktopMonitor
- Set-DesktopMonitor
- Get-DesktopWallpaper
- Set-DesktopWallpaper

I've also published it as a nuget to allow working with C#
#dotnet #powershell #desktop #wallpaper

Interested in low-code automation related to #Msintune #EntraID #W365 #Security #Windows and more?

Maybe this list of Azure Logic Apps blog posts covers something for you!

#LogicAppsAviator

inthecloud247.com/category/log...

Reminder to myself. Intune Firewall Rules do work, hard part is actually knowing what rules to set #PrinterSharing. Oh and remembering the Defender and Windows security baselines having differing FW policies #LocalMerge

Great write up!! Do you happen to know if the ShowTaskBar = false works in the config file for Multi App? If I set it to false the taskbar still shows

Still down this rabbit hole but nearer a workaround (hack) now. Intune remediation, Win32app, scheduled task and some powershell

Probably the most used app in IT!! especially when testing RemoteApps/Published Apps.

“Reaffirming Our Commitment to App-V” was it ever in any doubt 😉

When someone going to admit that when using the word “legacy” you’re actually trying to shame someone into using something “modern”

For those interested, we finally have the Lenovo.Client.Scripting module on the PowerShell Gallery. Now you can easily get it using Install-Module.

Yep, deleting corresponding user SID registry keys under the PolicyManager key resolves this issue. Not sure why this isn’t a more widespread issue if deleting cached user profiles over x days policy - maybe just me

Delete cached user profile for a Intune managed device, logon, config profiles (user settings) do not apply, or more specifically the device (PolicyManager registry) thinks the settings have already been applied as it does not see it as a new user. Seen this before but time to look in more detail

Improving Onboarding Experience: Automatically Launch the Company Portal What if I told you we could automatically launch the Company Portal after the first login? Imagine skipping the User Status Page entirely and letting the

Microsoft recently announced an automatic startup feature for the new Company Portal UI, a potential game changer for enhancing the user onboarding experience. Want to learn more? Check it all out in our latest blog 👉 #Intune #MSIntune #PowerShell #PatchMyPC patchmypc.com/automaticall...

GitHub - The-Virtual-Desktop-Team/Virtual-Desktop-Optimization-Tool: The script and configuration files in this repository provide an easy method to customize and apply performance related settings to... The script and configuration files in this repository provide an easy method to customize and apply performance related settings to virtual desktop environments. - The-Virtual-Desktop-Team/Virtual-...

I was thinking about the #AVD folks running Windows 11, why don’t Microsoft have an optimised image in the Market Place - use at own risk of course - as it saves running countless scripts to optimise the image, which is a thing in VDI land. Even Microsoft have a bunch of scripts

As I suspected. I’ve been using Packer with Azure DevOps for a while now to create the images. So I see little point into changing that process for the time being.

How you finding this when compared to native packer?

Then we get the marketing department that likes to update the screen saver every month with “corporate” messages - if you have time to sit and watch the screen saver you aren’t that busy then, and if you are watching it maybe time to rethink what you do in your spare time.

Petya: easily disabling access to psexec So it seems there is yet another piece of ransomware in the wild which is more sophisticated than Wannacry as it uses multiple attack vectors. I have read that one of these is once a machine is inf…

An older, but has its uses by @guyrleech.bsky.social #poormansapplocker guyrleech.wordpress.com/2017/06/28/p...