Nick Benton

Generally I take the exception settings out a broader policy and into a new one, then assign to 'All' excluding a group of users or devices. If required I set up a corresponding policy with the reverse or different setting, and assign to a group of users or devices.

I struggle getting onboard with all "Intune" things being under Endpoint Security, as it's not just for Intune managed devices; but I agree that there should be consistent wording and tooltips for settings across all areas of Intune.

BitLocker Recovery Key Rotation Requirements in Intune Configuring BitLocker encryption settings to allow for recovery key rotation initiated from Intune console.

Do we all know the settings in #Intune to allow for #BitLocker key rotation initiated from the console? Ever encountered a key rotation error?

Time to look at the required settings across all BitLocker policy types to ensure error free key rotations.

www.oddsandendpoints.co.uk/posts/bitloc...

Nope, KSP is free to use 😍

Lower-Touch Defender for Endpoint Onboarding for Android Devices Using Intune and OEMConfig for Samsung Knox Android Enterprise devices to improve the onboarding of devices to Defender for Endpoint.

Now that low-touch onboarding for #defender for #endpoint is generally available for #android devices in #msintune, can we improve the onboarding process even further?

Yes we can.

memv.ennbee.uk/posts/androi...

#security #microsoft #intune

Risk Based Windows 11 Feature Update Deployment - Improvements Deploying Windows 11 24H2 feature updates using Microsoft Intune with Entra ID Dynamic User Groups and Feature Update Readiness reports to tag users based on risk.

Time is ticking for your #Windows 10 devices...you haven't got long to get them updated to #Windows11.

Here's a way to improve that Feature Update deployment approach using #MSIntune built in tooling.

memv.ennbee.uk/posts/window...

Forcing Windows 11 Feature Update Readiness Assessments Using Remediation PowerShell scripts in Intune to force compatibility checks for Windows 11 24H2 feature updates.

Now that the #Windows11 24H2 Feature #Update Readiness report is available in #Intune, how about we gently encourage our #Windows devices to send #Microsoft their compatibility data, so we can see just how easy it is to move to Windows 11.

memv.ennbee.uk/posts/window...