Intune
Endpoint drift, enrollment, and management.
7 notes
-
Taking Back Control: Windows LAPS and Local Admin Management via Intune
A simple, opinionated guide to deploying Windows LAPS to cloud-native devices and reclaiming control of the local Administrators group using Intune.
-
Multi Admin Approval in Intune: Because One Admin Shouldn't Rule Them All
A practical guide to setting up Multi Admin Approval in Microsoft Intune — what it protects, how to configure it, how to harden it with Restricted Administrative Units, and why your future self will thank you for not letting a single compromised account nuke your tenant.
-
No VPN, No Internet: Building a Windows Firewall Kill Switch for FortiClient with Intune
How to prevent Windows 11 devices from accessing the internet when not connected to corporate VPN using Windows Firewall and Intune — and all the things that go wrong along the way.
-
Securing SCEP/NDES for Intune with gMSA
How to replace the NDES service account with a group managed service account (gMSA) to enhance security of your SCEP/NDES infrastructure for Intune.
-
Migrate BitLocker to Microsoft Entra ID
How to migrate existing BitLocker recovery keys to Microsoft Entra ID using an Intune PowerShell script, without re-encrypting drives.
-
Keeping Always On VPN - always on?
Why Microsoft Always On VPN stops auto-connecting and how to fix it with Intune, including the AutoTriggerDisabledProfileList registry fix.
-
Managing Microsoft Teams Firewall requirements with Intune
Deploy Windows Firewall rules for Microsoft Teams via Intune PowerShell scripts to silence the annoying Windows Security Alert for screen sharing.