In this post I will show you how to create the dynamic group using regex in Microsoft Entra ID. Dynamic group feature supports regex (also known as Regular Expression) which allows the usage of match pattern in a text. Using Regex you can create various kind of combinations to be used for the purpose of ..read more

In this post I will be discussing on device configuration workload and its impact to target the policies via Intune, Group Policy and SCCM policies. Device configuration workload is responsible for applying the MDM policies via Intune for Microsoft Entra hybrid joined devices when SCCM client is installed ..read more

In this post I will show you how to configure the FileVault disk encryption for macOS using Intune. Once enabled, the macOS disk is encrypted which protects the data in case the device is lost or stolen. The recovery key information is stored in Intune portal if retrieval is required in case device goes in ..read more

In this post I will show you how to configure BitLocker on Windows devices using Intune. Windows devices could be either Windows 10 or Windows 11. If the devices are enrolled to Intune, we can target the BitLocker policies to the devices in certain ways. The recovery key of the device is saved which can be utilized when required by the user ..read more

In this post I will show you how to create custom compliance policy. Using this feature, we can get the compliance status of a device related to specific configuration. This configuration could be looking for minimum disk space, BitLocker encryption status, TPM status, specific application version, specific Make or Model of the device. There is ..read more

Endpoint Privilege Management can be used to elevate the standard users right to access the application which requires administrative rights ..read more

The post guides on deploying a remediation script using Intune to fix common issues in an environment such as restarting services or adjusting registry values. A remediation script comprises a detection and a remediation script. The detection script checks if a setting exists, and if it doesn't, the remediation script runs to fix the issue. Using remediation scripts can increase device compliance, reduce help desk calls and can be run on-demand or scheduled ..read more

The Temporary Access Pass (TAP) can be used with Windows Autopilot, allowing users to bypass strong authentication factor devices, such as FIDO2 or Microsoft Authenticator App, temporarily. TAP is particularly useful for onboarding new users and those who have forgotten or lost their strong authentication factors. TAPs can be set for specific time periods, can be one-time or multi-use, and require configuring via Microsoft Entra's admin center. After setup, users can initiate the Windows Autopilot process with a TAP ..read more

In this post I will discuss upon types of Windows Update for business policy. What are the difference between various policies such as update ring, feature update, quality update and driver update. Even though we can deploy all kinds of updates via Update ring but then why we require additional policies. Windows Update for Business ..read more

In this post I will show you how to deploy driver updates using Intune. Driver updates (including firmware updates) are the new feature which has been introduced in June 2023. This feature allows you to deploy these updates via Intune. When we login to the Microsoft Intune admin center and navigate to Devices > Windows ..read more