Running IntuneCD Locally Authentication Prerequisites Platform Configuration Windows WSL2 and Linux macOS Wrap Up I’ve previously written about using IntuneCD in a GitHub or Azure DevOps pipeline to backup and document an Intune tenant in these articles: Automate Microsoft Intune As-Built Documentation on GitHub Automate Microsoft Intune As-Built Documentation on Azure DevOps The approach uses Linux runners hosted by GitHub or Microsoft, thus the platform configuration is already taken care of (Python, Node.js, and dependencies etc.). I do often find myself using IntuneCD locally to ..read more

Microsoft recently released the preview of Endpoint Privilege Management in Microsoft Intune which is a powerful capability for removing administrative privileges from end users on managed Windows desktops. In its current preview form, it is worth considering carefully how it should be implemented. Here’s why. The initial implementation of Endpoint Privilege Management is well thought out with the ability to require a user to add a business justification for an elevation request and monitor those elevations from within Intune. EPM has the added benefit that the client-side components are built ..read more

The Problem Anatomy of a Microsoft 365 Apps Win32 Package The Solution Requirements PowerShell modules Configuration Files Using the Packager Clone the repository Usage via Administrator Sign-in Usage via App Registration Automating the Packager Azure AD App Registration Git and GitHub Actions New Package Workflow Update Binaries Workflow Workflow Secrets Wrap Up Deploying the Microsoft 365 Apps via Microsoft Intune is as simple as using using the built in tools to create a package without having to manually package any binaries. Creating a Microsoft 365 Apps package in the Microso ..read more

Viewer Mode What about Access FSLogix App Masking for Access Wrap Up Viewer mode for the Microsoft 365 Apps for enterprise enables support for users without Microsoft 365 or Office 365 licenses to use those applications in a read-only mode. This feature is useful for frontline workers, but viewer mode is also an opportunity to optimise how you deploy and update the Microsoft 365 Apps. With currently supported releases of the Microsoft 365 Apps, viewer mode can help you simplify the deployment and management of these applications across physical and virtual desktops. In many organisations ..read more

Supporting Frontline Workers on a Single Image Enable the Microsoft 365 Apps in viewer mode Hide Microsoft Outlook and OneNote Implement Web Application Alternatives Default Mail Handler Wrap Up The Microsoft 365 F1/F3 and Office 365 F3 licenses are aimed at frontline workers. These licenses do not include the desktop versions of the Microsoft 365 Apps, so users with these licenses cannot run those applications. You could create two images - one with the Microsoft 365 Apps to support licensed users and one without to support frontline users; however, the result will be less than optimal u ..read more

Backup your Intune Configurations Generating a Markdown Report Convert the Markdown to PDF Code and Pipeline Hosting Options Intune Backup and Document Pipeline with GitHub Backup, Document, Tag Workflow Release Workflow Configure the Repository Workflow Code Backup, Document, Tag Release Concluding GitHub Repository Template If there’s anything that’s certain in a Microsoft Endpoint Manager project, it’s the rate of change. Such is the rate of change, that Intune receives updates almost every week. If change is constant, what value is there in manually creating an as-built docum ..read more

Azure Virtual Desktop is an Azure service first Build AVD on a Solid Foundation Ensure AVD Service URLs Aren’t Blocked RDP can perform better than HDX Wrapping Up This article has been sitting in my drafts folder for almost 2 years. This article was originally written in January 2020, but still applies to Azure Virtual Desktop today. Other than updating for the new naming, I’m posting it as-is. This year, I’ve spent a number of months head down in Azure Virtual Desktop projects and have come across several common lessons learned from these projects. In this article, I’ll cover 4 things I lea ..read more

The Customer’s Environment System Requirements Azure Architecture Networking Virtual Machine VM Configurations Resource Costs Variable Costs Patch My PC Configuration Automating Deployment of a Patch My PC Publisher VM Summary Patch My PC is a great solution for managing Windows application packages for Microsoft Endpoint Configuration Manager and Microsoft Intune. Cloud native or cloud hybrid organisations, particularly those who are using Microsoft Intune only to manage Windows desktops, will need to consider where to run the Patch My PC Publisher. A virtual machine hosted in Azur ..read more

Running IntuneCD Locally Authentication Prerequisites Platform Configuration Windows WSL2 and Linux macOS Wrap Up I’ve previously written about using IntuneCD in a GitHub or Azure DevOps pipeline to backup and document an Intune tenant in these articles: Automate Microsoft Intune As-Built Documentation on GitHub Automate Microsoft Intune As-Built Documentation on Azure DevOps The approach uses Linux runners hosted by GitHub or Microsoft, thus the platform configuration is already taken care of (Python, Node.js, and dependencies etc.). I do often find myself using IntuneCD locally to ..read more

Microsoft recently released the preview of Endpoint Privilege Management in Microsoft Intune which is a powerful capability for removing administrative privileges from end users on managed Windows desktops. In its current preview form, it is worth considering carefully how it should be implemented. Here’s why. The initial implementation of Endpoint Privilege Management is well thought out with the ability to require a user to add a business justification for an elevation request and monitor those elevations from within Intune. EPM has the added benefit that the client-side components are built ..read more