Category Archives: Intune

Microsoft Intune, incorporating Microsoft Intune standalone (cloud) and Microsoft Intune connected to Configuration Manager (hybrid)

Automating Windows 365 part 1 – Introducing Graph and setting up Visual Studio code

Introduction This is Part 1 of a new series of guides which will cover managing Windows 365 Cloud PC’s using PowerShell and Microsoft Graph. This mini series should help you get started with automating and managing your Cloud PC’s using … Continue reading

Posted in automating, Graph, Windows 365 | Leave a comment

Deploying KB5030310 to devices as a Win32 app for Copilot

Introduction In a previous blog post I discussed how you can disable (or enable) Microsoft’s new flagship service called Copilot. Copilot is a very hot topic today as it gives the power of AI to all users of Windows. As … Continue reading

Posted in Copilot, Intune, KB5030310 | Leave a comment

Using remediation scripts to automate a setting for Copilot

Introduction In a previous blog post I discussed how you can disable (or enable) Microsoft’s new flagship service called Copilot. Copilot is a very hot topic today as it gives the power of AI to all users of Windows. As … Continue reading

Posted in 22H2, Copilot, Remediation scripts, Windows 11 | Leave a comment

How can I disable Copilot ?

This blog is broken down into the following sections Introduction TLDR Available SKUS & Cost Copilot Availability Temporary enterprise feature control Creating policy in Intune Using Copilot Update Recommended reading Introduction Microsoft held an event last week where they talked … Continue reading

Posted in 22H2, Copilot, Intune, Windows 11 | 1 Comment

Troubleshooting SCEP: Certificate enroll failed. Result: (Gateway timeout (504).).

Introduction We had an issue where Windows Autopilot enrollments were hanging (and later failing) in the Account Setup phase.This problem occurred when the device should be applying a certificate targeted to the user via SCEP/NDES, but it was failing. The … Continue reading

Posted in Intune, SCEP | 1 Comment

Automating group tags for Windows Autopilot registered devices

Introduction I’ve recently blogged about Provisioning Windows Autopilot devices to get the encrypted with Bitlocker at the factory to speed up compliance. You can review those blog posts below: Encrypting devices during Windows Autopilot provisioning (WhiteGlove) – Part 1 Encrypting … Continue reading

Posted in Graph, group tag, Intune, Windows AutoPilot | 1 Comment

Encrypting devices during Windows Autopilot provisioning (WhiteGlove) – Part 3

Introduction Note: This method is not officially supported by Microsoft. That said, this speeds up compliance and more importantly increases security as the device is already encrypted (part 1) before the user logs on (part 2). BitLocker recovery key changes … Continue reading

Posted in AzureAD, BitLocker, functionapp, httptrigger, Intune, win32 app, Windows AutoPilot | Leave a comment

Encrypting devices during Windows Autopilot provisioning (WhiteGlove) – Part 2

Introduction Windows Autopilot preprovisioning (WhiteGlove) is the ability to pre-stage content and policies to devices while it’s been installed in the factory. We had a challenge to speed up the overall compliance of Windows Autopilot devices and the obvious solution … Continue reading

Posted in BitLocker, Compliance, win32 app, Windows AutoPilot | Leave a comment

Encrypting devices during Windows Autopilot provisioning (WhiteGlove) – Part 1

Introduction Note: This is not supported by Microsoft and your mileage may vary. That said, this speeds up compliance and more importantly increases security as the device is already encrypted by the time the user logs on (in Part 2). … Continue reading

Posted in BitLocker, IntuneWinAppUtil.exe | 2 Comments

Migrate to the cloud – Part 3. Troubleshooting

Introduction This blog series is comprised of 3 parts. In part 1 you reviewed a video of the solution and then carried out the initial steps to set everything up. In part 2 you saw how you could modify files, … Continue reading

Posted in Auto MDM enrollment, Azure AD, AzureAD, Intune, sendgrid | Leave a comment

Migrate to the cloud – Part 2. Customization

Introduction This blog series is comprised of 3 parts. In part 1 you reviewed a video of the solution and then carried out the initial steps to set everything up. In this part, you’ll see how you can modify files, … Continue reading

Posted in Auto MDM enrollment, Azure AD, AzureAD, Intune | Leave a comment

Migrate to the cloud – Part 1. Setup

Introduction This blog series is comprised of 3 parts. In this part  I’ll cover how you can migrate your existing configuration manager managed, domain joined devices to Azure AD joined, and Intune managed devices. During that process the app also converts … Continue reading

Posted in Auto MDM enrollment, Azure AD, System Center Configuration Manager (Current Branch), Windows AutoPilot | Leave a comment

Zscaler SSL inspection throwing a wobbler during OOBE in Windows Autopilot

Introduction Note: We’ve been using Windows Autopilot with Zscaler configured with Microsoft URLs whitelisted without issue for a long time, this latest problem is new. Read on for more… I needed to setup a virtual machine for a colleague, and … Continue reading

Posted in Intune, Windows AutoPilot, Zscaler SSL Inspection | Leave a comment

Do you have required Win32 Apps skipping Windows Autopilot ESP or not installing until after login ?

Introduction I saw an interesting tweet from @brucesaaaa where he talked about issues observed in multiple tenants during Windows Autopilot enrollment with required Win32 apps. The following was seen for required deployments of Win32 apps during Windows Autopilot enrollment: ESP … Continue reading

Posted in Intune, IntuneWinAppUtil.exe, win32 app, Windows AutoPilot | Leave a comment

Prompting standard users to confirm or change Regional, Time Zone and Country settings after Windows Autopilot enrollment is complete

Introduction When users complete Windows Autopilot Out of Box Experience (OOBE), they can be asked to confirm Country and Keyboard settings, based on what is configured in the following Windows Autopilot Deployment Profile settings. Below is the Windows Autopilot deployment … Continue reading

Posted in Intune, PowerShell scripts, Windows 10 AutoPilot | Leave a comment