Category Archives: Intune

Microsoft Intune, incorporating Microsoft Intune standalone (cloud) and Microsoft Intune connected to Configuration Manager (hybrid)

Automating group tags for Windows Autopilot registered devices

Posted on March 22, 2023 by ncbrady

Introduction I’ve recently blogged about Provisioning Windows Autopilot devices to get the encrypted with Bitlocker at the factory to speed up compliance. You can review those blog posts below: Encrypting devices during Windows Autopilot provisioning (WhiteGlove) – Part 1 Encrypting … Continue reading →

Posted in Graph, group tag, Intune, Windows AutoPilot | Leave a comment

Encrypting devices during Windows Autopilot provisioning (WhiteGlove) – Part 3

Posted on March 6, 2023 by ncbrady

Introduction Note: This method is not officially supported by Microsoft. That said, this speeds up compliance and more importantly increases security as the device is already encrypted (part 1) before the user logs on (part 2). BitLocker recovery key changes … Continue reading →

Posted in AzureAD, BitLocker, functionapp, httptrigger, Intune, win32 app, Windows AutoPilot | Leave a comment

Encrypting devices during Windows Autopilot provisioning (WhiteGlove) – Part 2

Posted on March 2, 2023 by ncbrady

Introduction Windows Autopilot preprovisioning (WhiteGlove) is the ability to pre-stage content and policies to devices while it’s been installed in the factory. We had a challenge to speed up the overall compliance of Windows Autopilot devices and the obvious solution … Continue reading →

Posted in BitLocker, Compliance, win32 app, Windows AutoPilot | Leave a comment

Encrypting devices during Windows Autopilot provisioning (WhiteGlove) – Part 1

Posted on February 28, 2023 by ncbrady

Introduction Note: This is not supported by Microsoft and your mileage may vary. That said, this speeds up compliance and more importantly increases security as the device is already encrypted by the time the user logs on (in Part 2). … Continue reading →

Posted in BitLocker, IntuneWinAppUtil.exe | Leave a comment

Migrate to the cloud – Part 3. Troubleshooting

Posted on May 31, 2022 by ncbrady

Introduction This blog series is comprised of 3 parts. In part 1 you reviewed a video of the solution and then carried out the initial steps to set everything up. In part 2 you saw how you could modify files, … Continue reading →

Posted in Auto MDM enrollment, Azure AD, AzureAD, Intune, sendgrid | Leave a comment

Migrate to the cloud – Part 2. Customization

Posted on May 30, 2022 by ncbrady

Introduction This blog series is comprised of 3 parts. In part 1 you reviewed a video of the solution and then carried out the initial steps to set everything up. In this part, you’ll see how you can modify files, … Continue reading →

Posted in Auto MDM enrollment, Azure AD, AzureAD, Intune | Leave a comment

Migrate to the cloud – Part 1. Setup

Posted on May 22, 2022 by ncbrady

Introduction This blog series is comprised of 3 parts. In this part  I’ll cover how you can migrate your existing configuration manager managed, domain joined devices to Azure AD joined, and Intune managed devices. During that process the app also converts … Continue reading →

Posted in Auto MDM enrollment, Azure AD, System Center Configuration Manager (Current Branch), Windows AutoPilot | Leave a comment

Zscaler SSL inspection throwing a wobbler during OOBE in Windows Autopilot

Posted on February 7, 2022 by ncbrady

Introduction Note: We’ve been using Windows Autopilot with Zscaler configured with Microsoft URLs whitelisted without issue for a long time, this latest problem is new. Read on for more… I needed to setup a virtual machine for a colleague, and … Continue reading →

Posted in Intune, Windows AutoPilot, Zscaler SSL Inspection | Leave a comment

Do you have required Win32 Apps skipping Windows Autopilot ESP or not installing until after login ?

Posted on January 31, 2022 by ncbrady

Introduction I saw an interesting tweet from @brucesaaaa where he talked about issues observed in multiple tenants during Windows Autopilot enrollment with required Win32 apps. The following was seen for required deployments of Win32 apps during Windows Autopilot enrollment: ESP … Continue reading →

Posted in Intune, IntuneWinAppUtil.exe, win32 app, Windows AutoPilot | Leave a comment

Prompting standard users to confirm or change Regional, Time Zone and Country settings after Windows Autopilot enrollment is complete

Posted on December 15, 2021 by ncbrady

Introduction When users complete Windows Autopilot Out of Box Experience (OOBE), they can be asked to confirm Country and Keyboard settings, based on what is configured in the following Windows Autopilot Deployment Profile settings. Below is the Windows Autopilot deployment … Continue reading →

Posted in Intune, PowerShell scripts, Windows 10 AutoPilot | Leave a comment

Using the updated & secure Retire My PC app via Company Portal

Posted on November 14, 2021 by ncbrady

Introduction I previously posted a blog post showing you how your users can decommission their old domain joined PC using the Retire My PC app. I showed you how to create the app and deploy it via Software Center to … Continue reading →

Posted in Azure AD, BitLocker, Intune | Leave a comment

Forcing a time sync during Windows Autopilot OOBE to combat time related issues

Posted on October 21, 2021 by ncbrady

Introduction I recently encountered an issue when after Windows Autopilot enrollment was completed, the end user was unable to browse on-premises network resources such as file shares when logged on with using the Windows Hello for Business login method. The … Continue reading →

Posted in Windows AutoPilot | Leave a comment

Cloud attach – Endpoint Managers silver lining – part 6 Enabling conditional access

Posted on April 12, 2021 by ncbrady

Introduction This is part 6 in a series of guides about cloud attach in Microsoft Endpoint Manager, with the aim of getting you up and running with all things cloud attach. This part will focus on enabling the compliance policies … Continue reading →

Posted in Cloud Attach, Compliance, Conditional Access | Leave a comment

Gathering logs and sending an email when you need to reset Windows Autopilot – part 3

Posted on February 28, 2021 by ncbrady

Introduction In a previous blog post I explained how you could use the SendGrid resource in Azure to send emails, and with a PowerShell script create an Intune app to give end users additional options when resetting their Windows Autopilot … Continue reading →

Posted in AzureAD, httptrigger, troubleshooting, Windows AutoPilot | Leave a comment

Adding devices or users to an Azure AD group after Windows Autopilot is complete but only when the device is marked as Compliant

Posted on February 19, 2021 by ncbrady

Introduction I’ve touched on this subject before where I used http triggers to add devices or users to an Azure AD group after Windows Autopilot was completed, however that solution did not check the compliance of the device prior to … Continue reading →

Posted in Azure AD Connect, AzureAD, Compliance, httptrigger, Intune | Leave a comment