Category Archives: Intune

Microsoft Intune, incorporating Microsoft Intune standalone (cloud) and Microsoft Intune connected to Configuration Manager (hybrid)

Migrate to the cloud – Part 1. Setup

Introduction This blog series is comprised of 3 parts. In this part  I’ll cover how you can migrate your existing configuration manager managed, domain joined devices to Azure AD joined, and Intune managed devices. During that process the app also converts … Continue reading

Posted in Auto MDM enrollment, Azure AD, System Center Configuration Manager (Current Branch), Windows AutoPilot | Leave a comment

Zscaler SSL inspection throwing a wobbler during OOBE in Windows Autopilot

Introduction Note: We’ve been using Windows Autopilot with Zscaler configured with Microsoft URLs whitelisted without issue for a long time, this latest problem is new. Read on for more… I needed to setup a virtual machine for a colleague, and … Continue reading

Posted in Intune, Windows AutoPilot, Zscaler SSL Inspection | Leave a comment

Do you have required Win32 Apps skipping Windows Autopilot ESP or not installing until after login ?

Introduction I saw an interesting tweet from @brucesaaaa where he talked about issues observed in multiple tenants during Windows Autopilot enrollment with required Win32 apps. The following was seen for required deployments of Win32 apps during Windows Autopilot enrollment: ESP … Continue reading

Posted in Intune, IntuneWinAppUtil.exe, win32 app, Windows AutoPilot | Leave a comment

Prompting standard users to confirm or change Regional, Time Zone and Country settings after Windows Autopilot enrollment is complete

Introduction When users complete Windows Autopilot Out of Box Experience (OOBE), they can be asked to confirm Country and Keyboard settings, based on what is configured in the following Windows Autopilot Deployment Profile settings. Below is the Windows Autopilot deployment … Continue reading

Posted in Intune, PowerShell scripts, Windows 10 AutoPilot | Leave a comment

Using the updated & secure Retire My PC app via Company Portal

Introduction I previously posted a blog post showing you how your users can decommission their old domain joined PC using the Retire My PC app. I showed you how to create the app and deploy it via Software Center to … Continue reading

Posted in Azure AD, BitLocker, Intune | Leave a comment

Forcing a time sync during Windows Autopilot OOBE to combat time related issues

Introduction I recently encountered an issue when after Windows Autopilot enrollment was completed, the end user was unable to browse on-premises network resources such as file shares when logged on with using the Windows Hello for Business login method. The … Continue reading

Posted in Windows AutoPilot | Leave a comment

Cloud attach – Endpoint Managers silver lining – part 6 Enabling conditional access

Introduction This is part 6 in a series of guides about cloud attach in Microsoft Endpoint Manager, with the aim of getting you up and running with all things cloud attach. This part will focus on enabling the compliance policies … Continue reading

Posted in Cloud Attach, Compliance, Conditional Access | Leave a comment

Gathering logs and sending an email when you need to reset Windows Autopilot – part 3

Introduction In a previous blog post I explained how you could use the SendGrid resource in Azure to send emails, and with a PowerShell script create an Intune app to give end users additional options when resetting their Windows Autopilot … Continue reading

Posted in AzureAD, httptrigger, troubleshooting, Windows AutoPilot | Leave a comment

Adding devices or users to an Azure AD group after Windows Autopilot is complete but only when the device is marked as Compliant

Introduction I’ve touched on this subject before where I used http triggers to add devices or users to an Azure AD group after Windows Autopilot was completed, however that solution did not check the compliance of the device prior to … Continue reading

Posted in Azure AD Connect, AzureAD, Compliance, httptrigger, Intune | Leave a comment

Gathering logs and sending an email when you need to reset Windows Autopilot – part 2

Introduction In a previous blog post I explained how you could use the SendGrid resource in Azure to send emails, and with a PowerShell script create an Intune app to give end users additional options when resetting their Windows Autopilot … Continue reading

Posted in AzureAD, Intune, sendgrid, Windows 10 | Leave a comment

Gathering logs and sending an email when you need to reset Windows Autopilot

Introduction Windows Autopilot deployment profiles allow you to decide if the user is a local administrator or a standard user. With all the security concerns today, choosing an User account type of Standard as shown below is a logical choice, … Continue reading

Posted in AzureAD, company portal, Intune, PowerShell scripts, sendgrid | Leave a comment

Adding devices to an Azure AD group after Windows Autopilot is complete – part 2

Introduction In part 1 you learned how to use Azure functions and a http trigger to add a device to an Azure Ad security group. In this part you’ll see how it all fits together on the client side after … Continue reading

Posted in AzureAD, httptrigger, Intune, Windows 10 AutoPilot | Leave a comment

Adding devices to an Azure AD group after Windows Autopilot is complete – part 1

Introduction I’ve come across various problems during Windows Autopilot causing OOBE to fail that could be solved if only we could decide the order of when things were installed, and to resolve this in a nice way we wanted to … Continue reading

Posted in AzureAD, httptrigger, Intune, Windows 10 AutoPilot | Leave a comment

Displaying a welcome page after Windows Autopilot completes

Introduction Understanding when Windows Autopilot is complete is an interesting topic. It would be great if there was a reg-key or file that was set when Windows Autopilot completed successfully, but there isn’t, at least not now. In the meantime … Continue reading

Posted in Intune, welcome, Windows AutoPilot | Leave a comment

Office 365 issues after Windows Autopilot

Introduction I’m writing this post to catalog problems I recently faced while doing Windows Autopilot installations, we use a very slim enrollment Status Page (ESP) configuration with only one app marked as required (Microsoft Edge Chromium). The remaining applications are … Continue reading

Posted in Intune, Windows AutoPilot | Leave a comment