For hardening end user devices with ACSC or CIS security benchmarks, there are some Active Directory Group Policies that don't convert...

Previously I covered on how to setup local auto admin logon accounts on workstations which was mentioned https://soeintunedevice.wixsite....

Whenever you setup and install Windows 11 by default, it sits on the center of the taskbar. To modify this with Intune, there are a...

As I wanted to use "AutoAdminLogon" on any VM workstations similar that of Kiosk profile which has "AutoAdminLogon" for self-deploying...

In the past, I have mentioned a number of posts with uploading the device hash to a tenant based on the following:...

As part of a customer's request to deploy a Win32 app as Power options. To get a list of "Power Plans" within the device, go to Command...

I only recently discovered that the https://www.powershellgallery.com/packages/Get-WindowsAutoPilotInfo/3.9 doesn't work correctly, and...

Generally whenever something is downloaded in large number of iles, it is blocked by Windows. It is easy to unblock a single file...

There are a number of ways to remove the 'Microsoft Store' from the taskbar, and the easiest that I have found doing is simply by doing...

The Microsoft Enterprise SSO plug-in provides single sign-on (SSO) to apps and websites that use Microsoft Entra ID for authentication,...

If an organisation has the need to block apps like TikTok from the App Store, this is what you need to do. Device Compliance must be set...

App configuration policies can help you eliminate app setup problems by letting you assign configuration settings to a policy that is...

From what I have learnt with WDAC is start with the basics, don't ever overcomplicate it and keep it simple. For this, I have set it up...

In the past to autologin to any SSO intergrate apps to Microsoft for Google Chrome, you would need to use an "Windows Account" for Google...

Awhile back Microsoft released information about tenant restrictions, where more information can be found here:...

As we all know Microsoft Intune offers the following ways to deploy apps to Windows devices. Today I am going to cover the common command...

As part of a recent project a few weeks ago, I encountered this weird setting where I had admin rights to services.msc, mmc.msc etc I...

In addition to blocking the 'administrative apps' from being blocked as mentioned https://soeintunedevice.wixsite.com/home/post/103-micro...

As part of a recent project, a customer reached out with wanting to block PowerShell from being run by standard users BUT allowing...

Sometime last year in a project I was involved with doing, a customer wanted to use Microsoft 365 Apps as a Win32 App which then gets...

Awhile back I posted about backing up 'Microsoft Intune Infrastructure' which was covered in this post: https://soeintunedevice.wixsite.c...

There are a number of ways to deploy Attack Surface Rules via Intune as per https://learn.microsoft.com/en-us/microsoft-365/security/defe...

Two years ago, I mentioned that is a way to set Autopilot Time Zone: https://soeintunedevice.wixsite.com/home/post/35-setting-time-zone-a...

About two months ago, I mentioned about setting up Windows Autopatch: https://soeintunedevice.wixsite.com/home/post/21-windows-autopatch...