Generally whenever something is downloaded in large number of iles, it is blocked by Windows. It is easy to unblock a single file...

There are a number of ways to remove the 'Microsoft Store' from the taskbar, and the easiest that I have found doing is simply by doing...

The Microsoft Enterprise SSO plug-in provides single sign-on (SSO) to apps and websites that use Microsoft Entra ID for authentication,...

If an organisation has the need to block apps like TikTok from the App Store, this is what you need to do. Device Compliance must be set...

App configuration policies can help you eliminate app setup problems by letting you assign configuration settings to a policy that is...

From what I have learnt with WDAC is start with the basics, don't ever overcomplicate it and keep it simple. For this, I have set it up...

In the past to autologin to any SSO intergrate apps to Microsoft for Google Chrome, you would need to use an "Windows Account" for Google...

Awhile back Microsoft released information about tenant restrictions, where more information can be found here:...

As we all know Microsoft Intune offers the following ways to deploy apps to Windows devices. Today I am going to cover the common command...

As part of a recent project a few weeks ago, I encountered this weird setting where I had admin rights to services.msc, mmc.msc etc I...

In addition to blocking the 'administrative apps' from being blocked as mentioned https://soeintunedevice.wixsite.com/home/post/103-micro...

As part of a recent project, a customer reached out with wanting to block PowerShell from being run by standard users BUT allowing...

Sometime last year in a project I was involved with doing, a customer wanted to use Microsoft 365 Apps as a Win32 App which then gets...

Awhile back I posted about backing up 'Microsoft Intune Infrastructure' which was covered in this post: https://soeintunedevice.wixsite.c...

There are a number of ways to deploy Attack Surface Rules via Intune as per https://learn.microsoft.com/en-us/microsoft-365/security/defe...

Two years ago, I mentioned that is a way to set Autopilot Time Zone: https://soeintunedevice.wixsite.com/home/post/35-setting-time-zone-a...

About two months ago, I mentioned about setting up Windows Autopatch: https://soeintunedevice.wixsite.com/home/post/21-windows-autopatch...

About 3 to 4 months ago, I setup https://soeintunedevice.wixsite.com/home/post/90-hybrid-identity-using-azure-ad-connect-cloud-sync and...

Two months I posted about setting up and accessing AVD, by accessing the same URL with https://client.wvd.microsoft.com/arm/webclient/ind...

Of late I have been super busy, so haven't had the time to post. As part of a current project I am working on, I am implementing this for...

Recently Microsoft released a new form of Conditional Access (CA) policies, this CA policy requires users to use MFA when accessing admin...

A few months ago, I touched briefly on Microsoft Entra Internet Access here. Today I will be covering the relevant topics around...

As I don't want to setup a virtual machine on my desktop then connect it via Intune, I thought why not setup a basic AVD with the...

If you are using Azure Virtual Desktop (AVD), formerly known as Windows Virtual Desktop – (WVD), you know there has been few settings...