From my recent testing for the last few weeks with Kiosk and CIS 3.0 Windows 11 Benchmark, I have managed to narrow it down to get it...

As part of CIS Windows 11 Benchmark 3.0.0, there are five settings which cause reboots during Autopilot. You can check in registry for...

To custom your taskbar menu, there are a number of ways where one of which works terrific which is using settings catalog. Customise what...

Had a customer who wanted to deploy L2TP with a preshared key via Microsoft Intune to their devices, just to cover what L2TP which can be...

Microsoft recently mad some changes last month where now anyone that has a 'Global Administrator' role assigned will be a local...

To start things off, both ACSC Windows Hardening Guidelines and CIS Windows 11 Enterprise 3.0.0 Baseline have OneDrive set to disabled as...

Self-service password reset (SSPR) gives users in Microsoft Entra ID the ability to change or reset their password, with no administrator...

For hardening end user devices with ACSC or CIS security benchmarks, there are some Active Directory Group Policies that don't convert...

Previously I covered on how to setup local auto admin logon accounts on workstations which was mentioned https://soeintunedevice.wixsite....

Whenever you setup and install Windows 11 by default, it sits on the center of the taskbar. To modify this with Intune, there are a...

As I wanted to use "AutoAdminLogon" on any VM workstations similar that of Kiosk profile which has "AutoAdminLogon" for self-deploying...

In the past, I have mentioned a number of posts with uploading the device hash to a tenant based on the following:...

As part of a customer's request to deploy a Win32 app as Power options. To get a list of "Power Plans" within the device, go to Command...

I only recently discovered that the https://www.powershellgallery.com/packages/Get-WindowsAutoPilotInfo/3.9 doesn't work correctly, and...

Generally whenever something is downloaded in large number of iles, it is blocked by Windows. It is easy to unblock a single file...

There are a number of ways to remove the 'Microsoft Store' from the taskbar, and the easiest that I have found doing is simply by doing...

The Microsoft Enterprise SSO plug-in provides single sign-on (SSO) to apps and websites that use Microsoft Entra ID for authentication,...

If an organisation has the need to block apps like TikTok from the App Store, this is what you need to do. Device Compliance must be set...

App configuration policies can help you eliminate app setup problems by letting you assign configuration settings to a policy that is...

From what I have learnt with WDAC is start with the basics, don't ever overcomplicate it and keep it simple. For this, I have set it up...

In the past to autologin to any SSO intergrate apps to Microsoft for Google Chrome, you would need to use an "Windows Account" for Google...

Awhile back Microsoft released information about tenant restrictions, where more information can be found here:...

As we all know Microsoft Intune offers the following ways to deploy apps to Windows devices. Today I am going to cover the common command...

As part of a recent project a few weeks ago, I encountered this weird setting where I had admin rights to services.msc, mmc.msc etc I...