Windows 365 boot error 65000

I recently had the privilege of implementing Windows 365 boot but encountered error 65000. This had to do with the Windows 365 Boot Device Configuration Policy Boot profile: The picture above clearly states the “Boot to Cloud PC Enhanced” setting return the error 65000. So, where does this error come from? I met the prerequisites: … Read more

Palo Alto Global Protect VPN via Intune with Edge browser

This is a quick blog about Palo Alto Global Protect VPN via Microsoft Intune with the Microsoft Edge browser. A customer wants to connect IOS devices with Palo Alto Global Protect VPN with certificated-based authentication and username/password + MFA. As a result, only devices that have a certain configuration can access the VPN. So, I … Read more

Can’t create AVD hostpooltoken

So, quick blog about the situation where you can’t create an AVD hostpooltoken. A bicep API version causes this error. This is the error you see in the Azure Virtual Desktop hostpool portal: This is the error stated by the portal: Error: Cannot retrieve token for Hostpool ‘hostpoolname’ because it is not of Hostpool management … Read more

Teams Add-In for Microsoft Office – WDAC

Another post about WDAC, this time about the deployment of Teams Add-In for Microsoft Office. You can find the other post here. The Problem This also has a problem installing with the default WDAC configuration. You can see this in the Application event log: Product: Microsoft Teams Meeting Add-in for Microsoft Office — Error 1723. … Read more

EPM Deployment error 2147749902

So, I was trying to implement Endpoint Privilege Management (EPM) and faced deployment error 2147749902. Firstly, I searched Google and found nothing. I complained to my friend Rudy Ooms that his blog didn’t contain the error or fix. This guy has covered almost everything about Intune but it turned out his blog didn’t mention the … Read more

Excluding Users from FSLogix for Intune Managed AVD

This blog post is about excluding users from FSLogix for Intune-only Managed AVD. I got a question about this via a comment on another post. That post is about how to configure FSLogix for Entra Joined AVD hosts. Furthermore, it also explains how to set NTFS permissions for a storage account that is not domain-joined. … Read more

Windows Defender for Server Passive mode

A customer of mine is using Trend Micro as their security suite. They found out that Windows Defender for Server was still running actively, and they wanted to have it in passive mode. I couldn’t find a blog that contained all the steps. So, I decided to write it down myself. This is the article … Read more