Create Windows 10 AutoPilot Hybrid Azure AD joined profile

This blogpost is about creating a Windows 10 AutoPilot deployment profile based on a Hybrid Azure AD Joined scenario via Microsoft 365/Microsoft Intune. Creating Windows 10 AutoPilot Hybrid Azure AD joined profile Go to https://devicemanagement.microsoft.com/ and log on. Go to Devices and to Windows: After that click on “Windows Enrollment”: We first need to setup automatic enrollment. … Read more

Create Windows 10 AutoPilot Azure AD joined profile

This blogpost is about creating a Windows 10 AutoPilot deployment profile based on a Azure AD joined scenario via Microsoft 365 or Microsoft Intune. Creating the profile Go to https://devicemanagement.microsoft.com/ and log on. Go to Devices and to Windows: After that click on “Windows Enrollment”: We first need to setup automatic enrollment. Click on automatic … Read more

Block Outlook on Unmanaged Windows 10 Devices

When you move to Exchange Online the connectivity to your mailboxes is no longer limited by your firewall. Microsoft enables everything by default. So if you don’t want users to configure Outlook on their unmanaged Windows 10 devices you need create policy to do so. To block Outlook on unmanaged Windows 10 devices you need … Read more

Windows 10 Updates via Microsoft Intune

Updating your Windows 10 devices was always a challenge. The devices were not on the corporate network or for some other reason they were not able to install Windows Updates. Microsoft Intune now partly solves this problem. Configuring Windows Updates is fairly easy. Prerequisites Update Rings We are going to create update rings. These update … Read more

AutoPilot info auto upload script

I have created a script which auto uploads your Windows 10 AutoPilot info to your tenant. I didn’t do the hard work, that is someone called Nickolaj Andersen. He wrote the script that you can download from the Powershell Galery. This is his original post: https://www.scconfigmgr.com/2019/06/04/import-windows-autopilot-device-identity-using-powershell/ The Script It is a simple script, it is … Read more

Enable Azure AD Device Script

I have been testing with Windows 10 AutoPilot White Glove and I have run in to the problem where the Azure AD Device was not able to find my organisation. Problem definition The error looked like this: I had uploaded the hardware hashes to Intune using a CSV. Therefore, I was very suprised to see … Read more

Intune Compliancy Policies

Intune compliancy policies are nice way to check whether your managed devices are compliant with the policies you have made. For example; you want all your machines to be encrypted, it is possible to check this is enforced through a compliance policy. Example for an Intune Compliancy Policy The compliancy policy that we are going … Read more

Intune Delivery Optimization/bandwidth optimization

You will have probably heard about the Intune delivery optimization. In this blogpost I will explain and show the delivery optimization profiles options. I have configured this in my lab. I will walk you through every detail of the implementation. A good thing to know is that delivery optimization (peer to peer) is enabled by … Read more

Device Bulk Actions via Microsoft Intune

This is a new feature in Microsoft Intune. Device bulk actions for devices. An example would be that you have implemented Windows 10 AutoPilot before the naming convention was released and now you are stuck with the naming convention “DESKTOP-XXXXXXX”. You can now rename all devices in bulk. Example for a bulk action Let’s grab … Read more

Microsoft Office 365 Configuration via Intune

Since a couple of months Microsoft Intune offers the possibility to use ADMX templates to configure Microsoft Office 365 Pro Plus. Earlier on this was possible via scripting to configure Microsoft Office. This is not ideal because our managed services department had a hard time controling this. When I read about the ADMX templates I … Read more