Niels’s technology ramblings
Why use signed policies for App Control? Signed App Control policies give organizations the highest level of protection available in Windows. This is designed to detect if someone or something tampers with your policies. If so, that result in a blue screen or boot failure. This makes it much more difficult to remove App Control … Read more
This is my first post about AI. I had to start sometime right? This post is about building your own AI Intune Assistant with Microsoft Foundry. It is based on the idea that you won’t need Security Copilot if you learn to use some tools… Let’s dive in! This is what we are configuring: We … Read more
I wrote a post a while ago about automating the creation of the Applocker policy for intune. You can find it here. This post is a prequel to that post. This post shows you how to automate your Applocker configuration which you can upload with the previous post to Microsoft Intune. To automate the configuration … Read more
I wanted to automate the minimum version for a MacOS compliance policy in Microsoft Intune. There were a couple of requirements: The Script To fulfill the first requirement I searched for a reputable source. Of course, I ended up on reddit. Just kidding of course. But! Reddit lead me to reputable source. Turns out Apple … Read more
This is my latest training exercise, building configuration drift control for Microsoft Intune with PowerShell and the pester module. I wanted to be able to check my clients configuration against my own baseline for Microsoft Intune. Of course, there are many tools out there that can do this for you. Like Andrew Taylor’s EUCToolbox. It’s … Read more
So, a customer of mine wanted to install Hyper V and add the current user to Hyper V administrators. They wanted to use Hyper V on their Intune Managed Devices to use virtual machines to have a test device in Intune and a sequencing machine to develop application packages and App Control policies. TLDR: The … Read more
A colleague of mine contacted me about slow logon times for Windows 365 Cloud Pc’s. Every next day he reported that the logon took about 3 – 5 minutes. I also asked around in the community and this is not normal behaviour. It should be like 30 seconds to logon. So, we got ourselves something … Read more
This is a quick blog about Palo Alto Global Protect VPN via Microsoft Intune with the Microsoft Edge browser. A customer wants to connect IOS devices with Palo Alto Global Protect VPN with certificated-based authentication and username/password + MFA. As a result, only devices that have a certain configuration can access the VPN. So, I … Read more
Another post about WDAC, this time about the deployment of Teams Add-In for Microsoft Office. You can find the other post here. The Problem This also has a problem installing with the default WDAC configuration. You can see this in the Application event log: Product: Microsoft Teams Meeting Add-in for Microsoft Office — Error 1723. … Read more
So, I was trying to implement Endpoint Privilege Management (EPM) and faced deployment error 2147749902. Firstly, I searched Google and found nothing. I complained to my friend Rudy Ooms that his blog didn’t contain the error or fix. This guy has covered almost everything about Intune but it turned out his blog didn’t mention the … Read more