New enhancements to Autopilot Manager are here. This time I focused on further optional automations of the import process based on customer feedback. Another year is gone and Autopilot Manager once again gets new features. Ironically last time I introduced new features (Evolving Autopilot Manager) was also ~1 year after the initial release. So here…
Read MoreAll articles filed in PowerShell
Post ESP Intune Win32 apps installations
In enterprise environments, we have to deal with a lot of requirements when it comes to app management. One of the common challenges is to control the installation moment during enrollment. We already have some basic controls in place. If the Enrollment Status Page (ESP) is configured during the enrollment all device targeted apps are…
Read MoreGet back your Intune Win32 App Requirement and Detection Scripts
It looks like getting back all the script content in Intune is of high interest 😉, soon after I published how to get back your Proactive Remediation Scripts, I got another request for the Intune Win32 Application scripts (Detection and Requirement scripts). So here we go, another small script to get back all the Win32…
Read MoreGet back your Intune Proactive Remediation Scripts
One of my blog readers kindly asked if I can provide a similar script like the one downloading all Intune PowerShell scripts for the Proactive Remediation Scripts. I’m happy to provide a modified version of my script to do exactly this. It uses the same technique as I used in my old script. There are…
Read MoreDeploy an Intune application with user device affinity
Today I’m going to show how we can achieve user device affinity with Intune application deployment as known from ConfigMgr. When we are going to deploy applications to users, we are independent of the user’s devices. The application belongs to a user and it can be installed or it gets automatically installed on all his…
Read MoreIME debugging and Intune Win32 App decoding – Part 2
Three years ago, I coded a small utility to decode Intune Win32 Apps and wrote a blog post about it – How to decode Intune Win32 App Packages. In addition to the small Decoder utility, I wrote a short PowerShell script to parse the Intune Management Extension (IME) log file to extract the necessary decryption…
Read MoreWorking with Hyper-V VMs in an Intune Lab environment
As a lot of my blog readers probably know :-), I’m working a lot with Microsoft Endpoint Manager – Intune and testing a lot of things in the Modern Management approach with Windows 10. It is absolutely necessary to have a good lab setup to test all these new features in a save way. For…
Read MoreEnhance Intune Management Extension (IME) Logging
Everyone working with Microsoft Endpoint Manager (MEM) and using the Intune Management Extension (IME) has seen these log files: Here we find all relevant information about the processing of the Intune Windows Agent. We get deeper understanding what the agent is actually doing and it is the location to start troubleshooting Intune related error regarding…
Read MorePowerShell Helpers to convert Azure AD Object IDs and SIDs
If you work with Azure AD and especially in my case with Intune and Azure AD you have probably seen Object IDs in the Azure AD portal on the user objects, group objects, or in the Intune log files. Here a portal screenshot of a demo user: Here a screenshot of the Intune Management Extension…
Read MoreGet back your Intune PowerShell Scripts
In this very short post I will show how you get your uploaded Intune PowerShell scripts again. If you work with Intune and especially with Intune PowerShell scripts to configure Windows 10 devices you probably looked at this dialog and wondered why you are not able to edit or download your already uploaded script again.…
Read MoreCleanup Windows Autopilot registrations
How to cleanup Windows Autopilot device registrations via PowerShell script and Microsoft Graph.
Read MoreHow to enable Pre-Boot BitLocker startup PIN on Windows with Intune
This guide will demonstrate how to enable the BitLocker startup PIN for pre-boot authentication on Windows 10 with Microsoft Intune. I will walk through how to accomplish this in a nearly fully automatic way. Let’s start with some facts around BitLocker to understand the technology more precisely. In fact, I think a pre-boot startup PIN…
Read MoreDeploying Win32 app BGInfo with Intune
Deploying BGInfo to quickly find your test devices or provide easy VM access during trainings with more visibility of the available user permissions.
Read MoreDeep dive Microsoft Intune Management Extension – PowerShell Scripts
Microsoft made a big step forward in the Modern Management field. Limitations like custom configurations or even Win32 App installs can be addressed now. Microsoft developed an EMS agent (aka SideCar) and released it as a new Intune feature called Intune Management Extension. This agent is able to manage and execute PowerShell scripts on Windows 10…
Read More