Starting with Windows 10 version 20H2, you can use Azure AD groups to manage local administrators group privileges on Azure AD joined devices with the Local Users and Group MDM policy. Organizations can use Microsoft Intune to manage these policies using Custom OMA-URI Settings or Account protection policy.
How to manage local administrators group membership on Azure AD joined devices | Intune Read More »
Windows Local Administrator Password Solution (LAPS) from Microsoft allows you to manage and rotate local administrator passwords on Windows devices. A custom RBAC role in Intune is required if you
How to Create Custom RBAC Role in Intune for LAPS Password Administrator Read More »
Use Manage Google Play App option in Intune to deploy custom Android apk files. This allows you to add LOB apps by submitting just the app APK and a title,
How to deploy Android .APK Apps in Microsoft Intune Read More »
Using provisioning package device failed to complete AAD Join with error 0xCAA2000C. The issue can also be tracked under Audit Logs in Azure.
You will get entry of the device that you are trying to onboard , looking at the Azure audit logs it shows that the device gets added and then gets removed immediately.
Intune Bulk Enrollment with Provisional Package failed with Error 0xCAA2000C Read More »
Windows Local Administrator Password Solution – Windows LAPS is a free tool from Microsoft that allows you to manage and rotate local admin passwords on Windows devices. Microsoft Intune can
How to Manage Windows LAPS with Intune Read More »
Microsoft 365 Apps can be deployed using Intune and deploying the app as Microsoft 365 Apps Type. Making it available for self-service install in Intune company portal, you may experience
Deploying Microsoft 365 Apps Stuck in Downloading in Company Portal Read More »
Microsoft SQL Management Studio (SSMS) 19.0.2 is the latest general availability (GA) version. If you have a preview version of SSMS 19 installed, you should uninstall it before installing SSMS 19.0.2. If
Deploy Microsoft SQL Server Management Studio 19.02 through Intune Read More »
Organizing laptops and desktops in device management has always been a challenge. In SCCM we had to use Chassis type and in Intune, we can’t use that anymore. Problem Organizations
Organizing Laptop and Desktop in Intune Using Filters Read More »
To identify a device with Windows Autopilot, the device’s unique hardware identify (hardware hash) must be captured and uploaded to the service. This is usually first step when you want to provision a machine using Windows Autopilot. The hardware hash can be uploaded by manufacturer / raeseller for new devices. However, hardware hash need to be collected manually for the devices which are already in corporate environment and not already enrolled into Microsoft Intune.
Get Hardware Hash for Windows Autopilot Read More »
Windows kiosk is a lockdown mechanism to restrict device access to pre-defined applications. The applications appears on the desktop and user can only use those applications. Kiosk are mostly placed in public area to allow access to specific applications to authorized users or guests. For example, a self check-in kiosk at airport. We can use Microsoft Intune to deploy a Device configuration profile to configure Windows Kiosk on Windows 10 / 11 device as single app or multi-app kiosk.
How to Configure Windows Kiosk Using Microsoft Intune | Windows 10 / 11 Read More »
