Practical walkthroughs to help you solve technical challenges with ease. Each guide breaks down complex tasks into clear, actionable steps—whether you’re troubleshooting Windows, configuring Intune, or automating with PowerShell. Perfect for IT admins and tech enthusiasts who want solutions they can follow and replicate right away.
Starting with Windows 10 version 20H2, you can use Azure AD groups to manage local administrators group privileges on Azure AD joined devices with the Local Users and Group MDM policy. Organizations can use Microsoft Intune to manage these policies using Custom OMA-URI Settings or Account protection policy.
Windows Local Administrator Password Solution (LAPS) from Microsoft allows you to manage and rotate local administrator passwords on Windows devices. A custom RBAC role in Intune is required if you
How to Create a Custom RBAC Role in Intune for LAPS Password Administrator Read More »
Windows LAPS (Local Administrator Password Solution) is now built directly into Windows and does not require installation of the legacy Microsoft LAPS. All modern features are available without referring back
How to Manage Windows LAPS with Intune Read More »
You may have a requirement to reboot SCCM client computers which have not been rebooted for n number of days. This process can be used to schedule a reboot using PowerShell script deployed as SCCM application. The PowerShell script will check if machine was rebooted in last n number of days. If not it will return exit code 3010 instructing SCCM client agent that a soft reboot is required.
How to Schedule SCCM Client Reboot through ConfigMgr Read More »
Deploy Microsoft SQL Server Management Studio (SSMS) 20.x through Intune Microsoft SQL Server Management Studio (SSMS) continues to evolve, with SSMS 20.x now available as the latest release. If you
Deploy Microsoft SQL Server Management Studio 19.02 through Intune Read More »
Microsoft Office 365 & Azure Active Directory (AD) allow for seamless and secure account management, especially when using multiple devices to access the same network of programs. It begins with
How to Integrate WordPress with Microsoft Office 365 & Azure AD Read More »
Win32_OptionalFeature WMI class represents the status of the optional features that are present on the operating system. In ConfigMgr, this class is represented by Server side WMI class SMS_G_System_OPTIONAL_FEATURE. This
SCCM Collection Based on Operating System Optional Features | ConfigMgr Read More »
SCCM collect software information from client using different methods such as Software inventory , software file scan, and hardware inventory. These information can be used to create dynamic collection for devices.
Create SCCM Device Collection Based on Installed Software Products & Inventoried Files Read More »
SCCM Computer hardware classes can be used to create dynamic query based device collection. There are different classes such as Computer System , PC_BIOS , System Enclosure , TPM etc which can be used for queries. A collection or query created in Configuration Manager uses WMI Query Language (WQL) to request objects from the SMS Provider WMI Schema, which in turn retrieves the data from site database.
How to Create SCCM Device Collection Based on Computer Hardware Details | ConfigMgr Read More »
To identify a device with Windows Autopilot, the device’s unique hardware identify (hardware hash) must be captured and uploaded to the service. This is usually first step when you want to provision a machine using Windows Autopilot. The hardware hash can be uploaded by manufacturer / raeseller for new devices. However, hardware hash need to be collected manually for the devices which are already in corporate environment and not already enrolled into Microsoft Intune.
Get Hardware Hash for Windows Autopilot Read More »
