Starting with Windows 10 version 20H2, you can use Azure AD groups to manage local administrators group privileges on Azure AD joined devices with the Local Users and Group MDM policy. Organizations can use Microsoft Intune to manage these policies using Custom OMA-URI Settings or Account protection policy.
Windows Local Administrator Password Solution (LAPS) from Microsoft allows you to manage and rotate local administrator passwords on Windows devices. A custom RBAC role in Intune is required if you
How to Create a Custom RBAC Role in Intune for LAPS Password Administrator Read More »
Windows LAPS (Local Administrator Password Solution) is now built directly into Windows and does not require installation of the legacy Microsoft LAPS. All modern features are available without referring back
How to Manage Windows LAPS with Intune Read More »
Deploy Microsoft SQL Server Management Studio (SSMS) 20.x through Intune Microsoft SQL Server Management Studio (SSMS) continues to evolve, with SSMS 20.x now available as the latest release. If you
Deploy Microsoft SQL Server Management Studio 19.02 through Intune Read More »
Windows kiosk is a lockdown mechanism to restrict device access to pre-defined applications. The applications appears on the desktop and user can only use those applications. Kiosk are mostly placed in public area to allow access to specific applications to authorized users or guests. For example, a self check-in kiosk at airport. We can use Microsoft Intune to deploy a Device configuration profile to configure Windows Kiosk on Windows 10 / 11 device as single app or multi-app kiosk.
How to Configure Windows Kiosk Using Microsoft Intune | Windows 10 / 11 Read More »
Managing hundreds of corporate-owned Windows devices can be complex without automation. Bulk enrollment of Windows 10 and Windows 11 devices into Microsoft Intune offers IT admins a fast, scalable way
Bulk Enrollment of Windows 10 / 11 Devices to Intune Using Provisioning Package Read More »
Win32 apps provide us greater control over the deployment of application. We can deploy 32 bit and 64 bit application through Microsoft Intune Win32 apps. The Win32 apps support deployment of multiple files via IntuneWin wrapper / Intune WinAppUtil (intuneWinAppUtil.exe). The IntuneWin Wrapper can be used to deploy multiple files such as MSI with transform (MST). The Win32 app also support the deployment of .EXE file by converting them to .intunewin format. IntuneWinAppUtil help you to prepare win32 app installation source for Microsoft Intune deployment.
How to Prepare Win32 App Installation Source for Intune Using Intune WinAppUtil Read More »
Managing browser settings across an enterprise can be challenging, especially when relying on custom OMA-URI configurations. With the release of Intune Administrative Templates for Google Chrome, IT admins can now
How to Configure Google Chrome settings using Administrative templates | Intune Read More »
The PowerShell SDK for Intune Graph API helps IT professionals automate and manage their Microsoft Intune environment through PowerShell without going to the Endpoint Manager Admin Center. In this article,
Microsoft Edge’s Sleeping Tabs feature is a smart way to optimize browser performance by reducing memory and CPU usage. While it’s enabled by default, IT admins can fine‑tune these settings
Configure Microsoft Edge Sleeping Tabs using Microsoft Intune Read More »
