Blog Posts

Intune mass export with the Graph Report API

There are many ways to export information from Intune. For example, you can use Log Analytics, the Data Warehouse or the Graph API. But if you want to export several thousand devices or apps via Graph, it can happen that Graph has a paging. Paging means that you only get…

Read more…

How to setup Organizational messages

With the service release 2211, microsoft has brought a cool new feature called organizational message. These are different ways to contact users via different good looking messages to improve end-user communication and experience. This offers additional possibilities to the existing Notification Bar messages from Windows 10 and older.These messages can…

Read more…

Intune Device Inventory UI

Anyone who has been working in the area of device management for a while knows that a good inventory is a very important prerequisite for good device management. A very desired feature from you is to have a custom inventory directly in Intune with which you can then continue to…

Read more…

How to enroll a ubuntu device in intune

Since a few weeks there is a new icon in the Intune console and this is linux. The linux support is a very long awaited feature and there was good feedback from the ommunity. Currently the feature set is still a bit limited, there is currently only the possibility to…

Read more…

Overview of Analytics capabilities in Intune

A lot has changed from the traditional on premise managed workplace to the modern workplace managed via cloud power. You no longer have to worry about infrastructure, you can work securely from anywhere and you save money. But where do we go from here? The topic of analytics and user…

Read more…

Whats new in 2210

Glad to publish today my second installment of my Intune Whats new series. This month was ignite and what you need to know that during this time very many are busy internally at microsoft through the Ignite. Nevertheless, the changes in the new service release are very noteworthy. In this…

Read more…

Deep Dive into delivery optimization

You can imagine that when a new Windows patch or a new version of a software is released and has to be installed on every Devices and many PCs start to download the content at the same time from a destination outside the corporate network, the Internet break outs are…

Read more…

How to skip the ESP for a single app installation

Unfortunately, there is no setting in Intune with which you can determine whether an app should be installed during ESP (Enrollment Status Page) or only after ESP. Of course, it is a huge advantage to install as many apps as possible during the ESP or even better during the white…

Read more…

Whats new in 2209

Every month there is a new service release of Intune with new features and bug fixes. With this blog I would like to start a new series and take a closer look at the new features in new Intune releases. The release that was released on Thursday was the 2209…

Read more…

Deep dive into the IME Health check

In one of my last posts we took a closer look at how the Intune Management extension works and even looked behind the scenes directly into the code. In this post I have already mentioned the ClientHealthEval.exe and I would like to take a closer look into this.

Read more…

Check Autopilot enrollment prerequisite

Everyone who has enrolled a few devices with autopilot in his life and has encountered errors knows the problem that it can quickly be very cumbersome to find the problem why an enrolment fails. Especially when it comes to network endpoints that are not reachable it can be very time…

Read more…

How to import custom ADMX/ADML into Intune

With the Intune service release 2208 there is a really nice feature that provides the support to import ADMX and ADML templates very easy into MEM. This helps to create configurations for e.g. 3rd party products. How this work I will explain based on a Firefox.

Read more…

Activate Mac FileVault using Intune

Encrypting the disk of a workspace is one of the basic settings that every managed device should have. Everyone who manages Windows PCs knows BitLocker. The solution that is integrated in MacOS to encrypt disks is called FileVault. In this blog I want to explain you how to configure this…

Read more…

Change Windows 11 Context Menu with Intune

Windows 11 has brought some changes to the Windows Explorer, including the way the context menu looks. By default, the context menu is reduced to the really necessary functions. This is sufficient for most users. However, if you often need functions that are not in the reduced view, then this…

Read more…

Introduction of the Intune Device Troubleshooter

If you follow my blog, you know that there are two things I really like: helping people with their problems, and automating or simplifying processes. In this blog, I want to introduce you to my new tool, the Intune Device Troubleshooter. This is a PowerShell UI application that will help…

Read more…

Summary of the Intune Management Extension

If you’ve been following my blog, you know that I mention the Intune Management Extension (IME) in several of them. The IME is a powerful tool that help you to manage your devices. In this blog, I’d like to go into more detail and take a look behind the scenes…

Read more…

Using MacOS custom attributes in Intune

Intune already has a basic inventory of MacOS devices. On the one hand, there is a hardware inventory in which you have everything from the serial number to the free memory, but also os information. In addition, you can see in the discovered apps which applications are installed on the…

Read more…

Use Endpoint Analytics to clean up the disk

I have already written several blog posts about endpoint analytics. In the Microsoft Tech Community the question came up how to clean up the disk using Intune. This is a question that is difficult to answer generically as it is always very specific. Through more and more applications and data…

Read more…

A default set on assignment Filter

In one of my posts I have explain how you can create an apply assignment filters. Is a very powerful feature to refine the assignment of group. For example, you can assign a config profile to all devices and apply a filter to apply the config profile only on Windows…

Read more…

Sync Azure AD Group with Kiosk Config Profile

I have already described in a previous blog how to deploy a device as a kiosk device using Intune. This actually works really well. There is only one small thing that is really inconvenient. If Azure AD user or group is selected as logon type (only specific users are allowed…

Read more…

Applicability Rule: Gone but still there

With the introduction of Assignments filter, the value of Applicability rules has diminished. With Applicability rules you could define on which OS versions a Configuration Profile should work. Unfortunately, the ability to configure or delete applicability rules for some configuration profile types from the console has also been removed. It…

Read more…

How to update Quick assist with Intune

Quick assist was a cool windows out of the box tool that can get or provide PC support via a remote connection. Because Quick Assist is a pre-installed app in Windows, it can also be used to provide support during setup via e.g. Autopilot. The experience for the user was…

Read more…

Use Endpoint Analytics to find slow internet breakouts

Users always complain that the network is slow. This can also be measured centrally using various network monitoring tools. However, this monitoring can only provide complete insight if the user is actually onsite in the corporate network. If the user is sitting in the home office and is connected to…

Read more…

Company Portal System Tray Icon

It is difficult for support engineers to guide users to the company portal because the company portal is called differently depending on the system language. In german, for example, the Company Portal is called “Unternehmensportal”. To simplify this and make access faster I have written a small system tray icon.…

Read more…

How to backup and restore the Registry

When I try something out or develop something new I don’t always do this in a VM, I use directly my productive system (I wouldn’t recommend it but I do it anyway). But by changes in the registry you can bring the PC in such a state that you have…

Read more…

Install Windows 11 without TPM

With Windows 11, microsoft take the decision that a TPM 2.0 (Trusted Platform Module) is mandatory to run windows 11. Due to this prerequisite, Windows 11 cannot be installed or upgraded on many computers. In this blog, we’ll look at what a TPM is, how to check if you have…

Read more…

The ultimate MEM tour part 4 – Reports

After we have looked at the three categories of Device Management, Application Management and Endpoint Security, this blog will follow with the Reporting section of MEM. Thanks to everyone who read the preceding blogs and gave me feedback. But it’s not over with very powerful and helpful features in MEM.…

Read more…

Group Windows 11 Devices with Intune

The launch of Windows 11 is coming and you might want to test configurations or apps on Windows 11 devices right now. But for the testing you need a group in Azure AD. In this blog I want to show you how to create a dynamic group where all Windows…

Read more…

The ultimate MEM tour part 2 – Applications

In this blog series, I’ll give you a tour through the features that Microsoft Endpoint Manager offers us. In my first blog we looked at the Device Management features. In this blog I want to cover all the features around Application Management. Good apps are one of the foundations of…

Read more…

The ultimate MEM tour part 1 – Devices

According to the Gardner quadrant published on August 16, Microsoft is by far the leader in the area of unified endpoint management tools. Microsoft Endpoint Manager (MEM) has played a major role in achieving this clear ranking. MEM has grown more and more in recent years and has received more…

Read more…

Use assignment filter for the update ring assignment

With the Assignment Filter a possibility was added to intune to make assignments more comfortable. This feature was first available for configuration profiles and then for apps. With the service release 2107 Intune has enabled the assignment filters also for update rings. What are assignment filters and how can you…

Read more…

Enable Tab groups in MS Edge Chromium

Tab groups are a useful feature in the Edge browser that I have become very accustomed to and that makes my work much easier. Unfortunately, this feature is not yet active as default and is located in the ExpermientelIen features of the Edge browser. In this blog I explain how…

Read more…

Policy sets – a cool feature

Many companies have not only a standard service, where not all PCs have the same configuration profiles, standard apps,… have. Specialized services are often needed to meet the needs of different business areas. You can copy the configuration profiles and give them the name of the service so you know…

Read more…

Deploy a Win32 App with Intune (Cmtrace)

In this blog post I explain how to deploy a Win32 app via Intune. I have choos CMtracert because this tool is useful for troubleshooting and analyzing Intune logs. W32 applications must always be uploaded as .intunewin package. It is not possible to simply upload an .exe file. How to…

Read more…

Setup an Modern Kiosk PC

In this blog post I want to explain how to set up a Modern Kiosk PC. There are many use cases in companies where you don’t want to give the user complete access to Windows. Only one or selected applications should be allowed. Typical use cases would be: a device…

Read more…

Duplicate Device Configuration Profiles

There is often the use case that you want to duplicate device profiles to adjust this for a certain device group / use case or just to have a separation of the name for different device classes. There has been a user voice with over 1200 votes since 2017, unfortunately…

Read more…

Configure device categories

To group devices of certain departments or areas, Intune provides a function called Device Categories. These deivce categories have been available in Intune for a long time but are not really known by many. In this blog post we will take a closer look whats behind this function and what…

Read more…

Setup a Windows Autopilot test lab

Many companies have a cloud-first strategy and are trying to move more and more on prem infrastructure to the cloud. This also includes the device management. With Covid 19, remote working was the new normal and many companies are facing the challenge of how to manage devices secure and comfortable…

Read more…

Welcome!!

Hey, my name is Jannik Reinhard and I have been working in the IT department of a large chemical company for several years. I am a solution architect in the area of mobile device management and AIOPS (AI of IT Operation). Since IT is not only my profession but also…

Read more…