Microsoft Intune Analytics: Reports, Endpoint Analytics & BI

Microsoft Intune Analytics: Reports, Endpoint Analytics & BI

A lot has changed from the traditional on premise managed workplace to the modern workplace managed via cloud power. You no longer have to worry about infrastructure, you can work securely from anywhere and you save money. But where do we go from here? The topic of analytics and user experience is becoming increasingly important. The goal is to reduce problems or to detect them at an early stage. The cloud offers you limitless possibilities for this. In this blog we want to take a look at what Intune currently delivers out of the box and how you can build solutions on it.

Read More »
Intune DevOps Pipeline: Move Objects from Dev to Prod Tenant

Intune DevOps Pipeline: Move Objects from Dev to Prod Tenant

The more clients are managed in your tenant and the more people have contributor rights in your tenant, the more important it becomes to have good release management processes. In this blog post I would like to introduce you to my Intune CI pipeline that allows you to transfer configurations from one tenant to another. This offers the possibility that only a small number of administrators have access in the Prod tenant and all others create configurations in a Dev tenant and these are then transferred to the Prod tenant via a DevOps pipeline.

Read More »
How to skip the ESP for a single app installation

How to skip the ESP for a single app installation

Unfortunately, there is no setting in Intune with which you can determine whether an app should be installed during ESP (Enrollment Status Page) or only after ESP. Of course, it is a huge advantage to install as many apps as possible during the ESP or even better during the white glove phase so that you have a ready to use device after enrollment. But there are cases where it can make sense to install an app after the ESP, for example if the installation routine requires an interaction. How you can skip the installation of an app in the ESP I will explain now.

Read More »
Show user dialog with Endpoint Analytics (Smartphone Replacement Tool)

Show user dialog with Endpoint Analytics (Smartphone Replacement Tool)

Sometimes the most underrated way to drive change in a fleet is to just talk to the user. Endpoint Analytics surfaces all kinds of useful insights — battery health, boot performance, application reliability — but those signals only become action when they reach the right person at the right moment. The Smartphone Replacement Tool is a small wrapper I built around that idea: trigger a clean, branded dialog on the user’s PC the next time they log on, with a contextual message and a clear next step. The technical scaffolding is intentionally simple: a Win32-deployed tool with a WPF frontend, an Intune Proactive Remediation that decides who sees the dialog, and an Endpoint Analytics-driven trigger.

It is not always easy to reach users via email or other channels. When there are projects running to exchange e.g. smartphones or migrations of files from a network drive to a SharePoint it is hard to reach the users and get an answer. Intune provides with Endpoint Analytics a very good on board tool to easily reach users via a user dialog. In this blog I will show how you can use this with the example of a smartphone exchange. The dialog and the method can be adapted to many other use cases.

Show user dialog with Endpoint Analytics (Smartphone Replacement Tool)
Read More »
Create and Fill AAD Group based on an local attributes

Create and Fill an Entra ID Group based on Local Attributes

There is often the need to create a Microsoft Entra ID (formerly Azure AD) group based on a local registry key or another attribute to make more specific access decisions, to use this group for access rights to an application or many other use cases. In this blog post I will show you how to do this with the help of Endpoint Analytics and Azure Automation. In my blog I show you how to do this with the example of device manufacturer; of course we already have this info in Intune, but it is just an example of how this works. Of course you can also do this with anything else you can read out on a client.

Create and Fill AAD Group based on an local attributes
Read More »
Check Autopilot enrollment prerequisite

Check Autopilot enrollment prerequisite

Everyone who has enrolled a few devices with autopilot in his life and has encountered errors knows the problem that it can quickly be very cumbersome to find the problem why an enrolment fails. Especially when it comes to network endpoints that are not reachable it can be very time consuming to find them. To enroll a device with autopilot there are also some prerequisites that have to be fulfilled. To check this before the enrollment I have created a script that helps you to check these requirements.

Read More »
Send Teams Alerts for Top 5 Intune App Install Errors

Send Teams Alerts for Top 5 Intune App Install Errors

It is always important as an Intune admin to have an overview of the environment. Intune offers a lot of reports but as we all know you don’t look into them every day. Isn’t it easier to get a daily or weekly message in Teams and see the top failed app installations. I have already released some blogs with the topic of detecting anomalies in Intune with the help of cognitive services. In this blog I want to show you how to send a report that is already available in Intune to Teams using Azure Automation.

Teams notification showing top five app installation errors
Read More »
Change Windows 11 Context Menu with Intune

Change Windows 11 Context Menu with Intune

Windows 11’s redesigned right-click context menu has its fans and its detractors — some users love the cleaner default; others miss “Show more options” being a single click away. As an Intune admin you’ll get pulled into both camps, often by the same VIP. The good news is that the classic context-menu behaviour can be restored centrally with a single registry key, deployed cleanly through Intune via the Settings Catalog or a tiny PowerShell remediation. This post documents the registry tweak, the Intune deployment workflow, and how to make the change reversible per user.

Windows 11 has brought some changes to the Windows Explorer, including the way the context menu looks. By default, the context menu is reduced to the really necessary functions. This is sufficient for most users. However, if you often need functions that are not in the reduced view, then this can be a hindrance in the workflow. In this blog I want to show you how to get back the Windows 10 context menu with the help of Intune.

Read More »
Introduction of the Intune App Creator with help of Chocolatey

Introduction of the Intune App Creator with help of Chocolatey

Anyone who has worked with Intune and deployed an app knows that this is a bit of work. You have to download the sources, create the IntuneWin file, create the app in Intune. To simplify this I have created the Intune App Creator. With this application you can search within the >9,000 Chocolatey packages and automatically add this app to your Intune app portfolio with just one click.

Introduction of the Intune App Creator with help of Chocolatey
Read More »
Introduction of the Intune Device Troubleshooter

Introduction of the Intune Device Troubleshooter


If you follow my blog, you know that there are two things I really like: helping people with their problems, and automating or simplifying processes. In this blog, I want to introduce you to my new tool, the Intune Device Troubleshooter. This is a PowerShell UI application that will help you to check the status of your devices, as well as help you trigger remediation scripts to fix issues ad-hoc on single devices. It also provides you with intelligent recommendations on what to check on a single device to determine any possible issues. So let’s get started and look at the features of the tool.

Introduction of the Intune Device Troubleshooter
Read More »