Group Windows 11 Devices with Intune

Group Windows 11 Devices with Intune

Group Windows 11 Devices with Intune

Once you start treating Windows 11 as a different deployment ring than Windows 10, you’ll need a clean way to Group Windows 11 Devices with Intune so you can scope policies, applications and Conditional Access to “all Windows 11 devices in the tenant” — without manually maintaining a static group. The good news is that Entra ID supports a Windows 11 dynamic group with rich rule syntax, and you can target Windows 11 by OS version, build number or device-category attribute with a single line of dynamic-membership rule. This post lays out the membership rules I use in production tenants, with examples for Windows 11 21H2 through 23H2 and beyond.

With Windows 11 widely deployed across enterprise estates, you might want to test configurations or apps specifically on Windows 11 devices. For that testing you need a group in Microsoft Entra ID. In this blog I want to show you how to create a dynamic group that contains all Windows 11 devices. I also want to show you how to create a device filter for Windows 11. By the end you will be able to Group Windows 11 Devices with Intune confidently and repeatably.

Read More » Group Windows 11 Devices with Intune
Microsoft Endpoint Manager Devices: Complete MEM Tour

Ultimate MEM Tour Part 1: Microsoft Intune Devices

Ultimate MEM Tour Part 1: Microsoft Intune Devices

According to the Gartner quadrant published on August 16, Microsoft is by far the leader in the area of unified endpoint management tools, and managing Microsoft Intune Devices sits at the heart of that success. Microsoft Intune has played a major role in achieving this clear ranking. Intune has grown more and more in recent years and has received more and more new functions. According to rumors, we can soon expect support for Chrome OS (source: twitter).

This blog is the first blog of a whole blog series. In this blog series, I want to give you a tour of all the features that Microsoft Intune has to offer, starting with everything around Microsoft Intune Devices.

Read More » Ultimate MEM Tour Part 1: Microsoft Intune Devices
Map an Networkdrive with Intune

Map a Network Drive with Intune

Map a Network Drive with Intune

Map a network drive with Intune explains how to deliver a network-drive mapping from Microsoft Intune so users receive the correct shared drive without manual setup. The guide focuses on the practical Intune deployment steps, script behavior, and configuration details needed to map a network drive with Intune in a reliable way.

“Map a network drive with Intune” sounds like a 2009 problem, and yet — between hybrid file shares, M&A onboarding, line-of-business apps that hardcode UNC paths, and users who genuinely prefer drive letters to SharePoint URLs — it shows up in almost every modern endpoint project. Microsoft does not give you a clean GUI option for it, which is why a tiny PowerShell script delivered through Intune is still the most reliable answer. This post shows the exact pattern I deploy in production, including credential handling against on-prem AD, Hybrid Microsoft Entra ID vs Entra-only differences, and how to retire the mapping cleanly when the file share goes away.

In this blog I will show you a very simple way how to map a network drive with Intune.

Read More » Map a Network Drive with Intune
Microsoft Intune Policy Sets: Group and Assign Policies

Microsoft Intune Policy Sets: Group and Assign Policies

Microsoft Intune Policy Sets: Group and Assign Policies

Many companies have not only a standard service, where not all PCs have the same configuration profiles, standard apps,… have. Specialized services are often needed to meet the needs of different business areas. You can copy the configuration profiles and give them the name of the service so you know which policy belongs to which service, or you can use policy sets to build your own services. In this guide you will learn exactly how this feature works, what it can contain, and how to assign them so your Intune environment stays clean and predictable.

Read More » Microsoft Intune Policy Sets: Group and Assign Policies
Duplicate Device Configuration Profiles

Duplicate Device Configuration Profiles

Duplicate Device Configuration Profiles

If you need to Duplicate Device Configuration Profiles in Microsoft Intune, you already know how easy these profiles are to create and almost as easy to lose track of. Anyone who has run a tenant for more than a year knows the result: a long list of profiles with similar names, slight setting variations between them, and no clear answer to “which one is actually deployed and which one is a copy from a test that nobody ever cleaned up”.

Being able to Duplicate Device Configuration Profiles cleanly — for staged rollouts, test rings, or template-based deployment — is one of the operations where the admin portal is genuinely awkward. In this post I show two reliable ways to clone configuration profiles: the built-in Duplicate button and a Microsoft Graph-based PowerShell function that gives you full control.

There is often the use case that you want to clone these policies to adjust them for a certain device group or use case, or just to have a separation of the name for different device classes. Instead of rebuilding every setting by hand, you copy a known-good baseline and only change what differs.

There has been a user voice with over 1200 votes since 2017, unfortunately this feature has not been added to the Intune admin center for every policy type yet.

Read More » Duplicate Device Configuration Profiles
Setup a Windows Autopilot test lab

Setup a Windows Autopilot test lab

Setup a Windows Autopilot test lab

Building a Windows Autopilot test lab is the fastest way to learn modern cloud device management without touching production. In this guide I walk you through every step needed to spin up your own Windows Autopilot test lab from scratch.

Many companies have a cloud-first strategy and are trying to move more and more on prem infrastructure to the cloud. This also includes the device management. With Covid 19, remote working was the new normal and many companies are facing the challenge of how to manage devices secure and comfortable in the home office.

With Intune, Microsoft has a very powerful solution to manage devices via the internet. In my blogs I would like to give insights into cloud device management and provide you helpful scripts and tools.

In this blog post I will start with a basic topic: how to build a Windows Autopilot test lab from scratch. I explain how you can set up a Windows Autopilot test lab to gain experience with Windows 10 Autopilot or to test different things safely.

Read More » Setup a Windows Autopilot test lab