Remove the primary user from Intune devices with powershell (Switch to shared device)

If an Intune device is not enrolled as a shared device or kiosk device, it always has a primary user. This creates a relation between the device and the user. This user is also used to license the device. This user only has the possibility to see this device in the company portal / company portal website and trigger certain self service actions. Also, while troubleshooting, an Intune admin can select this user in the Troubleshooting + support menu in Intune and directly see their devices.

The primary user is automatically added after the the enrollment of an intune managed device. It is possible to change the user to an other or remove this user to switch the device into a shared device.

Read More »

The ultimate MEM tour part 1 – Devices

According to the Gardner quadrant published on August 16, Microsoft is by far the leader in the area of unified endpoint management tools. Microsoft Endpoint Manager (MEM) has played a major role in achieving this clear ranking. MEM has grown more and more in recent years and has received more and more new functions. According to rumors, we can soon expect support for Chrome OS (source: twitter).

This blog is the first blog of a whole blog series. In this blog series, I want to give you a tour of all the features that Microsoft Endpoint Manager has to offer.

Read More »

Use assignment filter for the update ring assignment

With the Assignment Filter a possibility was added to intune to make assignments more comfortable. This feature was first available for configuration profiles and then for apps. With the service release 2107 Intune has enabled the assignment filters also for update rings.

What are assignment filters and how can you use them for the update ring assignemnts I will show you in this blog.

Read More »

Setup an Modern Kiosk PC

In this blog post I want to explain how to set up a Modern Kiosk PC. There are many use cases in companies where you don’t want to give the user complete access to Windows. Only one or selected applications should be allowed. Typical use cases would be:

  • a device that plays a video in a sales room
  • a device that is used for training of an application
  • a terminal where one can give feedback

and many more…

Read More »

Configure device categories

To group devices of certain departments or areas, Intune provides a function called Device Categories. These deivce categories have been available in Intune for a long time but are not really known by many. In this blog post we will take a closer look whats behind this function and what possibilities it offers.

The device categories function can be found in the MEM in the Devices menu. In the screenshot you can see 3 sample entries that I created for our tests. For the creation of a category only a name and optionally a description is needed.

Read More »

Setup a Windows Autopilot test lab

Many companies today have a cloud-first strategy and are trying to move more and more on prem infrastructure to the cloud. This also includes the device management. With Covid 19, remote working was the new normal and many companies are facing the challenge of how to manage devices secure and comfortable in the home office.

With Intune, Microsoft has a very powerful solution to manage devices via the internet.  In my blogs I would like to give insights into cloud device management and discuss current topics.

In this blog post I will start with a basic topic, it’s about how to set up Windows Autopilot Device from scratch. I explain how you can set up a test environment to gain experience with Windows 10 Autopilot or to test different things.

Read More »