This post introduces the new and Updated Intune Group Assignment Script. The original was useful but limited; the new version of the Intune Group Assignment Script supports dynamic groups, scope tags, exclusion assignments, and a much…
This post introduces the new and Updated Intune Group Assignment Script. The original was useful but limited; the new version of the Intune Group Assignment Script supports dynamic groups, scope tags, exclusion assignments, and a much…
This is Intune Suite Part 1: Easy start with Remote Help — the first deep-dive in my series on the Microsoft Intune Suite add-on. Remote Help is the lowest-friction Intune Suite component to deploy, so it…
Read article: Intune Suite Part 1: Easy start with Remote Help
Enable secure passwordless authentication in Azure AD with Microsoft Authenticator, number matching, and MS Graph configuration.
Read article: Enable Passwordless Authentication with Microsoft Authenticator
To Sync Azure AD Group membership with a kiosk configuration profile is mainly about keeping the assignment target reliable. When you Sync Azure AD Group objects to the kiosk policy, the group should clearly describe the…
Read article: Sync Microsoft Entra ID Group with Kiosk Config Profile
Easily migrate Azure AD groups between user and device assignments with a PowerShell script using Microsoft Graph and OS filters.
Read article: Convert Microsoft Entra ID User and Device Groups with PowerShell
All assignments in Intune are based on Microsoft Entra ID (formerly Azure AD) groups. If you have ever needed to list all Intune assignments of an Azure AD Group, you already know the pain: you want…
Read article: List All Intune Assignments of an Entra ID Group
Explore Microsoft Intune Users and Groups: manage Azure AD users, groups, password reset, access reviews, logs, and support.
Read article: Microsoft Intune Users and Groups Management Guide
Learn how to add Azure AD groups or users to local Windows groups with Intune custom profiles, Graph Explorer, and group SIDs.
Read article: Add Microsoft Entra ID Users and Groups to Local Groups with Intune
In the Active Directory it was possible to allow a user to log in only to certain computers. This is no longer so easy with Microsoft Entra ID and Intune. In this blog we would like…
Read article: How to Restrict the Login to Dedicated Users with Intune – Part 1
Once you start treating Windows 11 as a different deployment ring than Windows 10, you'll need a clean way to Group Windows 11 Devices with Intune so you can scope policies, applications and Conditional Access to…