To BitLocker pre-boot authenticate or not
Alright, since Anthony posted his “Obsolete Security – Stop Setting These Policies!” I couldn’t stop thinking about one other topic that usually bothers me a lot: BitLocker pre-boot authentication aka …
Category: Microsoft
Entra join only is a journey – are you on it yet?
If you think you need a domain joined device to access a file share after this blog, I did something wrong. For the past 2 years, I have been working …
Intune Network Requirements – everything I learned
When I started writing this script in February 2024, I never thought it would take me 6 months to get to a point where I’m satisfied. PowerShell never ceases to …
How Intune is using set theory (Filters!)
You have probably seen a Venn diagram in your life. So have most students in their lives, but as with most things we don’t use over time, we tend to …
WinRE Patching – Round 2
Exactly 12 months after Microsoft released the patch for CVE-2022-41099 (see my blog about it), we get CVE-2024-20666 – a very similar problem. Like then, this patch requires a change …
Group-Centric documentation for Intune (Part 1)
Have you asked yourself “I wonder what’s assigned to this group”? Well, if you’re here, you probably already answered that question with a ‘yes’. This is the first part of …
Microsoft Graph JSON batching using PowerShell
I’m working on a new big(ger) project that is related to working with groups and Intune. However, I quickly realized that depending on the customer environment I would have to …
FixMyADMX will prepare your ADMX for Intune
I’ve gone and written another small script for you to consume! I call it FixMyADMX and it will try to fix some common errors in ADMX/ADML files you might find …
Get-WindowsAutopilotInfo is using Graph now!
Small Update (12.07.23): Version 3.9 of the script currently has issues for some people. I assume that the required access rights have changed. You can force Version 3.8 (that still …
Remove the local admin from your AAD Users
UPDATE on 27.06.23: Please, if you run into the scenario described in this article you should use Windows LAPS instead creating a user with a static password. Yes, if need …