Microsoft Endpoint Manager

How to exclude Shortcuts from syncing to OneDrive with Microsoft Endpoint Manager – Microsoft Intune

November 18, 2021Enterprise Mobility + Security, Intune, Microsoft Endpoint ManagerNo comments

Microsoft OneDrive is a great service for storing your files. And when you have “Known Folder Redirection” enabled, your Desktop, Documents and Pictures folders are redirected to OneDrive and synched to the cloud. This way you have the same Desktop, Documents and Pictures folders available on every device which benefits the user experience. However, you have applications that place a shortcut on the desktop the first time you log in to a new system, for example the Microsoft Edge browser and Microsoft Teams. This results in many of the same shortcuts on your desktop (copy offs) if you switch devices often.

How to move or restore a Windows 11 VM in Hyper-V with TPM enabled (Shielded VMs)

November 16, 2021Enterprise Mobility + Security, Intune, Microsoft Endpoint Manager, Windows 10No comments

In my previous blog I showed you step-by-step how to install Windows 11 as a VM in Hyper-V. The difference with Windows 10 is that Windows 11 requires a TPM (Trusted Platform Module) chip in order to boot. As you could read in my previous blog, this is no problem at all. However, I’m the kind of guy that regularly reinstalls my laptop/desktop and also uses multiple devices to run the same VMs on. And in that case it gets a bit more complex.

How to install Windows 11 in Hyper-V

November 15, 2021Enterprise Mobility + Security, Intune, Microsoft Endpoint Manager, Windows 10No comments

Windows 11 has now been released over a month ago and many companies are now considering the switch. It is always good to test extensively first and get some hands-on experience. If you don’t have a physical PC available to test Windows 11, a good alternative is to do this in a virtual machine (VM). Personally, I use VMs a lot when I need to test Microsoft Intune configurations or when giving demos.

How to setup Android Zero-Touch Enrollment with Microsoft Endpoint Manager – Microsoft Intune

November 13, 2021Intune, Microsoft Endpoint ManagerNo comments

Android Zero-Touch Enrollment is a (free) service to automate and enforce MDM enrollments for Android devices running Android 9 or higher, independent of device manufacture. It offers end-to-end security because the MDM enrollment cannot be skipped by the user. The first time the user tuns on the device, clear instructions will be displayed to start the enrollment. All policies and applications that are assigned in Microsoft Intune will be automatically provisioned on the device.

How to add iOS devices manually in the Apple Business Manager (ABM) for automatic Microsoft Endpoint Manager – Microsoft Intune enrollment

November 11, 2021Enterprise Mobility + Security, Intune, Microsoft Endpoint ManagerNo comments

It’s a best practice to enroll corporate owned iOS/iPadOS devices via the Apple Automated Device Enrollment (ADE) program (PKA Device Enrollment Program – DEP). It offers “out of the box” security because the enrollment with the MDM solution will start automatically and the user can’t work around it. Next to automatic device enrollment it makes it possible to set devices in supervised mode, which offers more policy settings to apply and in combination with the Apple Volume Purchase Program (VPP), no Apple ID is required during enrollment and for installing company published applications.

How to create and deploy Windows 365 Enterprise Cloud PC Custom Images

September 10, 2021Microsoft Endpoint Manager, Windows 365 Cloud PC4 comments

UPDATE : A new version of this blog with Windows 11 Gen2 images is available here. With Windows 365 you can deploy your Cloud PCs with a standard Azure Gallery image. There are Windows 10 Enterprise images available optimized for Cloud PC, with or without the Microsoft 365 Apps pre-installed on it (including Microsoft Teams with AV redirection optimization). However, with Windows 365 Enterprise you have the option to deploy your Cloud PCs with a custom image. Within Azure, there are a few options to create custom images. If you want to fully automate this process you can use the Azure Image Builder. However, in this blog I will show you the manual steps for creating a custom image. I will discuss the following steps:

How to setup Samsung Knox Mobile Enrollment with Microsoft Intune

February 4, 2021Enterprise Mobility + Security, Intune, Microsoft Endpoint Manager8 comments

Samsung Knox Mobile Enrollment (KME) is a Zero Touch provisioning solution. You can fully automate the enrollment of new, or factory reset devices into an MDM solution like Microsoft Intune. The end user only have to turn on their company-owned Android device and connect to a Wi-Fi or cellular network. This will start the enrollment which the end user cannot cancel or work around.

How to remove Microsoft Store for Business apps in Microsoft Intune

December 8, 2020Intune, Microsoft Endpoint Manager5 comments

The Microsoft Store for Business is a powerful service to distribute and manage modern Windows 10 applications from the Windows 10 Store (both free and paid applications). You can connect the Microsoft Store for Business with Microsoft Intune to sync the applications for easy deployment via Microsoft Intune. After the application is synced to Intune you only have to assign the application to a user of group. It is very easy to setup. However, there is not an easy “delete” button to remove applications that are no longer needed or added accidentally. In this blog I will show you step-by-step how to remove Microsoft Store for Business applications in Microsoft Intune.

How to add Windows 10 devices to Windows Autopilot even faster

December 2, 2020Intune, Microsoft Endpoint Manager7 comments

In July, 2018, I wrote this blog about how to setup Windows Autopilot and add existing devices the quickest way. After publishing this blog the Get-WindowsAutoPilotInfo script has been updated several times by the author Michael Niehaus. New functionalities have been added to the scripts. Therefore Windows 10 devices can be added to Windows Autopilot even faster then described in my old blog. Let’s see how you can add Windows 10 devices even faster to Windows Autopilot.

Category: Microsoft Endpoint Manager